Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. 1970/01/01 00:00:29 parsed 1 programs 1970/01/01 00:00:29 serving rpc on tcp://37869 [ 30.481465][ T4717] cgroup: Unknown subsys name 'net' [ 30.631739][ T4717] cgroup: Unknown subsys name 'cpuset' [ 30.633124][ T4717] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.777045][ T4717] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 33.332931][ T4724] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.726189][ T4740] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.726221][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.726277][ T4740] bridge_slave_0: entered allmulticast mode [ 33.726986][ T4740] bridge_slave_0: entered promiscuous mode [ 33.729695][ T4740] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.729716][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.729764][ T4740] bridge_slave_1: entered allmulticast mode [ 33.732315][ T4740] bridge_slave_1: entered promiscuous mode [ 33.748055][ T4740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.748960][ T4740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.755380][ T4740] team0: Port device team_slave_0 added [ 33.756033][ T4740] team0: Port device team_slave_1 added [ 33.762016][ T4740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.762024][ T4740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.762036][ T4740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.762687][ T4740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.762694][ T4740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.762708][ T4740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.772114][ T4740] hsr_slave_0: entered promiscuous mode [ 33.772391][ T4740] hsr_slave_1: entered promiscuous mode [ 33.814964][ T4740] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.816800][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.817212][ T4740] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.818372][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.818756][ T4740] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.819610][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.819931][ T4740] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.821414][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.830920][ T4740] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.830951][ T4740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.831082][ T4740] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.831109][ T4740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.848004][ T4740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.852438][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.853528][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.856845][ T4740] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.864859][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.864886][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.865206][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.865223][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.874673][ T4740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.874688][ T4740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.953771][ T4740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.965402][ T4740] veth0_vlan: entered promiscuous mode [ 33.968442][ T4740] veth1_vlan: entered promiscuous mode [ 33.975366][ T4740] veth0_macvtap: entered promiscuous mode [ 33.976370][ T4740] veth1_macvtap: entered promiscuous mode [ 33.981080][ T4740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.982215][ T4740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.986661][ T2936] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.986798][ T2936] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.987036][ T2936] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.000275][ T2936] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.062587][ T4729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.062829][ T4729] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.063009][ T4729] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.063665][ T4729] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.063896][ T4729] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.085912][ T2936] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.122841][ T2936] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.197595][ T2936] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.246060][ T2936] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.605082][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.605094][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.614825][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.614836][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:00:34 executed programs: 0 [ 34.827285][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.827572][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.827730][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.828213][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.828443][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.960903][ T4819] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.960960][ T4819] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.961019][ T4819] bridge_slave_0: entered allmulticast mode [ 34.961431][ T4819] bridge_slave_0: entered promiscuous mode [ 34.962489][ T4819] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.962545][ T4819] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.962641][ T4819] bridge_slave_1: entered allmulticast mode [ 34.963043][ T4819] bridge_slave_1: entered promiscuous mode [ 34.972287][ T4819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.973384][ T4819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.979680][ T4819] team0: Port device team_slave_0 added [ 34.980531][ T4819] team0: Port device team_slave_1 added [ 34.986444][ T4819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.986453][ T4819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.986466][ T4819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.987018][ T4819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.987025][ T4819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.987038][ T4819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.996254][ T4819] hsr_slave_0: entered promiscuous mode [ 34.996552][ T4819] hsr_slave_1: entered promiscuous mode [ 34.996749][ T4819] debugfs: 'hsr0' already exists in 'hsr' [ 34.996788][ T4819] Cannot create hsr debugfs directory [ 36.890480][ T51] Bluetooth: hci0: command tx timeout [ 37.089734][ T2936] bridge_slave_1: left allmulticast mode [ 37.089758][ T2936] bridge_slave_1: left promiscuous mode [ 37.089970][ T2936] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.095497][ T2936] bridge_slave_0: left allmulticast mode [ 37.095514][ T2936] bridge_slave_0: left promiscuous mode [ 37.095598][ T2936] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.153426][ T2936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.163383][ T2936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.201022][ T2936] bond0 (unregistering): Released all slaves [ 37.254404][ T2936] hsr_slave_0: left promiscuous mode [ 37.254719][ T2936] hsr_slave_1: left promiscuous mode [ 37.255019][ T2936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.255033][ T2936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.255415][ T2936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.255424][ T2936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.258994][ T2936] veth1_macvtap: left promiscuous mode [ 37.259020][ T2936] veth0_macvtap: left promiscuous mode [ 37.259078][ T2936] veth1_vlan: left promiscuous mode [ 37.259116][ T2936] veth0_vlan: left promiscuous mode [ 37.361487][ T2936] team0 (unregistering): Port device team_slave_1 removed [ 37.366333][ T2936] team0 (unregistering): Port device team_slave_0 removed [ 37.412186][ T4396] 8021q: adding VLAN 0 to HW filter on device eth0 [ 37.629715][ T4819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.638211][ T4819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.638970][ T4819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.639794][ T4819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.640049][ T4819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.647068][ T4819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.647551][ T4819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.648534][ T4819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.849139][ T4819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.857506][ T4819] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.864907][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.864934][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.866779][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.866808][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.002519][ T4819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.014059][ T4819] veth0_vlan: entered promiscuous mode [ 38.017037][ T4819] veth1_vlan: entered promiscuous mode [ 38.022424][ T4819] veth0_macvtap: entered promiscuous mode [ 38.024902][ T4819] veth1_macvtap: entered promiscuous mode [ 38.028163][ T4819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.029971][ T4819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.131824][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.131840][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.159657][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.159673][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.162981][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.163073][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.163094][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.163109][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.970166][ T51] Bluetooth: hci0: command tx timeout 1970/01/01 00:00:39 executed programs: 99 [ 41.050197][ T51] Bluetooth: hci0: command tx timeout [ 43.130681][ T51] Bluetooth: hci0: command tx timeout 1970/01/01 00:00:44 executed programs: 399 [ 48.193821][ T4729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.194096][ T4729] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.194269][ T4729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.194566][ T4729] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.194765][ T4729] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.325447][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.325527][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.325573][ T6112] bridge_slave_0: entered allmulticast mode [ 48.325974][ T6112] bridge_slave_0: entered promiscuous mode [ 48.330862][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.330884][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.330967][ T6112] bridge_slave_1: entered allmulticast mode [ 48.331361][ T6112] bridge_slave_1: entered promiscuous mode [ 48.338932][ T6112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.339821][ T6112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.346058][ T6112] team0: Port device team_slave_0 added [ 48.346759][ T6112] team0: Port device team_slave_1 added [ 48.352828][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.352837][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.352850][ T6112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.353505][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.353511][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.353523][ T6112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.363028][ T6112] hsr_slave_0: entered promiscuous mode [ 48.363284][ T6112] hsr_slave_1: entered promiscuous mode [ 48.424875][ T6112] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.483211][ T6112] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.512916][ T6112] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.544042][ T6112] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.627489][ T58] bridge_slave_1: left allmulticast mode [ 48.627509][ T58] bridge_slave_1: left promiscuous mode [ 48.627587][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.628607][ T58] bridge_slave_0: left allmulticast mode [ 48.628618][ T58] bridge_slave_0: left promiscuous mode [ 48.628673][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.685488][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.693155][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.730871][ T58] bond0 (unregistering): Released all slaves [ 48.743224][ T6112] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.744403][ T6112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.744718][ T6112] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.745664][ T6112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.746047][ T6112] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.747073][ T6112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.747407][ T6112] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.748210][ T6112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.778468][ T6112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.827622][ T6112] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.829328][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.829351][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.835283][ T2936] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.835308][ T2936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.958582][ T6112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.971117][ T6112] veth0_vlan: entered promiscuous mode [ 49.024542][ T58] hsr_slave_0: left promiscuous mode [ 49.024786][ T58] hsr_slave_1: left promiscuous mode [ 49.025010][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.025021][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.025285][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.025293][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.027537][ T58] veth1_macvtap: left promiscuous mode [ 49.027568][ T58] veth0_macvtap: left promiscuous mode [ 49.027610][ T58] veth1_vlan: left promiscuous mode [ 49.027640][ T58] veth0_vlan: left promiscuous mode [ 49.109617][ T58] team0 (unregistering): Port device team_slave_1 removed [ 49.114046][ T58] team0 (unregistering): Port device team_slave_0 removed [ 49.156072][ T6112] veth1_vlan: entered promiscuous mode [ 49.173933][ T6112] veth0_macvtap: entered promiscuous mode [ 49.174991][ T6112] veth1_macvtap: entered promiscuous mode [ 49.178420][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.182546][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.201044][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.201153][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.201236][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.201250][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.210787][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.210800][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.222097][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.222108][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:00:49 executed programs: 633 [ 50.260176][ T51] Bluetooth: hci1: command tx timeout [ 52.330930][ T51] Bluetooth: hci1: command tx timeout [ 54.420321][ T51] Bluetooth: hci1: command tx timeout 1970/01/01 00:00:54 executed programs: 906 [ 56.500205][ T51] Bluetooth: hci1: command tx timeout 1970/01/01 00:00:59 executed programs: 1185 [ 60.204128][ T4729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.204514][ T4729] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.204681][ T4729] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.204975][ T4729] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.205158][ T4729] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.335030][ T7347] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.335098][ T7347] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.335179][ T7347] bridge_slave_0: entered allmulticast mode [ 60.335570][ T7347] bridge_slave_0: entered promiscuous mode [ 60.336376][ T7347] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.336410][ T7347] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.336453][ T7347] bridge_slave_1: entered allmulticast mode [ 60.336835][ T7347] bridge_slave_1: entered promiscuous mode [ 60.343274][ T7347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.344113][ T7347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.350863][ T7347] team0: Port device team_slave_0 added [ 60.351542][ T7347] team0: Port device team_slave_1 added [ 60.356841][ T7347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.356850][ T7347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.356863][ T7347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.357351][ T7347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.357358][ T7347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.357369][ T7347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.367038][ T7347] hsr_slave_0: entered promiscuous mode [ 60.367300][ T7347] hsr_slave_1: entered promiscuous mode [ 60.367464][ T7347] debugfs: 'hsr0' already exists in 'hsr' [ 60.367481][ T7347] Cannot create hsr debugfs directory [ 60.405588][ T7347] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.473620][ T7347] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.543004][ T7347] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.573787][ T7347] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.684301][ T58] bridge_slave_1: left allmulticast mode [ 60.684322][ T58] bridge_slave_1: left promiscuous mode [ 60.684401][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.685646][ T58] bridge_slave_0: left allmulticast mode [ 60.685658][ T58] bridge_slave_0: left promiscuous mode [ 60.685718][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.737101][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.743118][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.744260][ T58] bond0 (unregistering): Released all slaves [ 60.763189][ T7347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.764155][ T7347] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.764550][ T7347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.765625][ T7347] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.765962][ T7347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.766802][ T7347] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.767128][ T7347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.767891][ T7347] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.851534][ T7347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.854919][ T7347] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.856977][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.857002][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.858842][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.858866][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.965474][ T58] hsr_slave_0: left promiscuous mode [ 60.965721][ T58] hsr_slave_1: left promiscuous mode [ 60.965981][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.965991][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.966263][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.966273][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.968869][ T58] veth1_macvtap: left promiscuous mode [ 60.968896][ T58] veth0_macvtap: left promiscuous mode [ 60.968937][ T58] veth1_vlan: left promiscuous mode [ 60.968967][ T58] veth0_vlan: left promiscuous mode [ 61.052585][ T58] team0 (unregistering): Port device team_slave_1 removed [ 61.056506][ T58] team0 (unregistering): Port device team_slave_0 removed [ 61.122366][ T7347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.134609][ T7347] veth0_vlan: entered promiscuous mode [ 61.136306][ T7347] veth1_vlan: entered promiscuous mode [ 61.144723][ T7347] veth0_macvtap: entered promiscuous mode [ 61.145778][ T7347] veth1_macvtap: entered promiscuous mode [ 61.156563][ T7347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.158480][ T7347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.160005][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.160070][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.162836][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.163196][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.186972][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.186984][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.194214][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.194225][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.250232][ T51] Bluetooth: hci0: command tx timeout [ 64.330186][ T51] Bluetooth: hci0: command tx timeout [ 64.492244][ T26] cfg80211: failed to load regulatory.db [ 64.493077][ T1592] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.493110][ T1592] ieee802154 phy1 wpan1: encryption failed: -22 1970/01/01 00:01:04 executed programs: 1410 [ 66.410241][ T51] Bluetooth: hci0: command tx timeout [ 67.714978][ T8115] ================================================================== [ 67.714989][ T8115] BUG: KASAN: slab-use-after-free in dvb_device_open+0xd0/0x254 [ 67.715007][ T8115] Read of size 8 at addr ffff0000cbb64218 by task syz.0.1582/8115 [ 67.715014][ T8115] [ 67.715019][ T8115] CPU: 0 UID: 0 PID: 8115 Comm: syz.0.1582 Not tainted syzkaller #0 PREEMPT [ 67.715027][ T8115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.715032][ T8115] Call trace: [ 67.715034][ T8115] show_stack+0x2c/0x3c (C) [ 67.715047][ T8115] __dump_stack+0x30/0x40 [ 67.715056][ T8115] dump_stack_lvl+0xd8/0x12c [ 67.715065][ T8115] print_address_description+0xb0/0x238 [ 67.715073][ T8115] print_report+0x68/0x84 [ 67.715079][ T8115] kasan_report+0x8c/0xc4 [ 67.715088][ T8115] __asan_report_load8_noabort+0x20/0x2c [ 67.715097][ T8115] dvb_device_open+0xd0/0x254 [ 67.715105][ T8115] chrdev_open+0x398/0x3e8 [ 67.715114][ T8115] do_dentry_open+0x5c4/0xfbc [ 67.715123][ T8115] vfs_open+0x44/0x2dc [ 67.715131][ T8115] path_openat+0x1084/0x18f0 [ 67.715139][ T8115] do_file_open+0x1c8/0x2e8 [ 67.715147][ T8115] do_sys_openat2+0x114/0x1e8 [ 67.715156][ T8115] do_sys_open+0xb0/0xe0 [ 67.715164][ T8115] __arm64_sys_openat+0xa8/0xc4 [ 67.715173][ T8115] invoke_syscall+0x98/0x244 [ 67.715183][ T8115] el0_svc_common+0xec/0x23c [ 67.715192][ T8115] do_el0_svc+0x4c/0x5c [ 67.715201][ T8115] el0_svc+0x60/0x1d8 [ 67.715211][ T8115] el0t_64_sync_handler+0x44/0x104 [ 67.715219][ T8115] el0t_64_sync+0x198/0x19c [ 67.715227][ T8115] [ 67.715229][ T8115] Allocated by task 1: [ 67.715232][ T8115] kasan_save_track+0x40/0x78 [ 67.715238][ T8115] kasan_save_alloc_info+0x40/0x50 [ 67.715245][ T8115] __kasan_kmalloc+0x9c/0xb4 [ 67.715251][ T8115] __kmalloc_cache_noprof+0x2f4/0x5fc [ 67.715257][ T8115] dvb_register_device+0x1a4/0x16e0 [ 67.715264][ T8115] dvb_register_frontend+0x474/0x6d0 [ 67.715273][ T8115] vidtv_bridge_probe+0x5a4/0xa58 [ 67.715280][ T8115] platform_probe+0x100/0x1a4 [ 67.715287][ T8115] really_probe+0x29c/0x800 [ 67.715292][ T8115] __driver_probe_device+0x1e0/0x350 [ 67.715301][ T8115] driver_probe_device+0x6c/0x19c [ 67.715306][ T8115] __driver_attach+0x168/0x384 [ 67.715314][ T8115] bus_for_each_dev+0x128/0x1b4 [ 67.715322][ T8115] driver_attach+0x50/0x60 [ 67.715330][ T8115] bus_add_driver+0x208/0x500 [ 67.715337][ T8115] driver_register+0x220/0x310 [ 67.715342][ T8115] __platform_driver_register+0x90/0xa4 [ 67.715348][ T8115] vidtv_bridge_init+0x4c/0x74 [ 67.715357][ T8115] do_one_initcall+0x274/0x9f8 [ 67.715365][ T8115] do_initcall_level+0x12c/0x1c4 [ 67.715371][ T8115] do_initcalls+0x70/0xd0 [ 67.715376][ T8115] do_basic_setup+0x7c/0x90 [ 67.715381][ T8115] kernel_init_freeable+0x258/0x398 [ 67.715386][ T8115] kernel_init+0x28/0x1e0 [ 67.715391][ T8115] ret_from_fork+0x10/0x20 [ 67.715396][ T8115] [ 67.715398][ T8115] Freed by task 8114: [ 67.715401][ T8115] kasan_save_track+0x40/0x78 [ 67.715406][ T8115] kasan_save_free_info+0x54/0x6c [ 67.715413][ T8115] __kasan_slab_free+0x74/0xa4 [ 67.715419][ T8115] kfree+0x188/0x658 [ 67.715427][ T8115] dvb_device_put+0x64/0xd0 [ 67.715434][ T8115] dvb_device_open+0x23c/0x254 [ 67.715440][ T8115] chrdev_open+0x398/0x3e8 [ 67.715447][ T8115] do_dentry_open+0x5c4/0xfbc [ 67.715454][ T8115] vfs_open+0x44/0x2dc [ 67.715468][ T8115] path_openat+0x1084/0x18f0 [ 67.715475][ T8115] do_file_open+0x1c8/0x2e8 [ 67.715482][ T8115] do_sys_openat2+0x114/0x1e8 [ 67.715491][ T8115] do_sys_open+0xb0/0xe0 [ 67.715499][ T8115] __arm64_sys_openat+0xa8/0xc4 [ 67.715507][ T8115] invoke_syscall+0x98/0x244 [ 67.715515][ T8115] el0_svc_common+0xec/0x23c [ 67.715523][ T8115] do_el0_svc+0x4c/0x5c [ 67.715530][ T8115] el0_svc+0x60/0x1d8 [ 67.715537][ T8115] el0t_64_sync_handler+0x44/0x104 [ 67.715544][ T8115] el0t_64_sync+0x198/0x19c [ 67.715550][ T8115] [ 67.715551][ T8115] The buggy address belongs to the object at ffff0000cbb64200 [ 67.715551][ T8115] which belongs to the cache kmalloc-256 of size 256 [ 67.715557][ T8115] The buggy address is located 24 bytes inside of [ 67.715557][ T8115] freed 256-byte region [ffff0000cbb64200, ffff0000cbb64300) [ 67.715564][ T8115] [ 67.715565][ T8115] The buggy address belongs to the physical page: [ 67.715569][ T8115] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10bb64 [ 67.715575][ T8115] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 67.715580][ T8115] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 67.715588][ T8115] page_type: f5(slab) [ 67.715594][ T8115] raw: 05ffc00000000040 ffff0000c0001b40 dead000000000100 dead000000000122 [ 67.715600][ T8115] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 67.715605][ T8115] head: 05ffc00000000040 ffff0000c0001b40 dead000000000100 dead000000000122 [ 67.715610][ T8115] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 67.715616][ T8115] head: 05ffc00000000001 fffffdffc32ed901 00000000ffffffff 00000000ffffffff [ 67.715621][ T8115] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 67.715624][ T8115] page dumped because: kasan: bad access detected [ 67.715627][ T8115] [ 67.715628][ T8115] Memory state around the buggy address: [ 67.715632][ T8115] ffff0000cbb64100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 67.715636][ T8115] ffff0000cbb64180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 67.715640][ T8115] >ffff0000cbb64200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.715643][ T8115] ^ [ 67.715647][ T8115] ffff0000cbb64280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.715651][ T8115] ffff0000cbb64300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 67.715654][ T8115] ================================================================== [ 67.715657][ T8115] Disabling lock debugging due to kernel taint [ 67.715661][ T8115] ------------[ cut here ]------------ [ 67.715664][ T8115] refcount_t: addition on 0; use-after-free. [ 67.715767][ T8115] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x134/0x1f8, CPU#0: syz.0.1582/8115 [ 67.822328][ T8115] Modules linked in: [ 67.823113][ T8115] CPU: 0 UID: 0 PID: 8115 Comm: syz.0.1582 Tainted: G B syzkaller #0 PREEMPT [ 67.825139][ T8115] Tainted: [B]=BAD_PAGE [ 67.825946][ T8115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.827936][ T8115] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 67.829447][ T8115] pc : refcount_warn_saturate+0x134/0x1f8 [ 67.830547][ T8115] lr : refcount_warn_saturate+0x134/0x1f8 [ 67.831658][ T8115] sp : ffff800098117700 [ 67.832469][ T8115] x29: ffff800098117700 x28: dfff800000000000 x27: 1fffe0001adc9009 [ 67.833988][ T8115] x26: dfff800000000000 x25: ffff700013022ef4 x24: dfff800000000000 [ 67.835510][ T8115] x23: ffff8000873e24e8 x22: ffff0000cbec9c00 x21: ffff0000cbb64200 [ 67.837016][ T8115] x20: ffff0000cbb64210 x19: ffff80008a0f0000 x18: ffff800125484000 [ 67.838528][ T8115] x17: 3d3d3d3d3d3d3d3d x16: 3d3d3d3d3d3d3d3d x15: 3d3d3d3d3d3d3d3d [ 67.840039][ T8115] x14: 0000000000000855 x13: 0000000000000001 x12: 0000000000000003 [ 67.841548][ T8115] x11: 0000000000000000 x10: 0000000000000002 x9 : d74692ac1c1b8900 [ 67.843051][ T8115] x8 : d74692ac1c1b8900 x7 : 0000000000000000 x6 : ffff800080483164 [ 67.844560][ T8115] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f3e60 [ 67.846067][ T8115] x2 : 0000000100000000 x1 : ffff0000e30fbb00 x0 : 0000000000000000 [ 67.847514][ T8115] Call trace: [ 67.848127][ T8115] refcount_warn_saturate+0x134/0x1f8 (P) [ 67.849147][ T8115] dvb_device_get+0x9c/0xc0 [ 67.849996][ T8115] dvb_device_open+0x100/0x254 [ 67.850906][ T8115] chrdev_open+0x398/0x3e8 [ 67.851739][ T8115] do_dentry_open+0x5c4/0xfbc [ 67.852633][ T8115] vfs_open+0x44/0x2dc [ 67.853419][ T8115] path_openat+0x1084/0x18f0 [ 67.854292][ T8115] do_file_open+0x1c8/0x2e8 [ 67.855156][ T8115] do_sys_openat2+0x114/0x1e8 [ 67.856053][ T8115] do_sys_open+0xb0/0xe0 [ 67.856827][ T8115] __arm64_sys_openat+0xa8/0xc4 [ 67.857709][ T8115] invoke_syscall+0x98/0x244 [ 67.858557][ T8115] el0_svc_common+0xec/0x23c [ 67.859427][ T8115] do_el0_svc+0x4c/0x5c [ 67.860218][ T8115] el0_svc+0x60/0x1d8 [ 67.860977][ T8115] el0t_64_sync_handler+0x44/0x104 [ 67.861935][ T8115] el0t_64_sync+0x198/0x19c [ 67.862782][ T8115] irq event stamp: 687 [ 67.863517][ T8115] hardirqs last enabled at (687): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 67.865438][ T8115] hardirqs last disabled at (686): [] _raw_spin_lock_irqsave+0x2c/0x7c [ 67.867270][ T8115] softirqs last enabled at (650): [] do_sve_acc+0x32c/0x4b8 [ 67.868905][ T8115] softirqs last disabled at (648): [] do_sve_acc+0x10c/0x4b8 [ 67.870570][ T8115] ---[ end trace 0000000000000000 ]--- [ 67.873441][ T8115] ------------[ cut here ]------------ [ 67.873448][ T8115] refcount_t: underflow; use-after-free. [ 67.873558][ T8115] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0x154/0x1f8, CPU#0: syz.0.1582/8115 [ 67.877592][ T8115] Modules linked in: [ 67.878354][ T8115] CPU: 0 UID: 0 PID: 8115 Comm: syz.0.1582 Tainted: G B W syzkaller #0 PREEMPT [ 67.880364][ T8115] Tainted: [B]=BAD_PAGE, [W]=WARN [ 67.881357][ T8115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.883362][ T8115] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 67.884951][ T8115] pc : refcount_warn_saturate+0x154/0x1f8 [ 67.886107][ T8115] lr : refcount_warn_saturate+0x154/0x1f8 [ 67.887249][ T8115] sp : ffff8000981175b0 [ 67.888044][ T8115] x29: ffff8000981175b0 x28: ffff0000ca28f800 x27: ffff0000cbb64200 [ 67.889660][ T8115] x26: ffff0000cbfaa308 x25: dfff800000000000 x24: ffff0000cb248180 [ 67.891252][ T8115] x23: 00000000fffffffc x22: 1fffe0001976c847 x21: 00000000c0000000 [ 67.892811][ T8115] x20: ffff0000cbb64210 x19: ffff80008a0f0000 x18: ffff800125484000 [ 67.894393][ T8115] x17: 3d3d3d3d3d3d3d3d x16: 3d3d3d3d3d3d3d3d x15: 3d3d3d3d3d3d3d3d [ 67.896001][ T8115] x14: 00000000000008a2 x13: 0000000000000001 x12: 0000000000000003 [ 67.897487][ T8115] x11: 0000000000000000 x10: 0000000000000002 x9 : d74692ac1c1b8900 [ 67.899021][ T8115] x8 : d74692ac1c1b8900 x7 : 0000000000000000 x6 : ffff800080483164 [ 67.900508][ T8115] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f3e60 [ 67.902021][ T8115] x2 : 0000000100000000 x1 : ffff0000e30fbb00 x0 : 0000000000000000 [ 67.903575][ T8115] Call trace: [ 67.904215][ T8115] refcount_warn_saturate+0x154/0x1f8 (P) [ 67.905341][ T8115] dvb_device_put+0xac/0xd0 [ 67.906200][ T8115] dvb_generic_release+0xec/0x158 [ 67.907157][ T8115] __dvb_frontend_open+0x5c4/0xa34 [ 67.908114][ T8115] dvb_frontend_open+0x19c/0x70c [ 67.909019][ T8115] dvb_device_open+0x1f8/0x254 [ 67.909935][ T8115] chrdev_open+0x398/0x3e8 [ 67.910790][ T8115] do_dentry_open+0x5c4/0xfbc [ 67.911670][ T8115] vfs_open+0x44/0x2dc [ 67.912445][ T8115] path_openat+0x1084/0x18f0 [ 67.913307][ T8115] do_file_open+0x1c8/0x2e8 [ 67.914167][ T8115] do_sys_openat2+0x114/0x1e8 [ 67.915062][ T8115] do_sys_open+0xb0/0xe0 [ 67.915864][ T8115] __arm64_sys_openat+0xa8/0xc4 [ 67.916800][ T8115] invoke_syscall+0x98/0x244 [ 67.917687][ T8115] el0_svc_common+0xec/0x23c [ 67.918573][ T8115] do_el0_svc+0x4c/0x5c [ 67.919363][ T8115] el0_svc+0x60/0x1d8 [ 67.920135][ T8115] el0t_64_sync_handler+0x44/0x104 [ 67.921108][ T8115] el0t_64_sync+0x198/0x19c [ 67.921970][ T8115] irq event stamp: 687 [ 67.922737][ T8115] hardirqs last enabled at (687): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 67.924580][ T8115] hardirqs last disabled at (686): [] _raw_spin_lock_irqsave+0x2c/0x7c [ 67.926432][ T8115] softirqs last enabled at (650): [] do_sve_acc+0x32c/0x4b8 [ 67.928154][ T8115] softirqs last disabled at (648): [] do_sve_acc+0x10c/0x4b8 [ 67.929887][ T8115] ---[ end trace 0000000000000000 ]--- [ 67.935773][ T8116] ------------[ cut here ]------------ [ 67.935780][ T8116] refcount_t: saturated; leaking memory. [ 67.935886][ T8116] WARNING: lib/refcount.c:22 at refcount_warn_saturate+0x1b4/0x1f8, CPU#0: syz.0.1583/8116 [ 67.939686][ T8116] Modules linked in: [ 67.940447][ T8116] CPU: 0 UID: 0 PID: 8116 Comm: syz.0.1583 Tainted: G B W syzkaller #0 PREEMPT [ 67.942505][ T8116] Tainted: [B]=BAD_PAGE, [W]=WARN [ 67.943456][ T8116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.945442][ T8116] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 67.946847][ T8116] pc : refcount_warn_saturate+0x1b4/0x1f8 [ 67.947845][ T8116] lr : refcount_warn_saturate+0x1b4/0x1f8 [ 67.948883][ T8116] sp : ffff800099af7700 [ 67.949615][ T8116] x29: ffff800099af7700 x28: dfff800000000000 x27: 1fffe0001adc9079 [ 67.951085][ T8116] x26: dfff800000000000 x25: ffff70001335eef4 x24: dfff800000000000 [ 67.952516][ T8116] x23: ffff8000873e24e8 x22: ffff0000cbec9c00 x21: 000000007ffffffe [ 67.953932][ T8116] x20: ffff0000cbb64210 x19: ffff80008a0f0000 x18: 0000000000000000 [ 67.955427][ T8116] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000001 [ 67.956924][ T8116] x14: 00000000000008f2 x13: 0000000000000001 x12: 0000000000000003 [ 67.958405][ T8116] x11: 0000000000000000 x10: 0000000000000002 x9 : db343a5a2c662400 [ 67.959885][ T8116] x8 : db343a5a2c662400 x7 : 0000000000000000 x6 : ffff800080483164 [ 67.961395][ T8116] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f3e60 [ 67.962840][ T8116] x2 : 0000000100000000 x1 : ffff0000d41ebb00 x0 : 0000000000000000 [ 67.964277][ T8116] Call trace: [ 67.964871][ T8116] refcount_warn_saturate+0x1b4/0x1f8 (P) [ 67.965913][ T8116] dvb_device_get+0x9c/0xc0 [ 67.966741][ T8116] dvb_device_open+0x100/0x254 [ 67.967606][ T8116] chrdev_open+0x398/0x3e8 [ 67.968417][ T8116] do_dentry_open+0x5c4/0xfbc [ 67.969267][ T8116] vfs_open+0x44/0x2dc [ 67.970015][ T8116] path_openat+0x1084/0x18f0 [ 67.970853][ T8116] do_file_open+0x1c8/0x2e8 [ 67.971663][ T8116] do_sys_openat2+0x114/0x1e8 [ 67.972521][ T8116] do_sys_open+0xb0/0xe0 [ 67.973272][ T8116] __arm64_sys_openat+0xa8/0xc4 [ 67.974171][ T8116] invoke_syscall+0x98/0x244 [ 67.975028][ T8116] el0_svc_common+0xec/0x23c [ 67.975881][ T8116] do_el0_svc+0x4c/0x5c [ 67.976642][ T8116] el0_svc+0x60/0x1d8 [ 67.977393][ T8116] el0t_64_sync_handler+0x44/0x104 [ 67.978293][ T8116] el0t_64_sync+0x198/0x19c [ 67.979111][ T8116] irq event stamp: 0 [ 67.979818][ T8116] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 67.981116][ T8116] hardirqs last disabled at (0): [] copy_process+0x129c/0x34c4 [ 67.982774][ T8116] softirqs last enabled at (0): [] copy_process+0x12bc/0x34c4 [ 67.984493][ T8116] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 67.985827][ T8116] ---[ end trace 0000000000000000 ]--- [ 68.490187][ T51] Bluetooth: hci0: command tx timeout 1970/01/01 00:01:09 executed programs: 1686 [ 71.891684][ T4729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.892337][ T4729] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.892458][ T4729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.892754][ T4729] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.892944][ T4729] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.994313][ T8587] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.994361][ T8587] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.994431][ T8587] bridge_slave_0: entered allmulticast mode [ 71.994679][ T8587] bridge_slave_0: entered promiscuous mode [ 71.995350][ T8587] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.995391][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.995426][ T8587] bridge_slave_1: entered allmulticast mode [ 71.995654][ T8587] bridge_slave_1: entered promiscuous mode [ 72.000750][ T8587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.001398][ T8587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.005429][ T8587] team0: Port device team_slave_0 added [ 72.005993][ T8587] team0: Port device team_slave_1 added [ 72.010041][ T8587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.010048][ T8587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.010061][ T8587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.010491][ T8587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.010497][ T8587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.010509][ T8587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.016909][ T8587] hsr_slave_0: entered promiscuous mode [ 72.017131][ T8587] hsr_slave_1: entered promiscuous mode [ 72.052065][ T8587] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.141792][ T8587] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.241730][ T8587] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.281973][ T8587] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.383202][ T1112] bridge_slave_1: left allmulticast mode [ 72.383221][ T1112] bridge_slave_1: left promiscuous mode [ 72.383286][ T1112] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.384246][ T1112] bridge_slave_0: left allmulticast mode [ 72.384255][ T1112] bridge_slave_0: left promiscuous mode [ 72.384308][ T1112] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.423547][ T1112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.461035][ T1112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.500753][ T1112] bond0 (unregistering): Released all slaves [ 72.508929][ T8587] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.509675][ T8587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.509918][ T8587] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.515611][ T8587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.515942][ T8587] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.516635][ T8587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.516928][ T8587] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.517551][ T8587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.556266][ T8587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.559336][ T8587] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.563758][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.563784][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.565187][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.565206][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.658776][ T8587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.676102][ T1112] hsr_slave_0: left promiscuous mode [ 72.676285][ T1112] hsr_slave_1: left promiscuous mode [ 72.676477][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.676488][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.676692][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.676701][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.678413][ T1112] veth1_macvtap: left promiscuous mode [ 72.678429][ T1112] veth0_macvtap: left promiscuous mode [ 72.678469][ T1112] veth1_vlan: left promiscuous mode [ 72.678497][ T1112] veth0_vlan: left promiscuous mode [ 72.734663][ T1112] team0 (unregistering): Port device team_slave_1 removed [ 72.736874][ T1112] team0 (unregistering): Port device team_slave_0 removed [ 72.770815][ T8587] veth0_vlan: entered promiscuous mode [ 72.772188][ T8587] veth1_vlan: entered promiscuous mode [ 72.777745][ T8587] veth0_macvtap: entered promiscuous mode [ 72.778614][ T8587] veth1_macvtap: entered promiscuous mode [ 72.787993][ T8587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.792144][ T8587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.811745][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.811758][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.816555][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.816567][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.830853][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.830878][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.832298][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.832325][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.930146][ T4729] Bluetooth: hci1: command tx timeout 1970/01/01 00:01:14 executed programs: 1929 [ 76.010206][ T4729] Bluetooth: hci1: command tx timeout