Warning: Permanently added '10.128.0.107' (ED25519) to the list of known hosts. 1970/01/01 00:00:29 parsed 1 programs 1970/01/01 00:00:29 serving rpc on tcp://38609 [ 30.767181][ T4720] cgroup: Unknown subsys name 'net' [ 30.868225][ T4720] cgroup: Unknown subsys name 'cpuset' [ 30.870283][ T4720] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.053474][ T4720] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 32.970309][ T4732] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.540973][ T4790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.542526][ T4790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.548354][ T4790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 33.550258][ T4790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 33.551858][ T4790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 33.607741][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.609468][ T4745] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.610909][ T4745] bridge_slave_0: entered allmulticast mode [ 33.612473][ T4745] bridge_slave_0: entered promiscuous mode [ 33.615525][ T4745] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.616497][ T4745] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.616551][ T4745] bridge_slave_1: entered allmulticast mode [ 33.616970][ T4745] bridge_slave_1: entered promiscuous mode [ 33.640318][ T4745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.644124][ T4745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.660496][ T4745] team0: Port device team_slave_0 added [ 33.680825][ T4745] team0: Port device team_slave_1 added [ 33.704640][ T4745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.705674][ T4745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.705696][ T4745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.722337][ T4745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.722364][ T4745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.722381][ T4745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.871694][ T4745] hsr_slave_0: entered promiscuous mode [ 33.872086][ T4745] hsr_slave_1: entered promiscuous mode [ 33.874224][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.874249][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.919757][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.921539][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.967159][ T4745] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.970569][ T4745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.971219][ T4745] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.972661][ T4745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.972947][ T4745] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.974942][ T4745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.976090][ T4745] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.980070][ T4745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.012604][ T4745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.021178][ T4745] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.024506][ T3666] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.024567][ T3666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.028773][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.028808][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.128319][ T4745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.140502][ T4745] veth0_vlan: entered promiscuous mode [ 34.142984][ T4745] veth1_vlan: entered promiscuous mode [ 34.155539][ T4745] veth0_macvtap: entered promiscuous mode [ 34.157491][ T4745] veth1_macvtap: entered promiscuous mode [ 34.163320][ T4745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.167617][ T4745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.170408][ T15] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.170646][ T15] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.170664][ T15] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.170679][ T15] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:34 executed programs: 0 [ 34.254851][ T4753] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 34.256808][ T4753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 34.258646][ T4753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 34.267239][ T4753] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 34.270585][ T4753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 34.306972][ T4790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 34.308848][ T4790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 34.311315][ T4790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 34.316287][ T4790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 34.330425][ T4845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 34.331133][ T4845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 34.331535][ T4845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 34.331661][ T4845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 34.331894][ T4845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 34.332144][ T4845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 34.332301][ T4845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 34.332764][ T4845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 34.333188][ T4845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 34.333315][ T4845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 34.333719][ T4845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 34.347559][ T4847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 34.349163][ T4847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 34.350812][ T4847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 34.353180][ T4847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 34.356130][ T4847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 34.452519][ T15] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.501536][ T15] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.565160][ T15] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.683341][ T4824] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.683428][ T4824] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.683524][ T4824] bridge_slave_0: entered allmulticast mode [ 34.683983][ T4824] bridge_slave_0: entered promiscuous mode [ 34.687750][ T4831] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.687771][ T4831] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.687863][ T4831] bridge_slave_0: entered allmulticast mode [ 34.688274][ T4831] bridge_slave_0: entered promiscuous mode [ 34.689249][ T4831] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.689276][ T4831] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.689322][ T4831] bridge_slave_1: entered allmulticast mode [ 34.689746][ T4831] bridge_slave_1: entered promiscuous mode [ 34.701927][ T4824] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.702007][ T4824] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.702225][ T4824] bridge_slave_1: entered allmulticast mode [ 34.702660][ T4824] bridge_slave_1: entered promiscuous mode [ 34.712392][ T4831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.725035][ T4831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.730374][ T4824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.731341][ T4824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.756284][ T4824] team0: Port device team_slave_0 added [ 34.759808][ T4831] team0: Port device team_slave_0 added [ 34.760836][ T4831] team0: Port device team_slave_1 added [ 34.771492][ T4824] team0: Port device team_slave_1 added [ 34.790144][ T4824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.790168][ T4824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.790183][ T4824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.797125][ T4840] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.797213][ T4840] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.797301][ T4840] bridge_slave_0: entered allmulticast mode [ 34.797722][ T4840] bridge_slave_0: entered promiscuous mode [ 34.807429][ T4824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.808746][ T4824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.812931][ T4824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.815191][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.815216][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.815232][ T4831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.815895][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.815902][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.815915][ T4831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.818214][ T4840] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.818272][ T4840] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.818363][ T4840] bridge_slave_1: entered allmulticast mode [ 34.818792][ T4840] bridge_slave_1: entered promiscuous mode [ 34.853604][ T4840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.854592][ T4840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.859702][ T4831] hsr_slave_0: entered promiscuous mode [ 34.861408][ T4831] hsr_slave_1: entered promiscuous mode [ 34.862659][ T4831] debugfs: 'hsr0' already exists in 'hsr' [ 34.863729][ T4831] Cannot create hsr debugfs directory [ 34.866429][ T4832] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.867751][ T4832] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.868931][ T4832] bridge_slave_0: entered allmulticast mode [ 34.870423][ T4832] bridge_slave_0: entered promiscuous mode [ 34.873106][ T4832] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.874369][ T4832] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.875943][ T4832] bridge_slave_1: entered allmulticast mode [ 34.877424][ T4832] bridge_slave_1: entered promiscuous mode [ 34.888161][ T4840] team0: Port device team_slave_0 added [ 34.893940][ T4829] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.893995][ T4829] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.894106][ T4829] bridge_slave_0: entered allmulticast mode [ 34.894529][ T4829] bridge_slave_0: entered promiscuous mode [ 34.896185][ T4829] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.896207][ T4829] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.896296][ T4829] bridge_slave_1: entered allmulticast mode [ 34.896781][ T4829] bridge_slave_1: entered promiscuous mode [ 34.902379][ T4832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.906787][ T4840] team0: Port device team_slave_1 added [ 34.913585][ T4840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.914761][ T4840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.919796][ T4840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.923310][ T4824] hsr_slave_0: entered promiscuous mode [ 34.923616][ T4824] hsr_slave_1: entered promiscuous mode [ 34.923821][ T4824] debugfs: 'hsr0' already exists in 'hsr' [ 34.923835][ T4824] Cannot create hsr debugfs directory [ 34.928652][ T4832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.941355][ T4840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.941379][ T4840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.941395][ T4840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.952133][ T4832] team0: Port device team_slave_0 added [ 34.964857][ T4829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.966164][ T4829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.967027][ T4832] team0: Port device team_slave_1 added [ 34.984785][ T4829] team0: Port device team_slave_0 added [ 34.995276][ T4840] hsr_slave_0: entered promiscuous mode [ 34.996370][ T4840] hsr_slave_1: entered promiscuous mode [ 34.996563][ T4840] debugfs: 'hsr0' already exists in 'hsr' [ 34.996637][ T4840] Cannot create hsr debugfs directory [ 34.997750][ T4829] team0: Port device team_slave_1 added [ 35.000786][ T4832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.000805][ T4832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.000833][ T4832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.014055][ T4832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.015255][ T4832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.016114][ T4832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.025041][ T4829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.025773][ T4829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.025800][ T4829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.035556][ T4829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.036393][ T4829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.036484][ T4829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.064168][ T4832] hsr_slave_0: entered promiscuous mode [ 35.064496][ T4832] hsr_slave_1: entered promiscuous mode [ 35.064709][ T4832] debugfs: 'hsr0' already exists in 'hsr' [ 35.064719][ T4832] Cannot create hsr debugfs directory [ 35.074688][ T4829] hsr_slave_0: entered promiscuous mode [ 35.075008][ T4829] hsr_slave_1: entered promiscuous mode [ 35.075181][ T4829] debugfs: 'hsr0' already exists in 'hsr' [ 35.075190][ T4829] Cannot create hsr debugfs directory [ 35.156209][ T4831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.158355][ T4831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.158837][ T4831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.160420][ T4831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.167610][ T4831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.170023][ T4831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.175186][ T4831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.177488][ T4831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.189852][ T4824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.192600][ T4824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.193262][ T4824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.194614][ T4824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.200959][ T4824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.203026][ T4824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.203617][ T4824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.204953][ T4824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.211621][ T4831] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.211684][ T4831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.211867][ T4831] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.211905][ T4831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.225112][ T4840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.229578][ T4840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.231311][ T4824] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.231368][ T4824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.231456][ T4824] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.231495][ T4824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.240903][ T4840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.243218][ T4840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.244829][ T4840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.247236][ T4840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.248915][ T4840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.251174][ T4840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.280602][ T4832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.282798][ T4832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.283106][ T4832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.284946][ T4832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.287839][ T4840] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.287871][ T4840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.287944][ T4840] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.287971][ T4840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.288618][ T4832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.290141][ T4832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.290564][ T4832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.292294][ T4832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.294870][ T4831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.311306][ T4831] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.314478][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.316194][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.317510][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.318725][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.321723][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.323008][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.334737][ T4824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.338396][ T4852] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.338430][ T4852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.341351][ T4852] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.341384][ T4852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.351128][ T4824] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.358800][ T4852] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.358844][ T4852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.367934][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.367974][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.373454][ T4831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.373987][ T4831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.382338][ T4840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.392127][ T4840] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.397183][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.397221][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.407919][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.407960][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.427934][ T4832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.432613][ T4832] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.442028][ T3666] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.442081][ T3666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.453517][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.453557][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.579232][ T4831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.604328][ T4831] veth0_vlan: entered promiscuous mode [ 35.611188][ T4831] veth1_vlan: entered promiscuous mode [ 35.618942][ T4831] veth0_macvtap: entered promiscuous mode [ 35.627735][ T4831] veth1_macvtap: entered promiscuous mode [ 35.630044][ T4824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.642086][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.643209][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.650874][ T4832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.652379][ T4857] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.652433][ T4857] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.652457][ T4857] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.652474][ T4857] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.661090][ T4824] veth0_vlan: entered promiscuous mode [ 35.664984][ T4824] veth1_vlan: entered promiscuous mode [ 35.696751][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.696781][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.699259][ T4824] veth0_macvtap: entered promiscuous mode [ 35.700484][ T4824] veth1_macvtap: entered promiscuous mode [ 35.714198][ T4840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.718536][ T4824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.720558][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.720593][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.725051][ T4824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.732479][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.732596][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.732653][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.732707][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.774247][ T4832] veth0_vlan: entered promiscuous mode [ 35.783676][ T4832] veth1_vlan: entered promiscuous mode [ 35.803521][ T4832] veth0_macvtap: entered promiscuous mode [ 35.816885][ T4832] veth1_macvtap: entered promiscuous mode [ 35.835650][ T3666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.835671][ T3666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.844286][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.844314][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.848620][ T4832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.851135][ T4832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.861710][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.861760][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.861791][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.861812][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.895407][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.895443][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.929247][ T3666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.930847][ T3666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.934661][ T4840] veth0_vlan: entered promiscuous mode [ 35.955446][ T4840] veth1_vlan: entered promiscuous mode [ 35.990057][ T4840] veth0_macvtap: entered promiscuous mode [ 36.002390][ T4840] veth1_macvtap: entered promiscuous mode [ 36.023168][ T4840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.038494][ T4840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.054002][ T15] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.071868][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.071947][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.071979][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.071998][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.152606][ T879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.152636][ T879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.189720][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.189762][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.375927][ T50] Bluetooth: hci1: command tx timeout [ 36.376102][ T50] Bluetooth: hci3: command tx timeout [ 36.425738][ T4753] Bluetooth: hci2: command tx timeout [ 36.427185][ T50] Bluetooth: hci5: command tx timeout [ 36.428507][ T4847] Bluetooth: hci4: command tx timeout [ 38.278904][ T15] bridge_slave_1: left allmulticast mode [ 38.278948][ T15] bridge_slave_1: left promiscuous mode [ 38.279234][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.286948][ T15] bridge_slave_0: left allmulticast mode [ 38.286975][ T15] bridge_slave_0: left promiscuous mode [ 38.287060][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.042904][ T4847] Bluetooth: hci3: command tx timeout [ 39.044136][ T4753] Bluetooth: hci4: command tx timeout [ 39.044174][ T4753] Bluetooth: hci5: command tx timeout [ 39.044205][ T4753] Bluetooth: hci2: command tx timeout [ 39.055524][ T50] Bluetooth: hci1: command tx timeout [ 39.138255][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.188448][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.207347][ T15] bond0 (unregistering): Released all slaves 1970/01/01 00:00:39 executed programs: 19 [ 40.067575][ T15] hsr_slave_0: left promiscuous mode [ 40.070021][ T15] hsr_slave_1: left promiscuous mode [ 40.070345][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.070372][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.106357][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.106394][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.125231][ T15] veth1_macvtap: left promiscuous mode [ 40.125287][ T15] veth0_macvtap: left promiscuous mode [ 40.125342][ T15] veth1_vlan: left promiscuous mode [ 40.125384][ T15] veth0_vlan: left promiscuous mode [ 40.564149][ T15] team0 (unregistering): Port device team_slave_1 removed [ 40.586860][ T15] team0 (unregistering): Port device team_slave_0 removed [ 40.962964][ T4829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.967797][ T4829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.969623][ T4829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.978628][ T4829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.978946][ T4829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.982461][ T4829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.985480][ T4829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.999842][ T4829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.068027][ T4847] Bluetooth: hci3: command tx timeout [ 41.068071][ T4847] Bluetooth: hci1: command tx timeout [ 41.068087][ T4847] Bluetooth: hci2: command tx timeout [ 41.068100][ T4847] Bluetooth: hci5: command tx timeout [ 41.068111][ T4847] Bluetooth: hci4: command tx timeout [ 41.086430][ T4829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.089673][ T4829] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.127732][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.127777][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.128279][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.128298][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.340277][ T4829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.364460][ T4829] veth0_vlan: entered promiscuous mode [ 41.368586][ T4829] veth1_vlan: entered promiscuous mode [ 41.390284][ T4829] veth0_macvtap: entered promiscuous mode [ 41.392545][ T4829] veth1_macvtap: entered promiscuous mode [ 41.398620][ T4829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.406121][ T4829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.410958][ T879] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.411038][ T879] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.411066][ T879] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.411085][ T879] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.452526][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.452552][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.473801][ T879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.473830][ T879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.145668][ T50] Bluetooth: hci4: command tx timeout [ 43.145720][ T50] Bluetooth: hci5: command tx timeout [ 43.145748][ T50] Bluetooth: hci2: command tx timeout [ 43.145766][ T50] Bluetooth: hci1: command tx timeout [ 43.145878][ T50] Bluetooth: hci3: command tx timeout [ 44.212152][ T5129] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) 1970/01/01 00:00:44 executed programs: 31 [ 44.937872][ T5138] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 44.938082][ T5140] ================================================================== [ 44.938093][ T5140] BUG: KASAN: slab-use-after-free in dvb_device_open+0xd0/0x254 [ 44.938115][ T5140] Read of size 8 at addr ffff0000cc116818 by task syz.1.38/5140 [ 44.938125][ T5140] [ 44.938131][ T5140] CPU: 1 UID: 0 PID: 5140 Comm: syz.1.38 Not tainted syzkaller #0 PREEMPT [ 44.938141][ T5140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 44.938146][ T5140] Call trace: [ 44.938149][ T5140] show_stack+0x2c/0x3c (C) [ 44.938166][ T5140] __dump_stack+0x30/0x40 [ 44.938176][ T5140] dump_stack_lvl+0xd8/0x12c [ 44.938186][ T5140] print_address_description+0xb0/0x238 [ 44.938194][ T5140] print_report+0x68/0x84 [ 44.938201][ T5140] kasan_report+0x8c/0xc4 [ 44.938210][ T5140] __asan_report_load8_noabort+0x20/0x2c [ 44.938220][ T5140] dvb_device_open+0xd0/0x254 [ 44.938226][ T5140] chrdev_open+0x398/0x3e8 [ 44.938235][ T5140] do_dentry_open+0x5c4/0xfc0 [ 44.938244][ T5140] vfs_open+0x44/0x2dc [ 44.938253][ T5140] path_openat+0x21fc/0x2a60 [ 44.938261][ T5140] do_file_open+0x1c8/0x2e8 [ 44.938269][ T5140] do_sys_openat2+0x114/0x1e8 [ 44.938278][ T5140] do_sys_open+0xb0/0xe0 [ 44.938286][ T5140] __arm64_sys_openat+0xa0/0xbc [ 44.938296][ T5140] invoke_syscall+0x98/0x244 [ 44.938305][ T5140] el0_svc_common+0xec/0x23c [ 44.938314][ T5140] do_el0_svc+0x4c/0x5c [ 44.938323][ T5140] el0_svc+0x64/0x260 [ 44.938333][ T5140] el0t_64_sync_handler+0x48/0x148 [ 44.938342][ T5140] el0t_64_sync+0x198/0x19c [ 44.938350][ T5140] [ 44.938351][ T5140] Allocated by task 1: [ 44.938355][ T5140] kasan_save_track+0x40/0x78 [ 44.938362][ T5140] kasan_save_alloc_info+0x44/0x54 [ 44.938370][ T5140] __kasan_kmalloc+0x9c/0xb4 [ 44.938376][ T5140] __kmalloc_cache_noprof+0x2e8/0x5ec [ 44.938383][ T5140] dvb_register_device+0x1a4/0x16e0 [ 44.938392][ T5140] dvb_register_frontend+0x474/0x6d0 [ 44.938399][ T5140] vidtv_bridge_probe+0x5a4/0xa58 [ 44.938407][ T5140] platform_probe+0x100/0x1a4 [ 44.938414][ T5140] really_probe+0x29c/0x800 [ 44.938421][ T5140] __driver_probe_device+0x1e0/0x350 [ 44.938428][ T5140] driver_probe_device+0x6c/0x19c [ 44.938436][ T5140] __driver_attach+0x168/0x384 [ 44.938443][ T5140] bus_for_each_dev+0x128/0x1b4 [ 44.938449][ T5140] driver_attach+0x50/0x60 [ 44.938456][ T5140] bus_add_driver+0x208/0x500 [ 44.938462][ T5140] driver_register+0x220/0x310 [ 44.938470][ T5140] __platform_driver_register+0x90/0xa4 [ 44.938478][ T5140] vidtv_bridge_init+0x4c/0x74 [ 44.938488][ T5140] do_one_initcall+0x274/0xc38 [ 44.938496][ T5140] do_initcall_level+0x12c/0x1c4 [ 44.938504][ T5140] do_initcalls+0x70/0xd0 [ 44.938510][ T5140] do_basic_setup+0x7c/0x90 [ 44.938516][ T5140] kernel_init_freeable+0x268/0x3a8 [ 44.938523][ T5140] kernel_init+0x24/0x1dc [ 44.938528][ T5140] ret_from_fork+0x10/0x20 [ 44.938533][ T5140] [ 44.938535][ T5140] Freed by task 5138: [ 44.938538][ T5140] kasan_save_track+0x40/0x78 [ 44.938545][ T5140] kasan_save_free_info+0x58/0x70 [ 44.938552][ T5140] __kasan_slab_free+0x74/0xa4 [ 44.938559][ T5140] kfree+0x188/0x690 [ 44.938564][ T5140] dvb_device_put+0x64/0xd0 [ 44.938572][ T5140] dvb_device_open+0x23c/0x254 [ 44.938577][ T5140] chrdev_open+0x398/0x3e8 [ 44.938584][ T5140] do_dentry_open+0x5c4/0xfc0 [ 44.938591][ T5140] vfs_open+0x44/0x2dc [ 44.938599][ T5140] path_openat+0x21fc/0x2a60 [ 44.938605][ T5140] do_file_open+0x1c8/0x2e8 [ 44.938611][ T5140] do_sys_openat2+0x114/0x1e8 [ 44.938618][ T5140] do_sys_open+0xb0/0xe0 [ 44.938626][ T5140] __arm64_sys_openat+0xa0/0xbc [ 44.938634][ T5140] invoke_syscall+0x98/0x244 [ 44.938641][ T5140] el0_svc_common+0xec/0x23c [ 44.938649][ T5140] do_el0_svc+0x4c/0x5c [ 44.938659][ T5140] el0_svc+0x64/0x260 [ 44.938670][ T5140] el0t_64_sync_handler+0x48/0x148 [ 44.938677][ T5140] el0t_64_sync+0x198/0x19c [ 44.938682][ T5140] [ 44.938684][ T5140] The buggy address belongs to the object at ffff0000cc116800 [ 44.938684][ T5140] which belongs to the cache kmalloc-256 of size 256 [ 44.938690][ T5140] The buggy address is located 24 bytes inside of [ 44.938690][ T5140] freed 256-byte region [ffff0000cc116800, ffff0000cc116900) [ 44.938697][ T5140] [ 44.938698][ T5140] The buggy address belongs to the physical page: [ 44.938702][ T5140] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10c116 [ 44.938709][ T5140] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 44.938715][ T5140] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 44.938723][ T5140] page_type: f5(slab) [ 44.938730][ T5140] raw: 05ffc00000000040 ffff0000c0001b40 dead000000000100 dead000000000122 [ 44.938735][ T5140] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 44.938741][ T5140] head: 05ffc00000000040 ffff0000c0001b40 dead000000000100 dead000000000122 [ 44.938746][ T5140] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 44.938752][ T5140] head: 05ffc00000000001 fffffdffc3304581 00000000ffffffff 00000000ffffffff [ 44.938757][ T5140] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 44.938760][ T5140] page dumped because: kasan: bad access detected [ 44.938763][ T5140] [ 44.938765][ T5140] Memory state around the buggy address: [ 44.938769][ T5140] ffff0000cc116700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 44.938773][ T5140] ffff0000cc116780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 44.938777][ T5140] >ffff0000cc116800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.938780][ T5140] ^ [ 44.938784][ T5140] ffff0000cc116880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.938788][ T5140] ffff0000cc116900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 44.938791][ T5140] ================================================================== [ 44.938813][ T5140] Disabling lock debugging due to kernel taint [ 44.938822][ T5140] ------------[ cut here ]------------ [ 44.938829][ T5140] refcount_t: addition on 0; use-after-free. [ 44.938940][ T5140] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x134/0x1f8, CPU#1: syz.1.38/5140 [ 45.031611][ T5140] Modules linked in: [ 45.032219][ T5140] CPU: 1 UID: 0 PID: 5140 Comm: syz.1.38 Tainted: G B syzkaller #0 PREEMPT [ 45.033796][ T5140] Tainted: [B]=BAD_PAGE [ 45.034522][ T5140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 45.036124][ T5140] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 45.037285][ T5140] pc : refcount_warn_saturate+0x134/0x1f8 [ 45.038228][ T5140] lr : refcount_warn_saturate+0x134/0x1f8 [ 45.039109][ T5140] sp : ffff800097b57640 [ 45.039768][ T5140] x29: ffff800097b57640 x28: dfff800000000000 x27: 1fffe00018cfb879 [ 45.041019][ T5140] x26: dfff800000000000 x25: ffff700012f6aedc x24: dfff800000000000 [ 45.042281][ T5140] x23: ffff80008742d268 x22: ffff0000cc1dd800 x21: ffff0000cc116800 [ 45.043562][ T5140] x20: ffff0000cc116810 x19: ffff80008a117000 x18: 00000000ffffffff [ 45.044768][ T5140] x17: 3d3d3d3d3d3d3d3d x16: 3d3d3d3d3d3d3d3d x15: 3d3d3d3d3d3d3d3d [ 45.046026][ T5140] x14: 3d3d3d3d3d3d3d3d x13: 0000000000000001 x12: 0000000000000000 [ 45.047278][ T5140] x11: 0000000000000000 x10: 0000000000000002 x9 : 29107e9008c69e00 [ 45.048569][ T5140] x8 : 29107e9008c69e00 x7 : 0000000000000000 x6 : ffff80008048ce54 [ 45.049760][ T5140] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f7014 [ 45.051055][ T5140] x2 : 0000000100000000 x1 : ffff0000c87a1d40 x0 : 0000000000000000 [ 45.052302][ T5140] Call trace: [ 45.052779][ T5140] refcount_warn_saturate+0x134/0x1f8 (P) [ 45.053707][ T5140] dvb_device_get+0x9c/0xc0 [ 45.054476][ T5140] dvb_device_open+0x100/0x254 [ 45.055179][ T5140] chrdev_open+0x398/0x3e8 [ 45.055887][ T5140] do_dentry_open+0x5c4/0xfc0 [ 45.056647][ T5140] vfs_open+0x44/0x2dc [ 45.057283][ T5140] path_openat+0x21fc/0x2a60 [ 45.057988][ T5140] do_file_open+0x1c8/0x2e8 [ 45.058717][ T5140] do_sys_openat2+0x114/0x1e8 [ 45.059434][ T5140] do_sys_open+0xb0/0xe0 [ 45.060151][ T5140] __arm64_sys_openat+0xa0/0xbc [ 45.060956][ T5140] invoke_syscall+0x98/0x244 [ 45.061682][ T5140] el0_svc_common+0xec/0x23c [ 45.062445][ T5140] do_el0_svc+0x4c/0x5c [ 45.063120][ T5140] el0_svc+0x64/0x260 [ 45.063723][ T5140] el0t_64_sync_handler+0x48/0x148 [ 45.064544][ T5140] el0t_64_sync+0x198/0x19c [ 45.065266][ T5140] irq event stamp: 99 [ 45.065915][ T5140] hardirqs last enabled at (99): [] arm64_exit_to_kernel_mode+0x80/0x94 [ 45.067464][ T5140] hardirqs last disabled at (98): [] el1_interrupt+0x28/0x60 [ 45.068911][ T5140] softirqs last enabled at (64): [] do_sve_acc+0x32c/0x4b8 [ 45.070260][ T5140] softirqs last disabled at (62): [] do_sve_acc+0x10c/0x4b8 [ 45.071674][ T5140] ---[ end trace 0000000000000000 ]--- [ 45. ** replaying previous printk message ** [ 45.101336][ T5134] ------------[ cut here ]------------ [ 45.101359][ T5134] refcount_t: underflow; use-after-free. [ 45.101470][ T5134] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0x154/0x1f8, CPU#1: syz.1.38/5134 [ 45.105218][ T5134] Modules linked in: [ 45.105864][ T5134] CPU: 1 UID: 0 PID: 5134 Comm: syz.1.38 Tainted: G B W syzkaller #0 PREEMPT [ 45.107607][ T5134] Tainted: [B]=BAD_PAGE, [W]=WARN [ 45.108437][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 45.110108][ T5134] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 45.111495][ T5134] pc : refcount_warn_saturate+0x154/0x1f8 [ 45.112366][ T5134] lr : refcount_warn_saturate+0x154/0x1f8 [ 45.113221][ T5134] sp : ffff800097c77bb0 [ 45.113845][ T5134] x29: ffff800097c77bb0 x28: dfff800000000000 x27: 000000000408001f [ 45.115195][ T5134] x26: 00000000ffff9c6b x25: ffff0000cb768800 x24: ffff0000cc116800 [ 45.116463][ T5134] x23: dfff800000000000 x22: ffff0000cb768b10 x21: 00000000c0000000 [ 45.117696][ T5134] x20: ffff0000cc116810 x19: ffff80008a117000 x18: 0000000000000000 [ 45.119021][ T5134] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 45.120304][ T5134] x14: 00000000868cce50 x13: 0000000000000001 x12: 0000000000000000 [ 45.121667][ T5134] x11: 0000000000000000 x10: 0000000000000002 x9 : 22ee5a3f87613f00 [ 45.122952][ T5134] x8 : 22ee5a3f87613f00 x7 : 0000000000000000 x6 : ffff80008048ce54 [ 45.124133][ T5134] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f7014 [ 45.125407][ T5134] x2 : 0000000100000000 x1 : ffff0000c8128000 x0 : 0000000000000000 [ 45.126678][ T5134] Call trace: [ 45.127215][ T5134] refcount_warn_saturate+0x154/0x1f8 (P) [ 45.128111][ T5134] dvb_device_put+0xac/0xd0 [ 45.128776][ T5134] dvb_generic_release+0xec/0x158 [ 45.129545][ T5134] dvb_frontend_release+0x114/0x414 [ 45.130388][ T5134] __fput+0x338/0x74c [ 45.130980][ T5134] ____fput+0x20/0x30 [ 45.131536][ T5134] task_work_run+0x1cc/0x25c [ 45.132209][ T5134] exit_to_user_mode_loop+0x10c/0x17c [ 45.133054][ T5134] el0_svc+0x18c/0x260 [ 45.133687][ T5134] el0t_64_sync_handler+0x48/0x148 [ 45.134558][ T5134] el0t_64_sync+0x198/0x19c [ 45.135225][ T5134] irq event stamp: 16632 [ 45.135912][ T5134] hardirqs last enabled at (16631): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 45.137569][ T5134] hardirqs last disabled at (16632): [] __schedule+0x2f8/0x2d80 [ 45.139005][ T5134] softirqs last enabled at (16620): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 45.140708][ T5134] softirqs last disabled at (16618): [] fpsimd_restore_current_state+0x44/0x9c8 [ 45.142310][ T5134] ---[ end trace 0000000000000000 ]--- [ 45 ** replaying previous printk message ** [ 45.194460][ T5149] ------------[ cut here ]------------ [ 45.194481][ T5149] refcount_t: saturated; leaking memory. [ 45.194599][ T5149] WARNING: lib/refcount.c:22 at refcount_warn_saturate+0x1b4/0x1f8, CPU#1: syz.0.39/5149 [ 45.198696][ T5149] Modules linked in: [ 45.199300][ T5149] CPU: 1 UID: 0 PID: 5149 Comm: syz.0.39 Tainted: G B W syzkaller #0 PREEMPT [ 45.200826][ T5149] Tainted: [B]=BAD_PAGE, [W]=WARN [ 45.201637][ T5149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 45.203296][ T5149] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 45.204498][ T5149] pc : refcount_warn_saturate+0x1b4/0x1f8 [ 45.205377][ T5149] lr : refcount_warn_saturate+0x1b4/0x1f8 [ 45.206271][ T5149] sp : ffff800097b97640 [ 45.206931][ T5149] x29: ffff800097b97640 x28: dfff800000000000 x27: 1fffe0001ac21dc9 [ 45.208302][ T5149] x26: dfff800000000000 x25: ffff700012f72edc x24: dfff800000000000 [ 45.209680][ T5149] x23: ffff80008742d268 x22: ffff0000cc1dd800 x21: 000000007ffffffe [ 45.210921][ T5149] x20: ffff0000cc116810 x19: ffff80008a117000 x18: 0000000000000000 [ 45.212151][ T5149] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 45.213322][ T5149] x14: 00000000ffff8000 x13: 0000000000000001 x12: 0000000000000000 [ 45.214655][ T5149] x11: 0000000000000000 x10: 0000000000000002 x9 : d951456626bf7600 [ 45.215896][ T5149] x8 : d951456626bf7600 x7 : 0000000000000000 x6 : ffff80008048ce54 [ 45.217113][ T5149] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f7014 [ 45.218390][ T5149] x2 : 0000000100000000 x1 : ffff0000c9d6ba80 x0 : 0000000000000000 [ 45.219656][ T5149] Call trace: [ 45.220214][ T5149] refcount_warn_saturate+0x1b4/0x1f8 (P) [ 45.221121][ T5149] dvb_device_get+0x9c/0xc0 [ 45.221853][ T5149] dvb_device_open+0x100/0x254 [ 45.222633][ T5149] chrdev_open+0x398/0x3e8 [ 45.223348][ T5149] do_dentry_open+0x5c4/0xfc0 [ 45.224059][ T5149] vfs_open+0x44/0x2dc [ 45.224740][ T5149] path_openat+0x21fc/0x2a60 [ 45.225519][ T5149] do_file_open+0x1c8/0x2e8 [ 45.226289][ T5149] do_sys_openat2+0x114/0x1e8 [ 45.227039][ T5149] do_sys_open+0xb0/0xe0 [ 45.227699][ T5149] __arm64_sys_openat+0xa0/0xbc [ 45.228509][ T5149] invoke_syscall+0x98/0x244 [ 45.229268][ T5149] el0_svc_common+0xec/0x23c [ 45.230002][ T5149] do_el0_svc+0x4c/0x5c [ 45.230632][ T5149] el0_svc+0x64/0x260 [ 45.231249][ T5149] el0t_64_sync_handler+0x48/0x148 [ 45.232027][ T5149] el0t_64_sync+0x198/0x19c [ 45.232796][ T5149] irq event stamp: 0 [ 45.233465][ T5149] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 45.234591][ T5149] hardirqs last disabled at (0): [] copy_process+0x1384/0x32e8 [ 45.236068][ T5149] softirqs last enabled at (0): [] copy_process+0x13a4/0x32e8 [ 45.237536][ T5149] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 45.238687][ T5149] ---[ end trace 0000000000000000 ]--- 1970/01/01 00:00:49 executed programs: 48 [ 49.750993][ T5216] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) 1970/01/01 00:00:54 executed programs: 66