Warning: Permanently added '10.128.10.16' (ED25519) to the list of known hosts. 1970/01/01 00:00:56 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 57.414085][ T5153] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 60.333380][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.333411][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.375164][ T1344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.375192][ T1344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.604897][ T4757] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.605401][ T4757] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.608482][ T4757] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.610900][ T4757] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.612593][ T4757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.236440][ T5186] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.237922][ T5186] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.239468][ T5186] bridge_slave_0: entered allmulticast mode [ 61.241148][ T5186] bridge_slave_0: entered promiscuous mode [ 61.243183][ T5186] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.250068][ T5186] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.251571][ T5186] bridge_slave_1: entered allmulticast mode [ 61.253554][ T5186] bridge_slave_1: entered promiscuous mode [ 61.264089][ T5186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.265179][ T5186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.273707][ T5186] team0: Port device team_slave_0 added [ 61.274974][ T5186] team0: Port device team_slave_1 added [ 61.280687][ T5186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.280846][ T5186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.280863][ T5186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.281417][ T5186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.281425][ T5186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.281441][ T5186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.291602][ T5186] hsr_slave_0: entered promiscuous mode [ 61.292587][ T5186] hsr_slave_1: entered promiscuous mode [ 61.335864][ T5186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.338025][ T5186] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.338563][ T5186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.340249][ T5186] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.340594][ T5186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.342531][ T5186] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.342879][ T5186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.345547][ T5186] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.368275][ T5186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.372760][ T5186] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.379205][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.379250][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.382551][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.382596][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.601931][ T5186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.676141][ T5186] veth0_vlan: entered promiscuous mode [ 61.678134][ T5186] veth1_vlan: entered promiscuous mode [ 61.691070][ T5186] veth0_macvtap: entered promiscuous mode [ 61.692163][ T5186] veth1_macvtap: entered promiscuous mode [ 61.695829][ T5186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.696822][ T5186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.702520][ T15] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.704209][ T15] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.705795][ T15] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.709526][ T15] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:01 executed programs: 0 [ 61.798024][ T4756] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.799781][ T4756] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.803132][ T4756] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.806970][ T4756] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.811290][ T4756] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.830179][ T4757] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.831459][ T4757] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.845780][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.849349][ T5276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.849872][ T5279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.850343][ T5279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.850509][ T5279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.850956][ T5279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.851156][ T5279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.853044][ T5276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.853644][ T5276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.866053][ T5279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.866268][ T5279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.866352][ T5276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.875022][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.876443][ T5279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.878015][ T5279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.879541][ T5279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.880844][ T5279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.883539][ T5279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.937289][ T1344] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.008732][ T1344] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.085460][ T1344] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.167181][ T1344] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.198201][ T5261] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.199660][ T5261] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.201074][ T5261] bridge_slave_0: entered allmulticast mode [ 62.201529][ T5261] bridge_slave_0: entered promiscuous mode [ 62.202351][ T5261] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.202372][ T5261] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.202421][ T5261] bridge_slave_1: entered allmulticast mode [ 62.202817][ T5261] bridge_slave_1: entered promiscuous mode [ 62.209514][ T5261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.210393][ T5261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.228208][ T5261] team0: Port device team_slave_0 added [ 62.244815][ T5261] team0: Port device team_slave_1 added [ 62.265896][ T5261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.267203][ T5261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.271910][ T5261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.276159][ T5261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.276181][ T5261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.276208][ T5261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.295375][ T5265] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.295451][ T5265] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.295520][ T5265] bridge_slave_0: entered allmulticast mode [ 62.295948][ T5265] bridge_slave_0: entered promiscuous mode [ 62.296970][ T5265] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.296993][ T5265] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.297042][ T5265] bridge_slave_1: entered allmulticast mode [ 62.297516][ T5265] bridge_slave_1: entered promiscuous mode [ 62.319992][ T5261] hsr_slave_0: entered promiscuous mode [ 62.321692][ T5261] hsr_slave_1: entered promiscuous mode [ 62.322918][ T5261] debugfs: 'hsr0' already exists in 'hsr' [ 62.324288][ T5261] Cannot create hsr debugfs directory [ 62.341769][ T5265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.343336][ T5265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.375392][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.375505][ T5267] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.375597][ T5267] bridge_slave_0: entered allmulticast mode [ 62.376061][ T5267] bridge_slave_0: entered promiscuous mode [ 62.380893][ T5265] team0: Port device team_slave_0 added [ 62.382308][ T5265] team0: Port device team_slave_1 added [ 62.393294][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.393377][ T5267] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.393436][ T5267] bridge_slave_1: entered allmulticast mode [ 62.394396][ T5267] bridge_slave_1: entered promiscuous mode [ 62.408125][ T5265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.409412][ T5265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.414290][ T5265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.415006][ T5265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.415015][ T5265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.415031][ T5265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.420014][ T5267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.421045][ T5267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.429325][ T5267] team0: Port device team_slave_0 added [ 62.440355][ T5267] team0: Port device team_slave_1 added [ 62.478275][ T5269] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.478329][ T5269] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.478424][ T5269] bridge_slave_0: entered allmulticast mode [ 62.478933][ T5269] bridge_slave_0: entered promiscuous mode [ 62.479724][ T5267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.479731][ T5267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.479749][ T5267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.480705][ T5267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.480717][ T5267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.480730][ T5267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.497567][ T5265] hsr_slave_0: entered promiscuous mode [ 62.497918][ T5265] hsr_slave_1: entered promiscuous mode [ 62.498125][ T5265] debugfs: 'hsr0' already exists in 'hsr' [ 62.498135][ T5265] Cannot create hsr debugfs directory [ 62.498678][ T5269] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.498736][ T5269] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.498807][ T5269] bridge_slave_1: entered allmulticast mode [ 62.499474][ T5269] bridge_slave_1: entered promiscuous mode [ 62.516700][ T5269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.517839][ T5269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.537391][ T5263] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.538771][ T5263] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.540094][ T5263] bridge_slave_0: entered allmulticast mode [ 62.541666][ T5263] bridge_slave_0: entered promiscuous mode [ 62.557184][ T5263] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.558543][ T5263] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.560051][ T5263] bridge_slave_1: entered allmulticast mode [ 62.561655][ T5263] bridge_slave_1: entered promiscuous mode [ 62.568198][ T5267] hsr_slave_0: entered promiscuous mode [ 62.568518][ T5267] hsr_slave_1: entered promiscuous mode [ 62.568722][ T5267] debugfs: 'hsr0' already exists in 'hsr' [ 62.568732][ T5267] Cannot create hsr debugfs directory [ 62.580578][ T5269] team0: Port device team_slave_0 added [ 62.590824][ T5263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.593619][ T5263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.600364][ T5269] team0: Port device team_slave_1 added [ 62.618702][ T5269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.620052][ T5269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.624066][ T5269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.628629][ T5263] team0: Port device team_slave_0 added [ 62.637122][ T5269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.638339][ T5269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.643030][ T5269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.649339][ T5263] team0: Port device team_slave_1 added [ 62.676510][ T5263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.677896][ T5263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.682651][ T5263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.691025][ T5269] hsr_slave_0: entered promiscuous mode [ 62.691381][ T5269] hsr_slave_1: entered promiscuous mode [ 62.691589][ T5269] debugfs: 'hsr0' already exists in 'hsr' [ 62.691600][ T5269] Cannot create hsr debugfs directory [ 62.693868][ T5263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.693878][ T5263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.696300][ T5263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.698234][ T5261] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.701834][ T5261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.712022][ T5261] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.715401][ T5261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.718473][ T5261] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.720607][ T5261] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.729456][ T5261] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.731712][ T5261] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.745192][ T5263] hsr_slave_0: entered promiscuous mode [ 62.745551][ T5263] hsr_slave_1: entered promiscuous mode [ 62.745777][ T5263] debugfs: 'hsr0' already exists in 'hsr' [ 62.745787][ T5263] Cannot create hsr debugfs directory [ 62.786071][ T5265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.788421][ T5265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.789040][ T5265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.790720][ T5265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.791399][ T5265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.793126][ T5265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.810901][ T5265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.813083][ T5265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.859286][ T5261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.882491][ T5261] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.891938][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.891984][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.909051][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.909094][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.943282][ T5265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.947160][ T5265] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.949467][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.949491][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.953339][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.953386][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.106940][ T5261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.122995][ T5261] veth0_vlan: entered promiscuous mode [ 63.133620][ T5261] veth1_vlan: entered promiscuous mode [ 63.136070][ T5265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.161759][ T5261] veth0_macvtap: entered promiscuous mode [ 63.165276][ T5261] veth1_macvtap: entered promiscuous mode [ 63.169498][ T5261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.170720][ T5265] veth0_vlan: entered promiscuous mode [ 63.176303][ T5261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.182863][ T5265] veth1_vlan: entered promiscuous mode [ 63.188799][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.188897][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.188967][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.189066][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.193811][ T5265] veth0_macvtap: entered promiscuous mode [ 63.211425][ T5265] veth1_macvtap: entered promiscuous mode [ 63.228629][ T5265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.229691][ T5265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.238587][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.238644][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.238676][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.238692][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.249721][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.249758][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.272911][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.272939][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.286197][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.286226][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.309936][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.309965][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.048767][ T50] Bluetooth: hci0: command tx timeout [ 64.048949][ T50] Bluetooth: hci3: command tx timeout [ 64.049038][ T50] Bluetooth: hci4: command tx timeout [ 64.049108][ T50] Bluetooth: hci1: command tx timeout [ 64.049175][ T50] Bluetooth: hci2: command tx timeout [ 64.773237][ T26] cfg80211: failed to load regulatory.db [ 64.784329][ T1535] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.784378][ T1535] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.837618][ T1344] bridge_slave_1: left allmulticast mode [ 64.837654][ T1344] bridge_slave_1: left promiscuous mode [ 64.837757][ T1344] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.844894][ T1344] bridge_slave_0: left allmulticast mode [ 64.845993][ T1344] bridge_slave_0: left promiscuous mode [ 64.847326][ T1344] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.642077][ T1344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.703872][ T1344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.334189][ T5279] Bluetooth: hci2: command tx timeout [ 66.334227][ T5279] Bluetooth: hci1: command tx timeout [ 66.334255][ T5279] Bluetooth: hci4: command tx timeout [ 66.334275][ T5279] Bluetooth: hci3: command tx timeout [ 66.334294][ T5279] Bluetooth: hci0: command tx timeout [ 66.359388][ T1344] bond0 (unregistering): Released all slaves [ 67.183844][ T1344] hsr_slave_0: left promiscuous mode [ 67.184695][ T1344] hsr_slave_1: left promiscuous mode [ 67.192760][ T1344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.192788][ T1344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.193130][ T1344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.193146][ T1344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.200483][ T1344] veth1_macvtap: left promiscuous mode [ 67.200518][ T1344] veth0_macvtap: left promiscuous mode [ 67.200567][ T1344] veth1_vlan: left promiscuous mode [ 67.200600][ T1344] veth0_vlan: left promiscuous mode 1970/01/01 00:01:07 executed programs: 20 [ 68.645440][ T50] Bluetooth: hci0: command tx timeout [ 68.645481][ T50] Bluetooth: hci3: command tx timeout [ 68.645514][ T50] Bluetooth: hci4: command tx timeout [ 68.645533][ T50] Bluetooth: hci1: command tx timeout [ 68.645552][ T50] Bluetooth: hci2: command tx timeout [ 68.678042][ T1344] team0 (unregistering): Port device team_slave_1 removed [ 68.688604][ T1344] team0 (unregistering): Port device team_slave_0 removed [ 71.169897][ T5279] Bluetooth: hci2: command tx timeout [ 71.169947][ T50] Bluetooth: hci1: command tx timeout [ 71.169950][ T5279] Bluetooth: hci4: command tx timeout [ 71.169969][ T5279] Bluetooth: hci3: command tx timeout [ 71.169979][ T50] Bluetooth: hci0: command tx timeout [ 71.279644][ T5269] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.297647][ T5269] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.299513][ T5269] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.307606][ T5269] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.309350][ T5269] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.314292][ T5269] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.316138][ T5269] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.318735][ T5269] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.006553][ T5269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.022292][ T5269] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.041948][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.041995][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.115127][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.115172][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state 1970/01/01 00:01:13 executed programs: 34 [ 75.126638][ T5269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.253602][ T5267] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.906257][ T5267] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.906626][ T5267] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.925279][ T5267] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.932813][ T5267] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.933827][ T5267] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.934159][ T5267] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.944773][ T5267] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.674684][ T5263] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.678814][ T5263] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.691827][ T5263] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.696213][ T5263] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.702099][ T5263] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.704861][ T5263] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.718361][ T5263] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.722480][ T5263] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.090396][ T5269] veth0_vlan: entered promiscuous mode [ 77.095349][ T5269] veth1_vlan: entered promiscuous mode [ 77.110690][ T5269] veth0_macvtap: entered promiscuous mode [ 77.117166][ T5269] veth1_macvtap: entered promiscuous mode [ 77.487623][ T5269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.504565][ T5269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.508765][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.508851][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.508934][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.508994][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.615598][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.616996][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.621464][ T5267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.662227][ T5267] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.702711][ T5263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.709377][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.709429][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.712929][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.712969][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.745217][ T5267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.756464][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.758933][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.779882][ T5263] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.837259][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.837317][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.840816][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.840852][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state 1970/01/01 00:01:19 executed programs: 49 [ 79.116734][ T5267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.148071][ T5267] veth0_vlan: entered promiscuous mode [ 79.151020][ T5267] veth1_vlan: entered promiscuous mode [ 79.165023][ T5267] veth0_macvtap: entered promiscuous mode [ 79.167346][ T5267] veth1_macvtap: entered promiscuous mode [ 79.172163][ T5267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.174896][ T5267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.219811][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.226191][ T5263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.878885][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.878920][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.934774][ T1189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.934810][ T1189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.971368][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.971766][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.971804][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.999735][ T5263] veth0_vlan: entered promiscuous mode [ 80.002998][ T5263] veth1_vlan: entered promiscuous mode [ 80.090314][ T5263] veth0_macvtap: entered promiscuous mode [ 80.727989][ T5263] veth1_macvtap: entered promiscuous mode [ 81.467564][ T5263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.468580][ T5263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.512032][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.512081][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.512113][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.512132][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.589250][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.589277][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.611413][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.613070][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:01:24 executed programs: 63 1970/01/01 00:01:30 executed programs: 79 [ 94.975523][ T5926] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) 1970/01/01 00:01:35 executed programs: 93 [ 100.245884][ T6011] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 100.247567][ T6015] ================================================================== [ 100.247587][ T6015] BUG: KASAN: slab-use-after-free in dvb_device_open+0xd0/0x250 [ 100.247627][ T6015] Read of size 8 at addr ffff0000ccd92c18 by task syz.2.112/6015 [ 100.247634][ T6015] [ 100.247640][ T6015] CPU: 0 UID: 0 PID: 6015 Comm: syz.2.112 Not tainted syzkaller #0 PREEMPT [ 100.247648][ T6015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 100.247653][ T6015] Call trace: [ 100.247655][ T6015] show_stack+0x2c/0x3c (C) [ 100.247668][ T6015] __dump_stack+0x30/0x40 [ 100.247678][ T6015] dump_stack_lvl+0xd8/0x12c [ 100.247687][ T6015] print_address_description+0xb0/0x238 [ 100.247695][ T6015] print_report+0x68/0x84 [ 100.247702][ T6015] kasan_report+0x8c/0xc4 [ 100.247711][ T6015] __asan_report_load8_noabort+0x20/0x2c [ 100.247721][ T6015] dvb_device_open+0xd0/0x250 [ 100.247731][ T6015] chrdev_open+0x398/0x3e8 [ 100.247745][ T6015] do_dentry_open+0x5c4/0xfc8 [ 100.247754][ T6015] vfs_open+0x44/0x2d4 [ 100.247762][ T6015] path_openat+0x2234/0x2a6c [ 100.247770][ T6015] do_file_open+0x1c4/0x2e4 [ 100.247778][ T6015] do_sys_openat2+0x114/0x1e8 [ 100.247787][ T6015] do_sys_open+0xac/0xdc [ 100.247796][ T6015] __arm64_sys_openat+0x9c/0xb8 [ 100.247804][ T6015] invoke_syscall+0x98/0x244 [ 100.247814][ T6015] el0_svc_common+0xe8/0x23c [ 100.247824][ T6015] do_el0_svc+0x48/0x58 [ 100.247833][ T6015] el0_svc+0x64/0x260 [ 100.247841][ T6015] el0t_64_sync_handler+0x48/0x148 [ 100.247848][ T6015] el0t_64_sync+0x198/0x19c [ 100.247855][ T6015] [ 100.247857][ T6015] Allocated by task 1: [ 100.247861][ T6015] kasan_save_track+0x40/0x78 [ 100.247868][ T6015] kasan_save_alloc_info+0x44/0x54 [ 100.247877][ T6015] __kasan_kmalloc+0x9c/0xb4 [ 100.247884][ T6015] __kmalloc_cache_noprof+0x2d4/0x624 [ 100.247891][ T6015] dvb_register_device+0x1ac/0x16ec [ 100.247899][ T6015] dvb_register_frontend+0x464/0x698 [ 100.247906][ T6015] vidtv_bridge_probe+0x57c/0xa24 [ 100.247914][ T6015] platform_probe+0xfc/0x198 [ 100.247922][ T6015] really_probe+0x2a8/0x7e8 [ 100.247927][ T6015] __driver_probe_device+0x1e0/0x33c [ 100.247933][ T6015] driver_probe_device+0x6c/0x19c [ 100.247938][ T6015] __driver_attach+0x164/0x374 [ 100.247943][ T6015] bus_for_each_dev+0x128/0x1b4 [ 100.247951][ T6015] driver_attach+0x4c/0x5c [ 100.247956][ T6015] bus_add_driver+0x208/0x4fc [ 100.247963][ T6015] driver_register+0x220/0x30c [ 100.247969][ T6015] __platform_driver_register+0x6c/0x80 [ 100.247976][ T6015] vidtv_bridge_init+0x34/0x5c [ 100.247985][ T6015] do_one_initcall+0x274/0xc20 [ 100.247993][ T6015] do_initcall_level+0x128/0x1c4 [ 100.247999][ T6015] do_initcalls+0x70/0xd0 [ 100.248005][ T6015] do_basic_setup+0x7c/0x90 [ 100.248010][ T6015] kernel_init_freeable+0x268/0x3a8 [ 100.248016][ T6015] kernel_init+0x24/0x1dc [ 100.248023][ T6015] ret_from_fork+0x10/0x20 [ 100.248028][ T6015] [ 100.248030][ T6015] Freed by task 6011: [ 100.248033][ T6015] kasan_save_track+0x40/0x78 [ 100.248040][ T6015] kasan_save_free_info+0x58/0x70 [ 100.248047][ T6015] __kasan_slab_free+0x74/0xa4 [ 100.248054][ T6015] kfree+0x188/0x690 [ 100.248060][ T6015] dvb_device_put+0x64/0xd0 [ 100.248068][ T6015] dvb_device_open+0x238/0x250 [ 100.248076][ T6015] chrdev_open+0x398/0x3e8 [ 100.248083][ T6015] do_dentry_open+0x5c4/0xfc8 [ 100.248090][ T6015] vfs_open+0x44/0x2d4 [ 100.248097][ T6015] path_openat+0x2234/0x2a6c [ 100.248103][ T6015] do_file_open+0x1c4/0x2e4 [ 100.248109][ T6015] do_sys_openat2+0x114/0x1e8 [ 100.248116][ T6015] do_sys_open+0xac/0xdc [ 100.248123][ T6015] __arm64_sys_openat+0x9c/0xb8 [ 100.248131][ T6015] invoke_syscall+0x98/0x244 [ 100.248139][ T6015] el0_svc_common+0xe8/0x23c [ 100.248147][ T6015] do_el0_svc+0x48/0x58 [ 100.248155][ T6015] el0_svc+0x64/0x260 [ 100.248160][ T6015] el0t_64_sync_handler+0x48/0x148 [ 100.248165][ T6015] el0t_64_sync+0x198/0x19c [ 100.248171][ T6015] [ 100.248172][ T6015] The buggy address belongs to the object at ffff0000ccd92c00 [ 100.248172][ T6015] which belongs to the cache kmalloc-256 of size 256 [ 100.248178][ T6015] The buggy address is located 24 bytes inside of [ 100.248178][ T6015] freed 256-byte region [ffff0000ccd92c00, ffff0000ccd92d00) [ 100.248185][ T6015] [ 100.248187][ T6015] The buggy address belongs to the physical page: [ 100.248191][ T6015] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000ccd92a00 pfn:0x10cd92 [ 100.248198][ T6015] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 100.248204][ T6015] flags: 0x5ffc00000000240(workingset|head|node=0|zone=2|lastcpupid=0x7ff) [ 100.248212][ T6015] page_type: f5(slab) [ 100.248219][ T6015] raw: 05ffc00000000240 ffff0000c0001b40 fffffdffc3182190 fffffdffc34f2d90 [ 100.248224][ T6015] raw: ffff0000ccd92a00 000000080010000e 00000000f5000000 0000000000000000 [ 100.248230][ T6015] head: 05ffc00000000240 ffff0000c0001b40 fffffdffc3182190 fffffdffc34f2d90 [ 100.248236][ T6015] head: ffff0000ccd92a00 000000080010000e 00000000f5000000 0000000000000000 [ 100.248241][ T6015] head: 05ffc00000000001 fffffdffc3336481 00000000ffffffff 00000000ffffffff [ 100.248247][ T6015] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 100.248250][ T6015] page dumped because: kasan: bad access detected [ 100.248253][ T6015] [ 100.248254][ T6015] Memory state around the buggy address: [ 100.248258][ T6015] ffff0000ccd92b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.248262][ T6015] ffff0000ccd92b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.248267][ T6015] >ffff0000ccd92c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.248270][ T6015] ^ 1970/01/01 00:01:40 executed programs: 107 [ 100.248273][ T6015] ffff0000ccd92c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 100.248278][ T6015] ffff0000ccd92d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.248281][ T6015] ================================================================== [ 100.248299][ T6015] Disabling lock debugging due to kernel taint [ 100.248309][ T6015] ------------[ cut here ]------------ [ 100.248318][ T6015] refcount_t: addition on 0; use-after-free. [ 100.248427][ T6015] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x134/0x1f8, CPU#0: syz.2.112/6015 [ 100.351755][ T6015] Modules linked in: [ 100.352450][ T6015] CPU: 0 UID: 0 PID: 6015 Comm: syz.2.112 Tainted: G B syzkaller #0 PREEMPT [ 100.354215][ T6015] Tainted: [B]=BAD_PAGE [ 100.354936][ T6015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 100.356898][ T6015] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.358290][ T6015] pc : refcount_warn_saturate+0x134/0x1f8 [ 100.359275][ T6015] lr : refcount_warn_saturate+0x134/0x1f8 [ 100.360313][ T6015] sp : ffff8000984f7560 [ 100.361004][ T6015] x29: ffff8000984f7560 x28: 1fffe0001b4fa190 x27: dfff800000000000 [ 100.362421][ T6015] x26: ffff70001309eec0 x25: dfff800000000000 x24: ffff8000872f25e8 [ 100.363808][ T6015] x23: ffff0000da7d0c88 x22: ffff0000cc97d400 x21: 0000000000000000 [ 100.365251][ T6015] x20: ffff0000ccd92c10 x19: ffff800089fbd000 x18: 1fffe00035c08220 [ 100.366757][ T6015] x17: 3d3d3d3d3d3d3d3d x16: 3d3d3d3d3d3d3d3d x15: 3d3d3d3d3d3d3d3d [ 100.368207][ T6015] x14: 3d3d3d3d3d3d3d3d x13: 0000000000000001 x12: 0000000000000000 [ 100.369591][ T6015] x11: 000000000000094b x10: 0000000000ff0100 x9 : d9eaa6fcec6df400 [ 100.371006][ T6015] x8 : d9eaa6fcec6df400 x7 : 0000000000000000 x6 : ffff80008047caa0 [ 100.372501][ T6015] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f1374 [ 100.373919][ T6015] x2 : 0000000100000000 x1 : ffff0000c2b1ba00 x0 : 0000000000000000 [ 100.375295][ T6015] Call trace: [ 100.375856][ T6015] refcount_warn_saturate+0x134/0x1f8 (P) [ 100.376890][ T6015] dvb_device_get+0x9c/0xbc [ 100.377663][ T6015] dvb_device_open+0x100/0x250 [ 100.378474][ T6015] chrdev_open+0x398/0x3e8 [ 100.379228][ T6015] do_dentry_open+0x5c4/0xfc8 [ 100.379993][ T6015] vfs_open+0x44/0x2d4 [ 100.380729][ T6015] path_openat+0x2234/0x2a6c [ 100.381489][ T6015] do_file_open+0x1c4/0x2e4 [ 100.382292][ T6015] do_sys_openat2+0x114/0x1e8 [ 100.383096][ T6015] do_sys_open+0xac/0xdc [ 100.383903][ T6015] __arm64_sys_openat+0x9c/0xb8 [ 100.384806][ T6015] invoke_syscall+0x98/0x244 [ 100.385655][ T6015] el0_svc_common+0xe8/0x23c [ 100.386482][ T6015] do_el0_svc+0x48/0x58 [ 100.387224][ T6015] el0_svc+0x64/0x260 [ 100.387975][ T6015] el0t_64_sync_handler+0x48/0x148 [ 100.388843][ T6015] el0t_64_sync+0x198/0x19c [ 100.389697][ T6015] irq event stamp: 65 [ 100.390337][ T6015] hardirqs last enabled at (65): [] arm64_exit_to_kernel_mode+0x80/0x94 [ 100.391961][ T6015] hardirqs last disabled at (64): [] el1_interrupt+0x28/0x60 [ 100.393578][ T6015] softirqs last enabled at (24): [] do_sve_acc+0x22c/0x3b8 [ 100.395202][ T6015] softirqs last disabled at (22): [] do_sve_acc+0x10c/0x3b8 [ 100.396775][ T6015] ---[ end trace 0000000000000000 ]--- [ 100.463539][ T6017] ------------[ cut here ]------------ [ 100.463577][ T6017] refcount_t: saturated; leaking memory. [ 100.466669][ T6017] WARNING: lib/refcount.c:22 at refcount_warn_saturate+0x1b4/0x1f8, CPU#1: syz.4.113/6017 [ 100.468158][ T6017] Modules linked in: [ 100.468805][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: syz.4.113 Tainted: G B W syzkaller #0 PREEMPT [ 100.470560][ T6017] Tainted: [B]=BAD_PAGE, [W]=WARN [ 100.471444][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 100.473223][ T6017] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.474631][ T6017] pc : refcount_warn_saturate+0x1b4/0x1f8 [ 100.475657][ T6017] lr : refcount_warn_saturate+0x1b4/0x1f8 [ 100.476756][ T6017] sp : ffff800095537560 [ 100.477471][ T6017] x29: ffff800095537560 x28: 1fffe0001b6c2638 x27: dfff800000000000 [ 100.478919][ T6017] x26: ffff700012aa6ec0 x25: dfff800000000000 x24: ffff8000872f25e8 [ 100.480348][ T6017] x23: ffff0000db6131c8 x22: 000000007ffffffe x21: 00000000c0000000 [ 100.481763][ T6017] x20: ffff0000ccd92c10 x19: ffff800089fbd000 x18: 1fffe00035c0cc20 [ 100.483145][ T6017] x17: ffff80008897b000 x16: ffff800088a2dba0 x15: ffff0001ae06610c [ 100.484644][ T6017] x14: ffff0001ae066108 x13: 0000000000000001 x12: 0000000000000000 [ 100.486005][ T6017] x11: ffff800080154b2c x10: 0000000000000003 x9 : e8ec9a2188f15100 [ 100.487352][ T6017] x8 : e8ec9a2188f15100 x7 : 0000000000000000 x6 : ffff8000803b0cc8 [ 100.488621][ T6017] x5 : 0000000000000000 x4 : 0000000000000008 x3 : ffff800080154bd4 [ 100.490149][ T6017] x2 : 0000000000000000 x1 : ffff0000cf3dd700 x0 : 0000000000000001 [ 100.491511][ T6017] Call trace: [ 100.492050][ T6017] refcount_warn_saturate+0x1b4/0x1f8 (P) [ 100.493124][ T6017] dvb_device_get+0x9c/0xbc [ 100.493950][ T6017] dvb_device_open+0x100/0x250 [ 100.494710][ T6017] chrdev_open+0x398/0x3e8 [ 100.495469][ T6017] do_dentry_open+0x5c4/0xfc8 [ 100.496254][ T6017] vfs_open+0x44/0x2d4 [ 100.497005][ T6017] path_openat+0x2234/0x2a6c [ 100.497846][ T6017] do_file_open+0x1c4/0x2e4 [ 100.498643][ T6017] do_sys_openat2+0x114/0x1e8 [ 100.499530][ T6017] do_sys_open+0xac/0xdc [ 100.500316][ T6017] __arm64_sys_openat+0x9c/0xb8 [ 100.501243][ T6017] invoke_syscall+0x98/0x244 [ 100.502126][ T6017] el0_svc_common+0xe8/0x23c [ 100.502878][ T6017] do_el0_svc+0x48/0x58 [ 100.503648][ T6017] el0_svc+0x64/0x260 [ 100.504425][ T6017] el0t_64_sync_handler+0x48/0x148 [ 100.505380][ T6017] el0t_64_sync+0x198/0x19c [ 100.506194][ T6017] irq event stamp: 0 [ 100.506884][ T6017] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 100.508159][ T6017] hardirqs last disabled at (0): [] copy_process+0x1374/0x334c [ 100.509769][ T6017] softirqs last enabled at (0): [] copy_process+0x1390/0x334c [ 100.511464][ T6017] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 100.512766][ T6017] ---[ end trace 0000000000000000 ]--- [ 100.799857][ T6017] ------------[ cut here ]------------ [ 100.799882][ T6017] refcount_t: underflow; use-after-free. [ 100.800001][ T6017] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0x154/0x1f8, CPU#0: syz.4.113/6017 [ 100.803306][ T6017] Modules linked in: [ 100.803911][ T6017] CPU: 0 UID: 0 PID: 6017 Comm: syz.4.113 Tainted: G B W syzkaller #0 PREEMPT [ 100.805725][ T6017] Tainted: [B]=BAD_PAGE, [W]=WARN [ 100.806547][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 100.808382][ T6017] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 100.809710][ T6017] pc : refcount_warn_saturate+0x154/0x1f8 [ 100.810704][ T6017] lr : refcount_warn_saturate+0x154/0x1f8 [ 100.811813][ T6017] sp : ffff800095537560 [ 100.812620][ T6017] x29: ffff800095537560 x28: 1fffe0001b6c2638 x27: dfff800000000000 [ 100.814075][ T6017] x26: 1fffe0001b6c2639 x25: dfff800000000000 x24: ffff0000cc97d468 [ 100.815510][ T6017] x23: ffff0000db6131c8 x22: ffff8000839a9e4c x21: 00000000c0000000 [ 100.817018][ T6017] x20: ffff0000ccd92c10 x19: ffff800089fbd000 x18: 1fffe00035c0cc20 [ 100.818515][ T6017] x17: ffff80008897b000 x16: ffff800088a2dba0 x15: ffff0001ae06610c [ 100.819910][ T6017] x14: ffff0001ae066108 x13: 0000000000000001 x12: 0000000000000000 [ 100.821293][ T6017] x11: 0000000000000998 x10: 0000000000ff0100 x9 : e8ec9a2188f15100 [ 100.822717][ T6017] x8 : e8ec9a2188f15100 x7 : 0000000000000000 x6 : ffff80008047caa0 [ 100.824082][ T6017] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f1374 [ 100.825620][ T6017] x2 : 0000000100000000 x1 : ffff0000cf3dd700 x0 : 0000000000000000 [ 100.827152][ T6017] Call trace: [ 100.827750][ T6017] refcount_warn_saturate+0x154/0x1f8 (P) [ 100.828798][ T6017] dvb_device_put+0xac/0xd0 [ 100.829598][ T6017] dvb_device_open+0x238/0x250 [ 100.830521][ T6017] chrdev_open+0x398/0x3e8 [ 100.831332][ T6017] do_dentry_open+0x5c4/0xfc8 [ 100.832202][ T6017] vfs_open+0x44/0x2d4 [ 100.832907][ T6017] path_openat+0x2234/0x2a6c [ 100.833750][ T6017] do_file_open+0x1c4/0x2e4 [ 100.834525][ T6017] do_sys_openat2+0x114/0x1e8 [ 100.835390][ T6017] do_sys_open+0xac/0xdc [ 100.836143][ T6017] __arm64_sys_openat+0x9c/0xb8 [ 100.837002][ T6017] invoke_syscall+0x98/0x244 [ 100.837799][ T6017] el0_svc_common+0xe8/0x23c [ 100.838660][ T6017] do_el0_svc+0x48/0x58 [ 100.839397][ T6017] el0_svc+0x64/0x260 [ 100.840066][ T6017] el0t_64_sync_handler+0x48/0x148 [ 100.840886][ T6017] el0t_64_sync+0x198/0x19c [ 100.841646][ T6017] irq event stamp: 0 [ 100.842255][ T6017] hardirqs last enabled at (0): [<0000000000000000>] 0x0 [ 100.843403][ T6017] hardirqs last disabled at (0): [] copy_process+0x1374/0x334c [ 100.844858][ T6017] softirqs last enabled at (0): [] copy_process+0x1390/0x334c [ 100.846405][ T6017] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 100.847719][ T6017] ---[ end trace 0000000000000000 ]--- 1970/01/01 00:01:45 executed programs: 125 [ 107.559369][ T6123] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)