last executing test programs:

1m45.337978076s ago: executing program 1 (id=2):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f00000003c0)='freeze\n', 0x7)

1m43.749785831s ago: executing program 2 (id=18):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='ohci-platform\x00', 0xe)

1m43.725045322s ago: executing program 2 (id=19):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40e80489680001010203010902200001010080fa0904000002ffffff0007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0xc, &(0x7f0000000100)=""/12)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_ep_read(r0, 0x2, 0xc, &(0x7f0000000140)=""/12)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
r1 = socket(0x2, 0x2, 0x0)
ioctl(r1, 0x8914, &(0x7f0000000400))
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000500)='\x00'/10)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

1m42.967664648s ago: executing program 2 (id=27):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0\n', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/scsi_disk/0:0:0:0/manage_system_start_stop\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='devices\n', 0x8)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/power/state\x00', 0x2, 0x0)
write(r3, &(0x7f00000002c0)='freeze\n', 0x7)
close(r3)

1m34.561571222s ago: executing program 3 (id=140):
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'bond0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bonding_masters\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='+bond0\n', 0x7)
close(r1)
r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r2, &(0x7f0000000600)='+bond_slave_0\n', 0xe)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'bond0\x00', 0x1})

1m34.560577292s ago: executing program 3 (id=141):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='-2 -3\n', 0x6)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000240)='1\n', 0x2)
close(r1)

1m33.270283003s ago: executing program 3 (id=144):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/event_source/devices/software/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/event_source/devices/cpu/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/event_source/devices/breakpoint/type\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/event_source/devices/kprobe/type\x00', 0x0, 0x0)

1m33.201938006s ago: executing program 3 (id=145):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:1f.3/uevent\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:1f.3/vendor\x00', 0x0, 0x0)

1m33.201755736s ago: executing program 3 (id=146):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x1234\x00', 0x7)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r1, &(0x7f0000000380)='dummy_udc.0\n\x00', 0xc)

1m33.201139966s ago: executing program 3 (id=147):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/scsi_disk/0:0:0:0/manage_system_start_stop\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1\n', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/scsi/devices/0:0:0:0/scsi_disk/0:0:0:0/manage_system_start_stop\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='0\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/power/sync_on_suspend\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='0\n', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='devices\n', 0x8)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/power/state\x00', 0x1, 0x0)
write(r5, &(0x7f00000003c0)='freeze\n', 0x7)
close(r5)

1m31.534173704s ago: executing program 0 (id=148):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='wwnn=0x2000000044112233,wwpn=0x1000000044112233\n', 0x32)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280), 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='fc\n', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0)
write(r3, &(0x7f0000000380)='nn-0x2000000044112233:pn-0x1000000044112233\n', 0x2c)
symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testsubsys\x00')

1m31.533812314s ago: executing program 0 (id=149):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
write(r0, 0x0, 0x0)

1m31.500768086s ago: executing program 0 (id=150):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1\n', 0x2)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='1\n', 0x2)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r3, &(0x7f0000000540)='/dev/nullb1\n', 0xc)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='1\n', 0x2)
close(r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r5, &(0x7f0000000740)='loop\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e)
close(r6)
nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0)

1m30.931591582s ago: executing program 0 (id=151):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r0, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e)
close(r0)

1m30.864571965s ago: executing program 0 (id=152):
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'bond0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bonding_masters\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='+bond0\n', 0x7)
close(r1)
r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r2, &(0x7f0000000600)='+bond_slave_0\n', 0xe)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'bond0\x00', 0x1})

1m30.863568005s ago: executing program 0 (id=153):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000200), &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='core\n\x00', 0x5)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='mem\n\x00', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0)='disk\n\x00', 0x5)
close(r2)

1m29.70631605s ago: executing program 32 (id=2):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f00000003c0)='freeze\n', 0x7)

1m27.480071244s ago: executing program 33 (id=27):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='0\n', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/scsi_disk/0:0:0:0/manage_system_start_stop\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='devices\n', 0x8)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/power/state\x00', 0x2, 0x0)
write(r3, &(0x7f00000002c0)='freeze\n', 0x7)
close(r3)

1m25.104003826s ago: executing program 5 (id=181):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
read(r0, &(0x7f0000000100), 0x1f4)

1m25.072233777s ago: executing program 5 (id=183):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='wwnn=0x2000000044112233,wwpn=0x1000000044112233\n', 0x32)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='fc', 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='fc\n', 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0)
write(r3, &(0x7f0000000380)='nn-0x2000000044112233:pn-0x1000000044112233\n', 0x2c)
symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testsubsys\x00')

1m25.037705949s ago: executing program 5 (id=185):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1\n', 0x2)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='1\n', 0x2)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r3, &(0x7f0000000540)='/dev/nullb1\n', 0xc)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='1\n', 0x2)
close(r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r5, &(0x7f0000000740)='loop\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e)
close(r6)
nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0)
ioctl(0xffffffffffffffff, 0xc0101282, &(0x7f0000000a00)="00000000000000000100"/80)

1m24.471439645s ago: executing program 5 (id=187):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
write(r0, 0x0, 0x0)
close(r0)

1m24.435000667s ago: executing program 5 (id=188):
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'bond0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bonding_masters\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='+bond0\n', 0x7)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0)
write(r2, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'bond0\x00', 0x1})

1m24.393582729s ago: executing program 5 (id=189):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='0\n\x00', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r1, &(0x7f0000000400)='freezer\n\x00', 0x8)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/power/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000600)='freeze\n\x00', 0x7)
close(r2)

1m17.820696357s ago: executing program 34 (id=147):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/scsi_disk/0:0:0:0/manage_system_start_stop\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1\n', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/scsi/devices/0:0:0:0/scsi_disk/0:0:0:0/manage_system_start_stop\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='1\n', 0x2)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='0\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/power/sync_on_suspend\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='0\n', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r4, &(0x7f0000000340)='devices\n', 0x8)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/power/state\x00', 0x1, 0x0)
write(r5, &(0x7f00000003c0)='freeze\n', 0x7)
close(r5)

1m15.572462413s ago: executing program 35 (id=153):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000200), &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/pm_test\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='core\n\x00', 0x5)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='mem\n\x00', 0x4)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0)='disk\n\x00', 0x5)
close(r2)

1m13.5159766s ago: executing program 7 (id=217):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)='dummy_udc.0\n\x00', 0xc)

1m13.51584953s ago: executing program 7 (id=229):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x0, 0x0)
write(r0, &(0x7f0000000100)='2049\n', 0x5)
close(r0)

1m13.479537901s ago: executing program 7 (id=230):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff)
mount(&(0x7f0000000400)=@filename='devtmpfs\x00', &(0x7f0000000300)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0)
write(r0, &(0x7f0000000700)='/dev/ram0,65536\x00', 0x10)
close(r0)
r1 = syz_open_dev$mtd(&(0x7f0000000800), 0x1, 0x2)
ioctl$MEMERASE(r1, 0x40084d02, &(0x7f0000000900)={0x0, 0x400000})
close(r1)
ioctl(0xffffffffffffffff, 0x40186f40, &(0x7f0000000b00)="ffffffff0100"/24)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r2, 0x40986f00, &(0x7f0000000d00)="000000000100000000001800000000000300040000000000766f6c3000"/134)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000f00)=@filename='ubi0_0\x00', &(0x7f0000000e00)='./mnt\x00', &(0x7f0000001000)='ubifs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f\x00', 0x42, 0x1b6)
close(r3)
openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f\x00', 0x0, 0x0)

1m13.032104782s ago: executing program 4 (id=236):
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'bond0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bonding_masters\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='+bond0\n', 0x7)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0)
write(r2, &(0x7f0000000600), 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'bond0\x00', 0x1})

1m12.992494264s ago: executing program 4 (id=237):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/ci_hdrc\x00', 0x0, 0x0)

1m12.924266497s ago: executing program 4 (id=238):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)
nanosleep(&(0x7f0000000300)={0x0, 0x35a4e900}, 0x0)
close(r0)

1m12.600265943s ago: executing program 6 (id=241):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/acpi_cpufreq/drivers/cpufreq:acpi-cpufreq\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/acpi_cpufreq/drivers/platform:acpi-cpufreq\x00', 0x0, 0x0)

1m12.600020163s ago: executing program 6 (id=242):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='wwnn=0x2000000044112233,wwpn=0x1000000044112233\n', 0x32)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='fc\n', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0)
write(r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0)
write(r3, &(0x7f0000000380)='nn-0x2000000044112233:pn-0x1000000044112233\n', 0x2c)
symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testsubsys\x00')

1m12.575134634s ago: executing program 6 (id=243):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
write(r0, &(0x7f0000000900)='transport=loop,nqn=test', 0x17)

1m12.511660477s ago: executing program 6 (id=244):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/iommu/ivhd0\x00', 0x0, 0x0)

1m12.45221579s ago: executing program 6 (id=245):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:04.0/vendor\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:04.0/device\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:04.0/class\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:04.0/config\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0)

1m12.45200783s ago: executing program 6 (id=246):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/firmware_class/parameters/path\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='.\n', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./usbduxfast_firmware.bin\x00', 0x42, 0x1b6)
close(r1)
syz_usb_connect(0x3, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81310000000000000010902290001010080320904000000ff0000000904000102ff0000000705860200020007050402000200"], 0x0)
nanosleep(&(0x7f0000000280)={0x1}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/drivers/usbduxfast/1-1:1.0/comedi:comedi0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/usb/drivers/usbduxfast/1-1:1.0/comedi\x00', 0x0, 0x0)

1m12.112782086s ago: executing program 4 (id=247):
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'bond0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bonding_masters\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='+bond0\n', 0x7)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0)
write(r2, &(0x7f0000000600)='+bond_s', 0x7)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'bond0\x00', 0x1})

1m10.277121231s ago: executing program 7 (id=248):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1\n', 0x2)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='1\n', 0x2)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r3, &(0x7f0000000540)='/dev/nullb1\n', 0xc)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='1\n', 0x2)
close(r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r5, &(0x7f0000000740)='loop\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e)
nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0)
ioctl(r7, 0xc0101282, &(0x7f0000000a00)="00000000000000000100"/80)

1m10.236595334s ago: executing program 4 (id=249):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)='dummy_udc.0\n\x00', 0xc)

1m10.156276767s ago: executing program 4 (id=250):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000200), 0x2)
read(r0, &(0x7f0000000400), 0x1)

50.034482562s ago: executing program 36 (id=189):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='0\n\x00', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/pm_test\x00', 0x2, 0x0)
write(r1, &(0x7f0000000400)='freezer\n\x00', 0x8)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/power/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000600)='freeze\n\x00', 0x7)
close(r2)

49.999806354s ago: executing program 37 (id=246):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/firmware_class/parameters/path\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='.\n', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./usbduxfast_firmware.bin\x00', 0x42, 0x1b6)
close(r1)
syz_usb_connect(0x3, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81310000000000000010902290001010080320904000000ff0000000904000102ff0000000705860200020007050402000200"], 0x0)
nanosleep(&(0x7f0000000280)={0x1}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/drivers/usbduxfast/1-1:1.0/comedi:comedi0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/usb/drivers/usbduxfast/1-1:1.0/comedi\x00', 0x0, 0x0)

49.943102306s ago: executing program 38 (id=248):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1\n', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='1\n', 0x2)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='1\n', 0x2)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0)
write(r3, &(0x7f0000000540)='/dev/nullb1\n', 0xc)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='1\n', 0x2)
close(r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0)
write(r5, &(0x7f0000000740)='loop\n', 0x5)
close(r5)
symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/subsystems/testsubsys\x00')
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
write(r6, &(0x7f0000000900)='transport=loop,nqn=testsubsys\n', 0x1e)
nanosleep(&(0x7f0000000940)={0x0, 0x1dcd6500}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/nvme0n1\x00', 0x2, 0x0)
ioctl(r7, 0xc0101282, &(0x7f0000000a00)="00000000000000000100"/80)

49.833290301s ago: executing program 39 (id=250):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000200), 0x2)
read(r0, &(0x7f0000000400), 0x1)

49.814158172s ago: executing program 8 (id=225):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
write(r0, &(0x7f0000000900), 0x0)
close(r0)

29.535504934s ago: executing program 40 (id=225):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)
write(r0, &(0x7f0000000900), 0x0)
close(r0)

19.693750126s ago: executing program 2 (id=253):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0)

19.648241678s ago: executing program 2 (id=257):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x3e9, 0x0, 0x0, 0x0, {0x1, 0x1}}, 0x3c}}, 0x0)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="20040000f30301000000000000000000"], 0x10}}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)

19.571171692s ago: executing program 2 (id=258):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff)
mount(&(0x7f0000000400)=@filename='devtmpfs\x00', &(0x7f0000000300)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0)
write(r0, &(0x7f0000000700)='/dev/ram0,65536\x00', 0x10)
close(r0)
r1 = syz_open_dev$mtd(&(0x7f0000000800), 0x1, 0x2)
ioctl$MEMERASE(r1, 0x40084d02, &(0x7f0000000900)={0x0, 0x400000})
close(r1)
ioctl(0xffffffffffffffff, 0x40186f40, &(0x7f0000000b00)="ffffffff0100"/24)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r2, 0x40986f00, &(0x7f0000000d00)="000000000100000000001800000000000300040000000000766f6c3000"/134)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000f00)=@filename='ubi0_0\x00', &(0x7f0000000e00)='./mnt\x00', &(0x7f0000001000)='ubifs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f\x00', 0x42, 0x1b6)
close(r3)
openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f\x00', 0x0, 0x0)

18.786492249s ago: executing program 9 (id=264):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000bc0)={[{@nodelalloc}, {@nodioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@nolazytime}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, 0x0, 0x3a140a7, 0x0, 0x1, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
recvmmsg(r3, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x77}, {{0x0, 0x0, 0x0}, 0x4f5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000002600)}, 0x5}, {{0x0, 0x0, 0x0}, 0x7}], 0x5, 0x120, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./my_config\x00', 0x210000, &(0x7f0000000140)={[{@dioread_nolock}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r4, &(0x7f00000091c0)=""/16384, 0x4000)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
write$binfmt_script(r5, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000280)='./bus\x00', 0x8090, &(0x7f0000000100)={[{@dots}, {@fat=@flush}]}, 0x1, 0x267, &(0x7f00000007c0)="$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")
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x10000, 0x8, 0x7, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x4004010)

17.461236181s ago: executing program 9 (id=265):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x0, "", [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x20, 0x15, 0x87}}}}}]}}]}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)

16.886821238s ago: executing program 9 (id=266):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x15}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)
r4 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}, 0x2c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)

16.8477805s ago: executing program 9 (id=267):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f00000003c0)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55bf, &(0x7f0000006a80)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)

16.565523703s ago: executing program 9 (id=268):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000680)="52540012345652540012345786dd6000000000003b400000000000000000000000000000000100000000000000000000000000000001", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

15.479108084s ago: executing program 9 (id=269):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000001c0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x82200, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000100)=r5)
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

4.000994793s ago: executing program 41 (id=258):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff)
mount(&(0x7f0000000400)=@filename='devtmpfs\x00', &(0x7f0000000300)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0)
write(r0, &(0x7f0000000700)='/dev/ram0,65536\x00', 0x10)
close(r0)
r1 = syz_open_dev$mtd(&(0x7f0000000800), 0x1, 0x2)
ioctl$MEMERASE(r1, 0x40084d02, &(0x7f0000000900)={0x0, 0x400000})
close(r1)
ioctl(0xffffffffffffffff, 0x40186f40, &(0x7f0000000b00)="ffffffff0100"/24)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/ubi0\x00', 0x2, 0x0)
ioctl(r2, 0x40986f00, &(0x7f0000000d00)="000000000100000000001800000000000300040000000000766f6c3000"/134)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000f00)=@filename='ubi0_0\x00', &(0x7f0000000e00)='./mnt\x00', &(0x7f0000001000)='ubifs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f\x00', 0x42, 0x1b6)
close(r3)
openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f\x00', 0x0, 0x0)

0s ago: executing program 42 (id=269):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000001c0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x82200, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000100)=r5)
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

kernel console output (not intermixed with test programs):

  50.320428][ T4807] team0: Port device team_slave_0 added
[   50.324578][ T4807] team0: Port device team_slave_1 added
[   50.329791][ T4807] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.330967][ T4807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.336251][ T4807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.339202][ T4807] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.340419][ T4807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.345408][ T4807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.354921][ T4807] device hsr_slave_0 entered promiscuous mode
[   50.356360][ T4807] device hsr_slave_1 entered promiscuous mode
[   50.357710][ T4807] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   50.358841][ T4807] Cannot create hsr debugfs directory
[   50.395477][ T4807] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   50.398031][ T4807] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   50.400745][ T4807] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   50.403889][ T4807] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   50.411815][ T4807] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.413123][ T4807] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.414654][ T4807] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.415843][ T4807] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.433944][ T4807] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.438412][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   50.440539][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.442464][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.444631][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   50.449306][ T4807] 8021q: adding VLAN 0 to HW filter on device team0
[   50.454060][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   50.455656][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.456916][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.459935][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   50.461582][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.462947][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.469837][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   50.471544][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   50.477666][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   50.480614][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   50.484990][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   50.487356][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   50.539606][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   50.540974][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   50.548079][ T4807] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.618334][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   50.625483][ T4807] device veth0_vlan entered promiscuous mode
[   50.627001][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   50.628661][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   50.630044][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   50.634372][ T4807] device veth1_vlan entered promiscuous mode
[   50.643418][ T4807] device veth0_macvtap entered promiscuous mode
[   50.644850][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   50.646763][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   50.648426][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   50.650056][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   50.653958][ T4807] device veth1_macvtap entered promiscuous mode
[   50.658703][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   50.660304][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.662220][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   50.664109][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.665808][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   50.667528][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.669119][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   50.670838][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.672539][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   50.674190][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.676487][ T4807] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.678020][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   50.680967][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   50.683494][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.685185][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   50.687035][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.688803][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   50.690481][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.692156][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   50.693778][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.695285][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   50.696881][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.699126][ T4807] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.701103][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   50.705423][ T4807] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.706897][ T4807] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.708330][ T4807] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.709833][ T4807] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.738984][ T4390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.740376][ T4390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.745284][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   50.752449][ T4833] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[   50.754462][ T4390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.755718][ T4390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.757050][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   50.761500][ T4833] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[   50.765102][ T4833] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[   50.785675][ T4835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.787308][ T4835] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.812473][ T4837] nvme_fabrics: missing parameter 'transport=%s'
[   50.813665][ T4837] nvme_fabrics: missing parameter 'nqn=%s'
[   50.837257][ T4840] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[   50.853632][   T22] nvmet: creating nvm controller 10 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:35cd6e19-77b0-46fd-8950-9778ecbabbe8.
[   50.856651][ T4840] nvme nvme10: creating 2 I/O queues.
[   50.858674][ T4840] nvme nvme10: new ctrl: "testsubsys"
[   51.417763][ T4846] bonding: bond0 is being created...
[   51.418910][ T4846] bonding: bond0 already exists
[   51.420656][ T4846] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.504974][ T4849] ubi0 error: ubi_create_volume: volume 0 already exists
[   51.506269][ T4849] ubi0 error: ubi_create_volume: cannot create volume 0, error -17
[   51.509589][ T4849] UBIFS error (ubi0:0 pid 4849): ubifs_read_node: bad node type (255 but expected 6)
[   51.510996][ T4849] UBIFS error (ubi0:0 pid 4849): ubifs_read_node: bad node at LEB 0:0, LEB mapping status 1
[   51.513334][ T4849] Not a node, first 24 bytes:
[   51.513349][ T4849] 00000000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff                          ........................
[   51.516547][ T4849] CPU: 0 PID: 4849 Comm: syz.4.165 Not tainted syzkaller #0
[   51.517782][ T4849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   51.519450][ T4849] Call trace:
[   51.520032][ T4849]  dump_backtrace+0x1c4/0x1f0
[   51.520801][ T4849]  show_stack+0x2c/0x3c
[   51.521485][ T4849]  __dump_stack+0x30/0x40
[   51.522207][ T4849]  dump_stack_lvl+0xf4/0x15c
[   51.522998][ T4849]  dump_stack+0x1c/0x5c
[   51.523721][ T4849]  ubifs_read_node+0x3ec/0x654
[   51.524580][ T4849]  ubifs_read_superblock+0x100/0x324c
[   51.525545][ T4849]  ubifs_mount+0x1bcc/0x4f38
[   51.526487][ T4849]  legacy_get_tree+0xd8/0x174
[   51.527467][ T4849]  vfs_get_tree+0x90/0x278
[   51.528274][ T4849]  do_new_mount+0x228/0x804
[   51.529068][ T4849]  path_mount+0x5ac/0xe6c
[   51.529860][ T4849]  __arm64_sys_mount+0x4a0/0x5a0
[   51.530744][ T4849]  invoke_syscall+0x98/0x290
[   51.531594][ T4849]  el0_svc_common+0x13c/0x258
[   51.532465][ T4849]  do_el0_svc+0x5c/0x134
[   51.533226][ T4849]  el0_svc+0x58/0x128
[   51.533959][ T4849]  el0t_64_sync_handler+0x84/0xf0
[   51.534839][ T4849]  el0t_64_sync+0x18c/0x190
[   52.172668][ T4338] Bluetooth: hci5: command 0x0409 tx timeout
[   52.361503][ T4856] Config c/1 of g1 needs at least one function.
[   52.363712][ T4856] udc dummy_udc.0: failed to start g1: -22
[   52.364762][ T4856] configfs-gadget.g1: probe of gadget.0 failed with error -22
[   52.366406][ T4856] UDC core: g1: couldn't find an available UDC or it's busy
[   52.389363][ T4335] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   52.391050][ T4335] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   52.392836][ T4335] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   52.400360][ T4335] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   52.405410][ T4335] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   52.406874][ T4335] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   52.458816][ T4867] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[   52.460774][ T4867] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[   52.464334][ T4867] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[   52.486429][ T4857] lo speed is unknown, defaulting to 1000
[   52.508309][ T4870] nvme_fabrics: missing parameter 'transport=%s'
[   52.509634][ T4870] nvme_fabrics: missing parameter 'nqn=%s'
[   52.536268][ T4873] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[   52.557911][   T14] nvmet: creating nvm controller 11 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:35cd6e19-77b0-46fd-8950-9778ecbabbe8.
[   52.561491][ T4873] nvme nvme11: creating 2 I/O queues.
[   52.564740][ T4873] nvme nvme11: new ctrl: "testsubsys"
[   52.574892][ T4857] chnl_net:caif_netlink_parms(): no params data found
[   52.595056][ T4857] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.596381][ T4857] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.597958][ T4857] device bridge_slave_0 entered promiscuous mode
[   52.600052][ T4857] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.601182][ T4857] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.603038][ T4857] device bridge_slave_1 entered promiscuous mode
[   52.609542][ T4857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.615600][ T4857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.622533][ T4857] team0: Port device team_slave_0 added
[   52.624629][ T4857] team0: Port device team_slave_1 added
[   52.629955][ T4857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.631247][ T4857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.639643][ T4857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.642387][ T4857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.643617][ T4857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.648625][ T4857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.659339][ T4857] device hsr_slave_0 entered promiscuous mode
[   52.660783][ T4857] device hsr_slave_1 entered promiscuous mode
[   52.662632][ T4857] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.663976][ T4857] Cannot create hsr debugfs directory
[   52.697012][ T4857] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   52.699307][ T4857] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   52.701662][ T4857] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   52.703986][ T4857] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   52.711609][ T4857] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.713042][ T4857] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.714410][ T4857] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.715690][ T4857] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.735102][ T4857] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.739237][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.741024][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.746175][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.749609][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   52.754863][ T4857] 8021q: adding VLAN 0 to HW filter on device team0
[   52.767875][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.769634][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.770849][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.772738][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.774426][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.775665][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.778141][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   52.780617][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   52.785332][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.786960][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   52.790648][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   52.793658][ T4857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   52.841905][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   52.843498][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   52.847307][ T4857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.919297][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   52.927981][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   52.929793][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   52.931390][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   52.934386][ T4857] device veth0_vlan entered promiscuous mode
[   52.937738][ T4857] device veth1_vlan entered promiscuous mode
[   52.945708][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   52.947219][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   52.949001][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   52.951483][ T4857] device veth0_macvtap entered promiscuous mode
[   52.955239][ T4857] device veth1_macvtap entered promiscuous mode
[   52.959921][ T4857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   52.961680][ T4857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.964118][ T4857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   52.966014][ T4857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.967837][ T4857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   52.969893][ T4857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.971494][ T4857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   52.974026][ T4857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.975709][ T4857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   52.977527][ T4857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.979261][ T4857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   52.981281][ T4857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.985278][ T4857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.986782][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   52.989182][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   52.992421][ T4857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   52.994136][ T4857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.995842][ T4857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   52.997807][ T4857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   52.999711][ T4857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   53.001609][ T4857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.003679][ T4857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   53.005546][ T4857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.007214][ T4857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   53.009132][ T4857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.010719][ T4857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   53.012878][ T4857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   53.015356][ T4857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.016988][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   53.019885][ T4857] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.021474][ T4857] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.023315][ T4857] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.024780][ T4857] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.105261][ T4892] nvme_fabrics: missing parameter 'transport=%s'
[   53.106409][ T4892] nvme_fabrics: missing parameter 'nqn=%s'
[   53.180289][ T4896] bonding: bond0 is being created...
[   54.252351][ T4338] Bluetooth: hci5: command 0x041b tx timeout
[   54.412007][ T4338] Bluetooth: hci6: command 0x0409 tx timeout
[   54.581977][ T4848] block2mtd: error: cannot open device /dev/ram0
[   54.600591][ T4896] bonding: bond0 already exists
[   54.605475][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.607025][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.618205][ T4897] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.619849][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   54.630746][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.632763][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.634197][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   54.637783][ T4899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.639627][ T4899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.712159][ T4907] Config c/1 of g1 needs at least one function.
[   54.713366][ T4907] udc dummy_udc.0: failed to start g1: -22
[   54.714317][ T4907] configfs-gadget.g1: probe of gadget.0 failed with error -22
[   54.717968][ T4907] UDC core: g1: couldn't find an available UDC or it's busy
[   54.766475][ T4914] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[   54.773610][ T4914] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[   54.775239][ T4914] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[   54.806273][ T4917] nvme_fabrics: missing parameter 'transport=%s'
[   54.807499][ T4917] nvme_fabrics: missing parameter 'nqn=%s'
[   54.817666][ T4920] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[   54.832568][ T4377] nvmet: creating nvm controller 12 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:35cd6e19-77b0-46fd-8950-9778ecbabbe8.
[   54.836636][ T4920] nvme nvme12: creating 2 I/O queues.
[   54.838588][ T4920] nvme nvme12: new ctrl: "testsubsys"
[   54.911565][ T4925] ubi0 error: ubi_create_volume: volume 0 already exists
[   54.913101][ T4925] ubi0 error: ubi_create_volume: cannot create volume 0, error -17
[   54.916201][ T4925] UBIFS error (ubi0:0 pid 4925): ubifs_read_node: bad node type (255 but expected 6)
[   54.917833][ T4925] UBIFS error (ubi0:0 pid 4925): ubifs_read_node: bad node at LEB 0:0, LEB mapping status 1
[   54.919706][ T4925] Not a node, first 24 bytes:
[   54.919727][ T4925] 00000000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff                          ........................
[   54.923043][ T4925] CPU: 0 PID: 4925 Comm: syz.6.186 Not tainted syzkaller #0
[   54.924269][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   54.926064][ T4925] Call trace:
[   54.926653][ T4925]  dump_backtrace+0x1c4/0x1f0
[   54.927551][ T4925]  show_stack+0x2c/0x3c
[   54.928364][ T4925]  __dump_stack+0x30/0x40
[   54.929199][ T4925]  dump_stack_lvl+0xf4/0x15c
[   54.930110][ T4925]  dump_stack+0x1c/0x5c
[   54.930923][ T4925]  ubifs_read_node+0x3ec/0x654
[   54.931793][ T4925]  ubifs_read_superblock+0x100/0x324c
[   54.932761][ T4925]  ubifs_mount+0x1bcc/0x4f38
[   54.933608][ T4925]  legacy_get_tree+0xd8/0x174
[   54.934468][ T4925]  vfs_get_tree+0x90/0x278
[   54.935277][ T4925]  do_new_mount+0x228/0x804
[   54.936028][ T4925]  path_mount+0x5ac/0xe6c
[   54.936771][ T4925]  __arm64_sys_mount+0x4a0/0x5a0
[   54.937638][ T4925]  invoke_syscall+0x98/0x290
[   54.938455][ T4925]  el0_svc_common+0x13c/0x258
[   54.939270][ T4925]  do_el0_svc+0x5c/0x134
[   54.940015][ T4925]  el0_svc+0x58/0x128
[   54.940657][ T4925]  el0t_64_sync_handler+0x84/0xf0
[   54.941487][ T4925]  el0t_64_sync+0x18c/0x190
[   55.380463][ T4927] nvme_fabrics: missing parameter 'transport=%s'
[   55.381620][ T4927] nvme_fabrics: missing parameter 'nqn=%s'
[   55.417002][ T4930] bonding: bond0 is being created...
[   55.418239][ T4930] bonding: bond0 already exists
[   55.421024][ T4930] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.546751][ T4934] PM: suspend entry (s2idle)
[   55.547712][ T4934] PM: suspend exit
[   55.712392][ T4940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.714204][ T4940] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.332164][ T4338] Bluetooth: hci5: command 0x040f tx timeout
[   56.491856][ T4338] Bluetooth: hci6: command 0x041b tx timeout
[   56.748180][ T4943] Config c/1 of g1 needs at least one function.
[   56.749274][ T4943] udc dummy_udc.0: failed to start g1: -22
[   56.750173][ T4943] configfs-gadget.g1: probe of gadget.0 failed with error -22
[   56.751644][ T4943] UDC core: g1: couldn't find an available UDC or it's busy
[   56.807610][ T4949] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[   56.809909][ T4949] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[   56.849653][ T4951] nvme_fabrics: missing parameter 'transport=%s'
[   56.850726][ T4951] nvme_fabrics: missing parameter 'nqn=%s'
[   56.875307][ T4954] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[   56.893699][ T4376] nvmet: creating nvm controller 13 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:35cd6e19-77b0-46fd-8950-9778ecbabbe8.
[   56.896616][ T4954] nvme nvme13: creating 2 I/O queues.
[   56.898441][ T4954] nvme nvme13: new ctrl: "testsubsys"
[   56.965382][ T4957] nvme_fabrics: missing parameter 'transport=%s'
[   56.966561][ T4957] nvme_fabrics: missing parameter 'nqn=%s'
[   57.008117][ T4960] bonding: bond0 is being created...
[   57.009131][ T4960] bonding: bond0 already exists
[   57.011676][ T4960] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.021934][ T4923] block2mtd: error: cannot open device /dev/ram0
[   58.094675][ T4970] Config c/1 of g1 needs at least one function.
[   58.095850][ T4970] udc dummy_udc.0: failed to start g1: -22
[   58.096791][ T4970] configfs-gadget.g1: probe of gadget.0 failed with error -22
[   58.098317][ T4970] UDC core: g1: couldn't find an available UDC or it's busy
[   58.159318][ T4976] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[   58.161450][ T4976] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[   58.202897][ T4978] nvme_fabrics: missing parameter 'nqn=%s'
[   58.226961][ T4981] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[   58.240465][ T4377] nvmet: creating nvm controller 14 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:35cd6e19-77b0-46fd-8950-9778ecbabbe8.
[   58.246707][ T4981] nvme nvme14: creating 2 I/O queues.
[   58.248499][ T4981] nvme nvme14: new ctrl: "testsubsys"
[   58.261947][ T4962] NFSD: attempt to initialize umh client tracking in a container ignored.
[   58.263741][ T4962] NFSD: attempt to initialize legacy client tracking in a container ignored.
[   58.265252][ T4962] NFSD: Unable to initialize client recovery tracking! (-22)
[   58.266538][ T4962] NFSD: starting 90-second grace period (net f0000617)
[   58.312953][ T4985] nvme_fabrics: missing parameter 'transport=%s'
[   58.314189][ T4985] nvme_fabrics: missing parameter 'nqn=%s'
[   58.376393][ T4990] bonding: bond0 is being created...
[   58.377464][ T4990] bonding: bond0 already exists
[   58.380470][ T4990] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.389560][ T4991] ubi0 error: ubi_create_volume: volume 0 already exists
[   58.390987][ T4991] ubi0 error: ubi_create_volume: cannot create volume 0, error -17
[   58.396500][ T4991] UBIFS error (ubi0:0 pid 4991): ubifs_read_node: bad node type (255 but expected 6)
[   58.401107][ T4991] UBIFS error (ubi0:0 pid 4991): ubifs_read_node: bad node at LEB 0:0, LEB mapping status 1
[   58.405721][ T4991] Not a node, first 24 bytes:
[   58.405741][ T4991] 00000000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff                          ........................
[   58.408805][ T4991] CPU: 1 PID: 4991 Comm: syz.6.213 Not tainted syzkaller #0
[   58.409730][   T14] hid-generic 0003:1B1C:1C1B.0003: unknown main item tag 0x0
[   58.410055][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   58.411268][   T14] hid-generic 0003:1B1C:1C1B.0003: unknown main item tag 0x0
[   58.413021][ T4991] Call trace:
[   58.413028][ T4991]  dump_backtrace+0x1c4/0x1f0
[   58.413048][ T4991]  show_stack+0x2c/0x3c
[   58.413056][ T4991]  __dump_stack+0x30/0x40
[   58.413068][ T4991]  dump_stack_lvl+0xf4/0x15c
[   58.413076][ T4991]  dump_stack+0x1c/0x5c
[   58.415307][   T14] hid-generic 0003:1B1C:1C1B.0003: unknown main item tag 0x0
[   58.415742][ T4991]  ubifs_read_node+0x3ec/0x654
[   58.416501][   T14] hid-generic 0003:1B1C:1C1B.0003: unbalanced collection at end of report description
[   58.417233][ T4991]  ubifs_read_superblock+0x100/0x324c
[   58.418193][   T14] hid-generic: probe of 0003:1B1C:1C1B.0003 failed with error -22
[   58.418777][ T4991]  ubifs_mount+0x1bcc/0x4f38
[   58.425963][ T4991]  legacy_get_tree+0xd8/0x174
[   58.426835][ T4991]  vfs_get_tree+0x90/0x278
[   58.427711][ T4991]  do_new_mount+0x228/0x804
[   58.428600][ T4991]  path_mount+0x5ac/0xe6c
[   58.429448][ T4991]  __arm64_sys_mount+0x4a0/0x5a0
[   58.430335][ T4991]  invoke_syscall+0x98/0x290
[   58.431171][ T4991]  el0_svc_common+0x13c/0x258
[   58.432028][ T4991]  do_el0_svc+0x5c/0x134
[   58.432817][ T4991]  el0_svc+0x58/0x128
[   58.433541][ T4991]  el0t_64_sync_handler+0x84/0xf0
[   58.434522][ T4991]  el0t_64_sync+0x18c/0x190
[   58.435823][ T4338] Bluetooth: hci5: command 0x0419 tx timeout
[   58.571891][ T4338] Bluetooth: hci6: command 0x040f tx timeout
[   60.331894][ T4375] atkbd serio1: keyboard reset failed on 
[   60.662473][ T4335] Bluetooth: hci6: command 0x0419 tx timeout
[   60.978839][ T4997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.980499][ T4997] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.057515][ T4338] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   62.059324][ T4338] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   62.061246][ T4338] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   62.064746][ T4338] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   62.067122][ T4338] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   62.068488][ T4338] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   62.086571][ T5007] ubi: mtd1 is already attached to ubi0
[   62.126546][ T5004] lo speed is unknown, defaulting to 1000
[   62.177054][ T5004] chnl_net:caif_netlink_parms(): no params data found
[   62.192849][ T5004] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.194262][ T5004] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.195879][ T5004] device bridge_slave_0 entered promiscuous mode
[   62.197985][ T5004] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.199211][ T5004] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.200724][ T5004] device bridge_slave_1 entered promiscuous mode
[   62.208072][ T5004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.210838][ T5004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.217963][ T5004] team0: Port device team_slave_0 added
[   62.219737][ T5004] team0: Port device team_slave_1 added
[   62.225384][ T5004] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.226618][ T5004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.230954][ T5004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.234220][ T5004] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.235432][ T5004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.239905][ T5004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.249311][ T5004] device hsr_slave_0 entered promiscuous mode
[   62.250685][ T5004] device hsr_slave_1 entered promiscuous mode
[   62.252436][ T5004] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.253785][ T5004] Cannot create hsr debugfs directory
[   62.287290][ T5004] netdevsim netdevsim7 netdevsim0: renamed from eth0
[   62.289570][ T5004] netdevsim netdevsim7 netdevsim1: renamed from eth1
[   62.291813][ T5004] netdevsim netdevsim7 netdevsim2: renamed from eth2
[   62.294573][ T5004] netdevsim netdevsim7 netdevsim3: renamed from eth3
[   62.302989][ T5004] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.304323][ T5004] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.305685][ T5004] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.307016][ T5004] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.323665][ T5004] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.327531][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   62.329769][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.331604][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.334922][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   62.340253][ T5004] 8021q: adding VLAN 0 to HW filter on device team0
[   62.345272][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   62.346988][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.348269][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.351516][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   62.353842][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.355073][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.362354][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   62.364053][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   62.367220][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   62.370404][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   62.378032][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   62.380860][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   62.440093][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   62.441854][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   62.445714][ T5004] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.521465][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   62.528814][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   62.530581][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   62.532268][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   62.537310][ T5004] device veth0_vlan entered promiscuous mode
[   62.540735][ T5004] device veth1_vlan entered promiscuous mode
[   62.548190][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   62.549811][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   62.551581][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   62.554622][ T5004] device veth0_macvtap entered promiscuous mode
[   62.556964][ T5004] device veth1_macvtap entered promiscuous mode
[   62.562877][ T5004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.564553][ T5004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.566131][ T5004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.567763][ T5004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.569252][ T5004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.570864][ T5004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.574591][ T5004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.576320][ T5004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.578010][ T5004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.580114][ T5004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.582104][ T5004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.583939][ T5004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.585559][ T5004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.587314][ T5004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.589682][ T5004] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.591037][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   62.593655][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   62.596748][ T5004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.598546][ T5004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.600228][ T5004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.602172][ T5004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.603904][ T5004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.605648][ T5004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.607246][ T5004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.609013][ T5004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.610640][ T5004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.612925][ T5004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.614551][ T5004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.616293][ T5004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.617856][ T5004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.619574][ T5004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.622726][ T5004] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.624434][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   62.626953][ T5004] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.628382][ T5004] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.629958][ T5004] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.631390][ T5004] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.061943][ T4988] block2mtd: error: cannot open device /dev/ram0
[   63.085798][ T5027] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[   63.088064][ T5027] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[   63.120990][ T5029] nvme_fabrics: missing parameter 'nqn=%s'
[   63.148863][ T5032] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[   63.163483][   T22] nvmet: creating nvm controller 15 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:35cd6e19-77b0-46fd-8950-9778ecbabbe8.
[   63.168231][ T5032] nvme nvme15: creating 2 I/O queues.
[   63.170440][ T5032] nvme nvme15: new ctrl: "testsubsys"
[   63.287496][ T5038] bonding: bond0 is being created...
[   64.092317][ T4335] Bluetooth: hci7: command 0x0409 tx timeout
[   64.290472][ T4338] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[   64.295580][ T4338] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[   64.297097][ T4338] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[   64.298649][ T4338] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[   64.300336][ T4338] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[   64.301687][ T4338] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[   64.493945][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[   64.495207][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[   66.171762][ T4335] Bluetooth: hci7: command 0x041b tx timeout
[   66.171968][ T5003] block2mtd: error: cannot open device /dev/ram0
[   66.190187][ T5038] bonding: bond0 already exists
[   66.194300][ T5039] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.221586][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.223691][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.228978][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.235811][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.237098][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.238389][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.295424][ T5041] lo speed is unknown, defaulting to 1000
[   66.329841][ T5053] svc: failed to register lockdv1 RPC service (errno 111).
[   66.331829][ T4338] Bluetooth: hci8: command 0x0409 tx timeout
[   66.367378][ T5041] chnl_net:caif_netlink_parms(): no params data found
[   66.393054][ T5041] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.394505][ T5041] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.396505][ T5041] device bridge_slave_0 entered promiscuous mode
[   66.399334][ T5041] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.400789][ T5041] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.415403][ T5041] device bridge_slave_1 entered promiscuous mode
[   66.438540][ T5041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.441597][ T5041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.449593][ T5068] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[   66.452782][ T5068] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[   66.454634][ T5041] team0: Port device team_slave_0 added
[   66.457918][ T5041] team0: Port device team_slave_1 added
[   66.469186][ T5041] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.471419][ T5041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.476655][ T5041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.479320][ T5041] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.480583][ T5041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.490467][ T5041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.502751][ T5071] ubi0 error: ubi_create_volume: volume 0 already exists
[   66.504051][ T5071] ubi0 error: ubi_create_volume: cannot create volume 0, error -17
[   66.508646][ T5071] UBIFS error (ubi0:0 pid 5071): ubifs_read_node: bad node type (255 but expected 6)
[   66.508672][ T5041] device hsr_slave_0 entered promiscuous mode
[   66.510414][ T5071] UBIFS error (ubi0:0 pid 5071): ubifs_read_node: bad node at LEB 0:0, LEB mapping status 1
[   66.511666][ T5070] nvme_fabrics: missing parameter 'nqn=%s'
[   66.514586][ T5071] Not a node, first 24 bytes:
[   66.514608][ T5071] 00000000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff                          ........................
[   66.517747][ T5071] CPU: 0 PID: 5071 Comm: syz.7.230 Not tainted syzkaller #0
[   66.518993][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[   66.520888][ T5071] Call trace:
[   66.521482][ T5071]  dump_backtrace+0x1c4/0x1f0
[   66.522092][ T5041] device hsr_slave_1 entered promiscuous mode
[   66.522320][ T5071]  show_stack+0x2c/0x3c
[   66.524071][ T5071]  __dump_stack+0x30/0x40
[   66.524847][ T5071]  dump_stack_lvl+0xf4/0x15c
[   66.525677][ T5071]  dump_stack+0x1c/0x5c
[   66.526428][ T5071]  ubifs_read_node+0x3ec/0x654
[   66.527291][ T5071]  ubifs_read_superblock+0x100/0x324c
[   66.528255][ T5071]  ubifs_mount+0x1bcc/0x4f38
[   66.529071][ T5071]  legacy_get_tree+0xd8/0x174
[   66.529962][ T5071]  vfs_get_tree+0x90/0x278
[   66.530771][ T5071]  do_new_mount+0x228/0x804
[   66.531585][ T5071]  path_mount+0x5ac/0xe6c
[   66.532379][ T5071]  __arm64_sys_mount+0x4a0/0x5a0
[   66.533246][ T5071]  invoke_syscall+0x98/0x290
[   66.534090][ T5071]  el0_svc_common+0x13c/0x258
[   66.534931][ T5071]  do_el0_svc+0x5c/0x134
[   66.535713][ T5071]  el0_svc+0x58/0x128
[   66.536445][ T5071]  el0t_64_sync_handler+0x84/0xf0
[   66.537372][ T5071]  el0t_64_sync+0x18c/0x190
[   66.538416][ T5041] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.539755][ T5041] Cannot create hsr debugfs directory
[   66.558441][ T5074] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[   66.584331][ T5041] netdevsim netdevsim8 netdevsim0: renamed from eth0
[   66.586945][ T5041] netdevsim netdevsim8 netdevsim1: renamed from eth1
[   66.589245][ T5041] netdevsim netdevsim8 netdevsim2: renamed from eth2
[   66.594169][ T5041] netdevsim netdevsim8 netdevsim3: renamed from eth3
[   66.598652][ T4375] nvmet: creating nvm controller 16 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:35cd6e19-77b0-46fd-8950-9778ecbabbe8.
[   66.603198][ T5041] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.604438][ T5041] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.605464][ T5074] nvme nvme16: creating 2 I/O queues.
[   66.605781][ T5041] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.607830][ T5041] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.609442][ T5074] nvme nvme16: new ctrl: "testsubsys"
[   66.626090][ T5041] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.630362][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.637236][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.639342][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.647416][ T5041] 8021q: adding VLAN 0 to HW filter on device team0
[   66.651463][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.653576][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.654798][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.657970][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.659713][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.661047][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.673104][ T5041] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   66.675492][ T5041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.679777][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.685164][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.687070][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.689028][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.691075][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.695844][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.790899][ T5041] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.793918][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.795568][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.817338][ T5087] bonding: bond0 is being created...
[   66.818589][ T5087] bonding: bond0 already exists
[   66.821006][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.877721][ T5094] ptp ptp0: new virtual clock ptp1
[   66.878692][ T5094] ptp ptp0: guarantee physical clock free running
[   66.928554][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.934192][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.936090][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.937677][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.940456][ T5041] device veth0_vlan entered promiscuous mode
[   66.945289][ T5041] device veth1_vlan entered promiscuous mode
[   66.954321][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.956250][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.958281][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.961225][ T5041] device veth0_macvtap entered promiscuous mode
[   66.964546][ T5041] device veth1_macvtap entered promiscuous mode
[   66.970540][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.974555][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.976467][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.978028][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.980219][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.983030][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.985023][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.987045][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.989015][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.991000][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.993269][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.995216][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.997224][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.999409][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.001305][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.003553][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.006530][ T5041] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.008625][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.011205][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.018571][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.020670][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.022899][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.025004][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.027027][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.029216][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.031268][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.033698][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.035564][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.037823][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.040024][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.042505][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.044531][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.046568][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.048712][ T5041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.050854][ T5041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.055470][ T5041] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.057403][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.060779][ T5041] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.062773][ T5041] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.064406][ T5041] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.066228][ T5041] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.229331][ T5106] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[   67.231570][ T5106] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[   67.280341][  T114] nvmet: connect request for invalid subsystem test!
[   67.281847][ T5108] nvme nvme17: Connect Invalid Data Parameter, subsysnqn "test"
[   67.416215][ T5116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.417947][ T5116] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.779011][ T5120] bonding: bond0 is being created...
[   68.251811][ T4338] Bluetooth: hci7: command 0x040f tx timeout
[   68.411852][ T4338] Bluetooth: hci8: command 0x041b tx timeout
[   69.532443][ T5066] block2mtd: error: cannot open device /dev/ram0
[   69.557586][ T5120] bonding: bond0 already exists
[   69.558186][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.572352][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.573690][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.588963][ T5124] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[   69.592456][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.610072][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.611482][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.612943][   T24] cfg80211: failed to load regulatory.db
[   69.636176][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.673584][ T4412] Freezing user space processes
[   69.678219][   T22] nvmet: creating nvm controller 17 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:35cd6e19-77b0-46fd-8950-9778ecbabbe8.
[   69.682498][ T5124] nvme nvme17: creating 2 I/O queues.
[   69.685013][ T5124] nvme nvme17: new ctrl: "testsubsys"
[   70.341774][ T4335] Bluetooth: hci7: command 0x0419 tx timeout
[   70.492274][ T4335] Bluetooth: hci8: command 0x040f tx timeout
[   70.731845][   T14] atkbd serio2: keyboard reset failed on 
[   72.571923][ T4335] Bluetooth: hci8: command 0x0419 tx timeout
[   89.681997][ T4412] Freezing of tasks failed after 20.007 seconds (4 tasks refusing to freeze, wq_busy=0):
[   89.683744][ T4412] task:syz-executor    state:S stack:0     pid:4328  ppid:1      flags:0x0000000c
[   89.685428][ T4412] Call trace:
[   89.686005][ T4412]  __switch_to+0x2f4/0x550
[   89.686768][ T4412]  __schedule+0xdb4/0x1a6c
[   89.687504][ T4412]  schedule+0xc4/0x170
[   89.688220][ T4412]  do_wait+0x6d4/0xaf8
[   89.688914][ T4412]  kernel_wait4+0x1f8/0x318
[   89.689668][ T4412]  zap_pid_ns_processes+0x364/0x5dc
[   89.690546][ T4412]  do_exit+0x164c/0x19ac
[   89.691289][ T4412]  do_group_exit+0x198/0x238
[   89.692203][ T4412]  get_signal+0x11f4/0x133c
[   89.692922][ T4412]  do_notify_resume+0x364/0x2c84
[   89.693713][ T4412]  el0_svc+0x98/0x128
[   89.694350][ T4412]  el0t_64_sync_handler+0x84/0xf0
[   89.695166][ T4412]  el0t_64_sync+0x18c/0x190
[   89.695882][ T4412] task:syz-executor    state:S stack:0     pid:4329  ppid:1      flags:0x0000000c
[   89.697250][ T4412] Call trace:
[   89.697754][ T4412]  __switch_to+0x2f4/0x550
[   89.698467][ T4412]  __schedule+0xdb4/0x1a6c
[   89.699193][ T4412]  schedule+0xc4/0x170
[   89.699856][ T4412]  do_wait+0x6d4/0xaf8
[   89.700527][ T4412]  kernel_wait4+0x1f8/0x318
[   89.701258][ T4412]  zap_pid_ns_processes+0x364/0x5dc
[   89.702229][ T4412]  do_exit+0x164c/0x19ac
[   89.702942][ T4412]  do_group_exit+0x198/0x238
[   89.703676][ T4412]  get_signal+0x11f4/0x133c
[   89.704410][ T4412]  do_notify_resume+0x364/0x2c84
[   89.705231][ T4412]  el0_svc+0x98/0x128
[   89.705895][ T4412]  el0t_64_sync_handler+0x84/0xf0
[   89.706772][ T4412]  el0t_64_sync+0x18c/0x190
[   89.707549][ T4412] task:syz-executor    state:S stack:0     pid:4330  ppid:1      flags:0x0000000c
[   89.709006][ T4412] Call trace:
[   89.709525][ T4412]  __switch_to+0x2f4/0x550
[   89.710225][ T4412]  __schedule+0xdb4/0x1a6c
[   89.710925][ T4412]  schedule+0xc4/0x170
[   89.711566][ T4412]  do_wait+0x6d4/0xaf8
[   89.712291][ T4412]  kernel_wait4+0x1f8/0x318
[   89.713003][ T4412]  zap_pid_ns_processes+0x364/0x5dc
[   89.713865][ T4412]  do_exit+0x164c/0x19ac
[   89.714772][ T4412]  do_group_exit+0x198/0x238
[   89.715520][ T4412]  get_signal+0x11f4/0x133c
[   89.716290][ T4412]  do_notify_resume+0x364/0x2c84
[   89.717129][ T4412]  el0_svc+0x98/0x128
[   89.717823][ T4412]  el0t_64_sync_handler+0x84/0xf0
[   89.718629][ T4412]  el0t_64_sync+0x18c/0x190
[   89.719407][ T4412] task:syz-executor    state:S stack:0     pid:4337  ppid:1      flags:0x0000000c
[   89.720878][ T4412] Call trace:
[   89.721429][ T4412]  __switch_to+0x2f4/0x550
[   89.722401][ T4412]  __schedule+0xdb4/0x1a6c
[   89.723159][ T4412]  schedule+0xc4/0x170
[   89.723894][ T4412]  do_wait+0x6d4/0xaf8
[   89.724605][ T4412]  kernel_wait4+0x1f8/0x318
[   89.725367][ T4412]  zap_pid_ns_processes+0x364/0x5dc
[   89.726223][ T4412]  do_exit+0x164c/0x19ac
[   89.726918][ T4412]  do_group_exit+0x198/0x238
[   89.727647][ T4412]  get_signal+0x11f4/0x133c
[   89.728368][ T4412]  do_notify_resume+0x364/0x2c84
[   89.729137][ T4412]  el0_svc+0x98/0x128
[   89.729782][ T4412]  el0t_64_sync_handler+0x84/0xf0
[   89.730597][ T4412]  el0t_64_sync+0x18c/0x190
[   89.731611][ T4412] OOM killer enabled.
[   89.732315][ T4412] Restarting tasks ... done.
[   89.772394][ T4412] random: crng reseeded on system resumption
[   89.808922][ T4412] PM: suspend exit
[   89.818144][ T4798] PM: hibernation: hibernation entry
[   89.914412][ T4798] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   89.915916][ T4798] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   89.935226][ T4798] Bluetooth: hci0: Suspend notifier action (1) failed: -4
[   89.936867][ T4798] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   89.937946][ T4798] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   89.939352][ T4798] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[   89.951763][ T4798] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   89.970784][ T4798] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   89.978001][ T4798] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[   89.979356][ T4798] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   89.980404][ T4798] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   90.024857][ T4798] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[   90.026240][ T4798] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[   90.027485][ T4798] Bluetooth: hci5: Opcode 0x0406 failed: -4
[   90.038813][ T4798] Bluetooth: hci5: Suspend notifier action (1) failed: -4
[   90.040111][ T4798] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[   90.041149][ T4798] Bluetooth: hci8: Opcode 0x0406 failed: -4
[   90.042740][ T4798] Bluetooth: hci8: Suspend notifier action (1) failed: -4
[   90.076478][ T4798] Filesystems sync: 0.032 seconds
[   90.132302][ T5137] nvme_fabrics: missing parameter 'transport=%s'
[   90.133422][ T4798] Freezing user space processes
[   90.134645][ T5137] nvme_fabrics: missing parameter 'nqn=%s'
[   90.314225][ T4390] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.409085][ T4390] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.458288][ T4390] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.499160][ T4390] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.179514][ T4390] device hsr_slave_0 left promiscuous mode
[   91.180993][ T4390] device hsr_slave_1 left promiscuous mode
[   91.182482][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.183745][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.185367][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.186533][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.188127][ T4390] device bridge_slave_1 left promiscuous mode
[   91.189747][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.193234][ T4390] device bridge_slave_0 left promiscuous mode
[   91.194418][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.203946][ T4390] device veth1_macvtap left promiscuous mode
[   91.205038][ T4390] device veth0_macvtap left promiscuous mode
[   91.206305][ T4390] device veth1_vlan left promiscuous mode
[   91.207364][ T4390] device veth0_vlan left promiscuous mode
[   91.379276][ T4390] team0 (unregistering): Port device team_slave_1 removed
[   91.390212][ T4390] team0 (unregistering): Port device team_slave_0 removed
[   91.400435][ T4390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   91.411052][ T4390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   91.495981][ T4390] bond0 (unregistering): Released all slaves
[   91.827477][ T4390] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.860635][ T4390] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.920219][ T4390] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.977042][ T4390] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.013033][ T4335] Bluetooth: hci2: command 0x0c1a tx timeout
[   92.049686][ T4390] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.098672][ T4390] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.101885][ T4338] Bluetooth: hci8: command 0x0c1a tx timeout
[   92.102867][ T4338] Bluetooth: hci5: command 0x0c1a tx timeout
[   92.137412][ T4390] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.183371][ T4390] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.243261][ T4390] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.267801][ T4390] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.308049][ T4390] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.347609][ T4390] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.402531][ T4390] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.428828][ T4390] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.468689][ T4390] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.507138][ T4390] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.562680][ T4390] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.588816][ T4390] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.627683][ T4390] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.667850][ T4390] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.966570][ T4390] device hsr_slave_0 left promiscuous mode
[   93.967843][ T4390] device hsr_slave_1 left promiscuous mode
[   93.969243][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.970554][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.972386][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.973598][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.975215][ T4390] device bridge_slave_1 left promiscuous mode
[   93.976269][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.978043][ T4390] device bridge_slave_0 left promiscuous mode
[   93.979237][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.983481][ T4390] device hsr_slave_0 left promiscuous mode
[   93.984742][ T4390] device hsr_slave_1 left promiscuous mode
[   93.986052][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.987210][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.988802][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.990076][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.991550][ T4390] device bridge_slave_1 left promiscuous mode
[   93.992826][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.994693][ T4390] device bridge_slave_0 left promiscuous mode
[   93.995853][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.000036][ T4390] device hsr_slave_0 left promiscuous mode
[   94.001174][ T4390] device hsr_slave_1 left promiscuous mode
[   94.003201][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.004457][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.005941][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.007155][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.008618][ T4390] device bridge_slave_1 left promiscuous mode
[   94.009689][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.011693][ T4390] device bridge_slave_0 left promiscuous mode
[   94.013160][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.016758][ T4390] device hsr_slave_0 left promiscuous mode
[   94.017961][ T4390] device hsr_slave_1 left promiscuous mode
[   94.019257][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.020632][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.022734][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.023944][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.025387][ T4390] device bridge_slave_1 left promiscuous mode
[   94.026506][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.028291][ T4390] device bridge_slave_0 left promiscuous mode
[   94.029494][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.033923][ T4390] device hsr_slave_0 left promiscuous mode
[   94.035084][ T4390] device hsr_slave_1 left promiscuous mode
[   94.036375][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.037579][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.038931][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.040237][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.042235][ T4390] device bridge_slave_1 left promiscuous mode
[   94.043322][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.045248][ T4390] device bridge_slave_0 left promiscuous mode
[   94.046461][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.069457][ T4390] device veth1_macvtap left promiscuous mode
[   94.070590][ T4390] device veth0_macvtap left promiscuous mode
[   94.071868][ T4390] device veth1_vlan left promiscuous mode
[   94.072887][ T4390] device veth0_vlan left promiscuous mode
[   94.074715][ T4390] device veth1_macvtap left promiscuous mode
[   94.075783][ T4390] device veth0_macvtap left promiscuous mode
[   94.076890][ T4390] device veth1_vlan left promiscuous mode
[   94.077962][ T4390] device veth0_vlan left promiscuous mode
[   94.079711][ T4390] device veth1_macvtap left promiscuous mode
[   94.080782][ T4390] device veth0_macvtap left promiscuous mode
[   94.082062][ T4390] device veth1_vlan left promiscuous mode
[   94.083093][ T4390] device veth0_vlan left promiscuous mode
[   94.084857][ T4390] device veth1_macvtap left promiscuous mode
[   94.085873][ T4390] device veth0_macvtap left promiscuous mode
[   94.087179][ T4390] device veth1_vlan left promiscuous mode
[   94.088174][ T4390] device veth0_vlan left promiscuous mode
[   94.090085][ T4390] device veth1_macvtap left promiscuous mode
[   94.091141][ T4390] device veth0_macvtap left promiscuous mode
[   94.092344][ T4335] Bluetooth: hci2: command 0x0406 tx timeout
[   94.093377][ T4390] device veth1_vlan left promiscuous mode
[   94.094423][ T4390] device veth0_vlan left promiscuous mode
[   94.143151][ T4390] infiniband syz0: set down
[   94.171895][ T4338] Bluetooth: hci5: command 0x0406 tx timeout
[   94.173029][ T4338] Bluetooth: hci8: command 0x0406 tx timeout
[   94.462631][ T4390] team0 (unregistering): Port device team_slave_1 removed
[   94.476270][ T4390] team0 (unregistering): Port device team_slave_0 removed
[   94.487162][ T4390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.498235][ T4390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.580611][ T4390] bond0 (unregistering): Released all slaves
[   94.615743][   T56] smc: removing ib device syz0
[   94.769676][ T4390] team0 (unregistering): Port device team_slave_1 removed
[   94.781599][ T4390] team0 (unregistering): Port device team_slave_0 removed
[   94.792537][ T4390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.803985][ T4390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.894423][ T4390] bond0 (unregistering): Released all slaves
[   95.074085][ T4390] team0 (unregistering): Port device team_slave_1 removed
[   95.085264][ T4390] team0 (unregistering): Port device team_slave_0 removed
[   95.096259][ T4390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   95.109676][ T4390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   95.196409][ T4390] bond0 (unregistering): Released all slaves
[   95.345031][ T4390] team0 (unregistering): Port device team_slave_1 removed
[   95.356866][ T4390] team0 (unregistering): Port device team_slave_0 removed
[   95.367571][ T4390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   95.378396][ T4390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   95.464357][ T4390] bond0 (unregistering): Released all slaves
[   95.517657][ T4390] bon (unregistering): Released all slaves
[   95.636000][ T4390] team0 (unregistering): Port device team_slave_1 removed
[   95.647098][ T4390] team0 (unregistering): Port device team_slave_0 removed
[   95.659506][ T4390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   95.674316][ T4390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   95.755466][ T4390] bond0 (unregistering): Released all slaves
[   95.786980][ T4489] lo speed is unknown, defaulting to 1000
[  110.148433][ T4798] Freezing of tasks failed after 20.014 seconds (2 tasks refusing to freeze, wq_busy=0):
[  110.150231][ T4798] task:syz-executor    state:S stack:0     pid:4328  ppid:1      flags:0x0000000c
[  110.151806][ T4798] Call trace:
[  110.152367][ T4798]  __switch_to+0x2f4/0x550
[  110.153109][ T4798]  __schedule+0xdb4/0x1a6c
[  110.153819][ T4798]  schedule+0xc4/0x170
[  110.154496][ T4798]  do_wait+0x6d4/0xaf8
[  110.155159][ T4798]  kernel_wait4+0x1f8/0x318
[  110.155908][ T4798]  zap_pid_ns_processes+0x364/0x5dc
[  110.156773][ T4798]  do_exit+0x164c/0x19ac
[  110.157491][ T4798]  do_group_exit+0x198/0x238
[  110.158224][ T4798]  get_signal+0x11f4/0x133c
[  110.158981][ T4798]  do_notify_resume+0x364/0x2c84
[  110.159839][ T4798]  el0_svc+0x98/0x128
[  110.160520][ T4798]  el0t_64_sync_handler+0x84/0xf0
[  110.161410][ T4798]  el0t_64_sync+0x18c/0x190
[  110.162234][ T4798] task:syz-executor    state:S stack:0     pid:4807  ppid:1      flags:0x0000000c
[  110.163686][ T4798] Call trace:
[  110.164203][ T4798]  __switch_to+0x2f4/0x550
[  110.164941][ T4798]  __schedule+0xdb4/0x1a6c
[  110.165686][ T4798]  schedule+0xc4/0x170
[  110.166376][ T4798]  do_wait+0x6d4/0xaf8
[  110.167033][ T4798]  kernel_wait4+0x1f8/0x318
[  110.167784][ T4798]  zap_pid_ns_processes+0x364/0x5dc
[  110.168699][ T4798]  do_exit+0x164c/0x19ac
[  110.169436][ T4798]  do_group_exit+0x198/0x238
[  110.170227][ T4798]  get_signal+0x11f4/0x133c
[  110.170963][ T4798]  do_notify_resume+0x364/0x2c84
[  110.171838][ T4798]  el0_svc+0x98/0x128
[  110.172508][ T4798]  el0t_64_sync_handler+0x84/0xf0
[  110.173300][ T4798]  el0t_64_sync+0x18c/0x190
[  110.174173][ T4798] OOM killer enabled.
[  110.174822][ T4798] Restarting tasks ... done.
[  110.195448][ T4798] PM: hibernation: hibernation exit
[  110.224694][ T4338] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  110.226480][ T4338] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  110.228015][ T4338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  110.229494][ T4338] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  110.231212][ T4338] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  110.232667][ T4338] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  110.484834][ T4338] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  110.497263][ T4345] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  110.497416][ T4340] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  110.500949][ T4340] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  110.504100][ T4345] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  110.505742][ T4345] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  110.508275][ T4345] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  110.510122][ T4345] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  110.510435][ T4343] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  110.512840][ T4345] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  110.514134][ T4345] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  110.516662][ T4345] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  110.516747][ T4343] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  110.521420][ T4343] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  110.524218][ T4335] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  110.525784][ T4335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  110.543723][ T4343] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  110.545055][ T4343] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  110.546711][ T4343] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  110.548164][ T4343] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  110.549624][ T4335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  110.553744][ T4335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  110.560057][ T4335] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  110.561930][ T4335] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  110.854020][ T5145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.952894][ T5145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.983625][ T5152] chnl_net:caif_netlink_parms(): no params data found
[  111.042855][ T5145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.061585][ T5162] chnl_net:caif_netlink_parms(): no params data found
[  111.153915][ T5145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.163109][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.164420][ T5152] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.165908][ T5152] device bridge_slave_0 entered promiscuous mode
[  111.169333][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.170693][ T5152] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.172437][ T5152] device bridge_slave_1 entered promiscuous mode
[  111.188142][ T5152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.190692][ T5152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.244503][ T5168] chnl_net:caif_netlink_parms(): no params data found
[  111.251306][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.255209][ T5162] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.257327][ T5162] device bridge_slave_0 entered promiscuous mode
[  111.263894][ T5166] chnl_net:caif_netlink_parms(): no params data found
[  111.275471][ T5152] team0: Port device team_slave_0 added
[  111.276735][ T5163] chnl_net:caif_netlink_parms(): no params data found
[  111.302337][ T5152] team0: Port device team_slave_1 added
[  111.313093][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.314407][ T5162] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.316023][ T5162] device bridge_slave_1 entered promiscuous mode
[  111.349346][ T5152] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.350563][ T5152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.355331][ T5152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.367449][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.371480][ T5168] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.374087][ T5168] device bridge_slave_0 entered promiscuous mode
[  111.386259][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.387525][ T5166] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.389566][ T5166] device bridge_slave_0 entered promiscuous mode
[  111.391581][ T5152] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.392943][ T5152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.397063][ T5152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.403887][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.404999][ T5168] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.406530][ T5168] device bridge_slave_1 entered promiscuous mode
[  111.410257][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.411482][ T5166] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.417560][ T5166] device bridge_slave_1 entered promiscuous mode
[  111.421527][ T5162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.429363][ T5162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.437992][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.439342][ T5163] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.440958][ T5163] device bridge_slave_0 entered promiscuous mode
[  111.460401][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.461903][ T5163] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.463655][ T5163] device bridge_slave_1 entered promiscuous mode
[  111.469876][ T5168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.523167][ T5152] device hsr_slave_0 entered promiscuous mode
[  111.563469][ T5152] device hsr_slave_1 entered promiscuous mode
[  111.603080][ T5166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.605640][ T5166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.616407][ T5166] team0: Port device team_slave_0 added
[  111.618363][ T5166] team0: Port device team_slave_1 added
[  111.629645][ T5168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.641476][ T5166] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.642937][ T5166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.647546][ T5166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.650846][ T5162] team0: Port device team_slave_0 added
[  111.653982][ T5162] team0: Port device team_slave_1 added
[  111.659266][ T5162] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.660398][ T5162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.664822][ T5162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.671069][ T5163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.676370][ T5168] team0: Port device team_slave_0 added
[  111.678229][ T5168] team0: Port device team_slave_1 added
[  111.684358][ T5166] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.685533][ T5166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.689940][ T5166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.694177][ T5162] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.695360][ T5162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.699680][ T5162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.704430][ T5145] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.709128][ T5163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.710964][ T5168] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.712442][ T5168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.716439][ T5168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.782998][ T5162] device hsr_slave_0 entered promiscuous mode
[  111.821996][ T5162] device hsr_slave_1 entered promiscuous mode
[  111.861854][ T5162] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  111.863048][ T5162] Cannot create hsr debugfs directory
[  111.864238][ T5168] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.865467][ T5168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.869676][ T5168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.933054][ T5166] device hsr_slave_0 entered promiscuous mode
[  111.971987][ T5166] device hsr_slave_1 entered promiscuous mode
[  112.011828][ T5166] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  112.013194][ T5166] Cannot create hsr debugfs directory
[  112.019326][ T5163] team0: Port device team_slave_0 added
[  112.021415][ T5163] team0: Port device team_slave_1 added
[  112.053813][ T5163] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.055075][ T5163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.059344][ T5163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.089324][ T5163] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.090601][ T5163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.101676][ T5163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.152985][ T5168] device hsr_slave_0 entered promiscuous mode
[  112.182158][ T5168] device hsr_slave_1 entered promiscuous mode
[  112.215729][ T5168] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  112.217074][ T5168] Cannot create hsr debugfs directory
[  112.251817][ T4338] Bluetooth: hci0: command 0x0409 tx timeout
[  112.266107][ T5152] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  112.304721][ T5152] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  112.393910][ T5163] device hsr_slave_0 entered promiscuous mode
[  112.422093][ T5163] device hsr_slave_1 entered promiscuous mode
[  112.461924][ T5163] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  112.463149][ T5163] Cannot create hsr debugfs directory
[  112.465501][ T5152] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  112.571794][ T4338] Bluetooth: hci2: command 0x0409 tx timeout
[  112.581989][ T4338] Bluetooth: hci4: command 0x0409 tx timeout
[  112.582009][ T4335] Bluetooth: hci1: command 0x0409 tx timeout
[  112.583182][ T4338] Bluetooth: hci3: command 0x0409 tx timeout
[  112.673438][ T5152] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  112.815249][ T5152] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.847813][ T5152] 8021q: adding VLAN 0 to HW filter on device team0
[  112.855014][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  112.856835][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  112.858267][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  112.859765][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  112.861306][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.862716][ T5128] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.866840][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  112.868347][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  112.869880][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.871120][ T5128] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.875727][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  112.923095][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  112.924991][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  112.926738][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  112.928724][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  112.930324][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  112.932698][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  112.934266][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  112.935881][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  112.939523][ T5152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  112.946783][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  112.955955][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  112.957543][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  112.959431][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  113.136448][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  113.137861][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  113.140841][ T5152] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.332508][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  113.334275][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  113.546172][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  113.547790][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  113.549557][ T5152] device veth0_vlan entered promiscuous mode
[  113.553080][ T5152] device veth1_vlan entered promiscuous mode
[  113.556162][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  113.557789][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  113.559143][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  113.560615][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  113.568316][ T5152] device veth0_macvtap entered promiscuous mode
[  113.570677][ T5152] device veth1_macvtap entered promiscuous mode
[  113.572572][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  113.579825][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  113.581356][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  113.584089][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  113.589392][ T5152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.591328][ T5152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.593879][ T5152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.595650][ T5152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.597373][ T5152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.599076][ T5152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.601404][ T5152] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.607248][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  113.608968][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  113.611312][ T5152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.613849][ T5152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.615379][ T5152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.616953][ T5152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.618541][ T5152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  113.622162][ T5152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.627892][ T5152] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.914238][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  113.916044][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  113.919048][ T5152] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.920458][ T5152] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.922145][ T5152] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.923628][ T5152] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.990419][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.991950][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.993302][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  114.009562][ T5166] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  114.054345][ T5166] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  114.331799][ T4338] Bluetooth: hci0: command 0x041b tx timeout
[  114.451820][ T5166] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  114.483625][ T5166] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  114.569182][ T5145] device hsr_slave_0 left promiscuous mode
[  114.591907][ T5145] device hsr_slave_1 left promiscuous mode
[  114.651754][ T4338] Bluetooth: hci1: command 0x041b tx timeout
[  114.651834][ T4340] Bluetooth: hci4: command 0x041b tx timeout
[  114.661770][ T4335] Bluetooth: hci3: command 0x041b tx timeout
[  114.662834][ T4335] Bluetooth: hci2: command 0x041b tx timeout
[  114.681831][ T5145] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.683144][ T5145] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.685050][ T5145] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.686410][ T5145] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.687973][ T5145] device bridge_slave_1 left promiscuous mode
[  114.689448][ T5145] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.722259][ T5145] device bridge_slave_0 left promiscuous mode
[  114.723400][ T5145] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.851928][ T5145] device veth1_macvtap left promiscuous mode
[  114.853012][ T5145] device veth0_macvtap left promiscuous mode
[  114.854067][ T5145] device veth1_vlan left promiscuous mode
[  114.855030][ T5145] device veth0_vlan left promiscuous mode
[  114.903714][ T5145] bon (unregistering): Released all slaves
[  116.411790][ T4340] Bluetooth: hci0: command 0x040f tx timeout
[  116.731755][ T4335] Bluetooth: hci2: command 0x040f tx timeout
[  116.732852][ T4335] Bluetooth: hci3: command 0x040f tx timeout
[  116.733876][ T4335] Bluetooth: hci4: command 0x040f tx timeout
[  116.734932][ T4335] Bluetooth: hci1: command 0x040f tx timeout
[  116.913949][ T5145] team0 (unregistering): Port device team_slave_1 removed
[  117.073768][ T5145] team0 (unregistering): Port device team_slave_0 removed
[  117.242575][ T5145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.442555][ T5145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.491836][ T4340] Bluetooth: hci0: command 0x0419 tx timeout
[  118.811893][ T4340] Bluetooth: hci1: command 0x0419 tx timeout
[  118.811911][ T4335] Bluetooth: hci4: command 0x0419 tx timeout
[  118.813045][ T4340] Bluetooth: hci3: command 0x0419 tx timeout
[  118.814156][ T4335] Bluetooth: hci2: command 0x0419 tx timeout
[  118.962816][ T5145] bond0 (unregistering): Released all slaves
[  119.255124][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.256636][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.316899][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  119.349984][ T5166] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.403120][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  119.404641][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  119.410780][ T5166] 8021q: adding VLAN 0 to HW filter on device team0
[  119.420900][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  119.420942][ T5353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.423105][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  119.425353][ T4386] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.426587][ T4386] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.431654][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  119.432330][ T5353] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.440321][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  119.443046][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  119.444449][ T4386] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.445742][ T4386] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.447201][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  119.500972][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  119.503353][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  119.505080][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  119.507361][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  119.508967][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  119.510962][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  119.523378][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  119.525456][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  119.529251][ T5166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  119.531615][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  119.537866][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  119.539668][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  119.588127][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  119.589525][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  119.593111][ T5166] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.599009][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  119.600717][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  119.611454][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  119.613351][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  119.616060][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  119.617584][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  119.619196][ T5166] device veth0_vlan entered promiscuous mode
[  119.634511][ T5166] device veth1_vlan entered promiscuous mode
[  119.643533][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  119.645141][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  119.646615][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  119.648121][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  119.650273][ T5166] device veth0_macvtap entered promiscuous mode
[  119.653589][ T5166] device veth1_macvtap entered promiscuous mode
[  119.662685][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.664406][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.666062][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.667676][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.669261][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.671012][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.677992][ T5166] batman_adv: batadv0: Interface activated: batadv_slave_0
[  119.680124][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  119.682306][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  119.683769][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  119.685498][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  119.690039][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  119.696648][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.698324][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  119.700206][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.702344][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  119.704172][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.706730][ T5166] batman_adv: batadv0: Interface activated: batadv_slave_1
[  119.708260][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  119.709949][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  119.721639][ T5166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.723794][ T5166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.725368][ T5166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.726860][ T5166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.755099][ T4386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.756499][ T4386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.758088][   T61] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  119.759917][ T5168] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  119.806338][ T5168] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  119.906256][ T5168] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  119.969843][ T5366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.971348][ T5366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.982500][ T5168] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  120.071902][ T4390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.073438][ T4390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.076576][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  120.106039][ T5168] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.138726][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  120.140267][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  120.144578][ T5168] 8021q: adding VLAN 0 to HW filter on device team0
[  120.148057][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  120.149918][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  120.151666][ T4386] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.153155][ T4386] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.220115][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  120.232307][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  120.239839][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  120.241389][ T4386] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.242765][ T4386] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.252251][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  120.254242][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  120.257269][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  120.259606][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  120.261282][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  120.263092][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  120.264818][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  120.270569][ T5168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  120.277730][ T5168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  120.282733][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  120.284463][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  120.286018][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  120.287651][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  120.305766][ T5386] ubi0 error: ubi_create_volume: volume 0 already exists
[  120.307113][ T5386] ubi0 error: ubi_create_volume: cannot create volume 0, error -17
[  120.311104][ T5386] UBIFS error (ubi0:0 pid 5386): ubifs_read_node: bad node type (255 but expected 6)
[  120.315375][ T5386] UBIFS error (ubi0:0 pid 5386): ubifs_read_node: bad node at LEB 0:0, LEB mapping status 1
[  120.317071][ T5386] Not a node, first 24 bytes:
[  120.317090][ T5386] 00000000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff                          ........................
[  120.320208][ T5386] CPU: 0 PID: 5386 Comm: syz.2.258 Not tainted syzkaller #0
[  120.321512][ T5386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  120.323277][ T5386] Call trace:
[  120.323876][ T5386]  dump_backtrace+0x1c4/0x1f0
[  120.324686][ T5386]  show_stack+0x2c/0x3c
[  120.325559][ T5386]  __dump_stack+0x30/0x40
[  120.326455][ T5386]  dump_stack_lvl+0xf4/0x15c
[  120.327416][ T5386]  dump_stack+0x1c/0x5c
[  120.328271][ T5386]  ubifs_read_node+0x3ec/0x654
[  120.329281][ T5386]  ubifs_read_superblock+0x100/0x324c
[  120.330380][ T5386]  ubifs_mount+0x1bcc/0x4f38
[  120.331294][ T5386]  legacy_get_tree+0xd8/0x174
[  120.332215][ T5386]  vfs_get_tree+0x90/0x278
[  120.333096][ T5386]  do_new_mount+0x228/0x804
[  120.333934][ T5386]  path_mount+0x5ac/0xe6c
[  120.334765][ T5386]  __arm64_sys_mount+0x4a0/0x5a0
[  120.335763][ T5386]  invoke_syscall+0x98/0x290
[  120.336663][ T5386]  el0_svc_common+0x13c/0x258
[  120.337587][ T5386]  do_el0_svc+0x5c/0x134
[  120.338437][ T5386]  el0_svc+0x58/0x128
[  120.339259][ T5386]  el0t_64_sync_handler+0x84/0xf0
[  120.340218][ T5386]  el0t_64_sync+0x18c/0x190
[  120.606192][ T5418] bonding: bond0 is being created...
[  120.628605][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  120.669442][ T5425] bond0: option slaves: interface +bond_s does not exist!
[  120.685209][ T5418] bonding: bond0 already exists
[  120.723188][ T4390] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.731338][ T5425] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.763346][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  120.764659][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  120.767505][ T5168] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.814860][ T4390] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.824455][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  120.826248][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  120.828598][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  120.830394][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  120.839539][ T5168] device veth0_vlan entered promiscuous mode
[  120.846812][ T5168] device veth1_vlan entered promiscuous mode
[  120.848617][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  120.850169][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  120.853599][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  120.912876][ T4390] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.916609][ T5168] device veth0_macvtap entered promiscuous mode
[  120.919069][ T5168] device veth1_macvtap entered promiscuous mode
[  120.925164][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  120.926698][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  120.928753][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  120.930367][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  120.935461][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  120.947497][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.949183][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.950744][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.953331][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.954985][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.956697][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.958212][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.959894][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.962885][ T5168] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.987060][ T4390] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.993831][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  120.995710][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  121.011037][ T5162] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  121.046961][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.049817][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.051502][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.059200][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.061291][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.070395][ T5459] loop9: detected capacity change from 0 to 1024
[  121.071255][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.073625][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.075544][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.078678][ T5168] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.078752][ T5459] EXT4-fs: Ignoring removed bh option
[  121.086852][ T5162] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  121.092132][ T5459] EXT4-fs: Ignoring removed bh option
[  121.113093][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  121.114825][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  121.116508][ T5162] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  121.119293][ T5459] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  121.143203][ T5162] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  121.234187][ T5168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.235740][ T5168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.237235][ T5168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.238730][ T5168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.668867][   T27] audit: type=1400 audit(121.530:2): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5458 comm="syz.9.264"
[  122.173906][ T4390] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.371169][ T5152] EXT4-fs (loop9): unmounting filesystem.
[  122.421504][ T5508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.424319][ T5508] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.101349][ T5521] loop9: detected capacity change from 0 to 40427
[  123.108717][ T5521] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  123.110160][ T5521] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  123.112296][ T5521] F2FS-fs (loop9): invalid crc value
[  123.115424][ T5521] F2FS-fs (loop9): Found nat_bits in checkpoint
[  123.125244][ T5521] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  123.126535][ T5521] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  123.306651][   T39] kworker/u4:2: attempt to access beyond end of device
[  123.306651][   T39] loop9: rw=1, sector=77824, nr_sectors = 2072 limit=40427
[  123.315127][   T39] kworker/u4:2: attempt to access beyond end of device
[  123.315127][   T39] loop9: rw=1, sector=79896, nr_sectors = 2024 limit=40427
[  123.322885][   T39] kworker/u4:2: attempt to access beyond end of device
[  123.322885][   T39] loop9: rw=1, sector=49152, nr_sectors = 2080 limit=40427
[  123.330623][   T39] kworker/u4:2: attempt to access beyond end of device
[  123.330623][   T39] loop9: rw=1, sector=51232, nr_sectors = 2016 limit=40427
[  123.342858][   T39] kworker/u4:2: attempt to access beyond end of device
[  123.342858][   T39] loop9: rw=1, sector=57344, nr_sectors = 3872 limit=40427
[  123.354167][   T39] kworker/u4:2: attempt to access beyond end of device
[  123.354167][   T39] loop9: rw=1, sector=61216, nr_sectors = 3104 limit=40427
[  123.367881][   T39] kworker/u4:2: attempt to access beyond end of device
[  123.367881][   T39] loop9: rw=1, sector=64320, nr_sectors = 4176 limit=40427
[  123.374614][   T39] kworker/u4:2: attempt to access beyond end of device
[  123.374614][   T39] loop9: rw=1, sector=68496, nr_sectors = 1136 limit=40427
[  123.378327][   T39] kworker/u4:2: attempt to access beyond end of device
[  123.378327][   T39] loop9: rw=1, sector=69632, nr_sectors = 8 limit=40427
[  123.380710][   T39] kworker/u4:2: attempt to access beyond end of device
[  123.380710][   T39] loop9: rw=1, sector=69640, nr_sectors = 8 limit=40427
[  125.933587][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[  125.934730][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[  135.874523][ T4338] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  135.876431][ T4338] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  135.878081][ T4338] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  135.880126][ T4338] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  135.885756][ T4338] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  135.887120][ T4338] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  137.932096][ T4338] Bluetooth: hci5: command 0x0409 tx timeout
[  139.861030][ T4335] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  139.863667][ T4335] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  139.865213][ T4335] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  139.868973][ T4335] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  139.870444][ T4335] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  139.875717][ T4335] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  140.022394][ T4338] Bluetooth: hci5: command 0x041b tx timeout
[  141.932044][ T4338] Bluetooth: hci6: command 0x0409 tx timeout
[  142.092121][ T4338] Bluetooth: hci5: command 0x040f tx timeout
[  144.011751][ T4338] Bluetooth: hci6: command 0x041b tx timeout
[  144.171838][ T4338] Bluetooth: hci5: command 0x0419 tx timeout
[  146.091882][ T4338] Bluetooth: hci6: command 0x040f tx timeout
[  148.181779][ T4335] Bluetooth: hci6: command 0x0419 tx timeout
[  150.390524][ T4338] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  150.392518][ T4338] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  150.394827][ T4343] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  150.396276][ T4343] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  150.398352][ T4343] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  150.400166][ T4343] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  150.402572][ T4343] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  150.404048][ T4343] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  150.405486][ T4343] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  150.406879][ T4343] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  150.408606][ T4343] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  150.410071][ T4343] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  152.491870][ T4338] Bluetooth: hci8: command 0x0409 tx timeout
[  152.491944][ T4335] Bluetooth: hci7: command 0x0409 tx timeout
[  154.571915][ T4335] Bluetooth: hci7: command 0x041b tx timeout
[  154.573130][ T4335] Bluetooth: hci8: command 0x041b tx timeout
[  156.658405][ T4340] Bluetooth: hci8: command 0x040f tx timeout
[  156.659442][ T4340] Bluetooth: hci7: command 0x040f tx timeout
[  158.741777][ T4335] Bluetooth: hci7: command 0x0419 tx timeout
[  158.741827][ T4340] Bluetooth: hci8: command 0x0419 tx timeout
[  171.427383][ T4340] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  171.430538][ T4340] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  171.432445][ T4340] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  171.434105][ T4340] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  171.435700][ T4340] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  171.437397][ T4340] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  173.451762][ T4340] Bluetooth: hci9: command 0x0409 tx timeout
[  175.531793][ T4338] Bluetooth: hci9: command 0x041b tx timeout
[  177.611760][ T4340] Bluetooth: hci9: command 0x040f tx timeout
[  179.692176][ T4338] Bluetooth: hci9: command 0x0419 tx timeout
[  187.373383][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[  187.374588][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[  196.490954][ T4338] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  196.493540][ T4338] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  196.495484][ T4338] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  196.497697][ T4338] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  196.499192][ T4338] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  196.500542][ T4338] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  198.571775][ T4340] Bluetooth: hci10: command 0x0409 tx timeout
[  200.507701][ T4340] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  200.509477][ T4340] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  200.511579][ T4340] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  200.513570][ T4340] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  200.515023][ T4340] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  200.516365][ T4340] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  200.651755][ T4338] Bluetooth: hci10: command 0x041b tx timeout
[  202.581767][ T4338] Bluetooth: hci11: command 0x0409 tx timeout
[  202.732007][ T4338] Bluetooth: hci10: command 0x040f tx timeout
[  204.661761][ T4338] Bluetooth: hci11: command 0x041b tx timeout
[  204.811894][ T4335] Bluetooth: hci10: command 0x0419 tx timeout
[  206.731765][ T4335] Bluetooth: hci11: command 0x040f tx timeout
[  208.811770][ T4335] Bluetooth: hci11: command 0x0419 tx timeout
[  210.542507][ T4335] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  210.544749][ T4335] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  210.546885][ T4335] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  210.548678][ T4335] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  210.550251][ T4340] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  210.551665][ T4340] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  210.566415][ T4338] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  210.568419][ T4338] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  210.569928][ T4338] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  210.572471][ T4338] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  210.573961][ T4338] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  210.575369][ T4338] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  212.571967][ T4338] Bluetooth: hci12: command 0x0409 tx timeout
[  212.651826][ T4338] Bluetooth: hci13: command 0x0409 tx timeout
[  214.661778][ T4340] Bluetooth: hci12: command 0x041b tx timeout
[  214.741787][ T4340] Bluetooth: hci13: command 0x041b tx timeout
[  216.731827][ T4338] Bluetooth: hci12: command 0x040f tx timeout
[  216.811793][ T4338] Bluetooth: hci13: command 0x040f tx timeout
[  218.811829][ T4338] Bluetooth: hci12: command 0x0419 tx timeout
[  218.891870][ T4338] Bluetooth: hci13: command 0x0419 tx timeout
[  231.601150][ T4340] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  231.605007][ T4340] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  231.606623][ T4340] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  231.608220][ T4340] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  231.609745][ T4340] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  231.611084][ T4340] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  233.701788][ T4335] Bluetooth: hci14: command 0x0409 tx timeout
[  235.531897][ T4338] Bluetooth: hci1: command 0x0406 tx timeout
[  235.533106][ T4338] Bluetooth: hci0: command 0x0406 tx timeout
[  235.534185][ T4338] Bluetooth: hci2: command 0x0406 tx timeout
[  235.535240][ T4338] Bluetooth: hci3: command 0x0406 tx timeout
[  235.536287][ T4338] Bluetooth: hci4: command 0x0406 tx timeout
[  235.771746][ T4335] Bluetooth: hci14: command 0x041b tx timeout
[  237.851750][ T4335] Bluetooth: hci14: command 0x040f tx timeout
[  239.931760][ T4335] Bluetooth: hci14: command 0x0419 tx timeout
[  248.814162][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[  248.815326][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[  256.598739][ T4338] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  256.600971][ T4338] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  256.603043][ T4338] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  256.604787][ T4338] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  256.606226][ T4338] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  256.607548][ T4338] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  258.651776][ T4335] Bluetooth: hci15: command 0x0409 tx timeout
[  260.574362][ T4335] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  260.576463][ T4335] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  260.578300][ T4335] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  260.579978][ T4335] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  260.581684][ T4335] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[  260.583584][ T4335] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  260.741748][ T4335] Bluetooth: hci15: command 0x041b tx timeout
[  261.131891][ T4335] Bluetooth: hci5: command 0x0406 tx timeout
[  262.651790][ T4338] Bluetooth: hci16: command 0x0409 tx timeout
[  262.811787][ T4335] Bluetooth: hci15: command 0x040f tx timeout
[  264.731784][ T4335] Bluetooth: hci16: command 0x041b tx timeout
[  264.891770][ T4338] Bluetooth: hci15: command 0x0419 tx timeout
[  266.251865][ T4335] Bluetooth: hci6: command 0x0406 tx timeout
[  266.821761][ T4338] Bluetooth: hci16: command 0x040f tx timeout
[  268.901760][ T4338] Bluetooth: hci16: command 0x0419 tx timeout
[  270.681289][ T4335] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  270.683751][ T4335] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  270.685617][ T4335] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  270.688151][ T4335] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  270.689844][ T4343] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  270.691761][ T4343] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  270.693595][ T4343] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  270.695651][ T4335] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  270.695803][ T4343] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[  270.697571][ T4335] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3
[  270.698622][ T4343] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  270.699516][ T4335] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  272.731785][ T4340] Bluetooth: hci18: command 0x0409 tx timeout
[  272.731814][ T4338] Bluetooth: hci17: command 0x0409 tx timeout
[  274.811794][ T4340] Bluetooth: hci17: command 0x041b tx timeout
[  274.811803][ T4338] Bluetooth: hci18: command 0x041b tx timeout
[  275.051872][   T28] INFO: task kworker/0:2:3444 blocked for more than 143 seconds.
[  275.053330][   T28]       Not tainted syzkaller #0
[  275.054206][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  275.055599][   T28] task:kworker/0:2     state:D stack:0     pid:3444  ppid:2      flags:0x00000008
[  275.057087][   T28] Workqueue: ipv6_addrconf addrconf_dad_work
[  275.058134][   T28] Call trace:
[  275.058704][   T28]  __switch_to+0x2f4/0x550
[  275.059455][   T28]  __schedule+0xdb4/0x1a6c
[  275.060212][   T28]  schedule+0xc4/0x170
[  275.060930][   T28]  schedule_preempt_disabled+0x18/0x2c
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  275.078558][   T28]  __mutex_lock_common+0xb20/0x1f3c
[  275.079476][   T28]  mutex_lock_nested+0x38/0x44
[  275.080262][   T28]  rtnl_lock+0x20/0x2c
[  275.080962][   T28]  addrconf_dad_work+0xc0/0x10a0
[  275.082085][   T28]  process_one_work+0x7e4/0x13bc
[  275.082963][   T28]  worker_thread+0x8cc/0xfe8
[  275.083775][   T28]  kthread+0x254/0x2e0
[  275.084549][   T28]  ret_from_fork+0x10/0x20
[  275.085370][   T28] INFO: task dhcpcd:3993 blocked for more than 143 seconds.
[  275.086767][   T28]       Not tainted syzkaller #0
[  275.087688][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  275.089235][   T28] task:dhcpcd          state:D stack:0     pid:3993  ppid:3992   flags:0x00000004
[  275.090804][   T28] Call trace:
[  275.091387][   T28]  __switch_to+0x2f4/0x550
[  275.094253][   T28]  __schedule+0xdb4/0x1a6c
[  275.095030][   T28]  schedule+0xc4/0x170
[  275.095752][   T28]  schedule_preempt_disabled+0x18/0x2c
[  275.096716][   T28]  __mutex_lock_common+0xb20/0x1f3c
[  275.097531][   T28]  mutex_lock_nested+0x38/0x44
[  275.098338][   T28]  rtnetlink_rcv_msg+0x64c/0xcc4
[  275.099140][   T28]  netlink_rcv_skb+0x220/0x3ec
[  275.099942][   T28]  rtnetlink_rcv+0x28/0x38
[  275.100679][   T28]  netlink_unicast+0x5fc/0x80c
[  275.101490][   T28]  netlink_sendmsg+0x6f0/0x9d8
[  275.102803][   T28]  ____sys_sendmsg+0x588/0x90c
[  275.103631][   T28]  __sys_sendmsg+0x288/0x374
[  275.104435][   T28]  __arm64_sys_sendmsg+0x80/0x94
[  275.105328][   T28]  invoke_syscall+0x98/0x290
[  275.106177][   T28]  el0_svc_common+0x13c/0x258
[  275.107039][   T28]  do_el0_svc+0x5c/0x134
[  275.107765][   T28]  el0_svc+0x58/0x128
[  275.108423][   T28]  el0t_64_sync_handler+0x84/0xf0
[  275.109239][   T28]  el0t_64_sync+0x18c/0x190
[  275.109980][   T28] INFO: task kworker/1:4:4375 blocked for more than 143 seconds.
[  275.111278][   T28]       Not tainted syzkaller #0
[  275.112431][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  275.113902][   T28] task:kworker/1:4     state:D stack:0     pid:4375  ppid:2      flags:0x00000008
[  275.115437][   T28] Workqueue: ipv6_addrconf addrconf_dad_work
[  275.116459][   T28] Call trace:
[  275.117003][   T28]  __switch_to+0x2f4/0x550
[  275.117761][   T28]  __schedule+0xdb4/0x1a6c
[  275.118536][   T28]  schedule+0xc4/0x170
[  275.119218][   T28]  schedule_preempt_disabled+0x18/0x2c
[  275.120146][   T28]  __mutex_lock_common+0xb20/0x1f3c
[  275.121012][   T28]  mutex_lock_nested+0x38/0x44
[  275.121994][   T28]  rtnl_lock+0x20/0x2c
[  275.122735][   T28]  addrconf_dad_work+0xc0/0x10a0
[  275.123655][   T28]  process_one_work+0x7e4/0x13bc
[  275.124609][   T28]  worker_thread+0x8cc/0xfe8
[  275.125493][   T28]  kthread+0x254/0x2e0
[  275.126287][   T28]  ret_from_fork+0x10/0x20
[  275.127060][   T28] INFO: task kworker/u4:6:4390 blocked for more than 143 seconds.
[  275.128349][   T28]       Not tainted syzkaller #0
[  275.129145][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  275.130552][   T28] task:kworker/u4:6    state:D stack:0     pid:4390  ppid:2      flags:0x00000008
[  275.132331][   T28] Workqueue: netns cleanup_net
[  275.133099][   T28] Call trace:
[  275.133666][   T28]  __switch_to+0x2f4/0x550
[  275.134416][   T28]  __schedule+0xdb4/0x1a6c
[  275.135180][   T28]  schedule+0xc4/0x170
[  275.135881][   T28]  schedule_preempt_disabled+0x18/0x2c
[  275.136776][   T28]  __mutex_lock_common+0xb20/0x1f3c
[  275.137639][   T28]  mutex_lock_nested+0x38/0x44
[  275.138421][   T28]  rtnl_lock+0x20/0x2c
[  275.139096][   T28]  devlink_nl_port_fill+0x268/0x804
[  275.139918][   T28]  devlink_port_notify+0xb4/0x1c8
[  275.140771][   T28]  devl_port_unregister+0x108/0x2a0
[  275.141584][   T28]  __nsim_dev_port_del+0x174/0x1b0
[  275.143129][   T28]  nsim_dev_reload_destroy+0x238/0x434
[  275.144060][   T28]  nsim_dev_reload_down+0x9c/0xd8
[  275.144891][   T28]  devlink_reload+0x1b4/0x584
[  275.145669][   T28]  devlink_pernet_pre_exit+0x118/0x2b0
[  275.146708][   T28]  cleanup_net+0x47c/0xa90
[  275.147474][   T28]  process_one_work+0x7e4/0x13bc
[  275.148274][   T28]  worker_thread+0x8cc/0xfe8
[  275.148984][   T28]  kthread+0x254/0x2e0
[  275.149656][   T28]  ret_from_fork+0x10/0x20
[  275.150406][   T28] INFO: task syz-executor:5162 blocked for more than 143 seconds.
[  275.151698][   T28]       Not tainted syzkaller #0
[  275.152781][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  275.154296][   T28] task:syz-executor    state:D stack:0     pid:5162  ppid:1      flags:0x00000001
[  275.155800][   T28] Call trace:
[  275.156330][   T28]  __switch_to+0x2f4/0x550
[  275.157037][   T28]  __schedule+0xdb4/0x1a6c
[  275.157756][   T28]  schedule+0xc4/0x170
[  275.158437][   T28]  schedule_preempt_disabled+0x18/0x2c
[  275.159348][   T28]  __mutex_lock_common+0xb20/0x1f3c
[  275.160173][   T28]  mutex_lock_nested+0x38/0x44
[  275.161315][   T28]  rtnetlink_rcv_msg+0x64c/0xcc4
[  275.162328][   T28]  netlink_rcv_skb+0x220/0x3ec
[  275.163180][   T28]  rtnetlink_rcv+0x28/0x38
[  275.163967][   T28]  netlink_unicast+0x5fc/0x80c
[  275.164860][   T28]  netlink_sendmsg+0x6f0/0x9d8
[  275.165705][   T28]  __sys_sendto+0x324/0x440
[  275.166510][   T28]  __arm64_sys_sendto+0xe4/0x104
[  275.167422][   T28]  invoke_syscall+0x98/0x290
[  275.168256][   T28]  el0_svc_common+0x13c/0x258
[  275.169108][   T28]  do_el0_svc+0x5c/0x134
[  275.169832][   T28]  el0_svc+0x58/0x128
[  275.170577][   T28]  el0t_64_sync_handler+0x84/0xf0
[  275.171461][   T28]  el0t_64_sync+0x18c/0x190
[  275.172344][   T28] INFO: task syz-executor:5163 blocked for more than 143 seconds.
[  275.173677][   T28]       Not tainted syzkaller #0
[  275.174549][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  275.175967][   T28] task:syz-executor    state:D stack:0     pid:5163  ppid:1      flags:0x00000009
[  275.177547][   T28] Call trace:
[  275.178076][   T28]  __switch_to+0x2f4/0x550
[  275.178790][   T28]  __schedule+0xdb4/0x1a6c
[  275.179539][   T28]  schedule+0xc4/0x170
[  275.180239][   T28]  schedule_preempt_disabled+0x18/0x2c
[  275.181207][   T28]  __mutex_lock_common+0xb20/0x1f3c
[  275.182367][   T28]  mutex_lock_nested+0x38/0x44
[  275.183243][   T28]  rtnl_lock+0x20/0x2c
[  275.183983][   T28]  devlink_nl_port_fill+0x268/0x804
[  275.184834][   T28]  devlink_port_notify+0xb4/0x1c8
[  275.185659][   T28]  devlink_register+0x114/0x558
[  275.186509][   T28]  nsim_drv_probe+0x864/0x980
[  275.187230][   T28]  nsim_bus_probe+0x20/0x30
[  275.187968][   T28]  really_probe+0x3a0/0xac4
[  275.188717][   T28]  __driver_probe_device+0x1c8/0x368
[  275.189582][   T28]  driver_probe_device+0x78/0x324
[  275.190387][   T28]  __device_attach_driver+0x28c/0x4c0
[  275.191280][   T28]  bus_for_each_drv+0x154/0x1e4
[  275.192247][   T28]  __device_attach+0x2a4/0x3d8
[  275.193109][   T28]  device_initial_probe+0x24/0x34
[  275.193945][   T28]  bus_probe_device+0xbc/0x1c4
[  275.194729][   T28]  device_add+0x93c/0xe4c
[  275.195499][   T28]  device_register+0x28/0x38
[  275.196260][   T28]  new_device_store+0x2dc/0x52c
[  275.197103][   T28]  bus_attr_store+0x80/0xa4
[  275.197836][   T28]  sysfs_kf_write+0x1f8/0x274
[  275.198662][   T28]  kernfs_fop_write_iter+0x390/0x4b4
[  275.199567][   T28]  vfs_write+0x3c8/0x7c8
[  275.200330][   T28]  ksys_write+0x12c/0x228
[  275.201110][   T28]  __arm64_sys_write+0x7c/0x90
[  275.202016][   T28]  invoke_syscall+0x98/0x290
[  275.202917][   T28]  el0_svc_common+0x13c/0x258
[  275.203814][   T28]  do_el0_svc+0x5c/0x134
[  275.204638][   T28]  el0_svc+0x58/0x128
[  275.205366][   T28]  el0t_64_sync_handler+0x84/0xf0
[  275.206257][   T28]  el0t_64_sync+0x18c/0x190
[  275.207082][   T28] INFO: task syz-executor:5168 blocked for more than 143 seconds.
[  275.208483][   T28]       Not tainted syzkaller #0
[  275.209339][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  275.210737][   T28] task:syz-executor    state:D stack:0     pid:5168  ppid:1      flags:0x00000009
[  275.212633][   T28] Call trace:
[  275.213246][   T28]  __switch_to+0x2f4/0x550
[  275.214077][   T28]  __schedule+0xdb4/0x1a6c
[  275.214888][   T28]  schedule+0xc4/0x170
[  275.215635][   T28]  schedule_preempt_disabled+0x18/0x2c
[  275.216543][   T28]  __mutex_lock_common+0xb20/0x1f3c
[  275.217444][   T28]  mutex_lock_nested+0x38/0x44
[  275.218297][   T28]  kernel_param_lock+0x34/0x44
[  275.219133][   T28]  ieee80211_init_rate_ctrl_alg+0x174/0x5a0
[  275.220204][   T28]  ieee80211_register_hw+0x1f3c/0x2fb4
[  275.221179][   T28]  mac80211_hwsim_new_radio+0x1f2c/0x409c
[  275.222291][   T28]  hwsim_new_radio_nl+0x894/0xbec
[  275.223161][   T28]  genl_family_rcv_msg_doit+0x210/0x308
[  275.224078][   T28]  genl_rcv_msg+0x424/0x600
[  275.224792][   T28]  netlink_rcv_skb+0x220/0x3ec
[  275.225573][   T28]  genl_rcv+0x38/0x50
[  275.226197][   T28]  netlink_unicast+0x5fc/0x80c
[  275.226995][   T28]  netlink_sendmsg+0x6f0/0x9d8
[  275.227790][   T28]  __sys_sendto+0x324/0x440
[  275.228562][   T28]  __arm64_sys_sendto+0xe4/0x104
[  275.229393][   T28]  invoke_syscall+0x98/0x290
[  275.230304][   T28]  el0_svc_common+0x13c/0x258
[  275.231181][   T28]  do_el0_svc+0x5c/0x134
[  275.231963][   T28]  el0_svc+0x58/0x128
[  275.232623][   T28]  el0t_64_sync_handler+0x84/0xf0
[  275.233511][   T28]  el0t_64_sync+0x18c/0x190
[  275.234294][   T28] INFO: task syz.2.258:5382 blocked for more than 143 seconds.
[  275.235560][   T28]       Not tainted syzkaller #0
[  275.236363][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  275.237765][   T28] task:syz.2.258       state:D stack:0     pid:5382  ppid:5166   flags:0x00000009
[  275.239159][   T28] Call trace:
[  275.239683][   T28]  __switch_to+0x2f4/0x550
[  275.240394][   T28]  __schedule+0xdb4/0x1a6c
[  275.241105][   T28]  schedule+0xc4/0x170
[  275.241806][   T28]  wait_for_device_probe+0x11c/0x1c4
[  275.242648][   T28]  block2mtd_setup2+0x428/0xce8
[  275.243499][   T28]  block2mtd_setup+0x34/0xd8
[  275.244279][   T28]  param_attr_store+0x1cc/0x2ac
[  275.245072][   T28]  module_attr_store+0x6c/0x94
[  275.245858][   T28]  sysfs_kf_write+0x1f8/0x274
[  275.246588][   T28]  kernfs_fop_write_iter+0x390/0x4b4
[  275.247441][   T28]  vfs_write+0x3c8/0x7c8
[  275.248174][   T28]  ksys_write+0x12c/0x228
[  275.248909][   T28]  __arm64_sys_write+0x7c/0x90
[  275.249712][   T28]  invoke_syscall+0x98/0x290
[  275.250554][   T28]  el0_svc_common+0x13c/0x258
[  275.251348][   T28]  do_el0_svc+0x5c/0x134
[  275.252177][   T28]  el0_svc+0x58/0x128
[  275.252904][   T28]  el0t_64_sync_handler+0x84/0xf0
[  275.253785][   T28]  el0t_64_sync+0x18c/0x190
[  275.254602][   T28] INFO: task syz.9.269:5529 blocked for more than 143 seconds.
[  275.255842][   T28]       Not tainted syzkaller #0
[  275.256730][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  275.258157][   T28] task:syz.9.269       state:D stack:0     pid:5529  ppid:5152   flags:0x00000001
[  275.259638][   T28] Call trace:
[  275.260149][   T28]  __switch_to+0x2f4/0x550
[  275.260902][   T28]  __schedule+0xdb4/0x1a6c
[  275.261841][   T28]  schedule+0xc4/0x170
[  275.262538][   T28]  schedule_preempt_disabled+0x18/0x2c
[  275.263870][   T28]  __mutex_lock_common+0xb20/0x1f3c
[  275.264814][   T28]  mutex_lock_nested+0x38/0x44
[  275.265661][   T28]  rtnl_lock+0x20/0x2c
[  275.266389][   T28]  __tun_chr_ioctl+0x43c/0x1dac
[  275.267201][   T28]  tun_chr_ioctl+0x38/0x4c
[  275.267949][   T28]  __arm64_sys_ioctl+0x14c/0x1c8
[  275.268832][   T28]  invoke_syscall+0x98/0x290
[  275.269664][   T28]  el0_svc_common+0x13c/0x258
[  275.270503][   T28]  do_el0_svc+0x5c/0x134
[  275.271276][   T28]  el0_svc+0x58/0x128
[  275.272065][   T28]  el0t_64_sync_handler+0x84/0xf0
[  275.273022][   T28]  el0t_64_sync+0x18c/0x190
[  275.273835][   T28] INFO: task syz.9.269:5530 blocked for more than 143 seconds.
[  275.275061][   T28]       Not tainted syzkaller #0
[  275.275886][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  275.277278][   T28] task:syz.9.269       state:D stack:0     pid:5530  ppid:5152   flags:0x00000001
[  275.278773][   T28] Call trace:
[  275.279331][   T28]  __switch_to+0x2f4/0x550
[  275.280081][   T28]  __schedule+0xdb4/0x1a6c
[  275.280764][   T28]  schedule+0xc4/0x170
[  275.281451][   T28]  schedule_preempt_disabled+0x18/0x2c
[  275.282490][   T28]  __mutex_lock_common+0xb20/0x1f3c
[  275.283426][   T28]  mutex_lock_nested+0x38/0x44
[  275.284314][   T28]  rtnl_lock+0x20/0x2c
[  275.285068][   T28]  __tun_chr_ioctl+0x43c/0x1dac
[  275.285953][   T28]  tun_chr_ioctl+0x38/0x4c
[  275.286737][   T28]  __arm64_sys_ioctl+0x14c/0x1c8
[  275.287618][   T28]  invoke_syscall+0x98/0x290
[  275.288454][   T28]  el0_svc_common+0x13c/0x258
[  275.289256][   T28]  do_el0_svc+0x5c/0x134
[  275.289983][   T28]  el0_svc+0x58/0x128
[  275.290654][   T28]  el0t_64_sync_handler+0x84/0xf0
[  275.291482][   T28]  el0t_64_sync+0x18c/0x190
[  275.292379][   T28] 
[  275.292379][   T28] Showing all locks held in the system:
[  275.293606][   T28] 1 lock held by rcu_tasks_kthre/12:
[  275.294446][   T28]  #0: ffff800015597db0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48
[  275.296207][   T28] 1 lock held by rcu_tasks_trace/13:
[  275.297045][   T28]  #0: ffff8000155985d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48
[  275.299149][   T28] 1 lock held by khungtaskd/28:
[  275.299949][   T28]  #0: ffff800015597440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44
[  275.301544][   T28] 3 locks held by kworker/0:2/3444:
[  275.302733][   T28]  #0: ffff0000d5f4e138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc
[  275.304752][   T28]  #1: ffff800022417c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc
[  275.306930][   T28]  #2: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  275.308449][   T28] 1 lock held by dhcpcd/3993:
[  275.309287][   T28]  #0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4
[  275.311018][   T28] 2 locks held by getty/4082:
[  275.311871][   T28]  #0: ffff0000c0935098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c
[  275.313553][   T28]  #1: ffff80001ea362f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2e8/0xfa8
[  275.315328][   T28] 3 locks held by kworker/1:4/4375:
[  275.316255][   T28]  #0: ffff0000d5f4e138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc
[  275.318190][   T28]  #1: ffff800020e37c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc
[  275.320340][   T28]  #2: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  275.321941][   T28] 5 locks held by kworker/u4:6/4390:
[  275.322846][   T28]  #0: ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc
[  275.324549][   T28]  #1: ffff800021377c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc
[  275.326297][   T28]  #2: ffff800017a32350 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x144/0xa90
[  275.327945][   T28]  #3: ffff0000f50f32f8 (&devlink->lock_key#7){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0xfc/0x2b0
[  275.329910][   T28]  #4: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  275.331395][   T28] 1 lock held by syz-executor/5162:
[  275.332381][   T28]  #0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4
[  275.334075][   T28] 6 locks held by syz-executor/5163:
[  275.335023][   T28]  #0: ffff0000d9126460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8
[  275.336597][   T28]  #1: ffff00010d149088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1b8/0x4b4
[  275.338274][   T28]  #2: ffff0000d0fc5748 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f8/0x4b4
[  275.340069][   T28]  #3: ffff800016df0348 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x138/0x52c
[  275.341948][   T28]  #4: ffff00010e78b0e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x88/0x3d8
[  275.343530][   T28]  #5: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  275.345055][   T28] 4 locks held by syz-executor/5168:
[  275.345979][   T28]  #0: ffff800017a9b610 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50
[  275.347466][   T28]  #1: ffff800017a9b428 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0xec/0x600
[  275.349065][   T28]  #2: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  275.350571][   T28]  #3: ffff80001544bc48 (param_lock){+.+.}-{3:3}, at: kernel_param_lock+0x34/0x44
[  275.352377][   T28] 5 locks held by syz.2.258/5382:
[  275.353282][   T28]  #0: ffff0000e0a880e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c
[  275.354959][   T28]  #1: ffff0000f2602460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8
[  275.356604][   T28]  #2: ffff0000d9bd1088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1b8/0x4b4
[  275.358381][   T28]  #3: ffff0000c36d5578 (kn->active#5){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1f8/0x4b4
[  275.360014][   T28]  #4: ffff80001544bc48 (param_lock){+.+.}-{3:3}, at: param_attr_store+0xd4/0x2ac
[  275.361557][   T28] 3 locks held by kworker/u4:9/5480:
[  275.362580][   T28]  #0: ffff0000c002a138 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc
[  275.364582][   T28]  #1: ffff8000220f7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc
[  275.366657][   T28]  #2: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  275.368183][   T28] 1 lock held by syz.9.269/5529:
[  275.369095][   T28]  #0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  275.370663][   T28] 1 lock held by syz.9.269/5530:
[  275.371523][   T28]  #0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  275.373097][   T28] 1 lock held by syz.9.269/5531:
[  275.373926][   T28]  #0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c
[  275.375448][   T28] 1 lock held by syz-executor/5534:
[  275.376395][   T28]  #0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4
[  275.378159][   T28] 1 lock held by syz-executor/5540:
[  275.379130][   T28]  #0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4
[  275.380861][   T28] 1 lock held by syz-executor/5547:
[  275.381856][   T28]  #0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4
[  275.383488][   T28] 1 lock held by syz-executor/5550:
[  275.384356][   T28]  #0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4
[  275.385937][   T28] 1 lock held by syz-executor/5553:
[  275.386796][   T28]  #0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4
[  275.388342][   T28] 1 lock held by syz-executor/5557:
[  275.389157][   T28]  #0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4
[  275.390754][   T28] 1 lock held by syz-executor/5563:
[  275.391633][   T28]  #0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4
[  275.393479][   T28] 1 lock held by syz-executor/5570:
[  275.394361][   T28]  #0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4
[  275.395986][   T28] 1 lock held by syz-executor/5573:
[  275.396819][   T28]  #0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4
[  275.398433][   T28] 1 lock held by syz-executor/5576:
[  275.399329][   T28]  #0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4
[  275.400900][   T28] 1 lock held by syz-executor/5580:
[  275.401770][   T28]  #0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4
[  275.403352][   T28] 1 lock held by syz-executor/5587:
[  275.404217][   T28]  #0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4
[  275.405844][   T28] 1 lock held by syz-executor/5594:
[  275.406694][   T28]  #0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4
[  275.408250][   T28] 1 lock held by syz-executor/5597:
[  275.409075][   T28]  #0: ffff800017a3ebc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4
[  275.410699][   T28] 
[  275.411098][   T28] =============================================
[  275.411098][   T28] 
[  275.412773][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  275.413928][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  275.415134][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026
[  275.416693][   T28] Call trace:
[  275.417214][   T28]  dump_backtrace+0x1c4/0x1f0
[  275.417987][   T28]  show_stack+0x2c/0x3c
[  275.418630][   T28]  __dump_stack+0x30/0x40
[  275.419283][   T28]  dump_stack_lvl+0xf4/0x15c
[  275.419975][   T28]  dump_stack+0x1c/0x5c
[  275.420599][   T28]  panic+0x2f8/0x7ac
[  275.421231][   T28]  hung_task_panic+0x0/0x2c
[  275.422006][   T28]  kthread+0x254/0x2e0
[  275.422725][   T28]  ret_from_fork+0x10/0x20
[  275.423506][   T28] SMP: stopping secondary CPUs
[  275.424343][   T28] Kernel Offset: disabled
[  275.425066][   T28] CPU features: 0x0a0000,000f0097,a65bfea7
[  275.426050][   T28] Memory Limit: none
[  275.846941][   T28] Rebooting in 86400 seconds..