Warning: Permanently added '10.128.0.104' (ED25519) to the list of known hosts. 2025/11/18 02:35:41 parsed 1 programs [ 97.913861][ T4607] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 99.585325][ T4638] chnl_net:caif_netlink_parms(): no params data found [ 99.624682][ T4638] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.632221][ T4638] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.640864][ T4638] device bridge_slave_0 entered promiscuous mode [ 99.652558][ T4638] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.660748][ T4638] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.669238][ T4638] device bridge_slave_1 entered promiscuous mode [ 99.688678][ T4638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.702388][ T4638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.723952][ T4638] team0: Port device team_slave_0 added [ 99.731532][ T4638] team0: Port device team_slave_1 added [ 99.748050][ T4638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.755397][ T4638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.781948][ T4638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.797469][ T4638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.804888][ T4638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.831656][ T4638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.858300][ T4638] device hsr_slave_0 entered promiscuous mode [ 99.865288][ T4638] device hsr_slave_1 entered promiscuous mode [ 100.556255][ T4638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.581840][ T4638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.606695][ T4638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.632687][ T4638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.817100][ T4638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.845031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.854185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.872778][ T4638] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.891164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.901197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.920712][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.927904][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.951499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.960674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.969766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.978401][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.985640][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.997082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.007129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.018751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.031462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.050203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.059070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.070651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.083515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.095375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.122534][ T4638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.136928][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.146570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.158210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.334137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.342509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.355330][ T4638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.389072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.407617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.439610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.448940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.462611][ T4638] device veth0_vlan entered promiscuous mode [ 101.475321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.494865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.517958][ T4638] device veth1_vlan entered promiscuous mode [ 101.542316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.553192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.562630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.572752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.584871][ T4638] device veth0_macvtap entered promiscuous mode [ 101.596869][ T4638] device veth1_macvtap entered promiscuous mode [ 101.615723][ T4638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.626349][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.635635][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.644392][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.653946][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.668463][ T4638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.687804][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.697825][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.710456][ T4638] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.719202][ T4638] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.736271][ T4638] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.746670][ T4638] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.632455][ T1232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.659245][ T1232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.678806][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.697087][ T1240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.706968][ T1240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.721473][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.128007][ T1240] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/11/18 02:35:51 executed programs: 0 [ 105.070725][ T4864] chnl_net:caif_netlink_parms(): no params data found [ 105.134289][ T4864] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.141771][ T4864] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.150302][ T4864] device bridge_slave_0 entered promiscuous mode [ 105.158803][ T4864] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.168777][ T4864] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.177347][ T4864] device bridge_slave_1 entered promiscuous mode [ 105.202923][ T4864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.214806][ T4864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.244330][ T4864] team0: Port device team_slave_0 added [ 105.253536][ T4864] team0: Port device team_slave_1 added [ 105.277050][ T4864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.284363][ T4864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.311305][ T4864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.327584][ T4864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.335258][ T4864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.364301][ T4864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.404044][ T4864] device hsr_slave_0 entered promiscuous mode [ 105.413495][ T4864] device hsr_slave_1 entered promiscuous mode [ 105.420524][ T4864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.428117][ T4864] Cannot create hsr debugfs directory [ 106.999624][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 107.025558][ T1240] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.076765][ T1240] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.160026][ T1240] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.058180][ T4864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.068286][ T4864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.078488][ T4864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.101715][ T4864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.154137][ T4864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.171540][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.180422][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.191539][ T4864] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.210694][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.220006][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.229002][ T1232] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.236278][ T1232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.245260][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.256620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.266536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.275938][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.284140][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.311534][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.323238][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.337258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.347929][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.357094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.375078][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.385084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.394375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.403022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.413588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.422437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.432634][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.531864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.540068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.563269][ T4864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.581791][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.590950][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.615981][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.624691][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.633470][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.642029][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.653395][ T4864] device veth0_vlan entered promiscuous mode [ 108.673736][ T4864] device veth1_vlan entered promiscuous mode [ 108.704549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 108.712897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 108.721744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.730549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.742587][ T4864] device veth0_macvtap entered promiscuous mode [ 108.756237][ T4864] device veth1_macvtap entered promiscuous mode [ 108.770681][ T1240] device hsr_slave_0 left promiscuous mode [ 108.777242][ T1240] device hsr_slave_1 left promiscuous mode [ 108.784312][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.792777][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.801987][ T1240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.810059][ T1240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.817716][ T1240] device bridge_slave_1 left promiscuous mode [ 108.824863][ T1240] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.833159][ T1240] device bridge_slave_0 left promiscuous mode [ 108.840035][ T1240] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.851519][ T1240] device veth1_macvtap left promiscuous mode [ 108.857794][ T1240] device veth0_macvtap left promiscuous mode [ 108.864526][ T1240] device veth1_vlan left promiscuous mode [ 108.870799][ T1240] device veth0_vlan left promiscuous mode [ 108.988035][ T1240] team0 (unregistering): Port device team_slave_1 removed [ 109.002658][ T1240] team0 (unregistering): Port device team_slave_0 removed [ 109.019440][ T1240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.033943][ T1240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.079512][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 109.079762][ T1240] bond0 (unregistering): Released all slaves [ 109.138110][ T4864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.148524][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.157836][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.166460][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.177476][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.189582][ T4864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.199821][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.209208][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.220355][ T4864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.230198][ T4864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.240942][ T4864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.250739][ T4864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.316496][ T4280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.342417][ T4280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.371050][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.381112][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 109.390836][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.401530][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.446196][ T5077] loop0: detected capacity change from 0 to 64 [ 109.456461][ T5077] ======================================================= [ 109.456461][ T5077] WARNING: The mand mount option has been deprecated and [ 109.456461][ T5077] and is ignored by this kernel. Remove the mand [ 109.456461][ T5077] option from the mount to silence this warning. [ 109.456461][ T5077] ======================================================= 2025/11/18 02:35:56 executed programs: 3 [ 110.296441][ T4280] attempt to access beyond end of device [ 110.296441][ T4280] loop0: rw=1, want=4169, limit=64 [ 110.310540][ T4280] attempt to access beyond end of device [ 110.310540][ T4280] loop0: rw=1, want=4170, limit=64 [ 110.324512][ T4280] Buffer I/O error on dev loop0, logical block 4169, lost async page write [ 110.335562][ T4280] attempt to access beyond end of device [ 110.335562][ T4280] loop0: rw=1, want=4171, limit=64 [ 110.348232][ T4280] Buffer I/O error on dev loop0, logical block 4170, lost async page write [ 110.357490][ T4280] attempt to access beyond end of device [ 110.357490][ T4280] loop0: rw=1, want=4173, limit=64 [ 110.373064][ T4280] Buffer I/O error on dev loop0, logical block 4172, lost async page write [ 110.382788][ T4280] attempt to access beyond end of device [ 110.382788][ T4280] loop0: rw=1, want=4174, limit=64 [ 110.395552][ T4280] Buffer I/O error on dev loop0, logical block 4173, lost async page write [ 110.405516][ T4280] attempt to access beyond end of device [ 110.405516][ T4280] loop0: rw=1, want=4175, limit=64 [ 110.418145][ T4280] Buffer I/O error on dev loop0, logical block 4174, lost async page write [ 110.427308][ T4280] attempt to access beyond end of device [ 110.427308][ T4280] loop0: rw=1, want=4176, limit=64 [ 110.440360][ T4280] Buffer I/O error on dev loop0, logical block 4175, lost async page write [ 110.449076][ T4280] attempt to access beyond end of device [ 110.449076][ T4280] loop0: rw=1, want=4177, limit=64 [ 110.462422][ T4280] Buffer I/O error on dev loop0, logical block 4176, lost async page write [ 110.471759][ T4280] attempt to access beyond end of device [ 110.471759][ T4280] loop0: rw=1, want=4178, limit=64 [ 110.484461][ T4280] Buffer I/O error on dev loop0, logical block 4177, lost async page write [ 110.494146][ T4280] attempt to access beyond end of device [ 110.494146][ T4280] loop0: rw=1, want=4194, limit=64 [ 110.507025][ T4280] Buffer I/O error on dev loop0, logical block 4356, lost async page write [ 110.516019][ T4280] Buffer I/O error on dev loop0, logical block 4357, lost async page write [ 110.942128][ T5079] loop0: detected capacity change from 0 to 64 [ 111.160753][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 111.559200][ T5079] [ 111.561752][ T5079] ============================================ [ 111.567944][ T5079] WARNING: possible recursive locking detected [ 111.574278][ T5079] syzkaller #0 Not tainted [ 111.578773][ T5079] -------------------------------------------- [ 111.584896][ T5079] syz.0.17/5079 is trying to acquire lock: [ 111.590764][ T5079] ffff88802aa700b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 111.600156][ T5079] [ 111.600156][ T5079] but task is already holding lock: [ 111.607595][ T5079] ffff88802aa700b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 111.617000][ T5079] [ 111.617000][ T5079] other info that might help us debug this: [ 111.625048][ T5079] Possible unsafe locking scenario: [ 111.625048][ T5079] [ 111.632480][ T5079] CPU0 [ 111.635826][ T5079] ---- [ 111.639086][ T5079] lock(&tree->tree_lock/1); [ 111.643746][ T5079] lock(&tree->tree_lock/1); [ 111.648520][ T5079] [ 111.648520][ T5079] *** DEADLOCK *** [ 111.648520][ T5079] [ 111.656860][ T5079] May be due to missing lock nesting notation [ 111.656860][ T5079] [ 111.665380][ T5079] 6 locks held by syz.0.17/5079: [ 111.670391][ T5079] #0: ffff88802357b770 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 111.679927][ T5079] #1: ffff88807ce52460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x28a/0xd00 [ 111.688964][ T5079] #2: ffff88807c0a0fa8 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: generic_file_write_iter+0x7e/0x1b0 [ 111.700673][ T5079] #3: ffff88807c0a0df8 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xd7/0x1280 [ 111.711370][ T5079] #4: ffff88802aa700b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 111.721128][ T5079] #5: ffff888077481478 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xd7/0x1280 [ 111.732681][ T5079] [ 111.732681][ T5079] stack backtrace: [ 111.739010][ T5079] CPU: 1 PID: 5079 Comm: syz.0.17 Not tainted syzkaller #0 [ 111.746190][ T5079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.756843][ T5079] Call Trace: [ 111.760290][ T5079] [ 111.763300][ T5079] dump_stack_lvl+0x168/0x230 [ 111.768124][ T5079] ? show_regs_print_info+0x20/0x20 [ 111.773442][ T5079] ? load_image+0x3b0/0x3b0 [ 111.778113][ T5079] __lock_acquire+0x1227/0x7c60 [ 111.783560][ T5079] ? mark_lock+0x94/0x320 [ 111.787882][ T5079] ? verify_lock_unused+0x140/0x140 [ 111.793079][ T5079] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 111.799043][ T5079] ? lock_chain_count+0x20/0x20 [ 111.803872][ T5079] ? __rwlock_init+0x140/0x140 [ 111.808620][ T5079] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 111.814191][ T5079] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 111.820608][ T5079] ? lockdep_hardirqs_on+0x94/0x140 [ 111.825891][ T5079] lock_acquire+0x197/0x3f0 [ 111.830583][ T5079] ? hfs_find_init+0x15b/0x1d0 [ 111.835333][ T5079] ? __might_sleep+0xf0/0xf0 [ 111.839991][ T5079] ? read_lock_is_recursive+0x10/0x10 [ 111.845530][ T5079] ? __kasan_kmalloc+0xcc/0xf0 [ 111.850364][ T5079] ? __kasan_kmalloc+0xb5/0xf0 [ 111.855205][ T5079] ? hfs_find_init+0x84/0x1d0 [ 111.859948][ T5079] ? hfs_bmap_reserve+0x103/0x420 [ 111.864956][ T5079] ? __hfs_ext_write_extent+0x1fa/0x470 [ 111.870493][ T5079] ? __hfs_ext_cache_extent+0x6b/0x9b0 [ 111.875951][ T5079] ? hfs_get_block+0x3d4/0xbd0 [ 111.880707][ T5079] ? __block_write_begin_int+0x54e/0x15a0 [ 111.886639][ T5079] ? cont_write_begin+0x58a/0x7b0 [ 111.891661][ T5079] ? hfs_find_init+0x15b/0x1d0 [ 111.896412][ T5079] __mutex_lock_common+0x1eb/0x2390 [ 111.901687][ T5079] ? hfs_find_init+0x15b/0x1d0 [ 111.906603][ T5079] ? mutex_lock_io_nested+0x60/0x60 [ 111.911965][ T5079] mutex_lock_nested+0x17/0x20 [ 111.916723][ T5079] hfs_find_init+0x15b/0x1d0 [ 111.921398][ T5079] hfs_extend_file+0x2eb/0x1280 [ 111.926425][ T5079] ? hfs_ext_keycmp+0x1c3/0x310 [ 111.931436][ T5079] ? hfs_get_block+0xbd0/0xbd0 [ 111.936788][ T5079] ? hfs_rename+0x320/0x320 [ 111.941665][ T5079] ? hfs_find_exit+0xa0/0xa0 [ 111.946479][ T5079] ? hfs_brec_find+0x3d6/0x510 [ 111.951345][ T5079] hfs_bmap_reserve+0x103/0x420 [ 111.956345][ T5079] __hfs_ext_write_extent+0x1fa/0x470 [ 111.961879][ T5079] __hfs_ext_cache_extent+0x6b/0x9b0 [ 111.967346][ T5079] ? mutex_lock_nested+0x17/0x20 [ 111.972385][ T5079] ? hfs_find_init+0x15b/0x1d0 [ 111.977149][ T5079] hfs_extend_file+0x313/0x1280 [ 111.981999][ T5079] ? hfs_get_block+0xbd0/0xbd0 [ 111.986773][ T5079] ? hfs_get_block+0x907/0xbd0 [ 111.991527][ T5079] ? pagevec_lookup_range+0x30/0x70 [ 111.996881][ T5079] ? clean_bdev_aliases+0x726/0x840 [ 112.002162][ T5079] hfs_get_block+0x3d4/0xbd0 [ 112.006868][ T5079] ? hfs_free_extents+0x430/0x430 [ 112.011995][ T5079] ? do_raw_spin_unlock+0x11d/0x230 [ 112.017388][ T5079] ? create_page_buffers+0x238/0x320 [ 112.023143][ T5079] __block_write_begin_int+0x54e/0x15a0 [ 112.028696][ T5079] ? hfs_free_extents+0x430/0x430 [ 112.033877][ T5079] ? page_zero_new_buffers+0x490/0x490 [ 112.039877][ T5079] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 112.045980][ T5079] ? lock_chain_count+0x20/0x20 [ 112.050820][ T5079] ? do_user_addr_fault+0x694/0xc80 [ 112.056013][ T5079] ? wait_for_stable_page+0xd9/0x110 [ 112.061308][ T5079] cont_write_begin+0x58a/0x7b0 [ 112.066795][ T5079] ? lockdep_hardirqs_on+0x94/0x140 [ 112.072459][ T5079] ? generic_cont_expand_simple+0x190/0x190 [ 112.078932][ T5079] ? __get_user_nocheck_1+0x6/0x10 [ 112.084220][ T5079] hfs_write_begin+0x92/0xe0 [ 112.088910][ T5079] ? hfs_free_extents+0x430/0x430 [ 112.094137][ T5079] generic_perform_write+0x2aa/0x530 [ 112.099746][ T5079] ? atime_needs_update+0x780/0x780 [ 112.105048][ T5079] ? grab_cache_page_write_begin+0xa0/0xa0 [ 112.111414][ T5079] ? file_remove_privs+0x590/0x590 [ 112.116765][ T5079] ? read_lock_is_recursive+0x10/0x10 [ 112.122618][ T5079] ? preempt_count_add+0x8d/0x190 [ 112.128274][ T5079] ? rwsem_write_trylock+0x12f/0x1b0 [ 112.133755][ T5079] ? clear_nonspinnable+0x60/0x60 [ 112.138901][ T5079] __generic_file_write_iter+0x25f/0x4e0 [ 112.144859][ T5079] generic_file_write_iter+0xa6/0x1b0 [ 112.150425][ T5079] vfs_write+0x712/0xd00 [ 112.154739][ T5079] ? file_end_write+0x250/0x250 [ 112.159591][ T5079] ? __fget_files+0x40f/0x480 [ 112.164290][ T5079] ? mutex_lock_nested+0x17/0x20 [ 112.169376][ T5079] ? __fdget_pos+0x2bf/0x370 [ 112.174290][ T5079] ? ksys_write+0x71/0x250 [ 112.179178][ T5079] ksys_write+0x14d/0x250 [ 112.183519][ T5079] ? __ia32_sys_read+0x80/0x80 [ 112.188311][ T5079] ? lockdep_hardirqs_on+0x94/0x140 [ 112.193623][ T5079] do_syscall_64+0x4c/0xa0 [ 112.198132][ T5079] ? clear_bhb_loop+0x30/0x80 [ 112.202819][ T5079] ? clear_bhb_loop+0x30/0x80 [ 112.207759][ T5079] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.213851][ T5079] RIP: 0033:0x7fb9011bed29 [ 112.218271][ T5079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.238682][ T5079] RSP: 002b:00007fb900437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 112.247265][ T5079] RAX: ffffffffffffffda RBX: 00007fb9013aefa0 RCX: 00007fb9011bed29 [ 112.255665][ T5079] RDX: 00000000ffffff6a RSI: 0000000020000000 RDI: 0000000000000004 [ 112.263725][ T5079] RBP: 00007fb90123ab08 R08: 0000000000000000 R09: 0000000000000000 [ 112.271795][ T5079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.280360][ T5079] R13: 0000000000000000 R14: 00007fb9013aefa0 R15: 00007ffd074728f8 [ 112.288409][ T5079] [ 113.239563][ T13] Bluetooth: hci0: command 0x0419 tx timeout