Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://45897 [ 31.366556][ T4341] cgroup: Unknown subsys name 'net' [ 31.581263][ T4341] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.842924][ T4341] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 37.866604][ T4349] chnl_net:caif_netlink_parms(): no params data found [ 37.884062][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.885428][ T4349] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.886989][ T4349] device bridge_slave_0 entered promiscuous mode [ 37.890482][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.891892][ T4349] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.893497][ T4349] device bridge_slave_1 entered promiscuous mode [ 37.900621][ T4349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.903270][ T4349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.910948][ T4349] team0: Port device team_slave_0 added [ 37.912842][ T4349] team0: Port device team_slave_1 added [ 37.918051][ T4349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.919761][ T4349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.924185][ T4349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.926828][ T4349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.927975][ T4349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.933283][ T4349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.989836][ T4349] device hsr_slave_0 entered promiscuous mode [ 38.038826][ T4349] device hsr_slave_1 entered promiscuous mode [ 38.111794][ T4349] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.160126][ T4349] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.211216][ T4349] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.249975][ T4349] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.296588][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.297840][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.299293][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.300494][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.315911][ T4349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.320915][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.323528][ T1589] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.325524][ T1589] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.327425][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 38.332294][ T4349] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.335820][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.337523][ T1589] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.338742][ T1589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.342809][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.344495][ T1589] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.345740][ T1589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.352286][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.353962][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.356850][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.360491][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.362941][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.365364][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.415289][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.416683][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.420524][ T4349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.426614][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.432976][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.434858][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.436380][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.439174][ T4349] device veth0_vlan entered promiscuous mode [ 38.442340][ T4349] device veth1_vlan entered promiscuous mode [ 38.451127][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.452763][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.454305][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.456750][ T4349] device veth0_macvtap entered promiscuous mode [ 38.461335][ T4349] device veth1_macvtap entered promiscuous mode [ 38.466576][ T4349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.468016][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.470529][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.473532][ T4349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.474968][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.478087][ T4349] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.480192][ T4349] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.481656][ T4349] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.483166][ T4349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.860218][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.963345][ T267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.964781][ T267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.966983][ T267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.978056][ T1589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.979702][ T1589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.981031][ T1589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.366114][ T4397] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.367837][ T4397] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.373763][ T4397] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.375470][ T4397] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.376986][ T4397] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.378349][ T4397] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:40 executed programs: 0 [ 40.073881][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.075554][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.076891][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.078483][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.081044][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 40.082982][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 40.126436][ T4431] chnl_net:caif_netlink_parms(): no params data found [ 40.141895][ T4431] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.143190][ T4431] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.144809][ T4431] device bridge_slave_0 entered promiscuous mode [ 40.146878][ T4431] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.148136][ T4431] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.150368][ T4431] device bridge_slave_1 entered promiscuous mode [ 40.156737][ T4431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.161420][ T4431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.167889][ T4431] team0: Port device team_slave_0 added [ 40.170141][ T4431] team0: Port device team_slave_1 added [ 40.175102][ T4431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.176188][ T4431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.180332][ T4431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.182731][ T4431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.183825][ T4431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.187771][ T4431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.230053][ T4431] device hsr_slave_0 entered promiscuous mode [ 40.268813][ T4431] device hsr_slave_1 entered promiscuous mode [ 40.308718][ T4431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.310204][ T4431] Cannot create hsr debugfs directory [ 41.789863][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.158827][ T4397] Bluetooth: hci0: command 0x0409 tx timeout [ 44.249106][ T4397] Bluetooth: hci0: command 0x041b tx timeout [ 44.339442][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.420785][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.329363][ T4431] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.361204][ T4431] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.450807][ T4431] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.540323][ T4431] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.650991][ T4431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.654718][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.656437][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.659394][ T4431] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.664352][ T11] device hsr_slave_0 left promiscuous mode [ 45.688797][ T11] device hsr_slave_1 left promiscuous mode [ 45.768725][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.771068][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.772804][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.773939][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.775573][ T11] device bridge_slave_1 left promiscuous mode [ 45.776897][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.839400][ T11] device bridge_slave_0 left promiscuous mode [ 45.840686][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.958785][ T11] device veth1_macvtap left promiscuous mode [ 45.960006][ T11] device veth0_macvtap left promiscuous mode [ 45.961059][ T11] device veth1_vlan left promiscuous mode [ 45.962071][ T11] device veth0_vlan left promiscuous mode [ 46.328653][ T4397] Bluetooth: hci0: command 0x040f tx timeout [ 48.160026][ T11] team0 (unregistering): Port device team_slave_1 removed [ 48.319485][ T11] team0 (unregistering): Port device team_slave_0 removed [ 48.408637][ T4397] Bluetooth: hci0: command 0x0419 tx timeout [ 48.469188][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.689639][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.260059][ T11] bond0 (unregistering): Released all slaves [ 50.558543][ T4431] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.560656][ T4431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.563555][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.565286][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.566772][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.568048][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.569815][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.571447][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.573065][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.574252][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.575836][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.577649][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.581723][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.583499][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.585181][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.586871][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.588463][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.590917][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.592693][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.594444][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.596302][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.597999][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.599693][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.650774][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.652343][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.655486][ T4431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.661665][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.663436][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.669421][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.671206][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.672917][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.674379][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.676654][ T4431] device veth0_vlan entered promiscuous mode [ 50.682953][ T4431] device veth1_vlan entered promiscuous mode [ 50.689909][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.691579][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.693137][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.695065][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.697822][ T4431] device veth0_macvtap entered promiscuous mode [ 50.701181][ T4431] device veth1_macvtap entered promiscuous mode [ 50.705853][ T4431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.707174][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.709221][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.710833][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.712600][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.715337][ T4431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.716667][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.718335][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.721742][ T4431] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.723303][ T4431] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.724816][ T4431] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.726291][ T4431] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.750720][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.752137][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.753485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.762851][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.764164][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.765581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.811208][ T4519] vhci_hcd vhci_hcd.0: remove, state 4 [ 50.812420][ T4519] usb usb3: USB disconnect, device number 1 [ 50.817907][ T4519] vhci_hcd vhci_hcd.0: USB bus 3 deregistered [ 50.817910][ T1589] vhci_hcd: stop threads [ 50.819862][ T1589] vhci_hcd: release socket [ 50.820650][ T1589] vhci_hcd: disconnect device [ 50.821073][ T4519] vhci_hcd vhci_hcd.0: remove, state 4 [ 50.821390][ T1589] ================================================================== [ 50.822308][ T4519] usb usb2: USB disconnect, device number 1 [ 50.823534][ T1589] BUG: KASAN: use-after-free in __lock_acquire+0x104/0x6634 [ 50.825732][ T1589] Read of size 8 at addr ffff0000d1f90440 by task kworker/u4:4/1589 [ 50.827027][ T1589] [ 50.827410][ T1589] CPU: 1 PID: 1589 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 50.827885][ T4519] vhci_hcd vhci_hcd.0: USB bus 2 deregistered [ 50.828637][ T1589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 50.828652][ T1589] Workqueue: usbip_event event_handler [ 50.828675][ T1589] Call trace: [ 50.828677][ T1589] dump_backtrace+0x1c4/0x1f0 [ 50.828684][ T1589] show_stack+0x2c/0x3c [ 50.828688][ T1589] __dump_stack+0x30/0x40 [ 50.835111][ T1589] dump_stack_lvl+0xf4/0x15c [ 50.835905][ T1589] print_address_description+0x88/0x218 [ 50.836858][ T1589] print_report+0x50/0x68 [ 50.837596][ T1589] kasan_report+0xa8/0xfc [ 50.838371][ T1589] __asan_report_load8_noabort+0x2c/0x38 [ 50.839442][ T1589] __lock_acquire+0x104/0x6634 [ 50.840282][ T1589] lock_acquire+0x20c/0x638 [ 50.841111][ T1589] _raw_spin_lock_irqsave+0x6c/0xb0 [ 50.842027][ T1589] event_handler+0x290/0x454 [ 50.842857][ T1589] process_one_work+0x7e4/0x13bc [ 50.843756][ T1589] worker_thread+0x8cc/0xfe8 [ 50.844615][ T1589] kthread+0x254/0x2e0 [ 50.845327][ T1589] ret_from_fork+0x10/0x20 [ 50.846091][ T1589] [ 50.846515][ T1589] Allocated by task 1: [ 50.847223][ T1589] kasan_set_track+0x4c/0x80 [ 50.848014][ T1589] kasan_save_alloc_info+0x24/0x30 [ 50.848885][ T1589] __kasan_kmalloc+0xa0/0xb8 [ 50.849691][ T1589] __kmalloc+0xd8/0x180 [ 50.850403][ T1589] __usb_create_hcd+0x6c/0x740 [ 50.851227][ T1589] usb_create_shared_hcd+0x40/0x54 [ 50.852099][ T1589] vhci_hcd_probe+0x1a4/0x354 [ 50.852956][ T1589] platform_probe+0x148/0x1c8 [ 50.853762][ T1589] really_probe+0x3a0/0xac4 [ 50.854544][ T1589] __driver_probe_device+0x1c8/0x368 [ 50.855404][ T1589] driver_probe_device+0x78/0x324 [ 50.856281][ T1589] __device_attach_driver+0x28c/0x4c0 [ 50.857240][ T1589] bus_for_each_drv+0x154/0x1e4 [ 50.858057][ T1589] __device_attach+0x2a4/0x3d8 [ 50.858873][ T1589] device_initial_probe+0x24/0x34 [ 50.859710][ T1589] bus_probe_device+0xbc/0x1c4 [ 50.860528][ T1589] device_add+0x93c/0xe4c [ 50.861299][ T1589] platform_device_add+0x3f8/0x6f4 [ 50.862196][ T1589] vhci_hcd_init+0x390/0x4b0 [ 50.862992][ T1589] do_one_initcall+0x278/0x9f0 [ 50.863817][ T1589] do_initcall_level+0x158/0x214 [ 50.864678][ T1589] do_initcalls+0x58/0xac [ 50.865390][ T1589] do_basic_setup+0x8c/0xa0 [ 50.866177][ T1589] kernel_init_freeable+0x35c/0x4f0 [ 50.867043][ T1589] kernel_init+0x24/0x1d8 [ 50.867796][ T1589] ret_from_fork+0x10/0x20 [ 50.868561][ T1589] [ 50.868942][ T1589] Freed by task 4519: [ 50.869626][ T1589] kasan_set_track+0x4c/0x80 [ 50.870436][ T1589] kasan_save_free_info+0x38/0x5c [ 50.871285][ T1589] ____kasan_slab_free+0x148/0x1b0 [ 50.872175][ T1589] __kasan_slab_free+0x18/0x28 [ 50.873030][ T1589] slab_free_freelist_hook+0x16c/0x1e8 [ 50.873946][ T1589] __kmem_cache_free+0xbc/0x21c [ 50.874799][ T1589] kfree+0xd0/0x1a8 [ 50.875404][ T1589] usb_put_hcd+0x124/0x16c [ 50.876145][ T1589] vhci_hcd_remove+0x98/0x100 [ 50.876955][ T1589] platform_remove+0x98/0xf0 [ 50.877736][ T1589] device_release_driver_internal+0x3d4/0x6e4 [ 50.878761][ T1589] device_driver_detach+0x48/0x58 [ 50.879647][ T1589] unbind_store+0x2a8/0x2b4 [ 50.880418][ T1589] drv_attr_store+0x80/0xa4 [ 50.881213][ T1589] sysfs_kf_write+0x1f8/0x274 [ 50.882045][ T1589] kernfs_fop_write_iter+0x390/0x4b4 [ 50.882922][ T1589] vfs_write+0x3c8/0x7c8 [ 50.883686][ T1589] ksys_write+0x12c/0x228 [ 50.884390][ T1589] __arm64_sys_write+0x7c/0x90 [ 50.885168][ T1589] invoke_syscall+0x98/0x290 [ 50.885937][ T1589] el0_svc_common+0x13c/0x258 [ 50.886716][ T1589] do_el0_svc+0x5c/0x134 [ 50.887450][ T1589] el0_svc+0x58/0x128 [ 50.888136][ T1589] el0t_64_sync_handler+0x84/0xf0 [ 50.888990][ T1589] el0t_64_sync+0x18c/0x190 [ 50.889747][ T1589] [ 50.890138][ T1589] The buggy address belongs to the object at ffff0000d1f90000 [ 50.890138][ T1589] which belongs to the cache kmalloc-8k of size 8192 [ 50.892445][ T1589] The buggy address is located 1088 bytes inside of [ 50.892445][ T1589] 8192-byte region [ffff0000d1f90000, ffff0000d1f92000) [ 50.894731][ T1589] [ 50.895115][ T1589] The buggy address belongs to the physical page: [ 50.896214][ T1589] page:00000000464ff857 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111f90 [ 50.897932][ T1589] head:00000000464ff857 order:3 compound_mapcount:0 compound_pincount:0 [ 50.899380][ T1589] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 50.900779][ T1589] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c0002c00 [ 50.902233][ T1589] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 50.903710][ T1589] page dumped because: kasan: bad access detected [ 50.904819][ T1589] [ 50.905225][ T1589] Memory state around the buggy address: [ 50.906216][ T1589] ffff0000d1f90300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.907591][ T1589] ffff0000d1f90380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.908940][ T1589] >ffff0000d1f90400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.910286][ T1589] ^ [ 50.911329][ T1589] ffff0000d1f90480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.912712][ T1589] ffff0000d1f90500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.914043][ T1589] ================================================================== [ 50.915431][ T1589] Disabling lock debugging due to kernel taint [ 50.924839][ T1589] vhci_hcd: stop threads [ 50.925575][ T1589] vhci_hcd: release socket [ 50.926280][ T1589] vhci_hcd: disconnect device [ 50.927023][ T1589] vhci_hcd: stop threads [ 50.927676][ T1589] vhci_hcd: release socket [ 50.928398][ T1589] vhci_hcd: disconnect device [ 50.929528][ T1589] vhci_hcd: stop threads [ 50.930280][ T1589] vhci_hcd: release socket [ 50.931037][ T1589] vhci_hcd: disconnect device [ 50.931860][ T1589] vhci_hcd: stop threads [ 50.932568][ T1589] vhci_hcd: release socket [ 50.933279][ T1589] vhci_hcd: disconnect device [ 50.934045][ T1589] vhci_hcd: stop threads [ 50.934719][ T1589] vhci_hcd: release socket [ 50.935418][ T1589] vhci_hcd: disconnect device [ 50.936183][ T1589] vhci_hcd: stop threads [ 50.936865][ T1589] vhci_hcd: release socket [ 50.937613][ T1589] vhci_hcd: disconnect device [ 50.938401][ T1589] vhci_hcd: stop threads [ 50.939584][ T1589] vhci_hcd: release socket [ 50.940361][ T1589] vhci_hcd: disconnect device [ 50.941230][ T1589] vhci_hcd: stop threads [ 50.941981][ T1589] vhci_hcd: release socket [ 50.942826][ T1589] vhci_hcd: disconnect device [ 50.943681][ T1589] vhci_hcd: stop threads [ 50.944398][ T1589] vhci_hcd: release socket [ 50.945111][ T1589] vhci_hcd: disconnect device [ 50.945920][ T1589] vhci_hcd: stop threads [ 50.946613][ T1589] vhci_hcd: release socket [ 50.947342][ T1589] vhci_hcd: disconnect device [ 50.948118][ T1589] vhci_hcd: stop threads [ 50.949015][ T1589] vhci_hcd: release socket [ 50.949747][ T1589] vhci_hcd: disconnect device [ 50.950578][ T1589] vhci_hcd: stop threads [ 50.951279][ T1589] vhci_hcd: release socket [ 50.952041][ T1589] vhci_hcd: disconnect device [ 50.952859][ T1589] vhci_hcd: stop threads [ 50.953590][ T1589] vhci_hcd: release socket [ 50.954351][ T1589] vhci_hcd: disconnect device [ 50.955141][ T1589] vhci_hcd: stop threads [ 50.955834][ T1589] vhci_hcd: release socket [ 50.956513][ T1589] vhci_hcd: disconnect device [ 50.957268][ T1589] vhci_hcd: stop threads [ 50.957927][ T1589] vhci_hcd: release socket [ 50.958778][ T1589] vhci_hcd: disconnect device