[ 98.496958][ T25] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. 2026/05/17 05:28:57 parsed 1 programs [ 111.163626][ T5644] cgroup: Unknown subsys name 'net' [ 111.310508][ T5644] cgroup: Unknown subsys name 'cpuset' [ 111.324876][ T5644] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 113.146796][ T5644] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 117.058683][ T5658] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 117.627210][ T5690] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.638407][ T5690] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.648772][ T5690] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.661851][ T5690] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.672468][ T5690] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.915819][ T20] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.956583][ T20] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.513438][ T20] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.533969][ T20] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.648732][ T5660] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.661619][ T5660] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.672349][ T5660] bridge_slave_0: entered allmulticast mode [ 119.692928][ T5660] bridge_slave_0: entered promiscuous mode [ 119.808916][ T5660] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.819087][ T5660] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.827100][ T5660] bridge_slave_1: entered allmulticast mode [ 119.835444][ T5660] bridge_slave_1: entered promiscuous mode [ 120.076215][ T5660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.329066][ T5660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.746472][ T5660] team0: Port device team_slave_0 added [ 120.771887][ T5660] team0: Port device team_slave_1 added [ 120.995587][ T5660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.003626][ T5660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.049601][ T5660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.074572][ T5660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.097944][ T5660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.131666][ T5660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.281895][ T5660] hsr_slave_0: entered promiscuous mode [ 121.299140][ T5660] hsr_slave_1: entered promiscuous mode [ 121.677599][ T5660] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 121.696990][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.707099][ T5660] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 121.724563][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.734765][ T5660] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 121.747918][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.756300][ T5660] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 121.771831][ T5660] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.882011][ T5660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.913858][ T5660] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.933004][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.942387][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.964851][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.972770][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.453863][ T5660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.516042][ T5660] veth0_vlan: entered promiscuous mode [ 122.530091][ T5660] veth1_vlan: entered promiscuous mode [ 122.576555][ T5660] veth0_macvtap: entered promiscuous mode [ 122.594308][ T5660] veth1_macvtap: entered promiscuous mode [ 122.622730][ T5660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.641219][ T5660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.662233][ T1167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.673099][ T1167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.684458][ T1167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.697795][ T1167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/05/17 05:29:13 executed programs: 0 [ 122.940262][ T5690] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.950781][ T5690] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.958812][ T5690] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.967705][ T5690] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.977859][ T5690] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.245177][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 123.262881][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 123.276725][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 123.292038][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 123.316318][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 123.394566][ T4941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.405787][ T4941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.427070][ T4941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.451889][ T5690] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.463795][ T5690] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.487772][ T5690] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.506187][ T5690] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.518428][ T5690] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.540417][ T5690] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.548570][ T5690] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.611561][ T4941] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.625074][ T4941] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.635509][ T4941] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.657609][ T4941] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.669768][ T4941] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.859574][ T4941] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.876726][ T4941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.886559][ T4941] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.904424][ T4941] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.916106][ T4941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.462579][ T1008] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.054453][ T4941] Bluetooth: hci0: command tx timeout [ 125.270591][ T1008] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.375350][ T4941] Bluetooth: hci1: command tx timeout [ 125.536574][ T4941] Bluetooth: hci2: command tx timeout [ 125.614421][ T4941] Bluetooth: hci3: command tx timeout [ 125.694445][ T4941] Bluetooth: hci4: command tx timeout [ 125.830561][ T1008] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.995983][ T1008] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.015433][ T4941] Bluetooth: hci5: command tx timeout [ 126.537891][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.552659][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.568110][ T5764] bridge_slave_0: entered allmulticast mode [ 126.578949][ T5764] bridge_slave_0: entered promiscuous mode [ 126.662141][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.671739][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.684403][ T5764] bridge_slave_1: entered allmulticast mode [ 126.695901][ T5764] bridge_slave_1: entered promiscuous mode [ 126.858883][ T1008] bridge_slave_1: left allmulticast mode [ 126.867767][ T1008] bridge_slave_1: left promiscuous mode [ 126.875862][ T1008] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.887934][ T1008] bridge_slave_0: left allmulticast mode [ 126.896668][ T1008] bridge_slave_0: left promiscuous mode [ 126.902894][ T1008] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.146120][ T4941] Bluetooth: hci0: command tx timeout [ 127.278039][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.289936][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.301701][ T1008] bond0 (unregistering): Released all slaves [ 127.431403][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.455360][ T4941] Bluetooth: hci1: command tx timeout [ 127.588714][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.614127][ T4941] Bluetooth: hci2: command tx timeout [ 127.704150][ T4941] Bluetooth: hci3: command tx timeout [ 127.774616][ T4941] Bluetooth: hci4: command tx timeout [ 127.811438][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.818884][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.826404][ T5773] bridge_slave_0: entered allmulticast mode [ 127.835464][ T5773] bridge_slave_0: entered promiscuous mode [ 127.846858][ T5764] team0: Port device team_slave_0 added [ 127.936673][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.943980][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.951183][ T5773] bridge_slave_1: entered allmulticast mode [ 127.959331][ T5773] bridge_slave_1: entered promiscuous mode [ 127.968867][ T5764] team0: Port device team_slave_1 added [ 128.009154][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.018215][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.025814][ T5772] bridge_slave_0: entered allmulticast mode [ 128.045752][ T5772] bridge_slave_0: entered promiscuous mode [ 128.061338][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.069119][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.077396][ T5772] bridge_slave_1: entered allmulticast mode [ 128.085463][ T5772] bridge_slave_1: entered promiscuous mode [ 128.092955][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.100526][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.103879][ T4941] Bluetooth: hci5: command tx timeout [ 128.108362][ T5789] bridge_slave_0: entered allmulticast mode [ 128.121520][ T5789] bridge_slave_0: entered promiscuous mode [ 128.220589][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.228501][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.238581][ T5789] bridge_slave_1: entered allmulticast mode [ 128.248359][ T5789] bridge_slave_1: entered promiscuous mode [ 128.270479][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.277821][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.304491][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.440350][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.456588][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.467498][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.475646][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.504385][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.536807][ T1008] hsr_slave_0: left promiscuous mode [ 128.545373][ T1008] hsr_slave_1: left promiscuous mode [ 128.555597][ T1008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.563492][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.573033][ T1008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.584885][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.610252][ T1008] veth1_macvtap: left promiscuous mode [ 128.617113][ T1008] veth0_macvtap: left promiscuous mode [ 128.622891][ T1008] veth1_vlan: left promiscuous mode [ 128.629390][ T1008] veth0_vlan: left promiscuous mode [ 129.071695][ T1008] team0 (unregistering): Port device team_slave_1 removed [ 129.098574][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 129.213520][ T4941] Bluetooth: hci0: command tx timeout [ 129.282539][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.299034][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.352718][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 129.362497][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.370037][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.379543][ T5770] bridge_slave_0: entered allmulticast mode [ 129.388553][ T5770] bridge_slave_0: entered promiscuous mode [ 129.422688][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.450353][ T5773] team0: Port device team_slave_0 added [ 129.461504][ T5773] team0: Port device team_slave_1 added [ 129.492201][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.499887][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.507427][ T5770] bridge_slave_1: entered allmulticast mode [ 129.515642][ T5770] bridge_slave_1: entered promiscuous mode [ 129.535218][ T4941] Bluetooth: hci1: command tx timeout [ 129.565767][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.675534][ T5772] team0: Port device team_slave_0 added [ 129.693611][ T4941] Bluetooth: hci2: command tx timeout [ 129.725901][ T5764] hsr_slave_0: entered promiscuous mode [ 129.734749][ T5764] hsr_slave_1: entered promiscuous mode [ 129.746029][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.753381][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.781846][ T4941] Bluetooth: hci3: command tx timeout [ 129.789479][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.805730][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.815888][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.823508][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.830773][ T5784] bridge_slave_0: entered allmulticast mode [ 129.838663][ T5784] bridge_slave_0: entered promiscuous mode [ 129.849201][ T5772] team0: Port device team_slave_1 added [ 129.855570][ T4941] Bluetooth: hci4: command tx timeout [ 129.905914][ T5789] team0: Port device team_slave_0 added [ 129.913979][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.921083][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.947842][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.961635][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.970226][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.999208][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.014862][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.040093][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.047471][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.056088][ T5784] bridge_slave_1: entered allmulticast mode [ 130.064962][ T5784] bridge_slave_1: entered promiscuous mode [ 130.107559][ T5789] team0: Port device team_slave_1 added [ 130.129683][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.137595][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.169494][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.193372][ T4941] Bluetooth: hci5: command tx timeout [ 130.224588][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.240268][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.321723][ T5770] team0: Port device team_slave_0 added [ 130.410314][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.421537][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.448891][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.496696][ T5770] team0: Port device team_slave_1 added [ 130.529267][ T5784] team0: Port device team_slave_0 added [ 130.586552][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.594669][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.620959][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.683180][ T5773] hsr_slave_0: entered promiscuous mode [ 130.697353][ T5773] hsr_slave_1: entered promiscuous mode [ 130.704094][ T5773] debugfs: 'hsr0' already exists in 'hsr' [ 130.709958][ T5773] Cannot create hsr debugfs directory [ 130.719705][ T5784] team0: Port device team_slave_1 added [ 130.863950][ T5772] hsr_slave_0: entered promiscuous mode [ 130.870988][ T5772] hsr_slave_1: entered promiscuous mode [ 130.878013][ T5772] debugfs: 'hsr0' already exists in 'hsr' [ 130.884135][ T5772] Cannot create hsr debugfs directory [ 130.903799][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.918977][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.948661][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.984804][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.991904][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.019633][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.068813][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2 [ 131.077940][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.085373][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.112227][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.144108][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.151375][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.178068][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.293796][ T4941] Bluetooth: hci0: command tx timeout [ 131.316678][ T5789] hsr_slave_0: entered promiscuous mode [ 131.323769][ T5789] hsr_slave_1: entered promiscuous mode [ 131.331023][ T5789] debugfs: 'hsr0' already exists in 'hsr' [ 131.337001][ T5789] Cannot create hsr debugfs directory [ 131.488746][ T5770] hsr_slave_0: entered promiscuous mode [ 131.495588][ T5770] hsr_slave_1: entered promiscuous mode [ 131.502968][ T5770] debugfs: 'hsr0' already exists in 'hsr' [ 131.509307][ T5770] Cannot create hsr debugfs directory [ 131.613597][ T4941] Bluetooth: hci1: command tx timeout [ 131.673095][ T5784] hsr_slave_0: entered promiscuous mode [ 131.680206][ T5784] hsr_slave_1: entered promiscuous mode [ 131.687157][ T5784] debugfs: 'hsr0' already exists in 'hsr' [ 131.692947][ T5784] Cannot create hsr debugfs directory [ 131.773351][ T4941] Bluetooth: hci2: command tx timeout [ 131.853966][ T4941] Bluetooth: hci3: command tx timeout [ 131.933676][ T4941] Bluetooth: hci4: command tx timeout [ 132.182944][ T5764] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 132.199547][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 132.208107][ T5764] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 132.221648][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 132.264036][ T4941] Bluetooth: hci5: command tx timeout [ 132.300745][ T5764] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 132.316296][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 132.369789][ T5764] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 132.384843][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 132.802560][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.901879][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.947383][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.956431][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.967788][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 132.981489][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 132.994657][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 133.007589][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.038279][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.046015][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.068652][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 133.100988][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 133.127952][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 133.152791][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 133.372257][ T5789] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.390512][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 133.417425][ T5789] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.433169][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.443346][ T5789] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.460424][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 133.479831][ T5789] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.503783][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 133.772621][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 133.822418][ T5770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 133.861222][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 133.895065][ T5770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.924418][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 133.944600][ T5770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 133.990244][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 134.007910][ T5770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 134.349778][ T5784] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 134.387470][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 134.399599][ T5784] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 134.422683][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 134.461060][ T5784] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 134.492235][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 134.529103][ T5784] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 134.551426][ T5784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 134.671749][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.728465][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.762633][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.907981][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.918594][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 134.936864][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 134.968826][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 134.982009][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 134.996231][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.029151][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 135.041710][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 135.072621][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.079927][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.093378][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.101656][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.121549][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 135.136782][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 135.194699][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.202191][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.215309][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.222736][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.368422][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.393971][ T5764] veth0_vlan: entered promiscuous mode [ 135.458300][ T5764] veth1_vlan: entered promiscuous mode [ 135.526513][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.565491][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.609703][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.617006][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.693406][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.703433][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.746854][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.790639][ T5764] veth0_macvtap: entered promiscuous mode [ 135.820656][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.828198][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.878588][ T5764] veth1_macvtap: entered promiscuous mode [ 135.902966][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.910251][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.041253][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.081838][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.129389][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.206632][ T1167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.236896][ T1167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.287951][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.297197][ T1167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.331377][ T1167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.400606][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.407990][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.510961][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.518488][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.851429][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.892379][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.977903][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.093072][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.124826][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.144077][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/17 05:29:28 executed programs: 12 [ 137.427255][ T5772] veth0_vlan: entered promiscuous mode [ 137.533150][ T5772] veth1_vlan: entered promiscuous mode [ 138.532215][ T5772] veth0_macvtap: entered promiscuous mode [ 138.755773][ T5772] veth1_macvtap: entered promiscuous mode [ 139.438689][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.458233][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.472404][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.298192][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.612810][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.254446][ T1167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.297462][ T1167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.167428][ T1167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.177116][ T1167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.296527][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.885650][ T5789] veth0_vlan: entered promiscuous mode 2026/05/17 05:29:34 executed programs: 18 [ 143.250638][ T5789] veth1_vlan: entered promiscuous mode [ 143.265791][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.103882][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.415209][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.510659][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.682823][ T5770] veth0_vlan: entered promiscuous mode [ 145.063427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 145.075909][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.181924][ T5789] veth0_macvtap: entered promiscuous mode [ 145.861280][ T5770] veth1_vlan: entered promiscuous mode [ 146.024556][ T5789] veth1_macvtap: entered promiscuous mode [ 146.986270][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.976318][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 2026/05/17 05:29:39 executed programs: 25 [ 149.237124][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.946621][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.172123][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.281995][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.218483][ T5770] veth0_macvtap: entered promiscuous mode [ 151.228611][ T5773] veth0_vlan: entered promiscuous mode [ 151.303049][ T5773] veth1_vlan: entered promiscuous mode [ 151.328588][ T5784] veth0_vlan: entered promiscuous mode [ 152.174187][ T6144] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 152.206863][ T5770] veth1_macvtap: entered promiscuous mode [ 152.267436][ T5784] veth1_vlan: entered promiscuous mode [ 152.362305][ T6149] ================================================================== [ 152.370419][ T6149] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x350 [ 152.378422][ T6149] Read of size 8 at addr ffff88802ba16e18 by task syz.2.39/6149 [ 152.386666][ T6149] [ 152.389207][ T6149] CPU: 1 UID: 0 PID: 6149 Comm: syz.2.39 Not tainted syzkaller #0 PREEMPT(full) [ 152.389237][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 152.389250][ T6149] Call Trace: [ 152.389263][ T6149] [ 152.389273][ T6149] dump_stack_lvl+0xe8/0x150 [ 152.389304][ T6149] print_address_description+0x55/0x1e0 [ 152.389327][ T6149] ? dvb_device_open+0xc4/0x350 [ 152.389357][ T6149] print_report+0x58/0x70 [ 152.389377][ T6149] kasan_report+0x117/0x150 [ 152.389412][ T6149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.389441][ T6149] ? dvb_device_open+0xc4/0x350 [ 152.389474][ T6149] dvb_device_open+0xc4/0x350 [ 152.389503][ T6149] ? do_raw_spin_unlock+0xf5/0x210 [ 152.389538][ T6149] chrdev_open+0x4cd/0x5e0 [ 152.389562][ T6149] ? __pfx_chrdev_open+0x10/0x10 [ 152.389582][ T6149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.389607][ T6149] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 152.389658][ T6149] ? __pfx_chrdev_open+0x10/0x10 [ 152.389699][ T6149] do_dentry_open+0x785/0x14e0 [ 152.389736][ T6149] vfs_open+0x3b/0x340 [ 152.389769][ T6149] ? path_openat+0x2df0/0x3860 [ 152.389807][ T6149] path_openat+0x2e08/0x3860 [ 152.389845][ T6149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.389872][ T6149] ? __pfx_stack_trace_save+0x10/0x10 [ 152.389908][ T6149] ? stack_depot_save_flags+0x33/0x810 [ 152.389943][ T6149] ? __pfx_path_openat+0x10/0x10 [ 152.389973][ T6149] ? __x64_sys_openat+0x138/0x170 [ 152.390001][ T6149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.390027][ T6149] ? __lock_acquire+0x6b5/0x2cf0 [ 152.390057][ T6149] do_file_open+0x23e/0x4a0 [ 152.390092][ T6149] ? __pfx_do_file_open+0x10/0x10 [ 152.390135][ T6149] ? _raw_spin_unlock+0x28/0x50 [ 152.390165][ T6149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.390191][ T6149] ? alloc_fd+0x64b/0x6c0 [ 152.390221][ T6149] do_sys_openat2+0x113/0x200 [ 152.390246][ T6149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.390272][ T6149] ? _raw_spin_unlock_irq+0x2e/0x50 [ 152.390300][ T6149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.390327][ T6149] ? __pfx_do_sys_openat2+0x10/0x10 [ 152.390353][ T6149] ? exc_page_fault+0x6a/0xc0 [ 152.390388][ T6149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.390414][ T6149] ? do_user_addr_fault+0xc6f/0x1340 [ 152.390439][ T6149] __x64_sys_openat+0x138/0x170 [ 152.390468][ T6149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.390490][ T6149] do_syscall_64+0x15f/0xf80 [ 152.390523][ T6149] ? trace_irq_disable+0x3b/0x140 [ 152.390560][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.390583][ T6149] RIP: 0033:0x7f3bf715d68e [ 152.390604][ T6149] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 152.390622][ T6149] RSP: 002b:00007f3bf8072b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 152.390650][ T6149] RAX: ffffffffffffffda RBX: 00007f3bf80736c0 RCX: 00007f3bf715d68e [ 152.390666][ T6149] RDX: 0000000000000002 RSI: 00007f3bf8072c00 RDI: ffffffffffffff9c [ 152.390681][ T6149] RBP: 00007f3bf8072c00 R08: 0000000000000000 R09: 0000000000000000 [ 152.390695][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 152.390709][ T6149] R13: 00007f3bf7416128 R14: 00007f3bf7416090 R15: 00007ffe3cd2a1f8 [ 152.390744][ T6149] [ 152.390754][ T6149] [ 152.734601][ T6149] Allocated by task 1: [ 152.739210][ T6149] kasan_save_track+0x3e/0x80 [ 152.744186][ T6149] __kasan_kmalloc+0x93/0xb0 [ 152.748814][ T6149] __kmalloc_cache_noprof+0x31c/0x660 [ 152.754316][ T6149] dvb_register_device+0x2fd/0x21e0 [ 152.760114][ T6149] dvb_register_frontend+0x61b/0x920 [ 152.765476][ T6149] vidtv_bridge_probe+0x9aa/0xf80 [ 152.770659][ T6149] platform_probe+0xf9/0x190 [ 152.775817][ T6149] really_probe+0x267/0xaf0 [ 152.780592][ T6149] __driver_probe_device+0x1ef/0x380 [ 152.786118][ T6149] driver_probe_device+0x4f/0x240 [ 152.791738][ T6149] __driver_attach+0x34c/0x640 [ 152.796548][ T6149] bus_for_each_dev+0x23b/0x2c0 [ 152.801468][ T6149] bus_add_driver+0x345/0x670 [ 152.806255][ T6149] driver_register+0x23a/0x320 [ 152.811058][ T6149] vidtv_bridge_init+0x28/0x50 [ 152.815862][ T6149] do_one_initcall+0x250/0x870 [ 152.820691][ T6149] do_initcall_level+0x104/0x190 [ 152.826975][ T6149] do_initcalls+0x59/0xa0 [ 152.831700][ T6149] kernel_init_freeable+0x2a6/0x3e0 [ 152.837204][ T6149] kernel_init+0x1d/0x1d0 [ 152.841567][ T6149] ret_from_fork+0x514/0xb70 [ 152.846890][ T6149] ret_from_fork_asm+0x1a/0x30 [ 152.852946][ T6149] [ 152.856902][ T6149] Freed by task 6144: [ 152.861680][ T6149] kasan_save_track+0x3e/0x80 [ 152.866768][ T6149] kasan_save_free_info+0x46/0x50 [ 152.872284][ T6149] __kasan_slab_free+0x5c/0x80 [ 152.877204][ T6149] kfree+0x1c5/0x640 [ 152.882184][ T6149] dvb_device_open+0x2cd/0x350 [ 152.887139][ T6149] chrdev_open+0x4cd/0x5e0 [ 152.891769][ T6149] do_dentry_open+0x785/0x14e0 [ 152.896538][ T6149] vfs_open+0x3b/0x340 [ 152.900614][ T6149] path_openat+0x2e08/0x3860 [ 152.905329][ T6149] do_file_open+0x23e/0x4a0 [ 152.909886][ T6149] do_sys_openat2+0x113/0x200 [ 152.914572][ T6149] __x64_sys_openat+0x138/0x170 [ 152.919613][ T6149] do_syscall_64+0x15f/0xf80 [ 152.924511][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.930671][ T6149] [ 152.932987][ T6149] The buggy address belongs to the object at ffff88802ba16e00 [ 152.932987][ T6149] which belongs to the cache kmalloc-256 of size 256 [ 152.947156][ T6149] The buggy address is located 24 bytes inside of [ 152.947156][ T6149] freed 256-byte region [ffff88802ba16e00, ffff88802ba16f00) [ 152.961224][ T6149] [ 152.963576][ T6149] The buggy address belongs to the physical page: [ 152.969979][ T6149] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ba16 [ 152.978743][ T6149] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 152.987436][ T6149] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 152.995269][ T6149] page_type: f5(slab) [ 152.999515][ T6149] raw: 00fff00000000040 ffff88813fe1ab40 dead000000000122 0000000000000000 [ 153.008379][ T6149] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 153.017321][ T6149] head: 00fff00000000040 ffff88813fe1ab40 dead000000000122 0000000000000000 [ 153.026085][ T6149] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 153.034763][ T6149] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 153.043489][ T6149] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 153.052632][ T6149] page dumped because: kasan: bad access detected [ 153.059127][ T6149] page_owner tracks the page as allocated [ 153.064830][ T6149] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 24569232875, free_ts 0 [ 153.086321][ T6149] post_alloc_hook+0x231/0x280 [ 153.091757][ T6149] get_page_from_freelist+0x24ba/0x2540 [ 153.101116][ T6149] __alloc_frozen_pages_noprof+0x18d/0x380 [ 153.109094][ T6149] allocate_slab+0x77/0x660 [ 153.114319][ T6149] refill_objects+0x339/0x3d0 [ 153.119261][ T6149] __pcs_replace_empty_main+0x321/0x720 [ 153.126599][ T6149] __kmalloc_cache_noprof+0x392/0x660 [ 153.133746][ T6149] bus_add_driver+0x162/0x670 [ 153.141715][ T6149] driver_register+0x23a/0x320 [ 153.147183][ T6149] usb_register_driver+0x1e4/0x390 [ 153.153108][ T6149] do_one_initcall+0x250/0x870 [ 153.158173][ T6149] do_initcall_level+0x104/0x190 [ 153.165189][ T6149] do_initcalls+0x59/0xa0 [ 153.170252][ T6149] kernel_init_freeable+0x2a6/0x3e0 [ 153.176745][ T6149] kernel_init+0x1d/0x1d0 [ 153.181869][ T6149] ret_from_fork+0x514/0xb70 [ 153.188531][ T6149] page_owner free stack trace missing [ 153.196301][ T6149] [ 153.198899][ T6149] Memory state around the buggy address: [ 153.205151][ T6149] ffff88802ba16d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.214703][ T6149] ffff88802ba16d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.228351][ T6149] >ffff88802ba16e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.241285][ T6149] ^ [ 153.246513][ T6149] ffff88802ba16e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.255854][ T6149] ffff88802ba16f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.264795][ T6149] ================================================================== [ 153.278500][ T6149] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 153.287177][ T6149] CPU: 1 UID: 0 PID: 6149 Comm: syz.2.39 Not tainted syzkaller #0 PREEMPT(full) [ 153.297106][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.308584][ T6149] Call Trace: [ 153.312227][ T6149] [ 153.315385][ T6149] vpanic+0x56c/0xa60 [ 153.319590][ T6149] ? __pfx_vpanic+0x10/0x10 [ 153.324128][ T6149] ? __pfx___schedule+0x10/0x10 [ 153.329026][ T6149] panic+0xc5/0xd0 [ 153.332781][ T6149] ? __pfx_panic+0x10/0x10 [ 153.337228][ T6149] ? preempt_schedule_thunk+0x16/0x30 [ 153.342742][ T6149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.348420][ T6149] ? dvb_device_open+0xc4/0x350 [ 153.353309][ T6149] check_panic_on_warn+0x89/0xb0 [ 153.358373][ T6149] ? dvb_device_open+0xc4/0x350 [ 153.363262][ T6149] end_report+0x73/0x170 [ 153.367611][ T6149] ? dvb_device_open+0xc4/0x350 [ 153.372763][ T6149] kasan_report+0x128/0x150 [ 153.377483][ T6149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.383606][ T6149] ? dvb_device_open+0xc4/0x350 [ 153.388539][ T6149] dvb_device_open+0xc4/0x350 [ 153.393623][ T6149] ? do_raw_spin_unlock+0xf5/0x210 [ 153.399253][ T6149] chrdev_open+0x4cd/0x5e0 [ 153.403798][ T6149] ? __pfx_chrdev_open+0x10/0x10 [ 153.408821][ T6149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.414486][ T6149] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 153.420848][ T6149] ? __pfx_chrdev_open+0x10/0x10 [ 153.425807][ T6149] do_dentry_open+0x785/0x14e0 [ 153.431219][ T6149] vfs_open+0x3b/0x340 [ 153.435502][ T6149] ? path_openat+0x2df0/0x3860 [ 153.440306][ T6149] path_openat+0x2e08/0x3860 [ 153.444947][ T6149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.451081][ T6149] ? __pfx_stack_trace_save+0x10/0x10 [ 153.456793][ T6149] ? stack_depot_save_flags+0x33/0x810 [ 153.462858][ T6149] ? __pfx_path_openat+0x10/0x10 [ 153.468216][ T6149] ? __x64_sys_openat+0x138/0x170 [ 153.473499][ T6149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.479288][ T6149] ? __lock_acquire+0x6b5/0x2cf0 [ 153.484710][ T6149] do_file_open+0x23e/0x4a0 [ 153.489610][ T6149] ? __pfx_do_file_open+0x10/0x10 [ 153.494690][ T6149] ? _raw_spin_unlock+0x28/0x50 [ 153.499578][ T6149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.505240][ T6149] ? alloc_fd+0x64b/0x6c0 [ 153.509604][ T6149] do_sys_openat2+0x113/0x200 [ 153.514780][ T6149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.520528][ T6149] ? _raw_spin_unlock_irq+0x2e/0x50 [ 153.525761][ T6149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.531422][ T6149] ? __pfx_do_sys_openat2+0x10/0x10 [ 153.536653][ T6149] ? exc_page_fault+0x6a/0xc0 [ 153.541415][ T6149] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.547081][ T6149] ? do_user_addr_fault+0xc6f/0x1340 [ 153.552442][ T6149] __x64_sys_openat+0x138/0x170 [ 153.557336][ T6149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.563433][ T6149] do_syscall_64+0x15f/0xf80 [ 153.568165][ T6149] ? trace_irq_disable+0x3b/0x140 [ 153.573241][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.579175][ T6149] RIP: 0033:0x7f3bf715d68e [ 153.583615][ T6149] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 153.603285][ T6149] RSP: 002b:00007f3bf8072b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 153.611737][ T6149] RAX: ffffffffffffffda RBX: 00007f3bf80736c0 RCX: 00007f3bf715d68e [ 153.619734][ T6149] RDX: 0000000000000002 RSI: 00007f3bf8072c00 RDI: ffffffffffffff9c [ 153.627725][ T6149] RBP: 00007f3bf8072c00 R08: 0000000000000000 R09: 0000000000000000 [ 153.635713][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 153.643965][ T6149] R13: 00007f3bf7416128 R14: 00007f3bf7416090 R15: 00007ffe3cd2a1f8 [ 153.652065][ T6149] [ 153.655924][ T6149] Kernel Offset: disabled [ 153.660251][ T6149] Rebooting in 86400 seconds..