last executing test programs: 2m45.461739541s ago: executing program 1 (id=1324): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000002580)=ANY=[@ANYBLOB="756e695f786c6174653d302c64656275672c756e695f786c6174653d312c757365667265652c756e695f786c6174653d302c6e66733d6e6f7374616c655f726f2c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c666c7573682c73686f72746e616d653d6d697865642c71756965742c757466383d302c0040cdb2879094cbe48e22fd367d726b6ecf948aa2"], 0x0, 0x29f, &(0x7f0000000840)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x28, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}}, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x2) 2m44.929091626s ago: executing program 2 (id=1326): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) lseek(r0, 0x9, 0x0) 2m44.781368102s ago: executing program 0 (id=1327): open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x400, 0x40) pwritev2(r0, 0x0, 0x0, 0x7, 0x101, 0x2) 2m44.217505769s ago: executing program 0 (id=1330): mknodat$null(0xffffffffffffff9c, 0x0, 0x1d4e, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 2m44.209485609s ago: executing program 1 (id=1331): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x88800, 0x100) unlinkat(r0, &(0x7f0000000140)='./bus\x00', 0x0) fcntl$notify(r0, 0x402, 0x80000038) 2m43.832676637s ago: executing program 0 (id=1332): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000bc0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) 2m43.791387769s ago: executing program 2 (id=1334): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/net\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/512, 0x200) 2m43.545273941s ago: executing program 1 (id=1336): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='-2 -3 +4 +4.1\n', 0xf) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) close(r2) 2m43.316472982s ago: executing program 2 (id=1337): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/94, 0x5e) 2m43.243368185s ago: executing program 3 (id=1338): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='+bon', 0x4) 2m42.91417173s ago: executing program 2 (id=1339): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/100, 0x64) 2m42.786803606s ago: executing program 1 (id=1340): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0000:00:02.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='ccp\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0000:00:02.0\x00', 0xd) 2m42.659378562s ago: executing program 3 (id=1342): r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xd) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x103, 0x1) 2m42.398956234s ago: executing program 0 (id=1343): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) 2m42.344997247s ago: executing program 2 (id=1344): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/pcieport\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/drivers/ahci\x00', 0x0, 0x0) 2m42.232968172s ago: executing program 1 (id=1345): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='4\n\x00', 0x2) close(r1) 2m42.152863786s ago: executing program 0 (id=1346): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='-3\n', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='0\n', 0x2) 2m41.938751516s ago: executing program 3 (id=1347): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/damon_reclaim/parameters\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300), 0x1000) close(r0) 2m41.781637413s ago: executing program 2 (id=1348): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 20000\n', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n', 0x2) 2m41.585977992s ago: executing program 3 (id=1349): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/devices/alarmtimer.0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/devices/alarmtimer.0.auto\x00', 0x0, 0x0) 2m41.21312526s ago: executing program 3 (id=1350): r0 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file4\x00', 0x80c406, &(0x7f0000001980)=ANY=[@ANYBLOB="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"/1213, @ANYRES8, @ANYRES64], 0xfb, 0x2b1, &(0x7f0000000100)="$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") linkat(r0, &(0x7f0000000080)='./file4\x00', r0, 0x0, 0x1000) 2m40.323886542s ago: executing program 3 (id=1352): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='udp 20000\n', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\n', 0x2) close(r2) 2m39.523876229s ago: executing program 4 (id=1354): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) writev(r0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000380)='\f', 0x1}], 0x2) 2m39.158629906s ago: executing program 4 (id=1355): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./trace/events/kmem/kmalloc/filter\x00', 0x2, 0x112) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000680)="51928b95d2564b8ad524f7ad0c75fd024d3a0a8b000000000000401a69cf4edc583e20023fe096d10fd4d7a8294574aac2776608843a53c6f31223ef831dbcdfd214e4f7c2d86a8a", 0x48}, {0x0}], 0x2) 2m38.918989498s ago: executing program 4 (id=1356): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) 2m38.718306727s ago: executing program 4 (id=1357): syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x2000032, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}]}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x801002, 0x0, 0x1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 2m38.338353435s ago: executing program 4 (id=1358): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080), &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/version\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/64, 0x40) 2m38.101110286s ago: executing program 4 (id=1359): mkdir(&(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000130)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1\n\x00', 0x2) close(r1) 2m30.613387938s ago: executing program 1 (id=1360): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm/c1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/c1/protocol\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/c1/comms/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/c1/comms/1/local\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\n', 0x2) 2m29.164056696s ago: executing program 0 (id=1361): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/kernel/btf/vmlinux\x00', 0x0, 0x0) close(r0) 2m26.31976163s ago: executing program 32 (id=1348): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 20000\n', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n', 0x2) 2m24.792068782s ago: executing program 33 (id=1352): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='udp 20000\n', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\n', 0x2) close(r2) 2m22.785264216s ago: executing program 34 (id=1359): mkdir(&(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000130)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1\n\x00', 0x2) close(r1) 2m15.304364827s ago: executing program 35 (id=1360): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/dlm/c1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm/c1/protocol\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/c1/comms/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/c1/comms/1/local\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\n', 0x2) 2m13.797855838s ago: executing program 36 (id=1361): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/kernel/btf/vmlinux\x00', 0x0, 0x0) close(r0) 39.637437896s ago: executing program 5 (id=1516): mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000130)='-2 -3 +4\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='localhost / 2147483647 8193 0 0 0\n\x00', 0x22) close(r4) mkdir(&(0x7f0000000340)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000380)='127.0.0.1:/\x00', &(0x7f0000000340)='./mnt\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,clientaddr=127.0.0.1']) 37.672323259s ago: executing program 5 (id=1518): r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/ieee80211/phy0/netdev:wlan0/txpower\x00', 0x0, 0x0) read(r0, &(0x7f0000000800), 0x100) 34.90038283s ago: executing program 5 (id=1533): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/2048, 0x800) close(r0) 34.590139854s ago: executing program 5 (id=1534): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/ieee80211/phy0/netdev:wlan0/flags\x00', 0x0, 0x0) 33.105932804s ago: executing program 6 (id=1538): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ccp\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200), 0x1000) 32.828243658s ago: executing program 6 (id=1540): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/1024, 0x400) close(r0) 32.697622894s ago: executing program 6 (id=1542): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 30.625950272s ago: executing program 5 (id=1548): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/drivers/xhci_hcd\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/1024, 0x400) 30.297542297s ago: executing program 5 (id=1550): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0\n', 0x2) 29.81572613s ago: executing program 6 (id=1551): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/ieee80211/phy0/netdev:wlan0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/1024, 0x400) 29.58939027s ago: executing program 6 (id=1552): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') read(r0, &(0x7f0000000100)=""/128, 0x80) close(r0) 29.4134316s ago: executing program 6 (id=1553): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='freeze\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='virtio0\n\x00', 0x8) close(r1) 27.69547914s ago: executing program 8 (id=1557): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r0, r0, 0x0, 0xf000) 27.602332344s ago: executing program 8 (id=1558): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/ieee80211/phy0/netdev:wlan0/flags\x00', 0x0, 0x0) 27.47879893s ago: executing program 8 (id=1559): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/118, 0x76}], 0x1, 0x5c, 0x3) 27.373513015s ago: executing program 8 (id=1560): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x0, 0x0) openat(r0, &(0x7f0000000200)='bus/pci/drivers/thunderbolt/bind\x00', 0x1, 0x0) 27.302698318s ago: executing program 8 (id=1561): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) lseek(r0, 0x9, 0x0) 26.335704423s ago: executing program 8 (id=1565): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='break\n\x00', 0x6) 23.614617001s ago: executing program 7 (id=1582): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) syz_mount_image$fuse(0x0, 0x0, 0xe0018, 0x0, 0x7, 0x0, 0x0) 23.399005962s ago: executing program 9 (id=1583): mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/ieee80211/phy0/netdev:wlan0/flags\x00', 0x0, 0x0) 23.184859462s ago: executing program 9 (id=1584): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/100, 0x64) 22.78550763s ago: executing program 9 (id=1585): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/mdio_bus/devices\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200), 0x1000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400), 0x1000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/mdio_bus/drivers\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000600), 0x1000) 22.701574804s ago: executing program 7 (id=1586): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x8002, 0x7ab7e3595e92b96c) write(r0, &(0x7f0000000000)='7', 0x1) mount(0x0, 0x0, &(0x7f0000000240)='dax\x00', 0x800, 0x0) 22.36271206s ago: executing program 9 (id=1587): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000000)=""/94, 0x5e) 22.232220996s ago: executing program 7 (id=1588): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) lseek(r0, 0x9, 0x0) 21.845468984s ago: executing program 9 (id=1589): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/ieee80211/phy0/netdev:wlan0/flags\x00', 0x0, 0x0) read(r0, &(0x7f0000000200), 0x100) close(r0) read(0xffffffffffffffff, &(0x7f0000000400), 0x100) 21.701040741s ago: executing program 7 (id=1590): mkdirat(0xffffffffffffff9c, 0x0, 0x183) chdir(&(0x7f0000000340)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x5, 0x1) getdents64(r0, 0x0, 0x0) 21.610031335s ago: executing program 9 (id=1591): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0\x00', 0x2) close(r0) 21.437545983s ago: executing program 7 (id=1592): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x2) write$cgroup_freezer_state(r0, &(0x7f00000003c0)='FROZEN\x00', 0x7) 21.381105416s ago: executing program 7 (id=1593): mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r0, r0, 0x0, 0xf000) 386.955222ms ago: executing program 37 (id=1591): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0\x00', 0x2) close(r0) 266.214488ms ago: executing program 38 (id=1565): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='break\n\x00', 0x6) 177.664942ms ago: executing program 39 (id=1550): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0\n', 0x2) 81.875906ms ago: executing program 40 (id=1553): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='freeze\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='virtio0\n\x00', 0x8) close(r1) 0s ago: executing program 41 (id=1593): mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r0, r0, 0x0, 0xf000) kernel console output (not intermixed with test programs): p2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.729673][ T37] audit: type=1800 audit(1790057225.262:953): pid=16669 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1269" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4425 res=0 errno=0 [ 987.861169][ T5608] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 988.171919][T16674] loop2: detected capacity change from 0 to 1024 [ 988.193163][T16674] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 988.209023][T16674] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 988.211859][T16674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.289036][T16658] loop1: detected capacity change from 0 to 32768 [ 988.313838][T16658] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1273 (16658) [ 988.526171][T16658] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 988.526223][T16658] BTRFS info (device loop1): using blake2b checksum algorithm [ 988.562030][T16674] No source specified [ 989.132660][T16658] BTRFS info (device loop1): enabling ssd optimizations [ 989.132694][T16658] BTRFS info (device loop1): turning on async discard [ 989.132711][T16658] BTRFS info (device loop1): enabling free space tree [ 989.132732][T16658] BTRFS info (device loop1): use zstd compression, level 3 [ 989.169628][ T5592] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 989.349530][T16672] loop4: detected capacity change from 0 to 32768 [ 989.453822][ T5598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.454296][T16672] BTRFS info: device /dev/loop4 (7:4) using temp-fsid d51baa0b-e123-45a4-b153-460a87ea9bf7 [ 989.454360][T16672] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1272 (16672) [ 989.513613][T16697] loop0: detected capacity change from 0 to 512 [ 989.520933][T16672] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 989.520971][T16672] BTRFS info (device loop4): using blake2b checksum algorithm [ 989.618616][T16697] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 989.618647][T16697] loop0: lost filesystem error report for type 5 error -12 [ 989.623120][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 989.623145][ C1] EXT4-fs (loop0): initial error at time 1790057227: ext4_process_orphan:346 [ 989.623169][ C1] EXT4-fs (loop0): last error at time 1790057227: ext4_process_orphan:346 [ 989.670337][T16697] EXT4-fs (loop0): 2 truncates cleaned up [ 989.745510][T16697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 989.896947][T16711] loop2: detected capacity change from 0 to 1024 [ 989.988671][T16711] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 990.034936][T16672] BTRFS info (device loop4): enabling ssd optimizations [ 990.034960][T16672] BTRFS info (device loop4): turning on async discard [ 990.034971][T16672] BTRFS info (device loop4): enabling free space tree [ 990.034982][T16672] BTRFS info (device loop4): use zstd compression, level 3 [ 990.064573][T16711] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 990.076879][T16711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 990.407381][T16711] No source specified [ 990.449356][ T37] audit: type=1800 audit(1790057227.982:954): pid=16697 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1274" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 991.160341][ T37] audit: type=1800 audit(1790057228.692:955): pid=16720 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1274" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 991.221797][ T5591] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 991.367782][ T5598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.725260][ T5605] BTRFS info (device loop4): last unmount of filesystem d51baa0b-e123-45a4-b153-460a87ea9bf7 [ 992.230679][T16720] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.1274: bg 0: block 5: invalid block bitmap [ 992.255023][ T3415] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 992.255062][ T3415] EXT4-fs (loop0): This should not happen!! Data will be lost [ 992.255062][ T3415] [ 992.255080][ T3415] EXT4-fs (loop0): Total free blocks count 0 [ 992.255096][ T3415] EXT4-fs (loop0): Free/Dirty block details [ 992.255112][ T3415] EXT4-fs (loop0): free_blocks=0 [ 992.255128][ T3415] EXT4-fs (loop0): dirty_blocks=2336 [ 992.255143][ T3415] EXT4-fs (loop0): Block reservation details [ 992.255156][ T3415] EXT4-fs (loop0): i_reserved_data_blocks=2336 [ 992.789042][T16724] loop3: detected capacity change from 0 to 32768 [ 992.834328][T16724] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 993.065120][T16724] XFS (loop3): Ending clean mount [ 993.319499][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.319586][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.504973][ T84] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 284 with error 28 [ 993.742666][ T37] audit: type=1800 audit(1790057231.262:956): pid=16755 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1276" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4425 res=0 errno=0 [ 994.284578][T16763] binder: Binderfs stats mode cannot be changed during a remount [ 994.292844][T16731] loop4: detected capacity change from 0 to 32768 [ 994.489798][T16769] loop0: detected capacity change from 0 to 256 [ 994.588702][T16731] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 994.808027][T16731] XFS (loop4): Ending clean mount [ 994.947127][ T37] audit: type=1800 audit(1790057232.482:957): pid=16769 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1287" name="file1" dev="loop0" ino=1048752 res=0 errno=0 [ 995.058936][T16757] loop1: detected capacity change from 0 to 32768 [ 995.083785][ T5592] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 995.239327][T16782] 9pnet_virtio: no channels available for device syz [ 995.255497][T16757] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 995.363875][ T37] audit: type=1800 audit(1790057232.882:958): pid=16784 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1278" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4425 res=0 errno=0 [ 995.464706][T16788] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 995.464736][T16788] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 995.599122][T16757] XFS (loop1): Ending clean mount [ 996.372337][T16795] 9pnet_virtio: no channels available for device syz [ 996.818289][ T5605] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 997.507607][ T5591] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 997.942156][T16811] loop0: detected capacity change from 0 to 512 [ 998.377149][T16817] loop3: detected capacity change from 0 to 128 [ 998.430396][T16811] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 999.906593][T16825] loop2: detected capacity change from 0 to 764 [ 1000.931891][T16843] loop4: detected capacity change from 0 to 256 [ 1001.016684][T16843] FAT-fs (loop4): unable to read block(103987194760) for building NFS inode [ 1001.403811][T16852] loop2: detected capacity change from 0 to 128 [ 1001.834431][T16856] loop3: detected capacity change from 0 to 8192 [ 1002.166635][T16865] loop1: detected capacity change from 0 to 256 [ 1002.169279][T16865] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1002.244617][T16858] loop0: detected capacity change from 0 to 164 [ 1002.262097][T16858] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ017777777777777777777770xffffffffffffffff0xffffffffffffffffÿÿ01777777777777777777777‘obq(´š Z;€(@Õ¯¿T”þ¥äLP€EnÏsè•Ðé]+—8õÂù/à$5@ϯ:^á|dǹÕPΨøQòKKph|Â|)cžä¿TiîYB%5ž-7¢Ÿ“'`LŠô†l;…·Ùú·ê] ;~ù' [ 1002.886870][T16871] loop0: detected capacity change from 0 to 256 [ 1002.886872][T16872] loop3: detected capacity change from 0 to 16 [ 1002.997706][T16872] erofs (device loop3): invalid ishare xattr prefix id 0 [ 1003.089081][T16875] loop1: detected capacity change from 0 to 128 [ 1003.801776][ T37] audit: type=1800 audit(1790057241.332:959): pid=16875 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1324" name="file1" dev="loop1" ino=1048762 res=0 errno=0 [ 1006.414020][ T5819] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1006.480244][ T5819] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1006.679713][T16921] ceph: No mds server is up or the cluster is laggy [ 1006.747449][ T5819] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1007.280740][ T5750] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1007.374906][T16948] loop3: detected capacity change from 0 to 128 [ 1007.778815][T16950] loop4: detected capacity change from 0 to 164 [ 1015.744202][T16936] svc: failed to register lockdv1 RPC service (errno 512). [ 1015.760512][T16936] lockd_up: makesock failed, error=-512 [ 1017.249031][T16936] svc: failed to register nfsdv3 RPC service (errno 512). [ 1017.249297][T16936] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1017.249316][T16936] failed to unregister tcp with rpcbind [ 1017.280276][T16936] svc: failed to register nfsdv3 RPC service (errno 97). [ 1017.280299][T16936] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1017.280308][T16936] failed to unregister tcp with rpcbind [ 1018.819562][T16939] svc: failed to register nfsdv3 RPC service (errno 512). [ 1018.819847][T16939] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1018.819866][T16939] failed to unregister tcp with rpcbind [ 1018.820157][T16939] svc: failed to register nfsdv3 RPC service (errno 97). [ 1018.820176][T16939] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1018.820190][T16939] failed to unregister tcp with rpcbind [ 1020.416622][T16945] NFSD: Unable to initialize client recovery tracking! (-110) [ 1020.416648][T16945] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1020.416661][T16945] NFSD: starting 90-second grace period (net f00003c0) [ 1022.215970][ T5597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1022.219908][ T5597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1022.221519][ T5597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1022.222735][ T5597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1022.308428][ T5597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1023.858887][ T5597] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1023.961451][ T5597] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1023.972166][ T5597] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1023.992375][ T5597] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1024.000667][ T5597] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1024.140927][T16984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.141057][T16984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.141250][T16984] bridge_slave_0: entered allmulticast mode [ 1024.149974][T16984] bridge_slave_0: entered promiscuous mode [ 1024.156001][T16984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.156127][T16984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.156319][T16984] bridge_slave_1: entered allmulticast mode [ 1024.237950][T16984] bridge_slave_1: entered promiscuous mode [ 1024.528819][T16984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.544774][T16984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.624306][ T5599] Bluetooth: hci5: command tx timeout [ 1024.693646][T16984] team0: Port device team_slave_0 added [ 1024.697503][T16984] team0: Port device team_slave_1 added [ 1024.752896][T16984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.752915][T16984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.752943][T16984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.801116][T16984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.801135][T16984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.801152][T16984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.990759][T16984] hsr_slave_0: entered promiscuous mode [ 1024.992236][T16984] hsr_slave_1: entered promiscuous mode [ 1025.004910][T16984] debugfs: 'hsr0' already exists in 'hsr' [ 1025.004943][T16984] Cannot create hsr debugfs directory [ 1025.656666][ T5597] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1025.662238][ T5597] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1025.755540][ T5597] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1025.783534][ T5597] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1025.845002][ T5597] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1026.203263][ T5597] Bluetooth: hci6: command tx timeout [ 1026.664765][ T5597] Bluetooth: hci5: command tx timeout [ 1028.094684][T16984] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1028.118262][T16984] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1028.121084][T16984] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1028.190315][ T5597] Bluetooth: hci7: command tx timeout [ 1028.247531][T16984] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1028.255854][ T5597] Bluetooth: hci6: command tx timeout [ 1028.272648][T16984] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1028.397210][T16984] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1028.408078][T16984] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1028.570677][T16984] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1028.772506][ T5597] Bluetooth: hci5: command tx timeout [ 1029.227538][T17002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.227779][T17002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.228047][T17002] bridge_slave_0: entered allmulticast mode [ 1029.230424][T17002] bridge_slave_0: entered promiscuous mode [ 1029.250326][T17002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.250498][T17002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.251070][T17002] bridge_slave_1: entered allmulticast mode [ 1029.253934][T17002] bridge_slave_1: entered promiscuous mode [ 1029.515287][T17002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.591706][T17002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.761006][T17002] team0: Port device team_slave_0 added [ 1029.850854][T17002] team0: Port device team_slave_1 added [ 1029.852274][T17016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.852568][T17016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.852767][T17016] bridge_slave_0: entered allmulticast mode [ 1029.885030][T17016] bridge_slave_0: entered promiscuous mode [ 1029.963823][T17016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.963975][T17016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.964168][T17016] bridge_slave_1: entered allmulticast mode [ 1029.965980][T17016] bridge_slave_1: entered promiscuous mode [ 1030.263644][ T5597] Bluetooth: hci7: command tx timeout [ 1030.352472][ T5597] Bluetooth: hci6: command tx timeout [ 1030.372101][T17002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.372118][T17002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.372134][T17002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.450957][T17002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.450978][T17002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.451001][T17002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.491009][T17016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.529017][T17016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.697732][T17016] team0: Port device team_slave_0 added [ 1030.715758][T17002] hsr_slave_0: entered promiscuous mode [ 1030.717019][T17002] hsr_slave_1: entered promiscuous mode [ 1030.717887][T17002] debugfs: 'hsr0' already exists in 'hsr' [ 1030.717913][T17002] Cannot create hsr debugfs directory [ 1030.722932][T17016] team0: Port device team_slave_1 added [ 1030.824663][ T5597] Bluetooth: hci5: command tx timeout [ 1030.850837][T17016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.850854][T17016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.850871][T17016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.886375][T17016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.886403][T17016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.886434][T17016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.542034][T17016] hsr_slave_0: entered promiscuous mode [ 1031.544285][T17016] hsr_slave_1: entered promiscuous mode [ 1031.545431][T17016] debugfs: 'hsr0' already exists in 'hsr' [ 1031.545459][T17016] Cannot create hsr debugfs directory [ 1031.650664][T16984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.249675][T16984] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.349501][ T5597] Bluetooth: hci7: command tx timeout [ 1032.428645][ T5597] Bluetooth: hci6: command tx timeout [ 1032.727551][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.727694][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.926359][ T3332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.926620][ T3332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.270726][ T5599] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1033.372817][ T5599] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1033.439997][ T5599] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1033.508093][ T5599] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1033.509987][ T5599] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1033.917034][T17002] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1034.000418][T17002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1034.113830][T17002] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1034.315077][T17002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1034.336896][T17002] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1034.419400][ T5599] Bluetooth: hci7: command tx timeout [ 1034.491940][T17002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1034.595897][T17002] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1034.755670][T17002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1035.231709][ T5597] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1035.302557][ T5597] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1035.318886][ T5597] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1035.319991][ T5597] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1035.320664][ T5597] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1036.035526][ T5597] Bluetooth: hci8: command tx timeout [ 1037.079294][T17016] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1037.179621][T17016] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1037.303191][T17016] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1037.447283][T17016] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1037.535636][T17016] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1037.569764][T17016] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1037.656150][T17016] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1037.742610][T17016] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1037.871994][ T5597] Bluetooth: hci9: command tx timeout [ 1038.108345][ T5597] Bluetooth: hci8: command tx timeout [ 1038.632770][T16984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.938918][ T5597] Bluetooth: hci9: command tx timeout [ 1040.196507][ T5597] Bluetooth: hci8: command tx timeout [ 1040.525198][T17002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.651550][T17048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.651745][T17048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.651868][T17048] bridge_slave_0: entered allmulticast mode [ 1040.675245][T17048] bridge_slave_0: entered promiscuous mode [ 1040.746916][T17048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.747062][T17048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.747240][T17048] bridge_slave_1: entered allmulticast mode [ 1040.750239][T17048] bridge_slave_1: entered promiscuous mode [ 1041.001312][T17048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.062178][T16984] veth0_vlan: entered promiscuous mode [ 1041.121605][T17048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.206470][T17002] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.278544][T17055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.278719][T17055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.278834][T17055] bridge_slave_0: entered allmulticast mode [ 1041.280517][T17055] bridge_slave_0: entered promiscuous mode [ 1041.409918][T17055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.410032][T17055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.410150][T17055] bridge_slave_1: entered allmulticast mode [ 1041.411753][T17055] bridge_slave_1: entered promiscuous mode [ 1041.444478][T17048] team0: Port device team_slave_0 added [ 1041.527485][T17048] team0: Port device team_slave_1 added [ 1041.685122][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.685209][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.778550][T16984] veth1_vlan: entered promiscuous mode [ 1041.825027][T17055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.840423][T17048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.840442][T17048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.840468][T17048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.851926][T17055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.986264][T12557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.986403][T12557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.996207][T17048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.996226][T17048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.996252][T17048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.013446][ T5597] Bluetooth: hci9: command tx timeout [ 1042.022360][T17016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.220068][T17055] team0: Port device team_slave_0 added [ 1042.315273][ T5597] Bluetooth: hci8: command tx timeout [ 1042.361919][T17055] team0: Port device team_slave_1 added [ 1042.599238][T17048] hsr_slave_0: entered promiscuous mode [ 1042.600145][T17048] hsr_slave_1: entered promiscuous mode [ 1042.600733][T17048] debugfs: 'hsr0' already exists in 'hsr' [ 1042.600755][T17048] Cannot create hsr debugfs directory [ 1042.629395][T17055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1042.629409][T17055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.629426][T17055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.731864][T17055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1042.731879][T17055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.731896][T17055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.913832][T17016] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.159475][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.159648][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.252330][T17055] hsr_slave_0: entered promiscuous mode [ 1043.254822][T17055] hsr_slave_1: entered promiscuous mode [ 1043.255758][T17055] debugfs: 'hsr0' already exists in 'hsr' [ 1043.255783][T17055] Cannot create hsr debugfs directory [ 1043.276793][T16984] veth0_macvtap: entered promiscuous mode [ 1043.497174][ T3333] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.497316][ T3333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.690865][T16984] veth1_macvtap: entered promiscuous mode [ 1044.107632][ T5597] Bluetooth: hci9: command tx timeout [ 1044.908864][T16984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1045.356264][T16955] NFSD: Unable to initialize client recovery tracking! (-110) [ 1045.356291][T16955] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1045.356306][T16955] NFSD: starting 90-second grace period (net f00003fd) [ 1046.240042][T16984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1047.271270][T17048] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1047.559655][T17048] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1047.750611][T17048] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1048.028193][T17048] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1048.050598][T17048] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1048.328792][T17048] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1049.094472][T17048] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1049.201850][T17048] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1050.018241][T17002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.885140][T16971] NFSD: Failed to start, no listeners configured. [ 1051.616299][T17055] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1051.696851][T17055] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1051.700640][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.700662][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.846153][T17055] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1051.979017][T17055] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1052.002236][T17055] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1052.099921][T17055] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1052.171884][T17055] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1052.248882][T17055] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1052.336068][T17016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1052.504530][ T3413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.504556][ T3413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.630200][ T3332] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.472616][T17002] veth0_vlan: entered promiscuous mode [ 1054.761485][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.761556][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.933880][T17162] nfs: Bad value for 'source' [ 1055.544433][T17163] svc: failed to register lockdv1 RPC service (errno 512). [ 1055.808588][ T84] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.951354][T17002] veth1_vlan: entered promiscuous mode [ 1057.035088][T17163] svc: failed to register nfsdv3 RPC service (errno 512). [ 1057.035240][T17163] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1057.035251][T17163] failed to unregister tcp with rpcbind [ 1057.035422][T17163] svc: failed to register nfsdv3 RPC service (errno 97). [ 1057.035433][T17163] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1057.035441][T17163] failed to unregister tcp with rpcbind [ 1057.717891][T17048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.219823][ T84] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.575403][T17048] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.607404][ T3333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.607599][ T3333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.765573][T14798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.765761][T14798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.280758][ T84] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.368671][T17002] veth0_macvtap: entered promiscuous mode [ 1059.582021][T17002] veth1_macvtap: entered promiscuous mode [ 1059.618945][T17016] veth0_vlan: entered promiscuous mode [ 1059.871674][T17055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.148121][ T84] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.348814][T17016] veth1_vlan: entered promiscuous mode [ 1060.375662][T17002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1060.479033][T17002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1060.864816][T17055] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.867062][ T37] audit: type=1804 audit(1790057298.332:960): pid=17184 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.1372" name="/newroot/6/nfsd/pool_threads" dev="nfsd" ino=9 res=1 errno=0 [ 1061.232035][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.232182][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.591470][ T3413] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.591607][ T3413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.840525][T17016] veth0_macvtap: entered promiscuous mode [ 1062.368959][T17016] veth1_macvtap: entered promiscuous mode [ 1062.506828][ T3413] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.738017][T17016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.521927][T17016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1063.695912][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.695939][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.116804][T17191] NFSD: Unable to initialize client recovery tracking! (-110) [ 1064.116829][T17191] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1064.116842][T17191] NFSD: starting 90-second grace period (net f00007ec) [ 1064.304061][ T3413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.304085][ T3413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.335276][T17048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.090774][ T84] bridge_slave_1: left allmulticast mode [ 1066.090910][ T84] bridge_slave_1: left promiscuous mode [ 1066.120992][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.452798][ T84] bridge_slave_0: left allmulticast mode [ 1066.470448][ T84] bridge_slave_0: left promiscuous mode [ 1066.470759][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.684242][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.824139][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.909762][ T84] bond0 (unregistering): Released all slaves [ 1071.269407][T17209] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.408601][T17223] svc: failed to register lockdv1 RPC service (errno 111). [ 1072.535005][ T3333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.535030][ T3333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.002378][T17209] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.121528][T17223] svc: failed to register nfsdv3 RPC service (errno 512). [ 1073.121826][T17223] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1073.121845][T17223] failed to unregister udp with rpcbind [ 1073.122075][T17223] svc: failed to register nfsdv3 RPC service (errno 97). [ 1073.122095][T17223] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1073.122110][T17223] failed to unregister udp with rpcbind [ 1074.212828][T17055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.261313][T17245] svc: failed to register lockdv1 RPC service (errno 111). [ 1074.553601][T17209] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.201132][ T3332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.201155][ T3332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.219817][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1075.895570][T17245] svc: failed to register nfsdv3 RPC service (errno 512). [ 1075.895824][T17245] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1075.895842][T17245] failed to unregister tcp with rpcbind [ 1075.896098][T17245] svc: failed to register nfsdv3 RPC service (errno 97). [ 1075.896118][T17245] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1075.896132][T17245] failed to unregister tcp with rpcbind [ 1075.896657][T17209] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.307862][T17048] veth0_vlan: entered promiscuous mode [ 1076.359165][T17048] veth1_vlan: entered promiscuous mode [ 1077.417812][ T84] hsr_slave_0: left promiscuous mode [ 1077.547310][ T84] hsr_slave_1: left promiscuous mode [ 1077.548446][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1077.548523][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1077.635287][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1077.635323][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.078887][T17262] NFSD: Unable to initialize client recovery tracking! (-110) [ 1078.078904][T17262] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1078.078912][T17262] NFSD: starting 90-second grace period (net f00008b1) [ 1078.095920][ T84] veth1_macvtap: left promiscuous mode [ 1078.100094][ T84] veth0_macvtap: left promiscuous mode [ 1078.100406][ T84] veth1_vlan: left promiscuous mode [ 1078.100727][ T84] veth0_vlan: left promiscuous mode [ 1080.769304][ T84] team0 (unregistering): Port device team_slave_1 removed [ 1080.870143][ T84] team0 (unregistering): Port device team_slave_0 removed [ 1081.231415][ T5254] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1081.364636][T17055] veth0_vlan: entered promiscuous mode [ 1081.416197][T17048] veth0_macvtap: entered promiscuous mode [ 1081.473133][T17048] veth1_macvtap: entered promiscuous mode [ 1081.533407][T17055] veth1_vlan: entered promiscuous mode [ 1081.533682][T17277] NFSD: Unable to initialize client recovery tracking! (-110) [ 1081.533701][T17277] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1081.533716][T17277] NFSD: starting 90-second grace period (net f00007ec) [ 1081.850343][T17055] veth0_macvtap: entered promiscuous mode [ 1081.855832][T17048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.878323][T17055] veth1_macvtap: entered promiscuous mode [ 1081.942343][T17048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1082.220864][T17055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1082.481866][T17055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1083.603891][ T5254] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1084.449842][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.449870][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.886138][ T3332] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.827812][ T3369] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.828037][ T3369] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.828223][ T3369] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.828395][ T3369] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.828566][ T3369] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.828813][ T3369] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.829002][ T3369] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.829687][ T3369] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.829879][ T3369] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.830054][ T3369] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.830224][ T3369] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.830393][ T3369] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.830563][ T3369] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.830767][ T3369] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.831072][ T3369] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.554599][ T3129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.554626][ T3129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.779801][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.779828][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.074620][ T3333] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.076637][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.442278][T14798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.442304][T14798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.418505][T17285] svc: failed to register nfsdv3 RPC service (errno 512). [ 1088.418781][T17285] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1088.418800][T17285] failed to unregister tcp with rpcbind [ 1088.419081][T17285] svc: failed to register nfsdv3 RPC service (errno 97). [ 1088.419102][T17285] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1088.419117][T17285] failed to unregister tcp with rpcbind [ 1089.417789][T17335] NFSD: Failed to start, no listeners configured. [ 1089.638890][T17330] kAFS: unable to lookup cell 'syz0' [ 1090.228706][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.530285][ T5254] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1091.512849][T17360] 9pnet_virtio: no channels available for device syz [ 1092.073077][ T4920] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1092.085702][T13892] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1092.203310][T17358] ceph: No mds server is up or the cluster is laggy [ 1092.308979][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.352168][ T4920] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1092.427892][T13892] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1092.534488][T17364] ceph: No mds server is up or the cluster is laggy [ 1092.567041][T17373] FAULT_INJECTION: forcing a failure. [ 1092.567041][T17373] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1092.567085][T17373] CPU: 1 UID: 0 PID: 17373 Comm: syz.6.1396 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1092.567114][T17373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1092.567127][T17373] Call Trace: [ 1092.567138][T17373] [ 1092.567156][T17373] dump_stack_lvl+0xe8/0x150 [ 1092.567185][T17373] should_fail_ex+0x46b/0x600 [ 1092.567255][T17373] get_futex_key+0x1b4/0x1580 [ 1092.567324][T17373] ? __pfx_get_futex_key+0x10/0x10 [ 1092.567357][T17373] futex_wait_setup+0x4a/0x590 [ 1092.567374][T17373] ? __resched_curr+0x106/0x540 [ 1092.567394][T17373] ? __futex_wait+0xe1/0x410 [ 1092.567412][T17373] __futex_wait+0x161/0x410 [ 1092.567428][T17373] ? __pfx___futex_wait+0x10/0x10 [ 1092.567445][T17373] ? __pfx_futex_wake_mark+0x10/0x10 [ 1092.567462][T17373] ? try_to_wake_up+0x84b/0x1430 [ 1092.567482][T17373] futex_wait+0x121/0x390 [ 1092.567497][T17373] ? __pfx_futex_wait+0x10/0x10 [ 1092.567521][T17373] do_futex+0x3e7/0x4e0 [ 1092.567536][T17373] ? __pfx_do_futex+0x10/0x10 [ 1092.567548][T17373] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1092.567642][T17373] __se_sys_futex+0x3a8/0x450 [ 1092.567660][T17373] ? ksys_write+0x248/0x270 [ 1092.567750][T17373] ? __pfx___se_sys_futex+0x10/0x10 [ 1092.567762][T17373] ? __pfx_ksys_write+0x10/0x10 [ 1092.567778][T17373] ? __x64_sys_futex+0x21/0xf0 [ 1092.567792][T17373] do_syscall_64+0x166/0x520 [ 1092.567821][T17373] ? trace_irq_disable+0x3b/0x140 [ 1092.567846][T17373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.567871][T17373] ? clear_bhb_loop+0x70/0xc0 [ 1092.567886][T17373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.567898][T17373] RIP: 0033:0x7f1e4d71e159 [ 1092.567912][T17373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.567923][T17373] RSP: 002b:00007f1e4b9760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1092.567957][T17373] RAX: ffffffffffffffda RBX: 00007f1e4d9a5fa8 RCX: 00007f1e4d71e159 [ 1092.567967][T17373] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1e4d9a5fa8 [ 1092.567976][T17373] RBP: 00007f1e4d9a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1092.567984][T17373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1092.567992][T17373] R13: 00007f1e4d9a6038 R14: 00007fffbb759e10 R15: 00007fffbb759ef8 [ 1092.568012][T17373] [ 1092.746354][T13892] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1092.854333][ T4920] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1093.255772][ T5716] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1094.036445][T17395] overlayfs: overlapping lowerdir path [ 1094.224638][T17401] 9pnet_virtio: no channels available for device syz [ 1094.853794][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.183879][T17435] overlayfs: overlapping lowerdir path [ 1096.428888][T17440] 9pnet_virtio: no channels available for device syz [ 1096.466976][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.253504][T17424] NFSD: Unable to initialize client recovery tracking! (-110) [ 1097.253530][T17424] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1097.253544][T17424] NFSD: starting 90-second grace period (net f00007ec) [ 1097.741932][T17434] NFSD: Failed to start, no listeners configured. [ 1098.997791][T17469] 9pnet_virtio: no channels available for device syz [ 1101.132791][ T5254] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1102.097245][T17016] svc: failed to register nfsdv3 RPC service (errno 111). [ 1102.100751][T17016] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1102.100775][T17016] failed to unregister tcp with rpcbind [ 1102.133373][T17016] svc: failed to register nfsdv3 RPC service (errno 97). [ 1102.133402][T17016] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1102.133416][T17016] failed to unregister tcp with rpcbind [ 1102.135759][T17509] overlayfs: overlapping lowerdir path [ 1102.671594][T17522] 9pnet_virtio: no channels available for device syz [ 1102.858897][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.819446][T17514] NFSD: Unable to initialize client recovery tracking! (-110) [ 1103.819473][T17514] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1103.819486][T17514] NFSD: starting 90-second grace period (net f00007ec) [ 1104.426725][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.995563][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.155764][ T5254] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1106.221173][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.931140][ T5254] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1107.022341][T17534] NFSD: Failed to start, no listeners configured. [ 1107.190491][T17573] overlayfs: overlapping lowerdir path [ 1108.428011][T17589] 9pnet_virtio: no channels available for device syz [ 1109.334737][ T5254] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1109.395214][ T84] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.762019][ T5750] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1111.813901][ T5750] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1112.207525][T17305] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1112.217512][T17620] NFSD: Unable to initialize client recovery tracking! (-110) [ 1112.217539][T17620] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1112.217552][T17620] NFSD: starting 90-second grace period (net f00008b1) [ 1112.381524][T17647] ceph: No mds server is up or the cluster is laggy [ 1112.427883][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.177736][T17642] NFSD: Failed to start, no listeners configured. [ 1114.187010][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.942133][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.791448][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.198888][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.198970][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.681496][T17712] libceph: resolve 'invalid' (ret=-3): failed [ 1119.640135][ T5254] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1120.831184][ T13] bridge_slave_1: left allmulticast mode [ 1120.831225][ T13] bridge_slave_1: left promiscuous mode [ 1120.831643][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.030826][T17774] NFSD: Failed to start, no listeners configured. [ 1121.116959][ T13] bridge_slave_0: left allmulticast mode [ 1121.116999][ T13] bridge_slave_0: left promiscuous mode [ 1121.148990][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.591610][ T13] bridge_slave_1: left allmulticast mode [ 1121.591654][ T13] bridge_slave_1: left promiscuous mode [ 1121.591937][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.839014][ T13] bridge_slave_0: left allmulticast mode [ 1121.839056][ T13] bridge_slave_0: left promiscuous mode [ 1121.839309][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.397481][ T13] bridge_slave_1: left allmulticast mode [ 1122.397510][ T13] bridge_slave_1: left promiscuous mode [ 1122.397673][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.771655][ T13] bridge_slave_0: left allmulticast mode [ 1122.771696][ T13] bridge_slave_0: left promiscuous mode [ 1122.771965][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.315921][ T13] bridge_slave_1: left allmulticast mode [ 1123.315964][ T13] bridge_slave_1: left promiscuous mode [ 1123.316226][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.400847][T17175] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1123.430898][T17175] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1123.573086][ T13] bridge_slave_0: left allmulticast mode [ 1123.573116][ T13] bridge_slave_0: left promiscuous mode [ 1123.573288][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.762799][T17175] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1124.033182][T17806] ceph: No mds server is up or the cluster is laggy [ 1124.563343][T17803] NFSD: Unable to initialize client recovery tracking! (-110) [ 1124.563371][T17803] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1124.563385][T17803] NFSD: starting 90-second grace period (net f00007ec) [ 1126.844173][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1127.003612][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1127.075336][ T13] bond0 (unregistering): Released all slaves [ 1127.927713][T17815] NFSD: Unable to initialize client recovery tracking! (-110) [ 1127.927740][T17815] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1127.927755][T17815] NFSD: starting 90-second grace period (net f00008b1) [ 1128.207880][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1128.266622][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.317968][ T13] bond0 (unregistering): Released all slaves [ 1129.144933][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1129.215790][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1129.259847][ T13] bond0 (unregistering): Released all slaves [ 1129.974719][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1130.033781][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1130.063291][ T13] bond0 (unregistering): Released all slaves [ 1130.240794][T17830] NFSD: Unable to initialize client recovery tracking! (-110) [ 1130.240820][T17830] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1130.240834][T17830] NFSD: starting 90-second grace period (net f00007ec) [ 1131.479612][T17854] 9pnet_virtio: no channels available for device syz [ 1132.311555][T17875] sysfs: Unknown parameter './sys' [ 1132.500601][ T5254] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1132.545048][T17880] FAULT_INJECTION: forcing a failure. [ 1132.545048][T17880] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1132.545084][T17880] CPU: 1 UID: 0 PID: 17880 Comm: syz.8.1529 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1132.545107][T17880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1132.545119][T17880] Call Trace: [ 1132.545128][T17880] [ 1132.545138][T17880] dump_stack_lvl+0xe8/0x150 [ 1132.545177][T17880] should_fail_ex+0x46b/0x600 [ 1132.545210][T17880] get_futex_key+0x1b4/0x1580 [ 1132.545252][T17880] ? __pfx_get_futex_key+0x10/0x10 [ 1132.545280][T17880] ? kasan_save_free_info+0x40/0x50 [ 1132.545332][T17880] ? __kasan_slab_free+0x5c/0x80 [ 1132.545359][T17880] ? kfree+0x1c5/0x6d0 [ 1132.545395][T17880] ? __se_sys_mount+0x33b/0x420 [ 1132.545427][T17880] ? do_syscall_64+0x166/0x520 [ 1132.545446][T17880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.545478][T17880] futex_wake+0x119/0x600 [ 1132.545508][T17880] ? __pfx_futex_wake+0x10/0x10 [ 1132.545553][T17880] do_futex+0x458/0x4e0 [ 1132.545579][T17880] ? __pfx_do_futex+0x10/0x10 [ 1132.545599][T17880] ? rcu_is_watching+0x16/0xb0 [ 1132.545646][T17880] __se_sys_futex+0x3a8/0x450 [ 1132.545673][T17880] ? __pfx___se_sys_futex+0x10/0x10 [ 1132.545702][T17880] ? __pfx___se_sys_mount+0x10/0x10 [ 1132.545730][T17880] ? __x64_sys_futex+0x21/0xf0 [ 1132.545753][T17880] do_syscall_64+0x166/0x520 [ 1132.545772][T17880] ? trace_irq_disable+0x3b/0x140 [ 1132.545799][T17880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.545820][T17880] ? clear_bhb_loop+0x70/0xc0 [ 1132.545845][T17880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.545866][T17880] RIP: 0033:0x7fd97c87e159 [ 1132.545887][T17880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1132.545906][T17880] RSP: 002b:00007fd97aad60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1132.545931][T17880] RAX: ffffffffffffffda RBX: 00007fd97cb05fa8 RCX: 00007fd97c87e159 [ 1132.545948][T17880] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd97cb05fac [ 1132.545962][T17880] RBP: 00007fd97cb05fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1132.545977][T17880] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1132.545991][T17880] R13: 00007fd97cb06038 R14: 00007ffde86da2e0 R15: 00007ffde86da3c8 [ 1132.546025][T17880] [ 1133.697491][T17865] NFSD: Failed to start, no listeners configured. [ 1133.707365][ T4920] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1133.708621][ T4920] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1133.965887][ T5254] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1134.070835][T17147] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1134.373137][T17901] ceph: No mds server is up or the cluster is laggy [ 1134.858258][ T5254] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1135.529777][T17941] FAULT_INJECTION: forcing a failure. [ 1135.529777][T17941] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1135.529834][T17941] CPU: 0 UID: 0 PID: 17941 Comm: syz.7.1541 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1135.529860][T17941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1135.529874][T17941] Call Trace: [ 1135.529883][T17941] [ 1135.529893][T17941] dump_stack_lvl+0xe8/0x150 [ 1135.529933][T17941] should_fail_ex+0x46b/0x600 [ 1135.529967][T17941] get_futex_key+0x1b4/0x1580 [ 1135.530015][T17941] ? __pfx_get_futex_key+0x10/0x10 [ 1135.530044][T17941] ? kasan_save_free_info+0x40/0x50 [ 1135.530070][T17941] ? __kasan_slab_free+0x5c/0x80 [ 1135.530099][T17941] ? kfree+0x1c5/0x6d0 [ 1135.530124][T17941] ? __se_sys_mount+0x33b/0x420 [ 1135.530146][T17941] ? do_syscall_64+0x166/0x520 [ 1135.530167][T17941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.530198][T17941] futex_wake+0x119/0x600 [ 1135.530232][T17941] ? __pfx_futex_wake+0x10/0x10 [ 1135.530277][T17941] do_futex+0x458/0x4e0 [ 1135.530306][T17941] ? __pfx_do_futex+0x10/0x10 [ 1135.530329][T17941] ? rcu_is_watching+0x16/0xb0 [ 1135.530368][T17941] __se_sys_futex+0x3a8/0x450 [ 1135.530398][T17941] ? __pfx___se_sys_futex+0x10/0x10 [ 1135.530421][T17941] ? __pfx___se_sys_mount+0x10/0x10 [ 1135.530451][T17941] ? __x64_sys_futex+0x21/0xf0 [ 1135.530476][T17941] do_syscall_64+0x166/0x520 [ 1135.530496][T17941] ? trace_irq_disable+0x3b/0x140 [ 1135.530523][T17941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.530546][T17941] ? clear_bhb_loop+0x70/0xc0 [ 1135.530573][T17941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.530595][T17941] RIP: 0033:0x7f62392ee159 [ 1135.530618][T17941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1135.530637][T17941] RSP: 002b:00007f62375460e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1135.530664][T17941] RAX: ffffffffffffffda RBX: 00007f6239575fa8 RCX: 00007f62392ee159 [ 1135.530683][T17941] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6239575fac [ 1135.530707][T17941] RBP: 00007f6239575fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1135.530723][T17941] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1135.530738][T17941] R13: 00007f6239576038 R14: 00007ffc831cd790 R15: 00007ffc831cd878 [ 1135.530774][T17941] [ 1136.203223][T17894] NFSD: Unable to initialize client recovery tracking! (-110) [ 1136.203247][T17894] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1136.203261][T17894] NFSD: starting 90-second grace period (net f0000a74) [ 1136.486946][ T5254] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1137.571796][ T5716] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1137.627081][ T5716] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1137.740189][T17986] kAFS: unable to lookup cell 'syz0' [ 1137.917179][ T5716] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1138.068911][ T5254] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1138.212887][T17979] ceph: No mds server is up or the cluster is laggy [ 1138.713751][T17962] NFSD: Unable to initialize client recovery tracking! (-110) [ 1138.713776][T17962] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 1138.713789][T17962] NFSD: starting 90-second grace period (net f0000956) [ 1138.810825][T18011] PM: suspend entry (s2idle) [ 1139.595181][ T5254] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1140.915584][ T5254] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1140.943495][T17996] svc: failed to register nfsdv3 RPC service (errno 512). [ 1140.943760][T17996] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1140.943779][T17996] failed to unregister tcp with rpcbind [ 1140.944169][T17996] svc: failed to register nfsdv3 RPC service (errno 97). [ 1140.944190][T17996] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1140.944205][T17996] failed to unregister tcp with rpcbind [ 1141.245168][T18058] FAULT_INJECTION: forcing a failure. [ 1141.245168][T18058] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1141.245224][T18058] CPU: 1 UID: 0 PID: 18058 Comm: syz.7.1554 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1141.245247][T18058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1141.245260][T18058] Call Trace: [ 1141.245268][T18058] [ 1141.245278][T18058] dump_stack_lvl+0xe8/0x150 [ 1141.245314][T18058] should_fail_ex+0x46b/0x600 [ 1141.245348][T18058] get_futex_key+0x1b4/0x1580 [ 1141.245389][T18058] ? __pfx_get_futex_key+0x10/0x10 [ 1141.245416][T18058] ? kasan_save_free_info+0x40/0x50 [ 1141.245440][T18058] ? __kasan_slab_free+0x5c/0x80 [ 1141.245468][T18058] ? kfree+0x1c5/0x6d0 [ 1141.245491][T18058] ? __se_sys_mount+0x33b/0x420 [ 1141.245511][T18058] ? do_syscall_64+0x166/0x520 [ 1141.245532][T18058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.245564][T18058] futex_wake+0x119/0x600 [ 1141.245596][T18058] ? __pfx_futex_wake+0x10/0x10 [ 1141.245637][T18058] do_futex+0x458/0x4e0 [ 1141.245663][T18058] ? __pfx_do_futex+0x10/0x10 [ 1141.245684][T18058] ? rcu_is_watching+0x16/0xb0 [ 1141.245719][T18058] __se_sys_futex+0x3a8/0x450 [ 1141.245746][T18058] ? __pfx___se_sys_futex+0x10/0x10 [ 1141.245768][T18058] ? __pfx___se_sys_mount+0x10/0x10 [ 1141.245796][T18058] ? __x64_sys_futex+0x21/0xf0 [ 1141.245818][T18058] do_syscall_64+0x166/0x520 [ 1141.245837][T18058] ? trace_irq_disable+0x3b/0x140 [ 1141.245862][T18058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.245882][T18058] ? clear_bhb_loop+0x70/0xc0 [ 1141.245908][T18058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.245929][T18058] RIP: 0033:0x7f62392ee159 [ 1141.245950][T18058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1141.245970][T18058] RSP: 002b:00007f62375460e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1141.245994][T18058] RAX: ffffffffffffffda RBX: 00007f6239575fa8 RCX: 00007f62392ee159 [ 1141.246010][T18058] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6239575fac [ 1141.246025][T18058] RBP: 00007f6239575fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1141.246040][T18058] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1141.246141][T18058] R13: 00007f6239576038 R14: 00007ffc831cd790 R15: 00007ffc831cd878 [ 1141.246175][T18058] [ 1141.359153][ T3415] Filesystems sync: 2.536 seconds [ 1142.861078][T18088] PM: suspend entry (s2idle) [ 1142.861098][T18088] PM: suspend exit [ 1143.179037][T18092] FAULT_INJECTION: forcing a failure. [ 1143.179037][T18092] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1143.179081][T18092] CPU: 1 UID: 0 PID: 18092 Comm: syz.9.1573 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1143.179109][T18092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1143.179123][T18092] Call Trace: [ 1143.179134][T18092] [ 1143.179145][T18092] dump_stack_lvl+0xe8/0x150 [ 1143.179188][T18092] should_fail_ex+0x46b/0x600 [ 1143.179225][T18092] get_futex_key+0x1b4/0x1580 [ 1143.179271][T18092] ? __pfx_get_futex_key+0x10/0x10 [ 1143.179302][T18092] ? kasan_save_free_info+0x40/0x50 [ 1143.179329][T18092] ? __kasan_slab_free+0x5c/0x80 [ 1143.179359][T18092] ? kfree+0x1c5/0x6d0 [ 1143.179385][T18092] ? __se_sys_mount+0x3d6/0x420 [ 1143.179407][T18092] ? do_syscall_64+0x166/0x520 [ 1143.179429][T18092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.179464][T18092] futex_wake+0x119/0x600 [ 1143.179495][T18092] ? __pfx_futex_wake+0x10/0x10 [ 1143.179537][T18092] do_futex+0x458/0x4e0 [ 1143.179565][T18092] ? __pfx_do_futex+0x10/0x10 [ 1143.179597][T18092] __se_sys_futex+0x3a8/0x450 [ 1143.179626][T18092] ? __pfx___se_sys_futex+0x10/0x10 [ 1143.179648][T18092] ? __pfx___se_sys_mount+0x10/0x10 [ 1143.179675][T18092] ? __x64_sys_futex+0x21/0xf0 [ 1143.179700][T18092] do_syscall_64+0x166/0x520 [ 1143.179720][T18092] ? trace_irq_disable+0x3b/0x140 [ 1143.179745][T18092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.179766][T18092] ? clear_bhb_loop+0x70/0xc0 [ 1143.179795][T18092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.179817][T18092] RIP: 0033:0x7f1db636e159 [ 1143.179840][T18092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.179859][T18092] RSP: 002b:00007f1db45c60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1143.179887][T18092] RAX: ffffffffffffffda RBX: 00007f1db65f5fa8 RCX: 00007f1db636e159 [ 1143.179904][T18092] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1db65f5fac [ 1143.179920][T18092] RBP: 00007f1db65f5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1143.179937][T18092] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1143.179952][T18092] R13: 00007f1db65f6038 R14: 00007ffce436b800 R15: 00007ffce436b8e8 [ 1143.179998][T18092] [ 1143.643931][T18097] overlayfs: missing 'lowerdir' [ 1143.883511][T18011] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1143.883749][T18011] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1144.457562][T18011] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1144.946516][T18118] loop7: detected capacity change from 0 to 256 [ 1144.984341][T18011] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1144.984496][T18011] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1145.132035][T18011] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1145.764722][T18135] FAULT_INJECTION: forcing a failure. [ 1145.764722][T18135] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1145.764764][T18135] CPU: 1 UID: 0 PID: 18135 Comm: syz.7.1586 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1145.764792][T18135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1145.764806][T18135] Call Trace: [ 1145.764816][T18135] [ 1145.764826][T18135] dump_stack_lvl+0xe8/0x150 [ 1145.764867][T18135] should_fail_ex+0x46b/0x600 [ 1145.764903][T18135] get_futex_key+0x1b4/0x1580 [ 1145.764950][T18135] ? __pfx_get_futex_key+0x10/0x10 [ 1145.764979][T18135] ? kasan_save_free_info+0x40/0x50 [ 1145.765002][T18135] ? __kasan_slab_free+0x5c/0x80 [ 1145.765031][T18135] ? kfree+0x1c5/0x6d0 [ 1145.765067][T18135] ? __se_sys_mount+0x3d6/0x420 [ 1145.765089][T18135] ? do_syscall_64+0x166/0x520 [ 1145.765110][T18135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.765142][T18135] futex_wake+0x119/0x600 [ 1145.765173][T18135] ? __pfx_futex_wake+0x10/0x10 [ 1145.765218][T18135] do_futex+0x458/0x4e0 [ 1145.765245][T18135] ? __pfx_do_futex+0x10/0x10 [ 1145.765274][T18135] __se_sys_futex+0x3a8/0x450 [ 1145.765303][T18135] ? __pfx___se_sys_futex+0x10/0x10 [ 1145.765325][T18135] ? __pfx___se_sys_mount+0x10/0x10 [ 1145.765353][T18135] ? __x64_sys_futex+0x21/0xf0 [ 1145.765378][T18135] do_syscall_64+0x166/0x520 [ 1145.765398][T18135] ? trace_irq_disable+0x3b/0x140 [ 1145.765425][T18135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.765448][T18135] ? clear_bhb_loop+0x70/0xc0 [ 1145.765475][T18135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.765498][T18135] RIP: 0033:0x7f62392ee159 [ 1145.765522][T18135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.765542][T18135] RSP: 002b:00007f62375460e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1145.765568][T18135] RAX: ffffffffffffffda RBX: 00007f6239575fa8 RCX: 00007f62392ee159 [ 1145.765585][T18135] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6239575fac [ 1145.765601][T18135] RBP: 00007f6239575fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1145.765617][T18135] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1145.765633][T18135] R13: 00007f6239576038 R14: 00007ffc831cd790 R15: 00007ffc831cd878 [ 1145.765670][T18135] [ 1145.777975][ T5597] Bluetooth: hci5: command 0x0c1a tx timeout [ 1146.035784][T18011] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1146.035931][T18011] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1146.164494][T18011] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1146.284841][T18139] overlayfs: missing 'lowerdir' [ 1146.320875][T18011] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1146.320983][T18011] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1146.479149][T18011] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1146.547097][ T13] hsr_slave_0: left promiscuous mode [ 1146.559392][T18011] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 1146.559508][T18011] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1146.604722][ T13] hsr_slave_1: left promiscuous mode [ 1146.606110][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1146.606140][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1146.692146][T18011] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1146.699412][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1146.699465][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.881427][T18011] Freezing user space processes [ 1147.063211][ T5597] Bluetooth: hci6: command 0x0c1a tx timeout [ 1147.099153][ T13] hsr_slave_0: left promiscuous mode [ 1147.133583][ T13] hsr_slave_1: left promiscuous mode [ 1147.134426][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1147.134445][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1147.156943][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1147.156972][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1147.317680][ T13] hsr_slave_0: left promiscuous mode [ 1147.334865][ T13] hsr_slave_1: left promiscuous mode [ 1147.336308][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1147.336337][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1147.393889][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1147.393913][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1147.595170][ T13] hsr_slave_0: left promiscuous mode [ 1147.634135][ T13] hsr_slave_1: left promiscuous mode [ 1147.635012][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1147.635031][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1147.677908][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1147.677940][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1147.853524][ T5597] Bluetooth: hci5: command 0x0c1a tx timeout [ 1147.880141][ T13] veth1_macvtap: left promiscuous mode [ 1147.880227][ T13] veth0_macvtap: left promiscuous mode [ 1147.880481][ T13] veth1_vlan: left promiscuous mode [ 1147.880645][ T13] veth0_vlan: left promiscuous mode [ 1147.997176][ T13] veth1_macvtap: left promiscuous mode [ 1147.997249][ T13] veth0_macvtap: left promiscuous mode [ 1147.997410][ T13] veth1_vlan: left promiscuous mode [ 1147.997526][ T13] veth0_vlan: left promiscuous mode [ 1148.091641][ T13] veth1_macvtap: left promiscuous mode [ 1148.091717][ T13] veth0_macvtap: left promiscuous mode [ 1148.091876][ T13] veth1_vlan: left promiscuous mode [ 1148.091998][ T13] veth0_vlan: left promiscuous mode [ 1148.103139][ T5597] Bluetooth: hci7: command 0x0c1a tx timeout [ 1148.230977][ T13] veth1_macvtap: left promiscuous mode [ 1148.231047][ T13] veth0_macvtap: left promiscuous mode [ 1148.231220][ T13] veth1_vlan: left promiscuous mode [ 1148.231334][ T13] veth0_vlan: left promiscuous mode [ 1148.333152][ T5597] Bluetooth: hci8: command 0x0c1a tx timeout [ 1148.573214][ T5597] Bluetooth: hci9: command 0x0c1a tx timeout [ 1149.133147][ T5597] Bluetooth: hci6: command 0x0c1a tx timeout [ 1149.455839][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1149.543931][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1149.933349][ T5597] Bluetooth: hci5: command 0x0c1a tx timeout [ 1150.173179][ T5597] Bluetooth: hci7: command 0x0c1a tx timeout [ 1150.343836][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1150.403751][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1150.413068][ T5597] Bluetooth: hci8: command 0x0c1a tx timeout [ 1150.653305][ T5597] Bluetooth: hci9: command 0x0c1a tx timeout [ 1151.213582][ T5597] Bluetooth: hci6: command 0x0c1a tx timeout [ 1151.235078][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1151.283623][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1152.113569][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1152.156252][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1152.253037][ T5597] Bluetooth: hci7: command 0x0c1a tx timeout [ 1152.493227][ T5597] Bluetooth: hci8: command 0x0c1a tx timeout [ 1152.733443][ T5597] Bluetooth: hci9: command 0x0c1a tx timeout [ 1166.898176][T18011] Freezing user space processes failed after 20.006 seconds (3 tasks refusing to freeze, wq_busy=0): [ 1166.898291][T18011] task:syz.5.1550 state:D stack:25064 pid:17994 tgid:17993 ppid:16984 task_flags:0x480140 flags:0x00080002 [ 1166.898330][T18011] Call Trace: [ 1166.898335][T18011] [ 1166.898346][T18011] __schedule+0x16d9/0x5700 [ 1166.898422][T18011] ? __lock_acquire+0x747/0x2de0 [ 1166.898448][T18011] ? ktime_get+0x45/0x220 [ 1166.898471][T18011] ? __pfx___schedule+0x10/0x10 [ 1166.898502][T18011] ? lock_acquire+0x115/0x350 [ 1166.898524][T18011] ? schedule+0x90/0x2b0 [ 1166.898544][T18011] schedule+0x164/0x2b0 [ 1166.898562][T18011] schedule_timeout+0xc0/0x2c0 [ 1166.898613][T18011] ? __pfx_schedule_timeout+0x10/0x10 [ 1166.898633][T18011] ? wait_for_completion+0x272/0x5e0 [ 1166.900193][T18011] ? wait_for_completion+0x272/0x5e0 [ 1166.900214][T18011] wait_for_completion+0x2ca/0x5e0 [ 1166.900240][T18011] ? __pfx_wait_for_completion+0x10/0x10 [ 1166.900269][T18011] ? remove_one+0x2d5/0x3b0 [ 1166.900301][T18011] remove_one+0x2df/0x3b0 [ 1166.900319][T18011] ? __pfx_remove_one+0x10/0x10 [ 1166.900335][T18011] __simple_recursive_removal+0x215/0x520 [ 1166.900356][T18011] ? __pfx_remove_one+0x10/0x10 [ 1166.900374][T18011] debugfs_remove+0x5b/0x70 [ 1166.900389][T18011] nsim_dev_health_exit+0x41/0xc0 [ 1166.900476][T18011] nsim_dev_reload_destroy+0x2bf/0x490 [ 1166.900489][T18011] ? nsim_drv_remove+0x50/0x160 [ 1166.900504][T18011] nsim_drv_remove+0x58/0x160 [ 1166.900518][T18011] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1166.900534][T18011] device_release_driver_internal+0x48b/0x880 [ 1166.900591][T18011] bus_remove_device+0x449/0x560 [ 1166.900625][T18011] ? __pfx_bus_remove_device+0x10/0x10 [ 1166.900642][T18011] ? up_read+0x34/0x180 [ 1166.900655][T18011] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1166.900692][T18011] device_del+0x528/0x8f0 [ 1166.900730][T18011] ? __pfx_device_del+0x10/0x10 [ 1166.900749][T18011] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1166.900775][T18011] device_unregister+0x21/0xf0 [ 1166.900793][T18011] del_device_store+0x2b5/0x370 [ 1166.900813][T18011] ? __pfx_del_device_store+0x10/0x10 [ 1166.900831][T18011] ? sysfs_file_kobj+0x1e4/0x230 [ 1166.900845][T18011] ? sysfs_kf_write+0x166/0x260 [ 1166.900861][T18011] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1166.900874][T18011] kernfs_fop_write_iter+0x3a5/0x540 [ 1166.900896][T18011] vfs_write+0x61e/0xbb0 [ 1166.900917][T18011] ? __pfx_vfs_write+0x10/0x10 [ 1166.900934][T18011] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1166.900955][T18011] ? mutex_lock_nested+0x152/0x1d0 [ 1166.900969][T18011] ? fdget_pos+0x252/0x320 [ 1166.900989][T18011] ksys_write+0x156/0x270 [ 1166.901006][T18011] ? __pfx_ksys_write+0x10/0x10 [ 1166.901029][T18011] do_syscall_64+0x166/0x520 [ 1166.901040][T18011] ? trace_irq_disable+0x3b/0x140 [ 1166.901056][T18011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.901069][T18011] ? clear_bhb_loop+0x70/0xc0 [ 1166.901085][T18011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.901100][T18011] RIP: 0033:0x7f4ade55e159 [ 1166.901114][T18011] RSP: 002b:00007f4adc7b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1166.901135][T18011] RAX: ffffffffffffffda RBX: 00007f4ade7e5fa0 RCX: 00007f4ade55e159 [ 1166.901145][T18011] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 1166.901153][T18011] RBP: 00007f4ade5f506b R08: 0000000000000000 R09: 0000000000000000 [ 1166.901162][T18011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1166.901170][T18011] R13: 00007f4ade7e6038 R14: 00007f4ade7e5fa0 R15: 00007ffcd5e126e8 [ 1166.901191][T18011] [ 1166.901202][T18011] task:syz.8.1565 state:D stack:28512 pid:18072 tgid:18069 ppid:17048 task_flags:0x400140 flags:0x00080002 [ 1166.901238][T18011] Call Trace: [ 1166.901243][T18011] [ 1166.901251][T18011] __schedule+0x16d9/0x5700 [ 1166.901288][T18011] ? __pfx___schedule+0x10/0x10 [ 1166.901306][T18011] ? trace_irq_disable+0x3b/0x140 [ 1166.901324][T18011] ? __pfx___schedule+0x10/0x10 [ 1166.901351][T18011] rt_mutex_schedule+0x76/0xf0 [ 1166.901368][T18011] rt_mutex_slowlock_block+0x55e/0x690 [ 1166.901389][T18011] ? rt_mutex_slowlock_block+0x33c/0x690 [ 1166.901407][T18011] rt_mutex_slowlock+0x2d4/0x780 [ 1166.901423][T18011] ? rt_mutex_slowlock+0x1f2/0x780 [ 1166.901439][T18011] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1166.901468][T18011] ? devlink_health_report+0x305/0xb20 [ 1166.901530][T18011] ? devlink_health_report+0x305/0xb20 [ 1166.901544][T18011] mutex_lock_nested+0x168/0x1d0 [ 1166.901563][T18011] devlink_health_report+0x305/0xb20 [ 1166.901585][T18011] nsim_dev_health_break_write+0x197/0x240 [ 1166.901609][T18011] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1166.931805][T18011] full_proxy_write+0x127/0x1f0 [ 1166.931837][T18011] ? __pfx_full_proxy_write+0x10/0x10 [ 1166.931855][T18011] vfs_write+0x29f/0xbb0 [ 1166.931876][T18011] ? __pfx_vfs_write+0x10/0x10 [ 1166.931892][T18011] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1166.931913][T18011] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1166.931931][T18011] ? mutex_lock_nested+0x152/0x1d0 [ 1166.931945][T18011] ? fdget_pos+0x252/0x320 [ 1166.931965][T18011] ksys_write+0x156/0x270 [ 1166.931982][T18011] ? __pfx_ksys_write+0x10/0x10 [ 1166.932004][T18011] do_syscall_64+0x166/0x520 [ 1166.932016][T18011] ? trace_irq_disable+0x3b/0x140 [ 1166.932032][T18011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.932045][T18011] ? clear_bhb_loop+0x70/0xc0 [ 1166.932061][T18011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.932075][T18011] RIP: 0033:0x7fd97c87e159 [ 1166.932088][T18011] RSP: 002b:00007fd97aad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1166.932103][T18011] RAX: ffffffffffffffda RBX: 00007fd97cb05fa0 RCX: 00007fd97c87e159 [ 1166.932113][T18011] RDX: 0000000000000006 RSI: 0000200000000300 RDI: 0000000000000003 [ 1166.932122][T18011] RBP: 00007fd97c91506b R08: 0000000000000000 R09: 0000000000000000 [ 1166.932130][T18011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1166.932139][T18011] R13: 00007fd97cb06038 R14: 00007fd97cb05fa0 R15: 00007ffde86da3c8 [ 1166.932160][T18011] [ 1166.932172][T18011] task:syz.9.1591 state:D stack:28456 pid:18153 tgid:18152 ppid:17055 task_flags:0x400140 flags:0x00080002 [ 1166.932207][T18011] Call Trace: [ 1166.932213][T18011] [ 1166.932221][T18011] __schedule+0x16d9/0x5700 [ 1166.932258][T18011] ? __pfx___schedule+0x10/0x10 [ 1166.932292][T18011] rt_mutex_schedule+0x76/0xf0 [ 1166.932308][T18011] rt_mutex_slowlock_block+0x55e/0x690 [ 1166.932330][T18011] ? rt_mutex_slowlock_block+0x33c/0x690 [ 1166.932347][T18011] rt_mutex_slowlock+0x2d4/0x780 [ 1166.932364][T18011] ? rt_mutex_slowlock+0x1f2/0x780 [ 1166.932380][T18011] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1166.932410][T18011] ? del_device_store+0xd6/0x370 [ 1166.932431][T18011] ? del_device_store+0xd6/0x370 [ 1166.932447][T18011] mutex_lock_nested+0x168/0x1d0 [ 1166.932461][T18011] ? sysfs_file_kobj+0x1a/0x230 [ 1166.932477][T18011] del_device_store+0xd6/0x370 [ 1166.932495][T18011] ? sysfs_file_kobj+0x1a/0x230 [ 1166.932507][T18011] ? __pfx_del_device_store+0x10/0x10 [ 1166.932525][T18011] ? sysfs_file_kobj+0x1e4/0x230 [ 1166.932539][T18011] ? sysfs_kf_write+0x166/0x260 [ 1166.932555][T18011] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1166.932567][T18011] kernfs_fop_write_iter+0x3a5/0x540 [ 1166.932590][T18011] vfs_write+0x61e/0xbb0 [ 1166.932610][T18011] ? __pfx_vfs_write+0x10/0x10 [ 1166.932629][T18011] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1166.932650][T18011] ? mutex_lock_nested+0x152/0x1d0 [ 1166.932666][T18011] ? fdget_pos+0x252/0x320 [ 1166.932685][T18011] ksys_write+0x156/0x270 [ 1166.932701][T18011] ? __pfx_ksys_write+0x10/0x10 [ 1166.932723][T18011] do_syscall_64+0x166/0x520 [ 1166.932734][T18011] ? trace_irq_disable+0x3b/0x140 [ 1166.932749][T18011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.932762][T18011] ? clear_bhb_loop+0x70/0xc0 [ 1166.932777][T18011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.932789][T18011] RIP: 0033:0x7f1db636e159 [ 1166.932801][T18011] RSP: 002b:00007f1db45c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1166.932814][T18011] RAX: ffffffffffffffda RBX: 00007f1db65f5fa0 RCX: 00007f1db636e159 [ 1166.932823][T18011] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000003 [ 1166.932831][T18011] RBP: 00007f1db640506b R08: 0000000000000000 R09: 0000000000000000 [ 1166.932839][T18011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1166.932847][T18011] R13: 00007f1db65f6038 R14: 00007f1db65f5fa0 R15: 00007ffce436b8e8 [ 1166.932868][T18011] [ 1167.017931][T18011] OOM killer enabled. [ 1167.017946][T18011] Restarting tasks: Starting [ 1167.089604][T18011] Restarting tasks: Done [ 1167.160240][T18011] random: crng reseeded on system resumption [ 1167.459565][T18011] PM: suspend exit [ 1168.310655][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1168.350225][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1168.360523][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1168.380772][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1168.390752][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1168.859892][ T5597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1168.902852][ T5597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1168.930676][ T5597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1168.952884][ T5597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1168.957151][ T5597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1169.510299][ T5599] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1169.568798][ T5599] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1169.583321][ T5599] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1169.630501][ T5599] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1169.640471][ T5599] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1169.782460][T16987] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1169.912692][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1169.939593][ T5597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1169.993846][T18195] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1170.022834][T18195] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1170.230976][ T5597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1170.312251][ T5597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1170.331962][ T5597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1170.341043][ T5597] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1170.349313][ T5597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1170.576776][T16987] Bluetooth: hci0: command tx timeout [ 1171.133150][ T5597] Bluetooth: hci1: command tx timeout [ 1172.093162][ T5597] Bluetooth: hci3: command tx timeout [ 1172.253096][ T5597] Bluetooth: hci2: command tx timeout [ 1172.653481][ T5597] Bluetooth: hci0: command tx timeout [ 1172.653549][ T5597] Bluetooth: hci4: command tx timeout [ 1172.704923][T14798] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.243095][ T5597] Bluetooth: hci1: command tx timeout [ 1173.699589][T14798] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.173578][ T5597] Bluetooth: hci3: command tx timeout [ 1174.245195][T14798] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.333128][ T5597] Bluetooth: hci2: command tx timeout [ 1174.668781][T14798] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.735420][ T5597] Bluetooth: hci0: command tx timeout [ 1174.735461][ T5597] Bluetooth: hci4: command tx timeout [ 1175.293112][T16987] Bluetooth: hci1: command tx timeout [ 1176.163501][T14798] bridge_slave_1: left allmulticast mode [ 1176.163531][T14798] bridge_slave_1: left promiscuous mode [ 1176.163772][T14798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.253150][T16987] Bluetooth: hci3: command tx timeout [ 1176.339582][T14798] bridge_slave_0: left allmulticast mode [ 1176.339613][T14798] bridge_slave_0: left promiscuous mode [ 1176.339777][T14798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.413212][T16987] Bluetooth: hci2: command tx timeout [ 1176.813171][T16987] Bluetooth: hci4: command tx timeout [ 1176.813192][ T5597] Bluetooth: hci0: command tx timeout [ 1177.274142][T14798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1177.353677][T14798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1177.373088][T16987] Bluetooth: hci1: command tx timeout [ 1177.375289][T14798] bond0 (unregistering): Released all slaves [ 1177.633744][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.633824][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.333221][T16987] Bluetooth: hci3: command tx timeout [ 1178.493139][T16987] Bluetooth: hci2: command tx timeout [ 1178.536887][T18173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.537029][T18173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.537164][T18173] bridge_slave_0: entered allmulticast mode [ 1178.538819][T18173] bridge_slave_0: entered promiscuous mode [ 1178.821898][T18173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.821979][T18173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.822111][T18173] bridge_slave_1: entered allmulticast mode [ 1178.845392][T18173] bridge_slave_1: entered promiscuous mode [ 1178.893298][T16987] Bluetooth: hci4: command tx timeout [ 1179.101085][T18179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.101221][T18179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.101536][T18179] bridge_slave_0: entered allmulticast mode [ 1179.104151][T18179] bridge_slave_0: entered promiscuous mode [ 1179.116298][T18173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1179.165629][T18179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.165727][T18179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.165840][T18179] bridge_slave_1: entered allmulticast mode [ 1179.167561][T18179] bridge_slave_1: entered promiscuous mode [ 1179.170978][T18173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.323207][T14798] hsr_slave_0: left promiscuous mode [ 1179.343274][T14798] hsr_slave_1: left promiscuous mode [ 1179.344180][T14798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1179.344200][T14798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1179.404991][T14798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1179.405017][T14798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1179.475195][T14798] veth1_macvtap: left promiscuous mode [ 1179.475320][T14798] veth0_macvtap: left promiscuous mode [ 1179.475612][T14798] veth1_vlan: left promiscuous mode [ 1179.475840][T14798] veth0_vlan: left promiscuous mode [ 1180.363880][T14798] team0 (unregistering): Port device team_slave_1 removed [ 1180.406835][T14798] team0 (unregistering): Port device team_slave_0 removed [ 1180.827850][T18186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.828013][T18186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.828206][T18186] bridge_slave_0: entered allmulticast mode [ 1180.831376][T18186] bridge_slave_0: entered promiscuous mode [ 1180.901162][T18179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1180.914892][T18173] team0: Port device team_slave_0 added [ 1180.915197][T18186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.915429][T18186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.915623][T18186] bridge_slave_1: entered allmulticast mode [ 1180.918470][T18186] bridge_slave_1: entered promiscuous mode [ 1180.961967][T18185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.962112][T18185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.962295][T18185] bridge_slave_0: entered allmulticast mode [ 1180.986932][T18185] bridge_slave_0: entered promiscuous mode [ 1181.004847][T18179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.006967][T18173] team0: Port device team_slave_1 added [ 1181.034218][T18191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.034343][T18191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.034481][T18191] bridge_slave_0: entered allmulticast mode [ 1181.036149][T18191] bridge_slave_0: entered promiscuous mode [ 1181.037979][T18185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.038126][T18185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.038312][T18185] bridge_slave_1: entered allmulticast mode [ 1181.041593][T18185] bridge_slave_1: entered promiscuous mode [ 1181.244702][T18191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.244843][T18191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.246337][T18191] bridge_slave_1: entered allmulticast mode [ 1181.328520][T18191] bridge_slave_1: entered promiscuous mode [ 1181.525170][T18186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.590838][T18179] team0: Port device team_slave_0 added [ 1181.594798][T18173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.594816][T18173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.594842][T18173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.620003][T18186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.668885][T18185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.678784][T18179] team0: Port device team_slave_1 added [ 1181.681612][T18173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1181.681629][T18173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.681655][T18173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.763317][T18191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.770614][T18185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1182.102579][T18191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1182.483920][T18186] team0: Port device team_slave_0 added [ 1182.516092][ T5254] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1182.520440][T18179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.520454][T18179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.520470][T18179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.527642][T18186] team0: Port device team_slave_1 added [ 1182.583999][T18185] team0: Port device team_slave_0 added [ 1182.635102][T18179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.635123][T18179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.635152][T18179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.741317][T18191] team0: Port device team_slave_0 added [ 1182.753992][T18185] team0: Port device team_slave_1 added [ 1182.863235][T18191] team0: Port device team_slave_1 added [ 1182.947804][T18173] hsr_slave_0: entered promiscuous mode [ 1182.948676][T18173] hsr_slave_1: entered promiscuous mode [ 1182.951707][T18186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.951718][T18186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.951735][T18186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.004155][T18186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.004173][T18186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.004199][T18186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1183.027952][T18185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.027971][T18185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.027996][T18185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.103800][T18191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.103822][T18191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.103850][T18191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.142680][T18185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.142701][T18185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.142728][T18185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1183.196163][T18191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.196180][T18191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.196208][T18191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1183.243702][T18179] hsr_slave_0: entered promiscuous mode [ 1183.245163][T18179] hsr_slave_1: entered promiscuous mode [ 1183.246108][T18179] debugfs: 'hsr0' already exists in 'hsr' [ 1183.246132][T18179] Cannot create hsr debugfs directory [ 1183.520353][T18186] hsr_slave_0: entered promiscuous mode [ 1183.521190][T18186] hsr_slave_1: entered promiscuous mode [ 1183.521805][T18186] debugfs: 'hsr0' already exists in 'hsr' [ 1183.521828][T18186] Cannot create hsr debugfs directory [ 1183.668020][T18185] hsr_slave_0: entered promiscuous mode [ 1183.668865][T18185] hsr_slave_1: entered promiscuous mode [ 1183.669435][T18185] debugfs: 'hsr0' already exists in 'hsr' [ 1183.669457][T18185] Cannot create hsr debugfs directory [ 1183.750077][T18191] hsr_slave_0: entered promiscuous mode [ 1183.751023][T18191] hsr_slave_1: entered promiscuous mode [ 1183.751593][T18191] debugfs: 'hsr0' already exists in 'hsr' [ 1183.751615][T18191] Cannot create hsr debugfs directory [ 1184.700477][T14798] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.925421][ T5254] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1185.179589][T14798] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.578190][T14798] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.032251][T14798] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.272786][ T5254] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1187.008712][T14798] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.100715][ T5254] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1187.784509][T14798] bridge_slave_1: left allmulticast mode [ 1187.784551][T14798] bridge_slave_1: left promiscuous mode [ 1187.784847][T14798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.929315][T14798] bridge_slave_0: left allmulticast mode [ 1187.929360][T14798] bridge_slave_0: left promiscuous mode [ 1187.929641][T14798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.844179][T14798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1188.903990][T14798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1188.946880][T14798] bond0 (unregistering): Released all slaves [ 1188.966933][ T5254] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1189.865905][ T5254] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1190.430720][ T5254] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1190.826182][T14798] hsr_slave_0: left promiscuous mode [ 1190.863114][T14798] hsr_slave_1: left promiscuous mode [ 1190.864678][T14798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1190.864708][T14798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1190.924296][T14798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1190.924329][T14798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1191.094523][T14798] veth1_macvtap: left promiscuous mode [ 1191.094600][T14798] veth0_macvtap: left promiscuous mode [ 1191.094766][T14798] veth1_vlan: left promiscuous mode [ 1191.094878][T14798] veth0_vlan: left promiscuous mode [ 1191.939888][T14798] team0 (unregistering): Port device team_slave_1 removed [ 1191.984584][T14798] team0 (unregistering): Port device team_slave_0 removed [ 1192.187685][ T5254] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1192.911955][ T5254] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1228.367051][ T5597] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1228.436094][ T5597] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1228.438800][ T5597] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1228.480864][ T5597] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1228.499929][ T5597] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1228.901291][ T5597] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1228.935179][ T5597] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1228.939898][ T5597] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1228.972831][ T5597] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1228.975973][ T5597] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1229.270107][T16987] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1229.323803][T16987] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1229.328957][T16987] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1229.330651][T16987] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1229.331934][T16987] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1230.039263][T16987] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1230.142720][T16987] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1230.157924][T16987] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1230.172353][T16987] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1230.181842][T16987] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1230.528049][ T5597] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1230.646882][ T5597] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1230.659725][ T5597] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1230.696745][ T5597] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1230.697557][ T5597] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1230.759638][T18195] Bluetooth: hci6: command tx timeout [ 1231.293371][T16987] Bluetooth: hci7: command tx timeout [ 1231.703256][T16987] Bluetooth: hci10: command tx timeout [ 1232.333226][T16987] Bluetooth: hci11: command tx timeout [ 1232.754739][T18729] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.754884][T18729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.758607][T18729] bridge_slave_0: entered allmulticast mode [ 1232.761794][T18729] bridge_slave_0: entered promiscuous mode [ 1232.815615][T16987] Bluetooth: hci6: command tx timeout [ 1232.867621][T18729] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.867720][T18729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.867862][T18729] bridge_slave_1: entered allmulticast mode [ 1232.869504][T18729] bridge_slave_1: entered promiscuous mode [ 1232.893136][T16987] Bluetooth: hci12: command tx timeout [ 1233.071211][T18729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1233.159556][T18729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1233.159841][T18733] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.160069][T18733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.160275][T18733] bridge_slave_0: entered allmulticast mode [ 1233.161865][T18733] bridge_slave_0: entered promiscuous mode [ 1233.319702][T18733] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.319809][T18733] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.319930][T18733] bridge_slave_1: entered allmulticast mode [ 1233.321577][T18733] bridge_slave_1: entered promiscuous mode [ 1233.373042][T16987] Bluetooth: hci7: command tx timeout [ 1233.514111][T18729] team0: Port device team_slave_0 added [ 1233.567298][T18729] team0: Port device team_slave_1 added [ 1233.606061][T18733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1233.664151][T18733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1233.756422][T18729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1233.756437][T18729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1233.756453][T18729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1233.783058][T16987] Bluetooth: hci10: command tx timeout [ 1233.844755][T18737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.844905][T18737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.845023][T18737] bridge_slave_0: entered allmulticast mode [ 1233.846656][T18737] bridge_slave_0: entered promiscuous mode [ 1233.848881][T18729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1233.848898][T18729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1233.848928][T18729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1233.893397][T18733] team0: Port device team_slave_0 added [ 1233.932768][T18737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.947085][T18737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.947264][T18737] bridge_slave_1: entered allmulticast mode [ 1233.948902][T18737] bridge_slave_1: entered promiscuous mode [ 1233.976195][T18733] team0: Port device team_slave_1 added [ 1234.098477][T18737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1234.151039][T18733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1234.151057][T18733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1234.151074][T18733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1234.209506][T18737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1234.240481][T18733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1234.240503][T18733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1234.240534][T18733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1234.322577][T18729] hsr_slave_0: entered promiscuous mode [ 1234.324363][T18729] hsr_slave_1: entered promiscuous mode [ 1234.325436][T18729] debugfs: 'hsr0' already exists in 'hsr' [ 1234.325462][T18729] Cannot create hsr debugfs directory [ 1234.326492][T18751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.326619][T18751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.326821][T18751] bridge_slave_0: entered allmulticast mode [ 1234.330000][T18751] bridge_slave_0: entered promiscuous mode [ 1234.413250][T16987] Bluetooth: hci11: command tx timeout [ 1234.581843][T18751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.582622][T18751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.582741][T18751] bridge_slave_1: entered allmulticast mode [ 1234.586210][T18751] bridge_slave_1: entered promiscuous mode [ 1234.590175][T18756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.590301][T18756] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.590501][T18756] bridge_slave_0: entered allmulticast mode [ 1234.597786][T18756] bridge_slave_0: entered promiscuous mode [ 1234.618214][T18737] team0: Port device team_slave_0 added [ 1234.644480][T18756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.644574][T18756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.644689][T18756] bridge_slave_1: entered allmulticast mode [ 1234.646453][T18756] bridge_slave_1: entered promiscuous mode [ 1234.691057][T18737] team0: Port device team_slave_1 added [ 1234.769314][T18751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1234.854654][T18751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1234.860422][T18733] hsr_slave_0: entered promiscuous mode [ 1234.861499][T18733] hsr_slave_1: entered promiscuous mode [ 1234.862092][T18733] debugfs: 'hsr0' already exists in 'hsr' [ 1234.862115][T18733] Cannot create hsr debugfs directory [ 1234.893149][T16987] Bluetooth: hci6: command tx timeout [ 1234.909092][T18756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1234.936809][T18737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1234.936826][T18737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1234.936842][T18737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1234.973263][T16987] Bluetooth: hci12: command tx timeout [ 1235.013028][T18756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1235.022175][T18737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.022195][T18737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.022222][T18737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1235.140906][T18751] team0: Port device team_slave_0 added [ 1235.183226][T18751] team0: Port device team_slave_1 added [ 1235.192062][T18756] team0: Port device team_slave_0 added [ 1235.267933][T18756] team0: Port device team_slave_1 added [ 1235.361078][T18751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1235.361099][T18751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.361134][T18751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.442788][T18737] hsr_slave_0: entered promiscuous mode [ 1235.444679][T18737] hsr_slave_1: entered promiscuous mode [ 1235.445862][T18737] debugfs: 'hsr0' already exists in 'hsr' [ 1235.445887][T18737] Cannot create hsr debugfs directory [ 1235.447741][T18751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.447755][T18751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.447781][T18751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1235.463144][T16987] Bluetooth: hci7: command tx timeout [ 1235.804200][T18756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1235.804221][T18756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.804238][T18756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.847156][T18756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.847175][T18756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.847202][T18756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1235.853341][T16987] Bluetooth: hci10: command tx timeout [ 1236.072377][T18751] hsr_slave_0: entered promiscuous mode [ 1236.079168][T18751] hsr_slave_1: entered promiscuous mode [ 1236.080431][T18751] debugfs: 'hsr0' already exists in 'hsr' [ 1236.080455][T18751] Cannot create hsr debugfs directory [ 1236.150275][T18756] hsr_slave_0: entered promiscuous mode [ 1236.151136][T18756] hsr_slave_1: entered promiscuous mode [ 1236.151723][T18756] debugfs: 'hsr0' already exists in 'hsr' [ 1236.151745][T18756] Cannot create hsr debugfs directory [ 1236.493343][T16987] Bluetooth: hci11: command tx timeout [ 1236.973170][T16987] Bluetooth: hci6: command tx timeout [ 1237.053207][T16987] Bluetooth: hci12: command tx timeout [ 1237.533110][T16987] Bluetooth: hci7: command tx timeout [ 1237.933282][T16987] Bluetooth: hci10: command tx timeout [ 1238.573095][T16987] Bluetooth: hci11: command tx timeout [ 1239.057272][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.057355][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.134630][T16987] Bluetooth: hci12: command tx timeout [ 1288.549858][ T5597] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1288.599085][ T5599] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1288.647222][ T5599] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1288.742432][ T5599] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1288.759143][ T5599] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1288.759969][ T5599] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1288.867634][ T5599] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1288.894816][ T5599] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1288.897600][ T5599] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1288.898545][ T5599] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1289.726894][ T5599] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1289.786031][ T5599] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1289.791311][ T5599] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1289.805090][ T5599] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1289.805901][ T5599] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1290.770163][T16986] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1290.861652][T16986] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1290.871715][T16986] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1290.886444][T16986] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1290.891333][T16986] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1291.121842][T18863] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1291.186371][T18863] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1291.192220][T18863] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1291.213211][T18863] Bluetooth: hci14: command tx timeout [ 1291.217397][T18863] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1291.244448][T18863] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1291.405347][T18863] Bluetooth: hci13: command tx timeout [ 1291.933082][T18857] Bluetooth: hci15: command tx timeout [ 1292.413239][T18857] Bluetooth: hci0: command 0x0406 tx timeout [ 1292.413405][T18848] Bluetooth: hci3: command 0x0406 tx timeout [ 1292.413431][T18857] Bluetooth: hci1: command 0x0406 tx timeout [ 1292.432194][T18863] Bluetooth: hci2: command 0x0406 tx timeout [ 1293.144666][T16987] Bluetooth: hci16: command tx timeout [ 1293.293531][T16987] Bluetooth: hci14: command tx timeout [ 1293.375241][T16987] Bluetooth: hci17: command tx timeout [ 1293.453061][T16987] Bluetooth: hci13: command tx timeout [ 1293.604243][T18827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.604399][T18827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.604544][T18827] bridge_slave_0: entered allmulticast mode [ 1293.611223][T18827] bridge_slave_0: entered promiscuous mode [ 1293.676353][T18827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.676498][T18827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.676708][T18827] bridge_slave_1: entered allmulticast mode [ 1293.678431][T18827] bridge_slave_1: entered promiscuous mode [ 1293.831489][T18827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.870478][T18827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.975705][T18826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.975927][T18826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.976537][T18826] bridge_slave_0: entered allmulticast mode [ 1293.979056][T18826] bridge_slave_0: entered promiscuous mode [ 1294.020610][T18827] team0: Port device team_slave_0 added [ 1294.024656][T16987] Bluetooth: hci15: command tx timeout [ 1294.035774][T18826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.036312][T18826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.036587][T18826] bridge_slave_1: entered allmulticast mode [ 1294.039944][T18826] bridge_slave_1: entered promiscuous mode [ 1294.071106][T18827] team0: Port device team_slave_1 added [ 1294.250899][T18826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.251980][T18827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1294.251997][T18827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.252025][T18827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1294.335778][T18826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1294.484848][T18827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1294.484867][T18827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.484884][T18827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.682745][T18826] team0: Port device team_slave_0 added [ 1294.768317][T18826] team0: Port device team_slave_1 added [ 1294.870345][T18827] hsr_slave_0: entered promiscuous mode [ 1294.871962][T18827] hsr_slave_1: entered promiscuous mode [ 1294.873354][T18827] debugfs: 'hsr0' already exists in 'hsr' [ 1294.873379][T18827] Cannot create hsr debugfs directory [ 1294.940733][T18826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1294.940752][T18826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.940769][T18826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1295.002584][T18826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1295.002599][T18826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1295.002615][T18826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1295.105233][T18838] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.105365][T18838] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.105496][T18838] bridge_slave_0: entered allmulticast mode [ 1295.107202][T18838] bridge_slave_0: entered promiscuous mode [ 1295.171903][T18838] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.171989][T18838] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.172119][T18838] bridge_slave_1: entered allmulticast mode [ 1295.176221][T18838] bridge_slave_1: entered promiscuous mode [ 1295.213211][T16987] Bluetooth: hci16: command tx timeout [ 1295.371530][T18838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1295.371803][T18853] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.372017][T18853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.372239][T18853] bridge_slave_0: entered allmulticast mode [ 1295.388372][ T5599] Bluetooth: hci14: command tx timeout [ 1295.390460][T18853] bridge_slave_0: entered promiscuous mode [ 1295.465423][T16987] Bluetooth: hci17: command tx timeout [ 1295.502221][T18826] hsr_slave_0: entered promiscuous mode [ 1295.503732][T18826] hsr_slave_1: entered promiscuous mode [ 1295.505254][T18826] debugfs: 'hsr0' already exists in 'hsr' [ 1295.505280][T18826] Cannot create hsr debugfs directory [ 1295.506312][T18853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.506452][T18853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.506700][T18853] bridge_slave_1: entered allmulticast mode [ 1295.511781][T18853] bridge_slave_1: entered promiscuous mode [ 1295.543014][T16987] Bluetooth: hci13: command tx timeout [ 1295.636292][T18838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.781785][T18853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1295.810235][T18838] team0: Port device team_slave_0 added [ 1295.810494][T18860] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.810716][T18860] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.810944][T18860] bridge_slave_0: entered allmulticast mode [ 1295.814479][T18860] bridge_slave_0: entered promiscuous mode [ 1295.845219][T18853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.866767][T18838] team0: Port device team_slave_1 added [ 1295.867039][T18860] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.867203][T18860] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.867426][T18860] bridge_slave_1: entered allmulticast mode [ 1295.870019][T18860] bridge_slave_1: entered promiscuous mode [ 1296.053833][T18853] team0: Port device team_slave_0 added [ 1296.061260][T18838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.061275][T18838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.061292][T18838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.080027][T18860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1296.093045][T16987] Bluetooth: hci15: command tx timeout [ 1296.110348][T18853] team0: Port device team_slave_1 added [ 1296.111560][T18838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1296.111574][T18838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.111599][T18838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1296.116947][T18860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1296.268444][T18853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.268463][T18853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.268479][T18853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.274694][T18860] team0: Port device team_slave_0 added [ 1296.299649][T18853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1296.299668][T18853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.299695][T18853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1296.351814][T18860] team0: Port device team_slave_1 added [ 1296.460534][T18838] hsr_slave_0: entered promiscuous mode [ 1296.461507][T18838] hsr_slave_1: entered promiscuous mode [ 1296.462105][T18838] debugfs: 'hsr0' already exists in 'hsr' [ 1296.462128][T18838] Cannot create hsr debugfs directory [ 1296.510128][T18860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.510144][T18860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.510161][T18860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.557782][T18860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1296.557801][T18860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.557827][T18860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1296.879530][T18853] hsr_slave_0: entered promiscuous mode [ 1296.886574][T18853] hsr_slave_1: entered promiscuous mode [ 1296.887212][T18853] debugfs: 'hsr0' already exists in 'hsr' [ 1296.887240][T18853] Cannot create hsr debugfs directory [ 1297.016926][T18860] hsr_slave_0: entered promiscuous mode [ 1297.017824][T18860] hsr_slave_1: entered promiscuous mode [ 1297.018428][T18860] debugfs: 'hsr0' already exists in 'hsr' [ 1297.018451][T18860] Cannot create hsr debugfs directory [ 1297.295640][T16987] Bluetooth: hci16: command tx timeout [ 1297.453095][T16987] Bluetooth: hci14: command tx timeout [ 1297.533635][T16987] Bluetooth: hci4: command 0x0406 tx timeout [ 1297.533679][T16987] Bluetooth: hci17: command tx timeout [ 1297.613146][T16987] Bluetooth: hci13: command tx timeout [ 1298.173245][ T5599] Bluetooth: hci15: command tx timeout [ 1299.373150][ T5599] Bluetooth: hci16: command tx timeout [ 1299.613526][ T5599] Bluetooth: hci17: command tx timeout [ 1300.499788][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.499871][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1311.373374][ T38] INFO: task syz.5.1550:17994 blocked for more than 143 seconds. [ 1311.373407][ ** replaying previous printk message ** [ 1311.373407][ T38] Not tainted syzkaller #0 [ 1311.373420][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1311.373431][ T38] task:syz.5.1550 state:D stack:25064 pid:17994 tgid:17993 ppid:16984 task_flags:0x480140 flags:0x00080002 [ 1311.373502][ T38] Call Trace: [ 1311.373513][ T38] [ 1311.373530][ T38] __schedule+0x16d9/0x5700 [ 1311.373575][ T38] ? __lock_acquire+0x747/0x2de0 [ 1311.373621][ T38] ? ktime_get+0x45/0x220 [ 1311.373663][ T38] ? __pfx___schedule+0x10/0x10 [ 1311.373692][ T38] ? lock_acquire+0x115/0x350 [ 1311.373731][ T38] ? schedule+0x90/0x2b0 [ 1311.373767][ T38] schedule+0x164/0x2b0 [ 1311.373800][ T38] schedule_timeout+0xc0/0x2c0 [ 1311.373833][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 1311.373877][ T38] ? wait_for_completion+0x272/0x5e0 [ 1311.373921][ T38] ? wait_for_completion+0x272/0x5e0 [ 1311.373954][ T38] wait_for_completion+0x2ca/0x5e0 [ 1311.374002][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 1311.374042][ T38] ? remove_one+0x2d5/0x3b0 [ 1311.374079][ T38] remove_one+0x2df/0x3b0 [ 1311.374110][ T38] ? __pfx_remove_one+0x10/0x10 [ 1311.374140][ T38] __simple_recursive_removal+0x215/0x520 [ 1311.374180][ T38] ? __pfx_remove_one+0x10/0x10 [ 1311.374211][ T38] debugfs_remove+0x5b/0x70 [ 1311.374237][ T38] nsim_dev_health_exit+0x41/0xc0 [ 1311.374274][ T38] nsim_dev_reload_destroy+0x2bf/0x490 [ 1311.374298][ T38] ? nsim_drv_remove+0x50/0x160 [ 1311.374325][ T38] nsim_drv_remove+0x58/0x160 [ 1311.374349][ T38] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1311.374377][ T38] device_release_driver_internal+0x48b/0x880 [ 1311.374411][ T38] bus_remove_device+0x449/0x560 [ 1311.374447][ T38] ? __pfx_bus_remove_device+0x10/0x10 [ 1311.374477][ T38] ? up_read+0x34/0x180 [ 1311.374501][ T38] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1311.374536][ T38] device_del+0x528/0x8f0 [ 1311.374579][ T38] ? __pfx_device_del+0x10/0x10 [ 1311.374615][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1311.374657][ T38] device_unregister+0x21/0xf0 [ 1311.374725][ T38] del_device_store+0x2b5/0x370 [ 1311.374761][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1311.374794][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1311.374820][ T38] ? sysfs_kf_write+0x166/0x260 [ 1311.374856][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1311.374878][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 1311.374918][ T38] vfs_write+0x61e/0xbb0 [ 1311.374955][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1311.374985][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1311.375024][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 1311.375051][ T38] ? fdget_pos+0x252/0x320 [ 1311.375086][ T38] ksys_write+0x156/0x270 [ 1311.375116][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1311.375156][ T38] do_syscall_64+0x166/0x520 [ 1311.375177][ T38] ? trace_irq_disable+0x3b/0x140 [ 1311.375206][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.375231][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1311.375260][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.375283][ T38] RIP: 0033:0x7f4ade55e159 [ 1311.375305][ T38] RSP: 002b:00007f4adc7b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1311.375330][ T38] RAX: ffffffffffffffda RBX: 00007f4ade7e5fa0 RCX: 00007f4ade55e159 [ 1311.375347][ T38] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 1311.375361][ T38] RBP: 00007f4ade5f506b R08: 0000000000000000 R09: 0000000000000000 [ 1311.375377][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1311.375391][ T38] R13: 00007f4ade7e6038 R14: 00007f4ade7e5fa0 R15: 00007ffcd5e126e8 [ 1311.375429][ T38] [ 1311.375439][ T38] INFO: task syz.8.1565:18072 blocked for more than 143 seconds. [ 1311.375457][ T38] Not tainted syzkaller #0 [ 1311.375469][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1311.375480][ T38] task:syz.8.1565 state:D stack:28512 pid:18072 tgid:18069 ppid:17048 task_flags:0x400140 flags:0x00080002 [ 1311.375549][ T38] Call Trace: [ 1311.375557][ T38] [ 1311.375572][ T38] __schedule+0x16d9/0x5700 [ 1311.375625][ T38] ? __pfx___schedule+0x10/0x10 [ 1311.375659][ T38] ? trace_irq_disable+0x3b/0x140 [ 1311.375691][ T38] ? __pfx___schedule+0x10/0x10 [ 1311.375738][ T38] rt_mutex_schedule+0x76/0xf0 [ 1311.375767][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 1311.375805][ T38] ? rt_mutex_slowlock_block+0x33c/0x690 [ 1311.375837][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1311.375875][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1311.375904][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1311.375951][ T38] ? devlink_health_report+0x305/0xb20 [ 1311.375989][ T38] ? devlink_health_report+0x305/0xb20 [ 1311.376015][ T38] mutex_lock_nested+0x168/0x1d0 [ 1311.376048][ T38] devlink_health_report+0x305/0xb20 [ 1311.376087][ T38] nsim_dev_health_break_write+0x197/0x240 [ 1311.376126][ T38] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1311.376173][ T38] full_proxy_write+0x127/0x1f0 [ 1311.376208][ T38] ? __pfx_full_proxy_write+0x10/0x10 [ 1311.376238][ T38] vfs_write+0x29f/0xbb0 [ 1311.376274][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1311.376303][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1311.376339][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1311.376371][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 1311.376397][ T38] ? fdget_pos+0x252/0x320 [ 1311.376431][ T38] ksys_write+0x156/0x270 [ 1311.376461][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1311.376501][ T38] do_syscall_64+0x166/0x520 [ 1311.376521][ T38] ? trace_irq_disable+0x3b/0x140 [ 1311.376549][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.376572][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1311.376600][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.376623][ T38] RIP: 0033:0x7fd97c87e159 [ 1311.376643][ T38] RSP: 002b:00007fd97aad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1311.376666][ T38] RAX: ffffffffffffffda RBX: 00007fd97cb05fa0 RCX: 00007fd97c87e159 [ 1311.376683][ T38] RDX: 0000000000000006 RSI: 0000200000000300 RDI: 0000000000000003 [ 1311.376698][ T38] RBP: 00007fd97c91506b R08: 0000000000000000 R09: 0000000000000000 [ 1311.376713][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1311.376728][ T38] R13: 00007fd97cb06038 R14: 00007fd97cb05fa0 R15: 00007ffde86da3c8 [ 1311.376766][ T38] [ 1311.376776][ T38] INFO: task syz.9.1591:18153 blocked for more than 143 seconds. [ 1311.376792][ T38] Not tainted syzkaller #0 [ 1311.376804][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1311.376815][ T38] task:syz.9.1591 state:D stack:28456 pid:18153 tgid:18152 ppid:17055 task_flags:0x400140 flags:0x00080002 [ 1311.376891][ T38] Call Trace: [ 1311.376899][ T38] [ 1311.376914][ T38] __schedule+0x16d9/0x5700 [ 1311.376977][ T38] ? __pfx___schedule+0x10/0x10 [ 1311.377026][ T38] rt_mutex_schedule+0x76/0xf0 [ 1311.377054][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 1311.377092][ T38] ? rt_mutex_slowlock_block+0x33c/0x690 [ 1311.377123][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1311.377154][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1311.377183][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1311.377232][ T38] ? del_device_store+0xd6/0x370 [ 1311.377269][ T38] ? del_device_store+0xd6/0x370 [ 1311.377298][ T38] mutex_lock_nested+0x168/0x1d0 [ 1311.377324][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1311.377351][ T38] del_device_store+0xd6/0x370 [ 1311.377382][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1311.377406][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1311.377438][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1311.377462][ T38] ? sysfs_kf_write+0x166/0x260 [ 1311.377491][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1311.377513][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 1311.377553][ T38] vfs_write+0x61e/0xbb0 [ 1311.377589][ T38] ? __pfx_vfs_write+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1311.377619][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1311.379569][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 1311.379601][ T38] ? fdget_pos+0x252/0x320 [ 1311.379634][ T38] ksys_write+0x156/0x270 [ 1311.379664][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1311.379704][ T38] do_syscall_64+0x166/0x520 [ 1311.379724][ T38] ? trace_irq_disable+0x3b/0x140 [ 1311.379751][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.379773][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1311.379802][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.379825][ T38] RIP: 0033:0x7f1db636e159 [ 1311.379854][ T38] RSP: 002b:00007f1db45c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1311.379877][ T38] RAX: ffffffffffffffda RBX: 00007f1db65f5fa0 RCX: 00007f1db636e159 [ 1311.379894][ T38] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000003 [ 1311.379909][ T38] RBP: 00007f1db640506b R08: 0000000000000000 R09: 0000000000000000 [ 1311.379924][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1311.379938][ T38] R13: 00007f1db65f6038 R14: 00007f1db65f5fa0 R15: 00007ffce436b8e8 [ 1311.379974][ T38] [ 1311.380037][ T38] [ 1311.380037][ T38] Showing all locks held in the system: [ 1311.380049][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 1311.380126][ T38] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1311.380246][ T38] locks held by getty/5348: 2, on CPU#0: [ 1311.380262][ T38] #0: ffff8880359b90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1311.380359][ T38] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1311.380448][ T38] locks held by kworker/u8:8/14798: 4, last CPU#1: [ 1311.380464][ T38] #0: ffff8880322fe938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1311.380526][ T38] #1: ffffc9001fd7fc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1311.380587][ T38] #2: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1311.380649][ T38] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1311.380715][ T38] locks held by syz.5.1550/17994: 8, on CPU#0: [ 1311.380731][ T38] #0: ffff88803c9ea328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1311.380786][ T38] #1: ffff88806537a510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1311.380879][ T38] #2: ffff888060d35878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1311.380944][ T38] #3: ffff888028cd15a8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1311.381057][ T38] #4: ffffffff8ee454b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1311.381121][ T38] #5: ffff888060b10160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1311.381178][ T38] #6: ffff888021b9e310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1311.381237][ T38] #7: ffff888060656960 (&sb->s_type->i_mutex_key#8/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x19a/0x520 [ 1311.381325][ T38] locks held by syz.8.1565/18072: 3, on CPU#0: [ 1311.381341][ T38] #0: ffff8880115aad28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1311.381395][ T38] #1: ffff88801eaf4510 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1311.381456][ T38] #2: ffff888021b9e310 (&devlink->lock_key#5){+.+.}-{4:4}, at: devlink_health_report+0x305/0xb20 [ 1311.381523][ T38] locks held by syz.9.1591/18153: 5, on CPU#0: [ 1311.381539][ T38] #0: ffff88803caf5328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 1311.381593][ T38] #1: ffff88803a2f0510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1311.381655][ T38] #2: ffff888060c44878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1311.381718][ T38] #3: ffff888028cd15a8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1311.381786][ T38] #4: ffffffff8ee454b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1311.381857][ T38] locks held by syz-executor/18173: 4, on CPU#1: [ 1311.381873][ T38] #0: ffff888034828510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1311.381934][ T38] #1: ffff888060f6c078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1311.381997][ T38] #2: ffff888028cd15a8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1311.382065][ T38] #3: ffffffff8ee454b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1311.382128][ T38] locks held by syz-executor/18179: 4, on CPU#0: [ 1311.382144][ T38] #0: ffff888034828510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1311.382205][ T38] #1: ffff88804f7a5078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1311.382267][ T38] #2: ffff888028cd15a8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1311.382336][ T38] #3: ffffffff8ee454b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1311.382399][ T38] locks held by syz-executor/18185: 4, on CPU#0: [ 1311.382415][ T38] #0: ffff888034828510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1311.382477][ T38] #1: ffff88806141c078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1311.382539][ T38] #2: ffff888028cd15a8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1311.382607][ T38] #3: ffffffff8ee454b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1311.382669][ T38] locks held by syz-executor/18186: 4, on CPU#0: [ 1311.382686][ T38] #0: ffff888034828510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1311.382747][ T38] #1: ffff88806d68b878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1311.382810][ T38] #2: ffff888028cd15a8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1311.388196][ T38] #3: ffffffff8ee454b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1311.388263][ T38] locks held by syz-executor/18191: 4, on CPU#1: [ 1311.388281][ T38] #0: ffff888034828510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1311.388343][ T38] #1: ffff8880603b5878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1311.388403][ T38] #2: ffff888028cd15a8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1311.388465][ T38] #3: ffffffff8ee454b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1311.388528][ T38] locks held by syz-executor/18729: 4, on CPU#0: [ 1311.388543][ T38] #0: ffff888034828510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1311.388599][ T38] #1: ffff888060fdc078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1311.388656][ T38] #2: ffff888028cd15a8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1311.388717][ T38] #3: ffffffff8ee454b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1311.388773][ T38] locks held by syz-executor/18733: 4, on CPU#1: [ 1311.388789][ T38] #0: ffff888034828510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1311.388843][ T38] #1: ffff888061d40878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1311.388901][ T38] #2: ffff888028cd15a8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1311.388965][ T38] #3: ffffffff8ee454b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1311.389023][ T38] locks held by syz-executor/18737: 4, on CPU#1: [ 1311.389038][ T38] #0: ffff888034828510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1311.389095][ T38] #1: ffff88804f516078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1311.389154][ T38] #2: ffff888028cd15a8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1311.389218][ T38] #3: ffffffff8ee454b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1311.389276][ T38] locks held by syz-executor/18751: 4, on CPU#1: [ 1311.389292][ T38] #0: ffff888034828510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1311.389356][ T38] #1: ffff888060a66078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1311.389415][ T38] #2: ffff888028cd15a8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1311.389478][ T38] #3: ffffffff8ee454b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1311.389536][ T38] locks held by syz-executor/18756: 4, on CPU#0: [ 1311.389552][ T38] #0: ffff888034828510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1311.389611][ T38] #1: ffff88804f799478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1311.389667][ T38] #2: ffff888028cd15a8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1311.389726][ T38] #3: ffffffff8ee454b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1311.389782][ T38] locks held by syz-executor/18826: 4, on CPU#1: [ 1311.389796][ T38] #0: ffff888034828510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1311.389847][ T38] #1: ffff88804f5c1878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1311.389900][ T38] #2: ffff888028cd15a8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1311.389958][ T38] #3: ffffffff8ee454b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1311.390109][ T38] locks held by syz-executor/18827: 4, on CPU#1: [ 1311.390123][ T38] #0: ffff888034828510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1311.390175][ T38] #1: ffff888060c23c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1311.390228][ T38] #2: ffff888028cd15a8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1311.390286][ T38] #3: ffffffff8ee454b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1311.390340][ T38] locks held by syz-executor/18838: 4, on CPU#0: [ 1311.390361][ T38] #0: ffff888034828510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1311.390412][ T38] #1: ffff888025618078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1311.390464][ T38] #2: ffff888028cd15a8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1311.390539][ T38] #3: ffffffff8ee454b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1311.390592][ T38] locks held by syz-executor/18853: 4, on CPU#0: [ 1311.390606][ T38] #0: ffff888034828510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1311.390657][ T38] #1: ffff88805dcbdc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1311.390710][ T38] #2: ffff888028cd15a8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1311.390768][ T38] #3: ffffffff8ee454b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1311.390821][ T38] locks held by syz-executor/18860: 4, on CPU#1: [ 1311.390835][ T38] #0: ffff888034828510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1311.390886][ T38] #1: ffff888024ec1478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1311.390939][ T38] #2: ffff888028cd15a8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1311.390996][ T38] #3: ffffffff8ee454b8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1311.391054][ T38] [ 1311.391060][ T38] ============================================= [ 1311.391060][ T38] [ 1311.391069][ T38] NMI backtrace for cpu 1 [ 1311.391083][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1311.391105][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1311.391117][ T38] Call Trace: [ 1311.391126][ T38] [ 1311.391135][ T38] dump_stack_lvl+0xe8/0x150 [ 1311.391165][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1311.391255][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1311.391287][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1311.391314][ T38] sys_info+0x135/0x170 [ 1311.391335][ T38] watchdog+0xfd7/0x1030 [ 1311.391373][ T38] ? watchdog+0x1c7/0x1030 [ 1311.391403][ T38] kthread+0x38b/0x470 [ 1311.391423][ T38] ? __pfx_watchdog+0x10/0x10 [ 1311.391444][ T38] ? __pfx_kthread+0x10/0x10 [ 1311.391470][ T38] ret_from_fork+0x514/0xb70 [ 1311.391492][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1311.391512][ T38] ? __switch_to+0xc89/0x1420 [ 1311.391542][ T38] ? __pfx_kthread+0x10/0x10 [ 1311.391563][ T38] ret_from_fork_asm+0x1a/0x30 [ 1311.391596][ T38] [ 1311.391621][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1311.391648][ C0] NMI backtrace for cpu 0 [ 1311.391664][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1311.391684][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1311.391694][ C0] RIP: 0010:delay_tsc+0x73/0xd0 [ 1311.391716][ C0] Code: e8 72 69 3e f6 65 48 8b 05 6a 27 4f 07 48 85 c0 74 1c f3 90 bf 01 00 00 00 e8 09 68 3e f6 e8 b4 79 01 00 39 c5 75 0e 0f 01 f9 <66> 90 eb bb e8 94 ac dc f5 eb dd 4c 29 fb e8 9a 79 01 00 89 c5 0f [ 1311.391730][ C0] RSP: 0018:ffffc900001678b8 EFLAGS: 00000246 [ 1311.391746][ C0] RAX: 0000000097fd0cf1 RBX: 0000000000000899 RCX: 0000000000000000 [ 1311.391759][ C0] RDX: 00000000000002a4 RSI: ffffffff8bcc4560 RDI: ffffffff8bcc4520 [ 1311.391772][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1311.391783][ C0] R10: dffffc0000000000 R11: ffffffff8b565850 R12: 1ffffffff33d4ad1 [ 1311.391796][ C0] R13: 00000000ffffffff R14: 000002a497fd09eb R15: 000000000000024b [ 1311.391808][ C0] FS: 0000000000000000(0000) GS:ffff888125bc8000(0000) knlGS:0000000000000000 [ 1311.391823][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1311.391835][ C0] CR2: 00007f12169d3708 CR3: 000000001147c000 CR4: 00000000003526f0 [ 1311.391859][ C0] Call Trace: [ 1311.391866][ C0] [ 1311.391874][ C0] wait_for_lsr+0x14d/0x300 [ 1311.391926][ C0] __serial8250_console_fifo_write+0x34f/0x3f0 [ 1311.391988][ C0] serial8250_console_write+0xac5/0x1230 [ 1311.392013][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1311.392041][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 1311.392070][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1311.392094][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1311.392125][ C0] nbcon_kthread_func+0x679/0x880 [ 1311.392148][ C0] ? nbcon_kthread_func+0x163/0x880 [ 1311.392168][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1311.392191][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1311.392214][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1311.392238][ C0] kthread+0x38b/0x470 [ 1311.392254][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1311.392274][ C0] ? __pfx_kthread+0x10/0x10 [ 1311.392290][ C0] ret_from_fork+0x514/0xb70 [ 1311.392308][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1311.392324][ C0] ? __switch_to+0xc89/0x1420 [ 1311.392346][ C0] ? __pfx_kthread+0x10/0x10 [ 1311.392363][ C0] ret_from_fork_asm+0x1a/0x30 [ 1311.392386][ C0] [ 1311.392649][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1313.551443][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1313.561081][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1313.571140][ T38] Call Trace: [ 1313.574423][ T38] [ 1313.577361][ T38] vpanic+0x56d/0xa60 [ 1313.581352][ T38] ? __pfx___schedule+0x10/0x10 [ 1313.586215][ T38] ? __pfx_vpanic+0x10/0x10 [ 1313.590729][ T38] panic+0xc5/0xd0 [ 1313.594455][ T38] ? __pfx_panic+0x10/0x10 [ 1313.598879][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 1313.604347][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 1313.609728][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1313.615891][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1313.622091][ T38] watchdog+0x1030/0x1030 [ 1313.626473][ T38] ? watchdog+0x1c7/0x1030 [ 1313.631023][ T38] kthread+0x38b/0x470 [ 1313.635145][ T38] ? __pfx_watchdog+0x10/0x10 [ 1313.639852][ T38] ? __pfx_kthread+0x10/0x10 [ 1313.644458][ T38] ret_from_fork+0x514/0xb70 [ 1313.649060][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1313.654185][ T38] ? __switch_to+0xc89/0x1420 [ 1313.658881][ T38] ? __pfx_kthread+0x10/0x10 [ 1313.663480][ T38] ret_from_fork_asm+0x1a/0x30 [ 1313.668258][ T38] [ 1313.671536][ T38] Kernel Offset: disabled [ 1313.675858][ T38] Rebooting in 86400 seconds..