last executing test programs: 2.856663603s ago: executing program 0 (id=1): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x20000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = socket(0x1e, 0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xb2c7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/bus/pci/drivers/amd5536udc-pci/remove_id\x00', 0x18b941, 0x0) syz_genetlink_get_family_id$auto_ila(&(0x7f00000000c0), r1) write$auto(r4, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\xd6\x84\xef\xf5\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xed\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\x05\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd?\x13\xe2\xad\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH', 0x8) getdents$auto(r3, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r6 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r6, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x0, 0x10, 0x4000000000df, 0xeb1, 0x401, 0x7) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfbfff000) socket(0x23, 0x800, 0x8) mmap$auto(0x200000000, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8003) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x405, 0x8, 0x10001, 0x6fb3, 0x8a, 0xfffffff8, 0xffffffffffffffff, [0x100, 0x9, 0x80], {0x2, 0x80006, 0x3034, 0xf, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b7}, {0x4000, 0xff, 0x9, 0x0, 0x0, 0xb89, 0xd5, 0x837, 0x8}}) 2.578206192s ago: executing program 2 (id=3): socket(0xa, 0x2, 0x3a) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3d, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x203, 0x8, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66bc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xfffffffffffffffd, 0x40000008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x6, 0x801, 0x0) r1 = socket(0x18, 0x5, 0x1) connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) socket(0x1e, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfff, 0x1, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) 1.846165517s ago: executing program 1 (id=2): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x15, 0x5, 0x0) io_uring_setup$auto(0x7, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000006f80)='/dev/sequencer2\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0x1c3481, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) socket(0xa, 0x801, 0x84) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x20, 0x5, 0xffffffff, 0x0) socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x3a) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x0, 0xc, 0xb, 0x5}, 0x7) 1.596249905s ago: executing program 2 (id=5): close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x161500, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) r4 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), r3) sendmsg$auto_SEG6_CMD_DUMPHMAC(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2243e4e3ad73a9c}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1bc, r4, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACINFO={0x11d, 0x7, 0x0, 0x1, [@generic="cad6bbe205ae0c26dfc1a64cfef22ed9dee7228b4f4ec28f187e22a23879b1d71c98285088f6d5265ff4335c7b51388fe1466962484a42f493a873d89c40066e0e1e7bfff3", @typed={0x8, 0x107, 0x0, 0x0, @fd=r2}, @typed={0xc8, 0x2a, 0x0, 0x0, @binary="552b176d842a6372936cc684344b3f883fcb9c8004004f4670bd8fa8ac4923adc3c792b8cfe700ddc4a2510cd0fd149661485a49d4322dff8831a511071e6341599324fa79bc7809bf1d2040dfeb7a4c0bb8b090c290f27792d0513fb9c3c996b33762892ebcc9e7faa4d3bf69c36957a36cd65f3ed9ba1273a83de9d5c5706ab3a1aee3b52c0b2cb93559bba0ad7dfa4ebcadadf57a82fd18d8c5344858bc29eac077bf13b7d4087159db324de11ab3a62803b141ef9130e82d7390af49db274678428f"}, @typed={0x4, 0xb7}]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x6b, 0x4, "0b3cdaa49c3f6fba24ba94ec161f8c19ab118896c9039c1156278b85ebb129910af89b2078c7b6a990bd5e863051a0b1c871fc4673ec5fb2d7e7644703bb00a983ec61dafacfa26e9c61feb4f86afc55e7bc7dc7132863ca238a6e5e43e3e19434086ccfa55ca1"}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xb23}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001780)='/dev/sda\x00', 0x22200, 0x0) ioctl$auto_IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f00000017c0)={0x5, 0xffffffff, 0x1}) ioctl$auto_KVM_CREATE_VM(r1, 0x4400ae8f, 0x0) 1.563688931s ago: executing program 3 (id=4): mmap$auto(0x4, 0x9, 0x10, 0x80000010, 0xffffffffffffffff, 0x10000) r0 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, r0, 0x7) fanotify_init$auto(0x200, 0x1) r2 = open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x0) fanotify_mark$auto(0x0, 0x105, 0x8009, r2, 0x0) r3 = open(&(0x7f0000001bc0)='./file0\x00', 0x4140, 0x0) fanotify_mark$auto(0x0, 0x102, 0x7, r3, 0x0) fsconfig$auto(r1, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0) close_range$auto(r0, r1, 0x6) r4 = socket(0x2000000000000021, 0x80000, 0x10000000000002) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/smps\x00', 0x22001, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r5, 0x0, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x4, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7fff, &(0x7f0000000080)=0x2000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), r7) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20044111}, 0x10) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xde, 0x6b1, 0x401, 0x8003) getsockopt$auto_SO_GET_FILTER(r4, 0x3, 0x1a, &(0x7f0000000040)='/dev/vmci\x00', &(0x7f0000000180)=0x7) 1.228847483s ago: executing program 1 (id=6): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/admmidi2\x00', 0x280703, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/ports/2/pp_hold\x00', 0x400, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x800000002}, 0x2000000400) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) gettid() rt_sigtimedwait$auto(&(0x7f0000000040)={0xfffffffffffffbff}, 0x0, 0x0, 0x8) read$auto(0x3, 0x0, 0x80) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r1) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_RINGS_RX_PUSH={0x5}]}, 0x34}}, 0x80000) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, 0x0, 0x1cb803, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x599, 0x7, 0xffffffff, 0x1010, r0, 0xa) 973.62333ms ago: executing program 2 (id=7): sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2408c810}, 0x40418c0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7f}, 0x5) mmap$auto(0x0, 0x40009, 0x8000000000df, 0x9b72, 0x7, 0x7fffffff) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) 903.625484ms ago: executing program 0 (id=8): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x0}) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/kernel/timer_migration\x00', 0x242, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000300)=ANY=[@ANYRES8=r1, @ANYRES16=r3, @ANYRES32=r3, @ANYRES32=r2, @ANYRES16=r1], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4) 612.9592ms ago: executing program 0 (id=9): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS1\x00', 0x141281, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r3}, 0x18) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) fcntl$auto(0x3, 0x4, 0xa553) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="0100"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r5, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0xfdef) 612.077315ms ago: executing program 2 (id=10): mmap$auto(0x0, 0x400008, 0xdf, 0xdb72, 0xffffffffffffffff, 0x4) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0x5c8) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0) writev$auto(r0, &(0x7f0000000300)={0x0, 0x1}, 0x100) mmap$auto(0xfffffffffffffffd, 0xfffffffffffffff9, 0x4000000400df, 0xeb1, 0x401, 0x8000007ffb) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b8162d21, 0x0) r1 = openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/bdi/1:15/wb_stats\x00', 0x40, 0x0) read$auto(r1, 0x0, 0x9e7) r2 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$auto(r2, 0x40246f4c, 0x38) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r3, 0x40}, 0x2, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0xfffffffffffffffc) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x9, 0x2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x5018c3, 0x0) r5 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x803, 0x0) ioctl$auto_BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)="325c2eb4f02850dd152681bf93024ba3bda8d8b129d60ab9ab02") prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r4, 0x0, 0x100000a3d9) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) 491.065463ms ago: executing program 1 (id=11): close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x242a82, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/machinecheck/machinecheck1/cmci_disabled\x00', 0x20102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x1) r0 = socket(0x11, 0x6, 0x4000000) r1 = getsockopt$auto(r0, 0x84, 0x12, 0x0, 0x0) ioctl$auto_MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000080)={&(0x7f0000000040)={0x170, 0x3, 0x80, 0x4, 0x9, 0x2, 0x75, 0xe, 0x7, 0x3, 0x339, 0x2, 0xffffffff, @iso={0x2, 0x1004}, 0x5, 0x0, 0x1, 0xffffffdb}, 0x0, 0x40000000000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r2) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)={0x19c, r3, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x184, 0x1, 0x0, 0x1, [@nested={0x4, 0x6}, @generic="398f32525e629163bfcc5d377bd8aed3ff1d26fc3c79ca435794c67d39b21ed0e95d1b3756e1789925d5c8a1a918c121a2b84869b15bb40ae4f671a8dd8ed01bb44efef2f4c768a2484f03635658fe8bfff71b8bf933532a61abcb7516ccfa73d70af3acc26f2c526959f19efd99202bc7ec5a2259a82d8e191691f5b23172f4f19ca9b0080dff732a7df559ae2279f426f2baa018832cd8e9b58fee32b1bcd4c087f83b0f3c0aed0c943a50ba5a327530d1", @typed={0x8, 0xd2, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="f3c1881feb99fe432d5fa89114591690f2efcbe9a7f87a8774637face20e7a821c481a653778aaf92185e8bfb092c2900920cca139540fd90efab653551552721f2b2889999ce801e47cfad8f735f702c852bd40e1ef6f259c36d7d8bc31748c903b1ceadd56ead8730d0e727f333855c6b3b286c779abbfff5f47e390b1336271492db0b266e2b8910bf339d4037a7dcf9c8a0669629580c65489f41db5adb59f53f3acd871444d9f34952c00ec9365f3dd", @typed={0x8, 0x38, 0x0, 0x0, @fd}, @nested={0x8, 0x6f, 0x0, 0x1, [@typed={0x4, 0x2d, 0x0, 0x0, @binary}]}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x2000c001}, 0x85) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000040)=',\x00^\xa2\x02\x00\x00\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4zG\x01[{\x17\x05I\xe0\xb1d)\x06z8L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x1000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0xc, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x403c6f2b, 0x0) read$auto(r5, 0x0, 0x1f40) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r6, 0x545c, 0x0) r7 = inotify_init1$auto(0x0) read$auto(r7, &(0x7f0000000180)='/dev/ram7\x00', 0x4) ioctl$auto_TIOCVHANGUP2(r6, 0x5437, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 391.933194ms ago: executing program 3 (id=12): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/most/drivers/most_core/components\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000010c0)=""/4096, 0x1000) ptrace$auto(0x10, r0, 0x4, 0x8000040006) unshare$auto(0x40000080) ptrace$auto(0x9, r0, 0xfffffffffffffffe, 0x0) 289.791807ms ago: executing program 0 (id=13): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r0) getpid() sendmsg$auto_TASKSTATS_CMD_GET(r0, 0x0, 0x20004000) 120.651972ms ago: executing program 0 (id=14): syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 0s ago: executing program 0 (id=15): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/target/dbroot\x00', 0x2001, 0x0) msgctl$auto_IPC_INFO(0xfffffff7, 0x3, &(0x7f0000000600)={{0x81, 0x0, 0x0, 0x8215, 0xae5, 0x3ff, 0x16}, 0x0, &(0x7f00000005c0)=0xd9, 0x2, 0x3, 0x9, 0x7, 0x101, 0x3, 0xe, 0x8, @raw=0x2, @raw=0x2}) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010028bd7000ffdadf2506e18f3a1ceafc1919ca613552f90f87000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xa, 0x3, 0xb, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0x6c8, 0x5, 0x20000000003, 0x5, 0xb0, 0x7, 0x10000002, 0x3, 0x5, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r3, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe462}, @BATADV_ATTR_FLAG_BEST={0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_BANDWIDTH_UP={0x8, 0x1b, 0xffffffa7}, @BATADV_ATTR_DAT_CACHE_VID={0x6, 0x25, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_TT_VID={0x6, 0x14, 0x40}]}, 0x50}}, 0x4000000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3b3d2abd7000fcdbdf25020000000a000900bbbbbbbbbbbb0000eaaeb87306be9a3cd848b9595c95826c1f515d1e64b2ee9478f79440cf06d3189ceff6367d95eabec9787847055f46ff046a8b0edbcd2c635c16de58400cdcdc30040c809b316f5a9fc08e2af2d49f254688d3c1ef1a3700eedb6dccb41126b36a65d033a4507c3a3a0130e2f351bafd7c94003f0ad2a1a6db5b2678976ae58cd093a7deb08d5f349ac57336717c0247e8"], 0x20}}, 0x80) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000540)='/proc/irq/10/effective_affinity_list\x00', 0x11000, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7ffffffff000}, 0x7) write$auto(r0, &(0x7f0000000000)='/sys/kernel/config/target/dbroot\x00', 0x63) futex$auto(&(0x7f0000000040)=0x42af, 0x9, 0x9, &(0x7f0000000080)={0x0, 0xfffffffffffffffe}, &(0x7f00000000c0)=0xc4, 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.158' (ED25519) to the list of known hosts. [ 74.697675][ T5816] cgroup: Unknown subsys name 'net' [ 74.855888][ T5816] cgroup: Unknown subsys name 'cpuset' [ 74.864592][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.289769][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.274371][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.291827][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.300432][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.307750][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.316524][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.317178][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.324176][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.339635][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.347403][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.352856][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.361919][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.369740][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.377879][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.385620][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.393724][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.401912][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.403896][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.409604][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.424782][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.456669][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.938928][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 79.023258][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 79.097076][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 79.171875][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 79.223461][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.230680][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.239905][ T5835] bridge_slave_0: entered allmulticast mode [ 79.247129][ T5835] bridge_slave_0: entered promiscuous mode [ 79.289514][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.297041][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.304990][ T5835] bridge_slave_1: entered allmulticast mode [ 79.311932][ T5835] bridge_slave_1: entered promiscuous mode [ 79.348640][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.356055][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.363956][ T5825] bridge_slave_0: entered allmulticast mode [ 79.370817][ T5825] bridge_slave_0: entered promiscuous mode [ 79.406629][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.414294][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.421381][ T5825] bridge_slave_1: entered allmulticast mode [ 79.428479][ T5825] bridge_slave_1: entered promiscuous mode [ 79.451253][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.458376][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.465561][ T5830] bridge_slave_0: entered allmulticast mode [ 79.472489][ T5830] bridge_slave_0: entered promiscuous mode [ 79.494433][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.510002][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.517561][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.526557][ T5830] bridge_slave_1: entered allmulticast mode [ 79.533734][ T5830] bridge_slave_1: entered promiscuous mode [ 79.564331][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.613859][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.626201][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.657029][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.664422][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.671528][ T5826] bridge_slave_0: entered allmulticast mode [ 79.678633][ T5826] bridge_slave_0: entered promiscuous mode [ 79.688544][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.711923][ T5835] team0: Port device team_slave_0 added [ 79.718197][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.725942][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.733247][ T5826] bridge_slave_1: entered allmulticast mode [ 79.740145][ T5826] bridge_slave_1: entered promiscuous mode [ 79.749946][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.773222][ T5825] team0: Port device team_slave_0 added [ 79.780989][ T5835] team0: Port device team_slave_1 added [ 79.828872][ T5825] team0: Port device team_slave_1 added [ 79.874956][ T5830] team0: Port device team_slave_0 added [ 79.892797][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.899737][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.926391][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.950619][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.963626][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.974478][ T5830] team0: Port device team_slave_1 added [ 79.991656][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.998713][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.024653][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.036318][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.043632][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.069775][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.107741][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.115065][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.145678][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.171778][ T5826] team0: Port device team_slave_0 added [ 80.180287][ T5826] team0: Port device team_slave_1 added [ 80.192685][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.199642][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.225853][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.275647][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.283708][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.309672][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.341250][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.349049][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.375505][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.388946][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.396164][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.422562][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.443257][ T51] Bluetooth: hci3: command tx timeout [ 80.443289][ T5828] Bluetooth: hci0: command tx timeout [ 80.457686][ T5825] hsr_slave_0: entered promiscuous mode [ 80.464006][ T5825] hsr_slave_1: entered promiscuous mode [ 80.493818][ T5835] hsr_slave_0: entered promiscuous mode [ 80.500340][ T5835] hsr_slave_1: entered promiscuous mode [ 80.507332][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.515101][ T5835] Cannot create hsr debugfs directory [ 80.522566][ T5828] Bluetooth: hci1: command tx timeout [ 80.522604][ T51] Bluetooth: hci2: command tx timeout [ 80.658672][ T5826] hsr_slave_0: entered promiscuous mode [ 80.665824][ T5826] hsr_slave_1: entered promiscuous mode [ 80.671751][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.679431][ T5826] Cannot create hsr debugfs directory [ 80.713985][ T5830] hsr_slave_0: entered promiscuous mode [ 80.720124][ T5830] hsr_slave_1: entered promiscuous mode [ 80.726394][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.734407][ T5830] Cannot create hsr debugfs directory [ 81.064457][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.088195][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.103582][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.120937][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.157494][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.178091][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.192295][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.214470][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.275906][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.292244][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.324708][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.336191][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.402066][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.428362][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.444522][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.454918][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.481374][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.534517][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.574936][ T4927] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.582189][ T4927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.610290][ T973] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.617453][ T973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.639394][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.678493][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.743963][ T4927] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.751115][ T4927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.768464][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.794743][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.801885][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.839233][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.900431][ T4927] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.907624][ T4927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.949557][ T4927] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.956739][ T4927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.977497][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.087662][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.134553][ T973] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.141670][ T973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.191645][ T973] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.198872][ T973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.259771][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.397562][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.466098][ T5825] veth0_vlan: entered promiscuous mode [ 82.523333][ T5825] veth1_vlan: entered promiscuous mode [ 82.532475][ T51] Bluetooth: hci3: command tx timeout [ 82.537918][ T51] Bluetooth: hci0: command tx timeout [ 82.585907][ T5826] veth0_vlan: entered promiscuous mode [ 82.605782][ T51] Bluetooth: hci2: command tx timeout [ 82.605793][ T5828] Bluetooth: hci1: command tx timeout [ 82.637519][ T5826] veth1_vlan: entered promiscuous mode [ 82.660548][ T5825] veth0_macvtap: entered promiscuous mode [ 82.687070][ T5825] veth1_macvtap: entered promiscuous mode [ 82.726974][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.761704][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.787893][ T5826] veth0_macvtap: entered promiscuous mode [ 82.798931][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.822068][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.844179][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.854183][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.865537][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.875263][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.886803][ T5826] veth1_macvtap: entered promiscuous mode [ 82.908481][ T5830] veth0_vlan: entered promiscuous mode [ 82.940367][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.970944][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.984777][ T5830] veth1_vlan: entered promiscuous mode [ 83.001694][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.012069][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.024103][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.032996][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.086515][ T5835] veth0_vlan: entered promiscuous mode [ 83.134474][ T973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.145767][ T973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.153701][ T5835] veth1_vlan: entered promiscuous mode [ 83.174983][ T5830] veth0_macvtap: entered promiscuous mode [ 83.198022][ T5830] veth1_macvtap: entered promiscuous mode [ 83.217194][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.229293][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.266549][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.314172][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.341665][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.351050][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.364834][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.368097][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.375331][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.408511][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.427770][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.441481][ T5835] veth0_macvtap: entered promiscuous mode [ 83.533868][ T5835] veth1_macvtap: entered promiscuous mode [ 83.547281][ T4046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.564033][ T4046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.633940][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.679102][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.718699][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.732642][ T973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.753222][ T973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.762616][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.782667][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.792119][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.920530][ T973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.960915][ T973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.003006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.116123][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.143950][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.297290][ T4927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.311790][ T4927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.417560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.428688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.439950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.449453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.458022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.472415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 84.488970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 84.504464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.532878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.604792][ T51] Bluetooth: hci3: command tx timeout [ 84.604792][ T5828] Bluetooth: hci0: command tx timeout [ 84.683548][ T51] Bluetooth: hci1: command tx timeout [ 84.689200][ T51] Bluetooth: hci2: command tx timeout [ 84.800779][ T5929] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.838108][ T5932] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.890610][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'. [ 85.925214][ T5955] netlink: zone id is out of range [ 85.930805][ T5955] netlink: zone id is out of range [ 85.973260][ T5955] netlink: zone id is out of range [ 85.988695][ T5958] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 86.004129][ T5955] netlink: zone id is out of range [ 86.014154][ T5955] netlink: zone id is out of range [ 86.040753][ T5955] netlink: zone id is out of range [ 86.060817][ T5955] netlink: zone id is out of range [ 86.079143][ T5955] netlink: zone id is out of range [ 86.097887][ T5955] netlink: zone id is out of range [ 86.117601][ T5955] netlink: zone id is out of range [ 86.315895][ T5963] binder: 5953:5963 ioctl c0306201 2000000003c0 returned -14 [ 86.368952][ T5973] Zero length message leads to an empty skb [ 86.377359][ T5973] [ 86.379709][ T5973] ============================================ [ 86.385857][ T5973] WARNING: possible recursive locking detected [ 86.391995][ T5973] 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 Not tainted [ 86.399083][ T5973] -------------------------------------------- [ 86.405211][ T5973] syz.0.15/5973 is trying to acquire lock: [ 86.410993][ T5973] ffff888027757478 (&p->frag_sem){.+.+}-{4:4}, at: __configfs_open_file+0xe8/0x9c0 [ 86.420301][ T5973] [ 86.420301][ T5973] but task is already holding lock: [ 86.427651][ T5973] ffff888027757478 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x219/0x4e0 [ 86.436949][ T5973] [ 86.436949][ T5973] other info that might help us debug this: [ 86.444990][ T5973] Possible unsafe locking scenario: [ 86.444990][ T5973] [ 86.452419][ T5973] CPU0 [ 86.455681][ T5973] ---- [ 86.458941][ T5973] lock(&p->frag_sem); [ 86.463081][ T5973] lock(&p->frag_sem); [ 86.467218][ T5973] [ 86.467218][ T5973] *** DEADLOCK *** [ 86.467218][ T5973] [ 86.475341][ T5973] May be due to missing lock nesting notation [ 86.475341][ T5973] [ 86.483641][ T5973] 5 locks held by syz.0.15/5973: [ 86.488557][ T5973] #0: ffff888032331978 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 86.497596][ T5973] #1: ffff88801dfbe428 (sb_writers#12){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 86.506640][ T5973] #2: ffff888028c36088 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x75/0x4e0 [ 86.516464][ T5973] #3: ffff888027757478 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x219/0x4e0 [ 86.526202][ T5973] #4: ffffffff8f677f48 (target_devices_lock){+.+.}-{4:4}, at: target_core_item_dbroot_store+0x21/0x350 [ 86.537326][ T5973] [ 86.537326][ T5973] stack backtrace: [ 86.543203][ T5973] CPU: 0 UID: 0 PID: 5973 Comm: syz.0.15 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(full) [ 86.543223][ T5973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.543234][ T5973] Call Trace: [ 86.543239][ T5973] [ 86.543247][ T5973] dump_stack_lvl+0x116/0x1f0 [ 86.543272][ T5973] print_deadlock_bug+0x1e9/0x240 [ 86.543292][ T5973] __lock_acquire+0x1106/0x1c90 [ 86.543313][ T5973] lock_acquire+0x179/0x350 [ 86.543329][ T5973] ? __configfs_open_file+0xe8/0x9c0 [ 86.543349][ T5973] ? __pfx___might_resched+0x10/0x10 [ 86.543363][ T5973] down_read+0x9b/0x480 [ 86.543375][ T5973] ? __configfs_open_file+0xe8/0x9c0 [ 86.543393][ T5973] ? __pfx_down_read+0x10/0x10 [ 86.543407][ T5973] __configfs_open_file+0xe8/0x9c0 [ 86.543426][ T5973] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 86.543444][ T5973] do_dentry_open+0x744/0x1c10 [ 86.543463][ T5973] ? __pfx_configfs_open_file+0x10/0x10 [ 86.543482][ T5973] vfs_open+0x82/0x3f0 [ 86.543496][ T5973] path_openat+0x1de4/0x2cb0 [ 86.543517][ T5973] ? __pfx_path_openat+0x10/0x10 [ 86.543541][ T5973] ? kasan_save_stack+0x42/0x60 [ 86.543560][ T5973] ? kasan_save_stack+0x33/0x60 [ 86.543578][ T5973] ? kasan_save_track+0x14/0x30 [ 86.543595][ T5973] ? __kasan_slab_alloc+0x89/0x90 [ 86.543616][ T5973] do_filp_open+0x20b/0x470 [ 86.543633][ T5973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.543647][ T5973] ? __pfx_do_filp_open+0x10/0x10 [ 86.543673][ T5973] file_open_name+0x2a3/0x450 [ 86.543686][ T5973] ? __pfx_file_open_name+0x10/0x10 [ 86.543699][ T5973] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 86.543718][ T5973] ? getname_kernel+0x52/0x370 [ 86.543730][ T5973] ? __asan_memcpy+0x3c/0x60 [ 86.543747][ T5973] filp_open+0x4b/0x80 [ 86.543760][ T5973] target_core_item_dbroot_store+0x108/0x350 [ 86.543777][ T5973] configfs_write_iter+0x303/0x4e0 [ 86.543797][ T5973] vfs_write+0x6c7/0x1150 [ 86.543816][ T5973] ? __pfx_configfs_write_iter+0x10/0x10 [ 86.543835][ T5973] ? __pfx___mutex_lock+0x10/0x10 [ 86.543854][ T5973] ? __pfx_vfs_write+0x10/0x10 [ 86.543877][ T5973] ksys_write+0x12a/0x250 [ 86.543894][ T5973] ? __pfx_ksys_write+0x10/0x10 [ 86.543913][ T5973] do_syscall_64+0xcd/0x490 [ 86.543933][ T5973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.543947][ T5973] RIP: 0033:0x7f02f478e929 [ 86.543962][ T5973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.543977][ T5973] RSP: 002b:00007f02f55dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.543990][ T5973] RAX: ffffffffffffffda RBX: 00007f02f49b5fa0 RCX: 00007f02f478e929 [ 86.544000][ T5973] RDX: 0000000000000063 RSI: 0000200000000000 RDI: 0000000000000003 [ 86.544008][ T5973] RBP: 00007f02f4810b39 R08: 0000000000000000 R09: 0000000000000000 [ 86.544016][ T5973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.544024][ T5973] R13: 0000000000000000 R14: 00007f02f49b5fa0 R15: 00007ffeb157be88 [ 86.544036][ T5973] [ 86.875967][ T5973] db_root: not a directory: /sys/kernel/config/target/dbroot [ 86.892348][ T30] audit: type=1804 audit(1751004535.113:2): pid=5973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.15" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=6733 res=1 errno=0 [ 86.980843][ T5828] Bluetooth: hci3: command tx timeout [ 86.982386][ T51] Bluetooth: hci2: command tx timeout [ 86.986354][ T5828] Bluetooth: hci1: command tx timeout [ 86.991648][ T51] Bluetooth: hci0: command tx timeout [ 87.010064][ T30] audit: type=1800 audit(1751004535.113:3): pid=5973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.15" name="dbroot" dev="configfs" ino=6733 res=0 errno=0 [ 91.807478][ T24] cfg80211: failed to load regulatory.db