Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. 2026/08/17 03:13:45 parsed 1 programs 2026/08/17 03:13:45 serving rpc on tcp://37223 [ 89.348757][ T5621] cgroup: Unknown subsys name 'net' [ 89.463038][ T5621] cgroup: Unknown subsys name 'cpuset' [ 89.472319][ T5621] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.172157][ T5621] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.121769][ T1213] cfg80211: failed to load regulatory.db [ 94.705926][ T5637] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.860079][ T5679] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.870580][ T5679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.881997][ T5679] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.890514][ T5679] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.901630][ T5679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.923690][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.942922][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.511402][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.525797][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.644179][ T5648] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.662488][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.670713][ T5648] bridge_slave_0: entered allmulticast mode [ 97.688559][ T5648] bridge_slave_0: entered promiscuous mode [ 97.835811][ T5648] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.846359][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.854715][ T5648] bridge_slave_1: entered allmulticast mode [ 97.864602][ T5648] bridge_slave_1: entered promiscuous mode [ 97.972241][ T5648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.009536][ T5648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.240706][ T5648] team0: Port device team_slave_0 added [ 98.261934][ T5648] team0: Port device team_slave_1 added [ 98.316644][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.325278][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.351985][ T5648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.385820][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.396613][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.424451][ T5648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.562170][ T5648] hsr_slave_0: entered promiscuous mode [ 98.589949][ T5648] hsr_slave_1: entered promiscuous mode [ 98.957877][ T5648] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.978235][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.991918][ T5648] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.003327][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.017238][ T5648] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.031226][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.040164][ T5648] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.051520][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.152949][ T5648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.177560][ T5648] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.193622][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.201258][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.216030][ T802] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.223252][ T802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.591854][ T5648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.647512][ T5648] veth0_vlan: entered promiscuous mode [ 99.661984][ T5648] veth1_vlan: entered promiscuous mode [ 99.696914][ T5648] veth0_macvtap: entered promiscuous mode [ 99.709605][ T5648] veth1_macvtap: entered promiscuous mode [ 99.733596][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.752171][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.799687][ T802] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.816640][ T802] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.838295][ T802] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/08/17 03:13:59 executed programs: 0 [ 99.847181][ T802] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.004997][ T5679] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.018585][ T5679] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.026908][ T5679] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.038570][ T5679] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.047334][ T5679] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.074870][ T5679] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.085072][ T5679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.093302][ T5679] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.103504][ T5679] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.114756][ T5679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.350338][ T4926] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.364897][ T4926] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.375382][ T4926] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.386054][ T4926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.397248][ T4926] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.437118][ T5679] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.450891][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.463862][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.483833][ T5761] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.496513][ T5761] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.529436][ T5762] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.541771][ T5762] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.567216][ T5762] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.583725][ T5762] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.594346][ T5762] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.630962][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.119789][ T5761] Bluetooth: hci1: command tx timeout [ 102.198998][ T5761] Bluetooth: hci0: command tx timeout [ 102.518378][ T5761] Bluetooth: hci2: command tx timeout [ 102.542953][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.550294][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.557695][ T5744] bridge_slave_0: entered allmulticast mode [ 102.566616][ T5744] bridge_slave_0: entered promiscuous mode [ 102.599404][ T5761] Bluetooth: hci3: command tx timeout [ 102.625500][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.633075][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.641074][ T5744] bridge_slave_1: entered allmulticast mode [ 102.650191][ T5744] bridge_slave_1: entered promiscuous mode [ 102.674299][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.681532][ T5761] Bluetooth: hci4: command tx timeout [ 102.681786][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.694789][ T5743] bridge_slave_0: entered allmulticast mode [ 102.702301][ T5743] bridge_slave_0: entered promiscuous mode [ 102.752163][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.759566][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.766854][ T5743] bridge_slave_1: entered allmulticast mode [ 102.774531][ T5743] bridge_slave_1: entered promiscuous mode [ 102.793298][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.878865][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.912583][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.954070][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.996605][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.006197][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.013519][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.021091][ T5764] bridge_slave_0: entered allmulticast mode [ 103.028564][ T5764] bridge_slave_0: entered promiscuous mode [ 103.086035][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.095484][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.103064][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.110635][ T5764] bridge_slave_1: entered allmulticast mode [ 103.118067][ T5764] bridge_slave_1: entered promiscuous mode [ 103.134751][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.153234][ T5744] team0: Port device team_slave_0 added [ 103.159353][ T5755] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.166594][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.174184][ T5755] bridge_slave_0: entered allmulticast mode [ 103.184435][ T5755] bridge_slave_0: entered promiscuous mode [ 103.192405][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.199966][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.207489][ T5759] bridge_slave_0: entered allmulticast mode [ 103.215175][ T5759] bridge_slave_0: entered promiscuous mode [ 103.245389][ T5744] team0: Port device team_slave_1 added [ 103.274763][ T5755] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.282270][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.289827][ T5755] bridge_slave_1: entered allmulticast mode [ 103.297160][ T5755] bridge_slave_1: entered promiscuous mode [ 103.304293][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.312470][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.320122][ T5759] bridge_slave_1: entered allmulticast mode [ 103.327479][ T5759] bridge_slave_1: entered promiscuous mode [ 103.357010][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.365302][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.391559][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.404983][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.412382][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.438975][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.473807][ T5743] team0: Port device team_slave_0 added [ 103.482875][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.496580][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.539667][ T5743] team0: Port device team_slave_1 added [ 103.569288][ T5755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.582825][ T5759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.651297][ T5755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.663522][ T5759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.710710][ T5764] team0: Port device team_slave_0 added [ 103.725806][ T5764] team0: Port device team_slave_1 added [ 103.771474][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.778511][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.804862][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.819969][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.827709][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.854204][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.883255][ T5744] hsr_slave_0: entered promiscuous mode [ 103.890527][ T5744] hsr_slave_1: entered promiscuous mode [ 103.896863][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 103.903172][ T5744] Cannot create hsr debugfs directory [ 103.936927][ T5759] team0: Port device team_slave_0 added [ 103.979838][ T5755] team0: Port device team_slave_0 added [ 103.987871][ T5759] team0: Port device team_slave_1 added [ 103.996722][ T13] bridge_slave_1: left allmulticast mode [ 104.003938][ T13] bridge_slave_1: left promiscuous mode [ 104.011492][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.022778][ T13] bridge_slave_0: left allmulticast mode [ 104.029518][ T13] bridge_slave_0: left promiscuous mode [ 104.035839][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.198836][ T5761] Bluetooth: hci1: command tx timeout [ 104.256517][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.271502][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.280286][ T5761] Bluetooth: hci0: command tx timeout [ 104.287493][ T13] bond0 (unregistering): Released all slaves [ 104.345747][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.353135][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.379440][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.394592][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.401979][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.428531][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.442587][ T5755] team0: Port device team_slave_1 added [ 104.594061][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.602099][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.615411][ T5761] Bluetooth: hci2: command tx timeout [ 104.630667][ T5759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.651487][ T13] hsr_slave_0: left promiscuous mode [ 104.657640][ T13] hsr_slave_1: left promiscuous mode [ 104.663867][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.671363][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.680101][ T5761] Bluetooth: hci3: command tx timeout [ 104.687369][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.695584][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.711110][ T13] veth1_macvtap: left promiscuous mode [ 104.716720][ T13] veth0_macvtap: left promiscuous mode [ 104.723139][ T13] veth1_vlan: left promiscuous mode [ 104.728614][ T13] veth0_vlan: left promiscuous mode [ 104.768667][ T5761] Bluetooth: hci4: command tx timeout [ 104.954346][ T13] team0 (unregistering): Port device team_slave_1 removed [ 104.973916][ T13] team0 (unregistering): Port device team_slave_0 removed [ 105.109443][ T5743] hsr_slave_0: entered promiscuous mode [ 105.115928][ T5743] hsr_slave_1: entered promiscuous mode [ 105.144264][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.151618][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.180338][ T5755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.193045][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.200413][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.229043][ T5759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.263463][ T5755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.270998][ T5755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.297476][ T5755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.432451][ T5764] hsr_slave_0: entered promiscuous mode [ 105.439680][ T5764] hsr_slave_1: entered promiscuous mode [ 105.445948][ T5764] debugfs: 'hsr0' already exists in 'hsr' [ 105.451802][ T5764] Cannot create hsr debugfs directory [ 105.524469][ T5759] hsr_slave_0: entered promiscuous mode [ 105.531453][ T5759] hsr_slave_1: entered promiscuous mode [ 105.537989][ T5759] debugfs: 'hsr0' already exists in 'hsr' [ 105.543876][ T5759] Cannot create hsr debugfs directory [ 105.671592][ T5755] hsr_slave_0: entered promiscuous mode [ 105.678924][ T5755] hsr_slave_1: entered promiscuous mode [ 105.685449][ T5755] debugfs: 'hsr0' already exists in 'hsr' [ 105.691765][ T5755] Cannot create hsr debugfs directory [ 106.152169][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 106.278447][ T5761] Bluetooth: hci1: command tx timeout [ 106.328800][ T5744] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.341314][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.349915][ T5744] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.358299][ T5761] Bluetooth: hci0: command tx timeout [ 106.371629][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.381401][ T5744] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.394359][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.403011][ T5744] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.413870][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.575730][ T5764] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.594025][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.613385][ T5764] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.632028][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.650501][ T5764] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.664698][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.681594][ T5761] Bluetooth: hci2: command tx timeout [ 106.699628][ T5764] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.712167][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.762746][ T5761] Bluetooth: hci3: command tx timeout [ 106.838327][ T5761] Bluetooth: hci4: command tx timeout [ 106.849227][ T5755] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.864792][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.877889][ T5755] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.895832][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.944336][ T5755] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.957429][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.006436][ T5755] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.026668][ T5755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.054318][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.140113][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.188064][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.196029][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.232328][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.239567][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.361010][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.477713][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.557026][ T5743] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.583909][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.609318][ T5743] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.630494][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.644988][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.652242][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.693865][ T5755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.717566][ T5743] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.735233][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.747836][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.755142][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.773834][ T5743] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.789444][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.013487][ T5755] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.046070][ T5759] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.071018][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.112184][ T5759] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.136945][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.157053][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.164333][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.174334][ T5759] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.188054][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.211775][ T5759] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.224776][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.259132][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.266362][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.362150][ T5761] Bluetooth: hci1: command tx timeout [ 108.439169][ T5761] Bluetooth: hci0: command tx timeout [ 108.560667][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.758774][ T5761] Bluetooth: hci2: command tx timeout [ 108.814300][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.843106][ T5761] Bluetooth: hci3: command tx timeout [ 108.920857][ T5761] Bluetooth: hci4: command tx timeout [ 108.935954][ T5744] veth0_vlan: entered promiscuous mode [ 108.983411][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.045253][ T5744] veth1_vlan: entered promiscuous mode [ 109.098992][ T1528] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.106206][ T1528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.137951][ T1528] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.145283][ T1528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.162898][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.265123][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.323048][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.330295][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.358494][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.365705][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.380926][ T5744] veth0_macvtap: entered promiscuous mode [ 109.438458][ T5744] veth1_macvtap: entered promiscuous mode [ 109.525392][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.571400][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.600727][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.780147][ T5755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.800665][ T141] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.966976][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.980069][ T1528] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.994128][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.079311][ T802] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.156367][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.164961][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.179470][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.196254][ T5755] veth0_vlan: entered promiscuous mode 2026/08/17 03:14:10 executed programs: 10 [ 110.273095][ T5755] veth1_vlan: entered promiscuous mode [ 110.440783][ T5764] veth0_vlan: entered promiscuous mode [ 110.494585][ T5755] veth0_macvtap: entered promiscuous mode [ 110.546313][ T5764] veth1_vlan: entered promiscuous mode [ 110.568950][ T5755] veth1_macvtap: entered promiscuous mode [ 110.672926][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.743694][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.778285][ T5755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.873284][ T5764] veth0_macvtap: entered promiscuous mode [ 110.916380][ T5764] veth1_macvtap: entered promiscuous mode [ 110.970462][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.084123][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.100254][ T47] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.160542][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.182512][ T47] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.194919][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.207838][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.241406][ T5759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.254333][ T5743] veth0_vlan: entered promiscuous mode [ 111.336709][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.348686][ T1528] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.361118][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.373019][ T5743] veth1_vlan: entered promiscuous mode [ 111.508217][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.568546][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.596925][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.723402][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.733581][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.762898][ T5743] veth0_macvtap: entered promiscuous mode [ 111.847104][ T5743] veth1_macvtap: entered promiscuous mode [ 111.879746][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.893995][ T5759] veth0_vlan: entered promiscuous mode [ 111.951189][ T1528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.966045][ T5759] veth1_vlan: entered promiscuous mode [ 111.999515][ T1528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.023797][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.099531][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.256901][ T5759] veth0_macvtap: entered promiscuous mode [ 112.326530][ T5759] veth1_macvtap: entered promiscuous mode [ 112.361512][ T1528] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.418716][ T141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.468814][ T802] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.530284][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.622468][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.683683][ T141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.720816][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.761516][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.898900][ T141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.971687][ T141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.972712][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.005080][ T141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.040001][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.089300][ T1528] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.337232][ T1528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.374500][ T1528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.507446][ T1528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.542024][ T1528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/08/17 03:14:15 executed programs: 154 [ 117.536689][ T6487] ================================================================== [ 117.544851][ T6487] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0xb5/0x190 [ 117.554033][ T6487] Read of size 8 at addr ffff888035c64d08 by task syz.4.266/6487 [ 117.555202][ T6489] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 117.561804][ T6487] [ 117.561872][ T6487] CPU: 0 UID: 0 PID: 6487 Comm: syz.4.266 Not tainted syzkaller #0 PREEMPT(full) [ 117.561955][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.561995][ T6487] Call Trace: [ 117.562024][ T6487] [ 117.562053][ T6487] dump_stack_lvl+0xe8/0x150 [ 117.562140][ T6487] print_address_description+0x55/0x1e0 [ 117.562215][ T6487] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 117.562279][ T6487] print_report+0x58/0x70 [ 117.562343][ T6487] kasan_report+0x117/0x150 [ 117.562424][ T6487] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 117.562496][ T6487] __list_del_entry_valid_or_report+0xb5/0x190 [ 117.562560][ T6487] flow_block_cb_setup_simple+0x631/0x750 [ 117.562652][ T6487] nft_chain_offload_cmd+0x2b1/0x650 [ 117.562717][ T6487] ? __pfx_nft_chain_offload_cmd+0x10/0x10 [ 117.562773][ T6487] ? rcu_is_watching+0x15/0xb0 [ 117.562864][ T6487] ? __lock_acquire+0x683/0x2cf0 [ 117.562936][ T6487] ? __lock_acquire+0x683/0x2cf0 [ 117.563031][ T6487] ? nft_pernet+0x45/0x270 [ 117.563094][ T6487] ? nft_pernet+0x45/0x270 [ 117.563139][ T6487] ? nft_pernet+0x45/0x270 [ 117.563202][ T6487] nft_flow_rule_offload_commit+0x485/0x1d00 [ 117.563270][ T6487] ? __pfx_nft_flow_rule_offload_commit+0x10/0x10 [ 117.563357][ T6487] ? unwind_next_frame+0x8f/0x2550 [ 117.563441][ T6487] ? unwind_next_frame+0x8f/0x2550 [ 117.563506][ T6487] ? is_bpf_text_address+0x26/0x2b0 [ 117.563595][ T6487] ? is_bpf_text_address+0x26/0x2b0 [ 117.563681][ T6487] ? is_bpf_text_address+0x292/0x2b0 [ 117.563756][ T6487] ? is_bpf_text_address+0x26/0x2b0 [ 117.563833][ T6487] ? kernel_text_address+0xa5/0xe0 [ 117.563918][ T6487] ? __kernel_text_address+0xd/0x30 [ 117.563996][ T6487] ? unwind_get_return_address+0x4d/0x90 [ 117.564049][ T6487] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 117.564116][ T6487] ? arch_stack_walk+0xfb/0x150 [ 117.564179][ T6487] ? __lock_acquire+0x683/0x2cf0 [ 117.564254][ T6487] ? stack_trace_save+0xa9/0x100 [ 117.564312][ T6487] ? __pfx_stack_trace_save+0x10/0x10 [ 117.564387][ T6487] ? stack_depot_save_flags+0x33/0x800 [ 117.564457][ T6487] ? kasan_save_track+0x3e/0x80 [ 117.564512][ T6487] ? __kasan_kmalloc+0x93/0xb0 [ 117.564566][ T6487] ? __kmalloc_cache_noprof+0x261/0x660 [ 117.564630][ T6487] ? kasan_save_track+0x4f/0x80 [ 117.564691][ T6487] ? kasan_save_track+0x3e/0x80 [ 117.564774][ T6487] ? nft_pernet+0x23/0x240 [ 117.564860][ T6487] ? nft_pernet+0x23/0x240 [ 117.564948][ T6487] ? nft_pernet+0x23/0x240 [ 117.565030][ T6487] ? nft_pernet+0x23/0x240 [ 117.565106][ T6487] nf_tables_commit+0x868/0xad90 [ 117.565194][ T6487] ? nft_pernet+0x23/0x240 [ 117.565279][ T6487] ? nft_pernet+0x23/0x240 [ 117.565364][ T6487] ? nft_pernet+0x23/0x240 [ 117.565450][ T6487] ? nft_pernet+0x23/0x240 [ 117.565526][ T6487] ? nft_pernet+0x23/0x240 [ 117.565603][ T6487] ? __pfx_nf_tables_commit+0x10/0x10 [ 117.565679][ T6487] ? nft_trans_commit_list_add_tail+0x178/0x510 [ 117.565767][ T6487] ? nft_flush_table+0x1b99/0x1d40 [ 117.565853][ T6487] ? nft_pernet+0x23/0x240 [ 117.565917][ T6487] ? nft_pernet+0x23/0x240 [ 117.565993][ T6487] ? nft_pernet+0x23/0x240 [ 117.566084][ T6487] ? nf_tables_deltable+0x678/0xe80 [ 117.566181][ T6487] ? nfnetlink_rcv+0x8d1/0x28c0 [ 117.566278][ T6487] ? __pfx_nf_tables_deltable+0x10/0x10 [ 117.566377][ T6487] nfnetlink_rcv+0x1caf/0x28c0 [ 117.566502][ T6487] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 117.566602][ T6487] ? ref_tracker_free+0x689/0x830 [ 117.566689][ T6487] ? skb_clone+0x246/0x3a0 [ 117.566746][ T6487] ? __netlink_deliver_tap+0x811/0x860 [ 117.566813][ T6487] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.566861][ T6487] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.566918][ T6487] netlink_unicast+0x7bb/0x940 [ 117.567008][ T6487] netlink_sendmsg+0x813/0xb40 [ 117.567076][ T6487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.567141][ T6487] ? aa_sock_msg_perm+0xf1/0x1b0 [ 117.567223][ T6487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.567279][ T6487] sock_sendmsg_nosec+0x13a/0x180 [ 117.567355][ T6487] ____sys_sendmsg+0x54e/0x850 [ 117.567448][ T6487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.567577][ T6487] ? import_iovec+0x73/0xa0 [ 117.567656][ T6487] ___sys_sendmsg+0x2a5/0x360 [ 117.567736][ T6487] ? __lock_acquire+0x683/0x2cf0 [ 117.567816][ T6487] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.567906][ T6487] ? futex_wake+0x51b/0x5f0 [ 117.567998][ T6487] ? __fget_files+0x2a/0x420 [ 117.568055][ T6487] ? __fget_files+0x3a2/0x420 [ 117.568132][ T6487] __x64_sys_sendmsg+0x1b1/0x290 [ 117.568213][ T6487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.568321][ T6487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.568378][ T6487] do_syscall_64+0x174/0x580 [ 117.568442][ T6487] ? trace_irq_disable+0x3b/0x140 [ 117.568508][ T6487] ? clear_bhb_loop+0x70/0xc0 [ 117.568572][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.568628][ T6487] RIP: 0033:0x7f729419e0d9 [ 117.568693][ T6487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.568740][ T6487] RSP: 002b:00007f7295050028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.568809][ T6487] RAX: ffffffffffffffda RBX: 00007f7294425fa0 RCX: 00007f729419e0d9 [ 117.568860][ T6487] RDX: 000000000000c050 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 117.568915][ T6487] RBP: 00007f7294235024 R08: 0000000000000000 R09: 0000000000000000 [ 117.568963][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.569018][ T6487] R13: 00007f7294426038 R14: 00007f7294425fa0 R15: 00007ffe4ccca038 [ 117.569076][ T6487] [ 117.569099][ T6487] [ 117.573708][ T6489] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 117.576057][ T6487] Allocated by task 6488: [ 117.585255][ T6489] CPU: 1 UID: 0 PID: 6489 Comm: syz.1.269 Not tainted syzkaller #0 PREEMPT(full) [ 117.595325][ T6487] kasan_save_track+0x3e/0x80 [ 117.598650][ T6489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.601637][ T6487] __kasan_kmalloc+0x93/0xb0 [ 117.606242][ T6489] RIP: 0010:flow_block_cb_setup_simple+0x1bc/0x750 [ 117.611801][ T6487] __kmalloc_cache_noprof+0x32d/0x660 [ 117.618138][ T6489] Code: f0 48 c1 e8 03 80 3c 18 00 74 08 4c 89 f7 e8 5b 54 81 f8 49 8b 2e 4c 39 f5 0f 84 b6 00 00 00 4c 8d 6d 20 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 36 54 81 f8 4d 39 65 00 74 07 e8 ab [ 117.622480][ T6487] flow_block_cb_setup_simple+0x29f/0x750 [ 117.626988][ T6489] RSP: 0018:ffffc90005676770 EFLAGS: 00010202 [ 117.633323][ T6487] nft_chain_offload_cmd+0x2b1/0x650 [ 117.639485][ T6489] [ 117.639494][ T6489] RAX: 0000000000000004 RBX: dffffc0000000000 RCX: ffff888068ab5d00 [ 117.645220][ T6487] nft_flow_rule_offload_commit+0x8c9/0x1d00 [ 117.650510][ T6489] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880745c9780 [ 117.656321][ T6487] nf_tables_commit+0x868/0xad90 [ 117.661094][ T6489] RBP: 0000000000000000 R08: ffff888068ab5d00 R09: 0000000000000002 [ 117.666048][ T6487] nfnetlink_rcv+0x1caf/0x28c0 [ 117.670992][ T6489] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff874ce3c0 [ 117.675417][ T6487] netlink_unicast+0x7bb/0x940 [ 117.679839][ T6489] R13: 0000000000000020 R14: ffffffff8f8ad640 R15: ffff888035d04ec0 [ 117.684261][ T6487] netlink_sendmsg+0x813/0xb40 [ 117.690244][ T6489] FS: 00007efc7f0c66c0(0000) GS:ffff88812503a000(0000) knlGS:0000000000000000 [ 117.696665][ T6487] sock_sendmsg_nosec+0x13a/0x180 [ 117.701783][ T6489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.706941][ T6487] ____sys_sendmsg+0x54e/0x850 [ 117.712152][ T6489] CR2: 0000200000000600 CR3: 0000000072aea000 CR4: 00000000003526f0 [ 117.717361][ T6487] ___sys_sendmsg+0x2a5/0x360 [ 117.722666][ T6489] Call Trace: [ 117.727864][ T6487] __x64_sys_sendmsg+0x1b1/0x290 [ 117.732989][ T6489] [ 117.738192][ T6487] do_syscall_64+0x174/0x580 [ 117.743843][ T6489] nft_chain_offload_cmd+0x2b1/0x650 [ 117.750000][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.754866][ T6489] ? __pfx_nft_chain_offload_cmd+0x10/0x10 [ 117.759806][ T6487] [ 117.759815][ T6487] Freed by task 6488: [ 117.764755][ T6489] ? __lock_acquire+0x683/0x2cf0 [ 117.770132][ T6487] kasan_save_track+0x3e/0x80 [ 117.775606][ T6489] ? __lock_acquire+0x683/0x2cf0 [ 117.780465][ T6487] kasan_save_free_info+0x40/0x50 [ 117.785243][ T6489] ? unwind_next_frame+0x8f/0x2550 [ 117.790790][ T6487] __kasan_slab_free+0x5c/0x80 [ 117.795661][ T6489] ? nft_pernet+0x45/0x270 [ 117.800514][ T6487] kfree+0x1c5/0x640 [ 117.804944][ T6489] ? nft_pernet+0x45/0x270 [ 117.809360][ T6487] nft_flow_offload_unbind+0x403/0x4b0 [ 117.813779][ T6489] ? nft_pernet+0x45/0x270 [ 117.818382][ T6487] nft_chain_offload_cmd+0x2e3/0x650 [ 117.823332][ T6489] nft_flow_rule_offload_commit+0x8c9/0x1d00 [ 117.827760][ T6487] nft_flow_rule_offload_commit+0x485/0x1d00 [ 117.832188][ T6489] ? unwind_get_return_address+0x4d/0x90 [ 117.836604][ T6487] nf_tables_commit+0x868/0xad90 [ 117.841034][ T6489] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 117.845463][ T6487] nfnetlink_rcv+0x1caf/0x28c0 [ 117.850844][ T6489] ? __pfx_nft_flow_rule_offload_commit+0x10/0x10 [ 117.857099][ T6487] netlink_unicast+0x7bb/0x940 [ 117.862221][ T6489] ? stack_trace_save+0xa9/0x100 [ 117.866646][ T6487] netlink_sendmsg+0x813/0xb40 [ 117.871075][ T6489] ? __pfx_stack_trace_save+0x10/0x10 [ 117.875503][ T6487] sock_sendmsg_nosec+0x13a/0x180 [ 117.880711][ T6489] ? stack_depot_save_flags+0x33/0x800 [ 117.885566][ T6487] ____sys_sendmsg+0x54e/0x850 [ 117.891122][ T6489] ? nf_hook_entries_grow+0x287/0x740 [ 117.895898][ T6487] ___sys_sendmsg+0x2a5/0x360 [ 117.901017][ T6489] ? kasan_save_track+0x4f/0x80 [ 117.906045][ T6487] __x64_sys_sendmsg+0x1b1/0x290 [ 117.910470][ T6489] ? kasan_save_track+0x3e/0x80 [ 117.915940][ T6487] do_syscall_64+0x174/0x580 [ 117.921151][ T6489] ? __kasan_kmalloc+0x93/0xb0 [ 117.926359][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.931133][ T6489] ? __kvmalloc_node_noprof+0x53f/0x860 [ 117.935905][ T6487] [ 117.935913][ T6487] The buggy address belongs to the object at ffff888035c64d00 [ 117.935913][ T6487] which belongs to the cache kmalloc-192 of size 192 [ 117.941197][ T6489] ? nf_hook_entries_grow+0x287/0x740 [ 117.946144][ T6487] The buggy address is located 8 bytes inside of [ 117.946144][ T6487] freed 192-byte region [ffff888035c64d00, ffff888035c64dc0) [ 117.951444][ T6489] ? __nf_register_net_hook+0x2c9/0x930 [ 117.956563][ T6487] [ 117.956572][ T6487] The buggy address belongs to the physical page: [ 117.961335][ T6489] ? nf_register_net_hook+0xb2/0x190 [ 117.966658][ T6487] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35c64 [ 117.971149][ T6489] ? nft_netdev_register_hooks+0x88/0x250 [ 117.975860][ T6487] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 117.980815][ T6489] ? nf_tables_newchain+0x2384/0x28b0 [ 117.986035][ T6487] page_type: f5(slab) [ 117.990534][ T6489] ? nfnetlink_rcv+0x1288/0x28c0 [ 117.995141][ T6487] raw: 00fff00000000000 ffff88801b0033c0 dead000000000100 dead000000000122 [ 117.999816][ T6489] ? netlink_unicast+0x7bb/0x940 [ 118.004767][ T6487] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 118.010225][ T6489] ? netlink_sendmsg+0x813/0xb40 [ 118.016320][ T6487] page dumped because: kasan: bad access detected [ 118.020948][ T6489] ? sock_sendmsg_nosec+0x13a/0x180 [ 118.025991][ T6487] page_owner tracks the page as allocated [ 118.030667][ T6489] ? ____sys_sendmsg+0x54e/0x850 [ 118.036579][ T6487] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 27071775185, free_ts 0 [ 118.041002][ T6489] ? ___sys_sendmsg+0x2a5/0x360 [ 118.060622][ T6487] post_alloc_hook+0x1f9/0x250 [ 118.069042][ T6489] ? __x64_sys_sendmsg+0x1b1/0x290 [ 118.077033][ T6487] get_page_from_freelist+0x21fa/0x2270 [ 118.085016][ T6489] ? do_syscall_64+0x174/0x580 [ 118.092999][ T6487] __alloc_frozen_pages_noprof+0x18d/0x380 [ 118.101069][ T6489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.109052][ T6487] allocate_slab+0x79/0x5e0 [ 118.112209][ T6489] ? __lock_acquire+0x683/0x2cf0 [ 118.114530][ T6487] refill_objects+0x2d5/0x350 [ 118.122964][ T6489] ? __nf_register_net_hook+0x502/0x930 [ 118.127302][ T6487] __pcs_replace_empty_main+0x2bf/0x6b0 [ 118.136536][ T6489] ? nft_pernet+0x23/0x240 [ 118.141217][ T6487] __kmalloc_cache_noprof+0x3a7/0x660 [ 118.151287][ T6489] ? nft_pernet+0x23/0x240 [ 118.155884][ T6487] call_usermodehelper_setup+0x8e/0x270 [ 118.162402][ T6489] ? nft_pernet+0x23/0x240 [ 118.167786][ T6487] kobject_uevent_env+0x662/0x9e0 [ 118.187407][ T6489] ? nft_pernet+0x23/0x240 [ 118.193170][ T6487] kernel_add_sysfs_param+0xb1/0xe0 [ 118.199271][ T6489] nf_tables_commit+0x868/0xad90 [ 118.204558][ T6487] param_sysfs_builtin+0x199/0x250 [ 118.206904][ T6489] ? nf_register_net_hook+0xc8/0x190 [ 118.214876][ T6487] param_sysfs_builtin_init+0x23/0x30 [ 118.220904][ T6489] ? nft_netdev_register_hooks+0x241/0x250 [ 118.228980][ T6487] do_one_initcall+0x250/0x870 [ 118.233932][ T6489] ? nf_tables_newchain+0x23a1/0x28b0 [ 118.241909][ T6487] do_initcall_level+0x10a/0x1a0 [ 118.246688][ T6489] ? __pfx_nf_tables_commit+0x10/0x10 [ 118.254666][ T6487] do_initcalls+0x59/0xa0 [ 118.259440][ T6489] ? __pfx_nf_tables_newchain+0x10/0x10 [ 118.267432][ T6487] kernel_init_freeable+0x29d/0x3e0 [ 118.272220][ T6489] ? nfnl_pernet+0x23/0x240 [ 118.281145][ T6487] page_owner free stack trace missing [ 118.286185][ T6489] nfnetlink_rcv+0x1caf/0x28c0 [ 118.292860][ T6487] [ 118.292868][ T6487] Memory state around the buggy address: [ 118.297704][ T6489] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 118.305659][ T6487] ffff888035c64c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.310353][ T6489] ? ref_tracker_free+0x689/0x830 [ 118.313683][ T6487] ffff888035c64c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 118.318631][ T6489] ? skb_clone+0x246/0x3a0 [ 118.321579][ T6487] >ffff888035c64d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.326184][ T6489] ? __netlink_deliver_tap+0x811/0x860 [ 118.331496][ T6487] ^ [ 118.337411][ T6489] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.343238][ T6487] ffff888035c64d80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 118.345578][ T6489] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.349583][ T6487] ffff888035c64e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.354533][ T6489] netlink_unicast+0x7bb/0x940 [ 118.359232][ T6487] ================================================================== [ 118.364228][ T6489] netlink_sendmsg+0x813/0xb40 [ 118.385679][ T6487] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 118.973263][ T6487] Kernel Offset: disabled [ 118.977612][ T6487] Rebooting in 86400 seconds..