Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts. 2026/01/01 00:29:34 parsed 1 programs [ 117.499761][ T6249] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 121.389533][ T6273] chnl_net:caif_netlink_parms(): no params data found [ 121.930898][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.944740][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.955161][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.963209][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.971033][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.060023][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.067735][ T6273] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.076271][ T6273] bridge_slave_0: entered allmulticast mode [ 122.084836][ T6273] bridge_slave_0: entered promiscuous mode [ 122.098828][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.106215][ T6273] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.113519][ T6273] bridge_slave_1: entered allmulticast mode [ 122.121365][ T6273] bridge_slave_1: entered promiscuous mode [ 122.322393][ T6273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.358451][ T6273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.674516][ T6273] team0: Port device team_slave_0 added [ 122.720311][ T6273] team0: Port device team_slave_1 added [ 122.843448][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.851622][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.857604][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.866346][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.892440][ T6273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.935966][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.953923][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.992628][ T6273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.021831][ T3928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.030828][ T3928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.141143][ T6273] hsr_slave_0: entered promiscuous mode [ 123.153780][ T6273] hsr_slave_1: entered promiscuous mode [ 123.514454][ T6273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 123.535109][ T6273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 123.551888][ T6273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 123.562135][ T6273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 123.638618][ T6273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.661904][ T6273] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.675863][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.683074][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.697946][ T4830] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.705096][ T4830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.869833][ T6273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.907993][ T6273] veth0_vlan: entered promiscuous mode [ 123.921871][ T6273] veth1_vlan: entered promiscuous mode [ 123.949143][ T6273] veth0_macvtap: entered promiscuous mode [ 123.959155][ T6273] veth1_macvtap: entered promiscuous mode [ 123.981208][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.996482][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.009893][ T1011] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.019810][ T1011] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.030116][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.039759][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.063562][ T5151] Bluetooth: hci0: command tx timeout 2026/01/01 00:29:45 executed programs: 0 [ 124.188660][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.200307][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.210372][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.220325][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.236077][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.357926][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.383138][ T5893] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.394178][ T5893] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.404177][ T5893] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.411472][ T5893] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.423848][ T6365] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 124.438343][ T6364] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.446388][ T6365] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 124.455847][ T6364] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 124.469219][ T6364] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.478310][ T6364] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.486188][ T6364] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.494470][ T6367] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.497408][ T6364] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.511536][ T5151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.512262][ T6364] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 124.528329][ T6367] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.537464][ T6369] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 124.579290][ T6362] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.588296][ T6362] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.404791][ T6352] chnl_net:caif_netlink_parms(): no params data found [ 125.430101][ T6359] chnl_net:caif_netlink_parms(): no params data found [ 125.474049][ T4830] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.590198][ T6358] chnl_net:caif_netlink_parms(): no params data found [ 125.715238][ T6366] chnl_net:caif_netlink_parms(): no params data found [ 125.753264][ T6356] chnl_net:caif_netlink_parms(): no params data found [ 125.774746][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.782020][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.789927][ T6359] bridge_slave_0: entered allmulticast mode [ 125.797252][ T6359] bridge_slave_0: entered promiscuous mode [ 125.805641][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.815979][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.823826][ T6359] bridge_slave_1: entered allmulticast mode [ 125.830784][ T6359] bridge_slave_1: entered promiscuous mode [ 125.837989][ T6352] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.845423][ T6352] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.853228][ T6352] bridge_slave_0: entered allmulticast mode [ 125.860266][ T6352] bridge_slave_0: entered promiscuous mode [ 125.911335][ T6352] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.918732][ T6352] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.926158][ T6352] bridge_slave_1: entered allmulticast mode [ 125.933854][ T6352] bridge_slave_1: entered promiscuous mode [ 126.035165][ T6359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.060407][ T6352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.075008][ T6358] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.083300][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.090512][ T6358] bridge_slave_0: entered allmulticast mode [ 126.098906][ T6358] bridge_slave_0: entered promiscuous mode [ 126.120118][ T6359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.143162][ T6352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.158044][ T6358] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.166000][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.173653][ T6358] bridge_slave_1: entered allmulticast mode [ 126.180600][ T6358] bridge_slave_1: entered promiscuous mode [ 126.261567][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.268920][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.276250][ T6366] bridge_slave_0: entered allmulticast mode [ 126.284316][ T6366] bridge_slave_0: entered promiscuous mode [ 126.292997][ T6362] Bluetooth: hci1: command tx timeout [ 126.293649][ T6359] team0: Port device team_slave_0 added [ 126.316426][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.324250][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.331408][ T6356] bridge_slave_0: entered allmulticast mode [ 126.338639][ T6356] bridge_slave_0: entered promiscuous mode [ 126.357703][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.365239][ T6366] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.372535][ T6366] bridge_slave_1: entered allmulticast mode [ 126.379608][ T6366] bridge_slave_1: entered promiscuous mode [ 126.389785][ T6359] team0: Port device team_slave_1 added [ 126.397337][ T6352] team0: Port device team_slave_0 added [ 126.403606][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.410788][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.418513][ T6356] bridge_slave_1: entered allmulticast mode [ 126.426293][ T6356] bridge_slave_1: entered promiscuous mode [ 126.436605][ T6358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.482114][ T6352] team0: Port device team_slave_1 added [ 126.501942][ T6358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.516167][ T6366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.574334][ T6366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.585643][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.592875][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.619616][ T6362] Bluetooth: hci3: command tx timeout [ 126.619638][ T6365] Bluetooth: hci2: command tx timeout [ 126.625777][ T6365] Bluetooth: hci0: command tx timeout [ 126.631266][ T6369] Bluetooth: hci4: command tx timeout [ 126.642984][ T6359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.667339][ T6356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.705254][ T4830] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.730500][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.738503][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.765322][ T6359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.778590][ T6352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.785681][ T6352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.812001][ T6352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.825505][ T6356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.837163][ T6358] team0: Port device team_slave_0 added [ 126.868708][ T4830] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.883833][ T6352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.890791][ T6352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.917199][ T6352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.941965][ T6358] team0: Port device team_slave_1 added [ 126.949297][ T6366] team0: Port device team_slave_0 added [ 126.992379][ T6366] team0: Port device team_slave_1 added [ 127.002048][ T6356] team0: Port device team_slave_0 added [ 127.057242][ T4830] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.075649][ T6356] team0: Port device team_slave_1 added [ 127.082048][ T6358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.089353][ T6358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.115801][ T6358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.171347][ T6358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.180094][ T6358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.207584][ T6358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.220083][ T6366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.227857][ T6366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.254978][ T6366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.271357][ T6352] hsr_slave_0: entered promiscuous mode [ 127.277862][ T6352] hsr_slave_1: entered promiscuous mode [ 127.284090][ T6352] debugfs: 'hsr0' already exists in 'hsr' [ 127.289903][ T6352] Cannot create hsr debugfs directory [ 127.299810][ T6359] hsr_slave_0: entered promiscuous mode [ 127.306252][ T6359] hsr_slave_1: entered promiscuous mode [ 127.314499][ T6359] debugfs: 'hsr0' already exists in 'hsr' [ 127.320260][ T6359] Cannot create hsr debugfs directory [ 127.356005][ T6366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.363016][ T6366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.390336][ T6366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.403974][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.410938][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.437488][ T6356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.460439][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.467700][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.494909][ T6356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.597265][ T6366] hsr_slave_0: entered promiscuous mode [ 127.603993][ T6366] hsr_slave_1: entered promiscuous mode [ 127.610177][ T6366] debugfs: 'hsr0' already exists in 'hsr' [ 127.616501][ T6366] Cannot create hsr debugfs directory [ 127.699339][ T6358] hsr_slave_0: entered promiscuous mode [ 127.706235][ T6358] hsr_slave_1: entered promiscuous mode [ 127.712381][ T6358] debugfs: 'hsr0' already exists in 'hsr' [ 127.718544][ T6358] Cannot create hsr debugfs directory [ 127.845712][ T6356] hsr_slave_0: entered promiscuous mode [ 127.852277][ T6356] hsr_slave_1: entered promiscuous mode [ 127.858862][ T6356] debugfs: 'hsr0' already exists in 'hsr' [ 127.864751][ T6356] Cannot create hsr debugfs directory [ 127.934348][ T4830] bridge_slave_1: left allmulticast mode [ 127.940025][ T4830] bridge_slave_1: left promiscuous mode [ 127.946820][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.956530][ T4830] bridge_slave_0: left allmulticast mode [ 127.962260][ T4830] bridge_slave_0: left promiscuous mode [ 127.968517][ T4830] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.253310][ T4830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.264021][ T4830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.274210][ T4830] bond0 (unregistering): Released all slaves [ 128.374702][ T6369] Bluetooth: hci1: command tx timeout [ 128.499391][ T4830] hsr_slave_0: left promiscuous mode [ 128.505337][ T4830] hsr_slave_1: left promiscuous mode [ 128.511311][ T4830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.519519][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.527389][ T4830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.535891][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.553337][ T4830] veth1_macvtap: left promiscuous mode [ 128.558915][ T4830] veth0_macvtap: left promiscuous mode [ 128.564956][ T4830] veth1_vlan: left promiscuous mode [ 128.570809][ T4830] veth0_vlan: left promiscuous mode [ 128.692827][ T6362] Bluetooth: hci3: command tx timeout [ 128.698494][ T6362] Bluetooth: hci0: command tx timeout [ 128.698775][ T6365] Bluetooth: hci2: command tx timeout [ 128.704927][ T6369] Bluetooth: hci4: command tx timeout [ 128.891943][ T4830] team0 (unregistering): Port device team_slave_1 removed [ 128.928107][ T4830] team0 (unregistering): Port device team_slave_0 removed [ 129.470126][ T6359] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 129.515513][ T6359] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 129.531223][ T6359] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 129.553109][ T6359] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 129.839839][ T6359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.929024][ T6359] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.956607][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.963740][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.025026][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.032232][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.344326][ T6358] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 130.394296][ T6358] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 130.419658][ T6358] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 130.455308][ T6362] Bluetooth: hci1: command tx timeout [ 130.465419][ T6358] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 130.510117][ T6359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.691965][ T6359] veth0_vlan: entered promiscuous mode [ 130.757854][ T6358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.765448][ T6359] veth1_vlan: entered promiscuous mode [ 130.777041][ T6362] Bluetooth: hci0: command tx timeout [ 130.777087][ T6367] Bluetooth: hci2: command tx timeout [ 130.782452][ T6365] Bluetooth: hci3: command tx timeout [ 130.793764][ T6369] Bluetooth: hci4: command tx timeout [ 130.815791][ T6366] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.861966][ T6358] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.877384][ T6366] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.897632][ T6366] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 130.931113][ T6366] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 130.954505][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.961727][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.999146][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.006385][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.055819][ T6352] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 131.075378][ T6352] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 131.091148][ T6352] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 131.118460][ T6359] veth0_macvtap: entered promiscuous mode [ 131.135386][ T6352] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 131.152880][ T6359] veth1_macvtap: entered promiscuous mode [ 131.266492][ T6356] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 131.295601][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.303921][ T6356] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 131.358653][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.367769][ T6356] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 131.404724][ T1149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.435472][ T6356] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 131.450717][ T1149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.504078][ T1149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.537378][ T1149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.606214][ T6366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.781331][ T6366] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.798467][ T6358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.857222][ T4830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.889033][ T2134] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.897025][ T2134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.904154][ T4830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.970424][ T2134] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.977646][ T2134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.991412][ T6352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.036531][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.079245][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/01 00:29:53 executed programs: 10 [ 132.126262][ T6352] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.183944][ T6358] veth0_vlan: entered promiscuous mode [ 132.240025][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.247323][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.266774][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.274185][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.338489][ T6356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.386942][ T6358] veth1_vlan: entered promiscuous mode [ 132.486781][ T6356] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.533950][ T6365] Bluetooth: hci1: command tx timeout [ 132.667674][ T3928] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.674923][ T3928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.823793][ T3928] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.831116][ T3928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.859313][ T6362] Bluetooth: hci4: command tx timeout [ 132.859359][ T6369] Bluetooth: hci0: command tx timeout [ 132.864915][ T6365] Bluetooth: hci2: command tx timeout [ 132.870160][ T6367] Bluetooth: hci3: command tx timeout [ 132.937979][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.946765][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.039321][ T6358] veth0_macvtap: entered promiscuous mode [ 133.090214][ T6358] veth1_macvtap: entered promiscuous mode [ 133.258631][ T6366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.315162][ T6358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.355123][ T6358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.446542][ T3928] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.490467][ T3928] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.545296][ T3928] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.630176][ T3928] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.719920][ T6352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.885561][ T3928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.922644][ T3928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.032014][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.078830][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.128672][ T6352] veth0_vlan: entered promiscuous mode [ 134.202403][ T6356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.238106][ T6352] veth1_vlan: entered promiscuous mode [ 134.524240][ T6352] veth0_macvtap: entered promiscuous mode [ 134.544234][ T6366] veth0_vlan: entered promiscuous mode [ 134.585850][ T6352] veth1_macvtap: entered promiscuous mode [ 134.661432][ T6366] veth1_vlan: entered promiscuous mode [ 134.760515][ T6356] veth0_vlan: entered promiscuous mode [ 134.848727][ T6366] veth0_macvtap: entered promiscuous mode [ 134.861352][ T6352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.881489][ T6356] veth1_vlan: entered promiscuous mode [ 134.895430][ T6366] veth1_macvtap: entered promiscuous mode [ 134.915562][ T6352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.977639][ T1336] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.016786][ T1336] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.040037][ T1336] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.070598][ T1336] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.197218][ T6366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.228116][ T6366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.306952][ T1149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.316072][ T1149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.391303][ T1149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.430378][ T1149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.465320][ T6356] veth0_macvtap: entered promiscuous mode [ 135.604265][ T6356] veth1_macvtap: entered promiscuous mode [ 135.661117][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.699096][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.844766][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.874232][ T6356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.879024][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.997584][ T6356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.088129][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.126439][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.183190][ T1336] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.204990][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.206620][ T1336] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.252130][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.306678][ T1336] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.371354][ T1336] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.597883][ T3928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.636888][ T3928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.769718][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.811864][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.162877][ T6695] ================================================================== [ 137.170980][ T6695] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0xb5/0x190 [ 137.180313][ T6695] Read of size 8 at addr ffff8880321f8208 by task syz.4.93/6695 [ 137.188052][ T6695] [ 137.190413][ T6695] CPU: 1 UID: 0 PID: 6695 Comm: syz.4.93 Not tainted syzkaller #0 PREEMPT(full) [ 137.190437][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 137.190456][ T6695] Call Trace: [ 137.190464][ T6695] [ 137.190473][ T6695] dump_stack_lvl+0x189/0x250 [ 137.190500][ T6695] ? __kasan_check_byte+0x12/0x40 [ 137.190529][ T6695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.190548][ T6695] ? lock_release+0x4b/0x3b0 [ 137.190569][ T6695] ? __virt_addr_valid+0x4a5/0x5c0 [ 137.190592][ T6695] print_report+0xca/0x240 [ 137.190609][ T6695] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 137.190632][ T6695] kasan_report+0x118/0x150 [ 137.190649][ T6695] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 137.190672][ T6695] __list_del_entry_valid_or_report+0xb5/0x190 [ 137.190695][ T6695] flow_block_cb_setup_simple+0x62d/0x740 [ 137.190719][ T6695] nft_chain_offload_cmd+0x293/0x660 [ 137.190743][ T6695] ? __pfx_nft_chain_offload_cmd+0x10/0x10 [ 137.190762][ T6695] ? __lock_acquire+0x6b6/0x2cf0 [ 137.190779][ T6695] ? __lock_acquire+0x6b6/0x2cf0 [ 137.190799][ T6695] ? __lock_acquire+0x6b6/0x2cf0 [ 137.190819][ T6695] ? nft_pernet+0x45/0x270 [ 137.190841][ T6695] ? nft_pernet+0x45/0x270 [ 137.190859][ T6695] ? nft_pernet+0x45/0x270 [ 137.190880][ T6695] nft_flow_rule_offload_commit+0x40d/0x1b60 [ 137.190904][ T6695] ? __pfx_nft_flow_rule_offload_commit+0x10/0x10 [ 137.190933][ T6695] ? __lock_acquire+0x6b6/0x2cf0 [ 137.190952][ T6695] ? __lock_acquire+0x6b6/0x2cf0 [ 137.190970][ T6695] ? __lock_acquire+0x6b6/0x2cf0 [ 137.190995][ T6695] ? __lock_acquire+0x6b6/0x2cf0 [ 137.191019][ T6695] ? is_bpf_text_address+0x26/0x2b0 [ 137.191044][ T6695] ? nft_pernet+0x23/0x240 [ 137.191064][ T6695] ? nft_pernet+0x23/0x240 [ 137.191080][ T6695] ? nft_pernet+0x23/0x240 [ 137.191095][ T6695] ? nft_pernet+0x23/0x240 [ 137.191111][ T6695] ? nft_pernet+0x1ed/0x240 [ 137.191129][ T6695] ? nf_tables_validate+0x331/0x390 [ 137.191155][ T6695] ? __pfx_nf_tables_validate+0x10/0x10 [ 137.191180][ T6695] ? nft_pernet+0x23/0x240 [ 137.191196][ T6695] ? nft_pernet+0x23/0x240 [ 137.191214][ T6695] nf_tables_commit+0x684/0xa290 [ 137.191251][ T6695] ? __pfx_nf_tables_commit+0x10/0x10 [ 137.191272][ T6695] ? nft_pernet+0x23/0x240 [ 137.191290][ T6695] ? nft_pernet+0x23/0x240 [ 137.191307][ T6695] ? nft_pernet+0x23/0x240 [ 137.191321][ T6695] ? nft_pernet+0x23/0x240 [ 137.191340][ T6695] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 137.191360][ T6695] ? nft_flush_table+0xd06/0xea0 [ 137.191381][ T6695] ? nf_tables_deltable+0x674/0xe10 [ 137.191407][ T6695] ? __pfx_nf_tables_deltable+0x10/0x10 [ 137.191438][ T6695] nfnetlink_rcv+0x1ac9/0x2590 [ 137.191513][ T6695] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 137.191546][ T6695] ? ref_tracker_free+0x63a/0x7d0 [ 137.191575][ T6695] ? __netlink_deliver_tap+0x807/0x850 [ 137.191596][ T6695] ? netlink_deliver_tap+0x2e/0x1b0 [ 137.191621][ T6695] netlink_unicast+0x82f/0x9e0 [ 137.191643][ T6695] ? __pfx_netlink_unicast+0x10/0x10 [ 137.191656][ T6695] ? plist_check_list+0x2f4/0x310 [ 137.191677][ T6695] ? netlink_sendmsg+0x642/0xb30 [ 137.191694][ T6695] ? skb_put+0x11b/0x210 [ 137.191713][ T6695] netlink_sendmsg+0x805/0xb30 [ 137.191736][ T6695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.191757][ T6695] ? aa_sock_msg_perm+0xf1/0x1b0 [ 137.191777][ T6695] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 137.191793][ T6695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.191812][ T6695] __sock_sendmsg+0x21c/0x270 [ 137.191838][ T6695] ____sys_sendmsg+0x505/0x820 [ 137.191860][ T6695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.191882][ T6695] ? import_iovec+0x74/0xa0 [ 137.191902][ T6695] ___sys_sendmsg+0x21f/0x2a0 [ 137.191920][ T6695] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.191941][ T6695] ? futex_wait+0x285/0x360 [ 137.191972][ T6695] ? __fget_files+0x2a/0x420 [ 137.191991][ T6695] ? __fget_files+0x3a0/0x420 [ 137.192013][ T6695] __x64_sys_sendmsg+0x19b/0x260 [ 137.192032][ T6695] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 137.192057][ T6695] ? do_syscall_64+0xbe/0xf80 [ 137.192074][ T6695] do_syscall_64+0xfa/0xf80 [ 137.192091][ T6695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.192105][ T6695] ? clear_bhb_loop+0x60/0xb0 [ 137.192122][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.192138][ T6695] RIP: 0033:0x7f25ff18eba9 [ 137.192164][ T6695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.192177][ T6695] RSP: 002b:00007f26000bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.192199][ T6695] RAX: ffffffffffffffda RBX: 00007f25ff3d5fa0 RCX: 00007f25ff18eba9 [ 137.192210][ T6695] RDX: 000000000000c050 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 137.192220][ T6695] RBP: 00007f25ff211e19 R08: 0000000000000000 R09: 0000000000000000 [ 137.192229][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.192239][ T6695] R13: 00007f25ff3d6038 R14: 00007f25ff3d5fa0 R15: 00007ffd358d8ae8 [ 137.192259][ T6695] [ 137.192264][ T6695] [ 137.682088][ T6695] Allocated by task 6694: [ 137.686510][ T6695] kasan_save_track+0x3e/0x80 [ 137.691206][ T6695] __kasan_kmalloc+0x93/0xb0 [ 137.695975][ T6695] __kmalloc_cache_noprof+0x3e2/0x700 [ 137.701606][ T6695] flow_block_cb_setup_simple+0x2a1/0x740 [ 137.707409][ T6695] nft_chain_offload_cmd+0x293/0x660 [ 137.712784][ T6695] nft_flow_rule_offload_commit+0x814/0x1b60 [ 137.718765][ T6695] nf_tables_commit+0x684/0xa290 [ 137.723712][ T6695] nfnetlink_rcv+0x1ac9/0x2590 [ 137.728466][ T6695] netlink_unicast+0x82f/0x9e0 [ 137.733315][ T6695] netlink_sendmsg+0x805/0xb30 [ 137.738149][ T6695] __sock_sendmsg+0x21c/0x270 [ 137.742923][ T6695] ____sys_sendmsg+0x505/0x820 [ 137.747674][ T6695] ___sys_sendmsg+0x21f/0x2a0 [ 137.752335][ T6695] __x64_sys_sendmsg+0x19b/0x260 [ 137.757266][ T6695] do_syscall_64+0xfa/0xf80 [ 137.761954][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.767868][ T6695] [ 137.770194][ T6695] Freed by task 6694: [ 137.774180][ T6695] kasan_save_track+0x3e/0x80 [ 137.779054][ T6695] kasan_save_free_info+0x46/0x50 [ 137.784182][ T6695] __kasan_slab_free+0x5c/0x80 [ 137.789214][ T6695] kfree+0x1c0/0x660 [ 137.793117][ T6695] nft_flow_offload_unbind+0x3c0/0x440 [ 137.798769][ T6695] nft_chain_offload_cmd+0x43f/0x660 [ 137.804156][ T6695] nft_flow_rule_offload_commit+0x40d/0x1b60 [ 137.810131][ T6695] nf_tables_commit+0x684/0xa290 [ 137.815244][ T6695] nfnetlink_rcv+0x1ac9/0x2590 [ 137.820259][ T6695] netlink_unicast+0x82f/0x9e0 [ 137.825040][ T6695] netlink_sendmsg+0x805/0xb30 [ 137.830237][ T6695] __sock_sendmsg+0x21c/0x270 [ 137.835077][ T6695] ____sys_sendmsg+0x505/0x820 [ 137.840007][ T6695] ___sys_sendmsg+0x21f/0x2a0 [ 137.844859][ T6695] __x64_sys_sendmsg+0x19b/0x260 [ 137.849782][ T6695] do_syscall_64+0xfa/0xf80 [ 137.854355][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.860320][ T6695] [ 137.862730][ T6695] The buggy address belongs to the object at ffff8880321f8200 [ 137.862730][ T6695] which belongs to the cache kmalloc-192 of size 192 [ 137.877110][ T6695] The buggy address is located 8 bytes inside of [ 137.877110][ T6695] freed 192-byte region [ffff8880321f8200, ffff8880321f82c0) [ 137.891239][ T6695] [ 137.893550][ T6695] The buggy address belongs to the physical page: [ 137.900132][ T6695] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x321f8 [ 137.909246][ T6695] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 137.916795][ T6695] page_type: f5(slab) [ 137.920769][ T6695] raw: 00fff00000000000 ffff88813ffa63c0 0000000000000000 dead000000000001 [ 137.929518][ T6695] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 137.938097][ T6695] page dumped because: kasan: bad access detected [ 137.944504][ T6695] page_owner tracks the page as allocated [ 137.950199][ T6695] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 21331007972, free_ts 21280302495 [ 137.968861][ T6695] post_alloc_hook+0x234/0x290 [ 137.973645][ T6695] get_page_from_freelist+0x2365/0x2440 [ 137.979179][ T6695] __alloc_frozen_pages_noprof+0x181/0x370 [ 137.985070][ T6695] alloc_pages_mpol+0x232/0x4a0 [ 137.989914][ T6695] allocate_slab+0x86/0x3b0 [ 137.994404][ T6695] ___slab_alloc+0xf2b/0x1960 [ 137.999073][ T6695] __slab_alloc+0x65/0x100 [ 138.003480][ T6695] __kmalloc_cache_noprof+0x41e/0x700 [ 138.008835][ T6695] call_usermodehelper_setup+0x8e/0x270 [ 138.014545][ T6695] kobject_uevent_env+0x658/0x9f0 [ 138.019565][ T6695] kernel_add_sysfs_param+0xb1/0xe0 [ 138.024757][ T6695] param_sysfs_builtin+0x18a/0x230 [ 138.029883][ T6695] param_sysfs_builtin_init+0x23/0x30 [ 138.035424][ T6695] do_one_initcall+0x1fb/0x820 [ 138.040269][ T6695] do_initcall_level+0x104/0x190 [ 138.045191][ T6695] do_initcalls+0x59/0xa0 [ 138.049501][ T6695] page last free pid 10 tgid 10 stack trace: [ 138.055469][ T6695] __free_frozen_pages+0xbc8/0xd30 [ 138.060765][ T6695] vfree+0x25a/0x400 [ 138.064953][ T6695] delayed_vfree_work+0x55/0x80 [ 138.069903][ T6695] process_scheduled_works+0xad1/0x1770 [ 138.075462][ T6695] worker_thread+0x8a0/0xda0 [ 138.080181][ T6695] kthread+0x711/0x8a0 [ 138.084445][ T6695] ret_from_fork+0x599/0xb30 [ 138.089228][ T6695] ret_from_fork_asm+0x1a/0x30 [ 138.094079][ T6695] [ 138.096512][ T6695] Memory state around the buggy address: [ 138.102211][ T6695] ffff8880321f8100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.110270][ T6695] ffff8880321f8180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 138.118335][ T6695] >ffff8880321f8200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.126392][ T6695] ^ [ 138.130810][ T6695] ffff8880321f8280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 138.138858][ T6695] ffff8880321f8300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.146901][ T6695] ================================================================== [ 138.171854][ T6695] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 138.179094][ T6695] CPU: 1 UID: 0 PID: 6695 Comm: syz.4.93 Not tainted syzkaller #0 PREEMPT(full) [ 138.188308][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.198383][ T6695] Call Trace: [ 138.201678][ T6695] [ 138.204737][ T6695] dump_stack_lvl+0x99/0x250 [ 138.209653][ T6695] ? __asan_memcpy+0x40/0x70 [ 138.214258][ T6695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.219767][ T6695] ? __pfx__printk+0x10/0x10 [ 138.224371][ T6695] vpanic+0x237/0x6d0 [ 138.228388][ T6695] ? __pfx_vpanic+0x10/0x10 [ 138.232971][ T6695] ? preempt_schedule+0xae/0xc0 [ 138.237810][ T6695] ? __pfx_preempt_schedule+0x10/0x10 [ 138.243170][ T6695] panic+0xb9/0xc0 [ 138.246896][ T6695] ? __pfx_panic+0x10/0x10 [ 138.251301][ T6695] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 138.257274][ T6695] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 138.263765][ T6695] check_panic_on_warn+0x89/0xb0 [ 138.268693][ T6695] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 138.275009][ T6695] end_report+0x6f/0x140 [ 138.279327][ T6695] kasan_report+0x129/0x150 [ 138.284042][ T6695] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 138.290616][ T6695] __list_del_entry_valid_or_report+0xb5/0x190 [ 138.296846][ T6695] flow_block_cb_setup_simple+0x62d/0x740 [ 138.302738][ T6695] nft_chain_offload_cmd+0x293/0x660 [ 138.308018][ T6695] ? __pfx_nft_chain_offload_cmd+0x10/0x10 [ 138.313822][ T6695] ? __lock_acquire+0x6b6/0x2cf0 [ 138.318849][ T6695] ? __lock_acquire+0x6b6/0x2cf0 [ 138.323795][ T6695] ? __lock_acquire+0x6b6/0x2cf0 [ 138.328723][ T6695] ? nft_pernet+0x45/0x270 [ 138.333127][ T6695] ? nft_pernet+0x45/0x270 [ 138.337528][ T6695] ? nft_pernet+0x45/0x270 [ 138.342015][ T6695] nft_flow_rule_offload_commit+0x40d/0x1b60 [ 138.347987][ T6695] ? __pfx_nft_flow_rule_offload_commit+0x10/0x10 [ 138.354385][ T6695] ? __lock_acquire+0x6b6/0x2cf0 [ 138.359413][ T6695] ? __lock_acquire+0x6b6/0x2cf0 [ 138.364691][ T6695] ? __lock_acquire+0x6b6/0x2cf0 [ 138.369617][ T6695] ? __lock_acquire+0x6b6/0x2cf0 [ 138.374639][ T6695] ? is_bpf_text_address+0x26/0x2b0 [ 138.379968][ T6695] ? nft_pernet+0x23/0x240 [ 138.384408][ T6695] ? nft_pernet+0x23/0x240 [ 138.389009][ T6695] ? nft_pernet+0x23/0x240 [ 138.393428][ T6695] ? nft_pernet+0x23/0x240 [ 138.397934][ T6695] ? nft_pernet+0x1ed/0x240 [ 138.402517][ T6695] ? nf_tables_validate+0x331/0x390 [ 138.407884][ T6695] ? __pfx_nf_tables_validate+0x10/0x10 [ 138.413509][ T6695] ? nft_pernet+0x23/0x240 [ 138.417909][ T6695] ? nft_pernet+0x23/0x240 [ 138.422397][ T6695] nf_tables_commit+0x684/0xa290 [ 138.427637][ T6695] ? __pfx_nf_tables_commit+0x10/0x10 [ 138.433020][ T6695] ? nft_pernet+0x23/0x240 [ 138.437431][ T6695] ? nft_pernet+0x23/0x240 [ 138.441834][ T6695] ? nft_pernet+0x23/0x240 [ 138.446233][ T6695] ? nft_pernet+0x23/0x240 [ 138.450638][ T6695] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 138.456868][ T6695] ? nft_flush_table+0xd06/0xea0 [ 138.461814][ T6695] ? nf_tables_deltable+0x674/0xe10 [ 138.467035][ T6695] ? __pfx_nf_tables_deltable+0x10/0x10 [ 138.472591][ T6695] nfnetlink_rcv+0x1ac9/0x2590 [ 138.477375][ T6695] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 138.482490][ T6695] ? ref_tracker_free+0x63a/0x7d0 [ 138.487744][ T6695] ? __netlink_deliver_tap+0x807/0x850 [ 138.493393][ T6695] ? netlink_deliver_tap+0x2e/0x1b0 [ 138.498611][ T6695] netlink_unicast+0x82f/0x9e0 [ 138.503382][ T6695] ? __pfx_netlink_unicast+0x10/0x10 [ 138.508665][ T6695] ? plist_check_list+0x2f4/0x310 [ 138.514098][ T6695] ? netlink_sendmsg+0x642/0xb30 [ 138.519121][ T6695] ? skb_put+0x11b/0x210 [ 138.523371][ T6695] netlink_sendmsg+0x805/0xb30 [ 138.528207][ T6695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.533506][ T6695] ? aa_sock_msg_perm+0xf1/0x1b0 [ 138.538453][ T6695] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 138.543731][ T6695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.549015][ T6695] __sock_sendmsg+0x21c/0x270 [ 138.553701][ T6695] ____sys_sendmsg+0x505/0x820 [ 138.558548][ T6695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.563908][ T6695] ? import_iovec+0x74/0xa0 [ 138.568420][ T6695] ___sys_sendmsg+0x21f/0x2a0 [ 138.573285][ T6695] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.578493][ T6695] ? futex_wait+0x285/0x360 [ 138.583009][ T6695] ? __fget_files+0x2a/0x420 [ 138.588208][ T6695] ? __fget_files+0x3a0/0x420 [ 138.592892][ T6695] __x64_sys_sendmsg+0x19b/0x260 [ 138.598001][ T6695] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 138.603462][ T6695] ? do_syscall_64+0xbe/0xf80 [ 138.608124][ T6695] do_syscall_64+0xfa/0xf80 [ 138.612614][ T6695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.618681][ T6695] ? clear_bhb_loop+0x60/0xb0 [ 138.623378][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.629263][ T6695] RIP: 0033:0x7f25ff18eba9 [ 138.633761][ T6695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.653636][ T6695] RSP: 002b:00007f26000bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.662142][ T6695] RAX: ffffffffffffffda RBX: 00007f25ff3d5fa0 RCX: 00007f25ff18eba9 [ 138.670112][ T6695] RDX: 000000000000c050 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 138.678074][ T6695] RBP: 00007f25ff211e19 R08: 0000000000000000 R09: 0000000000000000 [ 138.686122][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.694169][ T6695] R13: 00007f25ff3d6038 R14: 00007f25ff3d5fa0 R15: 00007ffd358d8ae8 [ 138.702158][ T6695] [ 138.705895][ T6695] Kernel Offset: disabled [ 138.710209][ T6695] Rebooting in 86400 seconds..