Warning: Permanently added '10.128.0.102' (ED25519) to the list of known hosts. 2026/07/28 00:04:39 parsed 1 programs 2026/07/28 00:04:39 serving rpc on tcp://34169 [ 82.508312][ T5631] cgroup: Unknown subsys name 'net' [ 82.645664][ T5631] cgroup: Unknown subsys name 'cpuset' [ 82.654986][ T5631] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.175272][ T5631] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.025683][ T29] cfg80211: failed to load regulatory.db [ 87.605060][ T5652] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.985043][ T5706] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.995000][ T5706] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.006250][ T5706] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.014788][ T5706] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.023226][ T5706] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.620997][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.670670][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.789594][ T5654] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.806586][ T5654] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.814191][ T5654] bridge_slave_0: entered allmulticast mode [ 89.822675][ T5654] bridge_slave_0: entered promiscuous mode [ 89.896712][ T5654] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.906039][ T5654] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.914207][ T5654] bridge_slave_1: entered allmulticast mode [ 89.924759][ T5654] bridge_slave_1: entered promiscuous mode [ 90.163724][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.189699][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.328350][ T5654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.387493][ T5654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.613477][ T5654] team0: Port device team_slave_0 added [ 90.623152][ T5654] team0: Port device team_slave_1 added [ 90.786136][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.795258][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.826223][ T5654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.950363][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.958341][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.985643][ T5654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.063066][ T5706] Bluetooth: hci0: command tx timeout [ 91.076325][ T5654] hsr_slave_0: entered promiscuous mode [ 91.083838][ T5654] hsr_slave_1: entered promiscuous mode [ 91.318679][ T5654] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.332340][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.340391][ T5654] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.351579][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.359877][ T5654] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.370190][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.379634][ T5654] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.390630][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.475535][ T5654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.499654][ T5654] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.515180][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.522759][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.540433][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.547680][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.944350][ T5654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.993131][ T5654] veth0_vlan: entered promiscuous mode [ 92.007690][ T5654] veth1_vlan: entered promiscuous mode [ 92.043563][ T5654] veth0_macvtap: entered promiscuous mode [ 92.054856][ T5654] veth1_macvtap: entered promiscuous mode [ 92.076346][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.091067][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.107941][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.118362][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.128599][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.137474][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/07/28 00:04:53 executed programs: 0 [ 92.369991][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.386571][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.399492][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.412757][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.422149][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.540570][ T5706] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.566635][ T4937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.574198][ T4937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.583516][ T4937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.584467][ T5772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.592354][ T4937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.598491][ T5772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.606545][ T4937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.617319][ T5772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.633364][ T4937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.727628][ T5706] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.737771][ T5706] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.749642][ T5706] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.759117][ T5706] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.769899][ T5706] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.817677][ T5772] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.827026][ T5772] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.837698][ T5772] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.843343][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.846627][ T5772] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.855818][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.860841][ T5772] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.869162][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.885319][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.895404][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.277421][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.096552][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.501300][ T51] Bluetooth: hci1: command tx timeout [ 94.661312][ T51] Bluetooth: hci0: command tx timeout [ 94.741374][ T51] Bluetooth: hci2: command tx timeout [ 94.822922][ T51] Bluetooth: hci3: command tx timeout [ 94.901280][ T51] Bluetooth: hci5: command tx timeout [ 94.981337][ T51] Bluetooth: hci4: command tx timeout [ 95.205753][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.213049][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.220281][ T5780] bridge_slave_0: entered allmulticast mode [ 95.229204][ T5780] bridge_slave_0: entered promiscuous mode [ 95.297038][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.316481][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.324089][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.331497][ T5780] bridge_slave_1: entered allmulticast mode [ 95.339191][ T5780] bridge_slave_1: entered promiscuous mode [ 95.439968][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.464517][ T5760] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.471876][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.479292][ T5760] bridge_slave_0: entered allmulticast mode [ 95.487193][ T5760] bridge_slave_0: entered promiscuous mode [ 95.496590][ T5760] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.503843][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.511029][ T5760] bridge_slave_1: entered allmulticast mode [ 95.518846][ T5760] bridge_slave_1: entered promiscuous mode [ 95.601002][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.608879][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.616139][ T5764] bridge_slave_0: entered allmulticast mode [ 95.624025][ T5764] bridge_slave_0: entered promiscuous mode [ 95.640769][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.650124][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.657424][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.664801][ T5767] bridge_slave_0: entered allmulticast mode [ 95.672707][ T5767] bridge_slave_0: entered promiscuous mode [ 95.712250][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.719528][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.726993][ T5764] bridge_slave_1: entered allmulticast mode [ 95.734772][ T5764] bridge_slave_1: entered promiscuous mode [ 95.751655][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.762445][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.769562][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.776995][ T5767] bridge_slave_1: entered allmulticast mode [ 95.784772][ T5767] bridge_slave_1: entered promiscuous mode [ 95.822432][ T5760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.893943][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.901788][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.908974][ T5778] bridge_slave_0: entered allmulticast mode [ 95.917507][ T5778] bridge_slave_0: entered promiscuous mode [ 95.927895][ T5760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.990217][ T5780] team0: Port device team_slave_0 added [ 96.012513][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.024935][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.034609][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.042739][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.049926][ T5778] bridge_slave_1: entered allmulticast mode [ 96.057680][ T5778] bridge_slave_1: entered promiscuous mode [ 96.078642][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.091826][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.102847][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.109999][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.117901][ T5773] bridge_slave_0: entered allmulticast mode [ 96.125679][ T5773] bridge_slave_0: entered promiscuous mode [ 96.135137][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.142311][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.149461][ T5773] bridge_slave_1: entered allmulticast mode [ 96.157050][ T5773] bridge_slave_1: entered promiscuous mode [ 96.167792][ T5780] team0: Port device team_slave_1 added [ 96.303996][ T5767] team0: Port device team_slave_0 added [ 96.325170][ T5760] team0: Port device team_slave_0 added [ 96.333660][ T5764] team0: Port device team_slave_0 added [ 96.354954][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.362203][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.388186][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.401816][ T5767] team0: Port device team_slave_1 added [ 96.410159][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.423335][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.434768][ T5760] team0: Port device team_slave_1 added [ 96.442962][ T5764] team0: Port device team_slave_1 added [ 96.460689][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.470874][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.478317][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.506364][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.581842][ T51] Bluetooth: hci1: command tx timeout [ 96.595571][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.625785][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.633108][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.659807][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.702020][ T37] bridge_slave_1: left allmulticast mode [ 96.707750][ T37] bridge_slave_1: left promiscuous mode [ 96.714130][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.725844][ T37] bridge_slave_0: left allmulticast mode [ 96.732071][ T37] bridge_slave_0: left promiscuous mode [ 96.738117][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.746189][ T51] Bluetooth: hci0: command tx timeout [ 96.821690][ T51] Bluetooth: hci2: command tx timeout [ 96.901712][ T51] Bluetooth: hci3: command tx timeout [ 96.982338][ T51] Bluetooth: hci5: command tx timeout [ 97.037869][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.050063][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.060235][ T37] bond0 (unregistering): Released all slaves [ 97.072286][ T51] Bluetooth: hci4: command tx timeout [ 97.109708][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.118208][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.144688][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.211635][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.218609][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.245405][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.259131][ T5778] team0: Port device team_slave_0 added [ 97.265867][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.272859][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.299068][ T5760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.314686][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.321661][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.347826][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.368638][ T5773] team0: Port device team_slave_0 added [ 97.412071][ T5778] team0: Port device team_slave_1 added [ 97.433852][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.440840][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.468091][ T5760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.508401][ T5773] team0: Port device team_slave_1 added [ 97.520724][ T5780] hsr_slave_0: entered promiscuous mode [ 97.529030][ T5780] hsr_slave_1: entered promiscuous mode [ 97.535366][ T5780] debugfs: 'hsr0' already exists in 'hsr' [ 97.541146][ T5780] Cannot create hsr debugfs directory [ 97.582593][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.589835][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.616299][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.629590][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.636603][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.662552][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.707490][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.714481][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.740668][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.753610][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.760568][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.787052][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.988173][ T5767] hsr_slave_0: entered promiscuous mode [ 97.996105][ T5767] hsr_slave_1: entered promiscuous mode [ 98.002676][ T5767] debugfs: 'hsr0' already exists in 'hsr' [ 98.008432][ T5767] Cannot create hsr debugfs directory [ 98.025708][ T5760] hsr_slave_0: entered promiscuous mode [ 98.033713][ T5760] hsr_slave_1: entered promiscuous mode [ 98.040220][ T5760] debugfs: 'hsr0' already exists in 'hsr' [ 98.046232][ T5760] Cannot create hsr debugfs directory [ 98.077515][ T5764] hsr_slave_0: entered promiscuous mode [ 98.085765][ T5764] hsr_slave_1: entered promiscuous mode [ 98.094014][ T5764] debugfs: 'hsr0' already exists in 'hsr' [ 98.099766][ T5764] Cannot create hsr debugfs directory [ 98.216319][ T5778] hsr_slave_0: entered promiscuous mode [ 98.223318][ T5778] hsr_slave_1: entered promiscuous mode [ 98.229907][ T5778] debugfs: 'hsr0' already exists in 'hsr' [ 98.236119][ T5778] Cannot create hsr debugfs directory [ 98.315213][ T5773] hsr_slave_0: entered promiscuous mode [ 98.322915][ T5773] hsr_slave_1: entered promiscuous mode [ 98.329438][ T5773] debugfs: 'hsr0' already exists in 'hsr' [ 98.335458][ T5773] Cannot create hsr debugfs directory [ 98.387861][ T37] hsr_slave_0: left promiscuous mode [ 98.394301][ T37] hsr_slave_1: left promiscuous mode [ 98.400184][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.408421][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.416557][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.425747][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.439246][ T37] veth1_macvtap: left promiscuous mode [ 98.445274][ T37] veth0_macvtap: left promiscuous mode [ 98.450804][ T37] veth1_vlan: left promiscuous mode [ 98.456179][ T37] veth0_vlan: left promiscuous mode [ 98.661240][ T51] Bluetooth: hci1: command tx timeout [ 98.696816][ T37] team0 (unregistering): Port device team_slave_1 removed [ 98.719623][ T37] team0 (unregistering): Port device team_slave_0 removed [ 98.821309][ T51] Bluetooth: hci0: command tx timeout [ 98.887641][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 98.901267][ T51] Bluetooth: hci2: command tx timeout [ 98.982489][ T51] Bluetooth: hci3: command tx timeout [ 99.061779][ T51] Bluetooth: hci5: command tx timeout [ 99.141431][ T51] Bluetooth: hci4: command tx timeout [ 99.614673][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.642291][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.653295][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.669052][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.679282][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.693816][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.704843][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.717706][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.830932][ T5780] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.845450][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.853799][ T5780] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.872399][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.906788][ T5780] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.919071][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.927178][ T5780] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.938707][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.999117][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 100.040308][ T5760] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.052407][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.069674][ T5760] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.079695][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.087626][ T5760] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.098007][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.106999][ T5760] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.120116][ T5760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.230119][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.264721][ T5778] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.277087][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.303519][ T5778] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.316231][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.324940][ T5778] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.336396][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.357639][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.368725][ T5778] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.383259][ T5778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.456410][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.463595][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.487764][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.494917][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.574699][ T5764] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.588805][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.617078][ T5764] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.628610][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.637961][ T5764] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.648427][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.715004][ T5764] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.743877][ T51] Bluetooth: hci1: command tx timeout [ 100.749868][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.911587][ T51] Bluetooth: hci0: command tx timeout [ 100.965998][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.980158][ T5760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.987084][ T51] Bluetooth: hci2: command tx timeout [ 101.061626][ T51] Bluetooth: hci3: command tx timeout [ 101.113075][ T5760] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.127697][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.141391][ T51] Bluetooth: hci5: command tx timeout [ 101.154360][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.161521][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.231368][ T51] Bluetooth: hci4: command tx timeout [ 101.236184][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.243916][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.308668][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.315843][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.406674][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.413860][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.444255][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.599998][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.619009][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.643988][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.658750][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.686487][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.706227][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.726626][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.757744][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.783997][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.813674][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.837850][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.845023][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.915110][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.922270][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.003815][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.050515][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.128179][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.135346][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.191133][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.198323][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.506039][ T5767] veth0_vlan: entered promiscuous mode [ 102.578784][ T5767] veth1_vlan: entered promiscuous mode [ 102.705748][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.784266][ T5767] veth0_macvtap: entered promiscuous mode [ 102.839238][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.887989][ T5767] veth1_macvtap: entered promiscuous mode [ 102.958141][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.965360][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.036011][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.043222][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.088887][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.152981][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.210813][ T1163] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.235419][ T1163] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.268760][ T1163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.356760][ T5760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.374418][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.522880][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.798134][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.817596][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.902908][ T5760] veth0_vlan: entered promiscuous mode [ 103.964363][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.988527][ T5760] veth1_vlan: entered promiscuous mode [ 103.995977][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.043632][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 2026/07/28 00:05:05 executed programs: 12 [ 104.199365][ T6051] vhci_hcd vhci_hcd.0: remove, state 4 [ 104.222216][ T6051] usb usb34: USB disconnect, device number 1 [ 104.242361][ T5760] veth0_macvtap: entered promiscuous mode [ 104.310763][ T5760] veth1_macvtap: entered promiscuous mode [ 104.360274][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.459551][ T147] vhci_hcd vhci_hcd.0: stop threads [ 104.469861][ T147] vhci_hcd vhci_hcd.0: release socket [ 104.487840][ T147] vhci_hcd vhci_hcd.0: disconnect device [ 104.489045][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.507642][ T147] vhci_hcd vhci_hcd.0: stop threads [ 104.524123][ T147] vhci_hcd vhci_hcd.0: release socket [ 104.536231][ T147] vhci_hcd vhci_hcd.0: disconnect device [ 104.551823][ T147] vhci_hcd vhci_hcd.0: stop threads [ 104.569603][ T147] vhci_hcd vhci_hcd.0: release socket [ 104.579176][ T147] vhci_hcd vhci_hcd.0: disconnect device [ 104.599258][ T147] vhci_hcd vhci_hcd.0: stop threads [ 104.605055][ T147] vhci_hcd vhci_hcd.0: release socket [ 104.607043][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.610773][ T147] vhci_hcd vhci_hcd.0: disconnect device [ 104.628480][ T147] vhci_hcd vhci_hcd.0: stop threads [ 104.634550][ T147] vhci_hcd vhci_hcd.0: release socket [ 104.640000][ T147] vhci_hcd vhci_hcd.0: disconnect device [ 104.646012][ T147] vhci_hcd vhci_hcd.0: stop threads [ 104.675296][ T147] vhci_hcd vhci_hcd.0: release socket [ 104.687475][ T147] vhci_hcd vhci_hcd.0: disconnect device [ 104.702149][ T147] vhci_hcd vhci_hcd.0: stop threads [ 104.711054][ T1123] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.733056][ T147] vhci_hcd vhci_hcd.0: release socket [ 104.746684][ T147] vhci_hcd vhci_hcd.0: disconnect device [ 104.764126][ T1123] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.769765][ T147] vhci_hcd vhci_hcd.0: stop threads [ 104.791860][ T1123] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.808339][ T147] vhci_hcd vhci_hcd.0: release socket [ 104.827783][ T147] vhci_hcd vhci_hcd.0: disconnect device [ 104.828269][ T1123] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.858386][ T6051] vhci_hcd vhci_hcd.0: USB bus 34 deregistered [ 104.879361][ T5764] veth0_vlan: entered promiscuous mode [ 104.893148][ T5780] veth0_vlan: entered promiscuous mode [ 104.893634][ T6051] vhci_hcd vhci_hcd.0: remove, state 4 [ 104.909134][ T6051] usb usb33: USB disconnect, device number 1 [ 104.993130][ T5764] veth1_vlan: entered promiscuous mode [ 105.011722][ T37] vhci_hcd vhci_hcd.0: stop threads [ 105.022742][ T6051] vhci_hcd vhci_hcd.0: USB bus 33 deregistered [ 105.029439][ T5780] veth1_vlan: entered promiscuous mode [ 105.042099][ T37] vhci_hcd vhci_hcd.0: release socket [ 105.070810][ T37] ================================================================== [ 105.078883][ T37] BUG: KASAN: slab-use-after-free in vhci_cleanup_unlink_list+0x452/0x460 [ 105.078929][ T37] Read of size 4 at addr ffff88802664c450 by task kworker/u8:2/37 [ 105.078948][ T37] [ 105.078960][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 105.078985][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 105.079001][ T37] Workqueue: usbip_event event_handler [ 105.079031][ T37] Call Trace: [ 105.079039][ T37] [ 105.079048][ T37] dump_stack_lvl+0xe8/0x150 [ 105.079085][ T37] print_address_description+0x55/0x1e0 [ 105.079121][ T37] ? vhci_cleanup_unlink_list+0x452/0x460 [ 105.079152][ T37] print_report+0x58/0x70 [ 105.079181][ T37] kasan_report+0x117/0x150 [ 105.079220][ T37] ? vhci_cleanup_unlink_list+0x452/0x460 [ 105.079258][ T37] vhci_cleanup_unlink_list+0x452/0x460 [ 105.079290][ T37] ? kasan_quarantine_put+0xbb/0x1f0 [ 105.079326][ T37] vhci_shutdown_connection+0x2af/0x650 [ 105.079362][ T37] event_handler+0x2a4/0x4b0 [ 105.079391][ T37] ? process_scheduled_works+0xa20/0x14e0 [ 105.079420][ T37] process_scheduled_works+0xa8e/0x14e0 [ 105.079464][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 105.079495][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 105.079523][ T37] ? assign_work+0x3cf/0x5d0 [ 105.079553][ T37] worker_thread+0xa47/0xfb0 [ 105.079583][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 105.079616][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 105.079643][ T37] ? __kthread_parkme+0x71/0x1f0 [ 105.079680][ T37] kthread+0x388/0x470 [ 105.079714][ T37] ? __pfx_worker_thread+0x10/0x10 [ 105.079741][ T37] ? __pfx_kthread+0x10/0x10 [ 105.079776][ T37] ret_from_fork+0x514/0xb70 [ 105.079813][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 105.079848][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 105.079875][ T37] ? __switch_to+0xc89/0x1420 [ 105.079911][ T37] ? __pfx_kthread+0x10/0x10 [ 105.079946][ T37] ret_from_fork_asm+0x1a/0x30 [ 105.079978][ T37] [ 105.079986][ T37] [ 105.275678][ T37] Allocated by task 1: [ 105.279729][ T37] kasan_save_track+0x3e/0x80 [ 105.284403][ T37] __kasan_kmalloc+0x93/0xb0 [ 105.288993][ T37] __kmalloc_noprof+0x375/0x720 [ 105.293836][ T37] __usb_create_hcd+0x67/0x900 [ 105.298616][ T37] vhci_hcd_probe+0x104/0x3e0 [ 105.303284][ T37] platform_probe+0xf9/0x190 [ 105.307862][ T37] really_probe+0x254/0xae0 [ 105.312359][ T37] __driver_probe_device+0x1e8/0x360 [ 105.317632][ T37] driver_probe_device+0x4f/0x240 [ 105.322645][ T37] __device_attach_driver+0x270/0x410 [ 105.328008][ T37] bus_for_each_drv+0x258/0x2f0 [ 105.332854][ T37] __device_attach+0x2c4/0x450 [ 105.337607][ T37] device_initial_probe+0xa1/0xd0 [ 105.342617][ T37] bus_probe_device+0x12a/0x220 [ 105.347463][ T37] device_add+0x7d7/0xb80 [ 105.351775][ T37] platform_device_add+0x4bd/0x860 [ 105.356868][ T37] platform_device_register_full+0x62d/0x710 [ 105.362834][ T37] vhci_hcd_init+0x227/0x360 [ 105.367411][ T37] do_one_initcall+0x250/0x870 [ 105.372170][ T37] do_initcall_level+0x10a/0x1a0 [ 105.377101][ T37] do_initcalls+0x59/0xa0 [ 105.381423][ T37] kernel_init_freeable+0x29d/0x3e0 [ 105.386622][ T37] kernel_init+0x1d/0x1d0 [ 105.390943][ T37] ret_from_fork+0x514/0xb70 [ 105.395526][ T37] ret_from_fork_asm+0x1a/0x30 [ 105.400278][ T37] [ 105.402579][ T37] Freed by task 6051: [ 105.406536][ T37] kasan_save_track+0x3e/0x80 [ 105.411207][ T37] kasan_save_free_info+0x40/0x50 [ 105.416229][ T37] __kasan_slab_free+0x5c/0x80 [ 105.420983][ T37] kfree+0x1c5/0x640 [ 105.424864][ T37] vhci_hcd_remove+0xe4/0x110 [ 105.429536][ T37] device_release_driver_internal+0x48b/0x880 [ 105.435592][ T37] unbind_store+0x1a1/0x1d0 [ 105.440079][ T37] kernfs_fop_write_iter+0x3a4/0x540 [ 105.445350][ T37] vfs_write+0x612/0xba0 [ 105.449575][ T37] ksys_write+0x150/0x270 [ 105.453886][ T37] do_syscall_64+0x174/0x580 [ 105.458469][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.464346][ T37] [ 105.466649][ T37] Last potentially related work creation: [ 105.472341][ T37] kasan_save_stack+0x3e/0x60 [ 105.477009][ T37] kasan_record_aux_stack+0xbd/0xd0 [ 105.482194][ T37] insert_work+0x3d/0x330 [ 105.486536][ T37] __queue_work+0xcd8/0x10a0 [ 105.491117][ T37] queue_work_on+0x106/0x1d0 [ 105.495697][ T37] unlink1+0x344/0x3e0 [ 105.499753][ T37] usb_hcd_unlink_urb+0xe6/0x1e0 [ 105.504678][ T37] usb_kill_urb+0x10b/0x2f0 [ 105.509173][ T37] hub_quiesce+0x211/0x330 [ 105.513570][ T37] hub_suspend+0x904/0xad0 [ 105.517982][ T37] usb_suspend_both+0x285/0x1040 [ 105.522912][ T37] usb_runtime_suspend+0x58/0x110 [ 105.527924][ T37] __rpm_callback+0x2c7/0x950 [ 105.532593][ T37] rpm_suspend+0x8a0/0x17b0 [ 105.537081][ T37] __pm_runtime_suspend+0x12f/0x1a0 [ 105.542271][ T37] usb_new_device+0xadf/0x1620 [ 105.547029][ T37] register_root_hub+0x250/0x5c0 [ 105.551955][ T37] usb_add_hcd+0xac7/0xf80 [ 105.556361][ T37] vhci_hcd_probe+0x141/0x3e0 [ 105.561028][ T37] platform_probe+0xf9/0x190 [ 105.565604][ T37] really_probe+0x254/0xae0 [ 105.570096][ T37] __driver_probe_device+0x1e8/0x360 [ 105.575367][ T37] driver_probe_device+0x4f/0x240 [ 105.580382][ T37] __device_attach_driver+0x270/0x410 [ 105.585745][ T37] bus_for_each_drv+0x258/0x2f0 [ 105.590599][ T37] __device_attach+0x2c4/0x450 [ 105.595349][ T37] device_initial_probe+0xa1/0xd0 [ 105.600362][ T37] bus_probe_device+0x12a/0x220 [ 105.605207][ T37] device_add+0x7d7/0xb80 [ 105.609519][ T37] platform_device_add+0x4bd/0x860 [ 105.614610][ T37] platform_device_register_full+0x62d/0x710 [ 105.620576][ T37] vhci_hcd_init+0x227/0x360 [ 105.625149][ T37] do_one_initcall+0x250/0x870 [ 105.629912][ T37] do_initcall_level+0x10a/0x1a0 [ 105.634840][ T37] do_initcalls+0x59/0xa0 [ 105.639162][ T37] kernel_init_freeable+0x29d/0x3e0 [ 105.644351][ T37] kernel_init+0x1d/0x1d0 [ 105.648674][ T37] ret_from_fork+0x514/0xb70 [ 105.653256][ T37] ret_from_fork_asm+0x1a/0x30 [ 105.658001][ T37] [ 105.660303][ T37] Second to last potentially related work creation: [ 105.666861][ T37] kasan_save_stack+0x3e/0x60 [ 105.671533][ T37] kasan_record_aux_stack+0xbd/0xd0 [ 105.676717][ T37] insert_work+0x3d/0x330 [ 105.681031][ T37] __queue_work+0xcd8/0x10a0 [ 105.685609][ T37] queue_work_on+0x106/0x1d0 [ 105.690188][ T37] usb_hcd_submit_urb+0xa3b/0x1b60 [ 105.695288][ T37] usb_start_wait_urb+0x13f/0x5b0 [ 105.700307][ T37] usb_control_msg+0x234/0x3e0 [ 105.705093][ T37] hub_ext_port_status+0x114/0x810 [ 105.710196][ T37] hub_activate+0x740/0x1b20 [ 105.714769][ T37] process_scheduled_works+0xa8e/0x14e0 [ 105.720302][ T37] worker_thread+0xa47/0xfb0 [ 105.724879][ T37] kthread+0x388/0x470 [ 105.728944][ T37] ret_from_fork+0x514/0xb70 [ 105.733524][ T37] ret_from_fork_asm+0x1a/0x30 [ 105.738268][ T37] [ 105.740577][ T37] The buggy address belongs to the object at ffff88802664c000 [ 105.740577][ T37] which belongs to the cache kmalloc-8k of size 8192 [ 105.754610][ T37] The buggy address is located 1104 bytes inside of [ 105.754610][ T37] freed 8192-byte region [ffff88802664c000, ffff88802664e000) [ 105.768562][ T37] [ 105.770866][ T37] The buggy address belongs to the physical page: [ 105.777254][ T37] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26648 [ 105.786001][ T37] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 105.794486][ T37] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 105.802015][ T37] page_type: f5(slab) [ 105.805986][ T37] raw: 00fff00000000040 ffff88801b005280 dead000000000122 0000000000000000 [ 105.814588][ T37] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 105.823156][ T37] head: 00fff00000000040 ffff88801b005280 dead000000000122 0000000000000000 [ 105.831813][ T37] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 105.840493][ T37] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 105.849146][ T37] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 105.857793][ T37] page dumped because: kasan: bad access detected [ 105.864182][ T37] page_owner tracks the page as allocated [ 105.869873][ T37] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5903042109, free_ts 0 [ 105.889488][ T37] post_alloc_hook+0x1f9/0x250 [ 105.894249][ T37] get_page_from_freelist+0x21fa/0x2270 [ 105.899793][ T37] __alloc_frozen_pages_noprof+0x18d/0x380 [ 105.905594][ T37] allocate_slab+0x79/0x5e0 [ 105.910087][ T37] refill_objects+0x2d5/0x350 [ 105.914749][ T37] __pcs_replace_empty_main+0x2bf/0x6b0 [ 105.920283][ T37] __kmalloc_noprof+0x485/0x720 [ 105.925126][ T37] scsi_host_alloc+0x30/0x11c0 [ 105.929884][ T37] virtscsi_probe+0x217/0x1180 [ 105.934645][ T37] virtio_dev_probe+0xdf6/0x10c0 [ 105.939573][ T37] really_probe+0x254/0xae0 [ 105.944066][ T37] __driver_probe_device+0x1e8/0x360 [ 105.949345][ T37] driver_probe_device+0x4f/0x240 [ 105.954360][ T37] __driver_attach+0x339/0x600 [ 105.959110][ T37] bus_for_each_dev+0x23b/0x2c0 [ 105.963954][ T37] bus_add_driver+0x345/0x670 [ 105.968625][ T37] page_owner free stack trace missing [ 105.973967][ T37] [ 105.976268][ T37] Memory state around the buggy address: [ 105.981874][ T37] ffff88802664c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.989920][ T37] ffff88802664c380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.997969][ T37] >ffff88802664c400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.006010][ T37] ^ [ 106.012663][ T37] ffff88802664c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.020707][ T37] ffff88802664c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 106.028743][ T37] ================================================================== [ 106.139729][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.170042][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.256496][ T37] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 106.263730][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 106.273009][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 106.283053][ T37] Workqueue: usbip_event event_handler [ 106.288513][ T37] Call Trace: [ 106.291774][ T37] [ 106.294688][ T37] vpanic+0x56c/0xa60 [ 106.298671][ T37] ? __pfx_vpanic+0x10/0x10 [ 106.303175][ T37] ? __pfx___schedule+0x10/0x10 [ 106.308020][ T37] panic+0xc5/0xd0 [ 106.311740][ T37] ? __pfx_panic+0x10/0x10 [ 106.316155][ T37] ? preempt_schedule_thunk+0x16/0x40 [ 106.321516][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.327143][ T37] ? vhci_cleanup_unlink_list+0x452/0x460 [ 106.332859][ T37] check_panic_on_warn+0x89/0xb0 [ 106.337802][ T37] ? vhci_cleanup_unlink_list+0x452/0x460 [ 106.343521][ T37] end_report+0x73/0x170 [ 106.347767][ T37] ? vhci_cleanup_unlink_list+0x452/0x460 [ 106.353480][ T37] kasan_report+0x128/0x150 [ 106.357991][ T37] ? vhci_cleanup_unlink_list+0x452/0x460 [ 106.363712][ T37] vhci_cleanup_unlink_list+0x452/0x460 [ 106.369255][ T37] ? kasan_quarantine_put+0xbb/0x1f0 [ 106.374537][ T37] vhci_shutdown_connection+0x2af/0x650 [ 106.380082][ T37] event_handler+0x2a4/0x4b0 [ 106.384666][ T37] ? process_scheduled_works+0xa20/0x14e0 [ 106.390380][ T37] process_scheduled_works+0xa8e/0x14e0 [ 106.395934][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 106.401910][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.407534][ T37] ? assign_work+0x3cf/0x5d0 [ 106.412118][ T37] worker_thread+0xa47/0xfb0 [ 106.416705][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.422334][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.427960][ T37] ? __kthread_parkme+0x71/0x1f0 [ 106.432896][ T37] kthread+0x388/0x470 [ 106.436967][ T37] ? __pfx_worker_thread+0x10/0x10 [ 106.442068][ T37] ? __pfx_kthread+0x10/0x10 [ 106.446656][ T37] ret_from_fork+0x514/0xb70 [ 106.451251][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 106.456368][ T37] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.461995][ T37] ? __switch_to+0xc89/0x1420 [ 106.466667][ T37] ? __pfx_kthread+0x10/0x10 [ 106.471257][ T37] ret_from_fork_asm+0x1a/0x30 [ 106.476019][ T37] [ 106.479236][ T37] Kernel Offset: disabled [ 106.483538][ T37] Rebooting in 86400 seconds..