Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. 2026/07/27 22:10:48 parsed 1 programs 2026/07/27 22:10:48 serving rpc on tcp://40913 [ 87.445841][ T5634] cgroup: Unknown subsys name 'net' [ 87.579268][ T5634] cgroup: Unknown subsys name 'cpuset' [ 87.588880][ T5634] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.104851][ T5634] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.150581][ T29] cfg80211: failed to load regulatory.db [ 92.070109][ T5657] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.080738][ T5657] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.091404][ T5657] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.104844][ T5657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.114720][ T5657] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.424708][ T5652] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.615389][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.634971][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.766220][ T5669] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.780261][ T5669] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.789772][ T5669] bridge_slave_0: entered allmulticast mode [ 95.798940][ T5669] bridge_slave_0: entered promiscuous mode [ 95.812035][ T5669] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.819413][ T5669] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.826995][ T5669] bridge_slave_1: entered allmulticast mode [ 95.836049][ T5669] bridge_slave_1: entered promiscuous mode [ 95.872030][ T3354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.873011][ T5669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.881300][ T3354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.900740][ T5669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.938903][ T5669] team0: Port device team_slave_0 added [ 95.948332][ T5669] team0: Port device team_slave_1 added [ 95.996583][ T5669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.011365][ T5669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.038754][ T5669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.051848][ T5669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.059640][ T5669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.085559][ T5669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.134263][ T5669] hsr_slave_0: entered promiscuous mode [ 96.142489][ T5669] hsr_slave_1: entered promiscuous mode [ 96.310728][ T5669] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.323242][ T5669] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.331493][ T5669] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.341680][ T5669] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.349625][ T5669] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.360445][ T5669] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.368332][ T5669] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.377755][ T5669] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.466456][ T5669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.493532][ T5669] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.508533][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.515922][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.532401][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.539500][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.931204][ T5669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.978377][ T5669] veth0_vlan: entered promiscuous mode [ 96.991602][ T5669] veth1_vlan: entered promiscuous mode [ 97.027165][ T5669] veth0_macvtap: entered promiscuous mode [ 97.039102][ T5669] veth1_macvtap: entered promiscuous mode [ 97.061279][ T5669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.081247][ T5669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.098177][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.107444][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.120128][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.129694][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/07/27 22:11:02 executed programs: 0 [ 97.332778][ T5657] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.342713][ T5657] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.357556][ T5657] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.372721][ T5657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.381219][ T5657] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.402054][ T4939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.414702][ T4939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.427296][ T4939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.442993][ T4939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.457823][ T4939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.652458][ T5765] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.662811][ T5765] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.687333][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.698501][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.705888][ T5778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.710511][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.718578][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.720744][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.728241][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.738662][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.748670][ T5657] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.759150][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.766754][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.775564][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.776157][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.839599][ T4939] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.872458][ T4939] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.887537][ T4939] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.897171][ T4939] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.908697][ T4939] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.994519][ T1156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.466505][ T4939] Bluetooth: hci0: command tx timeout [ 99.546216][ T4939] Bluetooth: hci1: command tx timeout [ 99.784910][ T4939] Bluetooth: hci2: command tx timeout [ 99.864968][ T51] Bluetooth: hci3: command tx timeout [ 99.870756][ T4939] Bluetooth: hci4: command tx timeout [ 100.024884][ T4939] Bluetooth: hci5: command tx timeout [ 100.181563][ T1156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.440869][ T1156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.596525][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.603753][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.611030][ T5772] bridge_slave_0: entered allmulticast mode [ 100.618858][ T5772] bridge_slave_0: entered promiscuous mode [ 100.665760][ T1156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.707474][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.714928][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.722084][ T5772] bridge_slave_1: entered allmulticast mode [ 100.729920][ T5772] bridge_slave_1: entered promiscuous mode [ 100.892117][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.927880][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.935253][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.942393][ T5775] bridge_slave_0: entered allmulticast mode [ 100.950335][ T5775] bridge_slave_0: entered promiscuous mode [ 100.958980][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.966184][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.973558][ T5775] bridge_slave_1: entered allmulticast mode [ 100.981111][ T5775] bridge_slave_1: entered promiscuous mode [ 100.988404][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.995676][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.002884][ T5783] bridge_slave_0: entered allmulticast mode [ 101.010770][ T5783] bridge_slave_0: entered promiscuous mode [ 101.020952][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.030222][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.037502][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.044676][ T5762] bridge_slave_0: entered allmulticast mode [ 101.052414][ T5762] bridge_slave_0: entered promiscuous mode [ 101.111090][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.118468][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.125704][ T5783] bridge_slave_1: entered allmulticast mode [ 101.133166][ T5783] bridge_slave_1: entered promiscuous mode [ 101.153591][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.160915][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.168383][ T5762] bridge_slave_1: entered allmulticast mode [ 101.176627][ T5762] bridge_slave_1: entered promiscuous mode [ 101.207215][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.215353][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.222736][ T5761] bridge_slave_0: entered allmulticast mode [ 101.230331][ T5761] bridge_slave_0: entered promiscuous mode [ 101.289634][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.296996][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.304511][ T5773] bridge_slave_0: entered allmulticast mode [ 101.314242][ T5773] bridge_slave_0: entered promiscuous mode [ 101.327179][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.334753][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.341968][ T5761] bridge_slave_1: entered allmulticast mode [ 101.349719][ T5761] bridge_slave_1: entered promiscuous mode [ 101.359309][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.382332][ T5772] team0: Port device team_slave_0 added [ 101.409483][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.416931][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.424289][ T5773] bridge_slave_1: entered allmulticast mode [ 101.432189][ T5773] bridge_slave_1: entered promiscuous mode [ 101.458418][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.471236][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.482248][ T5772] team0: Port device team_slave_1 added [ 101.515851][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.528654][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.545978][ T4939] Bluetooth: hci0: command tx timeout [ 101.579995][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.602196][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.609438][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.635475][ T4939] Bluetooth: hci1: command tx timeout [ 101.640880][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.691466][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.720921][ T5775] team0: Port device team_slave_0 added [ 101.739688][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.746756][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.772857][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.818538][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.831082][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.843660][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.855252][ T5775] team0: Port device team_slave_1 added [ 101.862941][ T5783] team0: Port device team_slave_0 added [ 101.872816][ T5783] team0: Port device team_slave_1 added [ 101.878886][ T4939] Bluetooth: hci2: command tx timeout [ 101.888034][ T5762] team0: Port device team_slave_0 added [ 101.946177][ T51] Bluetooth: hci3: command tx timeout [ 101.951633][ T4939] Bluetooth: hci4: command tx timeout [ 101.963317][ T1156] bridge_slave_1: left allmulticast mode [ 101.969085][ T1156] bridge_slave_1: left promiscuous mode [ 101.976150][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.987817][ T1156] bridge_slave_0: left allmulticast mode [ 101.993464][ T1156] bridge_slave_0: left promiscuous mode [ 101.999680][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.106109][ T4939] Bluetooth: hci5: command tx timeout [ 102.299339][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.317727][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.329981][ T1156] bond0 (unregistering): Released all slaves [ 102.343879][ T5762] team0: Port device team_slave_1 added [ 102.375884][ T5773] team0: Port device team_slave_0 added [ 102.401317][ T5761] team0: Port device team_slave_0 added [ 102.428030][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.435105][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.462304][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.507272][ T5773] team0: Port device team_slave_1 added [ 102.514738][ T5761] team0: Port device team_slave_1 added [ 102.532567][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.540060][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.566627][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.598574][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.606196][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.633091][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.649380][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.656478][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.683289][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.695215][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.702615][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.729152][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.742423][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.750630][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.777299][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.825381][ T5772] hsr_slave_0: entered promiscuous mode [ 102.831842][ T5772] hsr_slave_1: entered promiscuous mode [ 102.838319][ T5772] debugfs: 'hsr0' already exists in 'hsr' [ 102.844138][ T5772] Cannot create hsr debugfs directory [ 102.902937][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.909979][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.936211][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.964902][ T1156] hsr_slave_0: left promiscuous mode [ 102.970802][ T1156] hsr_slave_1: left promiscuous mode [ 102.977271][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.985019][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.994156][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.001571][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.014025][ T1156] veth1_macvtap: left promiscuous mode [ 103.019895][ T1156] veth0_macvtap: left promiscuous mode [ 103.025878][ T1156] veth1_vlan: left promiscuous mode [ 103.031236][ T1156] veth0_vlan: left promiscuous mode [ 103.276301][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 103.293914][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 103.420364][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.427798][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.454005][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.483475][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.493245][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.519818][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.547874][ T5775] hsr_slave_0: entered promiscuous mode [ 103.554544][ T5775] hsr_slave_1: entered promiscuous mode [ 103.565122][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.572214][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.598353][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.628644][ T4939] Bluetooth: hci0: command tx timeout [ 103.705777][ T4939] Bluetooth: hci1: command tx timeout [ 103.772354][ T5762] hsr_slave_0: entered promiscuous mode [ 103.786021][ T5762] hsr_slave_1: entered promiscuous mode [ 103.792609][ T5762] debugfs: 'hsr0' already exists in 'hsr' [ 103.798427][ T5762] Cannot create hsr debugfs directory [ 103.888103][ T5783] hsr_slave_0: entered promiscuous mode [ 103.897967][ T5783] hsr_slave_1: entered promiscuous mode [ 103.904321][ T5783] debugfs: 'hsr0' already exists in 'hsr' [ 103.910496][ T5783] Cannot create hsr debugfs directory [ 103.949569][ T4939] Bluetooth: hci2: command tx timeout [ 103.962671][ T5773] hsr_slave_0: entered promiscuous mode [ 103.969920][ T5773] hsr_slave_1: entered promiscuous mode [ 103.976370][ T5773] debugfs: 'hsr0' already exists in 'hsr' [ 103.982322][ T5773] Cannot create hsr debugfs directory [ 103.995953][ T5761] hsr_slave_0: entered promiscuous mode [ 104.002786][ T5761] hsr_slave_1: entered promiscuous mode [ 104.009389][ T5761] debugfs: 'hsr0' already exists in 'hsr' [ 104.015183][ T5761] Cannot create hsr debugfs directory [ 104.024922][ T4939] Bluetooth: hci4: command tx timeout [ 104.025132][ T51] Bluetooth: hci3: command tx timeout [ 104.186365][ T51] Bluetooth: hci5: command tx timeout [ 104.355864][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 104.837033][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.849597][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.857712][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.870843][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.901239][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.918604][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.928428][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.948593][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.158758][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.197162][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.240381][ T239] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.247548][ T239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.269325][ T239] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.276529][ T239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.397438][ T5762] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.411462][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.437285][ T5762] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.451028][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.462319][ T5762] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.477306][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.500399][ T5762] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.511814][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.596066][ T5783] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.613378][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.622782][ T5783] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.643209][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.660688][ T5783] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.672740][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.681174][ T5783] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.701726][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.714993][ T51] Bluetooth: hci0: command tx timeout [ 105.786501][ T51] Bluetooth: hci1: command tx timeout [ 105.911773][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.941384][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.966194][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.991011][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.023521][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.030438][ T51] Bluetooth: hci2: command tx timeout [ 106.069086][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.095769][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.105355][ T51] Bluetooth: hci4: command tx timeout [ 106.108557][ T4939] Bluetooth: hci3: command tx timeout [ 106.127394][ T5773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.266153][ T4939] Bluetooth: hci5: command tx timeout [ 106.379417][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.437789][ T5761] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.449444][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.467780][ T5761] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.479419][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.487806][ T5761] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.501203][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.518617][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.544246][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.551727][ T5761] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.563933][ T5761] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.655742][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.662924][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.699605][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.707002][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.788150][ T5775] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.801010][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.823281][ T5775] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.838908][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.869110][ T5775] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.880540][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.890050][ T5775] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.900498][ T5775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.913868][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.048117][ T5772] veth0_vlan: entered promiscuous mode [ 107.089219][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.119165][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.126694][ T5772] veth1_vlan: entered promiscuous mode [ 107.156681][ T239] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.163857][ T239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.211083][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.218293][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.275276][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.319956][ T239] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.327158][ T239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.379507][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.386699][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.403687][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.436554][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.488500][ T5772] veth0_macvtap: entered promiscuous mode [ 107.518509][ T5772] veth1_macvtap: entered promiscuous mode [ 107.541466][ T5761] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.593018][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.603424][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.610745][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.654164][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.672719][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.679916][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.716998][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.761841][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.792269][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.802137][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.832530][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.858644][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.879908][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.887208][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.952376][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.959579][ T3322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.020300][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.238616][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.270533][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.341666][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.363907][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.452731][ T5762] veth0_vlan: entered promiscuous mode 2026/07/27 22:11:13 executed programs: 12 [ 108.547841][ T5762] veth1_vlan: entered promiscuous mode [ 108.686278][ T6013] vhci_hcd vhci_hcd.0: remove, state 4 [ 108.691930][ T6013] usb usb34: USB disconnect, device number 1 [ 108.758210][ T5762] veth0_macvtap: entered promiscuous mode [ 108.820629][ T5762] veth1_macvtap: entered promiscuous mode [ 108.881274][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.947874][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.994621][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.024186][ T3322] vhci_hcd vhci_hcd.0: stop threads [ 109.048518][ T3322] vhci_hcd vhci_hcd.0: release socket [ 109.070810][ T1171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.077796][ T3322] vhci_hcd vhci_hcd.0: disconnect device [ 109.094159][ T3322] vhci_hcd vhci_hcd.0: stop threads [ 109.101107][ T3322] vhci_hcd vhci_hcd.0: release socket [ 109.104616][ T1171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.115814][ T3322] vhci_hcd vhci_hcd.0: disconnect device [ 109.122044][ T3322] vhci_hcd vhci_hcd.0: stop threads [ 109.128397][ T3322] vhci_hcd vhci_hcd.0: release socket [ 109.133865][ T3322] vhci_hcd vhci_hcd.0: disconnect device [ 109.140001][ T3322] vhci_hcd vhci_hcd.0: stop threads [ 109.151057][ T3322] vhci_hcd vhci_hcd.0: release socket [ 109.156924][ T3322] vhci_hcd vhci_hcd.0: disconnect device [ 109.162750][ T3322] vhci_hcd vhci_hcd.0: stop threads [ 109.172939][ T3322] vhci_hcd vhci_hcd.0: release socket [ 109.175529][ T1171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.179164][ T3322] vhci_hcd vhci_hcd.0: disconnect device [ 109.193967][ T3322] vhci_hcd vhci_hcd.0: stop threads [ 109.201175][ T3322] vhci_hcd vhci_hcd.0: release socket [ 109.222855][ T1171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.223508][ T3322] vhci_hcd vhci_hcd.0: disconnect device [ 109.260873][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.270658][ T3322] vhci_hcd vhci_hcd.0: stop threads [ 109.281512][ T3322] vhci_hcd vhci_hcd.0: release socket [ 109.308940][ T3322] vhci_hcd vhci_hcd.0: disconnect device [ 109.326955][ T3322] vhci_hcd vhci_hcd.0: stop threads [ 109.366882][ T3322] vhci_hcd vhci_hcd.0: release socket [ 109.382758][ T3322] vhci_hcd vhci_hcd.0: disconnect device [ 109.411471][ T6013] vhci_hcd vhci_hcd.0: USB bus 34 deregistered [ 109.437329][ T6013] vhci_hcd vhci_hcd.0: remove, state 4 [ 109.447447][ T6013] usb usb33: USB disconnect, device number 1 [ 109.486109][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.507144][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.527501][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.541767][ T6013] vhci_hcd vhci_hcd.0: USB bus 33 deregistered [ 109.542789][ T1156] vhci_hcd vhci_hcd.0: stop threads [ 109.592290][ T1156] ================================================================== [ 109.600385][ T1156] BUG: KASAN: slab-use-after-free in vhci_shutdown_connection+0x1d4/0x650 [ 109.608908][ T1156] Read of size 8 at addr ffff88802ad0c530 by task kworker/u8:8/1156 [ 109.616884][ T1156] [ 109.619209][ T1156] CPU: 1 UID: 0 PID: 1156 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 109.619238][ T1156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 109.619254][ T1156] Workqueue: usbip_event event_handler [ 109.619288][ T1156] Call Trace: [ 109.619297][ T1156] [ 109.619306][ T1156] dump_stack_lvl+0xe8/0x150 [ 109.619344][ T1156] print_address_description+0x55/0x1e0 [ 109.619379][ T1156] ? vhci_shutdown_connection+0x1d4/0x650 [ 109.619412][ T1156] print_report+0x58/0x70 [ 109.619443][ T1156] kasan_report+0x117/0x150 [ 109.619482][ T1156] ? vhci_shutdown_connection+0x1d4/0x650 [ 109.619521][ T1156] vhci_shutdown_connection+0x1d4/0x650 [ 109.619558][ T1156] event_handler+0x2a4/0x4b0 [ 109.619588][ T1156] ? process_scheduled_works+0xa20/0x14e0 [ 109.619618][ T1156] process_scheduled_works+0xa8e/0x14e0 [ 109.619661][ T1156] ? __pfx_process_scheduled_works+0x10/0x10 [ 109.619693][ T1156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.619721][ T1156] ? assign_work+0x3cf/0x5d0 [ 109.619750][ T1156] worker_thread+0xa47/0xfb0 [ 109.619796][ T1156] kthread+0x388/0x470 [ 109.619831][ T1156] ? __pfx_worker_thread+0x10/0x10 [ 109.619859][ T1156] ? __pfx_kthread+0x10/0x10 [ 109.619895][ T1156] ret_from_fork+0x514/0xb70 [ 109.619933][ T1156] ? __pfx_ret_from_fork+0x10/0x10 [ 109.619969][ T1156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.619996][ T1156] ? __switch_to+0xc89/0x1420 [ 109.620028][ T1156] ? __pfx_kthread+0x10/0x10 [ 109.620064][ T1156] ret_from_fork_asm+0x1a/0x30 [ 109.620104][ T1156] [ 109.620112][ T1156] [ 109.657386][ T5773] veth0_vlan: entered promiscuous mode [ 109.661252][ T1156] Allocated by task 1: [ 109.661267][ T1156] kasan_save_track+0x3e/0x80 [ 109.661298][ T1156] __kasan_kmalloc+0x93/0xb0 [ 109.661325][ T1156] __kmalloc_noprof+0x375/0x720 [ 109.661349][ T1156] __usb_create_hcd+0x67/0x900 [ 109.661372][ T1156] vhci_hcd_probe+0x104/0x3e0 [ 109.661396][ T1156] platform_probe+0xf9/0x190 [ 109.661418][ T1156] really_probe+0x254/0xae0 [ 109.661443][ T1156] __driver_probe_device+0x1e8/0x360 [ 109.661468][ T1156] driver_probe_device+0x4f/0x240 [ 109.661494][ T1156] __device_attach_driver+0x270/0x410 [ 109.661520][ T1156] bus_for_each_drv+0x258/0x2f0 [ 109.661551][ T1156] __device_attach+0x2c4/0x450 [ 109.661575][ T1156] device_initial_probe+0xa1/0xd0 [ 109.661600][ T1156] bus_probe_device+0x12a/0x220 [ 109.710357][ T5773] veth1_vlan: entered promiscuous mode [ 109.714661][ T1156] device_add+0x7d7/0xb80 [ 109.714689][ T1156] platform_device_add+0x4bd/0x860 [ 109.714708][ T1156] platform_device_register_full+0x62d/0x710 [ 109.714728][ T1156] vhci_hcd_init+0x227/0x360 [ 109.714746][ T1156] do_one_initcall+0x250/0x870 [ 109.714774][ T1156] do_initcall_level+0x10a/0x1a0 [ 109.714801][ T1156] do_initcalls+0x59/0xa0 [ 109.714825][ T1156] kernel_init_freeable+0x29d/0x3e0 [ 109.714851][ T1156] kernel_init+0x1d/0x1d0 [ 109.714877][ T1156] ret_from_fork+0x514/0xb70 [ 109.714905][ T1156] ret_from_fork_asm+0x1a/0x30 [ 109.714922][ T1156] [ 109.714927][ T1156] Freed by task 6013: [ 109.714938][ T1156] kasan_save_track+0x3e/0x80 [ 109.714965][ T1156] kasan_save_free_info+0x40/0x50 [ 109.714985][ T1156] __kasan_slab_free+0x5c/0x80 [ 109.715013][ T1156] kfree+0x1c5/0x640 [ 109.715035][ T1156] vhci_hcd_remove+0xe4/0x110 [ 109.715061][ T1156] device_release_driver_internal+0x48b/0x880 [ 109.715096][ T1156] unbind_store+0x1a1/0x1d0 [ 109.715116][ T1156] kernfs_fop_write_iter+0x3a4/0x540 [ 109.715139][ T1156] vfs_write+0x612/0xba0 [ 109.715157][ T1156] ksys_write+0x150/0x270 [ 109.715173][ T1156] do_syscall_64+0x174/0x580 [ 109.715195][ T1156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.715216][ T1156] [ 109.715222][ T1156] Last potentially related work creation: [ 109.715230][ T1156] kasan_save_stack+0x3e/0x60 [ 109.715257][ T1156] kasan_record_aux_stack+0xbd/0xd0 [ 109.715281][ T1156] insert_work+0x3d/0x330 [ 109.715305][ T1156] __queue_work+0xcd8/0x10a0 [ 109.715329][ T1156] queue_work_on+0x106/0x1d0 [ 109.715352][ T1156] unlink1+0x344/0x3e0 [ 109.715372][ T1156] usb_hcd_unlink_urb+0xe6/0x1e0 [ 109.715393][ T1156] usb_kill_urb+0x10b/0x2f0 [ 109.715418][ T1156] hub_quiesce+0x211/0x330 [ 109.715436][ T1156] hub_suspend+0x904/0xad0 [ 109.715466][ T1156] usb_suspend_both+0x285/0x1040 [ 109.715488][ T1156] usb_runtime_suspend+0x58/0x110 [ 109.715512][ T1156] __rpm_callback+0x2c7/0x950 [ 109.715539][ T1156] rpm_suspend+0x8a0/0x17b0 [ 109.715561][ T1156] __pm_runtime_suspend+0x12f/0x1a0 [ 109.715584][ T1156] usb_new_device+0xadf/0x1620 [ 109.715612][ T1156] register_root_hub+0x250/0x5c0 [ 110.058601][ T1156] usb_add_hcd+0xac7/0xf80 [ 110.063016][ T1156] vhci_hcd_probe+0x141/0x3e0 [ 110.067687][ T1156] platform_probe+0xf9/0x190 [ 110.072268][ T1156] really_probe+0x254/0xae0 [ 110.076765][ T1156] __driver_probe_device+0x1e8/0x360 [ 110.082041][ T1156] driver_probe_device+0x4f/0x240 [ 110.087061][ T1156] __device_attach_driver+0x270/0x410 [ 110.092431][ T1156] bus_for_each_drv+0x258/0x2f0 [ 110.097280][ T1156] __device_attach+0x2c4/0x450 [ 110.102064][ T1156] device_initial_probe+0xa1/0xd0 [ 110.107173][ T1156] bus_probe_device+0x12a/0x220 [ 110.112023][ T1156] device_add+0x7d7/0xb80 [ 110.116339][ T1156] platform_device_add+0x4bd/0x860 [ 110.121437][ T1156] platform_device_register_full+0x62d/0x710 [ 110.127404][ T1156] vhci_hcd_init+0x227/0x360 [ 110.131982][ T1156] do_one_initcall+0x250/0x870 [ 110.136782][ T1156] do_initcall_level+0x10a/0x1a0 [ 110.141718][ T1156] do_initcalls+0x59/0xa0 [ 110.146045][ T1156] kernel_init_freeable+0x29d/0x3e0 [ 110.151244][ T1156] kernel_init+0x1d/0x1d0 [ 110.155576][ T1156] ret_from_fork+0x514/0xb70 [ 110.160164][ T1156] ret_from_fork_asm+0x1a/0x30 [ 110.164912][ T1156] [ 110.167225][ T1156] Second to last potentially related work creation: [ 110.173791][ T1156] kasan_save_stack+0x3e/0x60 [ 110.178462][ T1156] kasan_record_aux_stack+0xbd/0xd0 [ 110.183647][ T1156] insert_work+0x3d/0x330 [ 110.187965][ T1156] __queue_work+0xcd8/0x10a0 [ 110.192549][ T1156] queue_work_on+0x106/0x1d0 [ 110.197130][ T1156] usb_hcd_submit_urb+0xa3b/0x1b60 [ 110.202230][ T1156] usb_start_wait_urb+0x13f/0x5b0 [ 110.207253][ T1156] usb_control_msg+0x234/0x3e0 [ 110.212013][ T1156] hub_ext_port_status+0x114/0x810 [ 110.217116][ T1156] hub_activate+0x740/0x1b20 [ 110.221697][ T1156] process_scheduled_works+0xa8e/0x14e0 [ 110.227237][ T1156] worker_thread+0xa47/0xfb0 [ 110.231866][ T1156] kthread+0x388/0x470 [ 110.235932][ T1156] ret_from_fork+0x514/0xb70 [ 110.240519][ T1156] ret_from_fork_asm+0x1a/0x30 [ 110.245267][ T1156] [ 110.247583][ T1156] The buggy address belongs to the object at ffff88802ad0c000 [ 110.247583][ T1156] which belongs to the cache kmalloc-8k of size 8192 [ 110.261618][ T1156] The buggy address is located 1328 bytes inside of [ 110.261618][ T1156] freed 8192-byte region [ffff88802ad0c000, ffff88802ad0e000) [ 110.275574][ T1156] [ 110.277882][ T1156] The buggy address belongs to the physical page: [ 110.284311][ T1156] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ad08 [ 110.293057][ T1156] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 110.301541][ T1156] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 110.309070][ T1156] page_type: f5(slab) [ 110.313041][ T1156] raw: 00fff00000000040 ffff88801b005280 dead000000000122 0000000000000000 [ 110.321613][ T1156] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 110.330194][ T1156] head: 00fff00000000040 ffff88801b005280 dead000000000122 0000000000000000 [ 110.338853][ T1156] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 110.347512][ T1156] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 110.356170][ T1156] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 110.364819][ T1156] page dumped because: kasan: bad access detected [ 110.371211][ T1156] page_owner tracks the page as allocated [ 110.376905][ T1156] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10910791782, free_ts 10907351252 [ 110.397479][ T1156] post_alloc_hook+0x1f9/0x250 [ 110.402332][ T1156] get_page_from_freelist+0x21fa/0x2270 [ 110.407876][ T1156] __alloc_frozen_pages_noprof+0x18d/0x380 [ 110.413678][ T1156] allocate_slab+0x79/0x5e0 [ 110.418173][ T1156] refill_objects+0x2d5/0x350 [ 110.422843][ T1156] __pcs_replace_empty_main+0x2bf/0x6b0 [ 110.428387][ T1156] __kmalloc_noprof+0x485/0x720 [ 110.433234][ T1156] __usb_create_hcd+0x67/0x900 [ 110.437987][ T1156] vhci_hcd_probe+0x104/0x3e0 [ 110.442656][ T1156] platform_probe+0xf9/0x190 [ 110.447234][ T1156] really_probe+0x254/0xae0 [ 110.451732][ T1156] __driver_probe_device+0x1e8/0x360 [ 110.457006][ T1156] driver_probe_device+0x4f/0x240 [ 110.462023][ T1156] __device_attach_driver+0x270/0x410 [ 110.467386][ T1156] bus_for_each_drv+0x258/0x2f0 [ 110.472235][ T1156] __device_attach+0x2c4/0x450 [ 110.476987][ T1156] page last free pid 29 tgid 29 stack trace: [ 110.482944][ T1156] free_pages_prepare+0x960/0xa60 [ 110.487960][ T1156] __free_contig_range_common+0x174/0x340 [ 110.493668][ T1156] free_pages_bulk+0x48/0x120 [ 110.498339][ T1156] vfree+0x224/0x4a0 [ 110.502223][ T1156] delayed_vfree_work+0x55/0x80 [ 110.507065][ T1156] process_scheduled_works+0xa8e/0x14e0 [ 110.512608][ T1156] worker_thread+0xa47/0xfb0 [ 110.517188][ T1156] kthread+0x388/0x470 [ 110.521254][ T1156] ret_from_fork+0x514/0xb70 [ 110.525840][ T1156] ret_from_fork_asm+0x1a/0x30 [ 110.530594][ T1156] [ 110.532896][ T1156] Memory state around the buggy address: [ 110.538507][ T1156] ffff88802ad0c400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.546554][ T1156] ffff88802ad0c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.554609][ T1156] >ffff88802ad0c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.562658][ T1156] ^ [ 110.568275][ T1156] ffff88802ad0c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.576354][ T1156] ffff88802ad0c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.584405][ T1156] ================================================================== [ 110.670287][ T1156] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 110.677525][ T1156] CPU: 1 UID: 0 PID: 1156 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 110.686992][ T1156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 110.697048][ T1156] Workqueue: usbip_event event_handler [ 110.702528][ T1156] Call Trace: [ 110.705805][ T1156] [ 110.708732][ T1156] vpanic+0x56c/0xa60 [ 110.712735][ T1156] ? __pfx_vpanic+0x10/0x10 [ 110.717255][ T1156] ? __pfx___schedule+0x10/0x10 [ 110.722114][ T1156] panic+0xc5/0xd0 [ 110.725853][ T1156] ? __pfx_panic+0x10/0x10 [ 110.730294][ T1156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.735935][ T1156] ? preempt_schedule_common+0x82/0xd0 [ 110.741402][ T1156] ? vhci_shutdown_connection+0x1d4/0x650 [ 110.747135][ T1156] check_panic_on_warn+0x89/0xb0 [ 110.752090][ T1156] ? vhci_shutdown_connection+0x1d4/0x650 [ 110.757824][ T1156] end_report+0x73/0x170 [ 110.762124][ T1156] ? vhci_shutdown_connection+0x1d4/0x650 [ 110.767859][ T1156] kasan_report+0x128/0x150 [ 110.772382][ T1156] ? vhci_shutdown_connection+0x1d4/0x650 [ 110.778121][ T1156] vhci_shutdown_connection+0x1d4/0x650 [ 110.783684][ T1156] event_handler+0x2a4/0x4b0 [ 110.788285][ T1156] ? process_scheduled_works+0xa20/0x14e0 [ 110.794012][ T1156] process_scheduled_works+0xa8e/0x14e0 [ 110.799618][ T1156] ? __pfx_process_scheduled_works+0x10/0x10 [ 110.805612][ T1156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.811259][ T1156] ? assign_work+0x3cf/0x5d0 [ 110.815864][ T1156] worker_thread+0xa47/0xfb0 [ 110.820485][ T1156] kthread+0x388/0x470 [ 110.824582][ T1156] ? __pfx_worker_thread+0x10/0x10 [ 110.829704][ T1156] ? __pfx_kthread+0x10/0x10 [ 110.834311][ T1156] ret_from_fork+0x514/0xb70 [ 110.838922][ T1156] ? __pfx_ret_from_fork+0x10/0x10 [ 110.844059][ T1156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.849698][ T1156] ? __switch_to+0xc89/0x1420 [ 110.854388][ T1156] ? __pfx_kthread+0x10/0x10 [ 110.858997][ T1156] ret_from_fork_asm+0x1a/0x30 [ 110.863772][ T1156] [ 110.867010][ T1156] Kernel Offset: disabled [ 110.871318][ T1156] Rebooting in 86400 seconds..