Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts. 2026/05/24 04:37:04 parsed 1 programs [ 87.607529][ T5639] cgroup: Unknown subsys name 'net' [ 87.723487][ T5639] cgroup: Unknown subsys name 'cpuset' [ 87.732447][ T5639] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.470032][ T5639] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.926009][ T24] cfg80211: failed to load regulatory.db [ 92.877103][ T5660] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.463260][ T5707] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.473748][ T5707] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.483354][ T5707] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.492917][ T5707] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.501625][ T5707] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.730107][ T3393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.745824][ T3393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.040696][ T5682] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.049714][ T5682] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.057047][ T5682] bridge_slave_0: entered allmulticast mode [ 96.065182][ T5682] bridge_slave_0: entered promiscuous mode [ 96.082924][ T5682] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.090171][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.097809][ T5682] bridge_slave_1: entered allmulticast mode [ 96.106737][ T5682] bridge_slave_1: entered promiscuous mode [ 96.119895][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.148614][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.172771][ T5682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.185897][ T5682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.285972][ T5682] team0: Port device team_slave_0 added [ 96.307302][ T5682] team0: Port device team_slave_1 added [ 96.411938][ T5682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.419118][ T5682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.446662][ T5682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.461845][ T5682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.469809][ T5682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.496192][ T5682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.559387][ T5682] hsr_slave_0: entered promiscuous mode [ 96.565884][ T5682] hsr_slave_1: entered promiscuous mode [ 96.572232][ T5707] Bluetooth: hci0: command tx timeout [ 96.723413][ T5682] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.737334][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.746090][ T5682] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.755613][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.764199][ T5682] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.775256][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.785791][ T5682] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.798142][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.883845][ T5682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.910668][ T5682] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.925014][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.932567][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.949887][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.957057][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.307186][ T5682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.366313][ T5682] veth0_vlan: entered promiscuous mode [ 97.380127][ T5682] veth1_vlan: entered promiscuous mode [ 97.413556][ T5682] veth0_macvtap: entered promiscuous mode [ 97.423791][ T5682] veth1_macvtap: entered promiscuous mode [ 97.445785][ T5682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.460235][ T5682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.476227][ T153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.488599][ T153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.497672][ T153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.512131][ T153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/05/24 04:37:18 executed programs: 0 [ 97.727351][ T4946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.744111][ T4946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.753445][ T4946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.773877][ T4946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.785300][ T4946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.850405][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.860274][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.868650][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.878187][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.887818][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.896524][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.907601][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.911323][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.922503][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.932787][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.989215][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.001469][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.002079][ T4946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.019825][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.027215][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.037708][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.045847][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.061807][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.062139][ T4946] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.080778][ T5707] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 99.221224][ T153] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.800694][ T153] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.839556][ T5707] Bluetooth: hci1: command tx timeout [ 100.000105][ T5773] Bluetooth: hci3: command tx timeout [ 100.002962][ T5707] Bluetooth: hci2: command tx timeout [ 100.154227][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.161475][ T5707] Bluetooth: hci4: command tx timeout [ 100.161825][ T5707] Bluetooth: hci5: command tx timeout [ 100.173662][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.181373][ T5770] bridge_slave_0: entered allmulticast mode [ 100.188634][ T5770] bridge_slave_0: entered promiscuous mode [ 100.243891][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.251175][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.258341][ T5770] bridge_slave_1: entered allmulticast mode [ 100.266026][ T5770] bridge_slave_1: entered promiscuous mode [ 100.273678][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.281600][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.289570][ T5774] bridge_slave_0: entered allmulticast mode [ 100.297460][ T5774] bridge_slave_0: entered promiscuous mode [ 100.305204][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.313734][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.321109][ T5766] bridge_slave_0: entered allmulticast mode [ 100.328349][ T5766] bridge_slave_0: entered promiscuous mode [ 100.357860][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.365202][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.372726][ T5774] bridge_slave_1: entered allmulticast mode [ 100.380361][ T5774] bridge_slave_1: entered promiscuous mode [ 100.387450][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.394776][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.402200][ T5766] bridge_slave_1: entered allmulticast mode [ 100.410831][ T5766] bridge_slave_1: entered promiscuous mode [ 100.452367][ T153] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.508354][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.523463][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.578487][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.585783][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.593065][ T5771] bridge_slave_0: entered allmulticast mode [ 100.601863][ T5771] bridge_slave_0: entered promiscuous mode [ 100.624125][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.636690][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.660601][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.667877][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.675674][ T5771] bridge_slave_1: entered allmulticast mode [ 100.683357][ T5771] bridge_slave_1: entered promiscuous mode [ 100.699962][ T153] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.728110][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.741059][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.750313][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.757536][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.764947][ T5779] bridge_slave_0: entered allmulticast mode [ 100.772219][ T5779] bridge_slave_0: entered promiscuous mode [ 100.796074][ T5770] team0: Port device team_slave_0 added [ 100.823666][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.830953][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.838126][ T5779] bridge_slave_1: entered allmulticast mode [ 100.845661][ T5779] bridge_slave_1: entered promiscuous mode [ 100.887522][ T5770] team0: Port device team_slave_1 added [ 100.919012][ T5766] team0: Port device team_slave_0 added [ 100.928637][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.940948][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.974622][ T5774] team0: Port device team_slave_0 added [ 100.982277][ T5766] team0: Port device team_slave_1 added [ 101.002167][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.013434][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.023329][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.030431][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.056727][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.070210][ T5774] team0: Port device team_slave_1 added [ 101.076389][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.083691][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.110371][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.207651][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.214951][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.241923][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.276748][ T5771] team0: Port device team_slave_0 added [ 101.283477][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.290573][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.316665][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.329862][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.336840][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.363044][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.382460][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.389579][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.415806][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.429102][ T5779] team0: Port device team_slave_0 added [ 101.449237][ T5771] team0: Port device team_slave_1 added [ 101.489752][ T5779] team0: Port device team_slave_1 added [ 101.583454][ T5770] hsr_slave_0: entered promiscuous mode [ 101.589868][ T5770] hsr_slave_1: entered promiscuous mode [ 101.596002][ T5770] debugfs: 'hsr0' already exists in 'hsr' [ 101.603606][ T5770] Cannot create hsr debugfs directory [ 101.609941][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.616928][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.643357][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.683235][ T5774] hsr_slave_0: entered promiscuous mode [ 101.689876][ T5774] hsr_slave_1: entered promiscuous mode [ 101.696740][ T5774] debugfs: 'hsr0' already exists in 'hsr' [ 101.703255][ T5774] Cannot create hsr debugfs directory [ 101.710901][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.717886][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.743907][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.756840][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.765478][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.791840][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.803467][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.810903][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.836900][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.886477][ T153] bridge_slave_1: left allmulticast mode [ 101.892264][ T153] bridge_slave_1: left promiscuous mode [ 101.898718][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.911699][ T153] bridge_slave_0: left allmulticast mode [ 101.917357][ T153] bridge_slave_0: left promiscuous mode [ 101.923870][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.931612][ T5773] Bluetooth: hci1: command tx timeout [ 102.079320][ T5773] Bluetooth: hci3: command tx timeout [ 102.080183][ T5707] Bluetooth: hci2: command tx timeout [ 102.136462][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.147813][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.157991][ T153] bond0 (unregistering): Released all slaves [ 102.239295][ T5707] Bluetooth: hci5: command tx timeout [ 102.239655][ T5773] Bluetooth: hci4: command tx timeout [ 102.307414][ T5766] hsr_slave_0: entered promiscuous mode [ 102.314208][ T5766] hsr_slave_1: entered promiscuous mode [ 102.321629][ T5766] debugfs: 'hsr0' already exists in 'hsr' [ 102.327494][ T5766] Cannot create hsr debugfs directory [ 102.588043][ T153] hsr_slave_0: left promiscuous mode [ 102.594443][ T153] hsr_slave_1: left promiscuous mode [ 102.603978][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.611734][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.620151][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.628379][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.645367][ T153] veth1_macvtap: left promiscuous mode [ 102.651477][ T153] veth0_macvtap: left promiscuous mode [ 102.657166][ T153] veth1_vlan: left promiscuous mode [ 102.662862][ T153] veth0_vlan: left promiscuous mode [ 102.872880][ T153] team0 (unregistering): Port device team_slave_1 removed [ 102.889092][ T153] team0 (unregistering): Port device team_slave_0 removed [ 103.018772][ T5771] hsr_slave_0: entered promiscuous mode [ 103.026306][ T5771] hsr_slave_1: entered promiscuous mode [ 103.090697][ T5779] hsr_slave_0: entered promiscuous mode [ 103.097060][ T5779] hsr_slave_1: entered promiscuous mode [ 103.103282][ T5779] debugfs: 'hsr0' already exists in 'hsr' [ 103.109227][ T5779] Cannot create hsr debugfs directory [ 103.783972][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 103.826385][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.852170][ T5770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.867769][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.891371][ T5770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.904132][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.924981][ T5770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.952399][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.964218][ T5770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.999553][ T5773] Bluetooth: hci1: command tx timeout [ 104.062113][ T5766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.083021][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.091183][ T5766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.105390][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.137813][ T5766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.151176][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.159370][ T5773] Bluetooth: hci3: command tx timeout [ 104.159380][ T5707] Bluetooth: hci2: command tx timeout [ 104.173779][ T5766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.192402][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.319295][ T5707] Bluetooth: hci5: command tx timeout [ 104.321981][ T5773] Bluetooth: hci4: command tx timeout [ 104.472515][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.547039][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.566410][ T3393] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.573635][ T3393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.607212][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.614398][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.636730][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.664976][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.675840][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.689733][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.700436][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.708360][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.718087][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.728368][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.740204][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.792189][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.848500][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.855783][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.907050][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.914316][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.993421][ T5779] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.009990][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.018229][ T5779] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.029305][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.054673][ T5779] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.069950][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.078074][ T5779] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.088245][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.394865][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.413331][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.444171][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.481422][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.528140][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.559932][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.568114][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.584859][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.647516][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.757976][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.821616][ T3393] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.828902][ T3393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.892324][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.899567][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.957289][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.083518][ T5773] Bluetooth: hci1: command tx timeout [ 106.106115][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.186180][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.193414][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.239222][ T5773] Bluetooth: hci2: command tx timeout [ 106.250445][ T5773] Bluetooth: hci3: command tx timeout [ 106.285411][ T3393] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.292618][ T3393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.335421][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.391902][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.403126][ T5773] Bluetooth: hci5: command tx timeout [ 106.409654][ T5707] Bluetooth: hci4: command tx timeout [ 106.443437][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.522712][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.563590][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.570831][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.602573][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.609806][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.718419][ T5766] veth0_vlan: entered promiscuous mode [ 106.795460][ T5770] veth0_vlan: entered promiscuous mode [ 106.815607][ T5766] veth1_vlan: entered promiscuous mode [ 106.856090][ T5770] veth1_vlan: entered promiscuous mode [ 106.986146][ T5766] veth0_macvtap: entered promiscuous mode [ 107.027966][ T5766] veth1_macvtap: entered promiscuous mode [ 107.088433][ T5770] veth0_macvtap: entered promiscuous mode [ 107.134550][ T5770] veth1_macvtap: entered promiscuous mode [ 107.160280][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.224595][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.297062][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.321699][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.345211][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.386231][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.411088][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.427923][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.487071][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.514900][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.531708][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.578364][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.886784][ T3393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.906832][ T3393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.952809][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.997359][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.046043][ T3393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.065980][ T3393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.166610][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.199047][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/24 04:37:28 executed programs: 10 [ 108.311982][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.341121][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.403824][ T5771] veth0_vlan: entered promiscuous mode [ 108.437731][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.479619][ T5771] veth1_vlan: entered promiscuous mode [ 108.648858][ T5771] veth0_macvtap: entered promiscuous mode [ 108.716241][ T5771] veth1_macvtap: entered promiscuous mode [ 108.829116][ T5774] veth0_vlan: entered promiscuous mode [ 108.854818][ T5774] veth1_vlan: entered promiscuous mode [ 108.913283][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.971001][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.069015][ T153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.085011][ T5779] veth0_vlan: entered promiscuous mode [ 109.121113][ T153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.146355][ T153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.192270][ T5779] veth1_vlan: entered promiscuous mode [ 109.213863][ T64] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.263257][ T5774] veth0_macvtap: entered promiscuous mode [ 109.315444][ T5774] veth1_macvtap: entered promiscuous mode [ 109.466023][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.495039][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.507297][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.566426][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.658425][ T5779] veth0_macvtap: entered promiscuous mode [ 109.738031][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.752867][ T153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.766937][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.775338][ T153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.786826][ T5779] veth1_macvtap: entered promiscuous mode [ 109.824297][ T153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.856270][ T153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.963465][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.028603][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.124753][ T153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.164614][ T153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.196939][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.217934][ T153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.234712][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.263216][ T153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.434083][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.461874][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.571396][ T6072] ================================================================== [ 110.579527][ T6072] BUG: KASAN: slab-use-after-free in flow_block_cb_setup_simple+0x1cc/0x740 [ 110.588347][ T6072] Read of size 8 at addr ffff88802b57dc20 by task syz.1.73/6072 [ 110.596006][ T6072] [ 110.598373][ T6072] CPU: 0 UID: 0 PID: 6072 Comm: syz.1.73 Not tainted syzkaller #0 PREEMPT(full) [ 110.598397][ T6072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 110.598422][ T6072] Call Trace: [ 110.598435][ T6072] [ 110.598443][ T6072] dump_stack_lvl+0xe8/0x150 [ 110.598470][ T6072] print_address_description+0x55/0x1e0 [ 110.598492][ T6072] ? flow_block_cb_setup_simple+0x1cc/0x740 [ 110.598517][ T6072] print_report+0x58/0x70 [ 110.598535][ T6072] kasan_report+0x117/0x150 [ 110.598566][ T6072] ? flow_block_cb_setup_simple+0x1cc/0x740 [ 110.598593][ T6072] ? __pfx_nsim_setup_tc_block_cb+0x10/0x10 [ 110.598619][ T6072] flow_block_cb_setup_simple+0x1cc/0x740 [ 110.598647][ T6072] nft_chain_offload_cmd+0x2d8/0x6e0 [ 110.598676][ T6072] ? __pfx_nft_chain_offload_cmd+0x10/0x10 [ 110.598701][ T6072] ? __pfx_clockevents_program_event+0x10/0x10 [ 110.598728][ T6072] ? __lock_acquire+0x6b5/0x2cf0 [ 110.598753][ T6072] ? irqentry_exit+0x218/0x760 [ 110.598781][ T6072] ? lockdep_hardirqs_on+0x7a/0x110 [ 110.598809][ T6072] ? irqentry_exit+0x218/0x760 [ 110.598835][ T6072] ? trace_irq_disable+0x3b/0x140 [ 110.598871][ T6072] ? nft_pernet+0x45/0x270 [ 110.598897][ T6072] ? nft_pernet+0x45/0x270 [ 110.598920][ T6072] ? nft_pernet+0x45/0x270 [ 110.598945][ T6072] nft_flow_rule_offload_commit+0x8c9/0x1ce0 [ 110.598971][ T6072] ? __lock_acquire+0x6b5/0x2cf0 [ 110.599002][ T6072] ? __pfx_nft_flow_rule_offload_commit+0x10/0x10 [ 110.599027][ T6072] ? clockevents_program_event+0x491/0x630 [ 110.599051][ T6072] ? inat_get_opcode_attribute+0xc/0x50 [ 110.599075][ T6072] ? insn_get_opcode+0xb12/0x11b0 [ 110.599104][ T6072] ? do_raw_spin_lock+0x12b/0x2f0 [ 110.599135][ T6072] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 110.599165][ T6072] ? __pfx_do_sync_core+0x10/0x10 [ 110.599194][ T6072] ? smp_call_function_many_cond+0xe6c/0x13d0 [ 110.599215][ T6072] ? lockdep_hardirqs_on+0x7a/0x110 [ 110.599241][ T6072] ? __pfx_do_sync_core+0x10/0x10 [ 110.599266][ T6072] ? smp_call_function_many_cond+0x1051/0x13d0 [ 110.599290][ T6072] ? __pfx_do_sync_core+0x10/0x10 [ 110.599320][ T6072] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 110.599340][ T6072] ? __netif_receive_skb_core+0x17b6/0x3170 [ 110.599365][ T6072] ? __lock_acquire+0x6b5/0x2cf0 [ 110.599388][ T6072] ? static_key_slow_inc_cpuslocked+0xba/0xf0 [ 110.599414][ T6072] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 110.599445][ T6072] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 110.599476][ T6072] ? nft_pernet+0x23/0x240 [ 110.599498][ T6072] ? nft_pernet+0x23/0x240 [ 110.599522][ T6072] ? nft_pernet+0x23/0x240 [ 110.599543][ T6072] ? nft_pernet+0x23/0x240 [ 110.599567][ T6072] nf_tables_commit+0x80d/0xa7c0 [ 110.599588][ T6072] ? nf_register_net_hook+0xc8/0x190 [ 110.599633][ T6072] ? nft_netdev_register_hooks+0x241/0x250 [ 110.599660][ T6072] ? nf_tables_newchain+0x2375/0x2890 [ 110.599686][ T6072] ? __pfx_nf_tables_commit+0x10/0x10 [ 110.599706][ T6072] ? __pfx_nf_tables_newchain+0x10/0x10 [ 110.599738][ T6072] ? nft_trans_table_add+0x230/0x430 [ 110.599762][ T6072] ? nfnl_pernet+0x23/0x240 [ 110.599797][ T6072] nfnetlink_rcv+0x1c19/0x27b0 [ 110.599838][ T6072] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 110.599871][ T6072] ? ref_tracker_free+0x693/0x840 [ 110.599912][ T6072] ? __netlink_deliver_tap+0x807/0x850 [ 110.599945][ T6072] ? netlink_deliver_tap+0x2e/0x1b0 [ 110.599971][ T6072] ? netlink_deliver_tap+0x2e/0x1b0 [ 110.600007][ T6072] netlink_unicast+0x75c/0x8e0 [ 110.600036][ T6072] netlink_sendmsg+0x813/0xb40 [ 110.600067][ T6072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.600095][ T6072] ? page_table_check_set+0x126/0x510 [ 110.600123][ T6072] ? lock_acquire+0x106/0x350 [ 110.600142][ T6072] ? aa_sock_msg_perm+0xf1/0x1b0 [ 110.600169][ T6072] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 110.600198][ T6072] ____sys_sendmsg+0x972/0x9f0 [ 110.600222][ T6072] ? __might_fault+0xaf/0x130 [ 110.600245][ T6072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.600271][ T6072] ? import_iovec+0x73/0xa0 [ 110.600295][ T6072] ___sys_sendmsg+0x2a5/0x360 [ 110.600320][ T6072] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.600345][ T6072] ? futex_hash_put+0x4b/0x60 [ 110.600360][ T6072] ? futex_wake+0x4ac/0x580 [ 110.600400][ T6072] __x64_sys_sendmsg+0x1bd/0x2a0 [ 110.600425][ T6072] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 110.600456][ T6072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.600473][ T6072] do_syscall_64+0x15f/0xf80 [ 110.600496][ T6072] ? trace_irq_disable+0x3b/0x140 [ 110.600520][ T6072] ? clear_bhb_loop+0x40/0x90 [ 110.600538][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.600554][ T6072] RIP: 0033:0x7f9a1ef9ce59 [ 110.600576][ T6072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.600589][ T6072] RSP: 002b:00007ffe44c200b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.600610][ T6072] RAX: ffffffffffffffda RBX: 00007f9a1f215fa0 RCX: 00007f9a1ef9ce59 [ 110.600624][ T6072] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 110.600637][ T6072] RBP: 00007f9a1f032d6f R08: 0000000000000000 R09: 0000000000000000 [ 110.600649][ T6072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.600658][ T6072] R13: 00007f9a1f215fac R14: 00007f9a1f215fa0 R15: 00007f9a1f215fa0 [ 110.600677][ T6072] [ 110.600683][ T6072] [ 111.114612][ T6072] Allocated by task 6068: [ 111.118987][ T6072] kasan_save_track+0x3e/0x80 [ 111.123688][ T6072] __kasan_kmalloc+0x93/0xb0 [ 111.128298][ T6072] __kmalloc_cache_noprof+0x31c/0x660 [ 111.133685][ T6072] flow_block_cb_setup_simple+0x2a1/0x740 [ 111.139425][ T6072] nft_chain_offload_cmd+0x2d8/0x6e0 [ 111.144809][ T6072] nft_flow_rule_offload_commit+0x8c9/0x1ce0 [ 111.150799][ T6072] nf_tables_commit+0x80d/0xa7c0 [ 111.155746][ T6072] nfnetlink_rcv+0x1c19/0x27b0 [ 111.160529][ T6072] netlink_unicast+0x75c/0x8e0 [ 111.165305][ T6072] netlink_sendmsg+0x813/0xb40 [ 111.170078][ T6072] ____sys_sendmsg+0x972/0x9f0 [ 111.174887][ T6072] ___sys_sendmsg+0x2a5/0x360 [ 111.179599][ T6072] __x64_sys_sendmsg+0x1bd/0x2a0 [ 111.184559][ T6072] do_syscall_64+0x15f/0xf80 [ 111.189173][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.195098][ T6072] [ 111.197433][ T6072] Freed by task 6068: [ 111.201416][ T6072] kasan_save_track+0x3e/0x80 [ 111.206124][ T6072] kasan_save_free_info+0x46/0x50 [ 111.211180][ T6072] __kasan_slab_free+0x5c/0x80 [ 111.215992][ T6072] kfree+0x1c5/0x640 [ 111.219905][ T6072] nft_flow_offload_unbind+0x407/0x4b0 [ 111.225393][ T6072] nft_chain_offload_cmd+0x30f/0x6e0 [ 111.230691][ T6072] nft_flow_rule_offload_commit+0x485/0x1ce0 [ 111.236689][ T6072] nf_tables_commit+0x80d/0xa7c0 [ 111.241636][ T6072] nfnetlink_rcv+0x1c19/0x27b0 [ 111.246433][ T6072] netlink_unicast+0x75c/0x8e0 [ 111.251212][ T6072] netlink_sendmsg+0x813/0xb40 [ 111.256018][ T6072] ____sys_sendmsg+0x972/0x9f0 [ 111.260818][ T6072] ___sys_sendmsg+0x2a5/0x360 [ 111.265514][ T6072] __x64_sys_sendmsg+0x1bd/0x2a0 [ 111.270468][ T6072] do_syscall_64+0x15f/0xf80 [ 111.275076][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.280982][ T6072] [ 111.283316][ T6072] The buggy address belongs to the object at ffff88802b57dc00 [ 111.283316][ T6072] which belongs to the cache kmalloc-192 of size 192 [ 111.297465][ T6072] The buggy address is located 32 bytes inside of [ 111.297465][ T6072] freed 192-byte region [ffff88802b57dc00, ffff88802b57dcc0) [ 111.311181][ T6072] [ 111.313514][ T6072] The buggy address belongs to the physical page: [ 111.319962][ T6072] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b57d [ 111.328732][ T6072] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 111.336209][ T6072] page_type: f5(slab) [ 111.340205][ T6072] raw: 00fff00000000000 ffff88813fe1a3c0 dead000000000100 dead000000000122 [ 111.348805][ T6072] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 111.357398][ T6072] page dumped because: kasan: bad access detected [ 111.363834][ T6072] page_owner tracks the page as allocated [ 111.369557][ T6072] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 13482898665, free_ts 13353445565 [ 111.389536][ T6072] post_alloc_hook+0x231/0x280 [ 111.394334][ T6072] get_page_from_freelist+0x24ba/0x2540 [ 111.399904][ T6072] __alloc_frozen_pages_noprof+0x18d/0x380 [ 111.405828][ T6072] allocate_slab+0x77/0x660 [ 111.410370][ T6072] refill_objects+0x339/0x3d0 [ 111.415063][ T6072] __pcs_replace_empty_main+0x321/0x720 [ 111.420623][ T6072] __kmalloc_cache_noprof+0x392/0x660 [ 111.426022][ T6072] call_usermodehelper_setup+0x8e/0x270 [ 111.431592][ T6072] kobject_uevent_env+0x658/0x9e0 [ 111.436633][ T6072] device_add+0x557/0xbb0 [ 111.440982][ T6072] usb_set_configuration+0x1a87/0x2110 [ 111.446463][ T6072] usb_generic_driver_probe+0x8d/0x150 [ 111.451942][ T6072] usb_probe_device+0x1c4/0x3b0 [ 111.456807][ T6072] really_probe+0x267/0xaf0 [ 111.461324][ T6072] __driver_probe_device+0x1ef/0x380 [ 111.466668][ T6072] driver_probe_device+0x4f/0x240 [ 111.471707][ T6072] page last free pid 24 tgid 24 stack trace: [ 111.477691][ T6072] __free_frozen_pages+0xbc7/0xd30 [ 111.482827][ T6072] vfree+0x1d1/0x2f0 [ 111.486750][ T6072] delayed_vfree_work+0x55/0x80 [ 111.491617][ T6072] process_scheduled_works+0xb5d/0x1860 [ 111.497172][ T6072] worker_thread+0xa53/0xfc0 [ 111.501819][ T6072] kthread+0x388/0x470 [ 111.505905][ T6072] ret_from_fork+0x514/0xb70 [ 111.510511][ T6072] ret_from_fork_asm+0x1a/0x30 [ 111.515287][ T6072] [ 111.517621][ T6072] Memory state around the buggy address: [ 111.523255][ T6072] ffff88802b57db00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 111.531406][ T6072] ffff88802b57db80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 111.539482][ T6072] >ffff88802b57dc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.547643][ T6072] ^ [ 111.552785][ T6072] ffff88802b57dc80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 111.560868][ T6072] ffff88802b57dd00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 111.568954][ T6072] ================================================================== [ 111.588190][ T6073] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 111.600129][ T6073] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 111.608582][ T6073] CPU: 1 UID: 0 PID: 6073 Comm: syz.0.72 Not tainted syzkaller #0 PREEMPT(full) [ 111.617720][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 111.627799][ T6073] RIP: 0010:flow_block_cb_setup_simple+0x1be/0x740 [ 111.634333][ T6073] Code: f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 c9 64 a1 f8 4d 8b 2e 4d 39 f5 0f 84 b6 00 00 00 49 8d 6d 20 48 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 48 89 ef e8 a4 64 a1 f8 4c 39 65 00 74 07 e8 89 [ 111.653949][ T6073] RSP: 0018:ffffc9000393e790 EFLAGS: 00010202 [ 111.660054][ T6073] RAX: 0000000000000004 RBX: dffffc0000000000 RCX: ffff88807e39bd80 [ 111.668043][ T6073] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88805f2f4340 [ 111.676027][ T6073] RBP: 0000000000000020 R08: ffff88807e39bd80 R09: 0000000000000002 [ 111.684102][ T6073] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff872816a0 [ 111.692092][ T6073] R13: 0000000000000000 R14: ffffffff8f6515a0 R15: ffff888034068e40 [ 111.700257][ T6073] FS: 00005555811c6500(0000) GS:ffff88812538c000(0000) knlGS:0000000000000000 [ 111.709209][ T6073] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.715797][ T6073] CR2: 0000200000000600 CR3: 000000007d22a000 CR4: 00000000003526f0 [ 111.723908][ T6073] Call Trace: [ 111.727294][ T6073] [ 111.730239][ T6073] nft_chain_offload_cmd+0x2d8/0x6e0 [ 111.735552][ T6073] ? __pfx_nft_chain_offload_cmd+0x10/0x10 [ 111.741376][ T6073] ? __lock_acquire+0x6b5/0x2cf0 [ 111.746332][ T6073] ? __lock_acquire+0x6b5/0x2cf0 [ 111.751296][ T6073] ? unwind_next_frame+0xa6/0x2550 [ 111.756435][ T6073] ? nft_pernet+0x45/0x270 [ 111.760869][ T6073] ? nft_pernet+0x45/0x270 [ 111.765386][ T6073] ? nft_pernet+0x45/0x270 [ 111.769826][ T6073] nft_flow_rule_offload_commit+0x8c9/0x1ce0 [ 111.775831][ T6073] ? __kernel_text_address+0xd/0x30 [ 111.781067][ T6073] ? __pfx_nft_flow_rule_offload_commit+0x10/0x10 [ 111.787504][ T6073] ? stack_trace_save+0xa9/0x100 [ 111.792550][ T6073] ? __pfx_stack_trace_save+0x10/0x10 [ 111.797948][ T6073] ? stack_depot_save_flags+0x33/0x810 [ 111.803441][ T6073] ? kasan_save_track+0x4f/0x80 [ 111.808323][ T6073] ? kasan_save_track+0x3e/0x80 [ 111.813202][ T6073] ? __kasan_kmalloc+0x93/0xb0 [ 111.817987][ T6073] ? __kvmalloc_node_noprof+0x528/0x8a0 [ 111.823565][ T6073] ? nf_hook_entries_grow+0x288/0x720 [ 111.828976][ T6073] ? __nf_register_net_hook+0x2c9/0x930 [ 111.834568][ T6073] ? nf_register_net_hook+0xb2/0x190 [ 111.839877][ T6073] ? nft_netdev_register_hooks+0x88/0x250 [ 111.845618][ T6073] ? nf_tables_newchain+0x235b/0x2890 [ 111.851027][ T6073] ? nfnetlink_rcv+0x123e/0x27b0 [ 111.855996][ T6073] ? netlink_unicast+0x75c/0x8e0 [ 111.860966][ T6073] ? netlink_sendmsg+0x813/0xb40 [ 111.865937][ T6073] ? ____sys_sendmsg+0x972/0x9f0 [ 111.870902][ T6073] ? ___sys_sendmsg+0x2a5/0x360 [ 111.875779][ T6073] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 111.880910][ T6073] ? do_syscall_64+0x15f/0xf80 [ 111.885702][ T6073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.891806][ T6073] ? __lock_acquire+0x6b5/0x2cf0 [ 111.896959][ T6073] ? __nf_register_net_hook+0x502/0x930 [ 111.902535][ T6073] ? nft_pernet+0x23/0x240 [ 111.906974][ T6073] ? nft_pernet+0x23/0x240 [ 111.911419][ T6073] ? nft_pernet+0x23/0x240 [ 111.915854][ T6073] ? nft_pernet+0x23/0x240 [ 111.920291][ T6073] nf_tables_commit+0x80d/0xa7c0 [ 111.925274][ T6073] ? nf_register_net_hook+0xc8/0x190 [ 111.930582][ T6073] ? nft_netdev_register_hooks+0x241/0x250 [ 111.936856][ T6073] ? nf_tables_newchain+0x2375/0x2890 [ 111.942254][ T6073] ? __pfx_nf_tables_commit+0x10/0x10 [ 111.947643][ T6073] ? __pfx_nf_tables_newchain+0x10/0x10 [ 111.953218][ T6073] ? nft_trans_table_add+0x230/0x430 [ 111.958529][ T6073] ? nfnl_pernet+0x23/0x240 [ 111.963063][ T6073] nfnetlink_rcv+0x1c19/0x27b0 [ 111.967853][ T6073] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 111.972987][ T6073] ? ref_tracker_free+0x693/0x840 [ 111.978069][ T6073] ? __netlink_deliver_tap+0x807/0x850 [ 111.983549][ T6073] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.988764][ T6073] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.993989][ T6073] netlink_unicast+0x75c/0x8e0 [ 111.998795][ T6073] netlink_sendmsg+0x813/0xb40 [ 112.003596][ T6073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.009256][ T6073] ? page_table_check_set+0x126/0x510 [ 112.014736][ T6073] ? lock_acquire+0x106/0x350 [ 112.019427][ T6073] ? aa_sock_msg_perm+0xf1/0x1b0 [ 112.024394][ T6073] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 112.029702][ T6073] ____sys_sendmsg+0x972/0x9f0 [ 112.034503][ T6073] ? __might_fault+0xaf/0x130 [ 112.039205][ T6073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.044555][ T6073] ? import_iovec+0x73/0xa0 [ 112.049080][ T6073] ___sys_sendmsg+0x2a5/0x360 [ 112.053782][ T6073] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.059003][ T6073] ? futex_hash_put+0x4b/0x60 [ 112.063690][ T6073] ? futex_wake+0x4ac/0x580 [ 112.068227][ T6073] __x64_sys_sendmsg+0x1bd/0x2a0 [ 112.073194][ T6073] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.078676][ T6073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.084757][ T6073] do_syscall_64+0x15f/0xf80 [ 112.089370][ T6073] ? trace_irq_disable+0x3b/0x140 [ 112.094418][ T6073] ? clear_bhb_loop+0x40/0x90 [ 112.099113][ T6073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.105118][ T6073] RIP: 0033:0x7f611059ce59 [ 112.109551][ T6073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.129200][ T6073] RSP: 002b:00007ffdfbab1cf8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.137640][ T6073] RAX: ffffffffffffffda RBX: 00007f6110815fa0 RCX: 00007f611059ce59 [ 112.145714][ T6073] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 112.153697][ T6073] RBP: 00007f6110632d6f R08: 0000000000000000 R09: 0000000000000000 [ 112.161683][ T6073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.169666][ T6073] R13: 00007f6110815fac R14: 00007f6110815fa0 R15: 00007f6110815fa0 [ 112.177727][ T6073] [ 112.180760][ T6073] Modules linked in: [ 112.186581][ T6073] ---[ end trace 0000000000000000 ]--- [ 112.193361][ T6073] RIP: 0010:flow_block_cb_setup_simple+0x1be/0x740 [ 112.200780][ T6073] Code: f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 c9 64 a1 f8 4d 8b 2e 4d 39 f5 0f 84 b6 00 00 00 49 8d 6d 20 48 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 48 89 ef e8 a4 64 a1 f8 4c 39 65 00 74 07 e8 89 [ 112.221416][ T6073] RSP: 0018:ffffc9000393e790 EFLAGS: 00010202 [ 112.227813][ T6073] RAX: 0000000000000004 RBX: dffffc0000000000 RCX: ffff88807e39bd80 [ 112.228313][ T6072] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 112.235943][ T6072] Kernel Offset: disabled