Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts. 2026/01/28 09:53:54 parsed 1 programs [ 72.768640][ T5828] cgroup: Unknown subsys name 'net' [ 72.939992][ T5828] cgroup: Unknown subsys name 'cpuset' [ 72.948314][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.374611][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.327143][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.335078][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.395122][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.508268][ T3802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.536666][ T3802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.810528][ T5151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.818961][ T5151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.828902][ T5151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.848645][ T5151] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.857128][ T5151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.806885][ T5892] chnl_net:caif_netlink_parms(): no params data found [ 80.345223][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.362180][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.369835][ T5892] bridge_slave_0: entered allmulticast mode [ 80.377410][ T5892] bridge_slave_0: entered promiscuous mode [ 80.386701][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.393805][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.401275][ T5892] bridge_slave_1: entered allmulticast mode [ 80.409068][ T5892] bridge_slave_1: entered promiscuous mode [ 80.435898][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.450320][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.490144][ T5892] team0: Port device team_slave_0 added [ 80.499393][ T5892] team0: Port device team_slave_1 added [ 80.532370][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.540771][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.566730][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.583281][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.590295][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.616446][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.657354][ T5892] hsr_slave_0: entered promiscuous mode [ 80.663644][ T5892] hsr_slave_1: entered promiscuous mode [ 80.784592][ T5892] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.798186][ T5892] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.809033][ T5892] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.818557][ T5892] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.882373][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.903423][ T5892] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.915878][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.923128][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.931502][ T5151] Bluetooth: hci0: command tx timeout [ 80.942724][ T3802] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.949972][ T3802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.098487][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.263176][ T5892] veth0_vlan: entered promiscuous mode [ 81.273795][ T5892] veth1_vlan: entered promiscuous mode [ 81.299214][ T5892] veth0_macvtap: entered promiscuous mode [ 81.310151][ T5892] veth1_macvtap: entered promiscuous mode [ 81.331326][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.345050][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.360731][ T3802] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.370555][ T3802] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.381575][ T3802] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.392015][ T3802] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/28 09:54:05 executed programs: 0 [ 81.535511][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.549241][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.557747][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.570081][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.577785][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.700538][ T5151] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.713873][ T5151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.723041][ T5151] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.738106][ T5151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.746311][ T5151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.812055][ T5963] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.823848][ T5151] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.834750][ T5151] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.843736][ T5151] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.853047][ T5151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.860971][ T5151] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.869235][ T5151] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.878274][ T5151] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.887364][ T5151] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.894838][ T5151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.902636][ T5151] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.910396][ T5151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.923193][ T5961] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.934536][ T5151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.943288][ T5897] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.555509][ T3802] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.658350][ T3802] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.730933][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 82.744407][ T5958] chnl_net:caif_netlink_parms(): no params data found [ 82.809320][ T3802] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.844097][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 82.867949][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 82.906880][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 82.959730][ T3802] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.072936][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.080350][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.087712][ T5959] bridge_slave_0: entered allmulticast mode [ 83.094560][ T5959] bridge_slave_0: entered promiscuous mode [ 83.133367][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.141447][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.148756][ T5959] bridge_slave_1: entered allmulticast mode [ 83.155626][ T5959] bridge_slave_1: entered promiscuous mode [ 83.171171][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.178456][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.185594][ T5958] bridge_slave_0: entered allmulticast mode [ 83.192737][ T5958] bridge_slave_0: entered promiscuous mode [ 83.249871][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.257072][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.264241][ T5958] bridge_slave_1: entered allmulticast mode [ 83.271394][ T5958] bridge_slave_1: entered promiscuous mode [ 83.308982][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.316253][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.323433][ T5955] bridge_slave_0: entered allmulticast mode [ 83.330759][ T5955] bridge_slave_0: entered promiscuous mode [ 83.347588][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.354727][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.362012][ T5949] bridge_slave_0: entered allmulticast mode [ 83.369115][ T5949] bridge_slave_0: entered promiscuous mode [ 83.387810][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.394965][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.406061][ T5956] bridge_slave_0: entered allmulticast mode [ 83.413150][ T5956] bridge_slave_0: entered promiscuous mode [ 83.420655][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.428458][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.435763][ T5955] bridge_slave_1: entered allmulticast mode [ 83.443025][ T5955] bridge_slave_1: entered promiscuous mode [ 83.452618][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.465651][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.474964][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.482531][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.489772][ T5949] bridge_slave_1: entered allmulticast mode [ 83.496968][ T5949] bridge_slave_1: entered promiscuous mode [ 83.516986][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.526849][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.534059][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.541381][ T5956] bridge_slave_1: entered allmulticast mode [ 83.548907][ T5956] bridge_slave_1: entered promiscuous mode [ 83.612159][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.623515][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.647007][ T5963] Bluetooth: hci1: command tx timeout [ 83.660912][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.704166][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.723563][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.735473][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.754042][ T5959] team0: Port device team_slave_0 added [ 83.780628][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.811144][ T5959] team0: Port device team_slave_1 added [ 83.819668][ T5958] team0: Port device team_slave_0 added [ 83.827999][ T5949] team0: Port device team_slave_0 added [ 83.843520][ T5955] team0: Port device team_slave_0 added [ 83.874049][ T5958] team0: Port device team_slave_1 added [ 83.880292][ T5963] Bluetooth: hci2: command tx timeout [ 83.888167][ T5949] team0: Port device team_slave_1 added [ 83.911257][ T5955] team0: Port device team_slave_1 added [ 83.925592][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.932988][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.959322][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.970658][ T5963] Bluetooth: hci5: command tx timeout [ 84.003686][ T5956] team0: Port device team_slave_0 added [ 84.020729][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.027898][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.036507][ T5963] Bluetooth: hci4: command tx timeout [ 84.054220][ T5151] Bluetooth: hci3: command tx timeout [ 84.065827][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.083646][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.090694][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.117064][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.139954][ T5956] team0: Port device team_slave_1 added [ 84.153100][ T3802] bridge_slave_1: left allmulticast mode [ 84.159289][ T3802] bridge_slave_1: left promiscuous mode [ 84.165803][ T3802] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.177996][ T3802] bridge_slave_0: left allmulticast mode [ 84.183650][ T3802] bridge_slave_0: left promiscuous mode [ 84.189919][ T3802] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.379557][ T3802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.390704][ T3802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.401105][ T3802] bond0 (unregistering): Released all slaves [ 84.490732][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.498026][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.524498][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.538903][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.550494][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.576941][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.597394][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.608172][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.638576][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.668173][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.675259][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.701869][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.714436][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.721882][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.747959][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.808518][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.815474][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.844589][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.862602][ T3802] hsr_slave_0: left promiscuous mode [ 84.868536][ T3802] hsr_slave_1: left promiscuous mode [ 84.874301][ T3802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.881897][ T3802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.889962][ T3802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.897457][ T3802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.913623][ T3802] veth1_macvtap: left promiscuous mode [ 84.921992][ T3802] veth0_macvtap: left promiscuous mode [ 84.927762][ T3802] veth1_vlan: left promiscuous mode [ 84.933122][ T3802] veth0_vlan: left promiscuous mode [ 85.213131][ T3802] team0 (unregistering): Port device team_slave_1 removed [ 85.241748][ T3802] team0 (unregistering): Port device team_slave_0 removed [ 85.471609][ T5959] hsr_slave_0: entered promiscuous mode [ 85.479685][ T5959] hsr_slave_1: entered promiscuous mode [ 85.494721][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.503924][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.531701][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.596532][ T5958] hsr_slave_0: entered promiscuous mode [ 85.602751][ T5958] hsr_slave_1: entered promiscuous mode [ 85.609845][ T5958] debugfs: 'hsr0' already exists in 'hsr' [ 85.615701][ T5958] Cannot create hsr debugfs directory [ 85.647513][ T5955] hsr_slave_0: entered promiscuous mode [ 85.653767][ T5955] hsr_slave_1: entered promiscuous mode [ 85.660045][ T5955] debugfs: 'hsr0' already exists in 'hsr' [ 85.665774][ T5955] Cannot create hsr debugfs directory [ 85.714641][ T5949] hsr_slave_0: entered promiscuous mode [ 85.721682][ T5949] hsr_slave_1: entered promiscuous mode [ 85.726928][ T5151] Bluetooth: hci1: command tx timeout [ 85.728691][ T5949] debugfs: 'hsr0' already exists in 'hsr' [ 85.738575][ T5949] Cannot create hsr debugfs directory [ 85.804148][ T5956] hsr_slave_0: entered promiscuous mode [ 85.810790][ T5956] hsr_slave_1: entered promiscuous mode [ 85.817230][ T5956] debugfs: 'hsr0' already exists in 'hsr' [ 85.822984][ T5956] Cannot create hsr debugfs directory [ 85.956945][ T5151] Bluetooth: hci2: command tx timeout [ 86.036364][ T5151] Bluetooth: hci5: command tx timeout [ 86.117050][ T5151] Bluetooth: hci4: command tx timeout [ 86.117058][ T5963] Bluetooth: hci3: command tx timeout [ 86.612353][ T5955] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.626007][ T5955] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.640229][ T5955] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.661984][ T5955] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.721591][ T5956] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.734767][ T5956] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.747260][ T5956] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.759167][ T107] cfg80211: failed to load regulatory.db [ 86.781508][ T5956] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.880523][ T5958] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.913693][ T5958] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.949890][ T5958] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.982006][ T5958] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.045544][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.090986][ T5949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.118374][ T5949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.163546][ T5949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.186139][ T5949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.213909][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.300352][ T3802] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.307546][ T3802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.322829][ T3802] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.329972][ T3802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.356963][ T5959] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.370466][ T5959] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.384064][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.398353][ T5959] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.409029][ T5959] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.438550][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.467739][ T3802] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.474834][ T3802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.503852][ T3802] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.511029][ T3802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.569012][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.634569][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.675780][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.698285][ T3802] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.705462][ T3802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.752831][ T4105] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.760010][ T4105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.797351][ T5151] Bluetooth: hci1: command tx timeout [ 87.831001][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.885012][ T4105] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.892237][ T4105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.919778][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.951306][ T4105] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.958449][ T4105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.003136][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.012463][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.034717][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.048296][ T5151] Bluetooth: hci2: command tx timeout [ 88.059691][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.066897][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.094022][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.101280][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.116477][ T5151] Bluetooth: hci5: command tx timeout [ 88.197060][ T5151] Bluetooth: hci3: command tx timeout [ 88.213603][ T5151] Bluetooth: hci4: command tx timeout [ 88.289209][ T5955] veth0_vlan: entered promiscuous mode [ 88.311979][ T5956] veth0_vlan: entered promiscuous mode [ 88.320716][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.354355][ T5955] veth1_vlan: entered promiscuous mode [ 88.365550][ T5956] veth1_vlan: entered promiscuous mode [ 88.485667][ T5955] veth0_macvtap: entered promiscuous mode [ 88.524327][ T5956] veth0_macvtap: entered promiscuous mode [ 88.539996][ T5955] veth1_macvtap: entered promiscuous mode [ 88.575331][ T5956] veth1_macvtap: entered promiscuous mode [ 88.612933][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.620564][ T5958] veth0_vlan: entered promiscuous mode [ 88.644830][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.659558][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.674007][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.688072][ T5958] veth1_vlan: entered promiscuous mode [ 88.700577][ T3802] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.710288][ T3802] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.725094][ T3802] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.735320][ T3802] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.753920][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.768841][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.803923][ T150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.824249][ T150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.835790][ T150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.872967][ T150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.965750][ T5958] veth0_macvtap: entered promiscuous mode [ 88.981690][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.013196][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.025942][ T5958] veth1_macvtap: entered promiscuous mode [ 89.069211][ T5949] veth0_vlan: entered promiscuous mode [ 89.114121][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.136001][ T3802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.140962][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.153746][ T3802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.163759][ T5949] veth1_vlan: entered promiscuous mode [ 89.191014][ T72] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.204365][ T72] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.219933][ T3802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.232126][ T3802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/28 09:54:13 executed programs: 10 [ 89.243255][ T3533] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.266583][ T3533] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.305928][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 89.325029][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 89.384447][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.384995][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 89.413170][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 89.429035][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.444378][ T5949] veth0_macvtap: entered promiscuous mode [ 89.472600][ T5959] veth0_vlan: entered promiscuous mode [ 89.488579][ T5949] veth1_macvtap: entered promiscuous mode [ 89.499839][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.511117][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 89.523714][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 89.529920][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.587894][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 89.615661][ T3802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.625094][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 89.627864][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.643589][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 89.653411][ T3802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.654026][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 89.678868][ T5959] veth1_vlan: entered promiscuous mode [ 89.695515][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.778546][ T3802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.816274][ T3802] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.851817][ T3802] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.879345][ T5151] Bluetooth: hci1: command tx timeout [ 89.918070][ T3802] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.095860][ T5959] veth0_macvtap: entered promiscuous mode [ 90.119161][ T5151] Bluetooth: hci2: command tx timeout [ 90.152708][ T5959] veth1_macvtap: entered promiscuous mode [ 90.196406][ T5151] Bluetooth: hci5: command tx timeout [ 90.228188][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.271319][ T3802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.286094][ T5151] Bluetooth: hci4: command tx timeout [ 90.286104][ T5963] Bluetooth: hci3: command tx timeout [ 90.299469][ T3802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.334157][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.374358][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.394557][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.420602][ T3544] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.434099][ T3544] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.466097][ T3544] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.505914][ T3544] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.835872][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.905160][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.069620][ T6137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.123129][ T6137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.873327][ T6217] ================================================================== [ 91.881435][ T6217] BUG: KASAN: slab-use-after-free in nft_array_get_cmp+0x1f6/0x2a0 [ 91.889443][ T6217] Read of size 1 at addr ffff888058618b19 by task syz.3.79/6217 [ 91.897073][ T6217] [ 91.899421][ T6217] CPU: 1 UID: 0 PID: 6217 Comm: syz.3.79 Not tainted syzkaller #0 PREEMPT(full) [ 91.899443][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 91.899461][ T6217] Call Trace: [ 91.899468][ T6217] [ 91.899476][ T6217] dump_stack_lvl+0xe8/0x150 [ 91.899502][ T6217] print_report+0xba/0x230 [ 91.899520][ T6217] ? nft_array_get_cmp+0x1f6/0x2a0 [ 91.899544][ T6217] kasan_report+0x117/0x150 [ 91.899562][ T6217] ? nft_array_get_cmp+0x1f6/0x2a0 [ 91.899588][ T6217] nft_array_get_cmp+0x1f6/0x2a0 [ 91.899610][ T6217] ? nft_data_init+0x48f/0xc90 [ 91.899632][ T6217] bsearch+0x50/0xc0 [ 91.899648][ T6217] ? __pfx_nft_array_get_cmp+0x10/0x10 [ 91.899671][ T6217] nft_rbtree_get+0x16b/0x400 [ 91.899694][ T6217] ? __pfx_nft_rbtree_get+0x10/0x10 [ 91.899717][ T6217] ? __nla_parse+0x40/0x60 [ 91.899740][ T6217] ? __pfx_nft_rbtree_get+0x10/0x10 [ 91.899761][ T6217] nft_get_set_elem+0x420/0xaa0 [ 91.899781][ T6217] ? lock_acquire+0x106/0x330 [ 91.899805][ T6217] ? __pfx_nft_get_set_elem+0x10/0x10 [ 91.899827][ T6217] ? nft_pernet+0x23/0x240 [ 91.899858][ T6217] ? nft_set_dump_ctx_init+0x6a9/0x980 [ 91.899881][ T6217] nf_tables_getsetelem+0x448/0x5e0 [ 91.899906][ T6217] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 91.899928][ T6217] ? is_bpf_text_address+0x26/0x2b0 [ 91.899956][ T6217] ? nfnl_pernet+0x23/0x240 [ 91.899977][ T6217] ? __nla_parse+0x40/0x60 [ 91.899998][ T6217] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 91.900022][ T6217] nfnetlink_rcv_msg+0x8ae/0x12c0 [ 91.900038][ T6217] ? unwind_get_return_address+0x4d/0x90 [ 91.900058][ T6217] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 91.900081][ T6217] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 91.900117][ T6217] netlink_rcv_skb+0x232/0x4b0 [ 91.900136][ T6217] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 91.900154][ T6217] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 91.900176][ T6217] ? bpf_lsm_capable+0x9/0x20 [ 91.900197][ T6217] ? security_capable+0x7e/0x2c0 [ 91.900219][ T6217] nfnetlink_rcv+0x2c0/0x27b0 [ 91.900237][ T6217] ? __local_bh_enable_ip+0xd0/0x130 [ 91.900253][ T6217] ? lockdep_hardirqs_on+0x7a/0x110 [ 91.900273][ T6217] ? __dev_queue_xmit+0x274/0x3850 [ 91.900296][ T6217] ? __local_bh_enable_ip+0xd0/0x130 [ 91.900311][ T6217] ? __dev_queue_xmit+0x274/0x3850 [ 91.900334][ T6217] ? __dev_queue_xmit+0x1e6c/0x3850 [ 91.900356][ T6217] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 91.900384][ T6217] ? __dev_queue_xmit+0x274/0x3850 [ 91.900407][ T6217] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 91.900426][ T6217] ? __pfx___dev_queue_xmit+0x10/0x10 [ 91.900452][ T6217] ? ref_tracker_free+0x693/0x840 [ 91.900471][ T6217] ? __copy_skb_header+0xa3/0x4a0 [ 91.900494][ T6217] ? __pfx_ref_tracker_free+0x10/0x10 [ 91.900513][ T6217] ? __skb_clone+0x63/0x7a0 [ 91.900537][ T6217] ? __skb_clone+0x483/0x7a0 [ 91.900561][ T6217] ? skb_clone+0x246/0x3a0 [ 91.900585][ T6217] ? __netlink_deliver_tap+0x807/0x850 [ 91.900604][ T6217] ? netlink_deliver_tap+0x2e/0x1b0 [ 91.900625][ T6217] ? netlink_deliver_tap+0x2e/0x1b0 [ 91.900646][ T6217] netlink_unicast+0x80f/0x9b0 [ 91.900666][ T6217] ? __pfx_netlink_unicast+0x10/0x10 [ 91.900683][ T6217] ? netlink_sendmsg+0x650/0xb40 [ 91.900701][ T6217] ? skb_put+0x11b/0x210 [ 91.900722][ T6217] netlink_sendmsg+0x813/0xb40 [ 91.900745][ T6217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.900765][ T6217] ? aa_sock_msg_perm+0xf1/0x1b0 [ 91.900786][ T6217] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 91.900804][ T6217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.900822][ T6217] ____sys_sendmsg+0xa68/0xad0 [ 91.900844][ T6217] ? __might_fault+0xaf/0x130 [ 91.900871][ T6217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.900896][ T6217] ? import_iovec+0x73/0xa0 [ 91.900922][ T6217] ___sys_sendmsg+0x2a5/0x360 [ 91.900943][ T6217] ? __lock_acquire+0x6b5/0x2cf0 [ 91.900973][ T6217] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.900998][ T6217] ? futex_wake+0x4ac/0x580 [ 91.901025][ T6217] ? __fget_files+0x2a/0x420 [ 91.901043][ T6217] ? __fget_files+0x3a0/0x420 [ 91.901065][ T6217] __x64_sys_sendmsg+0x1bd/0x2a0 [ 91.901088][ T6217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 91.901114][ T6217] ? rcu_is_watching+0x15/0xb0 [ 91.901135][ T6217] do_syscall_64+0xe2/0xf80 [ 91.901155][ T6217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.901170][ T6217] ? trace_irq_disable+0x37/0x100 [ 91.901187][ T6217] ? clear_bhb_loop+0x60/0xb0 [ 91.901205][ T6217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.901222][ T6217] RIP: 0033:0x7f58cd79aeb9 [ 91.901246][ T6217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.901260][ T6217] RSP: 002b:00007f58ce594028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.901279][ T6217] RAX: ffffffffffffffda RBX: 00007f58cda15fa0 RCX: 00007f58cd79aeb9 [ 91.901292][ T6217] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 91.901304][ T6217] RBP: 00007f58cd808c1f R08: 0000000000000000 R09: 0000000000000000 [ 91.901316][ T6217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.901326][ T6217] R13: 00007f58cda16038 R14: 00007f58cda15fa0 R15: 00007ffd3f69bcd8 [ 91.901347][ T6217] [ 91.901353][ T6217] [ 92.401684][ T6217] Allocated by task 6217: [ 92.405995][ T6217] kasan_save_track+0x3e/0x80 [ 92.410755][ T6217] __kasan_kmalloc+0x93/0xb0 [ 92.415351][ T6217] __kmalloc_noprof+0x40c/0x7e0 [ 92.420198][ T6217] nft_set_elem_init+0xa8/0x7e0 [ 92.425043][ T6217] nf_tables_newsetelem+0x22a4/0x4360 [ 92.430416][ T6217] nfnetlink_rcv+0x1240/0x27b0 [ 92.435254][ T6217] netlink_unicast+0x80f/0x9b0 [ 92.440011][ T6217] netlink_sendmsg+0x813/0xb40 [ 92.444762][ T6217] ____sys_sendmsg+0xa68/0xad0 [ 92.449521][ T6217] ___sys_sendmsg+0x2a5/0x360 [ 92.454187][ T6217] __x64_sys_sendmsg+0x1bd/0x2a0 [ 92.459113][ T6217] do_syscall_64+0xe2/0xf80 [ 92.463602][ T6217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.469479][ T6217] [ 92.471783][ T6217] Freed by task 5959: [ 92.475742][ T6217] kasan_save_track+0x3e/0x80 [ 92.480404][ T6217] kasan_save_free_info+0x46/0x50 [ 92.485420][ T6217] __kasan_slab_free+0x5c/0x80 [ 92.490164][ T6217] kfree+0x1be/0x650 [ 92.494048][ T6217] nft_trans_gc_trans_free+0x519/0x6c0 [ 92.499495][ T6217] rcu_core+0xc9e/0x1750 [ 92.503726][ T6217] handle_softirqs+0x22a/0x7c0 [ 92.508473][ T6217] __irq_exit_rcu+0x5f/0x150 [ 92.513045][ T6217] irq_exit_rcu+0x9/0x30 [ 92.517268][ T6217] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 92.522949][ T6217] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 92.528917][ T6217] [ 92.531226][ T6217] The buggy address belongs to the object at ffff888058618b00 [ 92.531226][ T6217] which belongs to the cache kmalloc-cg-64 of size 64 [ 92.545449][ T6217] The buggy address is located 25 bytes inside of [ 92.545449][ T6217] freed 64-byte region [ffff888058618b00, ffff888058618b40) [ 92.559084][ T6217] [ 92.561410][ T6217] The buggy address belongs to the physical page: [ 92.567994][ T6217] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888058618300 pfn:0x58618 [ 92.578042][ T6217] memcg:ffff888078dd1a01 [ 92.582264][ T6217] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 92.589360][ T6217] page_type: f5(slab) [ 92.593324][ T6217] raw: 00fff00000000000 ffff88813fe2ec80 ffffea0001b2c9c0 dead000000000006 [ 92.601915][ T6217] raw: ffff888058618300 000000000020001e 00000000f5000000 ffff888078dd1a01 [ 92.610652][ T6217] page dumped because: kasan: bad access detected [ 92.617048][ T6217] page_owner tracks the page as allocated [ 92.622745][ T6217] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5876, tgid 5876 (syz-executor), ts 78950935067, free_ts 78950359848 [ 92.642013][ T6217] post_alloc_hook+0x228/0x280 [ 92.646772][ T6217] get_page_from_freelist+0x24dc/0x2580 [ 92.652303][ T6217] __alloc_frozen_pages_noprof+0x18d/0x380 [ 92.658090][ T6217] alloc_pages_mpol+0x232/0x4a0 [ 92.662931][ T6217] allocate_slab+0x86/0x3a0 [ 92.667419][ T6217] ___slab_alloc+0xd82/0x1760 [ 92.672081][ T6217] __slab_alloc+0x65/0x100 [ 92.676479][ T6217] __kvmalloc_node_noprof+0x673/0x8d0 [ 92.682276][ T6217] nf_hook_entries_grow+0x288/0x720 [ 92.687464][ T6217] __nf_register_net_hook+0x2c9/0x930 [ 92.692924][ T6217] nf_register_net_hook+0xb2/0x190 [ 92.698018][ T6217] nf_register_net_hooks+0x44/0x1b0 [ 92.703213][ T6217] ipt_register_table+0x55b/0x7f0 [ 92.708219][ T6217] iptable_filter_table_init+0x75/0xb0 [ 92.713658][ T6217] xt_find_table_lock+0x30c/0x3e0 [ 92.718669][ T6217] xt_request_find_table_lock+0x26/0x100 [ 92.724296][ T6217] page last free pid 5876 tgid 5876 stack trace: [ 92.730607][ T6217] __free_frozen_pages+0xbf8/0xd70 [ 92.735707][ T6217] vfree+0x25a/0x400 [ 92.739599][ T6217] do_arpt_get_ctl+0xdef/0x1100 [ 92.744436][ T6217] nf_getsockopt+0x26e/0x290 [ 92.749018][ T6217] ip_getsockopt+0x19e/0x230 [ 92.753600][ T6217] do_sock_getsockopt+0x2d3/0x3f0 [ 92.758611][ T6217] __x64_sys_getsockopt+0x1a4/0x240 [ 92.763797][ T6217] do_syscall_64+0xe2/0xf80 [ 92.768287][ T6217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.774164][ T6217] [ 92.776483][ T6217] Memory state around the buggy address: [ 92.782547][ T6217] ffff888058618a00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 92.790617][ T6217] ffff888058618a80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 92.798680][ T6217] >ffff888058618b00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 92.806740][ T6217] ^ [ 92.811597][ T6217] ffff888058618b80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 92.819647][ T6217] ffff888058618c00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 92.827690][ T6217] ================================================================== [ 92.877182][ T6217] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 92.884415][ T6217] CPU: 1 UID: 0 PID: 6217 Comm: syz.3.79 Not tainted syzkaller #0 PREEMPT(full) [ 92.893543][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 92.903623][ T6217] Call Trace: [ 92.906929][ T6217] [ 92.909887][ T6217] vpanic+0x1e0/0x670 [ 92.913899][ T6217] panic+0xc5/0xd0 [ 92.917642][ T6217] ? __pfx_panic+0x10/0x10 [ 92.922079][ T6217] ? preempt_schedule_common+0x82/0xd0 [ 92.927556][ T6217] ? nft_array_get_cmp+0x1f6/0x2a0 [ 92.932706][ T6217] check_panic_on_warn+0x89/0xb0 [ 92.937666][ T6217] ? nft_array_get_cmp+0x1f6/0x2a0 [ 92.942805][ T6217] end_report+0x6f/0x140 [ 92.947059][ T6217] kasan_report+0x128/0x150 [ 92.951591][ T6217] ? nft_array_get_cmp+0x1f6/0x2a0 [ 92.956733][ T6217] nft_array_get_cmp+0x1f6/0x2a0 [ 92.961694][ T6217] ? nft_data_init+0x48f/0xc90 [ 92.966481][ T6217] bsearch+0x50/0xc0 [ 92.970386][ T6217] ? __pfx_nft_array_get_cmp+0x10/0x10 [ 92.975855][ T6217] nft_rbtree_get+0x16b/0x400 [ 92.980553][ T6217] ? __pfx_nft_rbtree_get+0x10/0x10 [ 92.985773][ T6217] ? __nla_parse+0x40/0x60 [ 92.990204][ T6217] ? __pfx_nft_rbtree_get+0x10/0x10 [ 92.995403][ T6217] nft_get_set_elem+0x420/0xaa0 [ 93.000243][ T6217] ? lock_acquire+0x106/0x330 [ 93.004914][ T6217] ? __pfx_nft_get_set_elem+0x10/0x10 [ 93.010277][ T6217] ? nft_pernet+0x23/0x240 [ 93.014692][ T6217] ? nft_set_dump_ctx_init+0x6a9/0x980 [ 93.020143][ T6217] nf_tables_getsetelem+0x448/0x5e0 [ 93.025372][ T6217] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 93.031085][ T6217] ? is_bpf_text_address+0x26/0x2b0 [ 93.036275][ T6217] ? nfnl_pernet+0x23/0x240 [ 93.040779][ T6217] ? __nla_parse+0x40/0x60 [ 93.045193][ T6217] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 93.050908][ T6217] nfnetlink_rcv_msg+0x8ae/0x12c0 [ 93.055921][ T6217] ? unwind_get_return_address+0x4d/0x90 [ 93.061538][ T6217] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 93.066725][ T6217] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 93.072181][ T6217] netlink_rcv_skb+0x232/0x4b0 [ 93.076937][ T6217] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 93.082379][ T6217] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.087652][ T6217] ? bpf_lsm_capable+0x9/0x20 [ 93.092321][ T6217] ? security_capable+0x7e/0x2c0 [ 93.097247][ T6217] nfnetlink_rcv+0x2c0/0x27b0 [ 93.101914][ T6217] ? __local_bh_enable_ip+0xd0/0x130 [ 93.107183][ T6217] ? lockdep_hardirqs_on+0x7a/0x110 [ 93.112366][ T6217] ? __dev_queue_xmit+0x274/0x3850 [ 93.117466][ T6217] ? __local_bh_enable_ip+0xd0/0x130 [ 93.122749][ T6217] ? __dev_queue_xmit+0x274/0x3850 [ 93.127848][ T6217] ? __dev_queue_xmit+0x1e6c/0x3850 [ 93.133038][ T6217] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 93.138145][ T6217] ? __dev_queue_xmit+0x274/0x3850 [ 93.143247][ T6217] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 93.148346][ T6217] ? __pfx___dev_queue_xmit+0x10/0x10 [ 93.153710][ T6217] ? ref_tracker_free+0x693/0x840 [ 93.158721][ T6217] ? __copy_skb_header+0xa3/0x4a0 [ 93.163735][ T6217] ? __pfx_ref_tracker_free+0x10/0x10 [ 93.169095][ T6217] ? __skb_clone+0x63/0x7a0 [ 93.173589][ T6217] ? __skb_clone+0x483/0x7a0 [ 93.178232][ T6217] ? skb_clone+0x246/0x3a0 [ 93.182648][ T6217] ? __netlink_deliver_tap+0x807/0x850 [ 93.188120][ T6217] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.193330][ T6217] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.198533][ T6217] netlink_unicast+0x80f/0x9b0 [ 93.203294][ T6217] ? __pfx_netlink_unicast+0x10/0x10 [ 93.208567][ T6217] ? netlink_sendmsg+0x650/0xb40 [ 93.213493][ T6217] ? skb_put+0x11b/0x210 [ 93.217726][ T6217] netlink_sendmsg+0x813/0xb40 [ 93.222485][ T6217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.227764][ T6217] ? aa_sock_msg_perm+0xf1/0x1b0 [ 93.232698][ T6217] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 93.238009][ T6217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.243297][ T6217] ____sys_sendmsg+0xa68/0xad0 [ 93.248070][ T6217] ? __might_fault+0xaf/0x130 [ 93.252870][ T6217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.258158][ T6217] ? import_iovec+0x73/0xa0 [ 93.262749][ T6217] ___sys_sendmsg+0x2a5/0x360 [ 93.267420][ T6217] ? __lock_acquire+0x6b5/0x2cf0 [ 93.272352][ T6217] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.277544][ T6217] ? futex_wake+0x4ac/0x580 [ 93.282044][ T6217] ? __fget_files+0x2a/0x420 [ 93.286619][ T6217] ? __fget_files+0x3a0/0x420 [ 93.291286][ T6217] __x64_sys_sendmsg+0x1bd/0x2a0 [ 93.296225][ T6217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 93.301683][ T6217] ? rcu_is_watching+0x15/0xb0 [ 93.306436][ T6217] do_syscall_64+0xe2/0xf80 [ 93.310928][ T6217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.316984][ T6217] ? trace_irq_disable+0x37/0x100 [ 93.321992][ T6217] ? clear_bhb_loop+0x60/0xb0 [ 93.326658][ T6217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.332534][ T6217] RIP: 0033:0x7f58cd79aeb9 [ 93.336937][ T6217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.356531][ T6217] RSP: 002b:00007f58ce594028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.364936][ T6217] RAX: ffffffffffffffda RBX: 00007f58cda15fa0 RCX: 00007f58cd79aeb9 [ 93.372896][ T6217] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 93.380852][ T6217] RBP: 00007f58cd808c1f R08: 0000000000000000 R09: 0000000000000000 [ 93.388806][ T6217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.396763][ T6217] R13: 00007f58cda16038 R14: 00007f58cda15fa0 R15: 00007ffd3f69bcd8 [ 93.404729][ T6217] [ 93.408111][ T6217] Kernel Offset: disabled [ 93.412416][ T6217] Rebooting in 86400 seconds..