last executing test programs:
680.264122ms ago: executing program 2 (id=3):
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='dummy_udc.0', 0xb)
close(r0)
598.46229ms ago: executing program 2 (id=6):
r0 = syz_usb_connect(0x2, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040450c01600001000000010902190001010080fa0904000001ffffff0007058101000401"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x0, 0x1, "10"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000400), 0x0, 0x2)
ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000500)={0x1, 0x1, 0x1})
ioctl$VIDIOC_STREAMON(r1, 0x4004560a, &(0x7f0000000600)=0x1)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000800)={0x40, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000a00)={0x40, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000c00)={0x40, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
101.869679ms ago: executing program 4 (id=5):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='-2 -3 +4\n\x00', 0xa)
0s ago: executing program 4 (id=7):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x777)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget\x00', 0x777)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x777)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0/ifname\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200), 0x100)
kernel console output (not intermixed with test programs):
[ 51.191650][ T30] audit: type=1400 audit(1786959114.921:111): avc: denied { write } for pid=5448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 51.233405][ T30] audit: type=1400 audit(1786959114.961:112): avc: denied { write } for pid=5459 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 51.401916][ T30] audit: type=1400 audit(1786959115.131:113): avc: denied { write } for pid=5462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 51.443776][ T30] audit: type=1400 audit(1786959115.171:114): avc: denied { write } for pid=5473 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 51.604656][ T30] audit: type=1400 audit(1786959115.331:115): avc: denied { write } for pid=5476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 51.653206][ T30] audit: type=1400 audit(1786959115.381:116): avc: denied { write } for pid=5487 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 52.146680][ T30] audit: type=1400 audit(1786959115.881:117): avc: denied { write } for pid=5490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 52.193472][ T30] audit: type=1400 audit(1786959115.921:118): avc: denied { write } for pid=5501 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 52.363913][ T30] audit: type=1400 audit(1786959116.091:119): avc: denied { write } for pid=5504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 52.408553][ T30] audit: type=1400 audit(1786959116.141:120): avc: denied { write } for pid=5515 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 52.574401][ T30] audit: type=1400 audit(1786959116.301:121): avc: denied { write } for pid=5518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 52.619898][ T30] audit: type=1400 audit(1786959116.351:122): avc: denied { write } for pid=5529 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts.
[ 57.368470][ T30] kauditd_printk_skb: 6 callbacks suppressed
[ 57.368490][ T30] audit: type=1400 audit(1786959121.101:129): avc: denied { mounton } for pid=5580 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 57.398283][ T30] audit: type=1400 audit(1786959121.131:130): avc: denied { mount } for pid=5580 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 57.400616][ T5580] cgroup: Unknown subsys name 'net'
[ 57.427177][ T30] audit: type=1400 audit(1786959121.161:131): avc: denied { unmount } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 57.607709][ T5580] cgroup: Unknown subsys name 'cpuset'
[ 57.615041][ T5580] cgroup: Unknown subsys name 'rlimit'
[ 57.713684][ T30] audit: type=1400 audit(1786959121.441:132): avc: denied { setattr } for pid=5580 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 57.737450][ T30] audit: type=1400 audit(1786959121.441:133): avc: denied { create } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 57.762476][ T30] audit: type=1400 audit(1786959121.441:134): avc: denied { write } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 57.783119][ T30] audit: type=1400 audit(1786959121.441:135): avc: denied { read } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 57.803577][ T30] audit: type=1400 audit(1786959121.461:136): avc: denied { mounton } for pid=5580 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 57.830419][ T30] audit: type=1400 audit(1786959121.461:137): avc: denied { mount } for pid=5580 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 57.867449][ T5585] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 57.876488][ T30] audit: type=1400 audit(1786959121.611:138): avc: denied { relabelto } for pid=5585 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 58.783380][ T5580] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 63.239811][ T30] kauditd_printk_skb: 4 callbacks suppressed
[ 63.239826][ T30] audit: type=1400 audit(1786959126.971:143): avc: denied { create } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 63.289207][ T30] audit: type=1400 audit(1786959126.971:144): avc: denied { read write } for pid=5595 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 63.312996][ T30] audit: type=1400 audit(1786959126.971:145): avc: denied { open } for pid=5595 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 63.319358][ T5597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 63.336956][ T30] audit: type=1400 audit(1786959126.971:146): avc: denied { open } for pid=5594 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 63.371317][ T30] audit: type=1400 audit(1786959126.981:147): avc: denied { ioctl } for pid=5595 comm="syz-executor" path="socket:[5233]" dev="sockfs" ino=5233 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 63.396485][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 63.404437][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 63.411831][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 63.419595][ T5605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 63.420012][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 63.427672][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 63.434753][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 63.441773][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 63.449225][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 63.461104][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 63.463197][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 63.469731][ T5605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 63.476563][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 63.485233][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 63.490616][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 63.497295][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 63.504796][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 63.518242][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 63.520678][ T30] audit: type=1400 audit(1786959127.251:148): avc: denied { read } for pid=5595 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 63.526632][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 63.560577][ T5597] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 63.560673][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 63.569329][ T5597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 63.584580][ T30] audit: type=1400 audit(1786959127.281:149): avc: denied { open } for pid=5595 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 63.587724][ T5610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 63.607924][ T30] audit: type=1400 audit(1786959127.281:150): avc: denied { mounton } for pid=5595 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 63.618178][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 63.663802][ T30] audit: type=1400 audit(1786959127.281:151): avc: denied { module_request } for pid=5595 comm="syz-executor" kmod="netdev-nr4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 63.705994][ T30] audit: type=1400 audit(1786959127.421:152): avc: denied { sys_module } for pid=5594 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 64.820017][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state
[ 64.827561][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state
[ 64.834770][ T5602] bridge_slave_0: entered allmulticast mode
[ 64.841638][ T5602] bridge_slave_0: entered promiscuous mode
[ 64.854153][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state
[ 64.861286][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state
[ 64.868473][ T5595] bridge_slave_0: entered allmulticast mode
[ 64.875023][ T5595] bridge_slave_0: entered promiscuous mode
[ 64.892321][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state
[ 64.899636][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state
[ 64.906763][ T5602] bridge_slave_1: entered allmulticast mode
[ 64.913519][ T5602] bridge_slave_1: entered promiscuous mode
[ 64.923313][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state
[ 64.930414][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state
[ 64.937515][ T5595] bridge_slave_1: entered allmulticast mode
[ 64.944091][ T5595] bridge_slave_1: entered promiscuous mode
[ 65.007846][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 65.024130][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 65.051694][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 65.068271][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 65.101051][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state
[ 65.108435][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state
[ 65.115802][ T5594] bridge_slave_0: entered allmulticast mode
[ 65.122359][ T5594] bridge_slave_0: entered promiscuous mode
[ 65.154446][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state
[ 65.161563][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state
[ 65.168809][ T5594] bridge_slave_1: entered allmulticast mode
[ 65.175347][ T5594] bridge_slave_1: entered promiscuous mode
[ 65.183076][ T5595] team0: Port device team_slave_0 added
[ 65.188856][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state
[ 65.196127][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state
[ 65.203169][ T5608] bridge_slave_0: entered allmulticast mode
[ 65.210199][ T5608] bridge_slave_0: entered promiscuous mode
[ 65.216980][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state
[ 65.224027][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state
[ 65.231477][ T5601] bridge_slave_0: entered allmulticast mode
[ 65.238161][ T5601] bridge_slave_0: entered promiscuous mode
[ 65.246279][ T5602] team0: Port device team_slave_0 added
[ 65.258868][ T5595] team0: Port device team_slave_1 added
[ 65.264555][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state
[ 65.271680][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state
[ 65.278813][ T5608] bridge_slave_1: entered allmulticast mode
[ 65.285359][ T5608] bridge_slave_1: entered promiscuous mode
[ 65.292101][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state
[ 65.299227][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state
[ 65.306473][ T5601] bridge_slave_1: entered allmulticast mode
[ 65.313023][ T5601] bridge_slave_1: entered promiscuous mode
[ 65.320751][ T5602] team0: Port device team_slave_1 added
[ 65.364097][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 65.374932][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 65.390388][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 65.397391][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 65.423447][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 65.458989][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 65.465953][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 65.491942][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 65.504402][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 65.515161][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 65.525043][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 65.532097][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 65.558724][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 65.558760][ T5610] Bluetooth: hci0: command tx timeout
[ 65.570859][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 65.581904][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 65.607968][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 65.618633][ T5600] Bluetooth: hci2: command tx timeout
[ 65.620658][ T5594] team0: Port device team_slave_0 added
[ 65.624304][ T5610] Bluetooth: hci1: command tx timeout
[ 65.631939][ T5594] team0: Port device team_slave_1 added
[ 65.646986][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 65.657715][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 65.686739][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 65.693660][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 65.719804][ T5600] Bluetooth: hci4: command tx timeout
[ 65.719845][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 65.725460][ T5610] Bluetooth: hci3: command tx timeout
[ 65.761963][ T5601] team0: Port device team_slave_0 added
[ 65.768086][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 65.775056][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 65.777695][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 65.805466][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 65.807818][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 65.837556][ T5601] team0: Port device team_slave_1 added
[ 65.863302][ T5608] team0: Port device team_slave_0 added
[ 65.882237][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 65.889330][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 65.915443][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 65.934580][ T5608] team0: Port device team_slave_1 added
[ 65.943455][ T5595] hsr_slave_0: entered promiscuous mode
[ 65.949714][ T5595] hsr_slave_1: entered promiscuous mode
[ 65.962001][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 65.968960][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 65.994872][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 66.008463][ T5602] hsr_slave_0: entered promiscuous mode
[ 66.014377][ T5602] hsr_slave_1: entered promiscuous mode
[ 66.020350][ T5602] debugfs: 'hsr0' already exists in 'hsr'
[ 66.026099][ T5602] Cannot create hsr debugfs directory
[ 66.047565][ T5594] hsr_slave_0: entered promiscuous mode
[ 66.053497][ T5594] hsr_slave_1: entered promiscuous mode
[ 66.059450][ T5594] debugfs: 'hsr0' already exists in 'hsr'
[ 66.065163][ T5594] Cannot create hsr debugfs directory
[ 66.077441][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 66.084399][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 66.110329][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 66.122053][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 66.129010][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 66.154905][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 66.227735][ T5601] hsr_slave_0: entered promiscuous mode
[ 66.233672][ T5601] hsr_slave_1: entered promiscuous mode
[ 66.239783][ T5601] debugfs: 'hsr0' already exists in 'hsr'
[ 66.245495][ T5601] Cannot create hsr debugfs directory
[ 66.327895][ T5608] hsr_slave_0: entered promiscuous mode
[ 66.333886][ T5608] hsr_slave_1: entered promiscuous mode
[ 66.340073][ T5608] debugfs: 'hsr0' already exists in 'hsr'
[ 66.346042][ T5608] Cannot create hsr debugfs directory
[ 66.599294][ T5602] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 66.609238][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 66.617610][ T5602] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 66.627121][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 66.634737][ T5602] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 66.643177][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 66.650734][ T5602] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 66.659506][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 66.708968][ T5595] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 66.718877][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 66.728055][ T5595] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 66.737174][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 66.744702][ T5595] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 66.753287][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 66.761078][ T5595] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 66.769632][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 66.838536][ T5594] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 66.847891][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 66.856338][ T5594] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 66.864900][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 66.873182][ T5594] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 66.881219][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 66.888751][ T5594] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 66.897965][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 66.971018][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0
[ 66.978522][ T5601] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 66.987202][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 67.011702][ T5601] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 67.020062][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 67.027673][ T5601] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 67.036866][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 67.044376][ T5601] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 67.053083][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 67.114755][ T5602] 8021q: adding VLAN 0 to HW filter on device team0
[ 67.122686][ T5608] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 67.131490][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 67.139575][ T5608] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 67.147674][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 67.157254][ T5608] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 67.165365][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 67.182605][ T5608] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 67.191032][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 67.202611][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 67.209865][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 67.226543][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 67.233601][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 67.277636][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0
[ 67.332154][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0
[ 67.347003][ T5595] 8021q: adding VLAN 0 to HW filter on device team0
[ 67.366497][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state
[ 67.373561][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 67.401203][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0
[ 67.421528][ T48] bridge0: port 2(bridge_slave_1) entered blocking state
[ 67.428649][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 67.443823][ T5594] 8021q: adding VLAN 0 to HW filter on device team0
[ 67.464076][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 67.471186][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 67.503199][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 67.510321][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 67.520523][ T5601] 8021q: adding VLAN 0 to HW filter on device team0
[ 67.545548][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 67.552613][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 67.570738][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 67.577839][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 67.616461][ T5610] Bluetooth: hci0: command tx timeout
[ 67.624560][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0
[ 67.642543][ T5608] 8021q: adding VLAN 0 to HW filter on device team0
[ 67.671352][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 67.678472][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 67.705980][ T5610] Bluetooth: hci1: command tx timeout
[ 67.711559][ T5600] Bluetooth: hci2: command tx timeout
[ 67.719816][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 67.726950][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 67.786338][ T5600] Bluetooth: hci3: command tx timeout
[ 67.791814][ T5610] Bluetooth: hci4: command tx timeout
[ 67.804916][ T5601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 68.081728][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 68.213982][ T5602] veth0_vlan: entered promiscuous mode
[ 68.234695][ T5602] veth1_vlan: entered promiscuous mode
[ 68.314887][ T5602] veth0_macvtap: entered promiscuous mode
[ 68.344857][ T5602] veth1_macvtap: entered promiscuous mode
[ 68.366323][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 68.410151][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 68.440142][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 68.558145][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 68.586439][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 68.637913][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 68.685787][ T1118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 68.699350][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 68.726359][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 68.741618][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 68.754163][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 68.794213][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 68.815139][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 68.823886][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 68.846685][ T5595] veth0_vlan: entered promiscuous mode
[ 68.852787][ T30] kauditd_printk_skb: 1 callbacks suppressed
[ 68.852798][ T30] audit: type=1400 audit(1786959132.581:154): avc: denied { mounton } for pid=5602 comm="syz-executor" path="/root/syzkaller.pT6Wpw/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 68.886122][ T30] audit: type=1400 audit(1786959132.581:155): avc: denied { mount } for pid=5602 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[ 68.909963][ T30] audit: type=1400 audit(1786959132.591:156): avc: denied { mounton } for pid=5602 comm="syz-executor" path="/root/syzkaller.pT6Wpw/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 68.946137][ T30] audit: type=1400 audit(1786959132.591:157): avc: denied { mount } for pid=5602 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 68.948077][ T5595] veth1_vlan: entered promiscuous mode
[ 68.968482][ T30] audit: type=1400 audit(1786959132.591:158): avc: denied { mounton } for pid=5602 comm="syz-executor" path="/root/syzkaller.pT6Wpw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[ 68.975512][ T5602] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 69.016448][ T30] audit: type=1400 audit(1786959132.591:159): avc: denied { mounton } for pid=5602 comm="syz-executor" path="/root/syzkaller.pT6Wpw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 69.026431][ T5608] veth0_vlan: entered promiscuous mode
[ 69.047648][ T30] audit: type=1400 audit(1786959132.601:160): avc: denied { unmount } for pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 69.059107][ T5601] veth0_vlan: entered promiscuous mode
[ 69.072406][ T30] audit: type=1400 audit(1786959132.621:161): avc: denied { mounton } for pid=5602 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 69.080328][ T5594] veth0_vlan: entered promiscuous mode
[ 69.099373][ T30] audit: type=1400 audit(1786959132.621:162): avc: denied { mount } for pid=5602 comm="syz-executor" name="/" dev="gadgetfs" ino=7390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[ 69.132482][ T30] audit: type=1400 audit(1786959132.621:163): avc: denied { mount } for pid=5602 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 69.145627][ T5595] veth0_macvtap: entered promiscuous mode
[ 69.174611][ T5608] veth1_vlan: entered promiscuous mode
[ 69.192021][ T5595] veth1_macvtap: entered promiscuous mode
[ 69.202498][ T5594] veth1_vlan: entered promiscuous mode
[ 69.214359][ T5601] veth1_vlan: entered promiscuous mode
[ 69.282719][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 69.305449][ T5594] veth0_macvtap: entered promiscuous mode
[ 69.319258][ T5608] veth0_macvtap: entered promiscuous mode
[ 69.329192][ T5608] veth1_macvtap: entered promiscuous mode
[ 69.341963][ T5594] veth1_macvtap: entered promiscuous mode
[ 69.350804][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 69.361285][ T5601] veth0_macvtap: entered promiscuous mode
[ 69.380800][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 69.389240][ T5601] veth1_macvtap: entered promiscuous mode
[ 69.402137][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 69.418123][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 69.440607][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 69.457913][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 69.487208][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 69.531164][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 69.544142][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 69.548121][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 69.571415][ T5691] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[ 69.615112][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 69.623880][ T3344] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 69.627303][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 69.683574][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 69.691460][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 69.691498][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 69.691536][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 69.691575][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 69.691623][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 69.691653][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 69.702946][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 69.712915][ T5600] Bluetooth: hci0: command tx timeout
[ 69.785836][ T5600] Bluetooth: hci2: command tx timeout
[ 69.792694][ T5600] Bluetooth: hci1: command tx timeout
[ 69.798561][ T5691] usb 3-1: not running at top speed; connect to a high speed hub
[ 69.809010][ T5691] usb 3-1: New USB device found, idVendor=0c45, idProduct=6001, bcdDevice= 1.00
[ 69.824190][ T5691] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 1023
[ 69.837165][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 69.857078][ T5600] Bluetooth: hci3: command tx timeout
[ 69.861090][ T5610] Bluetooth: hci4: command tx timeout
[ 69.885763][ T5691] gspca_main: sonixb-2.14.0 probing 0c45:6001
[ 69.893677][ T3344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 69.900205][ T5795] ==================================================================
[ 69.905645][ T3344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 69.909534][ T5795] BUG: KASAN: slab-out-of-bounds in gether_get_ifname+0x102/0x120
[ 69.924581][ T5795] Read of size 1 at addr ffff88807dfe5042 by task syz.4.7/5795
[ 69.932113][ T5795]
[ 69.934424][ T5795] CPU: 1 UID: 0 PID: 5795 Comm: syz.4.7 Not tainted syzkaller #0 PREEMPT(full)
[ 69.934438][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 69.934444][ T5795] Call Trace:
[ 69.934448][ T5795]
[ 69.934452][ T5795] dump_stack_lvl+0x100/0x190
[ 69.934468][ T5795] print_report+0x13d/0x4b0
[ 69.934484][ T5795] ? __virt_addr_valid+0x239/0x430
[ 69.934499][ T5795] ? gether_get_ifname+0x102/0x120
[ 69.934512][ T5795] kasan_report+0xdf/0x1c0
[ 69.934527][ T5795] ? gether_get_ifname+0x102/0x120
[ 69.934540][ T5795] ? __pfx_f_phonet_ifname_show+0x10/0x10
[ 69.934551][ T5795] gether_get_ifname+0x102/0x120
[ 69.934564][ T5795] f_phonet_ifname_show+0x43/0x60
[ 69.934575][ T5795] configfs_read_iter+0x426/0x6f0
[ 69.934591][ T5795] __kernel_read+0x397/0xad0
[ 69.934608][ T5795] ? __pfx___kernel_read+0x10/0x10
[ 69.934628][ T5795] integrity_kernel_read+0x7e/0xb0
[ 69.934643][ T5795] ? __pfx_integrity_kernel_read+0x10/0x10
[ 69.934658][ T5795] ? ima_calc_file_hash_tfm+0x236/0x350
[ 69.934671][ T5795] ima_calc_file_hash_tfm+0x25e/0x350
[ 69.934683][ T5795] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10
[ 69.934695][ T5795] ? is_bpf_text_address+0x8a/0x1a0
[ 69.934716][ T5795] ? ima_alloc_tfm+0x21a/0x2e0
[ 69.934728][ T5795] ima_calc_file_hash+0x1e3/0x380
[ 69.934740][ T5795] ima_collect_measurement+0x94f/0xb30
[ 69.934754][ T5795] ? __pfx_ima_collect_measurement+0x10/0x10
[ 69.934770][ T5795] ? process_measurement+0x5ab/0x2350
[ 69.934781][ T5795] ? is_bad_inode+0xd/0x40
[ 69.934791][ T5795] ? xattr_resolve_name+0x27d/0x3f0
[ 69.934803][ T5795] ? vfs_getxattr_alloc+0xec/0x350
[ 69.934816][ T5795] ? ima_get_hash_algo+0x241/0x400
[ 69.934832][ T5795] ? __pfx_ima_get_hash_algo+0x10/0x10
[ 69.934850][ T5795] ? process_measurement+0xdfe/0x2350
[ 69.934861][ T5795] process_measurement+0xdfe/0x2350
[ 69.934873][ T5795] ? __pfx_process_measurement+0x10/0x10
[ 69.934884][ T5795] ? lockdep_unlock+0x5a/0xc0
[ 69.934902][ T5795] ? __configfs_open_file+0x6ca/0x9c0
[ 69.934916][ T5795] ima_file_check+0xc3/0x110
[ 69.934927][ T5795] ? __pfx_ima_file_check+0x10/0x10
[ 69.934938][ T5795] security_file_post_open+0xc4/0x210
[ 69.934955][ T5795] path_openat+0x985/0x4280
[ 69.934969][ T5795] ? __pfx_path_openat+0x10/0x10
[ 69.934982][ T5795] do_file_open+0x20e/0x430
[ 69.934994][ T5795] ? __pfx_do_file_open+0x10/0x10
[ 69.935009][ T5795] ? alloc_fd+0x471/0x7a0
[ 69.935020][ T5795] ? do_getname+0x191/0x390
[ 69.935035][ T5795] do_sys_openat2+0x10f/0x1e0
[ 69.935048][ T5795] ? __pfx_do_sys_openat2+0x10/0x10
[ 69.935064][ T5795] __x64_sys_openat+0x12d/0x210
[ 69.935079][ T5795] ? __pfx___x64_sys_openat+0x10/0x10
[ 69.935095][ T5795] do_syscall_64+0x115/0x870
[ 69.935108][ T5795] ? clear_bhb_loop+0x70/0xc0
[ 69.935119][ T5795] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.935131][ T5795] RIP: 0033:0x7f8b0979e0d9
[ 69.935139][ T5795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 69.935149][ T5795] RSP: 002b:00007f8b0a5b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 69.935161][ T5795] RAX: ffffffffffffffda RBX: 00007f8b09a25fa0 RCX: 00007f8b0979e0d9
[ 69.935169][ T5795] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c
[ 69.935175][ T5795] RBP: 00007f8b09835024 R08: 0000000000000000 R09: 0000000000000000
[ 69.935181][ T5795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 69.935188][ T5795] R13: 00007f8b09a26038 R14: 00007f8b09a25fa0 R15: 00007fff09306f58
[ 69.935197][ T5795]
[ 69.935201][ T5795]
[ 70.284444][ T5795] Allocated by task 5795:
[ 70.288756][ T5795] kasan_save_stack+0x30/0x50
[ 70.293418][ T5795] kasan_save_track+0x14/0x30
[ 70.298085][ T5795] __kasan_kmalloc+0xaa/0xb0
[ 70.302657][ T5795] __kvmalloc_node_noprof+0x34f/0x970
[ 70.308018][ T5795] alloc_netdev_mqs+0xd7/0x15c0
[ 70.312853][ T5795] gphonet_setup_default+0x37/0x80
[ 70.317943][ T5795] phonet_alloc_inst+0x83/0x130
[ 70.322770][ T5795] try_get_usb_function_instance+0x136/0x1f0
[ 70.328735][ T5795] usb_get_function_instance+0x16/0x70
[ 70.334177][ T5795] function_make+0x18c/0x3f0
[ 70.338749][ T5795] configfs_mkdir+0x51e/0xb70
[ 70.343408][ T5795] vfs_mkdir+0x361/0x850
[ 70.347633][ T5795] filename_mkdirat+0x48b/0x5e0
[ 70.352461][ T5795] __x64_sys_mkdirat+0x89/0xc0
[ 70.357205][ T5795] do_syscall_64+0x115/0x870
[ 70.361776][ T5795] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 70.367647][ T5795]
[ 70.369949][ T5795] The buggy address belongs to the object at ffff88807dfe4000
[ 70.369949][ T5795] which belongs to the cache kmalloc-cg-4k of size 4096
[ 70.384237][ T5795] The buggy address is located 314 bytes to the right of
[ 70.384237][ T5795] allocated 3848-byte region [ffff88807dfe4000, ffff88807dfe4f08)
[ 70.398964][ T5795]
[ 70.401266][ T5795] The buggy address belongs to the physical page:
[ 70.407651][ T5795] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807dfe6000 pfn:0x7dfe0
[ 70.417689][ T5795] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 70.426161][ T5795] memcg:ffff88807dfe1011
[ 70.430387][ T5795] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 70.438861][ T5795] page_type: f5(slab)
[ 70.442823][ T5795] raw: 00fff00000000240 ffff88801c02c500 ffff88801c02b7c8 ffff88801c02b7c8
[ 70.451382][ T5795] raw: ffff88807dfe6000 0000200000040003 00000000f5000000 ffff88807dfe1011
[ 70.459955][ T5795] head: 00fff00000000240 ffff88801c02c500 ffff88801c02b7c8 ffff88801c02b7c8
[ 70.468604][ T5795] head: ffff88807dfe6000 0000200000040003 00000000f5000000 ffff88807dfe1011
[ 70.477253][ T5795] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 70.485899][ T5795] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 70.494540][ T5795] page dumped because: kasan: bad access detected
[ 70.500945][ T5795] page_owner tracks the page as allocated
[ 70.506635][ T5795] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5795, tgid 5794 (syz.4.7), ts 69896217681, free_ts 39167615757
[ 70.529273][ T5795] post_alloc_hook+0xfd/0x120
[ 70.533929][ T5795] get_page_from_freelist+0xf48/0x3530
[ 70.539370][ T5795] __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 70.545241][ T5795] new_slab+0xa2/0x640
[ 70.549286][ T5795] refill_objects+0xe3/0x410
[ 70.553854][ T5795] __pcs_replace_empty_main+0x376/0x680
[ 70.559374][ T5795] __kvmalloc_node_noprof+0x793/0x970
[ 70.564727][ T5795] alloc_netdev_mqs+0xd7/0x15c0
[ 70.569559][ T5795] gphonet_setup_default+0x37/0x80
[ 70.574648][ T5795] phonet_alloc_inst+0x83/0x130
[ 70.579477][ T5795] try_get_usb_function_instance+0x136/0x1f0
[ 70.585442][ T5795] usb_get_function_instance+0x16/0x70
[ 70.590886][ T5795] function_make+0x18c/0x3f0
[ 70.595459][ T5795] configfs_mkdir+0x51e/0xb70
[ 70.600121][ T5795] vfs_mkdir+0x361/0x850
[ 70.604348][ T5795] filename_mkdirat+0x48b/0x5e0
[ 70.609183][ T5795] page last free pid 5261 tgid 5261 stack trace:
[ 70.615481][ T5795] __free_frozen_pages+0x79f/0x1090
[ 70.620664][ T5795] qlist_free_all+0x47/0xf0
[ 70.625148][ T5795] kasan_quarantine_reduce+0x1a0/0x1f0
[ 70.630585][ T5795] __kasan_slab_alloc+0x69/0x90
[ 70.635418][ T5795] kmem_cache_alloc_node_noprof+0x27d/0x6b0
[ 70.641290][ T5795] __alloc_skb+0x140/0x710
[ 70.645687][ T5795] alloc_skb_with_frags+0xdd/0x760
[ 70.650781][ T5795] sock_alloc_send_pskb+0x801/0x980
[ 70.655957][ T5795] unix_dgram_sendmsg+0x3c7/0x1810
[ 70.661049][ T5795] unix_seqpacket_sendmsg+0x12a/0x1d0
[ 70.666399][ T5795] sock_write_iter+0x53a/0x5b0
[ 70.671138][ T5795] do_iter_readv_writev+0x6f7/0x930
[ 70.676318][ T5795] vfs_writev+0x360/0xdd0
[ 70.680633][ T5795] do_writev+0x28a/0x340
[ 70.684860][ T5795] do_syscall_64+0x115/0x870
[ 70.689429][ T5795] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 70.695299][ T5795]
[ 70.697602][ T5795] Memory state around the buggy address:
[ 70.703205][ T5795] ffff88807dfe4f00: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 70.711244][ T5795] ffff88807dfe4f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 70.719292][ T5795] >ffff88807dfe5000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 70.727325][ T5795] ^
[ 70.733466][ T5795] ffff88807dfe5080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 70.741504][ T5795] ffff88807dfe5100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 70.749538][ T5795] ==================================================================
[ 70.776651][ T5795] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 70.783861][ T5795] CPU: 0 UID: 0 PID: 5795 Comm: syz.4.7 Not tainted syzkaller #0 PREEMPT(full)
[ 70.792868][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 70.802905][ T5795] Call Trace:
[ 70.806165][ T5795]
[ 70.809078][ T5795] dump_stack_lvl+0x100/0x190
[ 70.813740][ T5795] vpanic+0x552/0x970
[ 70.817704][ T5795] ? __pfx_vpanic+0x10/0x10
[ 70.822188][ T5795] ? mark_held_locks+0x40/0x70
[ 70.826935][ T5795] ? gether_get_ifname+0x102/0x120
[ 70.832029][ T5795] panic+0xd1/0xe0
[ 70.835732][ T5795] ? __pfx_panic+0x10/0x10
[ 70.840139][ T5795] ? gether_get_ifname+0x102/0x120
[ 70.845233][ T5795] ? preempt_schedule_common+0x42/0xc0
[ 70.850678][ T5795] check_panic_on_warn.cold+0x19/0x34
[ 70.856040][ T5795] end_report.part.0+0x3a/0x90
[ 70.860789][ T5795] kasan_report.cold+0xe/0x18
[ 70.865452][ T5795] ? gether_get_ifname+0x102/0x120
[ 70.870546][ T5795] ? __pfx_f_phonet_ifname_show+0x10/0x10
[ 70.876258][ T5795] gether_get_ifname+0x102/0x120
[ 70.881176][ T5795] f_phonet_ifname_show+0x43/0x60
[ 70.886178][ T5795] configfs_read_iter+0x426/0x6f0
[ 70.891186][ T5795] __kernel_read+0x397/0xad0
[ 70.895762][ T5795] ? __pfx___kernel_read+0x10/0x10
[ 70.900877][ T5795] integrity_kernel_read+0x7e/0xb0
[ 70.905974][ T5795] ? __pfx_integrity_kernel_read+0x10/0x10
[ 70.911766][ T5795] ? ima_calc_file_hash_tfm+0x236/0x350
[ 70.917295][ T5795] ima_calc_file_hash_tfm+0x25e/0x350
[ 70.922648][ T5795] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10
[ 70.928532][ T5795] ? is_bpf_text_address+0x8a/0x1a0
[ 70.933727][ T5795] ? ima_alloc_tfm+0x21a/0x2e0
[ 70.938473][ T5795] ima_calc_file_hash+0x1e3/0x380
[ 70.943479][ T5795] ima_collect_measurement+0x94f/0xb30
[ 70.948921][ T5795] ? __pfx_ima_collect_measurement+0x10/0x10
[ 70.954887][ T5795] ? process_measurement+0x5ab/0x2350
[ 70.960237][ T5795] ? is_bad_inode+0xd/0x40
[ 70.964630][ T5795] ? xattr_resolve_name+0x27d/0x3f0
[ 70.969813][ T5795] ? vfs_getxattr_alloc+0xec/0x350
[ 70.974911][ T5795] ? ima_get_hash_algo+0x241/0x400
[ 70.980007][ T5795] ? __pfx_ima_get_hash_algo+0x10/0x10
[ 70.985457][ T5795] ? process_measurement+0xdfe/0x2350
[ 70.990810][ T5795] process_measurement+0xdfe/0x2350
[ 70.995996][ T5795] ? __pfx_process_measurement+0x10/0x10
[ 71.001608][ T5795] ? lockdep_unlock+0x5a/0xc0
[ 71.006275][ T5795] ? __configfs_open_file+0x6ca/0x9c0
[ 71.011633][ T5795] ima_file_check+0xc3/0x110
[ 71.016205][ T5795] ? __pfx_ima_file_check+0x10/0x10
[ 71.021388][ T5795] security_file_post_open+0xc4/0x210
[ 71.026747][ T5795] path_openat+0x985/0x4280
[ 71.031234][ T5795] ? __pfx_path_openat+0x10/0x10
[ 71.036168][ T5795] do_file_open+0x20e/0x430
[ 71.040655][ T5795] ? __pfx_do_file_open+0x10/0x10
[ 71.045662][ T5795] ? alloc_fd+0x471/0x7a0
[ 71.049972][ T5795] ? do_getname+0x191/0x390
[ 71.054459][ T5795] do_sys_openat2+0x10f/0x1e0
[ 71.059123][ T5795] ? __pfx_do_sys_openat2+0x10/0x10
[ 71.064308][ T5795] __x64_sys_openat+0x12d/0x210
[ 71.069153][ T5795] ? __pfx___x64_sys_openat+0x10/0x10
[ 71.074511][ T5795] do_syscall_64+0x115/0x870
[ 71.079080][ T5795] ? clear_bhb_loop+0x70/0xc0
[ 71.083739][ T5795] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 71.089612][ T5795] RIP: 0033:0x7f8b0979e0d9
[ 71.094009][ T5795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 71.113595][ T5795] RSP: 002b:00007f8b0a5b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 71.121986][ T5795] RAX: ffffffffffffffda RBX: 00007f8b09a25fa0 RCX: 00007f8b0979e0d9
[ 71.129935][ T5795] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c
[ 71.137887][ T5795] RBP: 00007f8b09835024 R08: 0000000000000000 R09: 0000000000000000
[ 71.145839][ T5795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 71.153806][ T5795] R13: 00007f8b09a26038 R14: 00007f8b09a25fa0 R15: 00007fff09306f58
[ 71.161760][ T5795]
[ 71.164951][ T5795] Kernel Offset: disabled
[ 71.169246][ T5795] Rebooting in 86400 seconds..