Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts. 2026/01/28 08:22:30 parsed 1 programs [ 76.616347][ T5830] cgroup: Unknown subsys name 'net' [ 76.760336][ T5830] cgroup: Unknown subsys name 'cpuset' [ 76.768957][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.166007][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.102647][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.306253][ T5890] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.318273][ T5890] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.325973][ T5890] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.333978][ T5890] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.341781][ T5890] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.792774][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 83.232770][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.242904][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.418414][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.429664][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.438392][ T5876] bridge_slave_0: entered allmulticast mode [ 83.445374][ T5876] bridge_slave_0: entered promiscuous mode [ 83.487085][ T3674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.494930][ T3674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.508608][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.515753][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.522996][ T5876] bridge_slave_1: entered allmulticast mode [ 83.530539][ T5876] bridge_slave_1: entered promiscuous mode [ 83.633235][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.691842][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.823634][ T5876] team0: Port device team_slave_0 added [ 83.849938][ T5876] team0: Port device team_slave_1 added [ 83.939143][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.946127][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.972943][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.990180][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.000948][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.028092][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.108860][ T5876] hsr_slave_0: entered promiscuous mode [ 84.115603][ T5876] hsr_slave_1: entered promiscuous mode [ 84.448394][ T5876] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.460631][ T5876] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.472833][ T5876] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.483999][ T5876] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.581921][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.603989][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.617318][ T4567] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.624553][ T4567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.641466][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.648661][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.802106][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.840002][ T5876] veth0_vlan: entered promiscuous mode [ 84.850891][ T5876] veth1_vlan: entered promiscuous mode [ 84.878943][ T5876] veth0_macvtap: entered promiscuous mode [ 84.888459][ T5876] veth1_macvtap: entered promiscuous mode [ 84.904034][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.919830][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.934477][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.944197][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.954741][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.964592][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/28 08:22:41 executed programs: 0 [ 85.135430][ T5151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.147063][ T5151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.155070][ T5151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.168809][ T5151] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.179449][ T5151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.252116][ T5890] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.260694][ T5890] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.270069][ T5890] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.281179][ T5890] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.316984][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.326749][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.336784][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.345474][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.354093][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.362188][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.362206][ T5956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.397128][ T5890] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.405633][ T5890] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.417749][ T5890] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.425443][ T5890] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.443631][ T5890] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.452617][ T5890] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.460666][ T5890] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.468665][ T5890] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.476296][ T5890] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.501593][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.630935][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.718463][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.030752][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 86.158081][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 86.232125][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 86.333349][ T5958] chnl_net:caif_netlink_parms(): no params data found [ 86.401205][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.408669][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.415906][ T5944] bridge_slave_0: entered allmulticast mode [ 86.423206][ T5944] bridge_slave_0: entered promiscuous mode [ 86.431022][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 86.476643][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.483971][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.491337][ T5944] bridge_slave_1: entered allmulticast mode [ 86.499047][ T5944] bridge_slave_1: entered promiscuous mode [ 86.533449][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.541187][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.548633][ T5951] bridge_slave_0: entered allmulticast mode [ 86.555496][ T5951] bridge_slave_0: entered promiscuous mode [ 86.589414][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.596535][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.604088][ T5949] bridge_slave_0: entered allmulticast mode [ 86.611504][ T5949] bridge_slave_0: entered promiscuous mode [ 86.624121][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.631334][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.638514][ T5951] bridge_slave_1: entered allmulticast mode [ 86.645680][ T5951] bridge_slave_1: entered promiscuous mode [ 86.667720][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.684138][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.691767][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.699039][ T5949] bridge_slave_1: entered allmulticast mode [ 86.705938][ T5949] bridge_slave_1: entered promiscuous mode [ 86.754072][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.772853][ T10] cfg80211: failed to load regulatory.db [ 86.792867][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.800228][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.807549][ T5958] bridge_slave_0: entered allmulticast mode [ 86.814442][ T5958] bridge_slave_0: entered promiscuous mode [ 86.825286][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.855963][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.867451][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.875076][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.882895][ T5958] bridge_slave_1: entered allmulticast mode [ 86.890112][ T5958] bridge_slave_1: entered promiscuous mode [ 86.898949][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.929481][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.954292][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.994511][ T5944] team0: Port device team_slave_0 added [ 87.000334][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.007784][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.015058][ T5952] bridge_slave_0: entered allmulticast mode [ 87.022644][ T5952] bridge_slave_0: entered promiscuous mode [ 87.057835][ T5944] team0: Port device team_slave_1 added [ 87.072517][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.080019][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.088078][ T5952] bridge_slave_1: entered allmulticast mode [ 87.094965][ T5952] bridge_slave_1: entered promiscuous mode [ 87.103460][ T5949] team0: Port device team_slave_0 added [ 87.111707][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.122899][ T5951] team0: Port device team_slave_0 added [ 87.130987][ T5951] team0: Port device team_slave_1 added [ 87.162708][ T5949] team0: Port device team_slave_1 added [ 87.171429][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.198796][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.205829][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.232503][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.248992][ T5890] Bluetooth: hci0: command tx timeout [ 87.283770][ T5958] team0: Port device team_slave_0 added [ 87.290498][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.297784][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.323878][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.335571][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.342785][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.369375][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.384715][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.395670][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.402803][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.428978][ T5890] Bluetooth: hci1: command tx timeout [ 87.437575][ T5890] Bluetooth: hci2: command tx timeout [ 87.440037][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.455832][ T5958] team0: Port device team_slave_1 added [ 87.469743][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.476748][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.503336][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.514236][ T5890] Bluetooth: hci3: command tx timeout [ 87.531257][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.541130][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.548151][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.574282][ T5890] Bluetooth: hci4: command tx timeout [ 87.576958][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.653840][ T5952] team0: Port device team_slave_0 added [ 87.664650][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.671787][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.698180][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.710577][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.717614][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.743771][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.778257][ T5951] hsr_slave_0: entered promiscuous mode [ 87.784799][ T5951] hsr_slave_1: entered promiscuous mode [ 87.791791][ T5951] debugfs: 'hsr0' already exists in 'hsr' [ 87.798380][ T5951] Cannot create hsr debugfs directory [ 87.816774][ T5952] team0: Port device team_slave_1 added [ 87.878257][ T5944] hsr_slave_0: entered promiscuous mode [ 87.884581][ T5944] hsr_slave_1: entered promiscuous mode [ 87.891121][ T5944] debugfs: 'hsr0' already exists in 'hsr' [ 87.898089][ T5944] Cannot create hsr debugfs directory [ 87.942279][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.949639][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.976488][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.989401][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.996348][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.022830][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.040031][ T5949] hsr_slave_0: entered promiscuous mode [ 88.046494][ T5949] hsr_slave_1: entered promiscuous mode [ 88.053191][ T5949] debugfs: 'hsr0' already exists in 'hsr' [ 88.059163][ T5949] Cannot create hsr debugfs directory [ 88.113051][ T5958] hsr_slave_0: entered promiscuous mode [ 88.120124][ T5958] hsr_slave_1: entered promiscuous mode [ 88.126206][ T5958] debugfs: 'hsr0' already exists in 'hsr' [ 88.133261][ T5958] Cannot create hsr debugfs directory [ 88.224930][ T13] bridge_slave_1: left allmulticast mode [ 88.233781][ T13] bridge_slave_1: left promiscuous mode [ 88.241296][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.252737][ T13] bridge_slave_0: left allmulticast mode [ 88.259927][ T13] bridge_slave_0: left promiscuous mode [ 88.265623][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.478202][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.489317][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.499523][ T13] bond0 (unregistering): Released all slaves [ 88.620906][ T5952] hsr_slave_0: entered promiscuous mode [ 88.627739][ T5952] hsr_slave_1: entered promiscuous mode [ 88.633759][ T5952] debugfs: 'hsr0' already exists in 'hsr' [ 88.639907][ T5952] Cannot create hsr debugfs directory [ 88.711273][ T13] hsr_slave_0: left promiscuous mode [ 88.717631][ T13] hsr_slave_1: left promiscuous mode [ 88.723520][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.731252][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.739335][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.746715][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.764041][ T13] veth1_macvtap: left promiscuous mode [ 88.769827][ T13] veth0_macvtap: left promiscuous mode [ 88.775522][ T13] veth1_vlan: left promiscuous mode [ 88.781227][ T13] veth0_vlan: left promiscuous mode [ 89.087656][ T13] team0 (unregistering): Port device team_slave_1 removed [ 89.114858][ T13] team0 (unregistering): Port device team_slave_0 removed [ 89.331115][ T5890] Bluetooth: hci0: command tx timeout [ 89.491048][ T5890] Bluetooth: hci2: command tx timeout [ 89.491102][ T5955] Bluetooth: hci1: command tx timeout [ 89.567045][ T5955] Bluetooth: hci3: command tx timeout [ 89.647304][ T5955] Bluetooth: hci4: command tx timeout [ 89.690625][ T5951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.714580][ T5951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.729538][ T5951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.744079][ T5951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.157662][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.322919][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.340594][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.347790][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.392976][ T3454] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.400106][ T3454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.426139][ T5949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.449045][ T5949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.480274][ T5949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.502448][ T5949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.592079][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.612674][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.628624][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.641850][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.667332][ T5951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.878989][ T5952] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.920711][ T5952] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.997072][ T5952] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.050882][ T5952] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.174971][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.182884][ T5958] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.206182][ T5958] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.219509][ T5958] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.234904][ T5958] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.278588][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.290089][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.318365][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.325471][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.352416][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.374076][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.381209][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.407752][ T5955] Bluetooth: hci0: command tx timeout [ 91.430350][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.448652][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.455766][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.498079][ T3454] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.505217][ T3454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.550213][ T5951] veth0_vlan: entered promiscuous mode [ 91.568539][ T5955] Bluetooth: hci2: command tx timeout [ 91.568548][ T5890] Bluetooth: hci1: command tx timeout [ 91.590473][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.617787][ T5951] veth1_vlan: entered promiscuous mode [ 91.651185][ T5955] Bluetooth: hci3: command tx timeout [ 91.675805][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.698003][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.727198][ T5955] Bluetooth: hci4: command tx timeout [ 91.742786][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.749972][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.765751][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.789436][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.796707][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.811288][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.818489][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.864370][ T5951] veth0_macvtap: entered promiscuous mode [ 91.876771][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.883918][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.913337][ T5951] veth1_macvtap: entered promiscuous mode [ 91.933179][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.998613][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.032282][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.089775][ T4567] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.111181][ T4567] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.121321][ T4567] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.151101][ T4567] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.163406][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.194885][ T5949] veth0_vlan: entered promiscuous mode [ 92.272829][ T5949] veth1_vlan: entered promiscuous mode [ 92.343078][ T4567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.364779][ T4567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.412131][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.443402][ T5944] veth0_vlan: entered promiscuous mode [ 92.446924][ T4567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.463550][ T5944] veth1_vlan: entered promiscuous mode [ 92.466893][ T4567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.502274][ T5949] veth0_macvtap: entered promiscuous mode 2026/01/28 08:22:48 executed programs: 10 [ 92.515994][ T5949] veth1_macvtap: entered promiscuous mode [ 92.583860][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.618108][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.619043][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 92.631554][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.635285][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 92.652280][ T5944] veth0_macvtap: entered promiscuous mode [ 92.675740][ T4567] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.696697][ T5944] veth1_macvtap: entered promiscuous mode [ 92.705098][ T4567] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.724517][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 92.725643][ T4567] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.750648][ T5952] veth0_vlan: entered promiscuous mode [ 92.759862][ T4567] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.760185][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 92.812034][ T5952] veth1_vlan: entered promiscuous mode [ 92.871920][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.882430][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 92.906295][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 92.938899][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.964478][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.975552][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.002838][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 93.014280][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 93.027055][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.036705][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.110390][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 93.120596][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 93.154468][ T3454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.170942][ T5952] veth0_macvtap: entered promiscuous mode [ 93.171374][ T3454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.228523][ T5952] veth1_macvtap: entered promiscuous mode [ 93.310268][ T3454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.330383][ T3454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.405842][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.415040][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.438987][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.462044][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.488857][ T5955] Bluetooth: hci0: command tx timeout [ 93.519653][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.535070][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.554674][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.586253][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.613201][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.647181][ T5955] Bluetooth: hci1: command tx timeout [ 93.658854][ T5955] Bluetooth: hci2: command tx timeout [ 93.676429][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.737707][ T5955] Bluetooth: hci3: command tx timeout [ 93.741383][ T5958] veth0_vlan: entered promiscuous mode [ 93.790268][ T5958] veth1_vlan: entered promiscuous mode [ 93.807240][ T5955] Bluetooth: hci4: command tx timeout [ 93.990516][ T5958] veth0_macvtap: entered promiscuous mode [ 94.044746][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.049783][ T5958] veth1_macvtap: entered promiscuous mode [ 94.078378][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.205199][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.223915][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.231301][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.252729][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.316020][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.345590][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.369760][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.397369][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.685684][ T3516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.706572][ T3516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.871021][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.888997][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.080073][ T6179] ================================================================== [ 96.088185][ T6179] BUG: KASAN: slab-use-after-free in nft_array_get_cmp+0x1f6/0x2a0 [ 96.096121][ T6179] Read of size 1 at addr ffff888059c95719 by task syz.0.115/6179 [ 96.103907][ T6179] [ 96.106264][ T6179] CPU: 1 UID: 0 PID: 6179 Comm: syz.0.115 Not tainted syzkaller #0 PREEMPT(full) [ 96.106287][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 96.106304][ T6179] Call Trace: [ 96.106312][ T6179] [ 96.106320][ T6179] dump_stack_lvl+0xe8/0x150 [ 96.106347][ T6179] print_report+0xba/0x230 [ 96.106366][ T6179] ? nft_array_get_cmp+0x1f6/0x2a0 [ 96.106389][ T6179] kasan_report+0x117/0x150 [ 96.106416][ T6179] ? nft_array_get_cmp+0x1f6/0x2a0 [ 96.106442][ T6179] nft_array_get_cmp+0x1f6/0x2a0 [ 96.106465][ T6179] ? nft_data_init+0x48f/0xc90 [ 96.106486][ T6179] bsearch+0x50/0xc0 [ 96.106502][ T6179] ? __pfx_nft_array_get_cmp+0x10/0x10 [ 96.106526][ T6179] nft_rbtree_get+0x16b/0x400 [ 96.106546][ T6179] ? __pfx_nft_rbtree_get+0x10/0x10 [ 96.106568][ T6179] ? __nla_parse+0x40/0x60 [ 96.106592][ T6179] ? __pfx_nft_rbtree_get+0x10/0x10 [ 96.106613][ T6179] nft_get_set_elem+0x420/0xaa0 [ 96.106633][ T6179] ? lock_acquire+0x106/0x330 [ 96.106658][ T6179] ? __pfx_nft_get_set_elem+0x10/0x10 [ 96.106680][ T6179] ? nft_pernet+0x23/0x240 [ 96.106712][ T6179] ? nft_set_dump_ctx_init+0x6a9/0x980 [ 96.106735][ T6179] nf_tables_getsetelem+0x448/0x5e0 [ 96.106760][ T6179] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 96.106782][ T6179] ? is_bpf_text_address+0x26/0x2b0 [ 96.106805][ T6179] ? nfnl_pernet+0x23/0x240 [ 96.106822][ T6179] ? __nla_parse+0x40/0x60 [ 96.106840][ T6179] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 96.106859][ T6179] nfnetlink_rcv_msg+0x8ae/0x12c0 [ 96.106874][ T6179] ? unwind_get_return_address+0x4d/0x90 [ 96.106890][ T6179] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 96.106912][ T6179] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 96.106943][ T6179] netlink_rcv_skb+0x232/0x4b0 [ 96.106961][ T6179] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 96.106976][ T6179] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 96.106996][ T6179] ? bpf_lsm_capable+0x9/0x20 [ 96.107017][ T6179] ? security_capable+0x7e/0x2c0 [ 96.107040][ T6179] nfnetlink_rcv+0x2c0/0x27b0 [ 96.107058][ T6179] ? __local_bh_enable_ip+0xd0/0x130 [ 96.107074][ T6179] ? lockdep_hardirqs_on+0x7a/0x110 [ 96.107094][ T6179] ? __dev_queue_xmit+0x274/0x3850 [ 96.107117][ T6179] ? __local_bh_enable_ip+0xd0/0x130 [ 96.107132][ T6179] ? __dev_queue_xmit+0x274/0x3850 [ 96.107154][ T6179] ? __dev_queue_xmit+0x1e6c/0x3850 [ 96.107177][ T6179] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 96.107203][ T6179] ? __dev_queue_xmit+0x274/0x3850 [ 96.107226][ T6179] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 96.107244][ T6179] ? __pfx___dev_queue_xmit+0x10/0x10 [ 96.107271][ T6179] ? ref_tracker_free+0x693/0x840 [ 96.107292][ T6179] ? __copy_skb_header+0xa3/0x4a0 [ 96.107315][ T6179] ? __pfx_ref_tracker_free+0x10/0x10 [ 96.107335][ T6179] ? __skb_clone+0x63/0x7a0 [ 96.107359][ T6179] ? __skb_clone+0x483/0x7a0 [ 96.107384][ T6179] ? skb_clone+0x246/0x3a0 [ 96.107415][ T6179] ? __netlink_deliver_tap+0x807/0x850 [ 96.107434][ T6179] ? netlink_deliver_tap+0x2e/0x1b0 [ 96.107456][ T6179] ? netlink_deliver_tap+0x2e/0x1b0 [ 96.107477][ T6179] netlink_unicast+0x80f/0x9b0 [ 96.107497][ T6179] ? __pfx_netlink_unicast+0x10/0x10 [ 96.107515][ T6179] ? netlink_sendmsg+0x650/0xb40 [ 96.107533][ T6179] ? skb_put+0x11b/0x210 [ 96.107554][ T6179] netlink_sendmsg+0x813/0xb40 [ 96.107578][ T6179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.107599][ T6179] ? aa_sock_msg_perm+0xf1/0x1b0 [ 96.107620][ T6179] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 96.107639][ T6179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.107656][ T6179] ____sys_sendmsg+0xa68/0xad0 [ 96.107679][ T6179] ? __might_fault+0xaf/0x130 [ 96.107704][ T6179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.107730][ T6179] ? import_iovec+0x73/0xa0 [ 96.107756][ T6179] ___sys_sendmsg+0x2a5/0x360 [ 96.107779][ T6179] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.107802][ T6179] ? futex_hash_put+0x4b/0x60 [ 96.107822][ T6179] ? futex_wake+0x4ac/0x580 [ 96.107855][ T6179] __x64_sys_sendmsg+0x1bd/0x2a0 [ 96.107879][ T6179] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 96.107911][ T6179] do_syscall_64+0xe2/0xf80 [ 96.107931][ T6179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.107948][ T6179] ? trace_irq_disable+0x37/0x100 [ 96.107965][ T6179] ? clear_bhb_loop+0x60/0xb0 [ 96.107983][ T6179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.108001][ T6179] RIP: 0033:0x7ff6e899aeb9 [ 96.108026][ T6179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.108041][ T6179] RSP: 002b:00007ffcb49ef438 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.108061][ T6179] RAX: ffffffffffffffda RBX: 00007ff6e8c15fa0 RCX: 00007ff6e899aeb9 [ 96.108075][ T6179] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 96.108086][ T6179] RBP: 00007ff6e8a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 96.108098][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.108109][ T6179] R13: 00007ff6e8c15fac R14: 00007ff6e8c15fa0 R15: 00007ff6e8c15fa0 [ 96.108129][ T6179] [ 96.108136][ T6179] [ 96.594978][ T6179] Allocated by task 6179: [ 96.599293][ T6179] kasan_save_track+0x3e/0x80 [ 96.603975][ T6179] __kasan_kmalloc+0x93/0xb0 [ 96.608555][ T6179] __kmalloc_noprof+0x40c/0x7e0 [ 96.613399][ T6179] nft_set_elem_init+0xa8/0x7e0 [ 96.618328][ T6179] nf_tables_newsetelem+0x22a4/0x4360 [ 96.623786][ T6179] nfnetlink_rcv+0x1240/0x27b0 [ 96.628530][ T6179] netlink_unicast+0x80f/0x9b0 [ 96.633283][ T6179] netlink_sendmsg+0x813/0xb40 [ 96.638158][ T6179] ____sys_sendmsg+0xa68/0xad0 [ 96.643342][ T6179] ___sys_sendmsg+0x2a5/0x360 [ 96.648010][ T6179] __x64_sys_sendmsg+0x1bd/0x2a0 [ 96.652937][ T6179] do_syscall_64+0xe2/0xf80 [ 96.657426][ T6179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.663304][ T6179] [ 96.665609][ T6179] Freed by task 6179: [ 96.669571][ T6179] kasan_save_track+0x3e/0x80 [ 96.674231][ T6179] kasan_save_free_info+0x46/0x50 [ 96.679245][ T6179] __kasan_slab_free+0x5c/0x80 [ 96.683994][ T6179] kfree+0x1be/0x650 [ 96.687880][ T6179] nft_trans_gc_trans_free+0x519/0x6c0 [ 96.693327][ T6179] rcu_core+0xc9e/0x1750 [ 96.697558][ T6179] handle_softirqs+0x22a/0x7c0 [ 96.702307][ T6179] do_softirq+0x76/0xd0 [ 96.706447][ T6179] __local_bh_enable_ip+0xf8/0x130 [ 96.711543][ T6179] netlink_insert+0xce/0x1360 [ 96.716207][ T6179] netlink_autobind+0x22d/0x300 [ 96.721043][ T6179] netlink_sendmsg+0x531/0xb40 [ 96.725791][ T6179] ____sys_sendmsg+0xa68/0xad0 [ 96.730550][ T6179] ___sys_sendmsg+0x2a5/0x360 [ 96.735213][ T6179] __x64_sys_sendmsg+0x1bd/0x2a0 [ 96.740140][ T6179] do_syscall_64+0xe2/0xf80 [ 96.744642][ T6179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.750521][ T6179] [ 96.752829][ T6179] The buggy address belongs to the object at ffff888059c95700 [ 96.752829][ T6179] which belongs to the cache kmalloc-cg-64 of size 64 [ 96.766962][ T6179] The buggy address is located 25 bytes inside of [ 96.766962][ T6179] freed 64-byte region [ffff888059c95700, ffff888059c95740) [ 96.780581][ T6179] [ 96.782981][ T6179] The buggy address belongs to the physical page: [ 96.789479][ T6179] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59c95 [ 96.798229][ T6179] memcg:ffff888029b39c01 [ 96.802451][ T6179] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 96.809550][ T6179] page_type: f5(slab) [ 96.813516][ T6179] raw: 00fff00000000000 ffff88813fe2ec80 dead000000000122 0000000000000000 [ 96.822087][ T6179] raw: 0000000000000000 0000000080200020 00000000f5000000 ffff888029b39c01 [ 96.830650][ T6179] page dumped because: kasan: bad access detected [ 96.837052][ T6179] page_owner tracks the page as allocated [ 96.842752][ T6179] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6174, tgid 6174 (syz.0.111), ts 95921828533, free_ts 95847598991 [ 96.862192][ T6179] post_alloc_hook+0x228/0x280 [ 96.866943][ T6179] get_page_from_freelist+0x24dc/0x2580 [ 96.872482][ T6179] __alloc_frozen_pages_noprof+0x18d/0x380 [ 96.878280][ T6179] alloc_pages_mpol+0x232/0x4a0 [ 96.883119][ T6179] allocate_slab+0x86/0x3a0 [ 96.887611][ T6179] ___slab_alloc+0xd82/0x1760 [ 96.892274][ T6179] __slab_alloc+0x65/0x100 [ 96.896676][ T6179] __kmalloc_noprof+0x46c/0x7e0 [ 96.901509][ T6179] nft_set_elem_init+0xa8/0x7e0 [ 96.906347][ T6179] nf_tables_newsetelem+0x22a4/0x4360 [ 96.911714][ T6179] nfnetlink_rcv+0x1240/0x27b0 [ 96.916464][ T6179] netlink_unicast+0x80f/0x9b0 [ 96.921218][ T6179] netlink_sendmsg+0x813/0xb40 [ 96.925966][ T6179] ____sys_sendmsg+0xa68/0xad0 [ 96.930720][ T6179] ___sys_sendmsg+0x2a5/0x360 [ 96.935480][ T6179] __x64_sys_sendmsg+0x1bd/0x2a0 [ 96.940404][ T6179] page last free pid 1148 tgid 1148 stack trace: [ 96.946753][ T6179] __free_frozen_pages+0xbf8/0xd70 [ 96.951851][ T6179] tlb_remove_table_rcu+0x85/0x100 [ 96.956952][ T6179] rcu_core+0xc9e/0x1750 [ 96.961182][ T6179] handle_softirqs+0x22a/0x7c0 [ 96.965928][ T6179] __irq_exit_rcu+0x5f/0x150 [ 96.970519][ T6179] irq_exit_rcu+0x9/0x30 [ 96.974762][ T6179] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 96.980388][ T6179] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.986363][ T6179] [ 96.988673][ T6179] Memory state around the buggy address: [ 96.994293][ T6179] ffff888059c95600: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 97.002353][ T6179] ffff888059c95680: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 97.010409][ T6179] >ffff888059c95700: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 97.018455][ T6179] ^ [ 97.023285][ T6179] ffff888059c95780: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 97.031342][ T6179] ffff888059c95800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 97.039396][ T6179] ================================================================== [ 97.091233][ T6179] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 97.098476][ T6179] CPU: 0 UID: 0 PID: 6179 Comm: syz.0.115 Not tainted syzkaller #0 PREEMPT(full) [ 97.107855][ T6179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 97.117918][ T6179] Call Trace: [ 97.121208][ T6179] [ 97.124145][ T6179] vpanic+0x1e0/0x670 [ 97.128144][ T6179] panic+0xc5/0xd0 [ 97.131885][ T6179] ? __pfx_panic+0x10/0x10 [ 97.136316][ T6179] ? preempt_schedule_common+0x82/0xd0 [ 97.141790][ T6179] ? nft_array_get_cmp+0x1f6/0x2a0 [ 97.146912][ T6179] check_panic_on_warn+0x89/0xb0 [ 97.151862][ T6179] ? nft_array_get_cmp+0x1f6/0x2a0 [ 97.157003][ T6179] end_report+0x6f/0x140 [ 97.161247][ T6179] kasan_report+0x128/0x150 [ 97.165743][ T6179] ? nft_array_get_cmp+0x1f6/0x2a0 [ 97.170860][ T6179] nft_array_get_cmp+0x1f6/0x2a0 [ 97.175792][ T6179] ? nft_data_init+0x48f/0xc90 [ 97.180546][ T6179] bsearch+0x50/0xc0 [ 97.184427][ T6179] ? __pfx_nft_array_get_cmp+0x10/0x10 [ 97.189874][ T6179] nft_rbtree_get+0x16b/0x400 [ 97.194540][ T6179] ? __pfx_nft_rbtree_get+0x10/0x10 [ 97.199731][ T6179] ? __nla_parse+0x40/0x60 [ 97.204139][ T6179] ? __pfx_nft_rbtree_get+0x10/0x10 [ 97.209327][ T6179] nft_get_set_elem+0x420/0xaa0 [ 97.214181][ T6179] ? lock_acquire+0x106/0x330 [ 97.218864][ T6179] ? __pfx_nft_get_set_elem+0x10/0x10 [ 97.224246][ T6179] ? nft_pernet+0x23/0x240 [ 97.228658][ T6179] ? nft_set_dump_ctx_init+0x6a9/0x980 [ 97.234123][ T6179] nf_tables_getsetelem+0x448/0x5e0 [ 97.239315][ T6179] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 97.245023][ T6179] ? is_bpf_text_address+0x26/0x2b0 [ 97.250219][ T6179] ? nfnl_pernet+0x23/0x240 [ 97.254712][ T6179] ? __nla_parse+0x40/0x60 [ 97.259119][ T6179] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 97.264833][ T6179] nfnetlink_rcv_msg+0x8ae/0x12c0 [ 97.269842][ T6179] ? unwind_get_return_address+0x4d/0x90 [ 97.275461][ T6179] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 97.280649][ T6179] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 97.286111][ T6179] netlink_rcv_skb+0x232/0x4b0 [ 97.290860][ T6179] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 97.296302][ T6179] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 97.301609][ T6179] ? bpf_lsm_capable+0x9/0x20 [ 97.306287][ T6179] ? security_capable+0x7e/0x2c0 [ 97.311266][ T6179] nfnetlink_rcv+0x2c0/0x27b0 [ 97.315957][ T6179] ? __local_bh_enable_ip+0xd0/0x130 [ 97.321233][ T6179] ? lockdep_hardirqs_on+0x7a/0x110 [ 97.326464][ T6179] ? __dev_queue_xmit+0x274/0x3850 [ 97.331587][ T6179] ? __local_bh_enable_ip+0xd0/0x130 [ 97.336862][ T6179] ? __dev_queue_xmit+0x274/0x3850 [ 97.341969][ T6179] ? __dev_queue_xmit+0x1e6c/0x3850 [ 97.347158][ T6179] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 97.352268][ T6179] ? __dev_queue_xmit+0x274/0x3850 [ 97.357369][ T6179] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 97.362467][ T6179] ? __pfx___dev_queue_xmit+0x10/0x10 [ 97.367830][ T6179] ? ref_tracker_free+0x693/0x840 [ 97.372844][ T6179] ? __copy_skb_header+0xa3/0x4a0 [ 97.377857][ T6179] ? __pfx_ref_tracker_free+0x10/0x10 [ 97.383217][ T6179] ? __skb_clone+0x63/0x7a0 [ 97.387973][ T6179] ? __skb_clone+0x483/0x7a0 [ 97.392562][ T6179] ? skb_clone+0x246/0x3a0 [ 97.396976][ T6179] ? __netlink_deliver_tap+0x807/0x850 [ 97.402463][ T6179] ? netlink_deliver_tap+0x2e/0x1b0 [ 97.407653][ T6179] ? netlink_deliver_tap+0x2e/0x1b0 [ 97.412840][ T6179] netlink_unicast+0x80f/0x9b0 [ 97.417594][ T6179] ? __pfx_netlink_unicast+0x10/0x10 [ 97.422874][ T6179] ? netlink_sendmsg+0x650/0xb40 [ 97.427818][ T6179] ? skb_put+0x11b/0x210 [ 97.432056][ T6179] netlink_sendmsg+0x813/0xb40 [ 97.436864][ T6179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.442150][ T6179] ? aa_sock_msg_perm+0xf1/0x1b0 [ 97.447120][ T6179] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 97.452395][ T6179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.457665][ T6179] ____sys_sendmsg+0xa68/0xad0 [ 97.462418][ T6179] ? __might_fault+0xaf/0x130 [ 97.467094][ T6179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.472376][ T6179] ? import_iovec+0x73/0xa0 [ 97.476871][ T6179] ___sys_sendmsg+0x2a5/0x360 [ 97.481539][ T6179] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.486730][ T6179] ? futex_hash_put+0x4b/0x60 [ 97.491393][ T6179] ? futex_wake+0x4ac/0x580 [ 97.495892][ T6179] __x64_sys_sendmsg+0x1bd/0x2a0 [ 97.500823][ T6179] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 97.506280][ T6179] do_syscall_64+0xe2/0xf80 [ 97.510771][ T6179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.516821][ T6179] ? trace_irq_disable+0x37/0x100 [ 97.521841][ T6179] ? clear_bhb_loop+0x60/0xb0 [ 97.526520][ T6179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.532412][ T6179] RIP: 0033:0x7ff6e899aeb9 [ 97.536818][ T6179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.556421][ T6179] RSP: 002b:00007ffcb49ef438 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.564828][ T6179] RAX: ffffffffffffffda RBX: 00007ff6e8c15fa0 RCX: 00007ff6e899aeb9 [ 97.572789][ T6179] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 97.580745][ T6179] RBP: 00007ff6e8a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 97.588701][ T6179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.596669][ T6179] R13: 00007ff6e8c15fac R14: 00007ff6e8c15fa0 R15: 00007ff6e8c15fa0 [ 97.605000][ T6179] [ 97.608426][ T6179] Kernel Offset: disabled [ 97.612739][ T6179] Rebooting in 86400 seconds..