Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts. 2026/01/28 06:46:19 parsed 1 programs [ 85.319419][ T5831] cgroup: Unknown subsys name 'net' [ 85.466154][ T5831] cgroup: Unknown subsys name 'cpuset' [ 85.475347][ T5831] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.341892][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.751800][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.052807][ T982] cfg80211: failed to load regulatory.db [ 92.922990][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 92.935260][ T5907] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.943268][ T5907] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.952353][ T5907] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.960534][ T5907] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.968814][ T5907] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.636379][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.644145][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.651299][ T5879] bridge_slave_0: entered allmulticast mode [ 93.658696][ T5879] bridge_slave_0: entered promiscuous mode [ 93.671546][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.678771][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.686202][ T5879] bridge_slave_1: entered allmulticast mode [ 93.693641][ T5879] bridge_slave_1: entered promiscuous mode [ 93.794264][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.836368][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.965834][ T5879] team0: Port device team_slave_0 added [ 93.994639][ T3074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.009306][ T5879] team0: Port device team_slave_1 added [ 94.012274][ T3074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.096576][ T3074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.098251][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.111745][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.122178][ T3074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.138956][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.284741][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.291738][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.324089][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.389520][ T5879] hsr_slave_0: entered promiscuous mode [ 94.399127][ T5879] hsr_slave_1: entered promiscuous mode [ 94.654399][ T5879] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.667847][ T5879] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.677742][ T5879] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.687952][ T5879] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.758044][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.776560][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.788890][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.796122][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.811803][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.818926][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.983383][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.013149][ T5907] Bluetooth: hci0: command tx timeout [ 95.036579][ T5879] veth0_vlan: entered promiscuous mode [ 95.047534][ T5879] veth1_vlan: entered promiscuous mode [ 95.075766][ T5879] veth0_macvtap: entered promiscuous mode [ 95.085763][ T5879] veth1_macvtap: entered promiscuous mode [ 95.101628][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.119172][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.133255][ T3074] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.149944][ T3074] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.159631][ T3074] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.178355][ T3074] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/28 06:46:32 executed programs: 0 [ 95.413977][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.422117][ T5952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.431006][ T5952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.438995][ T5952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.448217][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.456276][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.466726][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.476394][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.485611][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.485773][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.498988][ T5958] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.508057][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.513178][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.515783][ T5958] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.522722][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.585544][ T5954] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.595007][ T5954] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.600812][ T3074] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.602319][ T5150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.621349][ T5150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.633547][ T5150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.641579][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.649558][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.665397][ T5954] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.673852][ T5150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.683375][ T5150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.787906][ T3074] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.951396][ T3074] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.027094][ T3074] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.275790][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 96.409677][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 96.497645][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 96.614837][ T5960] chnl_net:caif_netlink_parms(): no params data found [ 96.703818][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.711507][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.718779][ T5950] bridge_slave_0: entered allmulticast mode [ 96.727796][ T5950] bridge_slave_0: entered promiscuous mode [ 96.736310][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.743483][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.750693][ T5950] bridge_slave_1: entered allmulticast mode [ 96.758108][ T5950] bridge_slave_1: entered promiscuous mode [ 96.765393][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 96.839098][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.846328][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.854141][ T5948] bridge_slave_0: entered allmulticast mode [ 96.861282][ T5948] bridge_slave_0: entered promiscuous mode [ 96.891036][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.922741][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.929933][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.937375][ T5948] bridge_slave_1: entered allmulticast mode [ 96.944536][ T5948] bridge_slave_1: entered promiscuous mode [ 96.951371][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.959069][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.966276][ T5955] bridge_slave_0: entered allmulticast mode [ 96.973324][ T5955] bridge_slave_0: entered promiscuous mode [ 96.984009][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.038935][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.046276][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.053502][ T5955] bridge_slave_1: entered allmulticast mode [ 97.060532][ T5955] bridge_slave_1: entered promiscuous mode [ 97.109059][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.116777][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.124353][ T5960] bridge_slave_0: entered allmulticast mode [ 97.131309][ T5960] bridge_slave_0: entered promiscuous mode [ 97.173267][ T5950] team0: Port device team_slave_0 added [ 97.181755][ T5950] team0: Port device team_slave_1 added [ 97.195011][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.202402][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.209534][ T5960] bridge_slave_1: entered allmulticast mode [ 97.217618][ T5960] bridge_slave_1: entered promiscuous mode [ 97.235668][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.247783][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.299785][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.331387][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.353950][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.361239][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.368606][ T5959] bridge_slave_0: entered allmulticast mode [ 97.376051][ T5959] bridge_slave_0: entered promiscuous mode [ 97.386301][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.419881][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.427140][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.453351][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.466525][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.473989][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.500355][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.511534][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.519021][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.526837][ T5959] bridge_slave_1: entered allmulticast mode [ 97.534153][ T5959] bridge_slave_1: entered promiscuous mode [ 97.553461][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.572744][ T52] Bluetooth: hci2: command tx timeout [ 97.573136][ T5954] Bluetooth: hci1: command tx timeout [ 97.585569][ T5150] Bluetooth: hci3: command tx timeout [ 97.595999][ T5948] team0: Port device team_slave_0 added [ 97.622804][ T5955] team0: Port device team_slave_0 added [ 97.651715][ T5948] team0: Port device team_slave_1 added [ 97.681749][ T5955] team0: Port device team_slave_1 added [ 97.690119][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.724459][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.731663][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.734166][ T5954] Bluetooth: hci5: command tx timeout [ 97.759185][ T5150] Bluetooth: hci4: command tx timeout [ 97.764887][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.791414][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.802711][ T5960] team0: Port device team_slave_0 added [ 97.813633][ T5960] team0: Port device team_slave_1 added [ 97.829176][ T3074] bridge_slave_1: left allmulticast mode [ 97.835721][ T3074] bridge_slave_1: left promiscuous mode [ 97.842090][ T3074] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.855872][ T3074] bridge_slave_0: left allmulticast mode [ 97.861518][ T3074] bridge_slave_0: left promiscuous mode [ 97.867365][ T3074] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.063446][ T3074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.074298][ T3074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.084065][ T3074] bond0 (unregistering): Released all slaves [ 98.094724][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.101670][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.127949][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.226468][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.233684][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.260060][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.274235][ T5959] team0: Port device team_slave_0 added [ 98.295611][ T5950] hsr_slave_0: entered promiscuous mode [ 98.301908][ T5950] hsr_slave_1: entered promiscuous mode [ 98.308237][ T5950] debugfs: 'hsr0' already exists in 'hsr' [ 98.314490][ T5950] Cannot create hsr debugfs directory [ 98.321789][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.329009][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.355637][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.375586][ T5959] team0: Port device team_slave_1 added [ 98.390771][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.397778][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.423805][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.472933][ T3074] hsr_slave_0: left promiscuous mode [ 98.478916][ T3074] hsr_slave_1: left promiscuous mode [ 98.484995][ T3074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.492762][ T3074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.500912][ T3074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.509093][ T3074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.525079][ T3074] veth1_macvtap: left promiscuous mode [ 98.530672][ T3074] veth0_macvtap: left promiscuous mode [ 98.536527][ T3074] veth1_vlan: left promiscuous mode [ 98.541883][ T3074] veth0_vlan: left promiscuous mode [ 98.837504][ T3074] team0 (unregistering): Port device team_slave_1 removed [ 98.867747][ T3074] team0 (unregistering): Port device team_slave_0 removed [ 99.096097][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.103722][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.129737][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.165178][ T5948] hsr_slave_0: entered promiscuous mode [ 99.171461][ T5948] hsr_slave_1: entered promiscuous mode [ 99.181007][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.190179][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.216755][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.279982][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.287441][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.313930][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.360805][ T5955] hsr_slave_0: entered promiscuous mode [ 99.368317][ T5955] hsr_slave_1: entered promiscuous mode [ 99.374716][ T5955] debugfs: 'hsr0' already exists in 'hsr' [ 99.380476][ T5955] Cannot create hsr debugfs directory [ 99.511324][ T5960] hsr_slave_0: entered promiscuous mode [ 99.517909][ T5960] hsr_slave_1: entered promiscuous mode [ 99.524214][ T5960] debugfs: 'hsr0' already exists in 'hsr' [ 99.529942][ T5960] Cannot create hsr debugfs directory [ 99.541885][ T5959] hsr_slave_0: entered promiscuous mode [ 99.549105][ T5959] hsr_slave_1: entered promiscuous mode [ 99.555610][ T5959] debugfs: 'hsr0' already exists in 'hsr' [ 99.561338][ T5959] Cannot create hsr debugfs directory [ 99.652643][ T5150] Bluetooth: hci2: command tx timeout [ 99.652763][ T5954] Bluetooth: hci1: command tx timeout [ 99.658573][ T52] Bluetooth: hci3: command tx timeout [ 99.812480][ T5150] Bluetooth: hci5: command tx timeout [ 99.817958][ T52] Bluetooth: hci4: command tx timeout [ 100.610018][ T5955] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.629864][ T5955] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.672301][ T5955] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.721954][ T5955] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.866284][ T5960] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.896588][ T5960] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.955095][ T5960] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.981356][ T5960] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.046541][ T5948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.061119][ T5948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.073953][ T5948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.097367][ T5948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.166630][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.203886][ T5950] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.227979][ T5950] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.254985][ T5950] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.267046][ T5950] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.298795][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.321199][ T3531] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.328328][ T3531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.390249][ T3074] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.397485][ T3074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.427405][ T5959] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.451168][ T5959] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.478775][ T5959] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.504607][ T5959] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.577750][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.626767][ T5955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.669714][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.719611][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.739253][ T5150] Bluetooth: hci3: command tx timeout [ 101.739263][ T5954] Bluetooth: hci2: command tx timeout [ 101.751250][ T52] Bluetooth: hci1: command tx timeout [ 101.834982][ T3074] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.842240][ T3074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.853469][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.871376][ T3074] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.878594][ T3074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.893897][ T5150] Bluetooth: hci5: command tx timeout [ 101.900124][ T52] Bluetooth: hci4: command tx timeout [ 101.914604][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.921775][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.940136][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.947417][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.135905][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.168132][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.233690][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.248880][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.311695][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.318924][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.394046][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.401220][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.424251][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.486419][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.493638][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.549635][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.556891][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.739975][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.809671][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.965539][ T5960] veth0_vlan: entered promiscuous mode [ 102.988749][ T5948] veth0_vlan: entered promiscuous mode [ 103.020545][ T5948] veth1_vlan: entered promiscuous mode [ 103.038062][ T5955] veth0_vlan: entered promiscuous mode [ 103.068444][ T5960] veth1_vlan: entered promiscuous mode [ 103.097757][ T5955] veth1_vlan: entered promiscuous mode [ 103.111180][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.158195][ T5948] veth0_macvtap: entered promiscuous mode [ 103.185898][ T5948] veth1_macvtap: entered promiscuous mode [ 103.200001][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.208964][ T5960] veth0_macvtap: entered promiscuous mode [ 103.236593][ T5960] veth1_macvtap: entered promiscuous mode [ 103.248667][ T5955] veth0_macvtap: entered promiscuous mode [ 103.265026][ T5955] veth1_macvtap: entered promiscuous mode [ 103.278852][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.311229][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.329107][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.354508][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.364406][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.384808][ T5950] veth0_vlan: entered promiscuous mode [ 103.390649][ T3007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.405968][ T3007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.418632][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.431521][ T3007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.440635][ T3007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.458513][ T3007] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.467672][ T3007] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.485561][ T3007] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.505572][ T3007] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.514651][ T3007] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.533755][ T5950] veth1_vlan: entered promiscuous mode [ 103.541540][ T3007] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.558127][ T5959] veth0_vlan: entered promiscuous mode [ 103.570911][ T1167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.580735][ T1167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.668954][ T5959] veth1_vlan: entered promiscuous mode [ 103.700889][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.715798][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.788905][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.789068][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.805322][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.805436][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.820526][ T52] Bluetooth: hci2: command tx timeout [ 103.820607][ T5954] Bluetooth: hci3: command tx timeout [ 103.831393][ T5150] Bluetooth: hci1: command tx timeout [ 103.840223][ T5950] veth0_macvtap: entered promiscuous mode 2026/01/28 06:46:40 executed programs: 10 [ 103.890860][ T3074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.895013][ T5950] veth1_macvtap: entered promiscuous mode [ 103.899199][ T3074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.926483][ T5959] veth0_macvtap: entered promiscuous mode [ 103.957666][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 103.972504][ T5954] Bluetooth: hci5: command tx timeout [ 103.978499][ T5150] Bluetooth: hci4: command tx timeout [ 103.986515][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 103.998545][ T5959] veth1_macvtap: entered promiscuous mode [ 104.046015][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 104.056043][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 104.094539][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 104.104229][ T3074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.112059][ T3074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.114624][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.123076][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 104.167356][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 104.202861][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 104.218143][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.236740][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.280474][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.285536][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 104.302208][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 104.327396][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.340666][ T3074] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.376745][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.386113][ T3074] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.399162][ T3074] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.429229][ T3074] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.466482][ T3074] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.490885][ T3074] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.530863][ T3074] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.564653][ T3074] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.917540][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.937893][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.168222][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.222680][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.240244][ T3074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.282436][ T3074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.369260][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.405209][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/28 06:46:45 executed programs: 182 [ 108.962988][ T6262] __nla_validate_parse: 340 callbacks suppressed [ 108.963006][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 108.964517][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'. [ 108.969588][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 109.008240][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'. [ 109.041417][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 109.058782][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 109.067524][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 109.088055][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.196'. [ 109.125268][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 109.127302][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 109.823577][ T6294] ================================================================== [ 109.831705][ T6294] BUG: KASAN: slab-use-after-free in nft_array_get_cmp+0x1f6/0x2a0 [ 109.839642][ T6294] Read of size 1 at addr ffff88807e414199 by task syz.4.226/6294 [ 109.847363][ T6294] [ 109.849691][ T6294] CPU: 0 UID: 0 PID: 6294 Comm: syz.4.226 Not tainted syzkaller #0 PREEMPT(full) [ 109.849709][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 109.849718][ T6294] Call Trace: [ 109.849725][ T6294] [ 109.849731][ T6294] dump_stack_lvl+0xe8/0x150 [ 109.849760][ T6294] print_report+0xba/0x230 [ 109.849776][ T6294] ? nft_array_get_cmp+0x1f6/0x2a0 [ 109.849797][ T6294] kasan_report+0x117/0x150 [ 109.849814][ T6294] ? nft_array_get_cmp+0x1f6/0x2a0 [ 109.849836][ T6294] nft_array_get_cmp+0x1f6/0x2a0 [ 109.849856][ T6294] ? nft_data_init+0x48f/0xc90 [ 109.849875][ T6294] bsearch+0x50/0xc0 [ 109.849888][ T6294] ? __pfx_nft_array_get_cmp+0x10/0x10 [ 109.849910][ T6294] nft_rbtree_get+0x16b/0x400 [ 109.849930][ T6294] ? __pfx_nft_rbtree_get+0x10/0x10 [ 109.849950][ T6294] ? __nla_parse+0x40/0x60 [ 109.849971][ T6294] ? __pfx_nft_rbtree_get+0x10/0x10 [ 109.849989][ T6294] nft_get_set_elem+0x420/0xaa0 [ 109.850007][ T6294] ? lock_acquire+0x106/0x330 [ 109.850029][ T6294] ? __pfx_nft_get_set_elem+0x10/0x10 [ 109.850047][ T6294] ? nft_pernet+0x23/0x240 [ 109.850074][ T6294] ? nft_set_dump_ctx_init+0x6a9/0x980 [ 109.850094][ T6294] nf_tables_getsetelem+0x448/0x5e0 [ 109.850115][ T6294] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 109.850135][ T6294] ? is_bpf_text_address+0x26/0x2b0 [ 109.850154][ T6294] ? nfnl_pernet+0x23/0x240 [ 109.850170][ T6294] ? __nla_parse+0x40/0x60 [ 109.850190][ T6294] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 109.850210][ T6294] nfnetlink_rcv_msg+0x8ae/0x12c0 [ 109.850224][ T6294] ? unwind_get_return_address+0x4d/0x90 [ 109.850241][ T6294] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 109.850261][ T6294] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 109.850289][ T6294] netlink_rcv_skb+0x232/0x4b0 [ 109.850306][ T6294] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 109.850320][ T6294] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 109.850339][ T6294] ? bpf_lsm_capable+0x9/0x20 [ 109.850359][ T6294] ? security_capable+0x7e/0x2c0 [ 109.850378][ T6294] nfnetlink_rcv+0x2c0/0x27b0 [ 109.850394][ T6294] ? __local_bh_enable_ip+0xd0/0x130 [ 109.850407][ T6294] ? lockdep_hardirqs_on+0x7a/0x110 [ 109.850425][ T6294] ? __dev_queue_xmit+0x274/0x3850 [ 109.850447][ T6294] ? __local_bh_enable_ip+0xd0/0x130 [ 109.850459][ T6294] ? __dev_queue_xmit+0x274/0x3850 [ 109.850479][ T6294] ? __dev_queue_xmit+0x1e6c/0x3850 [ 109.850499][ T6294] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 109.850523][ T6294] ? __dev_queue_xmit+0x274/0x3850 [ 109.850544][ T6294] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 109.850559][ T6294] ? __pfx___dev_queue_xmit+0x10/0x10 [ 109.850583][ T6294] ? ref_tracker_free+0x693/0x840 [ 109.850601][ T6294] ? __copy_skb_header+0xa3/0x4a0 [ 109.850621][ T6294] ? __pfx_ref_tracker_free+0x10/0x10 [ 109.850639][ T6294] ? __skb_clone+0x63/0x7a0 [ 109.850660][ T6294] ? __skb_clone+0x483/0x7a0 [ 109.850681][ T6294] ? skb_clone+0x246/0x3a0 [ 109.850702][ T6294] ? __netlink_deliver_tap+0x807/0x850 [ 109.850718][ T6294] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.850735][ T6294] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.850759][ T6294] netlink_unicast+0x80f/0x9b0 [ 109.850776][ T6294] ? __pfx_netlink_unicast+0x10/0x10 [ 109.850790][ T6294] ? netlink_sendmsg+0x650/0xb40 [ 109.850806][ T6294] ? skb_put+0x11b/0x210 [ 109.850824][ T6294] netlink_sendmsg+0x813/0xb40 [ 109.850844][ T6294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.850861][ T6294] ? aa_sock_msg_perm+0xf1/0x1b0 [ 109.850879][ T6294] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 109.850896][ T6294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.850912][ T6294] ____sys_sendmsg+0xa68/0xad0 [ 109.850931][ T6294] ? __might_fault+0xaf/0x130 [ 109.850955][ T6294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.850977][ T6294] ? import_iovec+0x73/0xa0 [ 109.851000][ T6294] ___sys_sendmsg+0x2a5/0x360 [ 109.851022][ T6294] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.851043][ T6294] ? futex_hash_put+0x4b/0x60 [ 109.851060][ T6294] ? futex_wake+0x4ac/0x580 [ 109.851087][ T6294] __x64_sys_sendmsg+0x1bd/0x2a0 [ 109.851107][ T6294] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.851134][ T6294] do_syscall_64+0xe2/0xf80 [ 109.851151][ T6294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.851166][ T6294] ? trace_irq_disable+0x37/0x100 [ 109.851180][ T6294] ? clear_bhb_loop+0x60/0xb0 [ 109.851196][ T6294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.851211][ T6294] RIP: 0033:0x7f436119aeb9 [ 109.851225][ T6294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.851238][ T6294] RSP: 002b:00007ffd04dcaf58 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.851255][ T6294] RAX: ffffffffffffffda RBX: 00007f4361415fa0 RCX: 00007f436119aeb9 [ 109.851266][ T6294] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 109.851276][ T6294] RBP: 00007f4361208c1f R08: 0000000000000000 R09: 0000000000000000 [ 109.851285][ T6294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.851294][ T6294] R13: 00007f4361415fac R14: 00007f4361415fa0 R15: 00007f4361415fa0 [ 109.851310][ T6294] [ 109.851315][ T6294] [ 110.338162][ T6294] Allocated by task 6294: [ 110.342488][ T6294] kasan_save_track+0x3e/0x80 [ 110.347169][ T6294] __kasan_kmalloc+0x93/0xb0 [ 110.351753][ T6294] __kmalloc_noprof+0x40c/0x7e0 [ 110.356598][ T6294] nft_set_elem_init+0xa8/0x7e0 [ 110.361448][ T6294] nf_tables_newsetelem+0x22a4/0x4360 [ 110.366825][ T6294] nfnetlink_rcv+0x1240/0x27b0 [ 110.371587][ T6294] netlink_unicast+0x80f/0x9b0 [ 110.376350][ T6294] netlink_sendmsg+0x813/0xb40 [ 110.381114][ T6294] ____sys_sendmsg+0xa68/0xad0 [ 110.385885][ T6294] ___sys_sendmsg+0x2a5/0x360 [ 110.390564][ T6294] __x64_sys_sendmsg+0x1bd/0x2a0 [ 110.395501][ T6294] do_syscall_64+0xe2/0xf80 [ 110.400007][ T6294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.405898][ T6294] [ 110.408219][ T6294] Freed by task 6294: [ 110.412192][ T6294] kasan_save_track+0x3e/0x80 [ 110.416863][ T6294] kasan_save_free_info+0x46/0x50 [ 110.421887][ T6294] __kasan_slab_free+0x5c/0x80 [ 110.426650][ T6294] kfree+0x1be/0x650 [ 110.430565][ T6294] nft_trans_gc_trans_free+0x519/0x6c0 [ 110.436025][ T6294] rcu_core+0xc9e/0x1750 [ 110.440274][ T6294] handle_softirqs+0x22a/0x7c0 [ 110.445036][ T6294] do_softirq+0x76/0xd0 [ 110.449188][ T6294] __local_bh_enable_ip+0xf8/0x130 [ 110.454309][ T6294] netlink_insert+0xce/0x1360 [ 110.459004][ T6294] netlink_autobind+0x22d/0x300 [ 110.463861][ T6294] netlink_sendmsg+0x531/0xb40 [ 110.468636][ T6294] ____sys_sendmsg+0xa68/0xad0 [ 110.473408][ T6294] ___sys_sendmsg+0x2a5/0x360 [ 110.478102][ T6294] __x64_sys_sendmsg+0x1bd/0x2a0 [ 110.483049][ T6294] do_syscall_64+0xe2/0xf80 [ 110.487553][ T6294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.493441][ T6294] [ 110.495763][ T6294] The buggy address belongs to the object at ffff88807e414180 [ 110.495763][ T6294] which belongs to the cache kmalloc-cg-64 of size 64 [ 110.509900][ T6294] The buggy address is located 25 bytes inside of [ 110.509900][ T6294] freed 64-byte region [ffff88807e414180, ffff88807e4141c0) [ 110.523517][ T6294] [ 110.525841][ T6294] The buggy address belongs to the physical page: [ 110.532249][ T6294] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e414 [ 110.541020][ T6294] memcg:ffff88802aa2a201 [ 110.545259][ T6294] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 110.552368][ T6294] page_type: f5(slab) [ 110.556347][ T6294] raw: 00fff00000000000 ffff88813fe2ec80 dead000000000122 0000000000000000 [ 110.564929][ T6294] raw: 0000000000000000 0000000080200020 00000000f5000000 ffff88802aa2a201 [ 110.573509][ T6294] page dumped because: kasan: bad access detected [ 110.579912][ T6294] page_owner tracks the page as allocated [ 110.585624][ T6294] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6290, tgid 6290 (syz.3.222), ts 109687441268, free_ts 109634427768 [ 110.604809][ T6294] post_alloc_hook+0x228/0x280 [ 110.609574][ T6294] get_page_from_freelist+0x24dc/0x2580 [ 110.615119][ T6294] __alloc_frozen_pages_noprof+0x18d/0x380 [ 110.620931][ T6294] alloc_pages_mpol+0x232/0x4a0 [ 110.625790][ T6294] allocate_slab+0x86/0x3a0 [ 110.630299][ T6294] ___slab_alloc+0xd82/0x1760 [ 110.634974][ T6294] __slab_alloc+0x65/0x100 [ 110.639390][ T6294] __kmalloc_noprof+0x46c/0x7e0 [ 110.644239][ T6294] nft_set_elem_init+0xa8/0x7e0 [ 110.649086][ T6294] nf_tables_newsetelem+0x22a4/0x4360 [ 110.654457][ T6294] nfnetlink_rcv+0x1240/0x27b0 [ 110.659219][ T6294] netlink_unicast+0x80f/0x9b0 [ 110.663979][ T6294] netlink_sendmsg+0x813/0xb40 [ 110.668739][ T6294] ____sys_sendmsg+0xa68/0xad0 [ 110.673502][ T6294] ___sys_sendmsg+0x2a5/0x360 [ 110.678178][ T6294] __x64_sys_sendmsg+0x1bd/0x2a0 [ 110.683118][ T6294] page last free pid 5199 tgid 5199 stack trace: [ 110.689439][ T6294] __free_frozen_pages+0xbf8/0xd70 [ 110.694551][ T6294] tlb_remove_table_rcu+0x85/0x100 [ 110.699667][ T6294] rcu_core+0xc9e/0x1750 [ 110.703921][ T6294] handle_softirqs+0x22a/0x7c0 [ 110.708689][ T6294] __irq_exit_rcu+0x5f/0x150 [ 110.713275][ T6294] irq_exit_rcu+0x9/0x30 [ 110.717514][ T6294] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 110.723145][ T6294] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 110.729129][ T6294] [ 110.731448][ T6294] Memory state around the buggy address: [ 110.737079][ T6294] ffff88807e414080: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 110.745145][ T6294] ffff88807e414100: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 110.753202][ T6294] >ffff88807e414180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 110.761265][ T6294] ^ [ 110.766131][ T6294] ffff88807e414200: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 110.774206][ T6294] ffff88807e414280: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 110.782289][ T6294] ================================================================== [ 110.827464][ T6294] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 110.834717][ T6294] CPU: 0 UID: 0 PID: 6294 Comm: syz.4.226 Not tainted syzkaller #0 PREEMPT(full) [ 110.843942][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 110.854030][ T6294] Call Trace: [ 110.857343][ T6294] [ 110.860297][ T6294] vpanic+0x1e0/0x670 [ 110.864318][ T6294] panic+0xc5/0xd0 [ 110.868061][ T6294] ? __pfx_panic+0x10/0x10 [ 110.872509][ T6294] ? preempt_schedule_common+0x82/0xd0 [ 110.878004][ T6294] ? nft_array_get_cmp+0x1f6/0x2a0 [ 110.883146][ T6294] check_panic_on_warn+0x89/0xb0 [ 110.888118][ T6294] ? nft_array_get_cmp+0x1f6/0x2a0 [ 110.893254][ T6294] end_report+0x6f/0x140 [ 110.897506][ T6294] kasan_report+0x128/0x150 [ 110.902012][ T6294] ? nft_array_get_cmp+0x1f6/0x2a0 [ 110.907135][ T6294] nft_array_get_cmp+0x1f6/0x2a0 [ 110.912078][ T6294] ? nft_data_init+0x48f/0xc90 [ 110.916860][ T6294] bsearch+0x50/0xc0 [ 110.920755][ T6294] ? __pfx_nft_array_get_cmp+0x10/0x10 [ 110.926223][ T6294] nft_rbtree_get+0x16b/0x400 [ 110.930907][ T6294] ? __pfx_nft_rbtree_get+0x10/0x10 [ 110.936110][ T6294] ? __nla_parse+0x40/0x60 [ 110.940544][ T6294] ? __pfx_nft_rbtree_get+0x10/0x10 [ 110.945757][ T6294] nft_get_set_elem+0x420/0xaa0 [ 110.950626][ T6294] ? lock_acquire+0x106/0x330 [ 110.955324][ T6294] ? __pfx_nft_get_set_elem+0x10/0x10 [ 110.960708][ T6294] ? nft_pernet+0x23/0x240 [ 110.965145][ T6294] ? nft_set_dump_ctx_init+0x6a9/0x980 [ 110.970620][ T6294] nf_tables_getsetelem+0x448/0x5e0 [ 110.975842][ T6294] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 110.981572][ T6294] ? is_bpf_text_address+0x26/0x2b0 [ 110.986835][ T6294] ? nfnl_pernet+0x23/0x240 [ 110.991363][ T6294] ? __nla_parse+0x40/0x60 [ 110.995802][ T6294] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 111.002496][ T6294] nfnetlink_rcv_msg+0x8ae/0x12c0 [ 111.007529][ T6294] ? unwind_get_return_address+0x4d/0x90 [ 111.013171][ T6294] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 111.018391][ T6294] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 111.023872][ T6294] netlink_rcv_skb+0x232/0x4b0 [ 111.028647][ T6294] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 111.034108][ T6294] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.039397][ T6294] ? bpf_lsm_capable+0x9/0x20 [ 111.044084][ T6294] ? security_capable+0x7e/0x2c0 [ 111.049031][ T6294] nfnetlink_rcv+0x2c0/0x27b0 [ 111.053712][ T6294] ? __local_bh_enable_ip+0xd0/0x130 [ 111.059002][ T6294] ? lockdep_hardirqs_on+0x7a/0x110 [ 111.064201][ T6294] ? __dev_queue_xmit+0x274/0x3850 [ 111.069321][ T6294] ? __local_bh_enable_ip+0xd0/0x130 [ 111.074604][ T6294] ? __dev_queue_xmit+0x274/0x3850 [ 111.079722][ T6294] ? __dev_queue_xmit+0x1e6c/0x3850 [ 111.085444][ T6294] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 111.090568][ T6294] ? __dev_queue_xmit+0x274/0x3850 [ 111.095683][ T6294] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 111.100798][ T6294] ? __pfx___dev_queue_xmit+0x10/0x10 [ 111.106178][ T6294] ? ref_tracker_free+0x693/0x840 [ 111.111207][ T6294] ? __copy_skb_header+0xa3/0x4a0 [ 111.116236][ T6294] ? __pfx_ref_tracker_free+0x10/0x10 [ 111.121609][ T6294] ? __skb_clone+0x63/0x7a0 [ 111.126121][ T6294] ? __skb_clone+0x483/0x7a0 [ 111.130719][ T6294] ? skb_clone+0x246/0x3a0 [ 111.135139][ T6294] ? __netlink_deliver_tap+0x807/0x850 [ 111.140599][ T6294] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.145798][ T6294] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.151005][ T6294] netlink_unicast+0x80f/0x9b0 [ 111.155768][ T6294] ? __pfx_netlink_unicast+0x10/0x10 [ 111.161053][ T6294] ? netlink_sendmsg+0x650/0xb40 [ 111.165988][ T6294] ? skb_put+0x11b/0x210 [ 111.170233][ T6294] netlink_sendmsg+0x813/0xb40 [ 111.174999][ T6294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.180288][ T6294] ? aa_sock_msg_perm+0xf1/0x1b0 [ 111.185235][ T6294] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 111.190520][ T6294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.195806][ T6294] ____sys_sendmsg+0xa68/0xad0 [ 111.200572][ T6294] ? __might_fault+0xaf/0x130 [ 111.205265][ T6294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.210561][ T6294] ? import_iovec+0x73/0xa0 [ 111.215075][ T6294] ___sys_sendmsg+0x2a5/0x360 [ 111.219760][ T6294] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.224965][ T6294] ? futex_hash_put+0x4b/0x60 [ 111.229644][ T6294] ? futex_wake+0x4ac/0x580 [ 111.234160][ T6294] __x64_sys_sendmsg+0x1bd/0x2a0 [ 111.239103][ T6294] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.244571][ T6294] do_syscall_64+0xe2/0xf80 [ 111.249079][ T6294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.255147][ T6294] ? trace_irq_disable+0x37/0x100 [ 111.260176][ T6294] ? clear_bhb_loop+0x60/0xb0 [ 111.264857][ T6294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.270751][ T6294] RIP: 0033:0x7f436119aeb9 [ 111.275179][ T6294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.294784][ T6294] RSP: 002b:00007ffd04dcaf58 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.303201][ T6294] RAX: ffffffffffffffda RBX: 00007f4361415fa0 RCX: 00007f436119aeb9 [ 111.311173][ T6294] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 111.319150][ T6294] RBP: 00007f4361208c1f R08: 0000000000000000 R09: 0000000000000000 [ 111.327124][ T6294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.335096][ T6294] R13: 00007f4361415fac R14: 00007f4361415fa0 R15: 00007f4361415fa0 [ 111.343074][ T6294] [ 111.346242][ T6294] Kernel Offset: disabled [ 111.350576][ T6294] Rebooting in 86400 seconds..