Warning: Permanently added '10.128.0.222' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs [ 31.623941][ T4716] cgroup: Unknown subsys name 'net' [ 31.743950][ T4716] cgroup: Unknown subsys name 'cpuset' [ 31.746568][ T4716] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.904843][ T4716] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 35.269927][ T4738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.273108][ T4738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.274554][ T4738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.278173][ T4738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.284129][ T4738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.346279][ T4730] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.625253][ T4732] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.631267][ T4732] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.631412][ T4732] bridge_slave_0: entered allmulticast mode [ 35.631935][ T4732] bridge_slave_0: entered promiscuous mode [ 35.803861][ T4732] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.803920][ T4732] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.804039][ T4732] bridge_slave_1: entered allmulticast mode [ 35.804540][ T4732] bridge_slave_1: entered promiscuous mode [ 35.852931][ T4732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.854061][ T4732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.877616][ T4732] team0: Port device team_slave_0 added [ 35.894529][ T4732] team0: Port device team_slave_1 added [ 35.919226][ T4732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.920583][ T4732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.922584][ T4732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.923464][ T4732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.923473][ T4732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.923486][ T4732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.934842][ T4732] hsr_slave_0: entered promiscuous mode [ 35.935211][ T4732] hsr_slave_1: entered promiscuous mode [ 35.961023][ T3711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.961059][ T3711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.122986][ T3711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.123025][ T3711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.185498][ T4732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.193851][ T4732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.209229][ T4732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.211642][ T4732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.213369][ T4732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.216147][ T4732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.217506][ T4732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.221175][ T4732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.397054][ T4732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.403368][ T4732] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.405647][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.405732][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.411515][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.411561][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.525149][ T4732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.542085][ T4732] veth0_vlan: entered promiscuous mode [ 36.544048][ T4732] veth1_vlan: entered promiscuous mode [ 36.552203][ T4732] veth0_macvtap: entered promiscuous mode [ 36.553458][ T4732] veth1_macvtap: entered promiscuous mode [ 36.557248][ T4732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.558281][ T4732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.560745][ T15] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.562726][ T15] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.569641][ T15] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.569697][ T15] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:36 executed programs: 0 [ 36.675200][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.681082][ T4834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.692893][ T4740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.694654][ T4740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.694857][ T4740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.697843][ T4740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.698391][ T4740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.698604][ T4740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.699099][ T4738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.699431][ T4738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.699629][ T4738] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.709970][ T4838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.712993][ T4838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.714722][ T4838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.716206][ T4838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.749460][ T4836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.751489][ T4834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.751519][ T4836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.751909][ T4836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.752381][ T4834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.753706][ T4834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.759095][ T4834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.759850][ T4834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.763435][ T4836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.783176][ T4834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 37.202248][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.208530][ T4826] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.208926][ T4826] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.209010][ T4826] bridge_slave_0: entered allmulticast mode [ 37.209448][ T4826] bridge_slave_0: entered promiscuous mode [ 37.210603][ T4826] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.210625][ T4826] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.210713][ T4826] bridge_slave_1: entered allmulticast mode [ 37.211186][ T4826] bridge_slave_1: entered promiscuous mode [ 37.241081][ T4826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.254208][ T4826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.263632][ T4826] team0: Port device team_slave_0 added [ 37.274379][ T4826] team0: Port device team_slave_1 added [ 37.295633][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.297700][ T4827] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.298957][ T4827] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.300253][ T4827] bridge_slave_0: entered allmulticast mode [ 37.301855][ T4827] bridge_slave_0: entered promiscuous mode [ 37.305437][ T4827] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.305635][ T4827] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.305702][ T4827] bridge_slave_1: entered allmulticast mode [ 37.306157][ T4827] bridge_slave_1: entered promiscuous mode [ 37.318480][ T4826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.319778][ T4826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.322512][ T4826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.323181][ T4826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.323189][ T4826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.323203][ T4826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.332604][ T4827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.334074][ T4827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.339793][ T4841] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.341085][ T4841] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.342462][ T4841] bridge_slave_0: entered allmulticast mode [ 37.344024][ T4841] bridge_slave_0: entered promiscuous mode [ 37.345994][ T4841] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.347263][ T4841] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.348587][ T4841] bridge_slave_1: entered allmulticast mode [ 37.350080][ T4841] bridge_slave_1: entered promiscuous mode [ 37.361535][ T4842] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.361582][ T4842] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.362101][ T4842] bridge_slave_0: entered allmulticast mode [ 37.363647][ T4842] bridge_slave_0: entered promiscuous mode [ 37.364471][ T4842] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.364496][ T4842] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.364547][ T4842] bridge_slave_1: entered allmulticast mode [ 37.365260][ T4842] bridge_slave_1: entered promiscuous mode [ 37.378994][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.381412][ T4829] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.381710][ T4829] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.381795][ T4829] bridge_slave_0: entered allmulticast mode [ 37.382270][ T4829] bridge_slave_0: entered promiscuous mode [ 37.385491][ T4827] team0: Port device team_slave_0 added [ 37.398582][ T4829] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.398669][ T4829] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.398733][ T4829] bridge_slave_1: entered allmulticast mode [ 37.399173][ T4829] bridge_slave_1: entered promiscuous mode [ 37.400530][ T4827] team0: Port device team_slave_1 added [ 37.405351][ T4842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.406495][ T4842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.415243][ T4841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.420427][ T4841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.426759][ T4826] hsr_slave_0: entered promiscuous mode [ 37.427089][ T4826] hsr_slave_1: entered promiscuous mode [ 37.427289][ T4826] debugfs: 'hsr0' already exists in 'hsr' [ 37.427344][ T4826] Cannot create hsr debugfs directory [ 37.434211][ T4827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.434238][ T4827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.434252][ T4827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.434842][ T4827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.434851][ T4827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.434862][ T4827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.449787][ T4841] team0: Port device team_slave_0 added [ 37.450498][ T4841] team0: Port device team_slave_1 added [ 37.460589][ T4829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.462781][ T4827] hsr_slave_0: entered promiscuous mode [ 37.463125][ T4827] hsr_slave_1: entered promiscuous mode [ 37.463338][ T4827] debugfs: 'hsr0' already exists in 'hsr' [ 37.463355][ T4827] Cannot create hsr debugfs directory [ 37.472175][ T4842] team0: Port device team_slave_0 added [ 37.477073][ T4829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.485091][ T4842] team0: Port device team_slave_1 added [ 37.485371][ T4841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.485390][ T4841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.485421][ T4841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.489317][ T4841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.489337][ T4841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.489361][ T4841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.501506][ T4829] team0: Port device team_slave_0 added [ 37.502298][ T4829] team0: Port device team_slave_1 added [ 37.509033][ T4829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.509044][ T4829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.509058][ T4829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.509581][ T4829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.509589][ T4829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.509604][ T4829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.527003][ T4829] hsr_slave_0: entered promiscuous mode [ 37.527315][ T4829] hsr_slave_1: entered promiscuous mode [ 37.527994][ T4829] debugfs: 'hsr0' already exists in 'hsr' [ 37.528006][ T4829] Cannot create hsr debugfs directory [ 37.544177][ T4842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.544204][ T4842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.544218][ T4842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.544936][ T4842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.544942][ T4842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.544952][ T4842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.588853][ T4841] hsr_slave_0: entered promiscuous mode [ 37.589214][ T4841] hsr_slave_1: entered promiscuous mode [ 37.589442][ T4841] debugfs: 'hsr0' already exists in 'hsr' [ 37.589454][ T4841] Cannot create hsr debugfs directory [ 37.627457][ T4842] hsr_slave_0: entered promiscuous mode [ 37.628937][ T4842] hsr_slave_1: entered promiscuous mode [ 37.630269][ T4842] debugfs: 'hsr0' already exists in 'hsr' [ 37.631266][ T4842] Cannot create hsr debugfs directory [ 37.716659][ T4826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.719128][ T4826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.724273][ T4826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.726954][ T4826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.732266][ T4826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.735132][ T4826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.739625][ T4826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.742115][ T4826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.765888][ T4826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.771481][ T4826] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.776395][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.776447][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.780072][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.780113][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.789433][ T4826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.789467][ T4826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.877367][ T4826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.894470][ T4826] veth0_vlan: entered promiscuous mode [ 37.896480][ T4826] veth1_vlan: entered promiscuous mode [ 37.903426][ T4826] veth0_macvtap: entered promiscuous mode [ 37.904950][ T4826] veth1_macvtap: entered promiscuous mode [ 37.910072][ T4826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.911115][ T4826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.912853][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.912954][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.913125][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.913191][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.937028][ T3711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.938902][ T3711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.946927][ T3711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.946955][ T3711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.723125][ T4838] Bluetooth: hci0: command tx timeout [ 38.723127][ T50] Bluetooth: hci2: command tx timeout [ 38.725505][ T4834] Bluetooth: hci1: command tx timeout [ 38.802679][ T4838] Bluetooth: hci4: command tx timeout [ 38.803760][ T4834] Bluetooth: hci3: command tx timeout [ 39.040282][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.232637][ T40] bridge_slave_1: left allmulticast mode [ 40.232702][ T40] bridge_slave_1: left promiscuous mode [ 40.233256][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.235027][ T40] bridge_slave_0: left allmulticast mode [ 40.235049][ T40] bridge_slave_0: left promiscuous mode [ 40.235121][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.468886][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.484542][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.494819][ T40] bond0 (unregistering): Released all slaves [ 40.497620][ T4394] 8021q: adding VLAN 0 to HW filter on device eth0 [ 40.563088][ T40] hsr_slave_0: left promiscuous mode [ 40.564810][ T40] hsr_slave_1: left promiscuous mode [ 40.565100][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.565126][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.568986][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.570485][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.585714][ T40] veth1_macvtap: left promiscuous mode [ 40.586810][ T40] veth0_macvtap: left promiscuous mode [ 40.587907][ T40] veth1_vlan: left promiscuous mode [ 40.588899][ T40] veth0_vlan: left promiscuous mode [ 40.740052][ T40] team0 (unregistering): Port device team_slave_1 removed [ 40.744197][ T40] team0 (unregistering): Port device team_slave_0 removed [ 40.791962][ T4394] 8021q: adding VLAN 0 to HW filter on device eth1 [ 40.802614][ T4838] Bluetooth: hci0: command tx timeout [ 40.802653][ T4838] Bluetooth: hci2: command tx timeout [ 40.802714][ T4834] Bluetooth: hci1: command tx timeout [ 40.884991][ T50] Bluetooth: hci4: command tx timeout [ 40.885738][ T4834] Bluetooth: hci3: command tx timeout [ 41.107036][ T4827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 41.121705][ T4827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.122112][ T4827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 41.126435][ T4827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.130925][ T4827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 41.136378][ T4827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.136743][ T4827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 41.138983][ T4827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.202212][ T4841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 41.206937][ T4841] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.208847][ T4841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 41.211272][ T4841] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.219537][ T4841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 41.222267][ T4841] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.232818][ T4841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 41.235396][ T4841] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.292259][ T4842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 41.298363][ T4842] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.305001][ T4842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 41.308729][ T4842] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.323949][ T4842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 41.326888][ T4842] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.341083][ T4842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 41.343867][ T4842] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.354898][ T4827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.380914][ T4827] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.397928][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.397977][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.402727][ T4829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 41.405191][ T4829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.408111][ T4829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 41.410464][ T4829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.412311][ T4829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 41.415527][ T4829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.421848][ T4829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 41.424848][ T4829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.427667][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.427706][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.456546][ T4827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.458468][ T4827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.477290][ T4841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.503023][ T4841] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.513672][ T912] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.513717][ T912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.514245][ T912] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.514271][ T912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.552393][ T4841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.600681][ T4842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.613027][ T4829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.635787][ T4829] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.643306][ T4842] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.653536][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.653590][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.661376][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.661432][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.661942][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.661968][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.678497][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.678544][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.688961][ T4827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.747513][ T4827] veth0_vlan: entered promiscuous mode [ 41.749222][ T4827] veth1_vlan: entered promiscuous mode [ 41.764782][ T4829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.809164][ T4827] veth0_macvtap: entered promiscuous mode [ 41.814234][ T4827] veth1_macvtap: entered promiscuous mode [ 41.819737][ T4827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.824493][ T4827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.840596][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.841124][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.841170][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.841193][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:41 executed programs: 14 [ 41.889339][ T4841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.908479][ T912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.908526][ T912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.946315][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.946351][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.962140][ T4841] veth0_vlan: entered promiscuous mode [ 41.971992][ T4841] veth1_vlan: entered promiscuous mode [ 42.006315][ T4841] veth0_macvtap: entered promiscuous mode [ 42.007372][ T4841] veth1_macvtap: entered promiscuous mode [ 42.029905][ T4841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.030891][ T4841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.067636][ T15] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.069472][ T15] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.071046][ T15] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.072968][ T15] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.124166][ T3206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.124200][ T3206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.137705][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.139610][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.219116][ T4829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.232293][ T4842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.298223][ T4829] veth0_vlan: entered promiscuous mode [ 42.316942][ T4829] veth1_vlan: entered promiscuous mode [ 42.368338][ T4829] veth0_macvtap: entered promiscuous mode [ 42.379226][ T4829] veth1_macvtap: entered promiscuous mode [ 42.412907][ T4829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.421778][ T4829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.447502][ T15] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.447563][ T15] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.447600][ T15] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.447624][ T15] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.558633][ T3711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.558681][ T3711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.628712][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.628741][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.647197][ T4842] veth0_vlan: entered promiscuous mode [ 42.703687][ T4842] veth1_vlan: entered promiscuous mode [ 42.766345][ T4842] veth0_macvtap: entered promiscuous mode [ 42.777810][ T4842] veth1_macvtap: entered promiscuous mode [ 42.788159][ T4842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.791990][ T4842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.799125][ T912] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.799174][ T912] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.799244][ T912] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.799263][ T912] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.882774][ T50] Bluetooth: hci2: command tx timeout [ 42.882812][ T50] Bluetooth: hci0: command tx timeout [ 42.885366][ T4834] Bluetooth: hci1: command tx timeout [ 42.891871][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.891906][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.940975][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.941011][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.972999][ T4838] Bluetooth: hci4: command tx timeout [ 42.974207][ T4834] Bluetooth: hci3: command tx timeout [ 45.053186][ T4838] Bluetooth: hci0: command tx timeout [ 45.053232][ T4838] Bluetooth: hci2: command tx timeout [ 45.053268][ T4838] Bluetooth: hci3: command tx timeout [ 45.053288][ T4838] Bluetooth: hci4: command tx timeout [ 45.053323][ T4834] Bluetooth: hci1: command tx timeout 1970/01/01 00:00:47 executed programs: 28 1970/01/01 00:00:52 executed programs: 42 [ 56.685914][ T5277] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) 1970/01/01 00:00:57 executed programs: 55 1970/01/01 00:01:02 executed programs: 67 [ 64.493542][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495573][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.646078][ T11] cfg80211: failed to load regulatory.db 1970/01/01 00:01:07 executed programs: 82 [ 72.961076][ T5465] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 72.961252][ T5466] ================================================================== [ 72.961269][ T5466] BUG: KASAN: slab-use-after-free in dvb_device_open+0xd0/0x250 [ 72.961303][ T5466] Read of size 8 at addr ffff0000cd031418 by task syz.2.99/5466 [ 72.961311][ T5466] [ 72.961316][ T5466] CPU: 1 UID: 0 PID: 5466 Comm: syz.2.99 Not tainted syzkaller #0 PREEMPT [ 72.961325][ T5466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 72.961331][ T5466] Call trace: [ 72.961334][ T5466] show_stack+0x2c/0x3c (C) [ 72.961350][ T5466] __dump_stack+0x30/0x40 [ 72.961362][ T5466] dump_stack_lvl+0xd8/0x12c [ 72.961371][ T5466] print_address_description+0xb0/0x238 [ 72.961379][ T5466] print_report+0x68/0x84 [ 72.961386][ T5466] kasan_report+0x8c/0xc4 [ 72.961395][ T5466] __asan_report_load8_noabort+0x20/0x2c [ 72.961405][ T5466] dvb_device_open+0xd0/0x250 [ 72.961415][ T5466] chrdev_open+0x398/0x3e8 [ 72.961424][ T5466] do_dentry_open+0x5c4/0xfc8 [ 72.961432][ T5466] vfs_open+0x44/0x2d4 [ 72.961441][ T5466] path_openat+0x2234/0x2a6c [ 72.961449][ T5466] do_file_open+0x1c4/0x2e4 [ 72.961456][ T5466] do_sys_openat2+0x114/0x1e8 [ 72.961464][ T5466] do_sys_open+0xac/0xdc [ 72.961473][ T5466] __arm64_sys_openat+0x9c/0xb8 [ 72.961482][ T5466] invoke_syscall+0x98/0x244 [ 72.961491][ T5466] el0_svc_common+0xe8/0x23c [ 72.961501][ T5466] do_el0_svc+0x48/0x58 [ 72.961510][ T5466] el0_svc+0x64/0x260 [ 72.961518][ T5466] el0t_64_sync_handler+0x48/0x148 [ 72.961525][ T5466] el0t_64_sync+0x198/0x19c [ 72.961533][ T5466] [ 72.961534][ T5466] Allocated by task 1: [ 72.961538][ T5466] kasan_save_track+0x40/0x78 [ 72.961546][ T5466] kasan_save_alloc_info+0x44/0x54 [ 72.961554][ T5466] __kasan_kmalloc+0x9c/0xb4 [ 72.961561][ T5466] __kmalloc_cache_noprof+0x2d4/0x624 [ 72.961568][ T5466] dvb_register_device+0x1ac/0x16ec [ 72.961576][ T5466] dvb_register_frontend+0x464/0x698 [ 72.961583][ T5466] vidtv_bridge_probe+0x57c/0xa24 [ 72.961591][ T5466] platform_probe+0xfc/0x198 [ 72.961599][ T5466] really_probe+0x2a8/0x7e8 [ 72.961604][ T5466] __driver_probe_device+0x1e0/0x33c [ 72.961610][ T5466] driver_probe_device+0x6c/0x19c [ 72.961615][ T5466] __driver_attach+0x164/0x374 [ 72.961620][ T5466] bus_for_each_dev+0x128/0x1b4 [ 72.961628][ T5466] driver_attach+0x4c/0x5c [ 72.961633][ T5466] bus_add_driver+0x208/0x4fc [ 72.961640][ T5466] driver_register+0x220/0x30c [ 72.961645][ T5466] __platform_driver_register+0x6c/0x80 [ 72.961652][ T5466] vidtv_bridge_init+0x34/0x5c [ 72.961662][ T5466] do_one_initcall+0x274/0xc20 [ 72.961670][ T5466] do_initcall_level+0x128/0x1c4 [ 72.961678][ T5466] do_initcalls+0x70/0xd0 [ 72.961684][ T5466] do_basic_setup+0x7c/0x90 [ 72.961690][ T5466] kernel_init_freeable+0x268/0x3a8 [ 72.961697][ T5466] kernel_init+0x24/0x1dc [ 72.961704][ T5466] ret_from_fork+0x10/0x20 [ 72.961709][ T5466] [ 72.961711][ T5466] Freed by task 5465: [ 72.961714][ T5466] kasan_save_track+0x40/0x78 [ 72.961720][ T5466] kasan_save_free_info+0x58/0x70 [ 72.961728][ T5466] __kasan_slab_free+0x74/0xa4 [ 72.961735][ T5466] kfree+0x188/0x690 [ 72.961741][ T5466] dvb_device_put+0x64/0xd0 [ 72.961749][ T5466] dvb_device_open+0x238/0x250 [ 72.961757][ T5466] chrdev_open+0x398/0x3e8 [ 72.961763][ T5466] do_dentry_open+0x5c4/0xfc8 [ 72.961770][ T5466] vfs_open+0x44/0x2d4 [ 72.961777][ T5466] path_openat+0x2234/0x2a6c [ 72.961783][ T5466] do_file_open+0x1c4/0x2e4 [ 72.961789][ T5466] do_sys_openat2+0x114/0x1e8 [ 72.961796][ T5466] do_sys_open+0xac/0xdc [ 72.961803][ T5466] __arm64_sys_openat+0x9c/0xb8 [ 72.961811][ T5466] invoke_syscall+0x98/0x244 [ 72.961818][ T5466] el0_svc_common+0xe8/0x23c [ 72.961826][ T5466] do_el0_svc+0x48/0x58 [ 72.961834][ T5466] el0_svc+0x64/0x260 [ 72.961839][ T5466] el0t_64_sync_handler+0x48/0x148 [ 72.961844][ T5466] el0t_64_sync+0x198/0x19c [ 72.961849][ T5466] [ 72.961851][ T5466] The buggy address belongs to the object at ffff0000cd031400 [ 72.961851][ T5466] which belongs to the cache kmalloc-256 of size 256 [ 72.961857][ T5466] The buggy address is located 24 bytes inside of [ 72.961857][ T5466] freed 256-byte region [ffff0000cd031400, ffff0000cd031500) [ 72.961865][ T5466] [ 72.961866][ T5466] The buggy address belongs to the physical page: [ 72.961870][ T5466] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000cd031000 pfn:0x10d030 [ 72.961878][ T5466] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 72.961884][ T5466] flags: 0x5ffc00000000240(workingset|head|node=0|zone=2|lastcpupid=0x7ff) [ 72.961892][ T5466] page_type: f5(slab) [ 72.961899][ T5466] raw: 05ffc00000000240 ffff0000c0001b40 fffffdffc371c710 fffffdffc3317810 [ 72.961908][ T5466] raw: ffff0000cd031000 000000080010000f 00000000f5000000 0000000000000000 [ 72.961914][ T5466] head: 05ffc00000000240 ffff0000c0001b40 fffffdffc371c710 fffffdffc3317810 [ 72.961920][ T5466] head: ffff0000cd031000 000000080010000f 00000000f5000000 0000000000000000 [ 72.961926][ T5466] head: 05ffc00000000001 fffffdffc3340c01 00000000ffffffff 00000000ffffffff [ 72.961931][ T5466] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 72.961934][ T5466] page dumped because: kasan: bad access detected [ 72.961937][ T5466] [ 72.961939][ T5466] Memory state around the buggy address: [ 72.961943][ T5466] ffff0000cd031300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 72.961947][ T5466] ffff0000cd031380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 72.961951][ T5466] >ffff0000cd031400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.961954][ T5466] ^ [ 72.961958][ T5466] ffff0000cd031480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.961962][ T5466] ffff0000cd031500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 72.961965][ T5466] ================================================================== [ 72.961986][ T5466] Disabling lock debugging due to kernel taint [ 72.961996][ T5466] ------------[ cut here ]------------ [ 72.962008][ T5466] refcount_t: addition on 0; use-after-free. [ 72.962119][ T5466] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x134/0x1f8, CPU#1: syz.2.99/5466 [ 73.056814][ T5466] Modules linked in: [ 73.057456][ T5466] CPU: 1 UID: 0 PID: 5466 Comm: syz.2.99 Tainted: G B syzkaller #0 PREEMPT [ 73.059208][ T5466] Tainted: [B]=BAD_PAGE [ 73.059822][ T5466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 73.061499][ T5466] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 73.062818][ T5466] pc : refcount_warn_saturate+0x134/0x1f8 [ 73.063763][ T5466] lr : refcount_warn_saturate+0x134/0x1f8 [ 73.064659][ T5466] sp : ffff800095ae7560 [ 73.065316][ T5466] x29: ffff800095ae7560 x28: 1fffe0001b2491c8 x27: dfff800000000000 [ 73.066519][ T5466] x26: ffff700012b5cec0 x25: dfff800000000000 x24: ffff8000872f4a88 [ 73.067794][ T5466] x23: ffff0000d9248e48 x22: ffff0000cd316000 x21: 0000000000000000 [ 73.069051][ T5466] x20: ffff0000cd031410 x19: ffff800089fbe000 x18: 1fffe00034bfbe20 [ 73.070386][ T5466] x17: 3d3d3d3d3d3d3d3d x16: 3d3d3d3d3d3d3d3d x15: 3d3d3d3d3d3d3d3d [ 73.071755][ T5466] x14: 3d3d3d3d3d3d3d3d x13: 0000000000000001 x12: 0000000000000000 [ 73.072991][ T5466] x11: 0000000000000a47 x10: 0000000000ff0100 x9 : 121aa86539172900 [ 73.074359][ T5466] x8 : 121aa86539172900 x7 : 0000000000000000 x6 : ffff80008047d308 [ 73.075726][ T5466] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f1b8c [ 73.077029][ T5466] x2 : 0000000100000000 x1 : ffff0000cfb99d00 x0 : 0000000000000000 [ 73.078336][ T5466] Call trace: [ 73.078904][ T5466] refcount_warn_saturate+0x134/0x1f8 (P) [ 73.079876][ T5466] dvb_device_get+0x9c/0xbc [ 73.080641][ T5466] dvb_device_open+0x100/0x250 [ 73.081454][ T5466] chrdev_open+0x398/0x3e8 [ 73.082191][ T5466] do_dentry_open+0x5c4/0xfc8 [ 73.082926][ T5466] vfs_open+0x44/0x2d4 [ 73.083599][ T5466] path_openat+0x2234/0x2a6c [ 73.084389][ T5466] do_file_open+0x1c4/0x2e4 [ 73.085143][ T5466] do_sys_openat2+0x114/0x1e8 [ 73.085960][ T5466] do_sys_open+0xac/0xdc [ 73.086706][ T5466] __arm64_sys_openat+0x9c/0xb8 [ 73.087519][ T5466] invoke_syscall+0x98/0x244 [ 73.088252][ T5466] el0_svc_common+0xe8/0x23c [ 73.089067][ T5466] do_el0_svc+0x48/0x58 [ 73.089775][ T5466] el0_svc+0x64/0x260 [ 73.090466][ T5466] el0t_64_sync_handler+0x48/0x148 [ 73.091323][ T5466] el0t_64_sync+0x198/0x19c [ 73.092063][ T5466] irq event stamp: 73 [ 73.092707][ T5466] hardirqs last enabled at (73): [] arm64_exit_to_kernel_mode+0x80/0x94 [ 73.094365][ T5466] hardirqs last disabled at (72): [] el1_interrupt+0x28/0x60 [ 73.095844][ T5466] softirqs last enabled at (24): [] do_sve_acc+0x32c/0x4b8 [ 73.097402][ T5466] softirqs last disabled at (22): [] do_sve_acc+0x10c/0x4b8 [ 73.098927][ T5466] ---[ end trace 0000000000000000 ]--- [ 73.101834][ T5466] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 73.101854][ T5466] ------------[ cut here ]------------ [ 73.101863][ T5466] refcount_t: underflow; use-after-free. [ 73.101975][ T5466] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0x154/0x1f8, CPU#1: syz.2.99/5466 [ 73.106781][ T5466] Modules linked in: [ 73.107476][ T5466] CPU: 1 UID: 0 PID: 5466 Comm: syz.2.99 Tainted: G B W syzkaller #0 PREEMPT [ 73.109190][ T5466] Tainted: [B]=BAD_PAGE, [W]=WARN [ 73.110022][ T5466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 73.111699][ T5466] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 73.113003][ T5466] pc : refcount_warn_saturate+0x154/0x1f8 [ 73.114015][ T5466] lr : refcount_warn_saturate+0x154/0x1f8 [ 73.114985][ T5466] sp : ffff800095ae7440 [ 73.115726][ T5466] x29: ffff800095ae7440 x28: ffff0000cc8b8060 x27: fffffffffffffffc [ 73.117092][ T5466] x26: ffff0000cd03143c x25: ffff0000cc8b8010 x24: ffff0000d9248e00 [ 73.118352][ T5466] x23: ffff0000cca54308 x22: 1fffe00019a06287 x21: 00000000c0000000 [ 73.119715][ T5466] x20: ffff0000cd031410 x19: ffff800089fbe000 x18: 1fffe00034bfbe20 [ 73.121095][ T5466] x17: ffff80008897b000 x16: ffff800088a2dc60 x15: 0000000000000000 [ 73.122462][ T5466] x14: 0000000000000001 x13: 0000000000000001 x12: 0000000000000000 [ 73.123751][ T5466] x11: 0000000000000a95 x10: 0000000000ff0100 x9 : 121aa86539172900 [ 73.125079][ T5466] x8 : 121aa86539172900 x7 : 0000000000000000 x6 : ffff80008047d308 [ 73.126345][ T5466] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f1b8c [ 73.127627][ T5466] x2 : 0000000100000000 x1 : ffff0000cfb99d00 x0 : 0000000000000000 [ 73.129020][ T5466] Call trace: [ 73.129532][ T5466] refcount_warn_saturate+0x154/0x1f8 (P) [ 73.130481][ T5466] dvb_device_put+0xac/0xd0 [ 73.131227][ T5466] dvb_generic_release+0xec/0x154 [ 73.132054][ T5466] dvb_frontend_open+0x9b8/0x105c [ 73.132883][ T5466] dvb_device_open+0x1f4/0x250 [ 73.133661][ T5466] chrdev_open+0x398/0x3e8 [ 73.134403][ T5466] do_dentry_open+0x5c4/0xfc8 [ 73.135173][ T5466] vfs_open+0x44/0x2d4 [ 73.135898][ T5466] path_openat+0x2234/0x2a6c [ 73.136707][ T5466] do_file_open+0x1c4/0x2e4 [ 73.137513][ T5466] do_sys_openat2+0x114/0x1e8 [ 73.138319][ T5466] do_sys_open+0xac/0xdc [ 73.139039][ T5466] __arm64_sys_openat+0x9c/0xb8 [ 73.139837][ T5466] invoke_syscall+0x98/0x244 [ 73.140653][ T5466] el0_svc_common+0xe8/0x23c 1970/01/01 00:01:13 executed programs: 93 [ 73.141416][ T5466] do_el0_svc+0x48/0x58 [ 73.142132][ T5466] el0_svc+0x64/0x260 [ 73.142809][ T5466] el0t_64_sync_handler+0x48/0x148 [ 73.143677][ T5466] el0t_64_sync+0x198/0x19c [ 73.144457][ T5466] irq event stamp: 73 [ 73.145121][ T5466] hardirqs last enabled at (73): [] arm64_exit_to_kernel_mode+0x80/0x94 [ 73.146838][ T5466] hardirqs last disabled at (72): [] el1_interrupt+0x28/0x60 [ 73.148279][ T5466] softirqs last enabled at (24): [] do_sve_acc+0x32c/0x4b8 [ 73.149685][ T5466] softirqs last disabled at (22): [] do_sve_acc+0x10c/0x4b8 [ 73.151237][ T5466] ---[ end trace 0000000000000000 ]--- [ 73.347838][ T5477] ------------[ cut here ]------------ [ 73.347859][ T5477] refcount_t: saturated; leaking memory. [ 73.347978][ T5477] WARNING: lib/refcount.c:22 at refcount_warn_saturate+0x1b4/0x1f8, CPU#1: syz.3.100/5477 [ 73.351569][ T5477] Modules linked in: [ 73.352278][ T5477] CPU: 1 UID: 0 PID: 5477 Comm: syz.3.100 Tainted: G B W syzkaller #0 PREEMPT [ 73.354086][ T5477] Tainted: [B]=BAD_PAGE, [W]=WARN [ 73.354993][ T5477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 73.356780][ T5477] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 73.358168][ T5477] pc : refcount_warn_saturate+0x1b4/0x1f8 [ 73.359342][ T5477] lr : refcount_warn_saturate+0x1b4/0x1f8 [ 73.360308][ T5477] sp : ffff800095857560 [ 73.361041][ T5477] x29: ffff800095857560 x28: 1fffe0001b4b7318 x27: dfff800000000000 [ 73.362420][ T5477] x26: ffff700012b0aec0 x25: dfff800000000000 x24: ffff8000872f4a88 [ 73.363793][ T5477] x23: ffff0000da5b98c8 x22: 000000007ffffffe x21: 00000000c0000000 [ 73.365139][ T5477] x20: ffff0000cd031410 x19: ffff800089fbe000 x18: 0000000000000000 [ 73.366500][ T5477] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 73.367937][ T5477] x14: 00000000ffff8000 x13: 0000000000000001 x12: 0000000000000000 [ 73.369359][ T5477] x11: 0000000000000ae5 x10: 0000000000ff0100 x9 : f6ccf39cea196d00 [ 73.370771][ T5477] x8 : f6ccf39cea196d00 x7 : 0000000000000000 x6 : ffff80008047d308 [ 73.372222][ T5477] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f1b8c [ 73.373575][ T5477] x2 : 0000000100000000 x1 : ffff0000d4620000 x0 : 0000000000000000 [ 73.374949][ T5477] Call trace: [ 73.375540][ T5477] refcount_warn_saturate+0x1b4/0x1f8 (P) [ 73.376567][ T5477] dvb_device_get+0x9c/0xbc [ 73.377381][ T5477] dvb_device_open+0x100/0x250 [ 73.378240][ T5477] chrdev_open+0x398/0x3e8 [ 73.378894][ T5477] do_dentry_open+0x5c4/0xfc8 [ 73.379617][ T5477] vfs_open+0x44/0x2d4 [ 73.380348][ T5477] path_openat+0x2234/0x2a6c [ 73.381135][ T5477] do_file_open+0x1c4/0x2e4 [ 73.381907][ T5477] do_sys_openat2+0x114/0x1e8 [ 73.382752][ T5477] do_sys_open+0xac/0xdc [ 73.383468][ T5477] __arm64_sys_openat+0x9c/0xb8 [ 73.384244][ T5477] invoke_syscall+0x98/0x244 [ 73.385123][ T5477] el0_svc_common+0xe8/0x23c [ 73.385931][ T5477] do_el0_svc+0x48/0x58 [ 73.386645][ T5477] el0_svc+0x64/0x260 [ 73.387282][ T5477] el0t_64_sync_handler+0x48/0x148 [ 73.388102][ T5477] el0t_64_sync+0x198/0x19c [ 73.388860][ T5477] irq event stamp: 0 [ 73.389550][ T5477] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 73.390724][ T5477] hardirqs last disabled at (0): [] copy_process+0x1374/0x334c [ 73.392201][ T5477] softirqs last enabled at (0): [] copy_process+0x1390/0x334c [ 73.393897][ T5477] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 73.395236][ T5477] ---[ end trace 0000000000000000 ]--- 1970/01/01 00:01:18 executed programs: 112