Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts. 2025/10/12 05:08:33 parsed 1 programs [ 73.568050][ T5835] cgroup: Unknown subsys name 'net' [ 73.722593][ T5835] cgroup: Unknown subsys name 'cpuset' [ 73.731433][ T5835] cgroup: Unknown subsys name 'rlimit' [ 75.221819][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.211468][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.379668][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.387620][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.651916][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.679012][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.737598][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 79.046740][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.066063][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.089136][ T5847] bridge_slave_0: entered allmulticast mode [ 79.097220][ T5847] bridge_slave_0: entered promiscuous mode [ 79.321701][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.329559][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.336764][ T5847] bridge_slave_1: entered allmulticast mode [ 79.371598][ T5847] bridge_slave_1: entered promiscuous mode [ 79.502162][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.564020][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.720896][ T5847] team0: Port device team_slave_0 added [ 79.790914][ T5847] team0: Port device team_slave_1 added [ 80.009663][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.016756][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.059860][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.091456][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.107974][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.150879][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.163028][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.172855][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.180969][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.211668][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.220051][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.413862][ T5847] hsr_slave_0: entered promiscuous mode [ 80.421211][ T5847] hsr_slave_1: entered promiscuous mode [ 81.492110][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.536818][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.587858][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.634731][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.981220][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.026286][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.065302][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.072729][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.090762][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.097909][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.268257][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.299351][ T52] Bluetooth: hci0: command tx timeout [ 82.317771][ T5847] veth0_vlan: entered promiscuous mode [ 82.328595][ T5847] veth1_vlan: entered promiscuous mode [ 82.355361][ T5847] veth0_macvtap: entered promiscuous mode [ 82.364926][ T5847] veth1_macvtap: entered promiscuous mode [ 82.383023][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.397628][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.412882][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.422737][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.435033][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.443965][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/10/12 05:08:44 executed programs: 0 [ 82.604517][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.621313][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.631842][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.652624][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.660987][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.722403][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.732278][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.740447][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.754661][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.764293][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.800903][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.809689][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.823809][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.836828][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.847609][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.865060][ T5909] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.867046][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.879095][ T5909] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.892201][ T5909] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.901627][ T5150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.909540][ T5909] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.917061][ T5909] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.928742][ T5909] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.936211][ T5909] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.947917][ T5964] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.948004][ T5909] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.150176][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.246903][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.722549][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 83.853037][ T5957] chnl_net:caif_netlink_parms(): no params data found [ 83.910352][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 84.065020][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 84.083718][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.097187][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.104543][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.112023][ T5959] bridge_slave_0: entered allmulticast mode [ 84.119236][ T5959] bridge_slave_0: entered promiscuous mode [ 84.127072][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.135173][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.142482][ T5959] bridge_slave_1: entered allmulticast mode [ 84.149868][ T5959] bridge_slave_1: entered promiscuous mode [ 84.233266][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 84.281412][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.294475][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.326003][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.333327][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.340678][ T5957] bridge_slave_0: entered allmulticast mode [ 84.347824][ T5957] bridge_slave_0: entered promiscuous mode [ 84.381562][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.389016][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.396246][ T5946] bridge_slave_0: entered allmulticast mode [ 84.403650][ T5946] bridge_slave_0: entered promiscuous mode [ 84.452827][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.460383][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.467594][ T5957] bridge_slave_1: entered allmulticast mode [ 84.475000][ T5957] bridge_slave_1: entered promiscuous mode [ 84.495974][ T5959] team0: Port device team_slave_0 added [ 84.503777][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.511045][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.518206][ T5946] bridge_slave_1: entered allmulticast mode [ 84.525335][ T5946] bridge_slave_1: entered promiscuous mode [ 84.553928][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.562040][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.569274][ T5949] bridge_slave_0: entered allmulticast mode [ 84.576350][ T5949] bridge_slave_0: entered promiscuous mode [ 84.596363][ T5959] team0: Port device team_slave_1 added [ 84.646594][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.654378][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.661904][ T5949] bridge_slave_1: entered allmulticast mode [ 84.669057][ T5949] bridge_slave_1: entered promiscuous mode [ 84.691750][ T5957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.714426][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.721492][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.747921][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.764189][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.775225][ T5961] Bluetooth: hci1: command tx timeout [ 84.814601][ T5957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.837670][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.844931][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.871133][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.881762][ T5961] Bluetooth: hci2: command tx timeout [ 84.884859][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.935723][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.948944][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.976570][ T5957] team0: Port device team_slave_0 added [ 84.995678][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.003142][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.010566][ T52] Bluetooth: hci3: command tx timeout [ 85.016398][ T5961] Bluetooth: hci4: command tx timeout [ 85.016961][ T5955] bridge_slave_0: entered allmulticast mode [ 85.022531][ T5961] Bluetooth: hci5: command tx timeout [ 85.030739][ T5955] bridge_slave_0: entered promiscuous mode [ 85.108145][ T5957] team0: Port device team_slave_1 added [ 85.129324][ T5946] team0: Port device team_slave_0 added [ 85.135416][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.142675][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.150374][ T5955] bridge_slave_1: entered allmulticast mode [ 85.157296][ T5955] bridge_slave_1: entered promiscuous mode [ 85.204912][ T5949] team0: Port device team_slave_0 added [ 85.223956][ T5946] team0: Port device team_slave_1 added [ 85.266554][ T67] bridge_slave_1: left allmulticast mode [ 85.273013][ T67] bridge_slave_1: left promiscuous mode [ 85.280220][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.291791][ T67] bridge_slave_0: left allmulticast mode [ 85.297433][ T67] bridge_slave_0: left promiscuous mode [ 85.303703][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.524242][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.535028][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.544958][ T67] bond0 (unregistering): Released all slaves [ 85.558658][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.583848][ T5949] team0: Port device team_slave_1 added [ 85.606359][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.613401][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.639900][ T5957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.653891][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.661156][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.687612][ T5957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.702369][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.710074][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.736039][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.759966][ T67] hsr_slave_0: left promiscuous mode [ 85.765868][ T67] hsr_slave_1: left promiscuous mode [ 85.772210][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.779927][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.787868][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.795533][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.811211][ T67] veth1_macvtap: left promiscuous mode [ 85.816796][ T67] veth0_macvtap: left promiscuous mode [ 85.822786][ T67] veth1_vlan: left promiscuous mode [ 85.828770][ T67] veth0_vlan: left promiscuous mode [ 86.097455][ T67] team0 (unregistering): Port device team_slave_1 removed [ 86.125903][ T67] team0 (unregistering): Port device team_slave_0 removed [ 86.344296][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.359384][ T5959] hsr_slave_0: entered promiscuous mode [ 86.366249][ T5959] hsr_slave_1: entered promiscuous mode [ 86.391234][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.398381][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.424441][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.444030][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.451269][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.477350][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.524374][ T5955] team0: Port device team_slave_0 added [ 86.532337][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.543755][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.570036][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.617624][ T5955] team0: Port device team_slave_1 added [ 86.655115][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.662133][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.688954][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.763787][ T5957] hsr_slave_0: entered promiscuous mode [ 86.774510][ T5957] hsr_slave_1: entered promiscuous mode [ 86.776964][ T812] cfg80211: failed to load regulatory.db [ 86.783216][ T5957] debugfs: 'hsr0' already exists in 'hsr' [ 86.793685][ T5957] Cannot create hsr debugfs directory [ 86.801072][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.808106][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.834835][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.851842][ T5961] Bluetooth: hci1: command tx timeout [ 86.853121][ T5949] hsr_slave_0: entered promiscuous mode [ 86.864318][ T5949] hsr_slave_1: entered promiscuous mode [ 86.870704][ T5949] debugfs: 'hsr0' already exists in 'hsr' [ 86.876450][ T5949] Cannot create hsr debugfs directory [ 86.928995][ T5961] Bluetooth: hci2: command tx timeout [ 86.944649][ T5946] hsr_slave_0: entered promiscuous mode [ 86.951565][ T5946] hsr_slave_1: entered promiscuous mode [ 86.957607][ T5946] debugfs: 'hsr0' already exists in 'hsr' [ 86.963810][ T5946] Cannot create hsr debugfs directory [ 87.088481][ T52] Bluetooth: hci4: command tx timeout [ 87.093935][ T52] Bluetooth: hci3: command tx timeout [ 87.095410][ T5961] Bluetooth: hci5: command tx timeout [ 87.184413][ T5955] hsr_slave_0: entered promiscuous mode [ 87.191549][ T5955] hsr_slave_1: entered promiscuous mode [ 87.198043][ T5955] debugfs: 'hsr0' already exists in 'hsr' [ 87.204589][ T5955] Cannot create hsr debugfs directory [ 87.916169][ T5959] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.926705][ T5959] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.961041][ T5959] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.994371][ T5959] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.053043][ T5957] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.096988][ T5957] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.115396][ T5957] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.156749][ T5957] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.355444][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.398118][ T5957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.423643][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.445473][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.452674][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.500649][ T5957] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.512937][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.520140][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.565321][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.572525][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.624818][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.632026][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.660409][ T5949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.673546][ T5949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.683521][ T5949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.697602][ T5949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.848184][ T5946] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.884031][ T5946] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.939059][ T5961] Bluetooth: hci1: command tx timeout [ 88.962522][ T5946] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.976375][ T5946] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.011620][ T5961] Bluetooth: hci2: command tx timeout [ 89.115927][ T5955] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.168216][ T5955] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.170647][ T5961] Bluetooth: hci5: command tx timeout [ 89.176750][ T5909] Bluetooth: hci3: command tx timeout [ 89.180556][ T5961] Bluetooth: hci4: command tx timeout [ 89.216201][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.255417][ T5955] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.291725][ T5955] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.419999][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.451324][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.574330][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.616410][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.623605][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.700071][ T5957] veth0_vlan: entered promiscuous mode [ 89.714081][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.721290][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.773937][ T5957] veth1_vlan: entered promiscuous mode [ 89.805547][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.904944][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.951653][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.981534][ T5957] veth0_macvtap: entered promiscuous mode [ 89.995406][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.002630][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.041572][ T5957] veth1_macvtap: entered promiscuous mode [ 90.067674][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.074952][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.111253][ T5959] veth0_vlan: entered promiscuous mode [ 90.180173][ T5959] veth1_vlan: entered promiscuous mode [ 90.239725][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.257172][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.281574][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.288763][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.313700][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.351864][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.359055][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.433876][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.517031][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.539692][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.562475][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.583632][ T5959] veth0_macvtap: entered promiscuous mode [ 90.657162][ T5959] veth1_macvtap: entered promiscuous mode [ 90.751879][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.802793][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.822788][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.930165][ T3493] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.958979][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.966829][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.001931][ T3493] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.008744][ T5961] Bluetooth: hci1: command tx timeout [ 91.088676][ T5961] Bluetooth: hci2: command tx timeout [ 91.101394][ T3493] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.142394][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.164843][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.182645][ T3493] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.259885][ T5961] Bluetooth: hci4: command tx timeout [ 91.259903][ T52] Bluetooth: hci3: command tx timeout [ 91.265316][ T5961] Bluetooth: hci5: command tx timeout [ 91.275335][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 2025/10/12 05:08:52 executed programs: 10 [ 91.353729][ T5949] veth0_vlan: entered promiscuous mode [ 91.457804][ T5949] veth1_vlan: entered promiscuous mode [ 91.480844][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.512560][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.630933][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.660144][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.675238][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.761041][ T5949] veth0_macvtap: entered promiscuous mode [ 91.794033][ T5949] veth1_macvtap: entered promiscuous mode [ 91.805368][ T5946] veth0_vlan: entered promiscuous mode [ 91.874850][ T5946] veth1_vlan: entered promiscuous mode [ 91.907295][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.996230][ T5955] veth0_vlan: entered promiscuous mode [ 92.038909][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.070739][ T5946] veth0_macvtap: entered promiscuous mode [ 92.097407][ T5955] veth1_vlan: entered promiscuous mode [ 92.151144][ T5946] veth1_macvtap: entered promiscuous mode [ 92.177521][ T3493] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.198221][ T3493] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.241588][ T3493] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.283414][ T3493] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.307740][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.358104][ T5955] veth0_macvtap: entered promiscuous mode [ 92.414867][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.442359][ T5955] veth1_macvtap: entered promiscuous mode [ 92.494838][ T3482] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.513340][ T3482] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.560203][ T3482] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.626996][ T3482] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.701056][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.759808][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.793977][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.828101][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.871664][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.920556][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.951859][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.958889][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.189944][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.194847][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.197791][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.221933][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.436823][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.467917][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.560830][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.585345][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.695221][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.734825][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.734666][ T6298] ================================================================== [ 95.742784][ T6298] BUG: KASAN: slab-use-after-free in flow_block_cb_setup_simple+0x1cc/0x740 [ 95.751503][ T6298] Read of size 8 at addr ffff888027c6ef20 by task syz.4.189/6298 [ 95.759310][ T6298] [ 95.761657][ T6298] CPU: 0 UID: 0 PID: 6298 Comm: syz.4.189 Not tainted syzkaller #0 PREEMPT(full) [ 95.761678][ T6298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.761695][ T6298] Call Trace: [ 95.761702][ T6298] [ 95.761710][ T6298] dump_stack_lvl+0x189/0x250 [ 95.761731][ T6298] ? __virt_addr_valid+0x1c8/0x5c0 [ 95.761749][ T6298] ? rcu_is_watching+0x15/0xb0 [ 95.761770][ T6298] ? __kasan_check_byte+0x12/0x40 [ 95.761791][ T6298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.761807][ T6298] ? rcu_is_watching+0x15/0xb0 [ 95.761829][ T6298] ? lock_release+0x4b/0x3e0 [ 95.761852][ T6298] ? __virt_addr_valid+0x1c8/0x5c0 [ 95.761868][ T6298] ? __virt_addr_valid+0x4a5/0x5c0 [ 95.761893][ T6298] print_report+0xca/0x240 [ 95.761911][ T6298] ? flow_block_cb_setup_simple+0x1cc/0x740 [ 95.761932][ T6298] kasan_report+0x118/0x150 [ 95.761951][ T6298] ? flow_block_cb_setup_simple+0x1cc/0x740 [ 95.761973][ T6298] ? __pfx_nsim_setup_tc_block_cb+0x10/0x10 [ 95.761998][ T6298] flow_block_cb_setup_simple+0x1cc/0x740 [ 95.762021][ T6298] nft_chain_offload_cmd+0x293/0x660 [ 95.762045][ T6298] ? __pfx_nft_chain_offload_cmd+0x10/0x10 [ 95.762074][ T6298] ? __lock_acquire+0xab9/0xd20 [ 95.762102][ T6298] ? nft_pernet+0x45/0x270 [ 95.762124][ T6298] ? nft_pernet+0x45/0x270 [ 95.762143][ T6298] ? nft_pernet+0x45/0x270 [ 95.762165][ T6298] nft_flow_rule_offload_commit+0x814/0x1b60 [ 95.762187][ T6298] ? is_bpf_text_address+0x292/0x2b0 [ 95.762212][ T6298] ? __pfx_nft_flow_rule_offload_commit+0x10/0x10 [ 95.762233][ T6298] ? unwind_get_return_address+0x4d/0x90 [ 95.762256][ T6298] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 95.762273][ T6298] ? arch_stack_walk+0xfc/0x150 [ 95.762301][ T6298] ? stack_trace_save+0x9c/0xe0 [ 95.762316][ T6298] ? __pfx_stack_trace_save+0x10/0x10 [ 95.762334][ T6298] ? stack_depot_save_flags+0x40/0x860 [ 95.762354][ T6298] ? kasan_save_track+0x4f/0x80 [ 95.762370][ T6298] ? kasan_save_track+0x3e/0x80 [ 95.762385][ T6298] ? __kasan_kmalloc+0x93/0xb0 [ 95.762403][ T6298] ? __kvmalloc_node_noprof+0x5cd/0x910 [ 95.762422][ T6298] ? nf_hook_entries_grow+0x281/0x720 [ 95.762444][ T6298] ? __nf_register_net_hook+0x2c9/0x930 [ 95.762466][ T6298] ? nf_register_net_hook+0xb2/0x190 [ 95.762487][ T6298] ? nf_tables_register_hook+0x216/0x440 [ 95.762506][ T6298] ? nf_tables_newchain+0x222c/0x2750 [ 95.762521][ T6298] ? nfnetlink_rcv+0x11d9/0x2590 [ 95.762539][ T6298] ? netlink_unicast+0x82f/0x9e0 [ 95.762557][ T6298] ? netlink_sendmsg+0x805/0xb30 [ 95.762577][ T6298] ? __sock_sendmsg+0x21c/0x270 [ 95.762595][ T6298] ? ____sys_sendmsg+0x505/0x830 [ 95.762617][ T6298] ? ___sys_sendmsg+0x21f/0x2a0 [ 95.762639][ T6298] ? __x64_sys_sendmsg+0x19b/0x260 [ 95.762653][ T6298] ? do_syscall_64+0xfa/0xfa0 [ 95.762668][ T6298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.762686][ T6298] ? __lock_acquire+0xab9/0xd20 [ 95.762710][ T6298] ? nft_pernet+0x23/0x240 [ 95.762729][ T6298] ? nft_pernet+0x23/0x240 [ 95.762745][ T6298] ? nft_pernet+0x23/0x240 [ 95.762760][ T6298] ? nft_pernet+0x23/0x240 [ 95.762777][ T6298] ? nft_pernet+0x1ed/0x240 [ 95.762795][ T6298] ? nf_tables_validate+0x331/0x390 [ 95.762820][ T6298] ? __pfx_nf_tables_validate+0x10/0x10 [ 95.762845][ T6298] ? nft_pernet+0x23/0x240 [ 95.762861][ T6298] ? nft_pernet+0x23/0x240 [ 95.762886][ T6298] nf_tables_commit+0x69b/0xa1b0 [ 95.762901][ T6298] ? static_key_slow_inc+0x21/0x30 [ 95.762926][ T6298] ? nf_tables_register_hook+0x3e8/0x440 [ 95.762946][ T6298] ? nf_tables_newchain+0x2246/0x2750 [ 95.762964][ T6298] ? __pfx_nf_tables_commit+0x10/0x10 [ 95.762982][ T6298] ? __pfx_nf_tables_newchain+0x10/0x10 [ 95.763017][ T6298] nfnetlink_rcv+0x1ac9/0x2590 [ 95.763050][ T6298] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 95.763076][ T6298] ? ref_tracker_free+0x63a/0x7d0 [ 95.763103][ T6298] ? __netlink_deliver_tap+0x807/0x850 [ 95.763124][ T6298] ? netlink_deliver_tap+0x2e/0x1b0 [ 95.763152][ T6298] netlink_unicast+0x82f/0x9e0 [ 95.763175][ T6298] ? __pfx_netlink_unicast+0x10/0x10 [ 95.763196][ T6298] ? netlink_sendmsg+0x642/0xb30 [ 95.763217][ T6298] ? skb_put+0x11b/0x210 [ 95.763241][ T6298] netlink_sendmsg+0x805/0xb30 [ 95.763267][ T6298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.763291][ T6298] ? aa_sock_msg_perm+0xf1/0x1d0 [ 95.763311][ T6298] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 95.763332][ T6298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.763355][ T6298] __sock_sendmsg+0x21c/0x270 [ 95.763374][ T6298] ____sys_sendmsg+0x505/0x830 [ 95.763401][ T6298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.763428][ T6298] ? import_iovec+0x74/0xa0 [ 95.763450][ T6298] ___sys_sendmsg+0x21f/0x2a0 [ 95.763474][ T6298] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.763500][ T6298] ? futex_hash_put+0x4b/0x60 [ 95.763515][ T6298] ? futex_wake+0x4b2/0x560 [ 95.763547][ T6298] __x64_sys_sendmsg+0x19b/0x260 [ 95.763562][ T6298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 95.763587][ T6298] ? do_user_addr_fault+0xc85/0x1380 [ 95.763607][ T6298] ? do_syscall_64+0xbe/0xfa0 [ 95.763622][ T6298] do_syscall_64+0xfa/0xfa0 [ 95.763634][ T6298] ? lockdep_hardirqs_on+0x9c/0x150 [ 95.763649][ T6298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.763665][ T6298] ? clear_bhb_loop+0x60/0xb0 [ 95.763682][ T6298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.763697][ T6298] RIP: 0033:0x7f85aa58eec9 [ 95.763720][ T6298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.763735][ T6298] RSP: 002b:00007fff36411428 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.763753][ T6298] RAX: ffffffffffffffda RBX: 00007f85aa7e5fa0 RCX: 00007f85aa58eec9 [ 95.763766][ T6298] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 95.763775][ T6298] RBP: 00007f85aa611f91 R08: 0000000000000000 R09: 0000000000000000 [ 95.763785][ T6298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.763794][ T6298] R13: 00007f85aa7e5fa0 R14: 00007f85aa7e5fa0 R15: 0000000000000003 [ 95.763815][ T6298] [ 95.763822][ T6298] [ 96.348213][ T6298] Allocated by task 6296: [ 96.352547][ T6298] kasan_save_track+0x3e/0x80 [ 96.357236][ T6298] __kasan_kmalloc+0x93/0xb0 [ 96.361841][ T6298] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 96.367217][ T6298] flow_block_cb_setup_simple+0x2a1/0x740 [ 96.372941][ T6298] nft_chain_offload_cmd+0x293/0x660 [ 96.378225][ T6298] nft_flow_rule_offload_commit+0x814/0x1b60 [ 96.384191][ T6298] nf_tables_commit+0x69b/0xa1b0 [ 96.389111][ T6298] nfnetlink_rcv+0x1ac9/0x2590 [ 96.393860][ T6298] netlink_unicast+0x82f/0x9e0 [ 96.398789][ T6298] netlink_sendmsg+0x805/0xb30 [ 96.403558][ T6298] __sock_sendmsg+0x21c/0x270 [ 96.408220][ T6298] ____sys_sendmsg+0x505/0x830 [ 96.413066][ T6298] ___sys_sendmsg+0x21f/0x2a0 [ 96.417741][ T6298] __x64_sys_sendmsg+0x19b/0x260 [ 96.422664][ T6298] do_syscall_64+0xfa/0xfa0 [ 96.427169][ T6298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.433045][ T6298] [ 96.435354][ T6298] Freed by task 6296: [ 96.439311][ T6298] kasan_save_track+0x3e/0x80 [ 96.443972][ T6298] __kasan_save_free_info+0x46/0x50 [ 96.449160][ T6298] __kasan_slab_free+0x5c/0x80 [ 96.453907][ T6298] kfree+0x19a/0x6d0 [ 96.457805][ T6298] nft_flow_offload_unbind+0x3c0/0x440 [ 96.463265][ T6298] nft_chain_offload_cmd+0x43f/0x660 [ 96.468550][ T6298] nft_flow_rule_offload_commit+0x40d/0x1b60 [ 96.474535][ T6298] nf_tables_commit+0x69b/0xa1b0 [ 96.479471][ T6298] nfnetlink_rcv+0x1ac9/0x2590 [ 96.484231][ T6298] netlink_unicast+0x82f/0x9e0 [ 96.488984][ T6298] netlink_sendmsg+0x805/0xb30 [ 96.493736][ T6298] __sock_sendmsg+0x21c/0x270 [ 96.498398][ T6298] ____sys_sendmsg+0x505/0x830 [ 96.503158][ T6298] ___sys_sendmsg+0x21f/0x2a0 [ 96.507823][ T6298] __x64_sys_sendmsg+0x19b/0x260 [ 96.512832][ T6298] do_syscall_64+0xfa/0xfa0 [ 96.517317][ T6298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.523195][ T6298] [ 96.525503][ T6298] The buggy address belongs to the object at ffff888027c6ef00 [ 96.525503][ T6298] which belongs to the cache kmalloc-192 of size 192 [ 96.539550][ T6298] The buggy address is located 32 bytes inside of [ 96.539550][ T6298] freed 192-byte region [ffff888027c6ef00, ffff888027c6efc0) [ 96.553336][ T6298] [ 96.555649][ T6298] The buggy address belongs to the physical page: [ 96.562061][ T6298] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27c6e [ 96.570900][ T6298] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 96.578345][ T6298] page_type: f5(slab) [ 96.582310][ T6298] raw: 00fff00000000000 ffff88813ffa63c0 ffffea00009315c0 dead000000000003 [ 96.590881][ T6298] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 96.599454][ T6298] page dumped because: kasan: bad access detected [ 96.605938][ T6298] page_owner tracks the page as allocated [ 96.611631][ T6298] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 8960677307, free_ts 8950762368 [ 96.629770][ T6298] post_alloc_hook+0x240/0x2a0 [ 96.634527][ T6298] get_page_from_freelist+0x2365/0x2440 [ 96.640057][ T6298] __alloc_frozen_pages_noprof+0x181/0x370 [ 96.645937][ T6298] alloc_pages_mpol+0x232/0x4a0 [ 96.650782][ T6298] allocate_slab+0x96/0x3a0 [ 96.655285][ T6298] ___slab_alloc+0xe94/0x18a0 [ 96.659947][ T6298] __slab_alloc+0x65/0x100 [ 96.664347][ T6298] __kmalloc_noprof+0x471/0x7f0 [ 96.669184][ T6298] usb_alloc_urb+0x46/0x150 [ 96.673687][ T6298] usb_control_msg+0x118/0x3e0 [ 96.678439][ T6298] hub_probe+0x100b/0x37f0 [ 96.682844][ T6298] usb_probe_interface+0x668/0xc30 [ 96.687941][ T6298] really_probe+0x26d/0x9e0 [ 96.692434][ T6298] __driver_probe_device+0x18c/0x2f0 [ 96.697707][ T6298] driver_probe_device+0x4f/0x430 [ 96.702717][ T6298] __device_attach_driver+0x2ce/0x530 [ 96.708079][ T6298] page last free pid 9 tgid 9 stack trace: [ 96.713860][ T6298] __free_frozen_pages+0xbc4/0xd30 [ 96.718975][ T6298] vfree+0x25a/0x400 [ 96.722854][ T6298] delayed_vfree_work+0x55/0x80 [ 96.727725][ T6298] process_scheduled_works+0xae1/0x17b0 [ 96.733256][ T6298] worker_thread+0x8a0/0xda0 [ 96.737832][ T6298] kthread+0x711/0x8a0 [ 96.741882][ T6298] ret_from_fork+0x4bc/0x870 [ 96.746464][ T6298] ret_from_fork_asm+0x1a/0x30 [ 96.751216][ T6298] [ 96.753525][ T6298] Memory state around the buggy address: [ 96.759139][ T6298] ffff888027c6ee00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 96.767185][ T6298] ffff888027c6ee80: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 96.775231][ T6298] >ffff888027c6ef00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.783278][ T6298] ^ [ 96.788373][ T6298] ffff888027c6ef80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 96.796417][ T6298] ffff888027c6f000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 96.804459][ T6298] ================================================================== [ 96.828603][ T6299] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 96.840526][ T6299] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 96.848930][ T6299] CPU: 0 UID: 0 PID: 6299 Comm: syz.2.193 Not tainted syzkaller #0 PREEMPT(full) [ 96.858105][ T6299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.868143][ T6299] RIP: 0010:flow_block_cb_setup_simple+0x1be/0x740 [ 96.874643][ T6299] Code: f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 c9 39 e6 f8 4d 8b 2e 4d 39 f5 0f 84 b6 00 00 00 49 8d 6d 20 48 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 48 89 ef e8 a4 39 e6 f8 4c 39 65 00 74 07 e8 79 [ 96.894235][ T6299] RSP: 0018:ffffc90004fa66d0 EFLAGS: 00010202 [ 96.900290][ T6299] RAX: 0000000000000004 RBX: dffffc0000000000 RCX: ffff88802eb1bc80 [ 96.908248][ T6299] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888048ac78c0 [ 96.916200][ T6299] RBP: 0000000000000020 R08: ffff88802eb1bc80 R09: 0000000000000002 [ 96.924239][ T6299] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff86e42da0 [ 96.932198][ T6299] R13: 0000000000000000 R14: ffffffff8ed74f20 R15: ffff8880334f8d80 [ 96.940165][ T6299] FS: 000055555e23d500(0000) GS:ffff888125d0c000(0000) knlGS:0000000000000000 [ 96.949080][ T6299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.955646][ T6299] CR2: 0000200000000380 CR3: 0000000073f96000 CR4: 00000000003526f0 [ 96.963603][ T6299] Call Trace: [ 96.966866][ T6299] [ 96.969782][ T6299] nft_chain_offload_cmd+0x293/0x660 [ 96.975060][ T6299] ? __pfx_nft_chain_offload_cmd+0x10/0x10 [ 96.980965][ T6299] ? __lock_acquire+0xab9/0xd20 [ 96.985929][ T6299] ? nft_pernet+0x45/0x270 [ 96.990349][ T6299] ? nft_pernet+0x45/0x270 [ 96.994758][ T6299] ? nft_pernet+0x45/0x270 [ 96.999170][ T6299] nft_flow_rule_offload_commit+0x814/0x1b60 [ 97.005157][ T6299] ? is_bpf_text_address+0x292/0x2b0 [ 97.010442][ T6299] ? __pfx_nft_flow_rule_offload_commit+0x10/0x10 [ 97.016890][ T6299] ? unwind_get_return_address+0x4d/0x90 [ 97.022519][ T6299] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 97.028693][ T6299] ? arch_stack_walk+0xfc/0x150 [ 97.033538][ T6299] ? stack_trace_save+0x9c/0xe0 [ 97.038385][ T6299] ? __pfx_stack_trace_save+0x10/0x10 [ 97.043827][ T6299] ? stack_depot_save_flags+0x40/0x860 [ 97.049273][ T6299] ? kasan_save_track+0x4f/0x80 [ 97.054114][ T6299] ? kasan_save_track+0x3e/0x80 [ 97.059035][ T6299] ? __kasan_kmalloc+0x93/0xb0 [ 97.063788][ T6299] ? __kvmalloc_node_noprof+0x5cd/0x910 [ 97.069320][ T6299] ? nf_hook_entries_grow+0x281/0x720 [ 97.074684][ T6299] ? __nf_register_net_hook+0x2c9/0x930 [ 97.080311][ T6299] ? nf_register_net_hook+0xb2/0x190 [ 97.085584][ T6299] ? nf_tables_register_hook+0x216/0x440 [ 97.091205][ T6299] ? nf_tables_newchain+0x222c/0x2750 [ 97.096563][ T6299] ? nfnetlink_rcv+0x11d9/0x2590 [ 97.101486][ T6299] ? netlink_unicast+0x82f/0x9e0 [ 97.106412][ T6299] ? netlink_sendmsg+0x805/0xb30 [ 97.111342][ T6299] ? __sock_sendmsg+0x21c/0x270 [ 97.116180][ T6299] ? ____sys_sendmsg+0x505/0x830 [ 97.121103][ T6299] ? ___sys_sendmsg+0x21f/0x2a0 [ 97.125940][ T6299] ? __x64_sys_sendmsg+0x19b/0x260 [ 97.131032][ T6299] ? do_syscall_64+0xfa/0xfa0 [ 97.135690][ T6299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.141743][ T6299] ? __lock_acquire+0xab9/0xd20 [ 97.146582][ T6299] ? nft_pernet+0x23/0x240 [ 97.150981][ T6299] ? nft_pernet+0x23/0x240 [ 97.155382][ T6299] ? nft_pernet+0x23/0x240 [ 97.159862][ T6299] ? nft_pernet+0x23/0x240 [ 97.164264][ T6299] ? nft_pernet+0x1ed/0x240 [ 97.168751][ T6299] ? nf_tables_validate+0x331/0x390 [ 97.173947][ T6299] ? __pfx_nf_tables_validate+0x10/0x10 [ 97.179498][ T6299] ? nft_pernet+0x23/0x240 [ 97.183919][ T6299] ? nft_pernet+0x23/0x240 [ 97.188326][ T6299] nf_tables_commit+0x69b/0xa1b0 [ 97.193250][ T6299] ? static_key_slow_inc+0x21/0x30 [ 97.198353][ T6299] ? nf_tables_register_hook+0x3e8/0x440 [ 97.203974][ T6299] ? nf_tables_newchain+0x2246/0x2750 [ 97.209336][ T6299] ? __pfx_nf_tables_commit+0x10/0x10 [ 97.214695][ T6299] ? __pfx_nf_tables_newchain+0x10/0x10 [ 97.220286][ T6299] nfnetlink_rcv+0x1ac9/0x2590 [ 97.225050][ T6299] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 97.230156][ T6299] ? ref_tracker_free+0x63a/0x7d0 [ 97.235175][ T6299] ? __netlink_deliver_tap+0x807/0x850 [ 97.240628][ T6299] ? netlink_deliver_tap+0x2e/0x1b0 [ 97.245816][ T6299] netlink_unicast+0x82f/0x9e0 [ 97.250591][ T6299] ? __pfx_netlink_unicast+0x10/0x10 [ 97.255892][ T6299] ? netlink_sendmsg+0x642/0xb30 [ 97.260819][ T6299] ? skb_put+0x11b/0x210 [ 97.265053][ T6299] netlink_sendmsg+0x805/0xb30 [ 97.269820][ T6299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.275092][ T6299] ? aa_sock_msg_perm+0xf1/0x1d0 [ 97.280019][ T6299] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 97.285304][ T6299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.290598][ T6299] __sock_sendmsg+0x21c/0x270 [ 97.295264][ T6299] ____sys_sendmsg+0x505/0x830 [ 97.300022][ T6299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.305329][ T6299] ? import_iovec+0x74/0xa0 [ 97.309838][ T6299] ___sys_sendmsg+0x21f/0x2a0 [ 97.314510][ T6299] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.319706][ T6299] ? futex_hash_put+0x4b/0x60 [ 97.324370][ T6299] ? futex_wake+0x4b2/0x560 [ 97.328876][ T6299] __x64_sys_sendmsg+0x19b/0x260 [ 97.333800][ T6299] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 97.339276][ T6299] ? do_user_addr_fault+0xc85/0x1380 [ 97.344549][ T6299] ? do_syscall_64+0xbe/0xfa0 [ 97.349648][ T6299] do_syscall_64+0xfa/0xfa0 [ 97.354133][ T6299] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.359322][ T6299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.365371][ T6299] ? clear_bhb_loop+0x60/0xb0 [ 97.370055][ T6299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.375948][ T6299] RIP: 0033:0x7fa40278eec9 [ 97.380357][ T6299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.399972][ T6299] RSP: 002b:00007fffe37a09c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.408405][ T6299] RAX: ffffffffffffffda RBX: 00007fa4029e5fa0 RCX: 00007fa40278eec9 [ 97.416398][ T6299] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 97.424377][ T6299] RBP: 00007fa402811f91 R08: 0000000000000000 R09: 0000000000000000 [ 97.432354][ T6299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.440326][ T6299] R13: 00007fa4029e5fa0 R14: 00007fa4029e5fa0 R15: 0000000000000003 [ 97.448296][ T6299] [ 97.451305][ T6299] Modules linked in: [ 97.456092][ T6298] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 97.463633][ T6298] Kernel Offset: disabled [ 97.467942][ T6298] Rebooting in 86400 seconds..