Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts. 2026/04/10 13:10:06 parsed 1 programs [ 86.274440][ T5825] cgroup: Unknown subsys name 'net' [ 86.382172][ T5825] cgroup: Unknown subsys name 'cpuset' [ 86.391311][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.302553][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.711925][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.092955][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.101357][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.109489][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.129993][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.138135][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.160977][ T24] cfg80211: failed to load regulatory.db [ 92.481356][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 93.138773][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.146703][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.154390][ T5846] bridge_slave_0: entered allmulticast mode [ 93.162850][ T5846] bridge_slave_0: entered promiscuous mode [ 93.230646][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.237865][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.246600][ T5846] bridge_slave_1: entered allmulticast mode [ 93.255016][ T5846] bridge_slave_1: entered promiscuous mode [ 93.635381][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.681703][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.807920][ T5846] team0: Port device team_slave_0 added [ 93.832428][ T5846] team0: Port device team_slave_1 added [ 93.903696][ T178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.904236][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.918917][ T178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.926918][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.953135][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.037713][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.059211][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.107895][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.167625][ T178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.180151][ T178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.327964][ T5846] hsr_slave_0: entered promiscuous mode [ 94.351168][ T5846] hsr_slave_1: entered promiscuous mode [ 95.356594][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.375586][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.394935][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.417810][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.741897][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.769306][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.785704][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.793135][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.815344][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.822590][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.011920][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.201673][ T5846] veth0_vlan: entered promiscuous mode [ 96.213496][ T5846] veth1_vlan: entered promiscuous mode [ 96.242807][ T5846] veth0_macvtap: entered promiscuous mode [ 96.252588][ T5846] veth1_macvtap: entered promiscuous mode [ 96.270633][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.286744][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.304706][ T105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.314560][ T105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.326118][ T105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.336517][ T105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/04/10 13:10:19 executed programs: 0 [ 96.499171][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.511211][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.519140][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.529577][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.538920][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.622910][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.675558][ T5957] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.680085][ T5958] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.683969][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.694665][ T5958] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.700134][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.706247][ T5958] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.712322][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.719766][ T5958] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.726727][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.734355][ T5958] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.747854][ T5958] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.759541][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.761350][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.779816][ T5957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.789250][ T5954] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.801509][ T5958] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.810492][ T5958] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.827670][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.839112][ T5954] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.440863][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.513772][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.580402][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 97.591953][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 97.636483][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.703590][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 97.730069][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 97.881981][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 98.003916][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.011172][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.019113][ T5943] bridge_slave_0: entered allmulticast mode [ 98.026397][ T5943] bridge_slave_0: entered promiscuous mode [ 98.034173][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.041472][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.049009][ T5948] bridge_slave_0: entered allmulticast mode [ 98.055999][ T5948] bridge_slave_0: entered promiscuous mode [ 98.065380][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.072704][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.079964][ T5948] bridge_slave_1: entered allmulticast mode [ 98.087626][ T5948] bridge_slave_1: entered promiscuous mode [ 98.117655][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.125047][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.133119][ T5953] bridge_slave_0: entered allmulticast mode [ 98.141053][ T5953] bridge_slave_0: entered promiscuous mode [ 98.163788][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.171419][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.179179][ T5943] bridge_slave_1: entered allmulticast mode [ 98.186298][ T5943] bridge_slave_1: entered promiscuous mode [ 98.214281][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.221710][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.229398][ T5949] bridge_slave_0: entered allmulticast mode [ 98.236673][ T5949] bridge_slave_0: entered promiscuous mode [ 98.244322][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.252535][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.260083][ T5953] bridge_slave_1: entered allmulticast mode [ 98.267283][ T5953] bridge_slave_1: entered promiscuous mode [ 98.324511][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.331736][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.339803][ T5949] bridge_slave_1: entered allmulticast mode [ 98.347389][ T5949] bridge_slave_1: entered promiscuous mode [ 98.368299][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.397309][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.410268][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.426677][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.455443][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.487170][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.499595][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.529636][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.550958][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.558226][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.565824][ T5950] bridge_slave_0: entered allmulticast mode [ 98.573908][ T5950] bridge_slave_0: entered promiscuous mode [ 98.592395][ T5948] team0: Port device team_slave_0 added [ 98.610309][ T5863] Bluetooth: hci0: command tx timeout [ 98.612278][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.636239][ T5953] team0: Port device team_slave_0 added [ 98.642838][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.650321][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.657531][ T5950] bridge_slave_1: entered allmulticast mode [ 98.665436][ T5950] bridge_slave_1: entered promiscuous mode [ 98.674475][ T5948] team0: Port device team_slave_1 added [ 98.695371][ T5943] team0: Port device team_slave_0 added [ 98.703669][ T5943] team0: Port device team_slave_1 added [ 98.722330][ T5953] team0: Port device team_slave_1 added [ 98.730662][ T5949] team0: Port device team_slave_0 added [ 98.739443][ T5949] team0: Port device team_slave_1 added [ 98.825289][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.832843][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.850521][ T5863] Bluetooth: hci2: command tx timeout [ 98.860012][ T5954] Bluetooth: hci3: command tx timeout [ 98.864701][ T5863] Bluetooth: hci1: command tx timeout [ 98.877247][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.891678][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.902580][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.909663][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.936194][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.936699][ T5954] Bluetooth: hci4: command tx timeout [ 98.951882][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.960027][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.986956][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.019978][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.027431][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.053652][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.074691][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.103190][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.110473][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.137185][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.149738][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.156744][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.183843][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.197284][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.204360][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.230830][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.278238][ T5950] team0: Port device team_slave_0 added [ 99.284900][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.292250][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.318391][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.378708][ T5950] team0: Port device team_slave_1 added [ 99.391815][ T5948] hsr_slave_0: entered promiscuous mode [ 99.398168][ T5948] hsr_slave_1: entered promiscuous mode [ 99.404500][ T5948] debugfs: 'hsr0' already exists in 'hsr' [ 99.410460][ T5948] Cannot create hsr debugfs directory [ 99.436368][ T5949] hsr_slave_0: entered promiscuous mode [ 99.442779][ T5949] hsr_slave_1: entered promiscuous mode [ 99.449205][ T5949] debugfs: 'hsr0' already exists in 'hsr' [ 99.454973][ T5949] Cannot create hsr debugfs directory [ 99.558209][ T5943] hsr_slave_0: entered promiscuous mode [ 99.565141][ T5943] hsr_slave_1: entered promiscuous mode [ 99.571541][ T5943] debugfs: 'hsr0' already exists in 'hsr' [ 99.577298][ T5943] Cannot create hsr debugfs directory [ 99.583674][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.590751][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.616814][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.635601][ T5953] hsr_slave_0: entered promiscuous mode [ 99.642072][ T5953] hsr_slave_1: entered promiscuous mode [ 99.648178][ T5953] debugfs: 'hsr0' already exists in 'hsr' [ 99.654104][ T5953] Cannot create hsr debugfs directory [ 99.711356][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.718344][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.745384][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.912485][ T5950] hsr_slave_0: entered promiscuous mode [ 99.919441][ T5950] hsr_slave_1: entered promiscuous mode [ 99.926542][ T5950] debugfs: 'hsr0' already exists in 'hsr' [ 99.933201][ T5950] Cannot create hsr debugfs directory [ 99.994678][ T13] bridge_slave_1: left allmulticast mode [ 100.001311][ T13] bridge_slave_1: left promiscuous mode [ 100.007796][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.019700][ T13] bridge_slave_0: left allmulticast mode [ 100.025464][ T13] bridge_slave_0: left promiscuous mode [ 100.031564][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.201671][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.213977][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.224199][ T13] bond0 (unregistering): Released all slaves [ 100.476386][ T13] hsr_slave_0: left promiscuous mode [ 100.482695][ T13] hsr_slave_1: left promiscuous mode [ 100.490010][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.497506][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.505826][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.513313][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.526903][ T13] veth1_macvtap: left promiscuous mode [ 100.532889][ T13] veth0_macvtap: left promiscuous mode [ 100.539423][ T13] veth1_vlan: left promiscuous mode [ 100.544720][ T13] veth0_vlan: left promiscuous mode [ 100.688734][ T5954] Bluetooth: hci0: command tx timeout [ 100.729935][ T13] team0 (unregistering): Port device team_slave_1 removed [ 100.743849][ T13] team0 (unregistering): Port device team_slave_0 removed [ 100.928815][ T5954] Bluetooth: hci1: command tx timeout [ 100.928955][ T5863] Bluetooth: hci3: command tx timeout [ 100.934314][ T5144] Bluetooth: hci2: command tx timeout [ 101.008620][ T5954] Bluetooth: hci4: command tx timeout [ 101.220993][ T5949] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.237437][ T5949] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.283541][ T5949] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.323195][ T5949] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.401326][ T5948] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.424604][ T5948] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.463680][ T5948] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.479255][ T5948] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.634353][ T5943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.654083][ T5943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.671634][ T5943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.712299][ T5943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.844701][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.906350][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.945514][ T178] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.952731][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.016253][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.027273][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.034573][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.096779][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.150186][ T5950] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.163510][ T5950] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.182500][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.219632][ T5950] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.233651][ T5950] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.306179][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.313544][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.333788][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.401616][ T178] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.408841][ T178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.443723][ T5953] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.468338][ T178] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.475554][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.520512][ T5953] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.543262][ T5953] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.572453][ T178] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.579767][ T178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.642941][ T5953] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.768566][ T5954] Bluetooth: hci0: command tx timeout [ 102.982237][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.015479][ T5954] Bluetooth: hci1: command tx timeout [ 103.021819][ T5144] Bluetooth: hci2: command tx timeout [ 103.021830][ T5863] Bluetooth: hci3: command tx timeout [ 103.032843][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.093583][ T5144] Bluetooth: hci4: command tx timeout [ 103.125342][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.176870][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.184176][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.227826][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.235360][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.297949][ T5949] veth0_vlan: entered promiscuous mode [ 103.333200][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.353638][ T5949] veth1_vlan: entered promiscuous mode [ 103.385397][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.421820][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.434753][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.456857][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.464091][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.482852][ T5949] veth0_macvtap: entered promiscuous mode [ 103.504903][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.512219][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.540100][ T5949] veth1_macvtap: entered promiscuous mode [ 103.682258][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.715639][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.742839][ T5943] veth0_vlan: entered promiscuous mode [ 103.749415][ T105] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.760890][ T105] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.781426][ T105] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.790419][ T105] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.823175][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.840562][ T5943] veth1_vlan: entered promiscuous mode [ 103.867504][ T5948] veth0_vlan: entered promiscuous mode [ 103.925117][ T5948] veth1_vlan: entered promiscuous mode [ 104.024074][ T5943] veth0_macvtap: entered promiscuous mode [ 104.057629][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.073591][ T5943] veth1_macvtap: entered promiscuous mode [ 104.080135][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.149743][ T178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.158119][ T178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.160702][ T5950] veth0_vlan: entered promiscuous mode [ 104.178055][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.193268][ T5948] veth0_macvtap: entered promiscuous mode 2026/04/10 13:10:27 executed programs: 10 [ 104.215939][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.250789][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.259763][ T5950] veth1_vlan: entered promiscuous mode [ 104.281371][ T5948] veth1_macvtap: entered promiscuous mode [ 104.301645][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.342150][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.354578][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.391393][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.425732][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.465628][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.493151][ T5950] veth0_macvtap: entered promiscuous mode [ 104.517735][ T5950] veth1_macvtap: entered promiscuous mode [ 104.629896][ T178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.649558][ T178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.707719][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.717230][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.734588][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.746458][ T178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.765340][ T178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.803066][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.853011][ T5144] Bluetooth: hci0: command tx timeout [ 104.964934][ T3483] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.002605][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.013796][ T3483] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.033081][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.045960][ T3483] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.089184][ T5144] Bluetooth: hci2: command tx timeout [ 105.091135][ T5954] Bluetooth: hci1: command tx timeout [ 105.094649][ T5144] Bluetooth: hci3: command tx timeout [ 105.159544][ T3483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.167522][ T3483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.193382][ T5144] Bluetooth: hci4: command tx timeout [ 105.218486][ T178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.494632][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.511134][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.604234][ T5953] veth0_vlan: entered promiscuous mode [ 105.657331][ T178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.661133][ T5953] veth1_vlan: entered promiscuous mode [ 105.681575][ T178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.878955][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.908133][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.976019][ T5953] veth0_macvtap: entered promiscuous mode [ 106.019305][ T5953] veth1_macvtap: entered promiscuous mode [ 106.105178][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.184683][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.254506][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.305032][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.334744][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.353258][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.634099][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.669088][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.743017][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.766276][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.416014][ T6216] ================================================================== [ 108.424016][ T6219] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 108.424233][ T6216] BUG: KASAN: slab-use-after-free in flow_block_cb_setup_simple+0x1cc/0x740 [ 108.436129][ T6219] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 108.444985][ T6216] Read of size 8 at addr ffff88802928b920 by task syz.3.148/6216 [ 108.453500][ T6219] CPU: 1 UID: 0 PID: 6219 Comm: syz.4.150 Not tainted syzkaller #0 PREEMPT(full) [ 108.461206][ T6216] [ 108.461221][ T6216] CPU: 0 UID: 0 PID: 6216 Comm: syz.3.148 Not tainted syzkaller #0 PREEMPT(full) [ 108.461240][ T6216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 108.461250][ T6216] Call Trace: [ 108.461260][ T6216] [ 108.461268][ T6216] dump_stack_lvl+0xe8/0x150 [ 108.461297][ T6216] print_report+0xba/0x230 [ 108.461318][ T6216] ? flow_block_cb_setup_simple+0x1cc/0x740 [ 108.461339][ T6216] kasan_report+0x117/0x150 [ 108.461362][ T6216] ? flow_block_cb_setup_simple+0x1cc/0x740 [ 108.461384][ T6216] ? __pfx_nsim_setup_tc_block_cb+0x10/0x10 [ 108.461410][ T6216] flow_block_cb_setup_simple+0x1cc/0x740 [ 108.461433][ T6216] nft_chain_offload_cmd+0x2d8/0x6e0 [ 108.461456][ T6216] ? __pfx_nft_chain_offload_cmd+0x10/0x10 [ 108.461480][ T6216] ? __lock_acquire+0x6b5/0x2cf0 [ 108.461506][ T6216] ? pick_task_fair+0xcb/0x2a0 [ 108.461534][ T6216] ? nft_pernet+0x45/0x270 [ 108.461555][ T6216] ? nft_pernet+0x45/0x270 [ 108.461574][ T6216] ? nft_pernet+0x45/0x270 [ 108.461595][ T6216] nft_flow_rule_offload_commit+0x8c9/0x1ce0 [ 108.461619][ T6216] ? __pfx_nft_flow_rule_offload_commit+0x10/0x10 [ 108.461640][ T6216] ? inat_get_opcode_attribute+0xc/0x50 [ 108.461663][ T6216] ? insn_get_opcode+0xb12/0x11b0 [ 108.461691][ T6216] ? do_raw_spin_lock+0x12b/0x2f0 [ 108.461711][ T6216] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 108.461731][ T6216] ? __pfx_do_sync_core+0x10/0x10 [ 108.461750][ T6216] ? smp_call_function_many_cond+0xf21/0x12c0 [ 108.461769][ T6216] ? lockdep_hardirqs_on+0x7a/0x110 [ 108.461785][ T6216] ? __pfx_do_sync_core+0x10/0x10 [ 108.461801][ T6216] ? smp_call_function_many_cond+0xde6/0x12c0 [ 108.461821][ T6216] ? __pfx_do_sync_core+0x10/0x10 [ 108.461840][ T6216] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 108.461859][ T6216] ? __netif_receive_skb_core+0x17b6/0x31a0 [ 108.461883][ T6216] ? __lock_acquire+0x6b5/0x2cf0 [ 108.461906][ T6216] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 108.461925][ T6216] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 108.461946][ T6216] ? nft_pernet+0x23/0x240 [ 108.461965][ T6216] ? nft_pernet+0x23/0x240 [ 108.461981][ T6216] ? nft_pernet+0x23/0x240 [ 108.462000][ T6216] nf_tables_commit+0x80d/0xa400 [ 108.462018][ T6216] ? nf_register_net_hook+0xc8/0x190 [ 108.462043][ T6216] ? nft_netdev_register_hooks+0x241/0x250 [ 108.462064][ T6216] ? nf_tables_newchain+0x2375/0x2890 [ 108.462085][ T6216] ? __pfx_nf_tables_commit+0x10/0x10 [ 108.462101][ T6216] ? __pfx_nf_tables_newchain+0x10/0x10 [ 108.462125][ T6216] ? nft_trans_table_add+0x230/0x430 [ 108.462151][ T6216] nfnetlink_rcv+0x1c1b/0x27b0 [ 108.462189][ T6216] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 108.462214][ T6216] ? ref_tracker_free+0x693/0x840 [ 108.462240][ T6216] ? __netlink_deliver_tap+0x807/0x850 [ 108.462263][ T6216] ? netlink_deliver_tap+0x2e/0x1b0 [ 108.462290][ T6216] netlink_unicast+0x80f/0x9b0 [ 108.462312][ T6216] ? __pfx_netlink_unicast+0x10/0x10 [ 108.462332][ T6216] ? netlink_sendmsg+0x650/0xb40 [ 108.462353][ T6216] ? skb_put+0x11b/0x210 [ 108.462377][ T6216] netlink_sendmsg+0x813/0xb40 [ 108.462403][ T6216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.462426][ T6216] ? aa_sock_msg_perm+0xf1/0x1b0 [ 108.462442][ T6216] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 108.462463][ T6216] ____sys_sendmsg+0x972/0x9f0 [ 108.462491][ T6216] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.462518][ T6216] ? import_iovec+0x73/0xa0 [ 108.462540][ T6216] ___sys_sendmsg+0x2a5/0x360 [ 108.462566][ T6216] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.462592][ T6216] ? futex_hash_put+0x4b/0x60 [ 108.462610][ T6216] ? futex_wake+0x4ac/0x580 [ 108.462647][ T6216] __x64_sys_sendmsg+0x1bd/0x2a0 [ 108.462672][ T6216] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.462704][ T6216] do_syscall_64+0x14d/0xf80 [ 108.462720][ T6216] ? trace_irq_disable+0x3b/0x150 [ 108.462736][ T6216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.462753][ T6216] ? clear_bhb_loop+0x40/0x90 [ 108.462772][ T6216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.462790][ T6216] RIP: 0033:0x7f17f699c819 [ 108.462807][ T6216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.462822][ T6216] RSP: 002b:00007ffd3cbe6308 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.462842][ T6216] RAX: ffffffffffffffda RBX: 00007f17f6c15fa0 RCX: 00007f17f699c819 [ 108.462855][ T6216] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 108.462866][ T6216] RBP: 00007f17f6a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 108.462877][ T6216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.462888][ T6216] R13: 00007f17f6c15fac R14: 00007f17f6c15fa0 R15: 00007f17f6c15fa0 [ 108.462906][ T6216] [ 108.462912][ T6216] [ 108.470392][ T6219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 108.472719][ T6216] Allocated by task 6217: [ 108.481920][ T6219] RIP: 0010:flow_block_cb_setup_simple+0x1be/0x740 [ 108.491975][ T6216] kasan_save_track+0x3e/0x80 [ 108.495360][ T6219] Code: f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 59 0d 9f f8 4d 8b 2e 4d 39 f5 0f 84 b6 00 00 00 49 8d 6d 20 48 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 48 89 ef e8 34 0d 9f f8 4c 39 65 00 74 07 e8 d9 [ 108.498310][ T6216] __kasan_kmalloc+0x93/0xb0 [ 108.502992][ T6219] RSP: 0018:ffffc90004f16730 EFLAGS: 00010202 [ 108.507402][ T6216] __kmalloc_cache_noprof+0x31c/0x660 [ 108.513306][ T6219] [ 108.517810][ T6216] flow_block_cb_setup_simple+0x2a1/0x740 [ 108.523702][ T6219] RAX: 0000000000000004 RBX: dffffc0000000000 RCX: ffff88802903db80 [ 108.529674][ T6216] nft_chain_offload_cmd+0x2d8/0x6e0 [ 108.535468][ T6219] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888076f8aa00 [ 108.540737][ T6216] nft_flow_rule_offload_commit+0x8c9/0x1ce0 [ 108.546539][ T6219] RBP: 0000000000000020 R08: ffff88802903db80 R09: 0000000000000002 [ 108.551466][ T6216] nf_tables_commit+0x80d/0xa400 [ 108.556390][ T6219] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff87245280 [ 108.560888][ T6216] nfnetlink_rcv+0x1c1b/0x27b0 [ 108.565292][ T6219] R13: 0000000000000000 R14: ffffffff8f440d60 R15: ffff888033df8e00 [ 108.569780][ T6216] netlink_unicast+0x80f/0x9b0 [ 108.575756][ T6219] FS: 000055558b85f500(0000) GS:ffff88812554e000(0000) knlGS:0000000000000000 [ 108.582159][ T6216] netlink_sendmsg+0x813/0xb40 [ 108.587693][ T6219] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.592736][ T6216] ____sys_sendmsg+0x972/0x9f0 [ 108.597773][ T6219] CR2: 0000200000000380 CR3: 000000007671e000 CR4: 00000000003526f0 [ 108.604272][ T6216] ___sys_sendmsg+0x2a5/0x360 [ 108.609299][ T6219] Call Trace: [ 108.615449][ T6216] __x64_sys_sendmsg+0x1bd/0x2a0 [ 108.620672][ T6219] [ 108.625781][ T6216] do_syscall_64+0x14d/0xf80 [ 108.631997][ T6219] nft_chain_offload_cmd+0x2d8/0x6e0 [ 108.637097][ T6216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.643429][ T6219] ? __pfx_nft_chain_offload_cmd+0x10/0x10 [ 108.649318][ T6216] [ 108.649325][ T6216] Freed by task 6217: [ 108.654357][ T6219] ? __lock_acquire+0x6b5/0x2cf0 [ 108.659980][ T6216] kasan_save_track+0x3e/0x80 [ 108.665950][ T6219] ? __lock_acquire+0x6b5/0x2cf0 [ 108.670368][ T6216] kasan_save_free_info+0x46/0x50 [ 108.674780][ T6219] ? unwind_next_frame+0xa5/0x23c0 [ 108.679224][ T6216] __kasan_slab_free+0x5c/0x80 [ 108.684167][ T6219] ? nft_pernet+0x45/0x270 [ 108.689438][ T6216] kfree+0x1c1/0x630 [ 108.695241][ T6219] ? nft_pernet+0x45/0x270 [ 108.700604][ T6216] nft_flow_offload_unbind+0x407/0x4b0 [ 108.706251][ T6219] ? nft_pernet+0x45/0x270 [ 108.712030][ T6216] nft_chain_offload_cmd+0x30f/0x6e0 [ 108.717314][ T6219] nft_flow_rule_offload_commit+0x8c9/0x1ce0 [ 108.722331][ T6216] nft_flow_rule_offload_commit+0x485/0x1ce0 [ 108.727530][ T6219] ? __kernel_text_address+0xd/0x30 [ 108.732541][ T6216] nf_tables_commit+0x80d/0xa400 [ 108.737993][ T6219] ? __pfx_nft_flow_rule_offload_commit+0x10/0x10 [ 108.743261][ T6216] nfnetlink_rcv+0x1c1b/0x27b0 [ 108.748017][ T6219] ? stack_trace_save+0xa9/0x100 [ 108.753383][ T6216] netlink_unicast+0x80f/0x9b0 [ 108.758324][ T6219] ? __pfx_stack_trace_save+0x10/0x10 [ 108.762647][ T6216] netlink_sendmsg+0x813/0xb40 [ 108.767438][ T6219] ? stack_depot_save_flags+0x33/0x810 [ 108.772718][ T6216] ____sys_sendmsg+0x972/0x9f0 [ 108.777659][ T6219] ? __lock_acquire+0x6b5/0x2cf0 [ 108.782934][ T6216] ___sys_sendmsg+0x2a5/0x360 [ 108.787692][ T6219] ? kasan_save_track+0x4f/0x80 [ 108.792971][ T6216] __x64_sys_sendmsg+0x1bd/0x2a0 [ 108.797484][ T6219] ? kasan_save_track+0x3e/0x80 [ 108.802181][ T6216] do_syscall_64+0x14d/0xf80 [ 108.807399][ T6219] ? __kasan_kmalloc+0x93/0xb0 [ 108.812418][ T6216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.816914][ T6219] ? __kvmalloc_node_noprof+0x528/0x8a0 [ 108.821849][ T6216] [ 108.821857][ T6216] The buggy address belongs to the object at ffff88802928b900 [ 108.821857][ T6216] which belongs to the cache kmalloc-192 of size 192 [ 108.827471][ T6219] ? nf_hook_entries_grow+0x288/0x720 [ 108.832050][ T6216] The buggy address is located 32 bytes inside of [ 108.832050][ T6216] freed 192-byte region [ffff88802928b900, ffff88802928b9c0) [ 108.837067][ T6219] ? __nf_register_net_hook+0x2c9/0x930 [ 108.843123][ T6216] [ 108.843131][ T6216] The buggy address belongs to the physical page: [ 108.847798][ T6219] ? nf_register_net_hook+0xb2/0x190 [ 108.853707][ T6216] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2928b [ 108.858130][ T6219] ? nft_netdev_register_hooks+0x88/0x250 [ 108.877757][ T6216] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 108.886189][ T6219] ? nf_tables_newchain+0x235b/0x2890 [ 108.894166][ T6216] page_type: f5(slab) [ 108.902148][ T6219] ? nfnetlink_rcv+0x1240/0x27b0 [ 108.910158][ T6216] raw: 00fff00000000000 ffff88813fea73c0 dead000000000100 dead000000000122 [ 108.918207][ T6219] ? netlink_unicast+0x80f/0x9b0 [ 108.926212][ T6216] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 108.929229][ T6219] ? netlink_sendmsg+0x813/0xb40 [ 108.931556][ T6216] page dumped because: kasan: bad access detected [ 108.941612][ T6219] ? ____sys_sendmsg+0x972/0x9f0 [ 108.946027][ T6216] page_owner tracks the page as allocated [ 108.952509][ T6219] ? ___sys_sendmsg+0x2a5/0x360 [ 108.957176][ T6216] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12146188854, free_ts 9319611435 [ 108.976952][ T6219] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 108.981534][ T6216] post_alloc_hook+0x231/0x280 [ 108.987592][ T6219] ? do_syscall_64+0x14d/0xf80 [ 108.993047][ T6216] get_page_from_freelist+0x24dc/0x2580 [ 108.995371][ T6219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.001169][ T6216] __alloc_frozen_pages_noprof+0x18d/0x380 [ 109.009235][ T6219] ? __lock_acquire+0x6b5/0x2cf0 [ 109.014499][ T6216] allocate_slab+0x77/0x660 [ 109.022481][ T6219] ? __nf_register_net_hook+0x502/0x930 [ 109.028452][ T6216] refill_objects+0x331/0x3c0 [ 109.036434][ T6219] ? static_key_fast_inc_not_disabled+0x154/0x210 [ 109.041366][ T6216] __pcs_replace_empty_main+0x2e6/0x730 [ 109.049347][ T6219] ? nft_pernet+0x23/0x240 [ 109.054194][ T6216] __kmalloc_noprof+0x474/0x760 [ 109.062179][ T6219] ? nft_pernet+0x23/0x240 [ 109.067014][ T6216] usb_alloc_urb+0x46/0x150 [ 109.075941][ T6219] ? nft_pernet+0x23/0x240 [ 109.080778][ T6216] usb_control_msg+0x118/0x3e0 [ 109.087361][ T6219] nf_tables_commit+0x80d/0xa400 [ 109.092111][ T6216] usb_get_descriptor+0xb1/0x3e0 [ 109.100084][ T6219] ? nf_register_net_hook+0xc8/0x190 [ 109.104749][ T6216] usb_get_configuration+0x3b9/0x54f0 [ 109.108050][ T6219] ? nft_netdev_register_hooks+0x241/0x250 [ 109.112980][ T6216] usb_new_device+0x145/0x16f0 [ 109.115935][ T6219] ? nf_tables_newchain+0x2375/0x2890 [ 109.120520][ T6216] register_root_hub+0x270/0x5f0 [ 109.125824][ T6219] ? __pfx_nf_tables_commit+0x10/0x10 [ 109.131709][ T6216] usb_add_hcd+0xba1/0x10b0 [ 109.137526][ T6219] ? __pfx_nf_tables_newchain+0x10/0x10 [ 109.139926][ T6216] dummy_hcd_probe+0x134/0x270 [ 109.144521][ T6219] ? nft_trans_table_add+0x230/0x430 [ 109.149547][ T6216] platform_probe+0xf9/0x190 [ 109.154232][ T6219] nfnetlink_rcv+0x1c1b/0x27b0 [ 109.159280][ T6216] page last free pid 10 tgid 10 stack trace: [ 109.164396][ T6219] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 109.169486][ T6216] __free_frozen_pages+0xc2b/0xdb0 [ 109.174252][ T6219] ? ref_tracker_free+0x693/0x840 [ 109.178741][ T6216] vfree+0x25a/0x400 [ 109.182640][ T6219] ? __netlink_deliver_tap+0x807/0x850 [ 109.187049][ T6216] delayed_vfree_work+0x55/0x80 [ 109.192522][ T6219] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.196929][ T6216] process_scheduled_works+0xb6e/0x18c0 [ 109.202219][ T6219] netlink_unicast+0x80f/0x9b0 [ 109.208196][ T6216] worker_thread+0xa53/0xfc0 [ 109.214189][ T6219] ? __pfx_netlink_unicast+0x10/0x10 [ 109.214211][ T6219] ? netlink_sendmsg+0x650/0xb40 [ 109.219414][ T6216] kthread+0x388/0x470 [ 109.224436][ T6219] ? skb_put+0x11b/0x210 [ 109.230844][ T6216] ret_from_fork+0x51e/0xb90 [ 109.235607][ T6219] netlink_sendmsg+0x813/0xb40 [ 109.240616][ T6216] ret_from_fork_asm+0x1a/0x30 [ 109.245376][ T6219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.250909][ T6216] [ 109.255769][ T6219] ? aa_sock_msg_perm+0xf1/0x1b0 [ 109.261219][ T6216] Memory state around the buggy address: [ 109.265991][ T6219] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 109.270969][ T6216] ffff88802928b800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 109.275664][ T6219] ____sys_sendmsg+0x972/0x9f0 [ 109.280719][ T6216] ffff88802928b880: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 109.285649][ T6219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.290483][ T6216] >ffff88802928b900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.295064][ T6219] ? import_iovec+0x73/0xa0 [ 109.299814][ T6216] ^ [ 109.305706][ T6219] ___sys_sendmsg+0x2a5/0x360 [ 109.311436][ T6216] ffff88802928b980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 109.313788][ T6219] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.327934][ T6216] ffff88802928ba00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 109.333326][ T6219] ? futex_hash_put+0x4b/0x60 [ 109.347029][ T6216] ================================================================== [ 109.352774][ T6219] ? futex_wake+0x4ac/0x580 [ 109.839586][ T6219] __x64_sys_sendmsg+0x1bd/0x2a0 [ 109.844545][ T6219] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.850012][ T6219] do_syscall_64+0x14d/0xf80 [ 109.854596][ T6219] ? trace_irq_disable+0x3b/0x150 [ 109.859710][ T6219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.865766][ T6219] ? clear_bhb_loop+0x40/0x90 [ 109.870538][ T6219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.876536][ T6219] RIP: 0033:0x7fab7399c819 [ 109.881046][ T6219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.901170][ T6219] RSP: 002b:00007fff2bc2db78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.909594][ T6219] RAX: ffffffffffffffda RBX: 00007fab73c15fa0 RCX: 00007fab7399c819 [ 109.917645][ T6219] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 109.925620][ T6219] RBP: 00007fab73a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 109.933727][ T6219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.941723][ T6219] R13: 00007fab73c15fac R14: 00007fab73c15fa0 R15: 00007fab73c15fa0 [ 109.949789][ T6219] [ 109.952802][ T6219] Modules linked in: [ 109.956741][ T6218] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#2] SMP KASAN PTI [ 109.962966][ T6219] ---[ end trace 0000000000000000 ]--- [ 109.968746][ T6218] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 109.968771][ T6218] CPU: 0 UID: 0 PID: 6218 Comm: syz.2.152 Tainted: G D syzkaller #0 PREEMPT(full) [ 109.968800][ T6218] Tainted: [D]=DIE [ 109.968807][ T6218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 109.968819][ T6218] RIP: 0010:flow_block_cb_setup_simple+0x1be/0x740 [ 109.968851][ T6218] Code: f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 59 0d 9f f8 4d 8b 2e 4d 39 f5 0f 84 b6 00 00 00 49 8d 6d 20 48 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 48 89 ef e8 34 0d 9f f8 4c 39 65 00 74 07 e8 d9 [ 109.968868][ T6218] RSP: 0018:ffffc90004d76730 EFLAGS: 00010202 [ 109.968887][ T6218] RAX: 0000000000000004 RBX: dffffc0000000000 RCX: ffff888030289e80 [ 109.968902][ T6218] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888055eae000 [ 109.968915][ T6218] RBP: 0000000000000020 R08: ffff888030289e80 R09: 0000000000000002 [ 109.968928][ T6218] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff87245280 [ 109.968941][ T6218] R13: 0000000000000000 R14: ffffffff8f440d60 R15: ffff88807731ce00 [ 109.968955][ T6218] FS: 000055557707c500(0000) GS:ffff88812544e000(0000) knlGS:0000000000000000 [ 109.968973][ T6218] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.968987][ T6218] CR2: 0000200000000380 CR3: 0000000034d96000 CR4: 00000000003526f0 [ 109.969008][ T6218] Call Trace: [ 109.969016][ T6218] [ 109.969026][ T6218] nft_chain_offload_cmd+0x2d8/0x6e0 [ 109.969055][ T6218] ? __pfx_nft_chain_offload_cmd+0x10/0x10 [ 109.969086][ T6218] ? arch_stack_walk+0xe3/0x150 [ 109.969116][ T6218] ? arch_stack_walk+0xe3/0x150 [ 109.969153][ T6218] ? unwind_next_frame+0xa5/0x23c0 [ 109.969181][ T6218] ? rcu_is_watching+0x15/0xb0 [ 109.969214][ T6218] ? nft_pernet+0x45/0x270 [ 109.969234][ T6218] ? nft_pernet+0x45/0x270 [ 109.969255][ T6218] ? nft_pernet+0x45/0x270 [ 109.969275][ T6218] nft_flow_rule_offload_commit+0x8c9/0x1ce0 [ 109.969297][ T6218] ? __kernel_text_address+0xd/0x30 [ 109.969322][ T6218] ? __pfx_nft_flow_rule_offload_commit+0x10/0x10 [ 109.969348][ T6218] ? stack_trace_save+0xa9/0x100 [ 109.969369][ T6218] ? __pfx_stack_trace_save+0x10/0x10 [ 109.969388][ T6218] ? stack_depot_save_flags+0x33/0x810 [ 109.969405][ T6218] ? kasan_save_track+0x4f/0x80 [ 109.969425][ T6218] ? kasan_save_track+0x3e/0x80 [ 109.969445][ T6218] ? __kasan_kmalloc+0x93/0xb0 [ 109.969466][ T6218] ? __kvmalloc_node_noprof+0x528/0x8a0 [ 109.969489][ T6218] ? nf_hook_entries_grow+0x288/0x720 [ 109.969514][ T6218] ? __nf_register_net_hook+0x2c9/0x930 [ 109.969538][ T6218] ? nf_register_net_hook+0xb2/0x190 [ 109.969564][ T6218] ? nft_netdev_register_hooks+0x88/0x250 [ 109.969584][ T6218] ? nf_tables_newchain+0x235b/0x2890 [ 109.969603][ T6218] ? nfnetlink_rcv+0x1240/0x27b0 [ 109.969623][ T6218] ? netlink_unicast+0x80f/0x9b0 [ 109.969644][ T6218] ? netlink_sendmsg+0x813/0xb40 [ 109.969667][ T6218] ? ____sys_sendmsg+0x972/0x9f0 [ 109.969693][ T6218] ? ___sys_sendmsg+0x2a5/0x360 [ 109.969718][ T6218] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 109.969744][ T6218] ? do_syscall_64+0x14d/0xf80 [ 109.969763][ T6218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.969795][ T6218] ? rcu_is_watching+0x15/0xb0 [ 109.969821][ T6218] ? lock_release+0x4b/0x3d0 [ 109.969844][ T6218] ? trace_kmalloc+0x2a/0x110 [ 109.969866][ T6218] ? static_key_fast_inc_not_disabled+0x154/0x210 [ 109.969898][ T6218] ? nft_pernet+0x23/0x240 [ 109.969918][ T6218] ? nft_pernet+0x23/0x240 [ 109.969937][ T6218] ? rcu_is_watching+0x15/0xb0 [ 109.969963][ T6218] ? nft_pernet+0x23/0x240 [ 109.969982][ T6218] ? lock_release+0x4b/0x3d0 [ 109.970005][ T6218] ? preempt_count_add+0x91/0x190 [ 109.970032][ T6218] ? nft_pernet+0x23/0x240 [ 109.970054][ T6218] nf_tables_commit+0x80d/0xa400 [ 109.970073][ T6218] ? nf_register_net_hook+0xc8/0x190 [ 109.970102][ T6218] ? nft_netdev_register_hooks+0x241/0x250 [ 109.970134][ T6218] ? nf_tables_newchain+0x2375/0x2890 [ 109.970159][ T6218] ? __pfx_nf_tables_commit+0x10/0x10 [ 109.970177][ T6218] ? __pfx_nf_tables_newchain+0x10/0x10 [ 109.970206][ T6218] ? nft_trans_table_add+0x230/0x430 [ 109.970231][ T6218] ? lock_release+0x4b/0x3d0 [ 109.970260][ T6218] nfnetlink_rcv+0x1c1b/0x27b0 [ 109.970295][ T6218] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 109.970324][ T6218] ? ref_tracker_free+0x693/0x840 [ 109.970355][ T6218] ? __netlink_deliver_tap+0x807/0x850 [ 109.970380][ T6218] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.970406][ T6218] ? lock_release+0x4b/0x3d0 [ 109.970434][ T6218] netlink_unicast+0x80f/0x9b0 [ 109.970459][ T6218] ? __pfx_netlink_unicast+0x10/0x10 [ 109.970482][ T6218] ? netlink_sendmsg+0x650/0xb40 [ 109.970507][ T6218] ? skb_put+0x11b/0x210 [ 109.970534][ T6218] netlink_sendmsg+0x813/0xb40 [ 109.970563][ T6218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.970590][ T6218] ? aa_sock_msg_perm+0xf1/0x1b0 [ 109.970610][ T6218] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 109.970634][ T6218] ____sys_sendmsg+0x972/0x9f0 [ 109.970660][ T6218] ? rcu_is_watching+0x15/0xb0 [ 109.970690][ T6218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.970720][ T6218] ? import_iovec+0x73/0xa0 [ 109.970745][ T6218] ___sys_sendmsg+0x2a5/0x360 [ 109.970771][ T6218] ? futex_hash+0x40/0x2d0 [ 109.970791][ T6218] ? lock_release+0x4b/0x3d0 [ 109.970813][ T6218] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.970840][ T6218] ? futex_hash_put+0x4b/0x60 [ 109.970860][ T6218] ? futex_wake+0x4ac/0x580 [ 109.970902][ T6218] __x64_sys_sendmsg+0x1bd/0x2a0 [ 109.970932][ T6218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.970966][ T6218] ? rcu_is_watching+0x15/0xb0 [ 109.970995][ T6218] do_syscall_64+0x14d/0xf80 [ 109.971013][ T6218] ? trace_irq_disable+0x3b/0x150 [ 109.971030][ T6218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.971050][ T6218] ? clear_bhb_loop+0x40/0x90 [ 109.971071][ T6218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.971091][ T6218] RIP: 0033:0x7f710139c819 [ 109.971109][ T6218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.971134][ T6218] RSP: 002b:00007ffef917d1c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.971157][ T6218] RAX: ffffffffffffffda RBX: 00007f7101615fa0 RCX: 00007f710139c819 [ 109.971172][ T6218] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 109.971185][ T6218] RBP: 00007f7101432c91 R08: 0000000000000000 R09: 0000000000000000 [ 109.971198][ T6218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.971210][ T6218] R13: 00007f7101615fac R14: 00007f7101615fa0 R15: 00007f7101615fa0 [ 109.971230][ T6218] [ 109.971238][ T6218] Modules linked in: [ 109.973813][ T6218] ---[ end trace 0000000000000000 ]--- [ 109.977443][ T6216] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.986366][ T6216] Kernel Offset: disabled