[ 81.420157][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts. 2026/04/19 00:23:41 ignoring optional flag "type"="gce" 2026/04/19 00:23:41 parsed 1 programs [ 86.256442][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 86.256459][ T29] audit: type=1400 audit(1776558221.521:96): avc: denied { unlink } for pid=6000 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2026/04/19 00:23:42 executed programs: 0 [ 87.481191][ T6000] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.527736][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.535434][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.542880][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.551079][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.558644][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.668534][ T6006] chnl_net:caif_netlink_parms(): no params data found [ 87.724857][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.732001][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.739236][ T6006] bridge_slave_0: entered allmulticast mode [ 87.746427][ T6006] bridge_slave_0: entered promiscuous mode [ 87.755313][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.762436][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.769626][ T6006] bridge_slave_1: entered allmulticast mode [ 87.776384][ T6006] bridge_slave_1: entered promiscuous mode [ 87.800038][ T6006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.811156][ T6006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.846057][ T6006] team0: Port device team_slave_0 added [ 87.853419][ T6006] team0: Port device team_slave_1 added [ 87.874611][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.881559][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.907530][ T6006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.919790][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.926778][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.952711][ T6006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.986876][ T6006] hsr_slave_0: entered promiscuous mode [ 87.992936][ T6006] hsr_slave_1: entered promiscuous mode [ 88.512648][ T6006] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.528000][ T6006] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.536371][ T6006] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.547012][ T6006] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.555050][ T6006] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.567046][ T6006] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.575085][ T6006] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.586933][ T6006] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.616473][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.623634][ T6006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.631086][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.638232][ T6006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.696315][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.705029][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.733368][ T6006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.756575][ T6006] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.771421][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.778630][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.807333][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.814507][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.846494][ T6006] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.859499][ T6006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.050463][ T6006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.100877][ T6006] veth0_vlan: entered promiscuous mode [ 89.113167][ T6006] veth1_vlan: entered promiscuous mode [ 89.145322][ T6006] veth0_macvtap: entered promiscuous mode [ 89.156339][ T6006] veth1_macvtap: entered promiscuous mode [ 89.177921][ T6006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.196026][ T6006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.212996][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.231753][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.251142][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.287103][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.369322][ T6076] loop0: detected capacity change from 0 to 64 [ 89.388488][ T29] audit: type=1400 audit(1776558224.651:97): avc: denied { mounton } for pid=6075 comm="syz-executor.0" path="/root/syzkaller-testdir3204514014/syzkaller.c74RgV/0/bus" dev="sda1" ino=2036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 89.440867][ T29] audit: type=1400 audit(1776558224.701:98): avc: denied { mount } for pid=6075 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 89.568451][ T6076] [ 89.570815][ T6076] ============================================ [ 89.576956][ T6076] WARNING: possible recursive locking detected [ 89.583100][ T6076] syzkaller #0 Not tainted [ 89.587503][ T6076] -------------------------------------------- [ 89.593664][ T6076] syz-executor.0/6076 is trying to acquire lock: [ 89.599991][ T6076] ffff888036e7c0a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 89.609343][ T6076] [ 89.609343][ T6076] but task is already holding lock: [ 89.616703][ T6076] ffff888036e7c0a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 89.626041][ T6076] [ 89.626041][ T6076] other info that might help us debug this: [ 89.634113][ T6076] Possible unsafe locking scenario: [ 89.634113][ T6076] [ 89.641558][ T6076] CPU0 [ 89.644838][ T6076] ---- [ 89.648111][ T6076] lock(&tree->tree_lock/1); [ 89.652801][ T6076] lock(&tree->tree_lock/1); [ 89.657490][ T6076] [ 89.657490][ T6076] *** DEADLOCK *** [ 89.657490][ T6076] [ 89.665627][ T6076] May be due to missing lock nesting notation [ 89.665627][ T6076] [ 89.673935][ T6076] 6 locks held by syz-executor.0/6076: [ 89.679387][ T6076] #0: ffff88807aa487f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 89.688469][ T6076] #1: ffff8880355c4410 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 89.697550][ T6076] #2: ffff8880379db490 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: generic_file_write_iter+0x8c/0x3d0 [ 89.709189][ T6076] #3: ffff8880379db2f0 (&HFS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xcf0 [ 89.719910][ T6076] #4: ffff888036e7c0a8 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 89.729687][ T6076] #5: ffff8880379dc5b0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xcf0 [ 89.740886][ T6076] [ 89.740886][ T6076] stack backtrace: [ 89.746790][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz-executor.0 Not tainted syzkaller #0 PREEMPT(full) [ 89.746816][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 89.746835][ T6076] Call Trace: [ 89.746841][ T6076] [ 89.746848][ T6076] dump_stack_lvl+0x100/0x190 [ 89.746878][ T6076] print_deadlock_bug.cold+0xbd/0xca [ 89.746909][ T6076] __lock_acquire+0x12bb/0x2630 [ 89.746936][ T6076] ? hfs_bmap_reserve+0x2ab/0x3a0 [ 89.746963][ T6076] ? __hfs_ext_write_extent+0x3c4/0x510 [ 89.746990][ T6076] lock_acquire+0x1b1/0x370 [ 89.747012][ T6076] ? hfs_find_init+0x273/0x330 [ 89.747035][ T6076] ? __pfx___might_resched+0x10/0x10 [ 89.747063][ T6076] __mutex_lock+0x1a4/0x1b10 [ 89.747096][ T6076] ? hfs_find_init+0x273/0x330 [ 89.747119][ T6076] ? hfs_find_init+0x273/0x330 [ 89.747144][ T6076] ? __pfx___mutex_lock+0x10/0x10 [ 89.747176][ T6076] ? __kasan_kmalloc+0xaa/0xb0 [ 89.747203][ T6076] ? __kmalloc_noprof+0x320/0x850 [ 89.747233][ T6076] ? hfs_find_init+0x273/0x330 [ 89.747255][ T6076] hfs_find_init+0x273/0x330 [ 89.747279][ T6076] hfs_ext_read_extent+0x19d/0x9d0 [ 89.747310][ T6076] ? __pfx_hfs_ext_read_extent+0x10/0x10 [ 89.747339][ T6076] ? do_raw_spin_unlock+0x145/0x1e0 [ 89.747367][ T6076] hfs_extend_file+0x4ff/0xcf0 [ 89.747397][ T6076] ? __pfx_hfs_extend_file+0x10/0x10 [ 89.747437][ T6076] hfs_bmap_reserve+0x2ab/0x3a0 [ 89.747468][ T6076] __hfs_ext_write_extent+0x3c4/0x510 [ 89.747497][ T6076] ? hfs_find_init+0x273/0x330 [ 89.747519][ T6076] hfs_ext_read_extent+0x805/0x9d0 [ 89.747550][ T6076] ? __pfx_hfs_ext_read_extent+0x10/0x10 [ 89.747584][ T6076] hfs_extend_file+0x4ff/0xcf0 [ 89.747614][ T6076] ? __pfx_hfs_extend_file+0x10/0x10 [ 89.747647][ T6076] hfs_get_block+0x17f/0x830 [ 89.747678][ T6076] ? __pfx_hfs_get_block+0x10/0x10 [ 89.747705][ T6076] __block_write_begin_int+0x57a/0x19c0 [ 89.747727][ T6076] ? __pfx_hfs_get_block+0x10/0x10 [ 89.747756][ T6076] ? __pfx___block_write_begin_int+0x10/0x10 [ 89.747778][ T6076] ? __pfx_hfs_get_block+0x10/0x10 [ 89.747805][ T6076] block_write_begin+0x9d/0x1d0 [ 89.747823][ T6076] ? lockdep_hardirqs_on+0x78/0x100 [ 89.747850][ T6076] cont_write_begin+0x573/0xa10 [ 89.747868][ T6076] ? copy_folio_from_iter_atomic+0x153/0x2000 [ 89.747894][ T6076] ? __pfx_hfs_get_block+0x10/0x10 [ 89.747924][ T6076] ? __pfx_cont_write_begin+0x10/0x10 [ 89.747946][ T6076] hfs_write_begin+0x64/0x120 [ 89.747964][ T6076] ? __pfx_hfs_get_block+0x10/0x10 [ 89.747994][ T6076] generic_perform_write+0x292/0xa40 [ 89.748024][ T6076] ? __pfx_generic_perform_write+0x10/0x10 [ 89.748049][ T6076] ? file_update_time_flags+0x373/0x500 [ 89.748074][ T6076] __generic_file_write_iter+0x1f7/0x240 [ 89.748105][ T6076] generic_file_write_iter+0xe1/0x3d0 [ 89.748136][ T6076] vfs_write+0x6ac/0x1070 [ 89.748168][ T6076] ? __pfx_generic_file_write_iter+0x10/0x10 [ 89.748199][ T6076] ? __pfx_vfs_write+0x10/0x10 [ 89.748236][ T6076] ksys_write+0x12a/0x250 [ 89.748265][ T6076] ? __pfx_ksys_write+0x10/0x10 [ 89.748296][ T6076] ? rcu_is_watching+0x12/0xc0 [ 89.748325][ T6076] do_syscall_64+0x10b/0xf80 [ 89.748352][ T6076] ? clear_bhb_loop+0x40/0x90 [ 89.748375][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.748394][ T6076] RIP: 0033:0x7f591aa6e3b9 [ 89.748417][ T6076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 89.748446][ T6076] RSP: 002b:00007f591b7bd078 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 89.748468][ T6076] RAX: ffffffffffffffda RBX: 00007f591ababf80 RCX: 00007f591aa6e3b9 [ 89.748482][ T6076] RDX: 000000000208e24b RSI: 0000000020000180 RDI: 0000000000000004 [ 89.748495][ T6076] RBP: 00007f591aacf498 R08: 0000000000000000 R09: 0000000000000000 [ 89.748507][ T6076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.748518][ T6076] R13: 000000000000000b R14: 00007f591ababf80 R15: 00007fff028778e8 [ 89.748537][ T6076] [ 90.142266][ T50] Bluetooth: hci0: command tx timeout [ 92.214002][ T50] Bluetooth: hci0: command tx timeout [ 94.294319][ T50] Bluetooth: hci0: command tx timeout [ 96.374044][ T50] Bluetooth: hci0: command tx timeout