last executing test programs: 1.218036921s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='devices\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='freeze\n\x00', 0x8) (async) 1.186054539s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x1d6b', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0104', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='dummy_udc.0', 0xb) nanosleep(&(0x7f00000003c0)={0x0, 0x5f5e100}, 0x0) 926.396601ms ago: executing program 0 (id=1): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000210), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000230)={0x2, 0x64}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000250)={0x2, 0x73}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000260)={0x2, 0x3}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000270)={0x2, 0x50}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000280)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000290)={0x2, 0x88}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002a0)={0x2, 0xb0}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002b0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002d0)={0x2, 0xaa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002e0), 0x2) nanosleep(&(0x7f0000000f00)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='alps', 0x4) 739.220491ms ago: executing program 3 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x0525\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0xa4a7\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r2) nanosleep(&(0x7f0000000440)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f00000004c0)=@filename='devtmpfs\x00', &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/ttyGS0\x00', 0x2, 0x0) ioctl$TIOCSBRK(r3, 0x5427) ioctl$TIOCCBRK(r3, 0x5428) ioctl$TCSBRK(r3, 0x5409, 0x1) 679.508818ms ago: executing program 1 (id=2): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404f17316a0001000000010902290001010080320904000001ffffff00070581020002000904000101ffffff0007058101000401"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x40}}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000001300)={0x40, 0x0, 0x1, "01"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)) syz_usb_control_io(r0, 0x0, &(0x7f0000001400)={0x84, &(0x7f0000001500)={0x40, 0x0, 0x1, "96"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)) syz_usb_control_io(r0, 0x0, &(0x7f0000001600)={0x84, &(0x7f0000001700)={0x40, 0x0, 0x1, 'P'}}) syz_open_dev$video(&(0x7f0000000400), 0x0, 0x2) 0s ago: executing program 0 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x777) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget\x00', 0x777) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x777) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0/ifname\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. [ 70.825829][ T5598] cgroup: Unknown subsys name 'net' [ 70.941774][ T5598] cgroup: Unknown subsys name 'cpuset' [ 70.950053][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.330460][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.330567][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.302655][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.424711][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.434453][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.465247][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.471305][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.471921][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.474383][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.476232][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.477029][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.477355][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.478248][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.480037][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.480338][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.480830][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.481921][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.483730][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.492153][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.493795][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.507227][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.549190][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.550377][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.870249][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.877980][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.878649][ T5611] bridge_slave_0: entered allmulticast mode [ 75.882663][ T5611] bridge_slave_0: entered promiscuous mode [ 75.904663][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.904788][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.905300][ T5607] bridge_slave_0: entered allmulticast mode [ 75.906916][ T5607] bridge_slave_0: entered promiscuous mode [ 75.911567][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.911663][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.911790][ T5607] bridge_slave_1: entered allmulticast mode [ 75.913954][ T5607] bridge_slave_1: entered promiscuous mode [ 75.923836][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.923932][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.924043][ T5611] bridge_slave_1: entered allmulticast mode [ 75.925911][ T5611] bridge_slave_1: entered promiscuous mode [ 76.039013][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.042145][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.062793][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.086175][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.132720][ T5607] team0: Port device team_slave_0 added [ 76.153400][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.154341][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.154457][ T5612] bridge_slave_0: entered allmulticast mode [ 76.156103][ T5612] bridge_slave_0: entered promiscuous mode [ 76.160775][ T5607] team0: Port device team_slave_1 added [ 76.199397][ T5611] team0: Port device team_slave_0 added [ 76.199611][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.199715][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.199843][ T5612] bridge_slave_1: entered allmulticast mode [ 76.202226][ T5612] bridge_slave_1: entered promiscuous mode [ 76.218025][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.218041][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.218065][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.220933][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.221383][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.221766][ T5613] bridge_slave_0: entered allmulticast mode [ 76.224423][ T5613] bridge_slave_0: entered promiscuous mode [ 76.229925][ T5611] team0: Port device team_slave_1 added [ 76.245378][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.245393][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.245416][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.256748][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.256844][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.257209][ T5613] bridge_slave_1: entered allmulticast mode [ 76.260008][ T5613] bridge_slave_1: entered promiscuous mode [ 76.295056][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.329529][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.329544][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.329569][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.352929][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.378351][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.378366][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.378390][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.407368][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.441024][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.457496][ T5612] team0: Port device team_slave_0 added [ 76.509820][ T5607] hsr_slave_0: entered promiscuous mode [ 76.510799][ T5607] hsr_slave_1: entered promiscuous mode [ 76.514702][ T5612] team0: Port device team_slave_1 added [ 76.522349][ T5611] hsr_slave_0: entered promiscuous mode [ 76.523277][ T5611] hsr_slave_1: entered promiscuous mode [ 76.523974][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 76.524065][ T5611] Cannot create hsr debugfs directory [ 76.533329][ T5619] Bluetooth: hci0: command tx timeout [ 76.533716][ T5621] Bluetooth: hci2: command tx timeout [ 76.534093][ T52] Bluetooth: hci1: command tx timeout [ 76.585711][ T5613] team0: Port device team_slave_0 added [ 76.608712][ T52] Bluetooth: hci3: command tx timeout [ 76.609836][ T5613] team0: Port device team_slave_1 added [ 76.610440][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.610451][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.610474][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.653084][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.653101][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.653125][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.727828][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.727904][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.727925][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.755965][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.755982][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.756006][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.838248][ T5612] hsr_slave_0: entered promiscuous mode [ 76.839316][ T5612] hsr_slave_1: entered promiscuous mode [ 76.840033][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 76.840050][ T5612] Cannot create hsr debugfs directory [ 76.912635][ T5613] hsr_slave_0: entered promiscuous mode [ 76.913630][ T5613] hsr_slave_1: entered promiscuous mode [ 76.914251][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 76.914268][ T5613] Cannot create hsr debugfs directory [ 77.172410][ T5607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.190998][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.197224][ T5607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.208499][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.214432][ T5607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.224796][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.244745][ T5607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.257342][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.338911][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.350461][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.351245][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.360732][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.370676][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.376457][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.377197][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.387209][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.467266][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.476507][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.493064][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.502787][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.503547][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.513079][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.531737][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.536512][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.623380][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.632690][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.633545][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.643276][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.647164][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.653169][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.661345][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.662219][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.672872][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.730813][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.766706][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.766812][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.785295][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.785387][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.824625][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.880501][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.893168][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.921284][ T1266] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.921692][ T1266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.954213][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.957210][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.957308][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.996141][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.996260][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.021081][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.042259][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.042362][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.062516][ T5611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.144270][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.172726][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.172855][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.196102][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.196248][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.614988][ T5621] Bluetooth: hci1: command tx timeout [ 78.615010][ T5619] Bluetooth: hci2: command tx timeout [ 78.615093][ T52] Bluetooth: hci0: command tx timeout [ 78.690831][ T52] Bluetooth: hci3: command tx timeout [ 78.870344][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.942658][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.067229][ T5607] veth0_vlan: entered promiscuous mode [ 79.108647][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.110938][ T5607] veth1_vlan: entered promiscuous mode [ 79.141824][ T5611] veth0_vlan: entered promiscuous mode [ 79.177746][ T5611] veth1_vlan: entered promiscuous mode [ 79.200679][ T5607] veth0_macvtap: entered promiscuous mode [ 79.220955][ T5607] veth1_macvtap: entered promiscuous mode [ 79.252004][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.279709][ T5611] veth0_macvtap: entered promiscuous mode [ 79.284188][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.303069][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.315387][ T5612] veth0_vlan: entered promiscuous mode [ 79.322345][ T5611] veth1_macvtap: entered promiscuous mode [ 79.345833][ T5612] veth1_vlan: entered promiscuous mode [ 79.351447][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.382732][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.423795][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.461350][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.487238][ T5613] veth0_vlan: entered promiscuous mode [ 79.516741][ T5613] veth1_vlan: entered promiscuous mode [ 79.524326][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.524368][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.550384][ T5612] veth0_macvtap: entered promiscuous mode [ 79.561005][ T5612] veth1_macvtap: entered promiscuous mode [ 79.631088][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.631129][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.638370][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.640194][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.640211][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.686466][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.700094][ T5613] veth0_macvtap: entered promiscuous mode [ 79.709885][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.715106][ T1266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.715149][ T1266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.715184][ T1266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.715218][ T1266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.715250][ T1266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.715283][ T1266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.715315][ T1266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.715347][ T1266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.715380][ T1266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.762283][ T5613] veth1_macvtap: entered promiscuous mode [ 79.770377][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.770395][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.878178][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.881859][ T5607] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.912656][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.969177][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.969214][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.019087][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.019974][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.020012][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.020045][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.129315][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.129351][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.170612][ T5762] PM: suspend entry (s2idle) [ 80.225656][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.225690][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.256378][ T5764] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 80.265664][ T5764] udc dummy_udc.0: failed to start g1: -19 [ 80.269433][ T5764] UDC core: g1: couldn't find an available UDC or it's busy [ 80.341300][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.341361][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.561420][ T5769] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 80.569466][ T5769] udc dummy_udc.0: failed to start g1: -19 [ 80.587330][ T5769] UDC core: g1: couldn't find an available UDC or it's busy [ 80.643059][ T5767] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input6 [ 80.688968][ T52] Bluetooth: hci0: command tx timeout [ 80.688994][ T5619] Bluetooth: hci2: command tx timeout [ 80.689022][ T5619] Bluetooth: hci1: command tx timeout [ 80.743276][ T50] Filesystems sync: 0.571 seconds [ 80.768958][ T52] Bluetooth: hci3: command tx timeout [ 80.879110][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.921431][ T5762] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 80.921568][ T5762] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 80.943546][ T5762] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 80.951642][ T5762] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 80.952210][ T5762] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 80.965812][ T5762] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 80.968061][ T5762] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 80.968158][ T5762] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 80.981376][ T5762] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 80.995070][ T5762] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 80.995167][ T5762] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.011778][ T5762] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.051086][ T9] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice= 1.00 [ 81.055158][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.073766][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 81.270686][ T5774] ================================================================== [ 81.270704][ T5774] BUG: KASA ** replaying previous printk message ** [ 81.270704][ T5774] BUG: KASAN: slab-out-of-bounds in gether_get_ifname+0xee/0x110 [ 81.270738][ T5774] Read of size 1 at addr ffff88807a6f5042 by task syz.0.6/5774 [ 81.270754][ T5774] [ 81.270771][ T5774] CPU: 1 UID: 0 PID: 5774 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT(full) [ 81.270793][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.270812][ T5774] Call Trace: [ 81.270824][ T5774] [ 81.270833][ T5774] dump_stack_lvl+0xe8/0x150 [ 81.270859][ T5774] print_address_description+0x55/0x1e0 [ 81.270887][ T5774] ? gether_get_ifname+0xee/0x110 [ 81.270903][ T5774] print_report+0x58/0x70 [ 81.270927][ T5774] kasan_report+0x117/0x150 [ 81.270952][ T5774] ? gether_get_ifname+0xee/0x110 [ 81.270973][ T5774] gether_get_ifname+0xee/0x110 [ 81.270991][ T5774] f_phonet_ifname_show+0x48/0x60 [ 81.271016][ T5774] ? __pfx_f_phonet_ifname_show+0x10/0x10 [ 81.271042][ T5774] configfs_read_iter+0x2b7/0x620 [ 81.271065][ T5774] __kernel_read+0x4ca/0x960 [ 81.271095][ T5774] ? __pfx___kernel_read+0x10/0x10 [ 81.271129][ T5774] ? rcu_is_watching+0x16/0xb0 [ 81.271149][ T5774] integrity_kernel_read+0x89/0xd0 [ 81.271175][ T5774] ? __pfx_integrity_kernel_read+0x10/0x10 [ 81.271201][ T5774] ? __kmalloc_cache_noprof+0x14d/0x600 [ 81.271220][ T5774] ? ima_calc_file_hash+0x40f/0x890 [ 81.271239][ T5774] ? ima_calc_file_hash+0x40f/0x890 [ 81.271261][ T5774] ima_calc_file_hash+0x451/0x890 [ 81.271292][ T5774] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 81.271328][ T5774] ? generic_fillattr+0x575/0x840 [ 81.271358][ T5774] ima_collect_measurement+0x51b/0xa00 [ 81.271387][ T5774] ? __pfx_ima_collect_measurement+0x10/0x10 [ 81.271412][ T5774] ? trace_contention_end+0x3d/0x140 [ 81.271445][ T5774] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 81.271477][ T5774] process_measurement+0x1272/0x1c10 [ 81.271502][ T5774] ? __pfx_process_measurement+0x10/0x10 [ 81.271536][ T5774] ? __pfx___up_read+0x10/0x10 [ 81.271563][ T5774] ima_file_check+0xe1/0x130 [ 81.271583][ T5774] ? __pfx_ima_file_check+0x10/0x10 [ 81.271606][ T5774] security_file_post_open+0xb3/0x260 [ 81.271631][ T5774] path_openat+0x1485/0x1d60 [ 81.271657][ T5774] do_file_open+0x23e/0x4a0 [ 81.271677][ T5774] ? __pfx_do_file_open+0x10/0x10 [ 81.271712][ T5774] ? _raw_spin_unlock+0x28/0x50 [ 81.271733][ T5774] ? alloc_fd+0x651/0x6c0 [ 81.271762][ T5774] do_sys_openat2+0x115/0x200 [ 81.271786][ T5774] ? __se_sys_futex+0x3a8/0x450 [ 81.271807][ T5774] ? __pfx_do_sys_openat2+0x10/0x10 [ 81.271834][ T5774] ? rcu_is_watching+0x16/0xb0 [ 81.271852][ T5774] __x64_sys_openat+0x138/0x170 [ 81.271879][ T5774] do_syscall_64+0x166/0x520 [ 81.271902][ T5774] ? trace_irq_disable+0x3b/0x140 [ 81.271926][ T5774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.271946][ T5774] ? clear_bhb_loop+0x70/0xc0 [ 81.271967][ T5774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.271985][ T5774] RIP: 0033:0x7f15cb99e0d9 [ 81.272015][ T5774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.272032][ T5774] RSP: 002b:00007f15cc7e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 81.272058][ T5774] RAX: ffffffffffffffda RBX: 00007f15cbc25fa0 RCX: 00007f15cb99e0d9 [ 81.272073][ T5774] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 81.272087][ T5774] RBP: 00007f15cba35024 R08: 0000000000000000 R09: 0000000000000000 [ 81.272099][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.272110][ T5774] R13: 00007f15cbc26038 R14: 00007f15cbc25fa0 R15: 00007ffd437595c8 [ 81.272131][ T5774] [ 81.272138][ T5774] [ 81.272142][ T5774] Allocated by task 5774: [ 81.272158][ T5774] kasan_save_track+0x3e/0x80 [ 81.272179][ T5774] __kasan_kmalloc+0x93/0xb0 [ 81.272199][ T5774] __kvmalloc_node_noprof+0x50f/0x820 [ 81.272219][ T5774] alloc_netdev_mqs+0xa9/0x12b0 [ 81.272241][ T5774] phonet_alloc_inst+0xa4/0x180 [ 81.272264][ T5774] usb_get_function_instance+0xe3/0x2f0 [ 81.272294][ T5774] function_make+0x127/0x360 [ 81.272318][ T5774] configfs_mkdir+0x4f6/0x9e0 [ 81.272343][ T5774] vfs_mkdir+0x40c/0x620 [ 81.272360][ T5774] filename_mkdirat+0x285/0x510 [ 81.272380][ T5774] __se_sys_mkdirat+0x35/0x150 [ 81.272397][ T5774] do_syscall_64+0x166/0x520 [ 81.272418][ T5774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.272435][ T5774] [ 81.272439][ T5774] The buggy address belongs to the object at ffff88807a6f4000 [ 81.272439][ T5774] which belongs to the cache kmalloc-cg-4k of size 4096 [ 81.272455][ T5774] The buggy address is located 314 bytes to the right of [ 81.272455][ T5774] allocated 3848-byte region [ffff88807a6f4000, ffff88807a6f4f08) [ 81.272476][ T5774] [ 81.272480][ T5774] The buggy address belongs to the physical page: [ 81.272499][ T5774] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a6f0 [ 81.272521][ T5774] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 81.272536][ T5774] memcg:ffff888028381541 [ 81.272544][ T5774] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 81.272566][ T5774] page_type: f5(slab) [ 81.272587][ T5774] raw: 00fff00000000040 ffff88813ff1b500 dead000000000100 dead000000000122 [ 81.272605][ T5774] raw: 0000000000000000 0000000200040004 00000000f5000000 ffff888028381541 [ 81.272623][ T5774] head: 00fff00000000040 ffff88813ff1b500 dead000000000100 dead000000000122 [ 81.272640][ T5774] head: 0000000000000000 0000000200040004 00000000f5000000 ffff888028381541 [ 81.272656][ T5774] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 81.272669][ T5774] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 81.272678][ T5774] page dumped because: kasan: bad access detected [ 81.272690][ T5774] page_owner tracks the page as allocated [ 81.272698][ T5774] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4983, tgid 4983 (udevd), ts 41336868007 [ 81.272727][ T5774] post_alloc_hook+0x1f9/0x250 [ 81.272754][ T5774] get_page_from_freelist+0x2209/0x2280 [ 81.272773][ T5774] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 81.272792][ T5774] allocate_slab+0x7d/0x620 [ 81.272813][ T5774] refill_objects+0x2d5/0x350 [ 81.272834][ T5774] __pcs_replace_empty_main+0x2c8/0x6c0 [ 81.272855][ T5774] __kvmalloc_node_noprof+0x63c/0x820 [ 81.272873][ T5774] seq_read_iter+0x1ea/0xca0 [ 81.272892][ T5774] vfs_read+0x595/0xa80 [ 81.272917][ T5774] ksys_read+0x150/0x270 [ 81.272942][ T5774] do_syscall_64+0x166/0x520 [ 81.272965][ T5774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.272982][ T5774] page last free pid 4984 tgid 4984 ts 41325878776 stack trace: [ 81.272996][ T5774] __free_frozen_pages+0xc93/0xd90 [ 81.273012][ T5774] __slab_free+0x274/0x2c0 [ 81.273029][ T5774] qlist_free_all+0x99/0x100 [ 81.273047][ T5774] kasan_quarantine_reduce+0x148/0x160 [ 81.273066][ T5774] __kasan_slab_alloc+0x22/0x80 [ 81.273086][ T5774] __kmalloc_noprof+0x307/0x720 [ 81.273102][ T5774] tomoyo_encode+0x2ad/0x570 [ 81.273129][ T5774] tomoyo_path_perm+0x318/0x560 [ 81.273150][ T5774] tomoyo_path_symlink+0xab/0xf0 [ 81.273168][ T5774] security_path_symlink+0x16f/0x360 [ 81.273185][ T5774] filename_symlinkat+0x134/0x410 [ 81.273206][ T5774] __se_sys_symlink+0x4d/0x2b0 [ 81.273227][ T5774] do_syscall_64+0x166/0x520 [ 81.273249][ T5774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.273273][ T5774] [ 81.273278][ T5774] Memory state around the buggy address: [ 81.273298][ T5774] ffff88807a6f4f00: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 81.273311][ T5774] ffff88807a6f4f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 81.273324][ T5774] >ffff88807a6f5000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 81.273334][ T5774] ^ [ 81.273344][ T5774] ffff88807a6f5080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 81.273357][ T5774] ffff88807a6f5100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 81.273367][ T5774] ================================================================== [ 81.283653][ T5774] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 82.068974][ T5774] CPU: 0 UID: 0 PID: 5774 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT(full) [ 82.077984][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.088044][ T5774] Call Trace: [ 82.091320][ T5774] [ 82.094256][ T5774] vpanic+0x56d/0xa60 [ 82.098262][ T5774] ? __pfx_vpanic+0x10/0x10 [ 82.102758][ T5774] ? __pfx___schedule+0x10/0x10 [ 82.107594][ T5774] panic+0xc5/0xd0 [ 82.111303][ T5774] ? __pfx_panic+0x10/0x10 [ 82.115705][ T5774] ? preempt_schedule_common+0x7f/0xd0 [ 82.121149][ T5774] ? gether_get_ifname+0xee/0x110 [ 82.126155][ T5774] check_panic_on_warn+0x89/0xb0 [ 82.131080][ T5774] ? gether_get_ifname+0xee/0x110 [ 82.136091][ T5774] end_report+0x73/0x170 [ 82.140349][ T5774] ? gether_get_ifname+0xee/0x110 [ 82.145386][ T5774] kasan_report+0x128/0x150 [ 82.149886][ T5774] ? gether_get_ifname+0xee/0x110 [ 82.154893][ T5774] gether_get_ifname+0xee/0x110 [ 82.159728][ T5774] f_phonet_ifname_show+0x48/0x60 [ 82.164747][ T5774] ? __pfx_f_phonet_ifname_show+0x10/0x10 [ 82.170477][ T5774] configfs_read_iter+0x2b7/0x620 [ 82.175486][ T5774] __kernel_read+0x4ca/0x960 [ 82.180063][ T5774] ? __pfx___kernel_read+0x10/0x10 [ 82.185164][ T5774] ? rcu_is_watching+0x16/0xb0 [ 82.189929][ T5774] integrity_kernel_read+0x89/0xd0 [ 82.195028][ T5774] ? __pfx_integrity_kernel_read+0x10/0x10 [ 82.200817][ T5774] ? __kmalloc_cache_noprof+0x14d/0x600 [ 82.206342][ T5774] ? ima_calc_file_hash+0x40f/0x890 [ 82.211606][ T5774] ? ima_calc_file_hash+0x40f/0x890 [ 82.216809][ T5774] ima_calc_file_hash+0x451/0x890 [ 82.221818][ T5774] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 82.227356][ T5774] ? generic_fillattr+0x575/0x840 [ 82.232367][ T5774] ima_collect_measurement+0x51b/0xa00 [ 82.237810][ T5774] ? __pfx_ima_collect_measurement+0x10/0x10 [ 82.243772][ T5774] ? trace_contention_end+0x3d/0x140 [ 82.249049][ T5774] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 82.254501][ T5774] process_measurement+0x1272/0x1c10 [ 82.259772][ T5774] ? __pfx_process_measurement+0x10/0x10 [ 82.265393][ T5774] ? __pfx___up_read+0x10/0x10 [ 82.270156][ T5774] ima_file_check+0xe1/0x130 [ 82.274733][ T5774] ? __pfx_ima_file_check+0x10/0x10 [ 82.279921][ T5774] security_file_post_open+0xb3/0x260 [ 82.285281][ T5774] path_openat+0x1485/0x1d60 [ 82.289856][ T5774] do_file_open+0x23e/0x4a0 [ 82.294342][ T5774] ? __pfx_do_file_open+0x10/0x10 [ 82.299350][ T5774] ? _raw_spin_unlock+0x28/0x50 [ 82.304183][ T5774] ? alloc_fd+0x651/0x6c0 [ 82.308500][ T5774] do_sys_openat2+0x115/0x200 [ 82.313169][ T5774] ? __se_sys_futex+0x3a8/0x450 [ 82.318002][ T5774] ? __pfx_do_sys_openat2+0x10/0x10 [ 82.323191][ T5774] ? rcu_is_watching+0x16/0xb0 [ 82.327942][ T5774] __x64_sys_openat+0x138/0x170 [ 82.332779][ T5774] do_syscall_64+0x166/0x520 [ 82.337354][ T5774] ? trace_irq_disable+0x3b/0x140 [ 82.342361][ T5774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.348414][ T5774] ? clear_bhb_loop+0x70/0xc0 [ 82.353088][ T5774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.359330][ T5774] RIP: 0033:0x7f15cb99e0d9 [ 82.363817][ T5774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.383410][ T5774] RSP: 002b:00007f15cc7e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 82.391814][ T5774] RAX: ffffffffffffffda RBX: 00007f15cbc25fa0 RCX: 00007f15cb99e0d9 [ 82.399780][ T5774] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 82.407733][ T5774] RBP: 00007f15cba35024 R08: 0000000000000000 R09: 0000000000000000 [ 82.415686][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.423642][ T5774] R13: 00007f15cbc26038 R14: 00007f15cbc25fa0 R15: 00007ffd437595c8 [ 82.431608][ T5774] [ 82.434931][ T5774] Kernel Offset: disabled [ 82.439264][ T5774] Rebooting in 86400 seconds..