no interfaces have a carrier [ 66.171779][ T5279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.193663][ T5279] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. 2026/09/25 13:46:01 parsed 1 programs 2026/09/25 13:46:01 serving rpc on tcp://40215 syzkaller login: [ 97.880211][ T5629] cgroup: Unknown subsys name 'net' [ 97.995567][ T5629] cgroup: Unknown subsys name 'cpuset' [ 97.999663][ T5629] cgroup: Unknown subsys name 'rlimit' [ 98.245501][ T945] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 99.805671][ T5629] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 103.642599][ T5647] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.061366][ T1347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.061394][ T1347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.739719][ T1347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.739743][ T1347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.578940][ T5711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.580865][ T5711] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.582324][ T5711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.587694][ T5711] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.597536][ T5711] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.020320][ T5691] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.021368][ T5691] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.021546][ T5691] bridge_slave_0: entered allmulticast mode [ 108.023760][ T5691] bridge_slave_0: entered promiscuous mode [ 108.057885][ T5691] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.058046][ T5691] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.058218][ T5691] bridge_slave_1: entered allmulticast mode [ 108.081669][ T5691] bridge_slave_1: entered promiscuous mode [ 108.128778][ T5691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.141902][ T5691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.178219][ T5691] team0: Port device team_slave_0 added [ 108.180637][ T5691] team0: Port device team_slave_1 added [ 108.215687][ T5691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.215703][ T5691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.215721][ T5691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.218195][ T5691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.218213][ T5691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.218238][ T5691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.326726][ T5691] hsr_slave_0: entered promiscuous mode [ 108.327663][ T5691] hsr_slave_1: entered promiscuous mode [ 108.507446][ T5691] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.521647][ T5691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.523478][ T5691] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.527018][ T5691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.528677][ T5691] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.560021][ T5691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.574737][ T5691] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.578063][ T5691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.642046][ T52] Bluetooth: hci0: command tx timeout [ 108.687538][ T5691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.714341][ T5691] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.721614][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.721830][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.757200][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.757312][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.162033][ T5691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.219793][ T5691] veth0_vlan: entered promiscuous mode [ 109.233203][ T5691] veth1_vlan: entered promiscuous mode [ 109.268372][ T5691] veth0_macvtap: entered promiscuous mode [ 109.279654][ T5691] veth1_macvtap: entered promiscuous mode [ 109.303823][ T5691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.323647][ T5691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.339986][ T1347] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.372414][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.412396][ T158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 2026/09/25 13:46:16 executed programs: 0 [ 109.412994][ T158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.659445][ T5711] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 109.669745][ T5711] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 109.678473][ T5711] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 109.690645][ T5711] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 109.694907][ T5711] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 109.738112][ T5763] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.749243][ T5763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.758611][ T5763] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.768980][ T5763] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.778362][ T5763] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.793555][ T5763] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 109.795227][ T5763] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 109.796455][ T5763] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 109.800712][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 109.808638][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 109.849971][ T5769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.865440][ T4934] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 109.867495][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 109.885425][ T5711] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.888680][ T5711] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.949423][ T5769] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.961339][ T5769] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.963546][ T5769] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 109.970897][ T5769] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 109.999076][ T5769] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.529151][ T158] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.762048][ T5769] Bluetooth: hci1: command tx timeout [ 111.842576][ T5769] Bluetooth: hci2: command tx timeout [ 111.908764][ T158] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.001542][ T5769] Bluetooth: hci3: command tx timeout [ 112.001571][ T52] Bluetooth: hci5: command tx timeout [ 112.036959][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.037149][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.037247][ T5759] bridge_slave_0: entered allmulticast mode [ 112.039435][ T5759] bridge_slave_0: entered promiscuous mode [ 112.081295][ T5769] Bluetooth: hci4: command tx timeout [ 112.116038][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.116151][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.116544][ T5759] bridge_slave_1: entered allmulticast mode [ 112.118176][ T5759] bridge_slave_1: entered promiscuous mode [ 112.231620][ T5759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.268132][ T5759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.391467][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.391648][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.391784][ T5764] bridge_slave_0: entered allmulticast mode [ 112.393557][ T5764] bridge_slave_0: entered promiscuous mode [ 112.398101][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.398405][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.398778][ T5758] bridge_slave_0: entered allmulticast mode [ 112.406525][ T5758] bridge_slave_0: entered promiscuous mode [ 112.459256][ T5759] team0: Port device team_slave_0 added [ 112.459648][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.459808][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.459945][ T5766] bridge_slave_0: entered allmulticast mode [ 112.464342][ T5766] bridge_slave_0: entered promiscuous mode [ 112.479581][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.479840][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.489042][ T5764] bridge_slave_1: entered allmulticast mode [ 112.509147][ T5764] bridge_slave_1: entered promiscuous mode [ 112.516345][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.516619][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.517035][ T5758] bridge_slave_1: entered allmulticast mode [ 112.524106][ T5758] bridge_slave_1: entered promiscuous mode [ 112.562605][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.562703][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.563216][ T5762] bridge_slave_0: entered allmulticast mode [ 112.565061][ T5762] bridge_slave_0: entered promiscuous mode [ 112.569827][ T5759] team0: Port device team_slave_1 added [ 112.616638][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.616760][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.617186][ T5766] bridge_slave_1: entered allmulticast mode [ 112.620424][ T5766] bridge_slave_1: entered promiscuous mode [ 112.685931][ T5758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.687186][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.687290][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.687694][ T5762] bridge_slave_1: entered allmulticast mode [ 112.689097][ T5762] bridge_slave_1: entered promiscuous mode [ 112.770050][ T158] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.790293][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.799280][ T5758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.826910][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.827765][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.827781][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.827807][ T5759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.830387][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.886096][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.932124][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.932974][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.932991][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.933018][ T5759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.935546][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.027297][ T158] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.092541][ T5758] team0: Port device team_slave_0 added [ 113.099375][ T5762] team0: Port device team_slave_0 added [ 113.114793][ T5762] team0: Port device team_slave_1 added [ 113.139312][ T5764] team0: Port device team_slave_0 added [ 113.147289][ T5758] team0: Port device team_slave_1 added [ 113.180716][ T5766] team0: Port device team_slave_0 added [ 113.186323][ T5764] team0: Port device team_slave_1 added [ 113.252678][ T5766] team0: Port device team_slave_1 added [ 113.272107][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.272125][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.272148][ T5758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.326779][ T5759] hsr_slave_0: entered promiscuous mode [ 113.327678][ T5759] hsr_slave_1: entered promiscuous mode [ 113.328283][ T5759] debugfs: 'hsr0' already exists in 'hsr' [ 113.328372][ T5759] Cannot create hsr debugfs directory [ 113.329305][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.329319][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.329342][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.394083][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.394136][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.394210][ T5758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.432031][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.432082][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.432149][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.449529][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.449588][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.449655][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.533497][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.533511][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.533530][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.588766][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.588784][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.588810][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.656663][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.656684][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.656710][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.829623][ T5758] hsr_slave_0: entered promiscuous mode [ 113.830698][ T5758] hsr_slave_1: entered promiscuous mode [ 113.837234][ T5758] debugfs: 'hsr0' already exists in 'hsr' [ 113.837253][ T5758] Cannot create hsr debugfs directory [ 113.844660][ T5769] Bluetooth: hci1: command tx timeout [ 113.905529][ T5762] hsr_slave_0: entered promiscuous mode [ 113.906373][ T5762] hsr_slave_1: entered promiscuous mode [ 113.906904][ T5762] debugfs: 'hsr0' already exists in 'hsr' [ 113.906930][ T5762] Cannot create hsr debugfs directory [ 113.922627][ T5769] Bluetooth: hci2: command tx timeout [ 113.962180][ T5764] hsr_slave_0: entered promiscuous mode [ 113.963000][ T5764] hsr_slave_1: entered promiscuous mode [ 113.965100][ T5764] debugfs: 'hsr0' already exists in 'hsr' [ 113.965121][ T5764] Cannot create hsr debugfs directory [ 113.996194][ T5766] hsr_slave_0: entered promiscuous mode [ 113.997131][ T5766] hsr_slave_1: entered promiscuous mode [ 113.997798][ T5766] debugfs: 'hsr0' already exists in 'hsr' [ 113.997819][ T5766] Cannot create hsr debugfs directory [ 114.081852][ T5769] Bluetooth: hci5: command tx timeout [ 114.081889][ T5769] Bluetooth: hci3: command tx timeout [ 114.156976][ T158] bridge_slave_1: left allmulticast mode [ 114.157009][ T158] bridge_slave_1: left promiscuous mode [ 114.158349][ T158] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.171261][ T5769] Bluetooth: hci4: command tx timeout [ 114.187974][ T158] bridge_slave_0: left allmulticast mode [ 114.187996][ T158] bridge_slave_0: left promiscuous mode [ 114.188170][ T158] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.387724][ T158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.390271][ T158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.412485][ T158] bond0 (unregistering): Released all slaves [ 114.745943][ T158] hsr_slave_0: left promiscuous mode [ 114.746835][ T158] hsr_slave_1: left promiscuous mode [ 114.747811][ T158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.747846][ T158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.749739][ T158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.749759][ T158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.787164][ T158] veth1_macvtap: left promiscuous mode [ 114.787225][ T158] veth0_macvtap: left promiscuous mode [ 114.787623][ T158] veth1_vlan: left promiscuous mode [ 114.787935][ T158] veth0_vlan: left promiscuous mode [ 115.174417][ T158] team0 (unregistering): Port device team_slave_1 removed [ 115.199410][ T158] team0 (unregistering): Port device team_slave_0 removed [ 115.439863][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 115.743462][ T5759] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 115.749488][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.778841][ T5759] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 115.791985][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.794887][ T5759] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.828221][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.829158][ T5759] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.859004][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.921868][ T5769] Bluetooth: hci1: command tx timeout [ 116.001535][ T5769] Bluetooth: hci2: command tx timeout [ 116.006646][ T5762] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 116.028151][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 116.046737][ T5762] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 116.060043][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.096745][ T5762] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 116.116749][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 116.119191][ T5762] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 116.143609][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.161347][ T5769] Bluetooth: hci3: command tx timeout [ 116.172553][ T5769] Bluetooth: hci5: command tx timeout [ 116.244564][ T5769] Bluetooth: hci4: command tx timeout [ 116.414047][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.513584][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.539483][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.539611][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.588963][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.590568][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.590642][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.652772][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.706582][ T5766] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 116.722060][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 116.725278][ T5766] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 116.731631][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.760641][ T5766] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 116.777846][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 116.800878][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.801082][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.832023][ T5766] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 116.835741][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.854550][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.854840][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.033700][ T5758] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.050942][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.082232][ T5758] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.106308][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.107184][ T5758] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.127919][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 117.163465][ T5758] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.184534][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 117.497611][ T5764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 117.519317][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.541967][ T5764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 117.560191][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 117.584455][ T5764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 117.616061][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 117.633555][ T5764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 117.654187][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 117.895428][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.995185][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.007883][ T5769] Bluetooth: hci1: command tx timeout [ 118.076726][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.076838][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.081661][ T5769] Bluetooth: hci2: command tx timeout [ 118.146954][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.147067][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.196533][ T5758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.241076][ T5769] Bluetooth: hci5: command tx timeout [ 118.241113][ T5769] Bluetooth: hci3: command tx timeout [ 118.321072][ T52] Bluetooth: hci4: command tx timeout [ 118.378525][ T5759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.386333][ T5758] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.447739][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.447850][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.489908][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.523165][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.523275][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.618024][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.666848][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.704069][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.704182][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.804717][ T1347] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.804831][ T1347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.853119][ T5759] veth0_vlan: entered promiscuous mode [ 118.928828][ T5759] veth1_vlan: entered promiscuous mode [ 119.052101][ T5762] veth0_vlan: entered promiscuous mode [ 119.096848][ T5762] veth1_vlan: entered promiscuous mode [ 119.213215][ T5759] veth0_macvtap: entered promiscuous mode [ 119.257486][ T5759] veth1_macvtap: entered promiscuous mode [ 119.324834][ T5762] veth0_macvtap: entered promiscuous mode [ 119.367780][ T5762] veth1_macvtap: entered promiscuous mode [ 119.414812][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.479951][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.534402][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.605994][ T1347] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.612749][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.744088][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.754818][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.761386][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.761522][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.761664][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.761786][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.761896][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.761994][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.140336][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.140380][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.378585][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.378618][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.521706][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.521731][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.529671][ T5758] 8021q: adding VLAN 0 to HW filter on device batadv0 2026/09/25 13:46:28 executed programs: 10 [ 120.598240][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.627573][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.627597][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.898361][ T5764] veth0_vlan: entered promiscuous mode [ 120.915700][ T5758] veth0_vlan: entered promiscuous mode [ 120.995197][ T5766] veth0_vlan: entered promiscuous mode [ 121.007321][ T5764] veth1_vlan: entered promiscuous mode [ 121.048516][ T5758] veth1_vlan: entered promiscuous mode [ 121.103066][ T5766] veth1_vlan: entered promiscuous mode [ 121.283023][ T5764] veth0_macvtap: entered promiscuous mode [ 121.346459][ T5764] veth1_macvtap: entered promiscuous mode [ 121.377350][ T5758] veth0_macvtap: entered promiscuous mode [ 121.416031][ T5766] veth0_macvtap: entered promiscuous mode [ 121.437749][ T5758] veth1_macvtap: entered promiscuous mode [ 121.478569][ T5766] veth1_macvtap: entered promiscuous mode [ 121.500243][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.594484][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.670386][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.695529][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.735798][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.773167][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.822151][ T144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.824100][ T1347] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.009293][ T144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.009347][ T144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.009388][ T144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.009426][ T144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.009466][ T144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.009505][ T144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.009544][ T144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.009582][ T144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.009619][ T144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.009656][ T144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.333650][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.333675][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.448105][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.448128][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.588532][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.588556][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.739999][ T1347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.740022][ T1347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.899367][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.899400][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.030244][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.030268][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/25 13:46:33 executed programs: 178 2026/09/25 13:46:38 executed programs: 438 [ 131.209958][ T6463] ================================================================== [ 131.209975][ T6463] BUG: KASAN: slab-use-after-free in flow_block_cb_setup_simple+0x1ca/0x750 [ 131.210031][ T6463] Read of size 8 at addr ffff888032a2c520 by task syz.1.470/6463 [ 131.210049][ T6463] [ 131.210069][ T6463] CPU: 0 UID: 0 PID: 6463 Comm: syz.1.470 Not tainted syzkaller #0 PREEMPT(full) [ 131.210109][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 131.210138][ T6463] Call Trace: [ 131.210151][ T6463] [ 131.210160][ T6463] dump_stack_lvl+0xe8/0x150 [ 131.210193][ T6463] print_address_description+0x55/0x1e0 [ 131.210223][ T6463] ? flow_block_cb_setup_simple+0x1ca/0x750 [ 131.210249][ T6463] print_report+0x58/0x70 [ 131.210276][ T6463] kasan_report+0x117/0x150 [ 131.210304][ T6463] ? flow_block_cb_setup_simple+0x1ca/0x750 [ 131.210336][ T6463] ? __pfx_nsim_setup_tc_block_cb+0x10/0x10 [ 131.210365][ T6463] flow_block_cb_setup_simple+0x1ca/0x750 [ 131.210395][ T6463] nft_chain_offload_cmd+0x2b1/0x650 [ 131.210420][ T6463] ? __pfx_nft_chain_offload_cmd+0x10/0x10 [ 131.210446][ T6463] ? __lock_acquire+0x747/0x2de0 [ 131.210471][ T6463] ? __lock_acquire+0x747/0x2de0 [ 131.210504][ T6463] ? nft_pernet+0x45/0x270 [ 131.210527][ T6463] ? nft_pernet+0x45/0x270 [ 131.210546][ T6463] ? nft_pernet+0x45/0x270 [ 131.210569][ T6463] nft_flow_rule_offload_commit+0x8c9/0x1d40 [ 131.210597][ T6463] ? __pfx_nft_flow_rule_offload_commit+0x10/0x10 [ 131.210620][ T6463] ? is_bpf_text_address+0x292/0x2b0 [ 131.210648][ T6463] ? is_bpf_text_address+0x26/0x2b0 [ 131.210676][ T6463] ? kernel_text_address+0xa5/0xe0 [ 131.210701][ T6463] ? __kernel_text_address+0xd/0x30 [ 131.210725][ T6463] ? unwind_get_return_address+0x4d/0x90 [ 131.210750][ T6463] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 131.210772][ T6463] ? arch_stack_walk+0xfb/0x150 [ 131.210802][ T6463] ? stack_trace_save+0xa9/0x100 [ 131.210822][ T6463] ? __pfx_stack_trace_save+0x10/0x10 [ 131.210843][ T6463] ? stack_depot_save_flags+0x33/0x7f0 [ 131.210872][ T6463] ? kasan_save_track+0x4f/0x80 [ 131.210893][ T6463] ? kasan_save_track+0x3e/0x80 [ 131.210915][ T6463] ? __kasan_kmalloc+0x93/0xb0 [ 131.210938][ T6463] ? __kvmalloc_node_noprof+0x50f/0x820 [ 131.210960][ T6463] ? nf_tables_commit+0xc31/0xad60 [ 131.210994][ T6463] ? nfnetlink_rcv+0x1caf/0x28c0 [ 131.211023][ T6463] ? netlink_unicast+0x7bd/0x940 [ 131.211052][ T6463] ? netlink_sendmsg+0x813/0xb40 [ 131.211072][ T6463] ? sock_sendmsg_nosec+0x13a/0x180 [ 131.211094][ T6463] ? ____sys_sendmsg+0x54e/0x850 [ 131.211121][ T6463] ? ___sys_sendmsg+0x2a5/0x360 [ 131.211149][ T6463] ? __x64_sys_sendmsg+0x1b1/0x290 [ 131.211178][ T6463] ? do_syscall_64+0x166/0x520 [ 131.211207][ T6463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.211248][ T6463] ? nf_tables_commit+0xc31/0xad60 [ 131.211275][ T6463] ? rcu_is_watching+0x16/0xb0 [ 131.211299][ T6463] ? nf_tables_commit+0xc31/0xad60 [ 131.211326][ T6463] ? trace_kmalloc+0x2a/0xf0 [ 131.211347][ T6463] ? nf_tables_commit+0xc31/0xad60 [ 131.211375][ T6463] ? __kvmalloc_node_noprof+0x52f/0x820 [ 131.211399][ T6463] ? __kvmalloc_node_noprof+0x345/0x820 [ 131.211422][ T6463] ? nf_tables_commit+0xc31/0xad60 [ 131.211448][ T6463] ? nf_tables_commit+0xc31/0xad60 [ 131.211475][ T6463] ? nf_tables_commit+0xe52/0xad60 [ 131.211506][ T6463] nf_tables_commit+0x1165/0xad60 [ 131.211547][ T6463] ? do_raw_spin_unlock+0xf5/0x200 [ 131.211579][ T6463] ? __pfx_nf_tables_commit+0x10/0x10 [ 131.211606][ T6463] ? __free_frozen_pages+0x7ed/0xd90 [ 131.211644][ T6463] ? nf_tables_newrule+0x258d/0x28a0 [ 131.211682][ T6463] ? __pfx_nf_tables_newrule+0x10/0x10 [ 131.211712][ T6463] ? lock_acquire+0x115/0x350 [ 131.211744][ T6463] nfnetlink_rcv+0x1caf/0x28c0 [ 131.211794][ T6463] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 131.211848][ T6463] ? skb_clone+0x246/0x3a0 [ 131.211886][ T6463] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.211906][ T6463] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.211929][ T6463] netlink_unicast+0x7bd/0x940 [ 131.211966][ T6463] netlink_sendmsg+0x813/0xb40 [ 131.212000][ T6463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.212027][ T6463] ? apparmor_socket_sendmsg+0x98/0x360 [ 131.212053][ T6463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.212074][ T6463] sock_sendmsg_nosec+0x13a/0x180 [ 131.212097][ T6463] ____sys_sendmsg+0x54e/0x850 [ 131.212130][ T6463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.212165][ T6463] ? import_iovec+0x73/0xa0 [ 131.212194][ T6463] ___sys_sendmsg+0x2a5/0x360 [ 131.212227][ T6463] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.212259][ T6463] ? futex_wake+0x522/0x5f0 [ 131.212309][ T6463] ? __pfx_do_futex+0x10/0x10 [ 131.212339][ T6463] __x64_sys_sendmsg+0x1b1/0x290 [ 131.212371][ T6463] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 131.212413][ T6463] do_syscall_64+0x166/0x520 [ 131.212442][ T6463] ? trace_irq_disable+0x3b/0x140 [ 131.212465][ T6463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.212486][ T6463] ? clear_bhb_loop+0x70/0xc0 [ 131.212512][ T6463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.212534][ T6463] RIP: 0033:0x7f880f59e159 [ 131.212563][ T6463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.212582][ T6463] RSP: 002b:00007ffe90ecefa8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.212611][ T6463] RAX: ffffffffffffffda RBX: 00007f880f825fa0 RCX: 00007f880f59e159 [ 131.212628][ T6463] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 131.212642][ T6463] RBP: 00007f880f63506b R08: 0000000000000000 R09: 0000000000000000 [ 131.212656][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.212669][ T6463] R13: 00007f880f825fac R14: 00007f880f825fa0 R15: 00007f880f825fa0 [ 131.212694][ T6463] [ 131.212703][ T6463] [ 131.212708][ T6463] Allocated by task 6461: [ 131.212718][ T6463] kasan_save_track+0x3e/0x80 [ 131.212739][ T6463] __kasan_kmalloc+0x93/0xb0 [ 131.212761][ T6463] __kmalloc_cache_noprof+0x321/0x600 [ 131.212780][ T6463] flow_block_cb_setup_simple+0x29f/0x750 [ 131.212805][ T6463] nft_chain_offload_cmd+0x2b1/0x650 [ 131.212825][ T6463] nft_flow_rule_offload_commit+0x8c9/0x1d40 [ 131.212845][ T6463] nf_tables_commit+0x1165/0xad60 [ 131.212871][ T6463] nfnetlink_rcv+0x1caf/0x28c0 [ 131.212899][ T6463] netlink_unicast+0x7bd/0x940 [ 131.212927][ T6463] netlink_sendmsg+0x813/0xb40 [ 131.212945][ T6463] sock_sendmsg_nosec+0x13a/0x180 [ 131.212964][ T6463] ____sys_sendmsg+0x54e/0x850 [ 131.212997][ T6463] ___sys_sendmsg+0x2a5/0x360 [ 131.213022][ T6463] __x64_sys_sendmsg+0x1b1/0x290 [ 131.213050][ T6463] do_syscall_64+0x166/0x520 [ 131.213077][ T6463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.213096][ T6463] [ 131.213102][ T6463] Freed by task 6461: [ 131.213111][ T6463] kasan_save_track+0x3e/0x80 [ 131.213131][ T6463] kasan_save_free_info+0x40/0x50 [ 131.213161][ T6463] __kasan_slab_free+0x5c/0x80 [ 131.213182][ T6463] kfree+0x1c5/0x650 [ 131.213209][ T6463] nft_flow_offload_unbind+0x403/0x4b0 [ 131.213229][ T6463] nft_chain_offload_cmd+0x2e3/0x650 [ 131.213249][ T6463] nft_flow_rule_offload_commit+0x17d5/0x1d40 [ 131.213269][ T6463] nf_tables_commit+0x1165/0xad60 [ 131.213294][ T6463] nfnetlink_rcv+0x1caf/0x28c0 [ 131.213322][ T6463] netlink_unicast+0x7bd/0x940 [ 131.213351][ T6463] netlink_sendmsg+0x813/0xb40 [ 131.213369][ T6463] sock_sendmsg_nosec+0x13a/0x180 [ 131.213388][ T6463] ____sys_sendmsg+0x54e/0x850 [ 131.213414][ T6463] ___sys_sendmsg+0x2a5/0x360 [ 131.213440][ T6463] __x64_sys_sendmsg+0x1b1/0x290 [ 131.213467][ T6463] do_syscall_64+0x166/0x520 [ 131.213494][ T6463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.213514][ T6463] [ 131.213520][ T6463] The buggy address belongs to the object at ffff888032a2c500 [ 131.213520][ T6463] which belongs to the cache kmalloc-192 of size 192 [ 131.213537][ T6463] The buggy address is located 32 bytes inside of [ 131.213537][ T6463] freed 192-byte region [ffff888032a2c500, ffff888032a2c5c0) [ 131.213556][ T6463] [ 131.213561][ T6463] The buggy address belongs to the physical page: [ 131.213581][ T6463] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32a2c [ 131.213600][ T6463] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.213627][ T6463] page_type: f5(slab) [ 131.213646][ T6463] raw: 00fff00000000000 ffff88801b0413c0 dead000000000100 dead000000000122 [ 131.213665][ T6463] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 131.213676][ T6463] page dumped because: kasan: bad access detected [ 131.213692][ T6463] page_owner tracks the page as allocated [ 131.213700][ T6463] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 28827628020 [ 131.213731][ T6463] post_alloc_hook+0x1f9/0x250 [ 131.213761][ T6463] get_page_from_freelist+0x2209/0x2280 [ 131.213782][ T6463] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 131.213804][ T6463] allocate_slab+0x7d/0x620 [ 131.213829][ T6463] refill_objects+0x2d5/0x350 [ 131.213855][ T6463] __pcs_replace_empty_main+0x2c8/0x6c0 [ 131.213880][ T6463] __kmalloc_noprof+0x47b/0x720 [ 131.213898][ T6463] __register_sysctl_table+0xc02/0x1370 [ 131.213918][ T6463] __addrconf_sysctl_register+0x31c/0x4b0 [ 131.213944][ T6463] addrconf_sysctl_register+0x168/0x1c0 [ 131.213971][ T6463] ipv6_add_dev+0xd5f/0x1400 [ 131.213996][ T6463] addrconf_notify+0x771/0x1050 [ 131.214021][ T6463] call_netdevice_register_net_notifiers+0x133/0x750 [ 131.214047][ T6463] register_netdevice_notifier+0x96/0x160 [ 131.214070][ T6463] addrconf_init+0xad/0x170 [ 131.214099][ T6463] inet6_init+0x228/0x3f0 [ 131.214127][ T6463] page_owner free stack trace missing [ 131.214135][ T6463] [ 131.214140][ T6463] Memory state around the buggy address: [ 131.214151][ T6463] ffff888032a2c400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 131.214165][ T6463] ffff888032a2c480: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 131.214180][ T6463] >ffff888032a2c500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.214190][ T6463] ^ [ 131.214201][ T6463] ffff888032a2c580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 131.214215][ T6463] ffff888032a2c600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 131.214226][ T6463] ================================================================== [ 131.265274][ T6463] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 133.392295][ T6463] Shutting down cpus with NMI [ 133.398059][ T6463] Kernel Offset: disabled [ 133.402410][ T6463] Rebooting in 86400 seconds..