no interfaces have a carrier [ 44.988149][ T3933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.999043][ T3933] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. 2026/04/19 02:23:56 parsed 1 programs syzkaller login: [ 71.694884][ T4271] cgroup: Unknown subsys name 'net' [ 71.801297][ T4271] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.344122][ T4271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.441350][ T4293] chnl_net:caif_netlink_parms(): no params data found [ 75.499147][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.506941][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.515175][ T4293] device bridge_slave_0 entered promiscuous mode [ 75.524110][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.531341][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.539155][ T4293] device bridge_slave_1 entered promiscuous mode [ 75.566603][ T4293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.577726][ T4293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.602242][ T4293] team0: Port device team_slave_0 added [ 75.609389][ T4293] team0: Port device team_slave_1 added [ 75.626568][ T4293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.633523][ T4293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.659862][ T4293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.672767][ T4293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.679767][ T4293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.706351][ T4293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.751712][ T4293] device hsr_slave_0 entered promiscuous mode [ 75.763709][ T4293] device hsr_slave_1 entered promiscuous mode [ 75.855174][ T4293] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.865532][ T4293] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.874631][ T4293] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.883990][ T4293] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.909192][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.916395][ T4293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.924070][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.931216][ T4293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.979826][ T4293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.991703][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.002292][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.011102][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.019679][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 76.037412][ T4293] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.048679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.058323][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.065630][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.083848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.092955][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.100093][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.119184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.128144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.144283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.158394][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.177094][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.187707][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.352727][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.361066][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.378370][ T4293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.397101][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.429811][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.438969][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.448533][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.456363][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.466719][ T4293] device veth0_vlan entered promiscuous mode [ 76.491476][ T4293] device veth1_vlan entered promiscuous mode [ 76.516361][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.524461][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.534212][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.543515][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.557507][ T4293] device veth0_macvtap entered promiscuous mode [ 76.566553][ T4293] device veth1_macvtap entered promiscuous mode [ 76.582960][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.590592][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.599226][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.607548][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.616957][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.629415][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.638448][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.647203][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.659176][ T4293] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.668352][ T4293] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.677437][ T4293] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.686274][ T4293] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.817913][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.939612][ T4317] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.948105][ T4317] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.956455][ T4317] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.964321][ T4317] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.972196][ T4317] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.980110][ T4317] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.179613][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.191172][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.203039][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.222616][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.231601][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.240758][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/04/19 02:24:05 executed programs: 0 [ 79.194239][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.213883][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.222178][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.231298][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.239998][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.247533][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.255561][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.366905][ T4362] chnl_net:caif_netlink_parms(): no params data found [ 79.410685][ T4362] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.418774][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.426754][ T4362] device bridge_slave_0 entered promiscuous mode [ 79.436334][ T4362] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.443430][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.451426][ T4362] device bridge_slave_1 entered promiscuous mode [ 79.472357][ T4362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.483490][ T4362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.505694][ T4362] team0: Port device team_slave_0 added [ 79.513040][ T4362] team0: Port device team_slave_1 added [ 79.531363][ T4362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.538650][ T4362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.564788][ T4362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.577483][ T4362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.584436][ T4362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.610472][ T4362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.641052][ T4362] device hsr_slave_0 entered promiscuous mode [ 79.647805][ T4362] device hsr_slave_1 entered promiscuous mode [ 79.654460][ T4362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.662413][ T4362] Cannot create hsr debugfs directory [ 81.285399][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 81.385018][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.437911][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.677387][ T125] cfg80211: failed to load regulatory.db [ 82.292047][ T4362] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.326955][ T4362] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.337565][ T4362] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.358100][ T4362] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.413066][ T46] device hsr_slave_0 left promiscuous mode [ 82.419480][ T46] device hsr_slave_1 left promiscuous mode [ 82.427768][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.435305][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.443271][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.450758][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.459052][ T46] device bridge_slave_1 left promiscuous mode [ 82.466035][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.478239][ T46] device bridge_slave_0 left promiscuous mode [ 82.484550][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.502195][ T46] device veth1_macvtap left promiscuous mode [ 82.508972][ T46] device veth0_macvtap left promiscuous mode [ 82.515307][ T46] device veth1_vlan left promiscuous mode [ 82.521188][ T46] device veth0_vlan left promiscuous mode [ 82.855990][ T46] team0 (unregistering): Port device team_slave_1 removed [ 82.883702][ T46] team0 (unregistering): Port device team_slave_0 removed [ 82.916062][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.947065][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.131240][ T46] bond0 (unregistering): Released all slaves [ 83.268186][ T4362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.296879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.309377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.320817][ T4362] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.355094][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 83.358525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.371160][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.383037][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.390244][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.419324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.451664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.465109][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.473770][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.481065][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.493442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.516069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.526908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.537256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.567169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.586110][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.605872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.615684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.624297][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.638049][ T4362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.652528][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.675620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.689413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.961572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.969162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.984015][ T4362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.007958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.025004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.064191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.073089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.082485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.090839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.106347][ T4362] device veth0_vlan entered promiscuous mode [ 84.119776][ T4362] device veth1_vlan entered promiscuous mode [ 84.153414][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.170588][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.180149][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.193866][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.204965][ T4362] device veth0_macvtap entered promiscuous mode [ 84.214286][ T4362] device veth1_macvtap entered promiscuous mode [ 84.226025][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.235548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.249872][ T4362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.257234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.267087][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.278487][ T4362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.286372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.296862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.307856][ T4362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.317713][ T4362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.326773][ T4362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.336253][ T4362] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.387554][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.403334][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.412261][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.433628][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.442419][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.450492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.683421][ T4420] loop0: detected capacity change from 0 to 32768 [ 84.692775][ T4420] ======================================================= [ 84.692775][ T4420] WARNING: The mand mount option has been deprecated and [ 84.692775][ T4420] and is ignored by this kernel. Remove the mand [ 84.692775][ T4420] option from the mount to silence this warning. [ 84.692775][ T4420] ======================================================= [ 84.752180][ T4420] JBD2: Ignoring recovery information on journal [ 84.823836][ T4420] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 84.866258][ T4420] [ 84.868623][ T4420] ====================================================== [ 84.875638][ T4420] WARNING: possible circular locking dependency detected [ 84.882661][ T4420] syzkaller #0 Not tainted [ 84.887067][ T4420] ------------------------------------------------------ [ 84.894076][ T4420] syz.0.17/4420 is trying to acquire lock: [ 84.899871][ T4420] ffff88803036d488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x1b2/0x850 [ 84.910833][ T4420] [ 84.910833][ T4420] but task is already holding lock: [ 84.918206][ T4420] ffff8880693e0660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_extend_dir+0x6c0/0x4ac0 [ 84.928787][ T4420] [ 84.928787][ T4420] which lock already depends on the new lock. [ 84.928787][ T4420] [ 84.939215][ T4420] [ 84.939215][ T4420] the existing dependency chain (in reverse order) is: [ 84.948258][ T4420] [ 84.948258][ T4420] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 84.957068][ T4420] down_read+0x42/0x2d0 [ 84.961788][ T4420] ocfs2_read_virt_blocks+0x25d/0x970 [ 84.967714][ T4420] ocfs2_find_entry+0x3c1/0x2180 [ 84.973203][ T4420] ocfs2_find_files_on_disk+0x102/0x390 [ 84.979292][ T4420] ocfs2_lookup_ino_from_name+0x4f/0xf0 [ 84.985380][ T4420] ocfs2_get_system_file_inode+0x36a/0x850 [ 84.991714][ T4420] ocfs2_init_global_system_inodes+0x2f3/0x6d0 [ 84.998381][ T4420] ocfs2_fill_super+0x2bc2/0x5090 [ 85.003929][ T4420] mount_bdev+0x287/0x3c0 [ 85.008789][ T4420] legacy_get_tree+0xe6/0x180 [ 85.013985][ T4420] vfs_get_tree+0x88/0x270 [ 85.018929][ T4420] do_new_mount+0x24a/0xa40 [ 85.024033][ T4420] __se_sys_mount+0x2e3/0x3d0 [ 85.029232][ T4420] do_syscall_64+0x4c/0xa0 [ 85.034174][ T4420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.040586][ T4420] [ 85.040586][ T4420] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}: [ 85.048918][ T4420] __lock_acquire+0x2d07/0x7d10 [ 85.054299][ T4420] lock_acquire+0x1bb/0x4a0 [ 85.059323][ T4420] __mutex_lock+0x12d/0xaf0 [ 85.064351][ T4420] ocfs2_get_system_file_inode+0x1b2/0x850 [ 85.070680][ T4420] ocfs2_reserve_suballoc_bits+0x12e/0x4810 [ 85.077099][ T4420] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 85.083945][ T4420] ocfs2_extend_dir+0xcf8/0x4ac0 [ 85.089395][ T4420] ocfs2_prepare_dir_for_insert+0x323a/0x5660 [ 85.095986][ T4420] ocfs2_rename+0x1938/0x3950 [ 85.101179][ T4420] vfs_rename+0xbe1/0x1100 [ 85.106124][ T4420] do_renameat2+0x8e5/0xce0 [ 85.111180][ T4420] __x64_sys_rename+0x82/0x90 [ 85.116385][ T4420] do_syscall_64+0x4c/0xa0 [ 85.121327][ T4420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.127739][ T4420] [ 85.127739][ T4420] other info that might help us debug this: [ 85.127739][ T4420] [ 85.137962][ T4420] Possible unsafe locking scenario: [ 85.137962][ T4420] [ 85.145438][ T4420] CPU0 CPU1 [ 85.150796][ T4420] ---- ---- [ 85.156152][ T4420] lock(&ocfs2_file_ip_alloc_sem_key); [ 85.161695][ T4420] lock(&osb->system_file_mutex); [ 85.169327][ T4420] lock(&ocfs2_file_ip_alloc_sem_key); [ 85.177396][ T4420] lock(&osb->system_file_mutex); [ 85.182506][ T4420] [ 85.182506][ T4420] *** DEADLOCK *** [ 85.182506][ T4420] [ 85.190650][ T4420] 3 locks held by syz.0.17/4420: [ 85.195585][ T4420] #0: ffff88801fe66460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 85.204856][ T4420] #1: ffff8880693e09c8 (&type->i_mutex_dir_key#8/1){+.+.}-{3:3}, at: do_renameat2+0x435/0xce0 [ 85.215217][ T4420] #2: ffff8880693e0660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_extend_dir+0x6c0/0x4ac0 [ 85.226171][ T4420] [ 85.226171][ T4420] stack backtrace: [ 85.232060][ T4420] CPU: 0 PID: 4420 Comm: syz.0.17 Not tainted syzkaller #0 [ 85.239252][ T4420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 85.249488][ T4420] Call Trace: [ 85.252765][ T4420] [ 85.255692][ T4420] dump_stack_lvl+0x188/0x24e [ 85.260402][ T4420] ? load_image+0x400/0x400 [ 85.264905][ T4420] ? show_regs_print_info+0x12/0x12 [ 85.270110][ T4420] ? print_circular_bug+0x12b/0x1a0 [ 85.275311][ T4420] check_noncircular+0x296/0x330 [ 85.280270][ T4420] ? add_chain_block+0x940/0x940 [ 85.285210][ T4420] ? lockdep_lock+0xf1/0x1f0 [ 85.289811][ T4420] ? _find_first_zero_bit+0xcf/0x100 [ 85.295107][ T4420] __lock_acquire+0x2d07/0x7d10 [ 85.299994][ T4420] ? check_path+0x40/0x40 [ 85.304358][ T4420] ? check_noncircular+0x189/0x330 [ 85.309480][ T4420] ? add_chain_block+0x940/0x940 [ 85.314424][ T4420] ? mark_lock+0x94/0x320 [ 85.318764][ T4420] ? verify_lock_unused+0x140/0x140 [ 85.323977][ T4420] ? __lock_acquire+0x13cf/0x7d10 [ 85.329012][ T4420] lock_acquire+0x1bb/0x4a0 [ 85.333517][ T4420] ? ocfs2_get_system_file_inode+0x1b2/0x850 [ 85.339577][ T4420] ? hlock_conflict+0x59/0x1f0 [ 85.344344][ T4420] ? __bfs+0x2a3/0x5c0 [ 85.348413][ T4420] ? __might_sleep+0xd0/0xd0 [ 85.353012][ T4420] ? read_lock_is_recursive+0x10/0x10 [ 85.358395][ T4420] ? check_path+0x21/0x40 [ 85.362768][ T4420] ? check_noncircular+0x189/0x330 [ 85.367904][ T4420] __mutex_lock+0x12d/0xaf0 [ 85.372416][ T4420] ? ocfs2_get_system_file_inode+0x1b2/0x850 [ 85.378397][ T4420] ? ocfs2_get_system_file_inode+0x151/0x850 [ 85.384376][ T4420] ? ocfs2_get_system_file_inode+0x1b2/0x850 [ 85.390355][ T4420] ? mutex_lock_nested+0x10/0x10 [ 85.395297][ T4420] ? do_raw_spin_lock+0x128/0x2f0 [ 85.400317][ T4420] ? __rwlock_init+0x140/0x140 [ 85.405075][ T4420] ? do_raw_spin_unlock+0x11d/0x230 [ 85.410272][ T4420] ocfs2_get_system_file_inode+0x1b2/0x850 [ 85.416080][ T4420] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 85.422230][ T4420] ? verify_lock_unused+0x140/0x140 [ 85.427430][ T4420] ? check_noncircular+0x189/0x330 [ 85.432580][ T4420] ocfs2_reserve_suballoc_bits+0x12e/0x4810 [ 85.438579][ T4420] ? mark_lock+0x94/0x320 [ 85.442939][ T4420] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 85.449011][ T4420] ? lock_chain_count+0x20/0x20 [ 85.453862][ T4420] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 85.459759][ T4420] ? lockdep_hardirqs_on+0x94/0x140 [ 85.464972][ T4420] ? ocfs2_block_group_search+0x4f0/0x4f0 [ 85.470687][ T4420] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 85.476665][ T4420] ? _raw_spin_unlock+0x40/0x40 [ 85.481517][ T4420] ? stack_trace_save+0xa6/0xf0 [ 85.486368][ T4420] ? __stack_depot_save+0x421/0x460 [ 85.491581][ T4420] ? kasan_set_track+0x60/0x70 [ 85.496369][ T4420] ? kasan_set_track+0x4b/0x70 [ 85.501130][ T4420] ? __kasan_kmalloc+0x8e/0xa0 [ 85.505895][ T4420] ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0 [ 85.512394][ T4420] ? ocfs2_extend_dir+0xcf8/0x4ac0 [ 85.517502][ T4420] ? ocfs2_prepare_dir_for_insert+0x323a/0x5660 [ 85.523755][ T4420] ? ocfs2_rename+0x1938/0x3950 [ 85.528639][ T4420] ? vfs_rename+0xbe1/0x1100 [ 85.533273][ T4420] ? do_renameat2+0x8e5/0xce0 [ 85.537962][ T4420] ? __x64_sys_rename+0x82/0x90 [ 85.542908][ T4420] ? do_syscall_64+0x4c/0xa0 [ 85.547636][ T4420] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.553728][ T4420] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 85.560078][ T4420] ? ocfs2_init_steal_slots+0x150/0x150 [ 85.565656][ T4420] ? rwsem_write_trylock+0x135/0x1c0 [ 85.570948][ T4420] ? clear_nonspinnable+0x60/0x60 [ 85.576011][ T4420] ? is_bpf_text_address+0x22/0x2a0 [ 85.581237][ T4420] ocfs2_extend_dir+0xcf8/0x4ac0 [ 85.586182][ T4420] ? verify_lock_unused+0x140/0x140 [ 85.591397][ T4420] ? __lock_acquire+0x13cf/0x7d10 [ 85.596435][ T4420] ? ocfs2_dx_dir_name_hash+0xbc0/0xbc0 [ 85.602029][ T4420] ? mark_lock+0x94/0x320 [ 85.606367][ T4420] ? ocfs2_allocate_extend_trans+0x670/0x670 [ 85.612350][ T4420] ? verify_lock_unused+0x140/0x140 [ 85.617556][ T4420] ? verify_lock_unused+0x140/0x140 [ 85.622761][ T4420] ? verify_lock_unused+0x140/0x140 [ 85.627993][ T4420] ? verify_lock_unused+0x140/0x140 [ 85.633195][ T4420] ? ocfs2_buffer_cached+0x364/0x910 [ 85.638481][ T4420] ? __lock_acquire+0x7d10/0x7d10 [ 85.643610][ T4420] ? do_raw_spin_lock+0x128/0x2f0 [ 85.648677][ T4420] ? ocfs2_read_blocks+0x11d8/0x1690 [ 85.653974][ T4420] ? ocfs2_set_buffer_uptodate+0xab/0x12e0 [ 85.659812][ T4420] ? ocfs2_dx_dir_name_hash+0x9eb/0xbc0 [ 85.665394][ T4420] ? ocfs2_prepare_dir_for_insert+0x5660/0x5660 [ 85.671663][ T4420] ocfs2_prepare_dir_for_insert+0x323a/0x5660 [ 85.677763][ T4420] ? ocfs2_read_blocks_sync+0xc60/0xc60 [ 85.683339][ T4420] ? ocfs2_fill_new_dir_el+0xa60/0xa60 [ 85.688826][ T4420] ? rcu_is_watching+0x11/0xa0 [ 85.693695][ T4420] ? ocfs2_search_dirblock+0x382/0x8c0 [ 85.699170][ T4420] ? ocfs2_read_dir_block_direct+0x4b0/0x4b0 [ 85.705183][ T4420] ? rcu_is_watching+0x11/0xa0 [ 85.709961][ T4420] ? ocfs2_search_dirblock+0x382/0x8c0 [ 85.715450][ T4420] ? __brelse+0x55/0x90 [ 85.719623][ T4420] ? ocfs2_find_entry+0xe51/0x2180 [ 85.724745][ T4420] ? ocfs2_find_entry+0xe51/0x2180 [ 85.729947][ T4420] ? ocfs2_find_entry+0xe51/0x2180 [ 85.735057][ T4420] ? ocfs2_free_dir_lookup_result+0x100/0x100 [ 85.741136][ T4420] ? ocfs2_free_dir_lookup_result+0x100/0x100 [ 85.747209][ T4420] ? ocfs2_inode_lock_full_nested+0x147/0x1bb0 [ 85.753365][ T4420] ? ocfs2_free_dir_lookup_result+0x100/0x100 [ 85.759495][ T4420] ? ocfs2_dentry_unlock+0xc6/0x170 [ 85.764697][ T4420] ? __lock_acquire+0x7d10/0x7d10 [ 85.769719][ T4420] ? do_raw_spin_lock+0x128/0x2f0 [ 85.774744][ T4420] ? __rwlock_init+0x140/0x140 [ 85.779568][ T4420] ? ocfs2_dentry_lock+0x1ef/0x2f0 [ 85.784714][ T4420] ? ocfs2_check_dir_for_entry+0x25d/0x450 [ 85.790516][ T4420] ? ocfs2_lookup_ino_from_name+0xf0/0xf0 [ 85.796236][ T4420] ? ocfs2_find_files_on_disk+0x116/0x390 [ 85.801952][ T4420] ocfs2_rename+0x1938/0x3950 [ 85.806631][ T4420] ? is_bpf_text_address+0x28b/0x2a0 [ 85.811915][ T4420] ? ocfs2_mknod+0x25b0/0x25b0 [ 85.816711][ T4420] ? __lock_acquire+0x13cf/0x7d10 [ 85.821750][ T4420] ? mark_lock+0x94/0x320 [ 85.826086][ T4420] ? __lock_acquire+0x13cf/0x7d10 [ 85.831210][ T4420] ? mark_lock+0x94/0x320 [ 85.835635][ T4420] ? __lock_acquire+0x13cf/0x7d10 [ 85.840673][ T4420] ? __lock_acquire+0x7d10/0x7d10 [ 85.845701][ T4420] ? verify_lock_unused+0x140/0x140 [ 85.850912][ T4420] ? verify_lock_unused+0x140/0x140 [ 85.856115][ T4420] ? ocfs2_inode_unlock_tracker+0x26c/0x2e0 [ 85.862010][ T4420] ? __lock_acquire+0x7d10/0x7d10 [ 85.867035][ T4420] ? __rwlock_init+0x140/0x140 [ 85.871798][ T4420] ? vfs_rename+0x72e/0x1100 [ 85.876407][ T4420] ? __lock_acquire+0x7d10/0x7d10 [ 85.881443][ T4420] ? __rwlock_init+0x140/0x140 [ 85.886202][ T4420] ? take_dentry_name_snapshot+0x90/0xf0 [ 85.891838][ T4420] ? do_raw_spin_unlock+0x11d/0x230 [ 85.897035][ T4420] ? ocfs2_mknod+0x25b0/0x25b0 [ 85.901817][ T4420] vfs_rename+0xbe1/0x1100 [ 85.906233][ T4420] ? __ia32_sys_link+0x90/0x90 [ 85.911428][ T4420] ? d_alloc+0x1e7/0x250 [ 85.915671][ T4420] ? bpf_lsm_path_rename+0x5/0x10 [ 85.920693][ T4420] ? security_path_rename+0x178/0x200 [ 85.926087][ T4420] do_renameat2+0x8e5/0xce0 [ 85.930586][ T4420] ? __lock_acquire+0x7d10/0x7d10 [ 85.935610][ T4420] ? fsnotify_move+0x4e0/0x4e0 [ 85.940387][ T4420] ? __check_object_size+0x500/0xa40 [ 85.945675][ T4420] ? strncpy_from_user+0x1e3/0x350 [ 85.950785][ T4420] ? getname_flags+0x206/0x500 [ 85.955551][ T4420] __x64_sys_rename+0x82/0x90 [ 85.960231][ T4420] do_syscall_64+0x4c/0xa0 [ 85.964747][ T4420] ? clear_bhb_loop+0x60/0xb0 [ 85.969421][ T4420] ? clear_bhb_loop+0x60/0xb0 [ 85.974103][ T4420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.979994][ T4420] RIP: 0033:0x7f237e79c819 [ 85.984418][ T4420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.004054][ T4420] RSP: 002b:00007ffe8aeefd48 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 86.012469][ T4420] RAX: ffffffffffffffda RBX: 00007f237ea15fa0 RCX: 00007f237e79c819 [ 86.020445][ T4420] RDX: 0000000000000000 RSI: 0000200000000f40 RDI: 00002000000003c0 [ 86.028414][ T4420] RBP: 00007f237e832c91 R08: 0000000000000000 R09: 0000000000000000 [ 86.036382][ T4420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.044458][ T4420] R13: 00007f237ea15fac R14: 00007f237ea15fa0 R15: 00007f237ea15fa0 [ 86.052455][ T4420] [ 86.057249][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 86.093985][ T4420] syz.0.17 (4420) used greatest stack depth: 18480 bytes left [ 86.138501][ T4362] ocfs2: Unmounting device (7,0) on (node local)