Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. 2026/07/27 12:23:49 parsed 1 programs 2026/07/27 12:23:49 serving rpc on tcp://39263 [ 83.306271][ T5631] cgroup: Unknown subsys name 'net' [ 83.415173][ T5631] cgroup: Unknown subsys name 'cpuset' [ 83.424443][ T5631] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.952165][ T5631] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.984463][ T10] cfg80211: failed to load regulatory.db [ 88.048369][ T5651] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.613764][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.631171][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.242392][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.278757][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.883681][ T4936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.898655][ T4936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.908217][ T4936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.916547][ T4936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.924730][ T4936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.492904][ T5667] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.500707][ T5667] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.508505][ T5667] bridge_slave_0: entered allmulticast mode [ 91.517348][ T5667] bridge_slave_0: entered promiscuous mode [ 91.526774][ T5667] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.533942][ T5667] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.541177][ T5667] bridge_slave_1: entered allmulticast mode [ 91.548634][ T5667] bridge_slave_1: entered promiscuous mode [ 91.594390][ T5667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.625446][ T5667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.663447][ T5667] team0: Port device team_slave_0 added [ 91.672154][ T5667] team0: Port device team_slave_1 added [ 91.707984][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.715795][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.741819][ T5667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.756507][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.764849][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.790976][ T5667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.887386][ T5667] hsr_slave_0: entered promiscuous mode [ 91.894411][ T5667] hsr_slave_1: entered promiscuous mode [ 91.971440][ T51] Bluetooth: hci0: command tx timeout [ 92.077253][ T5667] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.090583][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.098951][ T5667] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.108377][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.116339][ T5667] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.126016][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.135819][ T5667] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.145533][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.223963][ T5667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.249189][ T5667] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.265572][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.272907][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.288509][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.295619][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.678051][ T5667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.727535][ T5667] veth0_vlan: entered promiscuous mode [ 92.740555][ T5667] veth1_vlan: entered promiscuous mode [ 92.773078][ T5667] veth0_macvtap: entered promiscuous mode [ 92.783528][ T5667] veth1_macvtap: entered promiscuous mode [ 92.803335][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.818639][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.834484][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.845069][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.855770][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.866061][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/07/27 12:24:04 executed programs: 0 [ 93.003597][ T4936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.014366][ T4936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.022578][ T4936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.036772][ T4936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.049296][ T4936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.127145][ T4936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.140564][ T4936] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.151123][ T4936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.171869][ T4936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.185535][ T4936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.221801][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.232916][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.243713][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.253848][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.263163][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.270669][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.283335][ T5771] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.307983][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.326283][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.334385][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.404667][ T5766] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.413883][ T5766] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.415857][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.430351][ T5766] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.443256][ T5766] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.452776][ T5766] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.461925][ T5766] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.463953][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.478027][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.488328][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.980311][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.925433][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.091908][ T51] Bluetooth: hci1: command tx timeout [ 95.252181][ T51] Bluetooth: hci2: command tx timeout [ 95.331239][ T51] Bluetooth: hci3: command tx timeout [ 95.412023][ T51] Bluetooth: hci4: command tx timeout [ 95.571412][ T5771] Bluetooth: hci6: command tx timeout [ 95.577239][ T51] Bluetooth: hci5: command tx timeout [ 95.802149][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.090369][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.097643][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.104958][ T5768] bridge_slave_0: entered allmulticast mode [ 96.112471][ T5768] bridge_slave_0: entered promiscuous mode [ 96.170567][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.187384][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.194570][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.201881][ T5768] bridge_slave_1: entered allmulticast mode [ 96.209287][ T5768] bridge_slave_1: entered promiscuous mode [ 96.346930][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.354399][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.361922][ T5756] bridge_slave_0: entered allmulticast mode [ 96.369378][ T5756] bridge_slave_0: entered promiscuous mode [ 96.389467][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.396622][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.403807][ T5764] bridge_slave_0: entered allmulticast mode [ 96.411277][ T5764] bridge_slave_0: entered promiscuous mode [ 96.455710][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.462963][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.470094][ T5756] bridge_slave_1: entered allmulticast mode [ 96.477957][ T5756] bridge_slave_1: entered promiscuous mode [ 96.487603][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.496982][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.504261][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.511917][ T5764] bridge_slave_1: entered allmulticast mode [ 96.519286][ T5764] bridge_slave_1: entered promiscuous mode [ 96.538476][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.545742][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.552966][ T5759] bridge_slave_0: entered allmulticast mode [ 96.560376][ T5759] bridge_slave_0: entered promiscuous mode [ 96.568905][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.576060][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.583622][ T5759] bridge_slave_1: entered allmulticast mode [ 96.591174][ T5759] bridge_slave_1: entered promiscuous mode [ 96.623918][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.737786][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.745105][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.752590][ T5773] bridge_slave_0: entered allmulticast mode [ 96.760022][ T5773] bridge_slave_0: entered promiscuous mode [ 96.768683][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.776136][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.783555][ T5773] bridge_slave_1: entered allmulticast mode [ 96.791010][ T5773] bridge_slave_1: entered promiscuous mode [ 96.823731][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.831103][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.838457][ T5774] bridge_slave_0: entered allmulticast mode [ 96.846477][ T5774] bridge_slave_0: entered promiscuous mode [ 96.857577][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.883749][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.896804][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.943576][ T5759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.952985][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.960130][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.968168][ T5774] bridge_slave_1: entered allmulticast mode [ 96.975928][ T5774] bridge_slave_1: entered promiscuous mode [ 96.985313][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.008113][ T5768] team0: Port device team_slave_0 added [ 97.016542][ T5768] team0: Port device team_slave_1 added [ 97.066967][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.078713][ T5759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.129413][ T5764] team0: Port device team_slave_0 added [ 97.147519][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.171069][ T51] Bluetooth: hci1: command tx timeout [ 97.186710][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.198434][ T5756] team0: Port device team_slave_0 added [ 97.204839][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.212255][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.238180][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.251167][ T5764] team0: Port device team_slave_1 added [ 97.297145][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.308138][ T5756] team0: Port device team_slave_1 added [ 97.315279][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.322305][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.348465][ T51] Bluetooth: hci2: command tx timeout [ 97.354364][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.369280][ T58] bridge_slave_1: left allmulticast mode [ 97.375032][ T58] bridge_slave_1: left promiscuous mode [ 97.381760][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.394306][ T58] bridge_slave_0: left allmulticast mode [ 97.399928][ T58] bridge_slave_0: left promiscuous mode [ 97.406232][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.411319][ T51] Bluetooth: hci3: command tx timeout [ 97.491356][ T51] Bluetooth: hci4: command tx timeout [ 97.650981][ T51] Bluetooth: hci5: command tx timeout [ 97.651277][ T5771] Bluetooth: hci6: command tx timeout [ 97.670679][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.692731][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.702853][ T58] bond0 (unregistering): Released all slaves [ 97.742014][ T5773] team0: Port device team_slave_0 added [ 97.749685][ T5759] team0: Port device team_slave_0 added [ 97.808920][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.817169][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.843757][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.864431][ T5773] team0: Port device team_slave_1 added [ 97.889302][ T5759] team0: Port device team_slave_1 added [ 97.915939][ T5774] team0: Port device team_slave_0 added [ 97.935339][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.942364][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.968740][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.981649][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.988598][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.014894][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.048759][ T58] hsr_slave_0: left promiscuous mode [ 98.056637][ T58] hsr_slave_1: left promiscuous mode [ 98.062728][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.070098][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.078146][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.085576][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.098909][ T58] veth1_macvtap: left promiscuous mode [ 98.104963][ T58] veth0_macvtap: left promiscuous mode [ 98.110506][ T58] veth1_vlan: left promiscuous mode [ 98.115810][ T58] veth0_vlan: left promiscuous mode [ 98.354347][ T58] team0 (unregistering): Port device team_slave_1 removed [ 98.371101][ T58] team0 (unregistering): Port device team_slave_0 removed [ 98.502887][ T5774] team0: Port device team_slave_1 added [ 98.509900][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.518802][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.550123][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.572283][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.579234][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.607498][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.623482][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.630409][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.656864][ T5759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.714731][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.721936][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.748541][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.768398][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.775459][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.802327][ T5759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.864707][ T5768] hsr_slave_0: entered promiscuous mode [ 98.871438][ T5768] hsr_slave_1: entered promiscuous mode [ 98.896044][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.903443][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.930474][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.949037][ T5764] hsr_slave_0: entered promiscuous mode [ 98.955482][ T5764] hsr_slave_1: entered promiscuous mode [ 98.962031][ T5764] debugfs: 'hsr0' already exists in 'hsr' [ 98.967778][ T5764] Cannot create hsr debugfs directory [ 99.015737][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.022991][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.048920][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.096006][ T5756] hsr_slave_0: entered promiscuous mode [ 99.103124][ T5756] hsr_slave_1: entered promiscuous mode [ 99.109555][ T5756] debugfs: 'hsr0' already exists in 'hsr' [ 99.115548][ T5756] Cannot create hsr debugfs directory [ 99.146858][ T5773] hsr_slave_0: entered promiscuous mode [ 99.153674][ T5773] hsr_slave_1: entered promiscuous mode [ 99.160086][ T5773] debugfs: 'hsr0' already exists in 'hsr' [ 99.167272][ T5773] Cannot create hsr debugfs directory [ 99.197785][ T5759] hsr_slave_0: entered promiscuous mode [ 99.204789][ T5759] hsr_slave_1: entered promiscuous mode [ 99.211258][ T5759] debugfs: 'hsr0' already exists in 'hsr' [ 99.217002][ T5759] Cannot create hsr debugfs directory [ 99.251076][ T5771] Bluetooth: hci1: command tx timeout [ 99.412125][ T5771] Bluetooth: hci2: command tx timeout [ 99.490987][ T5771] Bluetooth: hci3: command tx timeout [ 99.536630][ T5774] hsr_slave_0: entered promiscuous mode [ 99.543292][ T5774] hsr_slave_1: entered promiscuous mode [ 99.549605][ T5774] debugfs: 'hsr0' already exists in 'hsr' [ 99.555381][ T5774] Cannot create hsr debugfs directory [ 99.570943][ T5771] Bluetooth: hci4: command tx timeout [ 99.705341][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 99.730989][ T5771] Bluetooth: hci6: command tx timeout [ 99.731094][ T51] Bluetooth: hci5: command tx timeout [ 100.511534][ T5773] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 100.528545][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.540550][ T5773] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 100.557423][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.581746][ T5773] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 100.593334][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.612077][ T5773] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 100.624528][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.666764][ T5756] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.677057][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.685090][ T5756] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.695146][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.703237][ T5756] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.713262][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.721264][ T5756] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.730981][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.845884][ T5759] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.865075][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.877516][ T5759] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.894398][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.902522][ T5759] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.915901][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.976458][ T5759] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.989040][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.127314][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.138988][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.161949][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.178594][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.210503][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.225127][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.245722][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.257382][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.330976][ T51] Bluetooth: hci1: command tx timeout [ 101.357916][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.402909][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.415923][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.440860][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.457533][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.496814][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.497622][ T51] Bluetooth: hci2: command tx timeout [ 101.513747][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.522521][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.533043][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.549306][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.571724][ T51] Bluetooth: hci3: command tx timeout [ 101.633659][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.640825][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.651761][ T51] Bluetooth: hci4: command tx timeout [ 101.666122][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.705059][ T5764] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.717753][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.727965][ T5764] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.740146][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.765754][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.772924][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.800527][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.810318][ T5764] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.817209][ T51] Bluetooth: hci6: command tx timeout [ 101.821037][ T51] Bluetooth: hci5: command tx timeout [ 101.833330][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.868462][ T5764] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.886362][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.916269][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.988298][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.027774][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.034967][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.078318][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.085449][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.115269][ T716] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.122422][ T716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.173908][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.181059][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.219701][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.309873][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.355965][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.363183][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.394088][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.401262][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.425449][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.597311][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.626948][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.678062][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.685256][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.758427][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.765664][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.797970][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.834488][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.841651][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.955175][ T727] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.962344][ T727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.352017][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.718695][ T5759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.909633][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.989155][ T5759] veth0_vlan: entered promiscuous mode [ 104.072190][ T5759] veth1_vlan: entered promiscuous mode [ 104.204395][ T5756] veth0_vlan: entered promiscuous mode [ 104.272574][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.295522][ T5756] veth1_vlan: entered promiscuous mode [ 104.310693][ T5759] veth0_macvtap: entered promiscuous mode [ 104.354765][ T5759] veth1_macvtap: entered promiscuous mode [ 104.389006][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.455754][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.470430][ T5756] veth0_macvtap: entered promiscuous mode [ 104.497006][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.514771][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.527110][ T5756] veth1_macvtap: entered promiscuous mode [ 104.594968][ T1153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.605321][ T1153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.622336][ T5773] veth0_vlan: entered promiscuous mode [ 104.628344][ T5774] veth0_vlan: entered promiscuous mode [ 104.637610][ T1153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.646809][ T1153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.671064][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.706859][ T5774] veth1_vlan: entered promiscuous mode [ 104.728986][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.741840][ T5773] veth1_vlan: entered promiscuous mode [ 104.780719][ T5768] veth0_vlan: entered promiscuous mode [ 104.795410][ T5768] veth1_vlan: entered promiscuous mode [ 104.845450][ T1153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.876735][ T1153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.887317][ T1153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.909218][ T1153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.934788][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.945917][ T5774] veth0_macvtap: entered promiscuous mode [ 104.949995][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.999280][ T5774] veth1_macvtap: entered promiscuous mode [ 105.026928][ T5773] veth0_macvtap: entered promiscuous mode [ 105.040451][ T5768] veth0_macvtap: entered promiscuous mode [ 105.064266][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.067405][ T5773] veth1_macvtap: entered promiscuous mode [ 105.072343][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.115674][ T5768] veth1_macvtap: entered promiscuous mode [ 105.149944][ T5764] veth0_vlan: entered promiscuous mode 2026/07/27 12:24:16 executed programs: 12 [ 105.159285][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.194945][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.207368][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.217889][ T5764] veth1_vlan: entered promiscuous mode [ 105.247436][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.269834][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.329751][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.364376][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.380104][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.404046][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.419780][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.432338][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.441117][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.449819][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.553421][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.570270][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.585801][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.629634][ T5764] veth0_macvtap: entered promiscuous mode [ 105.654745][ T5764] veth1_macvtap: entered promiscuous mode [ 105.709018][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.852138][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.885066][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.086317][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.117472][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.506093][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.844644][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.889522][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.926269][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.056842][ T716] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.658863][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.855347][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.868643][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.000360][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.013394][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.026235][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.271233][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.280085][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.514255][ T727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.572563][ T727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.216686][ T727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.255722][ T727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.650510][ T5785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.674889][ T5785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/27 12:24:21 executed programs: 37 [ 112.180176][ T716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.188570][ T716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.270549][ T5785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.283975][ T5785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/27 12:24:27 executed programs: 70 [ 117.761787][ T6223] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) 2026/07/27 12:24:32 executed programs: 100 2026/07/27 12:24:37 executed programs: 129 2026/07/27 12:24:42 executed programs: 160 [ 132.301574][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.320403][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 2026/07/27 12:24:48 executed programs: 193 2026/07/27 12:24:53 executed programs: 225 2026/07/27 12:24:59 executed programs: 256 2026/07/27 12:25:04 executed programs: 288 2026/07/27 12:25:09 executed programs: 318 2026/07/27 12:25:15 executed programs: 352 2026/07/27 12:25:20 executed programs: 384 [ 169.523344][ T7074] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 169.636857][ T7071] ================================================================== [ 169.638038][ T7082] ------------[ cut here ]------------ [ 169.644937][ T7071] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x407/0x4d0 [ 169.644971][ T7071] Read of size 4 at addr ffff88802b6f483c by task syz.0.388/7071 [ 169.644990][ T7071] [ 169.645003][ T7071] CPU: 1 UID: 0 PID: 7071 Comm: syz.0.388 Not tainted syzkaller #0 PREEMPT(full) [ 169.645028][ T7071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 169.645042][ T7071] Call Trace: [ 169.645051][ T7071] [ 169.645060][ T7071] dump_stack_lvl+0xe8/0x150 [ 169.645098][ T7071] print_address_description+0x55/0x1e0 [ 169.645131][ T7071] ? dvb_frontend_release+0x407/0x4d0 [ 169.645156][ T7071] print_report+0x58/0x70 [ 169.645187][ T7071] kasan_report+0x117/0x150 [ 169.645225][ T7071] ? dvb_frontend_release+0x407/0x4d0 [ 169.645255][ T7071] dvb_frontend_release+0x407/0x4d0 [ 169.645282][ T7071] ? __pfx_dvb_frontend_release+0x10/0x10 [ 169.645307][ T7071] __fput+0x418/0xa50 [ 169.645344][ T7071] task_work_run+0x1d9/0x270 [ 169.645369][ T7071] ? __pfx_task_work_run+0x10/0x10 [ 169.645397][ T7071] exit_to_user_mode_loop+0x1fa/0x730 [ 169.645431][ T7071] ? rcu_is_watching+0x15/0xb0 [ 169.645454][ T7071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.645480][ T7071] do_syscall_64+0x353/0x580 [ 169.645508][ T7071] ? trace_irq_disable+0x3b/0x140 [ 169.645543][ T7071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.645567][ T7071] RIP: 0033:0x7fdd7439de99 [ 169.645587][ T7071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.645606][ T7071] RSP: 002b:00007fff00d90de8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 169.645636][ T7071] RAX: 0000000000000000 RBX: 00007fdd74627da0 RCX: 00007fdd7439de99 [ 169.645652][ T7071] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 169.645667][ T7071] RBP: 00007fdd74627da0 R08: 00007fdd74626038 R09: 0000000000000000 [ 169.645682][ T7071] R10: 000000000003fdb0 R11: 0000000000000246 R12: 000000000002982d [ 169.645697][ T7071] R13: 00007fdd74625fac R14: 00000000000295eb R15: 00007fff00d90ef0 [ 169.645724][ T7071] [ 169.645733][ T7071] [ 169.650535][ T7082] refcount_t: addition on 0; use-after-free. [ 169.658685][ T7071] Allocated by task 1: [ 169.658699][ T7071] kasan_save_track+0x3e/0x80 [ 169.658732][ T7071] __kasan_kmalloc+0x93/0xb0 [ 169.658764][ T7071] __kmalloc_cache_noprof+0x32d/0x660 [ 169.658794][ T7071] dvb_register_device+0x309/0x1dd0 [ 169.658821][ T7071] dvb_register_frontend+0x603/0x900 [ 169.658843][ T7071] vidtv_bridge_probe+0x9d5/0xf60 [ 169.658875][ T7071] platform_probe+0xf9/0x190 [ 169.658899][ T7071] really_probe+0x254/0xae0 [ 169.658928][ T7071] __driver_probe_device+0x1e8/0x360 [ 169.658956][ T7071] driver_probe_device+0x4f/0x240 [ 169.658984][ T7071] __driver_attach+0x339/0x600 [ 169.659011][ T7071] bus_for_each_dev+0x23b/0x2c0 [ 169.659045][ T7071] bus_add_driver+0x345/0x670 [ 169.659080][ T7071] driver_register+0x23a/0x320 [ 169.659111][ T7071] vidtv_bridge_init+0x3d/0x60 [ 169.659134][ T7071] do_one_initcall+0x250/0x870 [ 169.666892][ T7082] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x9f/0x110, CPU#0: syz.2.389/7082 [ 169.669131][ T7071] do_initcall_level+0x10a/0x1a0 [ 169.678342][ T7082] Modules linked in: [ 169.688331][ T7071] do_initcalls+0x59/0xa0 [ 169.688378][ T7071] kernel_init_freeable+0x29d/0x3e0 [ 169.688409][ T7071] kernel_init+0x1d/0x1d0 [ 169.688440][ T7071] ret_from_fork+0x514/0xb70 [ 169.691775][ T7082] [ 169.694630][ T7071] ret_from_fork_asm+0x1a/0x30 [ 169.701005][ T7082] CPU: 0 UID: 0 PID: 7082 Comm: syz.2.389 Not tainted syzkaller #0 PREEMPT(full) [ 169.704789][ T7071] [ 169.704797][ T7071] Freed by task 7071: [ 169.710132][ T7082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 169.714427][ T7071] kasan_save_track+0x3e/0x80 [ 169.714462][ T7071] kasan_save_free_info+0x40/0x50 [ 169.714487][ T7071] __kasan_slab_free+0x5c/0x80 [ 169.718979][ T7082] RIP: 0010:refcount_warn_saturate+0x9f/0x110 [ 169.724313][ T7071] kfree+0x1c5/0x640 [ 169.724340][ T7071] dvb_generic_release+0x11d/0x1b0 [ 169.724366][ T7071] dvb_frontend_release+0x132/0x4d0 [ 169.729532][ T7082] Code: eb 66 85 db 74 3e 83 fb 01 75 4c e8 fb 29 f3 fc 48 8d 3d 24 0f 8f 0b 67 48 0f b9 3a eb 4a e8 e8 29 f3 fc 48 8d 3d 21 0f 8f 0b <67> 48 0f b9 3a eb 37 e8 d5 29 f3 fc 48 8d 3d 1e 0f 8f 0b 67 48 0f [ 169.735213][ T7071] __fput+0x418/0xa50 [ 169.735246][ T7071] task_work_run+0x1d9/0x270 [ 169.735267][ T7071] exit_to_user_mode_loop+0x1fa/0x730 [ 169.735302][ T7071] do_syscall_64+0x353/0x580 [ 169.739257][ T7082] RSP: 0018:ffffc90004c5f858 EFLAGS: 00010293 [ 169.743814][ T7071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.743841][ T7071] [ 169.743849][ T7071] The buggy address belongs to the object at ffff88802b6f4800 [ 169.743849][ T7071] which belongs to the cache kmalloc-256 of size 256 [ 169.743868][ T7071] The buggy address is located 60 bytes inside of [ 169.743868][ T7071] freed 256-byte region [ffff88802b6f4800, ffff88802b6f4900) [ 169.743892][ T7071] [ 169.743899][ T7071] The buggy address belongs to the physical page: [ 169.743912][ T7071] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b6f4 [ 169.748993][ T7082] [ 169.749003][ T7082] RAX: ffffffff84d3da18 RBX: 0000000000000002 RCX: ffff888028cbbe00 [ 169.754335][ T7071] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 169.754356][ T7071] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 169.754378][ T7071] page_type: f5(slab) [ 169.754399][ T7071] raw: 00fff00000000040 ffff88801b004b40 dead000000000122 0000000000000000 [ 169.754420][ T7071] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 169.759141][ T7082] RDX: 0000000000000000 RSI: ffffffff8f365100 RDI: ffffffff9062e940 [ 169.765180][ T7071] head: 00fff00000000040 ffff88801b004b40 dead000000000122 0000000000000000 [ 169.765202][ T7071] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 169.765225][ T7071] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 169.769774][ T7082] RBP: 0000000000000000 R08: ffff888028cbbe00 R09: 0000000000000005 [ 169.774768][ T7071] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 169.774783][ T7071] page dumped because: kasan: bad access detected [ 169.774795][ T7071] page_owner tracks the page as allocated [ 169.774809][ T7071] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12627030962, free_ts 0 [ 169.780681][ T7082] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88802b6f4818 [ 169.785063][ T7071] post_alloc_hook+0x1f9/0x250 [ 169.785094][ T7071] get_page_from_freelist+0x21fa/0x2270 [ 169.785129][ T7071] __alloc_frozen_pages_noprof+0x18d/0x380 [ 169.805774][ T7082] R13: ffff88802a0ac800 R14: ffff88802b6f4810 R15: ffff88802b6f4800 [ 169.813072][ T7071] allocate_slab+0x79/0x5e0 [ 169.813098][ T7071] refill_objects+0x2d5/0x350 [ 169.813121][ T7071] __pcs_replace_empty_main+0x2bf/0x6b0 [ 169.813143][ T7071] __kmalloc_cache_noprof+0x3a7/0x660 [ 169.813173][ T7071] bus_add_driver+0x162/0x670 [ 169.813209][ T7071] driver_register+0x23a/0x320 [ 169.813239][ T7071] usb_register_driver+0x1e4/0x390 [ 169.813265][ T7071] do_one_initcall+0x250/0x870 [ 169.813299][ T7071] do_initcall_level+0x10a/0x1a0 [ 169.813332][ T7071] do_initcalls+0x59/0xa0 [ 169.813363][ T7071] kernel_init_freeable+0x29d/0x3e0 [ 169.813396][ T7071] kernel_init+0x1d/0x1d0 [ 169.813428][ T7071] ret_from_fork+0x514/0xb70 [ 169.813463][ T7071] page_owner free stack trace missing [ 169.813472][ T7071] [ 169.813478][ T7071] Memory state around the buggy address: [ 169.813491][ T7071] ffff88802b6f4700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 169.813508][ T7071] ffff88802b6f4780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 169.813525][ T7071] >ffff88802b6f4800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.813538][ T7071] ^ [ 169.813551][ T7071] ffff88802b6f4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.813568][ T7071] ffff88802b6f4900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 169.813581][ T7071] ================================================================== [ 169.816976][ T7071] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 169.816995][ T7071] CPU: 1 UID: 0 PID: 7071 Comm: syz.0.388 Not tainted syzkaller #0 PREEMPT(full) [ 169.817022][ T7071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 169.817036][ T7071] Call Trace: [ 169.817046][ T7071] [ 169.817056][ T7071] vpanic+0x56c/0xa60 [ 169.817096][ T7071] ? __pfx_vpanic+0x10/0x10 [ 169.817138][ T7071] panic+0xc5/0xd0 [ 169.817173][ T7071] ? __pfx_panic+0x10/0x10 [ 169.817209][ T7071] ? dvb_frontend_release+0x407/0x4d0 [ 169.817242][ T7071] ? dvb_frontend_release+0x407/0x4d0 [ 169.817267][ T7071] check_panic_on_warn+0x89/0xb0 [ 169.817306][ T7071] ? dvb_frontend_release+0x407/0x4d0 [ 169.817331][ T7071] end_report+0x73/0x170 [ 169.817367][ T7071] ? dvb_frontend_release+0x407/0x4d0 [ 169.817392][ T7071] kasan_report+0x128/0x150 [ 169.817429][ T7071] ? dvb_frontend_release+0x407/0x4d0 [ 169.817460][ T7071] dvb_frontend_release+0x407/0x4d0 [ 169.817487][ T7071] ? __pfx_dvb_frontend_release+0x10/0x10 [ 169.817513][ T7071] __fput+0x418/0xa50 [ 169.817551][ T7071] task_work_run+0x1d9/0x270 [ 169.817576][ T7071] ? __pfx_task_work_run+0x10/0x10 [ 169.817605][ T7071] exit_to_user_mode_loop+0x1fa/0x730 [ 169.817639][ T7071] ? rcu_is_watching+0x15/0xb0 [ 169.817663][ T7071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.817689][ T7071] do_syscall_64+0x353/0x580 [ 169.817718][ T7071] ? trace_irq_disable+0x3b/0x140 [ 169.817753][ T7071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.817777][ T7071] RIP: 0033:0x7fdd7439de99 [ 169.817805][ T7071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.817824][ T7071] RSP: 002b:00007fff00d90de8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 169.817850][ T7071] RAX: 0000000000000000 RBX: 00007fdd74627da0 RCX: 00007fdd7439de99 [ 169.817866][ T7071] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 169.817881][ T7071] RBP: 00007fdd74627da0 R08: 00007fdd74626038 R09: 0000000000000000 [ 169.817898][ T7071] R10: 000000000003fdb0 R11: 0000000000000246 R12: 000000000002982d [ 169.817914][ T7071] R13: 00007fdd74625fac R14: 00000000000295eb R15: 00007fff00d90ef0 [ 169.817941][ T7071] [ 169.821939][ T7071] Kernel Offset: disabled