Warning: Permanently added '10.128.1.249' (ED25519) to the list of known hosts. 2026/01/28 15:22:28 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 112.248437][ T6248] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 115.592997][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.621589][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.706738][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.739068][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.886384][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.900445][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.908609][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.922720][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.930524][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.404725][ T6304] chnl_net:caif_netlink_parms(): no params data found [ 117.758316][ T6304] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.765619][ T6304] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.774239][ T6304] bridge_slave_0: entered allmulticast mode [ 117.786496][ T6304] bridge_slave_0: entered promiscuous mode [ 117.815873][ T6304] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.832332][ T6304] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.840477][ T6304] bridge_slave_1: entered allmulticast mode [ 117.848117][ T6304] bridge_slave_1: entered promiscuous mode [ 117.930600][ T6304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.943739][ T6304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.212284][ T6304] team0: Port device team_slave_0 added [ 118.222181][ T6304] team0: Port device team_slave_1 added [ 118.296116][ T6304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.317260][ T6304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.388027][ T6304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.460178][ T6304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.477358][ T6304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.506139][ T6304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.563788][ T6304] hsr_slave_0: entered promiscuous mode [ 118.570622][ T6304] hsr_slave_1: entered promiscuous mode [ 119.048091][ T5151] Bluetooth: hci0: command tx timeout [ 119.075414][ T6304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.086691][ T6304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.096752][ T6304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.109842][ T6304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.224984][ T6304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.244541][ T6304] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.261578][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.268814][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.295429][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.302757][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.536185][ T6304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.592531][ T6304] veth0_vlan: entered promiscuous mode [ 119.606904][ T6304] veth1_vlan: entered promiscuous mode [ 119.645238][ T6304] veth0_macvtap: entered promiscuous mode [ 119.655822][ T6304] veth1_macvtap: entered promiscuous mode [ 119.681030][ T6304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.701211][ T6304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.724905][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.748524][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.779299][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.798529][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/28 15:22:40 executed programs: 0 [ 120.007880][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.016741][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.026840][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.040566][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.048372][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.109984][ T5902] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 120.120277][ T5902] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 120.128183][ T5902] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.137194][ T5902] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 120.145240][ T5902] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.163882][ T5902] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 120.171674][ T5902] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.182593][ T5902] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 120.196223][ T5902] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.210808][ T5902] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.228267][ T6400] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.244303][ T6400] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.253747][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.262652][ T6400] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.276119][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.284514][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.289151][ T6400] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.300313][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.302612][ T6400] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 120.321870][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.473234][ T3466] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.614692][ T3466] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.748802][ T3466] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.875296][ T3466] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.215933][ T6407] chnl_net:caif_netlink_parms(): no params data found [ 121.395245][ T6394] chnl_net:caif_netlink_parms(): no params data found [ 121.490987][ T6402] chnl_net:caif_netlink_parms(): no params data found [ 121.642833][ T6406] chnl_net:caif_netlink_parms(): no params data found [ 121.732789][ T6407] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.740984][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.749449][ T6407] bridge_slave_0: entered allmulticast mode [ 121.757747][ T6407] bridge_slave_0: entered promiscuous mode [ 121.769608][ T6397] chnl_net:caif_netlink_parms(): no params data found [ 121.833956][ T6407] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.847222][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.854662][ T6407] bridge_slave_1: entered allmulticast mode [ 121.868888][ T6407] bridge_slave_1: entered promiscuous mode [ 122.060279][ T6407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.090461][ T6394] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.098451][ T6394] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.107372][ T6394] bridge_slave_0: entered allmulticast mode [ 122.115122][ T6394] bridge_slave_0: entered promiscuous mode [ 122.150880][ T6407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.167705][ T52] Bluetooth: hci1: command tx timeout [ 122.180415][ T6394] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.188577][ T6394] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.195939][ T6394] bridge_slave_1: entered allmulticast mode [ 122.208150][ T6394] bridge_slave_1: entered promiscuous mode [ 122.317721][ T52] Bluetooth: hci2: command tx timeout [ 122.323605][ T52] Bluetooth: hci4: command tx timeout [ 122.330035][ T5902] Bluetooth: hci3: command tx timeout [ 122.338853][ T6402] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.346156][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.355762][ T6402] bridge_slave_0: entered allmulticast mode [ 122.369000][ T6402] bridge_slave_0: entered promiscuous mode [ 122.407181][ T52] Bluetooth: hci5: command tx timeout [ 122.453109][ T6402] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.461138][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.468568][ T6402] bridge_slave_1: entered allmulticast mode [ 122.475875][ T6402] bridge_slave_1: entered promiscuous mode [ 122.499487][ T6407] team0: Port device team_slave_0 added [ 122.522967][ T6394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.532823][ T6406] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.542820][ T6406] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.550410][ T6406] bridge_slave_0: entered allmulticast mode [ 122.558464][ T6406] bridge_slave_0: entered promiscuous mode [ 122.581696][ T6407] team0: Port device team_slave_1 added [ 122.621687][ T6394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.632004][ T6406] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.639529][ T6406] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.646902][ T6406] bridge_slave_1: entered allmulticast mode [ 122.654245][ T6406] bridge_slave_1: entered promiscuous mode [ 122.666280][ T6402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.679910][ T6402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.701915][ T6407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.709810][ T6407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.737437][ T6407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.749507][ T6397] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.756936][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.764458][ T6397] bridge_slave_0: entered allmulticast mode [ 122.771989][ T6397] bridge_slave_0: entered promiscuous mode [ 122.827610][ T6407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.834782][ T6407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.861681][ T6407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.873117][ T6397] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.881521][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.889525][ T6397] bridge_slave_1: entered allmulticast mode [ 122.896485][ T6397] bridge_slave_1: entered promiscuous mode [ 122.903720][ T3466] bridge_slave_1: left allmulticast mode [ 122.909573][ T3466] bridge_slave_1: left promiscuous mode [ 122.915342][ T3466] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.925381][ T3466] bridge_slave_0: left allmulticast mode [ 122.931724][ T3466] bridge_slave_0: left promiscuous mode [ 122.937504][ T3466] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.158522][ T3466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.170374][ T3466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.180749][ T3466] bond0 (unregistering): Released all slaves [ 123.193088][ T6394] team0: Port device team_slave_0 added [ 123.202354][ T6406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.282953][ T6394] team0: Port device team_slave_1 added [ 123.291153][ T6406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.308933][ T6402] team0: Port device team_slave_0 added [ 123.364901][ T6402] team0: Port device team_slave_1 added [ 123.403865][ T6397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.466126][ T6406] team0: Port device team_slave_0 added [ 123.479690][ T3466] hsr_slave_0: left promiscuous mode [ 123.485832][ T3466] hsr_slave_1: left promiscuous mode [ 123.492948][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.500759][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.510067][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.518965][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.538234][ T3466] veth1_macvtap: left promiscuous mode [ 123.543788][ T3466] veth0_macvtap: left promiscuous mode [ 123.549961][ T3466] veth1_vlan: left promiscuous mode [ 123.555323][ T3466] veth0_vlan: left promiscuous mode [ 124.074013][ T3466] team0 (unregistering): Port device team_slave_1 removed [ 124.119357][ T3466] team0 (unregistering): Port device team_slave_0 removed [ 124.238554][ T52] Bluetooth: hci1: command tx timeout [ 124.397206][ T52] Bluetooth: hci4: command tx timeout [ 124.398082][ T6400] Bluetooth: hci2: command tx timeout [ 124.409334][ T5902] Bluetooth: hci3: command tx timeout [ 124.477196][ T6400] Bluetooth: hci5: command tx timeout [ 124.509469][ T6397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.527875][ T6394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.534854][ T6394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.582113][ T6394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.622942][ T6406] team0: Port device team_slave_1 added [ 124.653452][ T6394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.661181][ T6394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.691123][ T6394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.703638][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.710993][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.738321][ T6402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.754801][ T6407] hsr_slave_0: entered promiscuous mode [ 124.761627][ T6407] hsr_slave_1: entered promiscuous mode [ 124.802186][ T6397] team0: Port device team_slave_0 added [ 124.809327][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.816336][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.843535][ T6402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.874488][ T6397] team0: Port device team_slave_1 added [ 124.886812][ T6406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.894423][ T6406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.921698][ T6406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.939241][ T6406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.946489][ T6406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.973130][ T6406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.102436][ T6402] hsr_slave_0: entered promiscuous mode [ 125.109394][ T6402] hsr_slave_1: entered promiscuous mode [ 125.115876][ T6402] debugfs: 'hsr0' already exists in 'hsr' [ 125.125961][ T6402] Cannot create hsr debugfs directory [ 125.132378][ T6397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.140580][ T6397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.166805][ T6397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.202649][ T6397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.212840][ T6397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.243195][ T6397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.292805][ T6394] hsr_slave_0: entered promiscuous mode [ 125.299924][ T6394] hsr_slave_1: entered promiscuous mode [ 125.306322][ T6394] debugfs: 'hsr0' already exists in 'hsr' [ 125.312590][ T6394] Cannot create hsr debugfs directory [ 125.474297][ T6406] hsr_slave_0: entered promiscuous mode [ 125.490267][ T6406] hsr_slave_1: entered promiscuous mode [ 125.496937][ T6406] debugfs: 'hsr0' already exists in 'hsr' [ 125.503298][ T6406] Cannot create hsr debugfs directory [ 125.647890][ T6397] hsr_slave_0: entered promiscuous mode [ 125.654376][ T6397] hsr_slave_1: entered promiscuous mode [ 125.662727][ T6397] debugfs: 'hsr0' already exists in 'hsr' [ 125.672629][ T6397] Cannot create hsr debugfs directory [ 126.317818][ T6400] Bluetooth: hci1: command tx timeout [ 126.477242][ T5902] Bluetooth: hci2: command tx timeout [ 126.477822][ T52] Bluetooth: hci3: command tx timeout [ 126.482782][ T6400] Bluetooth: hci4: command tx timeout [ 126.501433][ T6407] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 126.540970][ T6407] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 126.557930][ T6400] Bluetooth: hci5: command tx timeout [ 126.567830][ T6407] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 126.585302][ T6407] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 126.722568][ T6407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.762070][ T6407] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.776804][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.784562][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.826382][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.833919][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.981344][ T6402] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 127.001331][ T6402] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 127.065076][ T6402] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 127.140533][ T6402] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 127.276594][ T6407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.363998][ T6402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.391783][ T6402] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.405915][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.413572][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.439952][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.447189][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.575032][ T6394] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 127.593288][ T6394] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 127.620510][ T6394] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 127.666259][ T6394] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.849852][ T6406] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 127.891437][ T6406] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 127.934688][ T6406] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 127.995568][ T6406] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 128.091359][ T6397] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 128.112198][ T6397] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 128.164669][ T6397] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 128.198998][ T6397] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 128.219329][ T6407] veth0_vlan: entered promiscuous mode [ 128.331068][ T6402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.380176][ T6407] veth1_vlan: entered promiscuous mode [ 128.398675][ T6400] Bluetooth: hci1: command tx timeout [ 128.462987][ T6394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.558266][ T6400] Bluetooth: hci3: command tx timeout [ 128.558856][ T52] Bluetooth: hci4: command tx timeout [ 128.564081][ T5902] Bluetooth: hci2: command tx timeout [ 128.593421][ T6394] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.637655][ T5902] Bluetooth: hci5: command tx timeout [ 128.650653][ T1979] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.657901][ T1979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.668971][ T1979] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.676242][ T1979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.692972][ T6406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.719323][ T6402] veth0_vlan: entered promiscuous mode [ 128.753276][ T6407] veth0_macvtap: entered promiscuous mode [ 128.794936][ T6406] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.804004][ T6407] veth1_macvtap: entered promiscuous mode [ 128.831659][ T6402] veth1_vlan: entered promiscuous mode [ 128.855534][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.863452][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.887034][ T6407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.900381][ T6394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.922540][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.929851][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.974860][ T6397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.008111][ T6407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.062827][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.094831][ T42] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.117876][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.145994][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.204509][ T6397] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.251599][ T6402] veth0_macvtap: entered promiscuous mode [ 129.285992][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.293202][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.329991][ T6402] veth1_macvtap: entered promiscuous mode [ 129.359142][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.366624][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.480036][ T6402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.506044][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.520558][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.524311][ T6402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.553339][ T6394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.599990][ T72] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.650968][ T1979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.664039][ T72] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.682763][ T1979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.686551][ T72] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.709727][ T72] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/28 15:22:50 executed programs: 10 [ 129.861923][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 129.889061][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 129.932840][ T6406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.969381][ T1979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.976108][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 129.995171][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 129.996323][ T1979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.108547][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23'. [ 130.128059][ T6394] veth0_vlan: entered promiscuous mode [ 130.130106][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.151120][ T6394] veth1_vlan: entered promiscuous mode [ 130.157281][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23'. [ 130.173028][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.267540][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 130.291241][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 130.320589][ T6394] veth0_macvtap: entered promiscuous mode [ 130.364275][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 130.388069][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 130.406372][ T6394] veth1_macvtap: entered promiscuous mode [ 130.421055][ T6406] veth0_vlan: entered promiscuous mode [ 130.470870][ T6397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.510507][ T6406] veth1_vlan: entered promiscuous mode [ 130.555801][ T6394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.600388][ T6394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.676749][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.700212][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.751340][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.790048][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.848765][ T6406] veth0_macvtap: entered promiscuous mode [ 130.890546][ T6397] veth0_vlan: entered promiscuous mode [ 130.918031][ T6406] veth1_macvtap: entered promiscuous mode [ 130.959415][ T6397] veth1_vlan: entered promiscuous mode [ 131.055028][ T6406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.127205][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.137806][ T6406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.160522][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.179149][ T6397] veth0_macvtap: entered promiscuous mode [ 131.236723][ T1006] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.265336][ T1006] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.302323][ T1006] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.326817][ T1006] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.370588][ T6397] veth1_macvtap: entered promiscuous mode [ 131.393731][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.410474][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.535990][ T6397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.661022][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.678685][ T6397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.710116][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.836569][ T1326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.908873][ T1326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.963655][ T1326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.005959][ T1326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.015215][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.033353][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.312397][ T6804] ================================================================== [ 132.320501][ T6804] BUG: KASAN: slab-use-after-free in nft_array_get_cmp+0x1f6/0x2a0 [ 132.328546][ T6804] Read of size 1 at addr ffff888028356599 by task syz.4.61/6804 [ 132.336292][ T6804] [ 132.338650][ T6804] CPU: 0 UID: 0 PID: 6804 Comm: syz.4.61 Not tainted syzkaller #0 PREEMPT(full) [ 132.338673][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 132.338690][ T6804] Call Trace: [ 132.338698][ T6804] [ 132.338705][ T6804] dump_stack_lvl+0xe8/0x150 [ 132.338738][ T6804] print_report+0xba/0x230 [ 132.338756][ T6804] ? nft_array_get_cmp+0x1f6/0x2a0 [ 132.338780][ T6804] kasan_report+0x117/0x150 [ 132.338800][ T6804] ? nft_array_get_cmp+0x1f6/0x2a0 [ 132.338830][ T6804] nft_array_get_cmp+0x1f6/0x2a0 [ 132.338853][ T6804] ? nft_data_init+0x48f/0xc90 [ 132.338873][ T6804] bsearch+0x50/0xc0 [ 132.338889][ T6804] ? __pfx_nft_array_get_cmp+0x10/0x10 [ 132.338913][ T6804] nft_rbtree_get+0x16b/0x400 [ 132.338936][ T6804] ? __pfx_nft_rbtree_get+0x10/0x10 [ 132.338958][ T6804] ? __nla_parse+0x40/0x60 [ 132.338980][ T6804] ? __pfx_nft_rbtree_get+0x10/0x10 [ 132.339001][ T6804] nft_get_set_elem+0x420/0xaa0 [ 132.339026][ T6804] ? lock_acquire+0x106/0x330 [ 132.339050][ T6804] ? __pfx_nft_get_set_elem+0x10/0x10 [ 132.339071][ T6804] ? nft_pernet+0x23/0x240 [ 132.339101][ T6804] ? nf_tables_getsetelem+0x3af/0x7c0 [ 132.339128][ T6804] nf_tables_getsetelem+0x5c3/0x7c0 [ 132.339150][ T6804] ? nf_tables_getsetelem+0x3af/0x7c0 [ 132.339173][ T6804] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 132.339195][ T6804] ? is_bpf_text_address+0x26/0x2b0 [ 132.339218][ T6804] ? nfnl_pernet+0x23/0x240 [ 132.339244][ T6804] ? __nla_parse+0x40/0x60 [ 132.339263][ T6804] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 132.339284][ T6804] nfnetlink_rcv_msg+0x8ae/0x12c0 [ 132.339299][ T6804] ? unwind_get_return_address+0x4d/0x90 [ 132.339318][ T6804] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 132.339342][ T6804] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 132.339376][ T6804] netlink_rcv_skb+0x232/0x4b0 [ 132.339395][ T6804] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 132.339412][ T6804] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 132.339435][ T6804] ? bpf_lsm_capable+0x9/0x20 [ 132.339456][ T6804] ? security_capable+0x7e/0x2c0 [ 132.339479][ T6804] nfnetlink_rcv+0x2c0/0x27b0 [ 132.339499][ T6804] ? __local_bh_enable_ip+0xd0/0x130 [ 132.339515][ T6804] ? lockdep_hardirqs_on+0x7a/0x110 [ 132.339535][ T6804] ? __dev_queue_xmit+0x274/0x3850 [ 132.339558][ T6804] ? __local_bh_enable_ip+0xd0/0x130 [ 132.339572][ T6804] ? __dev_queue_xmit+0x274/0x3850 [ 132.339595][ T6804] ? __dev_queue_xmit+0x1e6c/0x3850 [ 132.339618][ T6804] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 132.339645][ T6804] ? __dev_queue_xmit+0x274/0x3850 [ 132.339666][ T6804] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 132.339683][ T6804] ? __pfx___dev_queue_xmit+0x10/0x10 [ 132.339707][ T6804] ? ref_tracker_free+0x693/0x840 [ 132.339736][ T6804] ? __copy_skb_header+0xa3/0x4a0 [ 132.339759][ T6804] ? __pfx_ref_tracker_free+0x10/0x10 [ 132.339777][ T6804] ? __skb_clone+0x63/0x7a0 [ 132.339799][ T6804] ? __skb_clone+0x483/0x7a0 [ 132.339829][ T6804] ? skb_clone+0x246/0x3a0 [ 132.339851][ T6804] ? __netlink_deliver_tap+0x807/0x850 [ 132.339868][ T6804] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.339888][ T6804] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.339907][ T6804] netlink_unicast+0x80f/0x9b0 [ 132.339925][ T6804] ? __pfx_netlink_unicast+0x10/0x10 [ 132.339941][ T6804] ? netlink_sendmsg+0x650/0xb40 [ 132.339958][ T6804] ? skb_put+0x11b/0x210 [ 132.339979][ T6804] netlink_sendmsg+0x813/0xb40 [ 132.340001][ T6804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.340021][ T6804] ? aa_sock_msg_perm+0xf1/0x1b0 [ 132.340043][ T6804] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 132.340062][ T6804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.340080][ T6804] ____sys_sendmsg+0xa68/0xad0 [ 132.340102][ T6804] ? __might_fault+0xaf/0x130 [ 132.340128][ T6804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.340152][ T6804] ? import_iovec+0x73/0xa0 [ 132.340177][ T6804] ___sys_sendmsg+0x2a5/0x360 [ 132.340198][ T6804] ? __lock_acquire+0x6b5/0x2cf0 [ 132.340222][ T6804] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.340245][ T6804] ? futex_wait+0x29a/0x380 [ 132.340273][ T6804] ? __fget_files+0x2a/0x420 [ 132.340289][ T6804] ? __fget_files+0x3a0/0x420 [ 132.340311][ T6804] __x64_sys_sendmsg+0x1bd/0x2a0 [ 132.340334][ T6804] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 132.340360][ T6804] ? rcu_is_watching+0x15/0xb0 [ 132.340382][ T6804] do_syscall_64+0xe2/0xf80 [ 132.340401][ T6804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.340418][ T6804] ? trace_irq_disable+0x37/0x100 [ 132.340435][ T6804] ? clear_bhb_loop+0x60/0xb0 [ 132.340453][ T6804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.340470][ T6804] RIP: 0033:0x7f908c99aeb9 [ 132.340497][ T6804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.340512][ T6804] RSP: 002b:00007f908d8ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.340537][ T6804] RAX: ffffffffffffffda RBX: 00007f908cc16090 RCX: 00007f908c99aeb9 [ 132.340548][ T6804] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 132.340579][ T6804] RBP: 00007f908ca08c1f R08: 0000000000000000 R09: 0000000000000000 [ 132.340590][ T6804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.340600][ T6804] R13: 00007f908cc16128 R14: 00007f908cc16090 R15: 00007ffcbdac0cb8 [ 132.340619][ T6804] [ 132.340626][ T6804] [ 132.373363][ T1064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.375819][ T6804] Allocated by task 6799: [ 132.375831][ T6804] kasan_save_track+0x3e/0x80 [ 132.375851][ T6804] __kasan_kmalloc+0x93/0xb0 [ 132.375866][ T6804] __kmalloc_noprof+0x40c/0x7e0 [ 132.880616][ T6804] nft_set_elem_init+0xa8/0x7e0 [ 132.885572][ T6804] nf_tables_newsetelem+0x22a4/0x4360 [ 132.891116][ T6804] nfnetlink_rcv+0x1240/0x27b0 [ 132.895946][ T6804] netlink_unicast+0x80f/0x9b0 [ 132.900707][ T6804] netlink_sendmsg+0x813/0xb40 [ 132.905542][ T6804] ____sys_sendmsg+0xa68/0xad0 [ 132.910303][ T6804] ___sys_sendmsg+0x2a5/0x360 [ 132.914993][ T6804] __x64_sys_sendmsg+0x1bd/0x2a0 [ 132.919986][ T6804] do_syscall_64+0xe2/0xf80 [ 132.924639][ T6804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.930738][ T6804] [ 132.933058][ T6804] Freed by task 6801: [ 132.937108][ T6804] kasan_save_track+0x3e/0x80 [ 132.942047][ T6804] kasan_save_free_info+0x46/0x50 [ 132.947155][ T6804] __kasan_slab_free+0x5c/0x80 [ 132.952077][ T6804] kfree+0x1be/0x650 [ 132.956047][ T6804] nft_trans_gc_trans_free+0x519/0x6c0 [ 132.961682][ T6804] rcu_core+0xc9e/0x1750 [ 132.965923][ T6804] handle_softirqs+0x22a/0x7c0 [ 132.970673][ T6804] __irq_exit_rcu+0x5f/0x150 [ 132.975469][ T6804] irq_exit_rcu+0x9/0x30 [ 132.979782][ T6804] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 132.985411][ T6804] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 132.991546][ T6804] [ 132.993859][ T6804] The buggy address belongs to the object at ffff888028356580 [ 132.993859][ T6804] which belongs to the cache kmalloc-cg-64 of size 64 [ 133.008435][ T6804] The buggy address is located 25 bytes inside of [ 133.008435][ T6804] freed 64-byte region [ffff888028356580, ffff8880283565c0) [ 133.022221][ T6804] [ 133.024576][ T6804] The buggy address belongs to the physical page: [ 133.031074][ T6804] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028356a80 pfn:0x28356 [ 133.041386][ T6804] memcg:ffff88807aeee201 [ 133.045615][ T6804] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 133.052975][ T6804] page_type: f5(slab) [ 133.056944][ T6804] raw: 00fff00000000000 ffff88813fe2ec80 ffffea00017ab380 dead000000000004 [ 133.065527][ T6804] raw: ffff888028356a80 000000008020001f 00000000f5000000 ffff88807aeee201 [ 133.074110][ T6804] page dumped because: kasan: bad access detected [ 133.080535][ T6804] page_owner tracks the page as allocated [ 133.086231][ T6804] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5895, tgid 5895 (syz-executor), ts 83082785285, free_ts 83057629143 [ 133.105507][ T6804] post_alloc_hook+0x228/0x280 [ 133.110273][ T6804] get_page_from_freelist+0x24dc/0x2580 [ 133.115984][ T6804] __alloc_frozen_pages_noprof+0x18d/0x380 [ 133.121790][ T6804] alloc_pages_mpol+0x232/0x4a0 [ 133.126985][ T6804] allocate_slab+0x86/0x3a0 [ 133.131607][ T6804] ___slab_alloc+0xd82/0x1760 [ 133.136469][ T6804] __slab_alloc+0x65/0x100 [ 133.140889][ T6804] __kvmalloc_node_noprof+0x673/0x8d0 [ 133.146343][ T6804] nf_hook_entries_grow+0x288/0x720 [ 133.151711][ T6804] __nf_register_net_hook+0x2c9/0x930 [ 133.157082][ T6804] nf_register_net_hook+0xb2/0x190 [ 133.162276][ T6804] nf_register_net_hooks+0x44/0x1b0 [ 133.167557][ T6804] ip6t_register_table+0x561/0x800 [ 133.172659][ T6804] ip6table_filter_table_init+0x75/0xb0 [ 133.178193][ T6804] xt_find_table_lock+0x30c/0x3e0 [ 133.183308][ T6804] xt_request_find_table_lock+0x26/0x100 [ 133.189101][ T6804] page last free pid 23 tgid 23 stack trace: [ 133.195068][ T6804] __free_frozen_pages+0xbf8/0xd70 [ 133.200180][ T6804] rcu_core+0xc9e/0x1750 [ 133.204678][ T6804] handle_softirqs+0x22a/0x7c0 [ 133.209513][ T6804] run_ksoftirqd+0x36/0x60 [ 133.213938][ T6804] smpboot_thread_fn+0x541/0xa50 [ 133.219141][ T6804] kthread+0x726/0x8b0 [ 133.223463][ T6804] ret_from_fork+0x51b/0xa40 [ 133.228305][ T6804] ret_from_fork_asm+0x1a/0x30 [ 133.233065][ T6804] [ 133.235385][ T6804] Memory state around the buggy address: [ 133.240999][ T6804] ffff888028356480: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 133.249230][ T6804] ffff888028356500: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 133.257456][ T6804] >ffff888028356580: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 133.265758][ T6804] ^ [ 133.270589][ T6804] ffff888028356600: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 133.278865][ T6804] ffff888028356680: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 133.286909][ T6804] ================================================================== [ 133.316587][ T1064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.327301][ T6804] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 133.334534][ T6804] CPU: 1 UID: 0 PID: 6804 Comm: syz.4.61 Not tainted syzkaller #0 PREEMPT(full) [ 133.344260][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 133.354409][ T6804] Call Trace: [ 133.357703][ T6804] [ 133.360617][ T6804] vpanic+0x1e0/0x670 [ 133.364675][ T6804] panic+0xc5/0xd0 [ 133.368387][ T6804] ? __pfx_panic+0x10/0x10 [ 133.373222][ T6804] ? preempt_schedule_common+0x82/0xd0 [ 133.378846][ T6804] ? nft_array_get_cmp+0x1f6/0x2a0 [ 133.384058][ T6804] check_panic_on_warn+0x89/0xb0 [ 133.389260][ T6804] ? nft_array_get_cmp+0x1f6/0x2a0 [ 133.394398][ T6804] end_report+0x6f/0x140 [ 133.398822][ T6804] kasan_report+0x128/0x150 [ 133.403316][ T6804] ? nft_array_get_cmp+0x1f6/0x2a0 [ 133.408428][ T6804] nft_array_get_cmp+0x1f6/0x2a0 [ 133.413358][ T6804] ? nft_data_init+0x48f/0xc90 [ 133.418283][ T6804] bsearch+0x50/0xc0 [ 133.422657][ T6804] ? __pfx_nft_array_get_cmp+0x10/0x10 [ 133.428295][ T6804] nft_rbtree_get+0x16b/0x400 [ 133.433068][ T6804] ? __pfx_nft_rbtree_get+0x10/0x10 [ 133.438279][ T6804] ? __nla_parse+0x40/0x60 [ 133.442794][ T6804] ? __pfx_nft_rbtree_get+0x10/0x10 [ 133.448078][ T6804] nft_get_set_elem+0x420/0xaa0 [ 133.453013][ T6804] ? lock_acquire+0x106/0x330 [ 133.457720][ T6804] ? __pfx_nft_get_set_elem+0x10/0x10 [ 133.463098][ T6804] ? nft_pernet+0x23/0x240 [ 133.467513][ T6804] ? nf_tables_getsetelem+0x3af/0x7c0 [ 133.472879][ T6804] nf_tables_getsetelem+0x5c3/0x7c0 [ 133.478071][ T6804] ? nf_tables_getsetelem+0x3af/0x7c0 [ 133.483530][ T6804] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 133.489354][ T6804] ? is_bpf_text_address+0x26/0x2b0 [ 133.495011][ T6804] ? nfnl_pernet+0x23/0x240 [ 133.499592][ T6804] ? __nla_parse+0x40/0x60 [ 133.504095][ T6804] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 133.509895][ T6804] nfnetlink_rcv_msg+0x8ae/0x12c0 [ 133.514909][ T6804] ? unwind_get_return_address+0x4d/0x90 [ 133.520539][ T6804] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 133.525731][ T6804] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 133.531199][ T6804] netlink_rcv_skb+0x232/0x4b0 [ 133.535951][ T6804] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 133.541417][ T6804] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 133.546841][ T6804] ? bpf_lsm_capable+0x9/0x20 [ 133.551611][ T6804] ? security_capable+0x7e/0x2c0 [ 133.556563][ T6804] nfnetlink_rcv+0x2c0/0x27b0 [ 133.561240][ T6804] ? __local_bh_enable_ip+0xd0/0x130 [ 133.566630][ T6804] ? lockdep_hardirqs_on+0x7a/0x110 [ 133.571836][ T6804] ? __dev_queue_xmit+0x274/0x3850 [ 133.576961][ T6804] ? __local_bh_enable_ip+0xd0/0x130 [ 133.582340][ T6804] ? __dev_queue_xmit+0x274/0x3850 [ 133.587637][ T6804] ? __dev_queue_xmit+0x1e6c/0x3850 [ 133.592964][ T6804] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 133.598175][ T6804] ? __dev_queue_xmit+0x274/0x3850 [ 133.603301][ T6804] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 133.608595][ T6804] ? __pfx___dev_queue_xmit+0x10/0x10 [ 133.614067][ T6804] ? ref_tracker_free+0x693/0x840 [ 133.619172][ T6804] ? __copy_skb_header+0xa3/0x4a0 [ 133.624195][ T6804] ? __pfx_ref_tracker_free+0x10/0x10 [ 133.629552][ T6804] ? __skb_clone+0x63/0x7a0 [ 133.634051][ T6804] ? __skb_clone+0x483/0x7a0 [ 133.638743][ T6804] ? skb_clone+0x246/0x3a0 [ 133.643169][ T6804] ? __netlink_deliver_tap+0x807/0x850 [ 133.648620][ T6804] ? netlink_deliver_tap+0x2e/0x1b0 [ 133.653991][ T6804] ? netlink_deliver_tap+0x2e/0x1b0 [ 133.659451][ T6804] netlink_unicast+0x80f/0x9b0 [ 133.664386][ T6804] ? __pfx_netlink_unicast+0x10/0x10 [ 133.669742][ T6804] ? netlink_sendmsg+0x650/0xb40 [ 133.674664][ T6804] ? skb_put+0x11b/0x210 [ 133.678902][ T6804] netlink_sendmsg+0x813/0xb40 [ 133.683848][ T6804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.689389][ T6804] ? aa_sock_msg_perm+0xf1/0x1b0 [ 133.694587][ T6804] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 133.699979][ T6804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.705279][ T6804] ____sys_sendmsg+0xa68/0xad0 [ 133.710045][ T6804] ? __might_fault+0xaf/0x130 [ 133.714716][ T6804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.720352][ T6804] ? import_iovec+0x73/0xa0 [ 133.724941][ T6804] ___sys_sendmsg+0x2a5/0x360 [ 133.729887][ T6804] ? __lock_acquire+0x6b5/0x2cf0 [ 133.735553][ T6804] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.741033][ T6804] ? futex_wait+0x29a/0x380 [ 133.745572][ T6804] ? __fget_files+0x2a/0x420 [ 133.750168][ T6804] ? __fget_files+0x3a0/0x420 [ 133.755112][ T6804] __x64_sys_sendmsg+0x1bd/0x2a0 [ 133.760132][ T6804] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 133.765679][ T6804] ? rcu_is_watching+0x15/0xb0 [ 133.770642][ T6804] do_syscall_64+0xe2/0xf80 [ 133.775187][ T6804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.781393][ T6804] ? trace_irq_disable+0x37/0x100 [ 133.786438][ T6804] ? clear_bhb_loop+0x60/0xb0 [ 133.791204][ T6804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.797443][ T6804] RIP: 0033:0x7f908c99aeb9 [ 133.801935][ T6804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.821713][ T6804] RSP: 002b:00007f908d8ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.830479][ T6804] RAX: ffffffffffffffda RBX: 00007f908cc16090 RCX: 00007f908c99aeb9 [ 133.838967][ T6804] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 133.847530][ T6804] RBP: 00007f908ca08c1f R08: 0000000000000000 R09: 0000000000000000 [ 133.855862][ T6804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.864006][ T6804] R13: 00007f908cc16128 R14: 00007f908cc16090 R15: 00007ffcbdac0cb8 [ 133.872072][ T6804] [ 133.875596][ T6804] Kernel Offset: disabled [ 133.880008][ T6804] Rebooting in 86400 seconds..