Warning: Permanently added '10.128.0.28' (ED25519) to the list of known hosts. 1970/01/01 00:00:29 parsed 1 programs 1970/01/01 00:00:29 serving rpc on tcp://42897 [ 30.665405][ T4727] cgroup: Unknown subsys name 'net' [ 30.756598][ T4727] cgroup: Unknown subsys name 'cpuset' [ 30.758894][ T4727] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.932996][ T4727] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 32.435103][ T4738] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.549960][ T4760] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.556532][ T4760] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.558330][ T4760] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.562775][ T4760] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.579696][ T4760] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 33.201742][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.202454][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.214188][ T1962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.214220][ T1962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.407397][ T4778] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.414873][ T4778] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.414998][ T4778] bridge_slave_0: entered allmulticast mode [ 33.415548][ T4778] bridge_slave_0: entered promiscuous mode [ 33.417553][ T4778] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.417575][ T4778] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.417629][ T4778] bridge_slave_1: entered allmulticast mode [ 33.418030][ T4778] bridge_slave_1: entered promiscuous mode [ 33.434929][ T4778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.439610][ T4778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.448482][ T4778] team0: Port device team_slave_0 added [ 33.450543][ T4778] team0: Port device team_slave_1 added [ 33.458392][ T4778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.459770][ T4778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.466196][ T4778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.469477][ T4778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.470836][ T4778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.474982][ T4778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.489245][ T4778] hsr_slave_0: entered promiscuous mode [ 33.491189][ T4778] hsr_slave_1: entered promiscuous mode [ 33.538162][ T4778] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.541956][ T4778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.544303][ T4778] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.546765][ T4778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.548502][ T4778] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.550798][ T4778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.552570][ T4778] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.556032][ T4778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.565663][ T4778] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.565722][ T4778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.565886][ T4778] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.565926][ T4778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.586506][ T4778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.591999][ T1962] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.593588][ T1962] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.598165][ T4778] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.603316][ T1963] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.603372][ T1963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.607702][ T1963] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.607725][ T1963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.709417][ T4778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.771675][ T4778] veth0_vlan: entered promiscuous mode [ 33.775061][ T4778] veth1_vlan: entered promiscuous mode [ 33.783514][ T4778] veth0_macvtap: entered promiscuous mode [ 33.786727][ T4778] veth1_macvtap: entered promiscuous mode [ 33.792499][ T4778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.796801][ T4778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.814108][ T1963] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.814157][ T1963] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.814192][ T1963] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.814212][ T1963] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:33 executed programs: 0 [ 33.890711][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.895921][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.909023][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 33.926883][ T4849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 33.927101][ T4849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 33.927226][ T4849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 33.931534][ T4845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 33.933526][ T4760] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 33.935937][ T4760] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 33.937802][ T4845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 33.941897][ T4845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 33.947154][ T4760] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 33.959399][ T4760] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 33.978710][ T4754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 33.985282][ T4754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 33.987228][ T4849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 33.987673][ T4754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 33.991848][ T4754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 33.995440][ T4849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 33.997515][ T4849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 34.009631][ T4849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 34.011478][ T4849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 34.013065][ T4849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 34.016243][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 34.021849][ T4760] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 34.167803][ T1962] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.264850][ T1962] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.323474][ T1962] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.368486][ T4840] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.369968][ T4840] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.371304][ T4840] bridge_slave_0: entered allmulticast mode [ 34.372915][ T4840] bridge_slave_0: entered promiscuous mode [ 34.375111][ T4840] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.375149][ T4840] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.375216][ T4840] bridge_slave_1: entered allmulticast mode [ 34.375624][ T4840] bridge_slave_1: entered promiscuous mode [ 34.413138][ T4851] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.414919][ T4851] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.416459][ T4851] bridge_slave_0: entered allmulticast mode [ 34.418132][ T4851] bridge_slave_0: entered promiscuous mode [ 34.422099][ T4840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.429586][ T1962] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.437008][ T4851] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.437084][ T4851] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.437262][ T4851] bridge_slave_1: entered allmulticast mode [ 34.437746][ T4851] bridge_slave_1: entered promiscuous mode [ 34.449274][ T4840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.461942][ T4851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.464486][ T4851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.478271][ T4840] team0: Port device team_slave_0 added [ 34.485631][ T4851] team0: Port device team_slave_0 added [ 34.491649][ T4840] team0: Port device team_slave_1 added [ 34.498968][ T4851] team0: Port device team_slave_1 added [ 34.518982][ T4851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.519013][ T4851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.519234][ T4851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.542415][ T4851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.542446][ T4851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.542459][ T4851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.552626][ T4840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.552649][ T4840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.552677][ T4840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.560753][ T4838] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.560816][ T4838] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.560912][ T4838] bridge_slave_0: entered allmulticast mode [ 34.561487][ T4838] bridge_slave_0: entered promiscuous mode [ 34.562592][ T4838] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.562621][ T4838] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.562709][ T4838] bridge_slave_1: entered allmulticast mode [ 34.563156][ T4838] bridge_slave_1: entered promiscuous mode [ 34.564052][ T4840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.564060][ T4840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.564073][ T4840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.583250][ T4851] hsr_slave_0: entered promiscuous mode [ 34.584331][ T4851] hsr_slave_1: entered promiscuous mode [ 34.584593][ T4851] debugfs: 'hsr0' already exists in 'hsr' [ 34.584648][ T4851] Cannot create hsr debugfs directory [ 34.590738][ T4842] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.591328][ T4842] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.591389][ T4842] bridge_slave_0: entered allmulticast mode [ 34.591813][ T4842] bridge_slave_0: entered promiscuous mode [ 34.602438][ T4852] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.602486][ T4852] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.602546][ T4852] bridge_slave_0: entered allmulticast mode [ 34.602975][ T4852] bridge_slave_0: entered promiscuous mode [ 34.605228][ T4852] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.605248][ T4852] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.605305][ T4852] bridge_slave_1: entered allmulticast mode [ 34.605726][ T4852] bridge_slave_1: entered promiscuous mode [ 34.615944][ T4842] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.615996][ T4842] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.616068][ T4842] bridge_slave_1: entered allmulticast mode [ 34.616504][ T4842] bridge_slave_1: entered promiscuous mode [ 34.624825][ T4852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.627731][ T4838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.633249][ T4840] hsr_slave_0: entered promiscuous mode [ 34.635540][ T4840] hsr_slave_1: entered promiscuous mode [ 34.635757][ T4840] debugfs: 'hsr0' already exists in 'hsr' [ 34.635767][ T4840] Cannot create hsr debugfs directory [ 34.640367][ T4842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.642127][ T4842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.644821][ T4852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.649411][ T4838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.661286][ T4838] team0: Port device team_slave_0 added [ 34.679911][ T4842] team0: Port device team_slave_0 added [ 34.680611][ T4838] team0: Port device team_slave_1 added [ 34.688919][ T4838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.690015][ T4838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.690056][ T4838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.691135][ T4852] team0: Port device team_slave_0 added [ 34.691932][ T4852] team0: Port device team_slave_1 added [ 34.698518][ T4842] team0: Port device team_slave_1 added [ 34.710731][ T4838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.712148][ T4838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.714002][ T4838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.714501][ T4852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.714508][ T4852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.714520][ T4852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.715125][ T4852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.715133][ T4852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.715148][ T4852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.727063][ T4852] hsr_slave_0: entered promiscuous mode [ 34.727400][ T4852] hsr_slave_1: entered promiscuous mode [ 34.727617][ T4852] debugfs: 'hsr0' already exists in 'hsr' [ 34.727628][ T4852] Cannot create hsr debugfs directory [ 34.743311][ T4842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.743962][ T4842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.743988][ T4842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.744631][ T4842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.744638][ T4842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.744652][ T4842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.762507][ T4838] hsr_slave_0: entered promiscuous mode [ 34.762862][ T4838] hsr_slave_1: entered promiscuous mode [ 34.763084][ T4838] debugfs: 'hsr0' already exists in 'hsr' [ 34.763100][ T4838] Cannot create hsr debugfs directory [ 34.824772][ T4842] hsr_slave_0: entered promiscuous mode [ 34.825105][ T4842] hsr_slave_1: entered promiscuous mode [ 34.825285][ T4842] debugfs: 'hsr0' already exists in 'hsr' [ 34.825296][ T4842] Cannot create hsr debugfs directory [ 34.893634][ T4840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.896970][ T4840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.898956][ T4840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.901243][ T4840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.913046][ T4840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.915485][ T4840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.916175][ T4840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.917724][ T4840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.941793][ T4840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.949783][ T4840] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.951791][ T1960] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.951839][ T1960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.957221][ T1960] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.957270][ T1960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.058866][ T4840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.071537][ T4840] veth0_vlan: entered promiscuous mode [ 35.073614][ T4840] veth1_vlan: entered promiscuous mode [ 35.082224][ T4840] veth0_macvtap: entered promiscuous mode [ 35.083465][ T4840] veth1_macvtap: entered promiscuous mode [ 35.088967][ T4840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.089947][ T4840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.091790][ T1239] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.094238][ T1239] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.117730][ T1194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.117755][ T1194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.128036][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.129576][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.144060][ T1960] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.144435][ T1960] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.727334][ T1962] bridge_slave_1: left allmulticast mode [ 35.728550][ T1962] bridge_slave_1: left promiscuous mode [ 35.729960][ T1962] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.737703][ T1962] bridge_slave_0: left allmulticast mode [ 35.738931][ T1962] bridge_slave_0: left promiscuous mode [ 35.740148][ T1962] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.826678][ T1962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.849278][ T1962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.850261][ T1962] bond0 (unregistering): Released all slaves [ 35.944214][ T4760] Bluetooth: hci0: command tx timeout [ 36.023975][ T4760] Bluetooth: hci3: command tx timeout [ 36.024120][ T4760] Bluetooth: hci2: command tx timeout [ 36.024199][ T4760] Bluetooth: hci1: command tx timeout [ 36.104068][ T4754] Bluetooth: hci4: command tx timeout [ 36.141613][ T1962] hsr_slave_0: left promiscuous mode [ 36.142757][ T1962] hsr_slave_1: left promiscuous mode [ 36.143411][ T1962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.143427][ T1962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.146679][ T1962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.146694][ T1962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.151355][ T1962] veth1_macvtap: left promiscuous mode [ 36.152247][ T1962] veth0_macvtap: left promiscuous mode [ 36.152304][ T1962] veth1_vlan: left promiscuous mode [ 36.152344][ T1962] veth0_vlan: left promiscuous mode [ 36.261353][ T1962] team0 (unregistering): Port device team_slave_1 removed [ 36.267253][ T1962] team0 (unregistering): Port device team_slave_0 removed [ 36.460647][ T4851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.464813][ T4851] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.467162][ T4851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.470440][ T4851] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.480782][ T4851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.483506][ T4851] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.495432][ T4851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.501805][ T4851] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.534713][ T4838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.540454][ T4838] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.540850][ T4838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.558957][ T4838] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.573040][ T4838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.576626][ T4838] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.578347][ T4838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.584455][ T4838] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.631155][ T4842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.635974][ T4842] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.643257][ T4842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.647268][ T4842] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.680778][ T4842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.688175][ T4842] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.696681][ T4842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.699965][ T4842] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.730773][ T4838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.737225][ T4851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.753269][ T4852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.756708][ T4852] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.757066][ T4852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.760504][ T4852] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.769354][ T4838] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.780074][ T4852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.782744][ T4852] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.783759][ T1962] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.783781][ T1962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.787992][ T1962] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.788041][ T1962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.816832][ T4851] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.819005][ T4852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.822527][ T4852] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.845315][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.845367][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.899765][ T1194] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.899818][ T1194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.917738][ T4842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.920692][ T4842] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.942872][ T4852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.947286][ T1963] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.947340][ T1963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.947848][ T1963] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.947867][ T1963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.970263][ T4852] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.974194][ T1194] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.974240][ T1194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.981418][ T4842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.984433][ T4842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.994854][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.994902][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.011540][ T4852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.013607][ T4852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.121056][ T4838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.185914][ T4851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.201913][ T4838] veth0_vlan: entered promiscuous mode [ 37.210693][ T4838] veth1_vlan: entered promiscuous mode [ 37.222800][ T4851] veth0_vlan: entered promiscuous mode [ 37.229509][ T4838] veth0_macvtap: entered promiscuous mode [ 37.231857][ T4851] veth1_vlan: entered promiscuous mode [ 37.235933][ T4838] veth1_macvtap: entered promiscuous mode [ 37.252258][ T4851] veth0_macvtap: entered promiscuous mode [ 37.267121][ T4838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.270917][ T4851] veth1_macvtap: entered promiscuous mode [ 37.276922][ T4838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.281319][ T1963] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.287023][ T4851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.301647][ T4851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.343224][ T4852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.354354][ T4842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.375437][ T1194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.375473][ T1194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.399063][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.399100][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.400466][ T1194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.400494][ T1194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.400511][ T1194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.409661][ T4842] veth0_vlan: entered promiscuous mode [ 37.412708][ T4842] veth1_vlan: entered promiscuous mode [ 37.440600][ T4842] veth0_macvtap: entered promiscuous mode [ 37.441769][ T4842] veth1_macvtap: entered promiscuous mode [ 37.442250][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.442262][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.473425][ T4842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.476797][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.476831][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.500370][ T4842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.503983][ T1963] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.504146][ T1963] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.504220][ T1963] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.504296][ T1963] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.504365][ T1963] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.504542][ T1963] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.504721][ T1963] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.504844][ T1963] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.551548][ T4852] veth0_vlan: entered promiscuous mode [ 37.553298][ T4852] veth1_vlan: entered promiscuous mode [ 37.576402][ T1963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.576434][ T1963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.598466][ T4852] veth0_macvtap: entered promiscuous mode [ 37.602615][ T1194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.602647][ T1194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.609310][ T4852] veth1_macvtap: entered promiscuous mode [ 37.618171][ T4852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.623186][ T4852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.633516][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.633784][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.634986][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.635012][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.712915][ T1194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.712946][ T1194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.729011][ T1960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.729049][ T1960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ ** replaying previous printk message ** [ 37.869823][ T5302] ------------[ cut here ]------------ [ 37.869855][ T5302] refcount_t: addition on 0; use-after-free. [ 37.869976][ T5302] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x134/0x1f8, CPU#1: syz.4.247/5302 [ 37.874326][ T5302] Modules linked in: [ 37.875062][ T5302] CPU: 1 UID: 0 PID: 5302 Comm: syz.4.247 Not tainted syzkaller #0 PREEMPT [ 37.876623][ T5302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 37.878393][ T5302] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 37.879808][ T5302] pc : refcount_warn_saturate+0x134/0x1f8 [ 37.880879][ T5302] lr : refcount_warn_saturate+0x134/0x1f8 [ 37.881941][ T5302] sp : ffff800092597a90 [ 37.882735][ T5302] x29: ffff800092597a90 x28: ffff7000124b2f68 x27: dfff800000000000 [ 37.884252][ T5302] x26: ffff800092597b40 x25: 0000000000000000 x24: ffff0000f3288eb0 [ 37.885842][ T5302] x23: ffff0000dad8d7c0 x22: ffff0000dace4758 x21: ffff0000c89fb030 [ 37.887336][ T5302] x20: ffff0000d247741c x19: ffff80008a19d000 x18: 0000000000000000 [ 37.888866][ T5302] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 37.890374][ T5302] x14: 000000008690ce14 x13: 0000000000000001 x12: 0000000000000000 [ 37.891934][ T5302] x11: 0000000000000000 x10: 0000000000000003 x9 : 1037b63b58e42c00 [ 37.893490][ T5302] x8 : 1037b63b58e42c00 x7 : ffff80008048c60c x6 : 0000000000000000 [ 37.894939][ T5302] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f6830 [ 37.896468][ T5302] x2 : 0000000000000001 x1 : ffff0000c50a57c0 x0 : 0000000000000000 [ 37.897971][ T5302] Call trace: [ 37.898522][ T5302] refcount_warn_saturate+0x134/0x1f8 (P) [ 37.899508][ T5302] config_item_get+0xa8/0xcc [ 37.900334][ T5302] configfs_symlink+0x34c/0xde0 [ 37.901199][ T5302] vfs_symlink+0x16c/0x290 [ 37.901992][ T5302] filename_symlinkat+0x18c/0x328 [ 37.902879][ T5302] __arm64_sys_symlinkat+0xb0/0xdc [ 37.903826][ T5302] invoke_syscall+0x98/0x244 [ 37.904656][ T5302] el0_svc_common+0xec/0x23c [ 37.905512][ T5302] do_el0_svc+0x4c/0x5c [ 37.906273][ T5302] el0_svc+0x64/0x260 [ 37.906996][ T5302] el0t_64_sync_handler+0x44/0x104 [ 37.907936][ T5302] el0t_64_sync+0x198/0x19c [ 37.908751][ T5302] irq event stamp: 856 [ 37.909524][ T5302] hardirqs last enabled at (855): [] __arm64_exit_to_kernel_mode+0x64/0x78 [ 37.911406][ T5302] hardirqs last disabled at (856): [] el1_brk64+0x20/0x54 [ 37.913044][ T5302] softirqs last enabled at (810): [] do_sve_acc+0x32c/0x4b8 [ 37.914737][ T5302] softirqs last disabled at (808): [] do_sve_acc+0x10c/0x4b8 [ 37.916316][ T5302] ---[ end trace 0000000000000000 ]--- [ 37.920249][ T5302] ================================================================== [ 37.920265][ T5302] BUG: KASAN: slab-use-after-free in config_item_put+0x2c/0xc8 [ 37.920284][ T5302] Write of size 4 at addr ffff0000d247741c by task syz.4.247/5302 [ 37.920294][ T5302] [ 37.920301][ T5302] CPU: 0 UID: 0 PID: 5302 Comm: syz.4.247 Tainted: G W syzkaller #0 PREEMPT [ 37.920311][ T5302] Tainted: [W]=WARN [ 37.920314][ T5302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 37.920319][ T5302] Call trace: [ 37.920321][ T5302] show_stack+0x2c/0x3c (C) [ 37.920333][ T5302] __dump_stack+0x30/0x40 [ 37.920344][ T5302] dump_stack_lvl+0 ** replaying previous printk message ** [ 37.920344][ T5302] dump_stack_lvl+0xd8/0x12c [ 37.920354][ T5302] print_address_description+0xb0/0x238 [ 37.920362][ T5302] print_report+0x68/0x84 [ 37.920369][ T5302] kasan_report+0x8c/0xc4 [ 37.920378][ T5302] kasan_check_range+0x17c/0x1ac [ 37.920387][ T5302] __kasan_check_write+0x20/0x30 [ 37.920396][ T5302] config_item_put+0x2c/0xc8 [ 37.920403][ T5302] configfs_symlink+0x3dc/0xde0 [ 37.920410][ T5302] vfs_symlink+0x16c/0x290 [ 37.920419][ T5302] filename_symlinkat+0x18c/0x328 [ 37.920427][ T5302] __arm64_sys_symlinkat+0xb0/0xdc [ 37.920436][ T5302] invoke_syscall+0x98/0x244 [ 37.920446][ T5302] el0_svc_common+0xec/0x23c [ 37.920455][ T5302] do_el0_svc+0x4c/0x5c [ 37.920464][ T5302] el0_svc+0x64/0x260 [ 37.920473][ T5302] el0t_64_sync_handler+0x44/0x104 [ 37.920481][ T5302] el0t_64_sync+0x198/0x19c [ 37.920488][ T5302] [ 37.920490][ T5302] Allocated by task 5298: [ 37.920494][ T5302] kasan_save_track+0x40/0x78 [ 37.920501][ T5302] kasan_save_alloc_info+0x40/0x50 [ 37.920509][ T5302] __kasan_kmalloc+0x9c/0xb4 [ 37.920516][ T5302] __kmalloc_cache_noprof+0x2e8/0x5ec [ 37.920523][ T5302] geth_alloc_inst+0x54/0x120 [ 37.920533][ T5302] try_get_usb_function_instance+0xe4/0x164 [ 37.920541][ T5302] usb_get_function_instance+0x24/0xb0 [ 37.920547][ T5302] function_make+0x110/0x300 [ 37.920555][ T5302] configfs_mkdir+0x374/0x7d4 [ 37.920560][ T5302] vfs_mkdir+0x2dc/0x464 [ 37.920567][ T5302] filename_mkdirat+0x228/0x3f4 [ 37.920573][ T5302] __arm64_sys_mkdirat+0x9c/0xc0 [ 37.920580][ T5302] invoke_syscall+0x98/0x244 [ 37.920588][ T5302] el0_svc_common+0xec/0x23c [ 37.920596][ T5302] do_el0_svc+0x4c/0x5c [ 37.920604][ T5302] el0_svc+0x64/0x260 [ 37.920610][ T5302] el0t_64_sync_handler+0x44/0x104 [ 37.920617][ T5302] el0t_64_sync+0x198/0x19c [ 37.920622][ T5302] [ 37.920624][ T5302] Freed by task 5298: [ 37.920627][ T5302] kasan_save_track+0x40/0x78 [ 37.920633][ T5302] kasan_save_free_info+0x54/0x6c [ 37.920641][ T5302] __kasan_slab_free+0x74/0xa4 [ 37.920648][ T5302] kfree+0x188/0x690 [ 37.920653][ T5302] geth_free_inst+0x94/0xb8 [ 37.920662][ T5302] usb_put_function_instance+0x88/0xac [ 37.920669][ T5302] gether_attr_release+0x20/0x30 [ 37.920677][ T5302] config_item_release+0x124/0x278 [ 37.920683][ T5302] config_item_put+0x60/0xc8 [ 37.920688][ T5302] configfs_rmdir+0x604/0x6b8 [ 37.920693][ T5302] vfs_rmdir+0x354/0x590 [ 37.920700][ T5302] filename_rmdir+0x208/0x3d0 [ 37.920707][ T5302] __arm64_sys_unlinkat+0xcc/0x108 [ 37.920714][ T5302] invoke_syscall+0x98/0x244 [ 37.920722][ T5302] el0_svc_common+0xec/0x23c [ 37.920730][ T5302] do_el0_svc+0x4c/0x5c [ 37.920738][ T5302] el0_svc+0x64/0x260 [ 37.920744][ T5302] el0t_64_sync_handler+0x44/0x104 [ 37.920751][ T5302] el0t_64_sync+0x198/0x19c [ 37.920756][ T5302] [ 37.920757][ T5302] The buggy address belongs to the object at ffff0000d2477400 [ 37.920757][ T5302] which belongs to the cache kmalloc-512 of size 512 [ 37.920763][ T5302] The buggy address is located 28 bytes inside of [ 37.920763][ T5302] freed 512-byte region [ffff0000d2477400, ffff0000d2477600) [ 37.920770][ T5302] [ 37.920772][ T5302] The buggy address belongs to the physical page: [ 37.920776][ T5302] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112474 [ 37.920783][ T5302] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 37.920789][ T5302] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 37.920797][ T5302] page_type: f5(slab) [ 37.920804][ T5302] raw: 05ffc00000000040 ffff0000c0001c80 dead000000000100 dead000000000122 [ 37.920810][ T5302] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 37.920816][ T5302] head: 05ffc00000000040 ffff0000c0001c80 dead000000000100 dead000000000122 [ 37.920821][ T5302] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 37.920826][ T5302] head: 05ffc00000000002 fffffdffc3491d01 00000000ffffffff 00000000ffffffff [ 37.920832][ T5302] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 37.920835][ T5302] page dumped because: kasan: bad access detected [ 37.920838][ T5302] [ 37.920839][ T5302] Memory state around the buggy address: [ 37.920843][ T5302] ffff0000d2477300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.920847][ T5302] ffff0000d2477380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.920851][ T5302] >ffff0000d2477400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 37.920854][ T5302] ^ [ 37.920857][ T5302] ffff0000d2477480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 37.920861][ T5302] ffff0000d2477500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 37.920864][ T5302] ================================================================== [ 37.933313][ T5302] Disabling lock debugging due to kernel taint [ 37.933329][ T5302] ------------[ cut here ]------------ [ 37.933338][ T5302] refcount_t: underflow; use-after-free. [ 37.933450][ T5302] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0x154/0x1f8, CPU#1: syz.4.247/5302 [ 38.019136][ T5302] Modules linked in: [ 38.019804][ T5302] CPU: 1 UID: 0 PID: 5302 Comm: syz.4.247 Tainted: G B W syzkaller #0 PREEMPT [ 38.021512][ T5302] Tainted: [B]=BAD_PAGE, [W]=WARN [ 38.022313][ T5302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 38.024046][ T5302] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 38.025349][ T5302] pc : refcount_warn_saturate+0x154/0x1f8 [ 38.026394][ T5302] lr : refcount_warn_saturate+0x154/0x1f8 [ 38.027325][ T5302] sp : ffff800092597aa0 [ 38.028053][ T5302] x29: ffff800092597aa0 x28: ffff7000124b2f68 x27: dfff800000000000 [ 38.029509][ T5302] x26: ffff800092597b40 x25: 00000000ffffffea x24: ffff0000f3288eb0 [ 38.030950][ T5302] x23: ffff80008734fba8 x22: ffff0000dace4758 x21: ffff0000d2477400 [ 38.032408][ T5302] x20: ffff0000d247741c x19: ffff80008a19d000 x18: 1fffe00034bbbe28 [ 38.033794][ T5302] x17: 0000000000000003 x16: ffff800088b37000 x15: 0000000000000000 [ 38.035252][ T5302] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 38.036774][ T5302] x11: 0000000000000000 x10: 0000000000000002 x9 : 1037b63b58e42c00 [ 38.038281][ T5302] x8 : 1037b63b58e42c00 x7 : 0000000000000000 x6 : ffff80008048c60c [ 38.039797][ T5302] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f6830 [ 38.041173][ T5302] x2 : 0000000100000000 x1 : ffff0000c50a57c0 x0 : 0000000000000000 [ 38.042559][ T5302] Call trace: [ 38.043124][ T5302] refcount_warn_saturate+0x154/0x1f8 (P) [ 38.044116][ T5302] config_item_put+0xa4/0xc8 [ 38.044990][ T5302] configfs_symlink+0x3dc/0xde0 [ 38.045832][ T5302] vfs_symlink+0x16c/0x290 [ 38.046659][ T5302] filename_symlinkat+0x18c/0x328 [ 38.047587][ T5302] __arm64_sys_symlinkat+0xb0/0xdc [ 38.048520][ T5302] invoke_syscall+0x98/0x244 [ 38.049377][ T5302] el0_svc_common+0xec/0x23c [ 38.050276][ T5302] do_el0_svc+0x4c/0x5c [ 38.051107][ T5302] el0_svc+0x64/0x260 [ 38.051866][ T5302] el0t_64_sync_handler+0x44/0x104 [ 38.052809][ T5302] el0t_64_sync+0x198/0x19c [ 38.053648][ T5302] irq event stamp: 991 [ 38.054367][ T5302] hardirqs last enabled at (991): [] finish_task_switch+0x234/0x858 [ 38.056190][ T5302] hardirqs last disabled at (990): [] __schedule+0x2f8/0x2d80 [ 38.057798][ T5302] softirqs last enabled at (930): [] handle_softirqs+0xc28/0xd98 [ 38.059513][ T5302] softirqs last disabled at (859): [] __do_softirq+0x14/0x20 [ 38.061140][ T5302] ---[ end trace 0000000000000000 ]--- [ 38.066055][ T4754] Bluetooth: hci0: command tx timeout [ 38.104971][ T4754] Bluetooth: hci1: command tx timeout [ 38.105006][ T4754] Bluetooth: hci2: command tx timeout [ 38.105029][ T4754] Bluetooth: hci3: command tx timeout [ 38.184030][ T4760] Bluetooth: hci4: command tx timeout 1970/01/01 00:00:38 executed programs: 431 [ 39.493125][ T5661] ------------[ cut here ]------------ [ 39.493140][ T5661] WARNING: fs/configfs/configfs_internal.h:146 at configfs_symlink+0xb9c/0xde0, CPU#0: syz.1.605/5661 [ 39.496521][ T5661] Modules linked in: [ 39.497312][ T5661] CPU: 0 UID: 0 PID: 5661 Comm: syz.1.605 Tainted: G B W syzkaller #0 PREEMPT [ 39.499386][ T5661] Tainted: [B]=BAD_PAGE, [W]=WARN [ 39.500363][ T5661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 39.502313][ T5661] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 39.503774][ T5661] pc : configfs_symlink+0xb9c/0xde0 [ 39.504771][ T5661] lr : configfs_symlink+0xb9c/0xde0 [ 39.505681][ T5661] sp : ffff8000903f7ae0 [ 39.506398][ T5661] x29: ffff8000903f7ba0 x28: ffff70001207ef68 x27: dfff800000000000 [ 39.507857][ T5661] x26: ffff0000e24a5e00 x25: 0000000000000000 x24: 0000000000000001 [ 39.509356][ T5661] x23: ffff0000f1f1fe10 x22: ffff0000f1f1e468 x21: ffff0000e07ce800 [ 39.510841][ T5661] x20: 1fffe0001c494bc0 x19: ffff0000dbc47800 x18: 0000000000000000 [ 39.512308][ T5661] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 39.513831][ T5661] x14: 00000000ffff8000 x13: 0000000000000001 x12: 0000000000000000 [ 39.515383][ T5661] x11: 0000000000000000 x10: ffff60001c494bc1 x9 : 0000000000000000 [ 39.516996][ T5661] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 000000000000003f [ 39.518529][ T5661] x5 : 0000000000000040 x4 : 0000000000000001 x3 : ffff800080f13870 [ 39.519904][ T5661] x2 : 0000000000000000 x1 : ffff0000c97f9d40 x0 : 0000000000000000 [ 39.521355][ T5661] Call trace: [ 39.521972][ T5661] configfs_symlink+0xb9c/0xde0 (P) [ 39.522928][ T5661] vfs_symlink+0x16c/0x290 [ 39.523778][ T5661] filename_symlinkat+0x18c/0x328 [ 39.524739][ T5661] __arm64_sys_symlinkat+0xb0/0xdc [ 39.525688][ T5661] invoke_syscall+0x98/0x244 [ 39.526517][ T5661] el0_svc_common+0xec/0x23c [ 39.527375][ T5661] do_el0_svc+0x4c/0x5c [ 39.528105][ T5661] el0_svc+0x64/0x260 [ 39.528795][ T5661] el0t_64_sync_handler+0x44/0x104 [ 39.529705][ T5661] el0t_64_sync+0x198/0x19c [ 39.530522][ T5661] irq event stamp: 0 [ 39.531206][ T5661] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 39.532468][ T5661] hardirqs last disabled at (0): [] copy_process+0x1384/0x32e8 [ 39.534216][ T5661] softirqs last enabled at (0): [] copy_process+0x13a4/0x32e8 [ 39.535859][ T5661] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 39.537156][ T5661] ---[ end trace 0000000000000000 ]--- [ 39.667623][ T5697] ------------[ cut here ]------------ [ 39.667649][ T5697] refcount_t: saturated; leaking memory. [ 39.667773][ T5697] WARNING: lib/refcount.c:22 at refcount_warn_saturate+0x1b4/0x1f8, CPU#0: syz.4.641/5697 [ 39.671729][ T5697] Modules linked in: [ 39.672471][ T5697] CPU: 0 UID: 0 PID: 5697 Comm: syz.4.641 Tainted: G B W syzkaller #0 PREEMPT [ 39.674404][ T5697] Tainted: [B]=BAD_PAGE, [W]=WARN [ 39.675357][ T5697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 39.677176][ T5697] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 39.678729][ T5697] pc : refcount_warn_saturate+0x1b4/0x1f8 [ 39.680020][ T5697] lr : refcount_warn_saturate+0x1b4/0x1f8 [ 39.681067][ T5697] sp : ffff800090e17a90 [ 39.681825][ T5697] x29: ffff800090e17a90 x28: ffff7000121c2f68 x27: dfff800000000000 [ 39.683312][ T5697] x26: ffff800090e17b40 x25: 0000000000000000 x24: ffff0000f32725e0 [ 39.684758][ T5697] x23: ffff0000dad8d7c0 x22: ffff0000ef99e000 x21: 000000007ffffffe [ 39.686231][ T5697] x20: ffff0000f0c84c1c x19: ffff80008a19d000 x18: 1fffe00034bb7428 [ 39.687755][ T5697] x17: 0000000000000003 x16: ffff800088b37000 x15: 0000000000000000 [ 39.689213][ T5697] x14: 000000008690ce14 x13: 0000000000000001 x12: 0000000000000000 [ 39.690720][ T5697] x11: 0000000000000000 x10: 0000000000000003 x9 : 7e8a145c76459100 [ 39.692219][ T5697] x8 : 7e8a145c76459100 x7 : 0000000000000000 x6 : ffff80008048c60c [ 39.693666][ T5697] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f6830 [ 39.695159][ T5697] x2 : 0000000000000001 x1 : ffff0000e0e1d7c0 x0 : 0000000000000000 [ 39.696647][ T5697] Call trace: [ 39.697243][ T5697] refcount_warn_saturate+0x1b4/0x1f8 (P) [ 39.698231][ T5697] config_item_get+0xa8/0xcc [ 39.699066][ T5697] configfs_symlink+0x34c/0xde0 [ 39.699926][ T5697] vfs_symlink+0x16c/0x290 [ 39.700691][ T5697] filename_symlinkat+0x18c/0x328 [ 39.701604][ T5697] __arm64_sys_symlinkat+0xb0/0xdc [ 39.702520][ T5697] invoke_syscall+0x98/0x244 [ 39.703309][ T5697] el0_svc_common+0xec/0x23c [ 39.704093][ T5697] do_el0_svc+0x4c/0x5c [ 39.704782][ T5697] el0_svc+0x64/0x260 [ 39.705471][ T5697] el0t_64_sync_handler+0x44/0x104 [ 39.706352][ T5697] el0t_64_sync+0x198/0x19c [ 39.707169][ T5697] irq event stamp: 0 [ 39.707885][ T5697] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 39.709183][ T5697] hardirqs last disabled at (0): [] copy_process+0x1384/0x32e8 [ 39.710821][ T5697] softirqs last enabled at (0): [] copy_process+0x13a4/0x32e8 [ 39.712525][ T5697] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 39.713897][ T5697] ---[ end trace 0000000000000000 ]--- [ 40.104369][ T4760] Bluetooth: hci0: command tx timeout [ 40.195107][ T4760] Bluetooth: hci3: command tx timeout [ 40.195142][ T4760] Bluetooth: hci2: command tx timeout [ 40.195164][ T4760] Bluetooth: hci1: command tx timeout [ 40.264300][ T4754] Bluetooth: hci4: command tx timeout [ 40.278792][ T5851] ------------[ cut here ]------------ [ 40.278811][ T5851] WARNING: fs/configfs/configfs_internal.h:146 at configfs_symlink+0xb9c/0xde0, CPU#1: syz.1.793/5851 [ 40.281754][ T5851] Modules linked in: [ 40.282462][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: syz.1.793 Tainted: G B W syzkaller #0 PREEMPT [ 40.284287][ T5851] Tainted: [B]=BAD_PAGE, [W]=WARN [ 40.285190][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 40.287098][ T5851] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 40.288551][ T5851] pc : configfs_symlink+0xb9c/0xde0 [ 40.289507][ T5851] lr : configfs_symlink+0xb9c/0xde0 [ 40.290516][ T5851] sp : ffff800095227ae0 [ 40.291368][ T5851] x29: ffff800095227ba0 x28: ffff700012a44f68 x27: dfff800000000000 [ 40.293052][ T5851] x26: ffff0000d5fe6400 x25: 0000000000000000 x24: 0000000000000001 [ 40.294751][ T5851] x23: ffff0000c15b70d8 x22: ffff0000f33ae758 x21: ffff0000e1dbe000 [ 40.296435][ T5851] x20: 1fffe0001abfcc80 x19: ffff0000dbc47800 x18: 0000000000000000 [ 40.298138][ T5851] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 40.299733][ T5851] x14: 00000000ffff8000 x13: 0000000000000001 x12: 0000000000000000 [ 40.301461][ T5851] x11: 0000000000000000 x10: ffff60001abfcc81 x9 : 0000000000000000 [ 40.303032][ T5851] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 000000000000003f [ 40.304728][ T5851] x5 : 0000000000000040 x4 : 0000000000000001 x3 : ffff800080f13870 [ 40.306355][ T5851] x2 : 0000000000000000 x1 : ffff0000ce94ba80 x0 : 0000000000000000 [ 40.307802][ T5851] Call trace: [ 40.308440][ T5851] configfs_symlink+0xb9c/0xde0 (P) [ 40.309434][ T5851] vfs_symlink+0x16c/0x290 [ 40.310314][ T5851] filename_symlinkat+0x18c/0x328 [ 40.311302][ T5851] __arm64_sys_symlinkat+0xb0/0xdc [ 40.312254][ T5851] invoke_syscall+0x98/0x244 [ 40.313146][ T5851] el0_svc_common+0xec/0x23c [ 40.314029][ T5851] do_el0_svc+0x4c/0x5c [ 40.314852][ T5851] el0_svc+0x64/0x260 [ 40.315638][ T5851] el0t_64_sync_handler+0x44/0x104 [ 40.316653][ T5851] el0t_64_sync+0x198/0x19c [ 40.317545][ T5851] irq event stamp: 0 [ 40.318329][ T5851] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 40.319758][ T5851] hardirqs last disabled at (0): [] copy_process+0x1384/0x32e8 [ 40.321553][ T5851] softirqs last enabled at (0): [] copy_process+0x13a4/0x32e8 [ 40.323195][ T5851] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 40.324553][ T5851] ---[ end trace 0000000000000000 ]--- [ 42.185484][ T4754] Bluetooth: hci0: command tx timeout [ 42.263967][ T4754] Bluetooth: hci1: command tx timeout [ 42.265189][ T4754] Bluetooth: hci2: command tx timeout [ 42.266455][ T4754] Bluetooth: hci3: command tx timeout [ 42.344072][ T4760] Bluetooth: hci4: command tx timeout 1970/01/01 00:00:43 executed programs: 1762 [ 45.592509][ T4754] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 45.597281][ T4754] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 45.602368][ T4754] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 45.604874][ T4754] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 45.606526][ T4754] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 45.774962][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.776542][ T7283] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.778059][ T7283] bridge_slave_0: entered allmulticast mode [ 45.779536][ T7283] bridge_slave_0: entered promiscuous mode [ 45.781450][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.782829][ T7283] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.786370][ T7283] bridge_slave_1: entered allmulticast mode [ 45.787859][ T7283] bridge_slave_1: entered promiscuous mode [ 45.793768][ T7283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.796784][ T7283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.804871][ T7283] team0: Port device team_slave_0 added [ 45.808070][ T7283] team0: Port device team_slave_1 added [ 45.813241][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.814707][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.819247][ T7283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.821866][ T7283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.823137][ T7283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.828172][ T7283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.837913][ T7283] hsr_slave_0: entered promiscuous mode [ 45.839381][ T7283] hsr_slave_1: entered promiscuous mode [ 45.890858][ T7283] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.951611][ T7283] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.008569][ T7283] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.096387][ T7283] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.213140][ T1194] bridge_slave_1: left allmulticast mode [ 46.213175][ T1194] bridge_slave_1: left promiscuous mode [ 46.213903][ T1194] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.223352][ T1194] bridge_slave_0: left allmulticast mode [ 46.223497][ T1194] bridge_slave_0: left promiscuous mode [ 46.223560][ T1194] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.283029][ T1194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.326037][ T1194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.348037][ T1194] bond0 (unregistering): Released all slaves [ 46.370282][ T7283] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.376171][ T7283] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 46.376491][ T7283] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.382003][ T7283] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 46.388991][ T7283] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.392607][ T7283] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 46.392922][ T7283] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.401349][ T7283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 46.501830][ T7283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.508451][ T7283] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.516237][ T1960] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.516275][ T1960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.522023][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.522070][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.662144][ T1194] hsr_slave_0: left promiscuous mode [ 46.665946][ T1194] hsr_slave_1: left promiscuous mode [ 46.666208][ T1194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.666219][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.670332][ T1194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.670361][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.680838][ T1194] veth1_macvtap: left promiscuous mode [ 46.680876][ T1194] veth0_macvtap: left promiscuous mode [ 46.680926][ T1194] veth1_vlan: left promiscuous mode [ 46.680962][ T1194] veth0_vlan: left promiscuous mode [ 46.799285][ T1194] team0 (unregistering): Port device team_slave_1 removed [ 46.814951][ T1194] team0 (unregistering): Port device team_slave_0 removed [ 46.927750][ T7283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.938939][ T7283] veth0_vlan: entered promiscuous mode [ 46.947507][ T7283] veth1_vlan: entered promiscuous mode [ 46.960075][ T7283] veth0_macvtap: entered promiscuous mode [ 46.963243][ T7283] veth1_macvtap: entered promiscuous mode [ 46.971908][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.982587][ T7283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.019581][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.019610][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.027497][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.027559][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.027578][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.032962][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.032998][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.065021][ T1239] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.623946][ T4760] Bluetooth: hci5: command tx timeout