[ 46.210522][ T4899] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.260663][ T4899] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.361591][ T4899] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.467375][ T4899] bridge_slave_1: left allmulticast mode [ 46.467408][ T4899] bridge_slave_1: left promiscuous mode [ 46.467482][ T4899] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.470165][ T4899] bridge_slave_0: left allmulticast mode [ 46.470178][ T4899] bridge_slave_0: left promiscuous mode [ 46.470246][ T4899] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.523639][ T4899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.568458][ T4899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.578520][ T4899] bond0 (unregistering): Released all slaves [ 46.729602][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 46.844413][ T4899] hsr_slave_0: left promiscuous mode [ 46.845583][ T4899] hsr_slave_1: left promiscuous mode [ 46.846016][ T4899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.846029][ T4899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.849292][ T4899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.849304][ T4899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.854543][ T4899] veth1_macvtap: left promiscuous mode [ 46.855576][ T4899] veth0_macvtap: left promiscuous mode [ 46.856779][ T4899] veth1_vlan: left promiscuous mode [ 46.857943][ T4899] veth0_vlan: left promiscuous mode [ 46.944520][ T4899] team0 (unregistering): Port device team_slave_1 removed [ 46.950972][ T4899] team0 (unregistering): Port device team_slave_0 removed [ 47.000127][ T4400] 8021q: adding VLAN 0 to HW filter on device eth1 [ 47.122574][ T4400] 8021q: adding VLAN 0 to HW filter on device eth2 [ 47.235931][ T4400] 8021q: adding VLAN 0 to HW filter on device eth3 Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts. 1970/01/01 00:00:51 parsed 1 programs 1970/01/01 00:00:51 serving rpc on tcp://40285 Setting up swapspace version 1, size = 127995904 bytes [ 52.376313][ T5024] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 55.434809][ T5058] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.434898][ T5058] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.434947][ T5058] bridge_slave_0: entered allmulticast mode [ 55.435359][ T5058] bridge_slave_0: entered promiscuous mode [ 55.436626][ T5058] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.436680][ T5058] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.436731][ T5058] bridge_slave_1: entered allmulticast mode [ 55.437556][ T5058] bridge_slave_1: entered promiscuous mode [ 55.445323][ T5058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.446238][ T5058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.452694][ T5058] team0: Port device team_slave_0 added [ 55.453384][ T5058] team0: Port device team_slave_1 added [ 55.461283][ T5058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.461303][ T5058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.461317][ T5058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.462254][ T5058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.462261][ T5058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.462273][ T5058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.471790][ T5058] hsr_slave_0: entered promiscuous mode [ 55.472065][ T5058] hsr_slave_1: entered promiscuous mode [ 55.913827][ T5058] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.916088][ T5058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.921489][ T5058] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.923832][ T5058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.925681][ T5058] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.927992][ T5058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.929770][ T5058] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.932072][ T5058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.943101][ T5058] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.943142][ T5058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.943228][ T5058] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.943261][ T5058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.963898][ T5058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.969870][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.971408][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.978807][ T5058] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.982981][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.983037][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.986911][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.986957][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.090542][ T5058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.104256][ T5058] veth0_vlan: entered promiscuous mode [ 56.116026][ T5058] veth1_vlan: entered promiscuous mode [ 56.124535][ T5058] veth0_macvtap: entered promiscuous mode [ 56.126906][ T5058] veth1_macvtap: entered promiscuous mode [ 56.132286][ T5058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.138866][ T5058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.157432][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.158588][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.158608][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.158622][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.240570][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.252242][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.252274][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.266422][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.266461][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.314080][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.408168][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.483975][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.874733][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.875083][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.875246][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.875569][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.875760][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:57 executed programs: 0 [ 57.154237][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.154639][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.154807][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.155096][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.155294][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.283524][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.283603][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.283661][ T5242] bridge_slave_0: entered allmulticast mode [ 57.284070][ T5242] bridge_slave_0: entered promiscuous mode [ 57.285266][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.285317][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.285439][ T5242] bridge_slave_1: entered allmulticast mode [ 57.285851][ T5242] bridge_slave_1: entered promiscuous mode [ 57.293179][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.294387][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.301610][ T5242] team0: Port device team_slave_0 added [ 57.302467][ T5242] team0: Port device team_slave_1 added [ 57.308663][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.308686][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.308700][ T5242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.309256][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.309263][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.309275][ T5242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.321447][ T5242] hsr_slave_0: entered promiscuous mode [ 57.321741][ T5242] hsr_slave_1: entered promiscuous mode [ 57.321925][ T5242] debugfs: 'hsr0' already exists in 'hsr' [ 57.321935][ T5242] Cannot create hsr debugfs directory [ 59.237639][ T4744] Bluetooth: hci0: command tx timeout [ 59.342736][ T12] bridge_slave_1: left allmulticast mode [ 59.342772][ T12] bridge_slave_1: left promiscuous mode [ 59.342867][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.346955][ T12] bridge_slave_0: left allmulticast mode [ 59.346980][ T12] bridge_slave_0: left promiscuous mode [ 59.347413][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.399921][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.428527][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.468121][ T12] bond0 (unregistering): Released all slaves [ 59.530013][ T12] hsr_slave_0: left promiscuous mode [ 59.531457][ T12] hsr_slave_1: left promiscuous mode [ 59.531752][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.531770][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.536807][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.538423][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.547744][ T12] veth1_macvtap: left promiscuous mode [ 59.547790][ T12] veth0_macvtap: left promiscuous mode [ 59.547848][ T12] veth1_vlan: left promiscuous mode [ 59.547886][ T12] veth0_vlan: left promiscuous mode [ 59.647262][ T12] team0 (unregistering): Port device team_slave_1 removed [ 59.652696][ T12] team0 (unregistering): Port device team_slave_0 removed [ 59.694602][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 59.969757][ T5242] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.973056][ T5242] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.975058][ T5242] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.978097][ T5242] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.980022][ T5242] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.982488][ T5242] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.984478][ T5242] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.986630][ T5242] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.024806][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.031370][ T5242] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.033031][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.033084][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.035524][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.035548][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.183138][ T5242] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.185093][ T5242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.295442][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.312300][ T5242] veth0_vlan: entered promiscuous mode [ 60.315283][ T5242] veth1_vlan: entered promiscuous mode [ 60.343509][ T5242] veth0_macvtap: entered promiscuous mode [ 60.345834][ T5242] veth1_macvtap: entered promiscuous mode [ 60.349482][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.350395][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.352742][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.406222][ T490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.406255][ T490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.413577][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.415091][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.419534][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.421526][ T490] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.421554][ T490] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.457632][ T5331] ================================================================== [ 60.457648][ T5331] BUG: KASAN: slab-out-of-bounds in gether_get_ifname+0x104/0x124 [ 60.457668][ T5331] Read of size 1 at addr ffff0000d3195042 by task syz.0.17/5331 [ 60.457676][ T5331] [ 60.457680][ T5331] CPU: 0 UID: 0 PID: 5331 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT [ 60.457689][ T5331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 60.457694][ T5331] Call trace: [ 60.457696][ T5331] show_stack+0x2c/0x3c (C) [ 60.457709][ T5331] __dump_stack+0x30/0x40 [ 60.457719][ T5331] dump_stack_lvl+0xd8/0x12c [ 60.457729][ T5331] print_address_description+0xb0/0x238 [ 60.457737][ T5331] print_report+0x68/0x84 [ 60.457744][ T5331] kasan_report+0x8c/0xc4 [ 60.457754][ T5331] __asan_report_load1_noabort+0x20/0x2c [ 60.457763][ T5331] gether_get_ifname+0x104/0x124 [ 60.457772][ T5331] f_phonet_ifname_show+0x4c/0x60 [ 60.457781][ T5331] configfs_read_iter+0x234/0x508 [ 60.457792][ T5331] vfs_read+0x498/0x8c8 [ 60.457799][ T5331] ksys_read+0x12c/0x228 [ 60.457805][ T5331] __arm64_sys_read+0x84/0x98 [ 60.457812][ T5331] invoke_syscall+0x98/0x244 [ 60.457822][ T5331] el0_svc_common+0xec/0x23c [ 60.457831][ T5331] do_el0_svc+0x4c/0x5c [ 60.457840][ T5331] el0_svc+0x64/0x260 [ 60.457850][ T5331] el0t_64_sync_handler+0x44/0x104 [ 60.457858][ T5331] el0t_64_sync+0x198/0x19c [ 60.457866][ T5331] [ 60.457867][ T5331] Allocated by task 5331: [ 60.457871][ T5331] kasan_save_track+0x40/0x78 [ 60.457879][ T5331] kasan_save_alloc_info+0x40/0x50 [ 60.457887][ T5331] __kasan_kmalloc+0x9c/0xb4 [ 60.457894][ T5331] __kvmalloc_node_noprof+0x460/0x7d8 [ 60.457901][ T5331] alloc_netdev_mqs+0xac/0xf2c [ 60.457907][ T5331] gphonet_setup_default+0x38/0x88 [ 60.457915][ T5331] phonet_alloc_inst+0x84/0x100 [ 60.457925][ T5331] try_get_usb_function_instance+0xe4/0x164 [ 60.457934][ T5331] usb_get_function_instance+0x24/0xb0 [ 60.457942][ T5331] function_make+0x110/0x300 [ 60.457949][ T5331] configfs_mkdir+0x374/0x7d4 [ 60.457954][ T5331] vfs_mkdir+0x2dc/0x464 [ 60.457961][ T5331] filename_mkdirat+0x228/0x3f4 [ 60.457968][ T5331] __arm64_sys_mkdirat+0x9c/0xc0 [ 60.457975][ T5331] invoke_syscall+0x98/0x244 [ 60.457983][ T5331] el0_svc_common+0xec/0x23c [ 60.457991][ T5331] do_el0_svc+0x4c/0x5c [ 60.457999][ T5331] el0_svc+0x64/0x260 [ 60.458005][ T5331] el0t_64_sync_handler+0x44/0x104 [ 60.458012][ T5331] el0t_64_sync+0x198/0x19c [ 60.458017][ T5331] [ 60.458018][ T5331] The buggy address belongs to the object at ffff0000d3194000 [ 60.458018][ T5331] which belongs to the cache kmalloc-cg-4k of size 4096 [ 60.458024][ T5331] The buggy address is located 314 bytes to the right of [ 60.458024][ T5331] allocated 3848-byte region [ffff0000d3194000, ffff0000d3194f08) [ 60.458031][ T5331] [ 60.458033][ T5331] The buggy address belongs to the physical page: [ 60.458037][ T5331] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113190 [ 60.458043][ T5331] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 60.458049][ T5331] memcg:ffff0000dfbdc8c1 [ 60.458052][ T5331] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 60.458060][ T5331] page_type: f5(slab) [ 60.458067][ T5331] raw: 05ffc00000000040 ffff0000c000b500 dead000000000100 dead000000000122 [ 60.458072][ T5331] raw: 0000000000000000 0000000800040004 00000000f5000000 ffff0000dfbdc8c1 [ 60.458078][ T5331] head: 05ffc00000000040 ffff0000c000b500 dead000000000100 dead000000000122 [ 60.458083][ T5331] head: 0000000000000000 0000000800040004 00000000f5000000 ffff0000dfbdc8c1 [ 60.458089][ T5331] head: 05ffc00000000003 fffffdffc34c6401 00000000ffffffff 00000000ffffffff [ 60.458094][ T5331] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 60.458097][ T5331] page dumped because: kasan: bad access detected [ 60.458100][ T5331] [ 60.458102][ T5331] Memory state around the buggy address: [ 60.458105][ T5331] ffff0000d3194f00: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 60.458109][ T5331] ffff0000d3194f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 60.458114][ T5331] >ffff0000d3195000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 60.458117][ T5331] ^ [ 60.458120][ T5331] ffff0000d3195080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 60.458124][ T5331] ffff0000d3195100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 60.458127][ T5331] ================================================================== [ 60.458153][ T5331] Disabling lock debugging due to kernel taint [ 61.307234][ T4744] Bluetooth: hci0: command tx timeout 1970/01/01 00:01:02 executed programs: 99 [ 63.387492][ T4744] Bluetooth: hci0: command tx timeout [ 64.507470][ T24] cfg80211: failed to load regulatory.db [ 64.518928][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.518971][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.477485][ T4744] Bluetooth: hci0: command tx timeout 1970/01/01 00:01:07 executed programs: 400