last executing test programs: 644.264152ms ago: executing program 1 (id=2): r0 = openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/bdi/250:0/wb_stats\x00', 0x8000, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') setns(r1, 0x0) read$auto_cgwb_debug_stats_fops_(r0, &(0x7f0000000040)=""/185, 0xb9) 490.613455ms ago: executing program 1 (id=5): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0) faccessat2$auto(0xffffffffffffff9c, 0x0, 0x1, 0xbc6c) r1 = socket(0x28, 0x1, 0x84) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) unshare$auto(0x40000080) open(0x0, 0x101800, 0x100) socket(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MEDIA_SET(r2, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000009800)=ANY=[@ANYBLOB="5199dde3", @ANYRES16, @ANYBLOB="010029bd7000ffdbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048) r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/modules\x00', 0x40, 0x0) pread64$auto(r4, 0x0, 0x3, 0x9) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x9001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/blkio.bfq.avg_queue_size\x00', 0x181040, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) syz_clone(0x40000000, &(0x7f0000000100)="2c468ba851d986f851a6f6f8fb5d65d4ce9674d1f2251418ae83e36354d37136fc609eece0447126e2fdbec2e419d9c1fde835107684e7224a5b6903ce9a3d72a41a2f121b62d7554d7671b3bd122ecb4683c33766a7ef28c64afdd10a95d430a1d83f08780a3c143b656a64a61bcf60d95d50488fc25994c3ed215325b9c625fde9c972dd1bab8749026fa8933c16f7f823e478529058efafca860c338ae4bfa20b201fe5728f11649f165a66439e4db9e807fc4ab5471062a0814b7a389e23", 0xc0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="a56208e34572a5e95fa8806fc2f9b88238649cfc4c7f5c2fc2390c7584aeb33baaadcb0ca4a292b260bbdc2fce3126a78bd0218db3439554c2f563f576c396a155bae282d8be87401c7ce60ad5c7efdefb150f91039caf9bd04056ad3477d3531204c6") sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYBLOB="177d348247a93d16842d2d88a0173c3372790bf098493d64961120756be97f794fa7d5a31584186954c34dd7f84f210e09f07f3a721a59be7e0b60baeec5181f268ef28fee4f63fda097f7681d79cad54323a1622db2652062359d2a39e3881b1331294ea31ac7fc521149cf529e7a3edc51dab1b3609b28f4ddf6653ee2b50867ce3d03898fb82831bbdd0d0ec11bfddc7c0e569815559a0ac5a54e34cd86d22a8d6ee9786f63d0795200993e0719a98571b167b0a6fb7a34d627cb4ae16f93412150f6a1199906", @ANYBLOB="f2145277a0f5d0591f4b78e490a61224ef4a2c61941b541f", @ANYRESHEX=r3, @ANYRESOCT=r1], 0x50}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) 255.176032ms ago: executing program 0 (id=1): mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\b\x00\x00', @ANYRES16=r1, @ANYBLOB="00012bbd7000fddbdf252800000005003e000800000031004801a289c1c1f3026f75a4d3a66a76f9f65578159c8a96f55e156e69b5114d651d9ec494a3d7791ee432bb9c"], 0x60}, 0x1, 0x0, 0x0, 0x54}, 0x1) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8, 0x90e, 0x10009b71, 0x5, 0x1) io_uring_setup$auto(0x81c5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) getsockopt$auto(r2, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r3, 0x0, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) mmap$auto(0xffffffffffffffff, 0x2020009, 0x7f, 0xeb2, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000040)=0x2c5c) r5 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/pppoe\x00', 0x313201, 0x0) mknod$auto(&(0x7f0000000000)='*-\x00', 0x5, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) 158.028348ms ago: executing program 3 (id=4): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000011080)={&(0x7f000000e000)={0x18, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x104}, 0x40) sendmsg$auto_TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000040)={0x668, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NAME_TABLE={0x175, 0x8, 0x0, 0x1, [@generic="3b253002f2ea497ebbeab172c3436b88e287406c7e1e60d1ac7687de55486a4057dd339854702549a328dcc824a89440e3d1861d3e3347fc4aea41", @typed={0x8, 0x11a, 0x0, 0x0, @binary='^8^Y'}, @nested={0xbd, 0x6f, 0x0, 0x1, [@generic="56a6d8bd91fc2bc8e436cb9de947ac0dc7099da0a1ae77a6fb213a2510d539b7c3492b256754a0741d93af7c910256fdf26fc9ce9598e9775506ef7dc73a6c30d61bb4795ea31d", @generic="7eab1b6271f4624c70af3d6590f3ca0f11769703d6184540f82001f7e62d44994e94e0e78278a3e82628ec52a61c2545e21fbc0a764c11a12800c4f14b4af01c89f9461bf15a0d574769482b4e2086c5b351ce4d9eb3863ca18c05c925191b0f4799f9e65cf9df58f2ab8fed3e720539707a"]}, @generic="40dfd44a60953f37c1b432b505067c7108e76c492d1b5f83a7b402fa5c162dbd8fabc372f07754c5350f8ec9fb9849672cfe114eb7477260142b57c446f911258b2cbf30a19af1226669d6dec14ea94cda757818ab4b46460cda78a60695b587c8e51b656164f9027e2db879b378"]}, @TIPC_NLA_BEARER={0x4dc, 0x1, 0x0, 0x1, [@nested={0x31e, 0xee, 0x0, 0x1, [@generic="c8151dbf7a489446b955068e84de1f8ff1392e14196afc03c9de5b9001f8dfd7c16eb6975a03f3471054cc5c42ad2550aae5056c2e5c44f344b1e6f82244f3909cad2d8f9f0682a0a798c6e4fe3dc01b44173ae7b8f6bc7c4f13a10472b800b87b124519f7a0c1942f2fc116a166680a8044fbd716d7c481f0ac64b001f66ace4207a3344362a78d7b61224deeb49a05e80db0bcaa8fce35dab639200037d62e7966ef5eb0585907c329e83f57c5bd808594c03c3a42f51174d36bc727f6b239893100683a367fb9395caa92e74276b8bd5591130e47700d18108337164d66a0a3f1b71acc", @nested={0x4, 0x120}, @typed={0x14, 0x57, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x28}}, @generic="2d84f7bebda4713d596166317427b1f4cccfb074c8267536caf7c0104533e039957c44d8ae06a7e15e0f5845d2aaee694a7add327c65e89ad60a6cc0ced06287f42d77fb7942e5ff657cc228887dd7a796168e1e6a6d9636f991998bd6c591efcebfbc67e3ad6204ecc2837e87948ba440a6581a777fad4b7864fdcefc05091a3f404598836e0eb768309086ea7fccd25d80de58", @typed={0x4, 0x112}, @generic="92e485c0cf378aff79dfcd777ab78df67844bd2720c6065f5b1121bb6d65ad84ef91927cdd8f5579a884f3aad634bdeeee1d27fd35655e6fdcb044dac5b6ed1b53e211abd92363f971abc8486a6f50dbb7b08c4909df7bb8644044d73cd744743b04e9e2e23b416d454e2ea859dbbb04b7b697c9852197d30f18d45b35a68f3616cfc2103f6fd8bc917927466ff4ebde43bc2ea9432abda736a3f0e8783256e6f41bf5c0ad482c8a2b45e21f798dc2f75f0bfa1d25f70bbdcf372dad259a6c3dfa5fd0650dab0487d98e704a5fc1b547bb6ed1bb831c8771cfa4e0719de8063fc82a9350e4925912f049ba013763898b14", @typed={0x82, 0xa8, 0x0, 0x0, @binary="1b188045c4e1f7c66a6b722ad3f26823383daa0df7cbd9c6d84b94a80e8e8e1c1df500f988b9fe379dcae14cbd866c6e5b1852329936b021f2fc0724e516f7c5e957f3d62ad7b9dff42da4b6677dfac5edc44acc48000a8a7cbc0135d4b088c2340d5c3c444d86442271cad813af9f64cdf6aec435e94a1c72c0277faad8"}, @typed={0xc, 0xfe, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0xb8}]}, @generic, @nested={0x1a2, 0xe0, 0x0, 0x1, [@generic="f0d61168a9fe20b363460858bf726616374b66699d645c83566c336fc403fd5e9a6292b33129c7251df037681323ec8f376fbcee9ccde013c9ee316039ee5b4ed0646c2762009dbca5612a74773de87932ddcc71146f39a7215714e032bc7b2760e888", @generic="557a829c2ffc61f992afcf07e6a0aef9b94e574e6dd738e9b4e7a8939da34b72edb6cd34a3d4fc8bfecb04f2c9260a9ac9c6370c71c9da8165f4502ae903", @nested={0x4, 0x87}, @nested={0x4, 0x5c}, @generic="9cceac4f6715b8ad51196365138ca47d82eb9380154ce8bd8840411379a0951b451a29810cf82e0b50e572408e3b0344b92503ed0d806847d7e8669b9d8f0537cfc97a9b03ebc94b1e3a46232a2ec47be96ab00d11a7641115518ce05cf5d08c578668cc42d23b021c0166e97d1b2a7c4b431f39a4eed0796275426836feda81b1905993e07a16b2781c46110ad07124d55021668ea5b658881c23aee6e92f8c6f5797b7763b293cd76c319430b3de274c0ee0e215949ee3e77f1c4b017e0976be6cac58536416c35471697dd5d6c91e11b7a9879deee75bc7369b577f10e024ed8efdc262549007d3e2ef93985d4097972e73c3e4"]}, @nested={0x14, 0x13f, 0x0, 0x1, [@typed={0xc, 0xa7, 0x0, 0x0, @u64=0x7}, @nested={0x4, 0x2d}]}]}]}, 0x668}, 0x1, 0x0, 0x0, 0x4000}, 0x24044800) prctl$auto(0x53564d41, 0x0, 0x0, 0xd, 0xf4ff) 0s ago: executing program 2 (id=3): r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) write$auto_configfs_file_operations_configfs_internal(r0, &(0x7f00000000c0)="9b", 0x1) write$auto(r0, &(0x7f0000000000)='/sys/kernel/config/target/dbroot\x00', 0xb3c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts. [ 67.830114][ T5816] cgroup: Unknown subsys name 'net' [ 67.978336][ T5816] cgroup: Unknown subsys name 'cpuset' [ 67.987140][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.388291][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.148953][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.157624][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.166366][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.174933][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.183929][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.192196][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.192362][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.199885][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.214598][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.215865][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.223055][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.231957][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.245847][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.246662][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.254993][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.261352][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.276128][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.288736][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.297865][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.305442][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.312585][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.320033][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.320071][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.336495][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.533101][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 71.745813][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.752957][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.763600][ T5825] bridge_slave_0: entered allmulticast mode [ 71.772317][ T5825] bridge_slave_0: entered promiscuous mode [ 71.783022][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 71.799448][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.806678][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.813791][ T5825] bridge_slave_1: entered allmulticast mode [ 71.819978][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.821479][ T5825] bridge_slave_1: entered promiscuous mode [ 71.828669][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.852636][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.867977][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 71.884774][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.908827][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 71.951016][ T5825] team0: Port device team_slave_0 added [ 71.960438][ T5825] team0: Port device team_slave_1 added [ 72.029133][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.036126][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.062101][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.094110][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.101209][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.127372][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.139627][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.148521][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.156114][ T5828] bridge_slave_0: entered allmulticast mode [ 72.162714][ T5828] bridge_slave_0: entered promiscuous mode [ 72.169941][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.177122][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.184257][ T5827] bridge_slave_0: entered allmulticast mode [ 72.191119][ T5827] bridge_slave_0: entered promiscuous mode [ 72.219710][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.227075][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.234324][ T5828] bridge_slave_1: entered allmulticast mode [ 72.241409][ T5828] bridge_slave_1: entered promiscuous mode [ 72.255398][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.262579][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.269771][ T5827] bridge_slave_1: entered allmulticast mode [ 72.276883][ T5827] bridge_slave_1: entered promiscuous mode [ 72.283329][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.291488][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.299300][ T5826] bridge_slave_0: entered allmulticast mode [ 72.306560][ T5826] bridge_slave_0: entered promiscuous mode [ 72.314242][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.321718][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.329370][ T5826] bridge_slave_1: entered allmulticast mode [ 72.336697][ T5826] bridge_slave_1: entered promiscuous mode [ 72.369284][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.406139][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.417190][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.438332][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.451721][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.475993][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.489761][ T5825] hsr_slave_0: entered promiscuous mode [ 72.497000][ T5825] hsr_slave_1: entered promiscuous mode [ 72.522417][ T5828] team0: Port device team_slave_0 added [ 72.530198][ T5828] team0: Port device team_slave_1 added [ 72.554583][ T5826] team0: Port device team_slave_0 added [ 72.562792][ T5826] team0: Port device team_slave_1 added [ 72.607954][ T5827] team0: Port device team_slave_0 added [ 72.644247][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.651653][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.677796][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.690486][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.697542][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.723517][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.739636][ T5827] team0: Port device team_slave_1 added [ 72.749738][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.757265][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.783235][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.795054][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.802104][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.828722][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.894295][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.901439][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.927402][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.965159][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.972415][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.999152][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.013336][ T5826] hsr_slave_0: entered promiscuous mode [ 73.020194][ T5826] hsr_slave_1: entered promiscuous mode [ 73.026835][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.034670][ T5826] Cannot create hsr debugfs directory [ 73.051442][ T5828] hsr_slave_0: entered promiscuous mode [ 73.058113][ T5828] hsr_slave_1: entered promiscuous mode [ 73.065062][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.072777][ T5828] Cannot create hsr debugfs directory [ 73.161596][ T5827] hsr_slave_0: entered promiscuous mode [ 73.168414][ T5827] hsr_slave_1: entered promiscuous mode [ 73.174307][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.182448][ T5827] Cannot create hsr debugfs directory [ 73.256185][ T5840] Bluetooth: hci0: command tx timeout [ 73.278609][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.299187][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.331259][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.356961][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.415826][ T5840] Bluetooth: hci2: command tx timeout [ 73.421534][ T5840] Bluetooth: hci1: command tx timeout [ 73.425627][ T5837] Bluetooth: hci3: command tx timeout [ 73.463181][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.481362][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.492152][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.514173][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.568562][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.598414][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.610626][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.619815][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.665140][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.687427][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.697778][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.709330][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.784360][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.852517][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.883462][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.897889][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.914720][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.922528][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.946169][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.953366][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.981702][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.997728][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.010273][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.033949][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.041111][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.052896][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.059998][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.083568][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.090721][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.102297][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.109819][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.138756][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.158537][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.165703][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.227608][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.234743][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.290298][ T5826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.301430][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.349655][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.519054][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.618371][ T5825] veth0_vlan: entered promiscuous mode [ 74.643701][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.670690][ T5825] veth1_vlan: entered promiscuous mode [ 74.687008][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.716495][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.752039][ T5825] veth0_macvtap: entered promiscuous mode [ 74.774383][ T5825] veth1_macvtap: entered promiscuous mode [ 74.787409][ T5827] veth0_vlan: entered promiscuous mode [ 74.813796][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.828547][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.843014][ T5827] veth1_vlan: entered promiscuous mode [ 74.853196][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.863878][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.873363][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.882351][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.906032][ T5826] veth0_vlan: entered promiscuous mode [ 74.924453][ T5826] veth1_vlan: entered promiscuous mode [ 74.948274][ T5828] veth0_vlan: entered promiscuous mode [ 74.972799][ T5827] veth0_macvtap: entered promiscuous mode [ 74.983265][ T5827] veth1_macvtap: entered promiscuous mode [ 75.007320][ T5828] veth1_vlan: entered promiscuous mode [ 75.041938][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.055834][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.067705][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.084436][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.096415][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.107762][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.118057][ T5826] veth0_macvtap: entered promiscuous mode [ 75.146484][ T5828] veth0_macvtap: entered promiscuous mode [ 75.156502][ T5826] veth1_macvtap: entered promiscuous mode [ 75.164234][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.173466][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.183917][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.193707][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.210395][ T5828] veth1_macvtap: entered promiscuous mode [ 75.252719][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.263341][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.277528][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.288337][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.298857][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.309683][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.321578][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.335849][ T5837] Bluetooth: hci0: command tx timeout [ 75.343096][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.353705][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.363893][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.374433][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.385860][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.403374][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.418099][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.430377][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.441335][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.451355][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.461835][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.472739][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.495584][ T5837] Bluetooth: hci3: command tx timeout [ 75.498780][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.501144][ T5832] Bluetooth: hci1: command tx timeout [ 75.510006][ T5840] Bluetooth: hci2: command tx timeout [ 75.518129][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.531475][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.540723][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.553363][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.565806][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.577853][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.588721][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.599197][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.610159][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.621722][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.634169][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.637653][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.652389][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.662762][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.668704][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.679203][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.764830][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.815247][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.833804][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.938814][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.955539][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.033874][ T5890] process 'syz.1.5' launched ':,' with NULL argv: empty string added [ 76.050012][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.067789][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.078224][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.088809][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.112791][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.131139][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.194482][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.242136][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.572978][ T29] audit: type=1800 audit(1737123933.542:2): pid=5902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3" name="dbroot" dev="configfs" ino=7319 res=0 errno=0 [ 76.592348][ T5902] db_root: cannot open: › [ 76.642311][ T5902] [ 76.644681][ T5902] ============================================ [ 76.650841][ T5902] WARNING: possible recursive locking detected [ 76.657027][ T5902] 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 Not tainted [ 76.664153][ T5902] -------------------------------------------- [ 76.670315][ T5902] syz.2.3/5902 is trying to acquire lock: [ 76.676059][ T5902] ffff88802567a278 (&p->frag_sem){.+.+}-{4:4}, at: __configfs_open_file+0xe8/0x9c0 [ 76.685513][ T5902] [ 76.685513][ T5902] but task is already holding lock: [ 76.693052][ T5902] ffff88802567a278 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x216/0x4b0 [ 76.702420][ T5902] [ 76.702420][ T5902] other info that might help us debug this: [ 76.710499][ T5902] Possible unsafe locking scenario: [ 76.710499][ T5902] [ 76.717967][ T5902] CPU0 [ 76.721274][ T5902] ---- [ 76.724562][ T5902] lock(&p->frag_sem); [ 76.728751][ T5902] lock(&p->frag_sem); [ 76.732934][ T5902] [ 76.732934][ T5902] *** DEADLOCK *** [ 76.732934][ T5902] [ 76.741104][ T5902] May be due to missing lock nesting notation [ 76.741104][ T5902] [ 76.749439][ T5902] 5 locks held by syz.2.3/5902: [ 76.754310][ T5902] #0: ffff8880336a27f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 76.763444][ T5902] #1: ffff88801e352420 (sb_writers#14){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 76.772582][ T5902] #2: ffff8880270e3688 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x75/0x4b0 [ 76.782490][ T5902] #3: ffff88802567a278 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x216/0x4b0 [ 76.792308][ T5902] #4: ffffffff8ee09108 (target_devices_lock){+.+.}-{4:4}, at: target_core_item_dbroot_store+0x23/0x2e0 [ 76.803520][ T5902] [ 76.803520][ T5902] stack backtrace: [ 76.809435][ T5902] CPU: 0 UID: 0 PID: 5902 Comm: syz.2.3 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 76.819881][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 76.829983][ T5902] Call Trace: [ 76.833288][ T5902] [ 76.836238][ T5902] dump_stack_lvl+0x116/0x1f0 [ 76.840953][ T5902] print_deadlock_bug+0x2e3/0x410 [ 76.846031][ T5902] __lock_acquire+0x2117/0x3c40 [ 76.850916][ T5902] ? __pfx___lock_acquire+0x10/0x10 [ 76.856144][ T5902] ? path_openat+0x1e6a/0x2d60 [ 76.860941][ T5902] ? do_filp_open+0x20c/0x470 [ 76.865660][ T5902] ? file_open_name+0x2a4/0x450 [ 76.870554][ T5902] ? filp_open+0x4b/0x80 [ 76.874841][ T5902] ? target_core_item_dbroot_store+0x10d/0x2e0 [ 76.881037][ T5902] ? configfs_write_iter+0x2f6/0x4b0 [ 76.886357][ T5902] ? vfs_write+0x5ae/0x1150 [ 76.890923][ T5902] ? ksys_write+0x12b/0x250 [ 76.895454][ T5902] lock_acquire.part.0+0x11b/0x380 [ 76.900592][ T5902] ? __configfs_open_file+0xe8/0x9c0 [ 76.905910][ T5902] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 76.911571][ T5902] ? rcu_is_watching+0x12/0xc0 [ 76.916372][ T5902] ? trace_lock_acquire+0x14e/0x1f0 [ 76.921618][ T5902] ? __configfs_open_file+0xe8/0x9c0 [ 76.926937][ T5902] ? lock_acquire+0x2f/0xb0 [ 76.931469][ T5902] ? __configfs_open_file+0xe8/0x9c0 [ 76.936798][ T5902] down_read+0x9a/0x330 [ 76.940994][ T5902] ? __configfs_open_file+0xe8/0x9c0 [ 76.946313][ T5902] ? __pfx_down_read+0x10/0x10 [ 76.951110][ T5902] __configfs_open_file+0xe8/0x9c0 [ 76.956255][ T5902] do_dentry_open+0xf59/0x1ea0 [ 76.961048][ T5902] ? __pfx_configfs_open_file+0x10/0x10 [ 76.966631][ T5902] ? inode_permission+0xdd/0x5f0 [ 76.971622][ T5902] vfs_open+0x82/0x3f0 [ 76.975731][ T5902] ? may_open+0x1f2/0x400 [ 76.980119][ T5902] path_openat+0x1e6a/0x2d60 [ 76.984744][ T5902] ? __pfx_mark_lock+0x10/0x10 [ 76.989548][ T5902] ? __pfx_path_openat+0x10/0x10 [ 76.994513][ T5902] ? kasan_save_stack+0x42/0x60 [ 76.999395][ T5902] ? kasan_save_stack+0x33/0x60 [ 77.004272][ T5902] ? kasan_save_track+0x14/0x30 [ 77.009159][ T5902] ? __kasan_slab_alloc+0x89/0x90 [ 77.014224][ T5902] do_filp_open+0x20c/0x470 [ 77.018776][ T5902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.024881][ T5902] ? __pfx_do_filp_open+0x10/0x10 [ 77.029948][ T5902] file_open_name+0x2a4/0x450 [ 77.034731][ T5902] ? __pfx_file_open_name+0x10/0x10 [ 77.039972][ T5902] ? kmem_cache_alloc_noprof+0x21b/0x3b0 [ 77.045639][ T5902] ? getname_kernel+0x52/0x370 [ 77.050475][ T5902] ? __pfx_target_core_item_dbroot_store+0x10/0x10 [ 77.057022][ T5902] filp_open+0x4b/0x80 [ 77.061141][ T5902] target_core_item_dbroot_store+0x10d/0x2e0 [ 77.067246][ T5902] configfs_write_iter+0x2f6/0x4b0 [ 77.072394][ T5902] vfs_write+0x5ae/0x1150 [ 77.076763][ T5902] ? __pfx_configfs_write_iter+0x10/0x10 [ 77.082447][ T5902] ? __pfx___mutex_lock+0x10/0x10 [ 77.087520][ T5902] ? __pfx_vfs_write+0x10/0x10 [ 77.092321][ T5902] ksys_write+0x12b/0x250 [ 77.096683][ T5902] ? __pfx_ksys_write+0x10/0x10 [ 77.101619][ T5902] do_syscall_64+0xcd/0x250 [ 77.106156][ T5902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.112081][ T5902] RIP: 0033:0x7ff407185d29 [ 77.116514][ T5902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.136168][ T5902] RSP: 002b:00007ff407ffd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.144613][ T5902] RAX: ffffffffffffffda RBX: 00007ff407375fa0 RCX: 00007ff407185d29 [ 77.152609][ T5902] RDX: 0000000000000b3c RSI: 0000000020000000 RDI: 0000000000000003 [ 77.160695][ T5902] RBP: 00007ff407201b08 R08: 0000000000000000 R09: 0000000000000000 [ 77.168691][ T5902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.176689][ T5902] R13: 0000000000000000 R14: 00007ff407375fa0 R15: 00007ffd305a9d88 [ 77.184696][ T5902] [ 77.196878][ T5902] db_root: not a directory: /sys/kernel/config/target/dbroot [ 77.200485][ T29] audit: type=1804 audit(1737123934.172:3): pid=5902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=7319 res=1 errno=0 [ 77.415900][ T5837] Bluetooth: hci0: command tx timeout [ 77.575573][ T5837] Bluetooth: hci1: command tx timeout [ 77.577376][ T5840] Bluetooth: hci3: command tx timeout [ 77.580997][ T5837] Bluetooth: hci2: command tx timeout [ 79.505445][ T5837] Bluetooth: hci0: command tx timeout [ 79.655678][ T5837] Bluetooth: hci3: command tx timeout [ 79.655689][ T5832] Bluetooth: hci1: command tx timeout [ 79.666181][ T5832] Bluetooth: hci2: command tx timeout