Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. 2026/06/07 05:21:50 parsed 1 programs [ 86.817317][ T14] cfg80211: failed to load regulatory.db [ 88.001141][ T4289] cgroup: Unknown subsys name 'net' [ 88.132059][ T4289] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.737511][ T4289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 92.424660][ T4315] chnl_net:caif_netlink_parms(): no params data found [ 92.491677][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.499504][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.508083][ T4315] device bridge_slave_0 entered promiscuous mode [ 92.521553][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.528925][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.537324][ T4315] device bridge_slave_1 entered promiscuous mode [ 92.562045][ T4315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.573826][ T4315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.603905][ T4315] team0: Port device team_slave_0 added [ 92.611457][ T4315] team0: Port device team_slave_1 added [ 92.630276][ T4315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.637368][ T4315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.663917][ T4315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.677973][ T4315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.685088][ T4315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.711692][ T4315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.752080][ T4315] device hsr_slave_0 entered promiscuous mode [ 92.759226][ T4315] device hsr_slave_1 entered promiscuous mode [ 92.879763][ T4315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.891595][ T4315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.901795][ T4315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.912523][ T4315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.965689][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.973463][ T4315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.981617][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.988782][ T4315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.047108][ T4315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.061995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.074121][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.083990][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.093989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 93.114122][ T4315] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.127498][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.137102][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.144400][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.163028][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.171750][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.178938][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.198935][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.209493][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.224645][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.242538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.255497][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.268398][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.474879][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.483379][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.506624][ T4315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.527483][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.542253][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.566480][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.576256][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.585107][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.593562][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.606358][ T4315] device veth0_vlan entered promiscuous mode [ 93.621808][ T4315] device veth1_vlan entered promiscuous mode [ 93.653137][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.661817][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.670298][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.680090][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.697750][ T4315] device veth0_macvtap entered promiscuous mode [ 93.708698][ T4315] device veth1_macvtap entered promiscuous mode [ 93.729634][ T4315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.737919][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.747929][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.756326][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.765904][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.781698][ T4315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.795004][ T4315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.804140][ T4315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.813496][ T4315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.823023][ T4315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.834876][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.844388][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.973268][ T75] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.128741][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.137062][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.153225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.174323][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.182918][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.191580][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.601001][ T4364] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.609911][ T4364] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.619294][ T4364] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.627893][ T4364] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.637240][ T4364] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.644579][ T4364] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/06/07 05:22:01 executed programs: 0 [ 96.099117][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.109007][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.117568][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.129508][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.137311][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.144674][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.165854][ T75] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.298215][ T4372] chnl_net:caif_netlink_parms(): no params data found [ 96.352681][ T4372] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.360104][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.372935][ T4372] device bridge_slave_0 entered promiscuous mode [ 96.381482][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.388932][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.398484][ T4372] device bridge_slave_1 entered promiscuous mode [ 96.421165][ T4372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.437325][ T4372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.461440][ T4372] team0: Port device team_slave_0 added [ 96.469976][ T4372] team0: Port device team_slave_1 added [ 96.490340][ T4372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.497737][ T4372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.524666][ T4372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.537205][ T4372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.544377][ T4372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.571681][ T4372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.606584][ T4372] device hsr_slave_0 entered promiscuous mode [ 96.614774][ T4372] device hsr_slave_1 entered promiscuous mode [ 96.622219][ T4372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.631813][ T4372] Cannot create hsr debugfs directory [ 98.256465][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 98.417515][ T75] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.491654][ T75] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.329392][ T4372] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.341862][ T4372] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.354013][ T4372] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.365574][ T4372] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.388410][ T75] device hsr_slave_0 left promiscuous mode [ 99.396356][ T75] device hsr_slave_1 left promiscuous mode [ 99.404864][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.415499][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.427633][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.435404][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.443593][ T75] device bridge_slave_1 left promiscuous mode [ 99.453887][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.471243][ T75] device bridge_slave_0 left promiscuous mode [ 99.477761][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.509703][ T75] device veth1_macvtap left promiscuous mode [ 99.519091][ T75] device veth0_macvtap left promiscuous mode [ 99.525813][ T75] device veth1_vlan left promiscuous mode [ 99.531918][ T75] device veth0_vlan left promiscuous mode [ 100.033651][ T75] team0 (unregistering): Port device team_slave_1 removed [ 100.065538][ T75] team0 (unregistering): Port device team_slave_0 removed [ 100.095745][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.127265][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.336046][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 100.350504][ T75] bond0 (unregistering): Released all slaves [ 100.483483][ T4372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.498585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.506842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.529147][ T4372] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.542449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.552764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.562846][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.570049][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.579644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.606787][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.616521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.625197][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.632319][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.642113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.652422][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.674624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.684928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.694744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.727619][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.738687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.754241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.765795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.778625][ T4372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.792803][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.802764][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.811755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.097414][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.104976][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.120595][ T4372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.141437][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.150473][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.170386][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.179318][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.188575][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.197212][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.209423][ T4372] device veth0_vlan entered promiscuous mode [ 101.221522][ T4372] device veth1_vlan entered promiscuous mode [ 101.241992][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.250816][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.260337][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.269823][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.302758][ T4372] device veth0_macvtap entered promiscuous mode [ 101.315654][ T4372] device veth1_macvtap entered promiscuous mode [ 101.359566][ T4372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.368631][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.378294][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.386692][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.395606][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.426103][ T4372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.436226][ T4372] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.445015][ T4372] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.454016][ T4372] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.463296][ T4372] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.474851][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.486199][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.587417][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.600545][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.609887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/06/07 05:22:06 executed programs: 2 [ 101.658019][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.666635][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.674275][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.773791][ T4431] loop0: detected capacity change from 0 to 4096 [ 101.790861][ T4431] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 101.833381][ T4431] ntfs: volume version 3.1. [ 102.416536][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 102.907826][ T4431] syz.0.17 (4431): drop_caches: 1 [ 102.921293][ T29] [ 102.923675][ T29] ====================================================== [ 102.930707][ T29] WARNING: possible circular locking dependency detected [ 102.937791][ T29] syzkaller #0 Not tainted [ 102.942211][ T29] ------------------------------------------------------ [ 102.949410][ T29] kworker/u4:2/29 is trying to acquire lock: [ 102.955426][ T29] ffff88806df80940 (&rl->lock){++++}-{3:3}, at: ntfs_read_folio+0x1463/0x29c0 [ 102.964454][ T29] [ 102.964454][ T29] but task is already holding lock: [ 102.971826][ T29] ffff88806df83310 (&ni->mrec_lock){+.+.}-{3:3}, at: map_mft_record+0x4c/0x650 [ 102.980822][ T29] [ 102.980822][ T29] which lock already depends on the new lock. [ 102.980822][ T29] [ 102.991262][ T29] [ 102.991262][ T29] the existing dependency chain (in reverse order) is: [ 103.000303][ T29] [ 103.000303][ T29] -> #1 (&ni->mrec_lock){+.+.}-{3:3}: [ 103.007896][ T29] __mutex_lock+0x12d/0xaf0 [ 103.012981][ T29] map_mft_record+0x4c/0x650 [ 103.018111][ T29] ntfs_attr_extend_allocation+0x528/0x4360 [ 103.024637][ T29] ntfs_file_write_iter+0x369/0x1a70 [ 103.030470][ T29] do_iter_write+0x642/0xb10 [ 103.035606][ T29] do_pwritev+0x23d/0x3a0 [ 103.040460][ T29] do_syscall_64+0x4c/0xa0 [ 103.045415][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.051965][ T29] [ 103.051965][ T29] -> #0 (&rl->lock){++++}-{3:3}: [ 103.059110][ T29] __lock_acquire+0x2d07/0x7d10 [ 103.064534][ T29] lock_acquire+0x1bb/0x4a0 [ 103.069579][ T29] down_read+0x42/0x2d0 [ 103.074267][ T29] ntfs_read_folio+0x1463/0x29c0 [ 103.079732][ T29] filemap_read_folio+0x16b/0x770 [ 103.085320][ T29] do_read_cache_folio+0x2a0/0x760 [ 103.090990][ T29] do_read_cache_page+0x32/0x220 [ 103.096468][ T29] ntfs_sync_mft_mirror+0x24f/0x1ad0 [ 103.102287][ T29] write_mft_record_nolock+0x1188/0x1900 [ 103.108465][ T29] write_mft_record+0x136/0x300 [ 103.113864][ T29] __ntfs_write_inode+0x724/0xbf0 [ 103.119434][ T29] __writeback_single_inode+0x75b/0x1160 [ 103.125718][ T29] writeback_sb_inodes+0xb30/0x1850 [ 103.131513][ T29] wb_writeback+0x482/0xd50 [ 103.136625][ T29] wb_workfn+0x423/0xee0 [ 103.141437][ T29] process_one_work+0x8a2/0x1160 [ 103.146913][ T29] worker_thread+0xaa2/0x1270 [ 103.152125][ T29] kthread+0x29d/0x330 [ 103.156725][ T29] ret_from_fork+0x1f/0x30 [ 103.161684][ T29] [ 103.161684][ T29] other info that might help us debug this: [ 103.161684][ T29] [ 103.171923][ T29] Possible unsafe locking scenario: [ 103.171923][ T29] [ 103.179397][ T29] CPU0 CPU1 [ 103.184775][ T29] ---- ---- [ 103.190167][ T29] lock(&ni->mrec_lock); [ 103.194951][ T29] lock(&rl->lock); [ 103.201821][ T29] lock(&ni->mrec_lock); [ 103.208743][ T29] lock(&rl->lock); [ 103.212734][ T29] [ 103.212734][ T29] *** DEADLOCK *** [ 103.212734][ T29] [ 103.220972][ T29] 3 locks held by kworker/u4:2/29: [ 103.226204][ T29] #0: ffff88801d24f138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 103.236989][ T29] #1: ffffc90000a5fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 103.248854][ T29] #2: ffff88806df83310 (&ni->mrec_lock){+.+.}-{3:3}, at: map_mft_record+0x4c/0x650 [ 103.258271][ T29] [ 103.258271][ T29] stack backtrace: [ 103.264178][ T29] CPU: 0 PID: 29 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 103.271579][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 103.281750][ T29] Workqueue: writeback wb_workfn (flush-7:0) [ 103.287774][ T29] Call Trace: [ 103.291065][ T29] [ 103.294358][ T29] dump_stack_lvl+0x188/0x24e [ 103.299060][ T29] ? load_image+0x400/0x400 [ 103.303586][ T29] ? show_regs_print_info+0x12/0x12 [ 103.308813][ T29] ? print_circular_bug+0x12b/0x1a0 [ 103.314035][ T29] check_noncircular+0x296/0x330 [ 103.318997][ T29] ? look_up_lock_class+0x75/0x140 [ 103.324122][ T29] ? add_chain_block+0x940/0x940 [ 103.329081][ T29] ? lockdep_lock+0xf1/0x1f0 [ 103.333692][ T29] ? _find_first_zero_bit+0xcf/0x100 [ 103.338989][ T29] __lock_acquire+0x2d07/0x7d10 [ 103.343865][ T29] ? verify_lock_unused+0x140/0x140 [ 103.349081][ T29] ? memset+0x1e/0x40 [ 103.353075][ T29] lock_acquire+0x1bb/0x4a0 [ 103.357599][ T29] ? ntfs_read_folio+0x1463/0x29c0 [ 103.362727][ T29] ? __might_sleep+0xd0/0xd0 [ 103.367337][ T29] ? read_lock_is_recursive+0x10/0x10 [ 103.372833][ T29] ? _raw_read_unlock_irqrestore+0x82/0x120 [ 103.378838][ T29] ? lockdep_hardirqs_on+0x94/0x140 [ 103.384066][ T29] ? _raw_read_unlock_irqrestore+0xc1/0x120 [ 103.389986][ T29] ? _raw_read_unlock+0x40/0x40 [ 103.394866][ T29] down_read+0x42/0x2d0 [ 103.399048][ T29] ? ntfs_read_folio+0x1463/0x29c0 [ 103.404180][ T29] ntfs_read_folio+0x1463/0x29c0 [ 103.409152][ T29] ? ntfs_writepage+0x1650/0x1650 [ 103.414201][ T29] ? __lock_acquire+0x7d10/0x7d10 [ 103.419287][ T29] ? folio_put+0xd0/0xd0 [ 103.423552][ T29] ? folio_alloc+0x51/0x60 [ 103.428001][ T29] filemap_read_folio+0x16b/0x770 [ 103.433137][ T29] ? folio_batch_add_and_move+0x14a/0x250 [ 103.438978][ T29] ? ntfs_writepage+0x1650/0x1650 [ 103.444037][ T29] ? maybe_unlock_mmap_for_io+0x140/0x140 [ 103.449792][ T29] do_read_cache_folio+0x2a0/0x760 [ 103.454941][ T29] ? ntfs_writepage+0x1650/0x1650 [ 103.459989][ T29] do_read_cache_page+0x32/0x220 [ 103.464956][ T29] ntfs_sync_mft_mirror+0x24f/0x1ad0 [ 103.470271][ T29] ? trace_raw_output_block_rq_remap+0x240/0x240 [ 103.476640][ T29] ? submit_bio_noacct_nocheck+0x832/0xaa0 [ 103.482474][ T29] ? should_fail_request+0x70/0x70 [ 103.487617][ T29] ? __mark_mft_record_dirty+0x180/0x180 [ 103.494071][ T29] write_mft_record_nolock+0x1188/0x1900 [ 103.499830][ T29] ? ntfs_unmap_page+0x270/0x270 [ 103.504789][ T29] ? slab_free_freelist_hook+0x131/0x1a0 [ 103.510464][ T29] write_mft_record+0x136/0x300 [ 103.515359][ T29] __ntfs_write_inode+0x724/0xbf0 [ 103.520418][ T29] __writeback_single_inode+0x75b/0x1160 [ 103.526210][ T29] writeback_sb_inodes+0xb30/0x1850 [ 103.531513][ T29] ? queue_io+0x5a0/0x5a0 [ 103.535904][ T29] ? rcu_is_watching+0x11/0xa0 [ 103.540692][ T29] wb_writeback+0x482/0xd50 [ 103.545434][ T29] ? percpu_ref_tryget+0x250/0x250 [ 103.550717][ T29] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 103.556734][ T29] ? _raw_spin_unlock_irq+0x1f/0x40 [ 103.562047][ T29] wb_workfn+0x423/0xee0 [ 103.566416][ T29] ? inode_wait_for_writeback+0x220/0x220 [ 103.572270][ T29] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 103.578269][ T29] ? read_lock_is_recursive+0x10/0x10 [ 103.584370][ T29] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 103.590296][ T29] ? _raw_spin_unlock+0x40/0x40 [ 103.595182][ T29] ? _raw_spin_unlock_irq+0x1f/0x40 [ 103.600411][ T29] ? process_one_work+0x7b0/0x1160 [ 103.605552][ T29] process_one_work+0x8a2/0x1160 [ 103.610634][ T29] ? worker_detach_from_pool+0x240/0x240 [ 103.616296][ T29] ? _raw_spin_lock_irq+0xb7/0xf0 [ 103.621372][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 103.627135][ T29] ? kthread_data+0x4b/0xc0 [ 103.631679][ T29] worker_thread+0xaa2/0x1270 [ 103.636388][ T29] kthread+0x29d/0x330 [ 103.640562][ T29] ? worker_clr_flags+0x1a0/0x1a0 [ 103.645625][ T29] ? kthread_blkcg+0xd0/0xd0 [ 103.650252][ T29] ret_from_fork+0x1f/0x30 [ 103.654693][ T29] [ 103.714114][ T4432] loop0: detected capacity change from 0 to 4096 [ 103.721744][ T4432] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 103.763302][ T4432] ntfs: volume version 3.1. [ 103.833163][ T4432] syz.0.18 (4432): drop_caches: 1 [ 103.956542][ T4433] syz.0.19 (4433): drop_caches: 1 [ 103.997551][ T4434] loop0: detected capacity change from 0 to 4096 [ 104.004800][ T4434] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 104.045373][ T4434] ntfs: volume version 3.1. [ 104.113593][ T4434] syz.0.20 (4434): drop_caches: 1 [ 104.240099][ T4435] syz.0.21 (4435): drop_caches: 1 [ 104.281174][ T4436] loop0: detected capacity change from 0 to 4096 [ 104.293198][ T4436] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 104.331802][ T4436] ntfs: volume version 3.1. [ 104.402919][ T4436] syz.0.22 (4436): drop_caches: 1 [ 104.495597][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 104.532642][ T4437] syz.0.23 (4437): drop_caches: 1 [ 104.573930][ T4438] loop0: detected capacity change from 0 to 4096 [ 104.586376][ T4438] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 104.626777][ T4438] ntfs: volume version 3.1. [ 104.695461][ T4438] syz.0.24 (4438): drop_caches: 1 [ 104.820995][ T4439] syz.0.25 (4439): drop_caches: 1 [ 104.863083][ T4440] loop0: detected capacity change from 0 to 4096 [ 104.874702][ T4440] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 104.910401][ T4440] ntfs: volume version 3.1. [ 104.980623][ T4440] syz.0.26 (4440): drop_caches: 1 [ 105.107552][ T4441] syz.0.27 (4441): drop_caches: 1 [ 105.148724][ T4442] loop0: detected capacity change from 0 to 4096 [ 105.160858][ T4442] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 105.207420][ T4442] ntfs: volume version 3.1. [ 105.291760][ T4442] syz.0.28 (4442): drop_caches: 1 [ 105.418209][ T4443] syz.0.29 (4443): drop_caches: 1 [ 105.460135][ T4444] loop0: detected capacity change from 0 to 4096 [ 105.474881][ T4444] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 105.512938][ T4444] ntfs: volume version 3.1. [ 105.580442][ T4444] syz.0.30 (4444): drop_caches: 1 [ 105.711939][ T4445] syz.0.31 (4445): drop_caches: 1 [ 105.755448][ T4446] loop0: detected capacity change from 0 to 4096 [ 105.766960][ T4446] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 105.803166][ T4446] ntfs: volume version 3.1. [ 105.871833][ T4446] syz.0.32 (4446): drop_caches: 1 [ 105.996474][ T4447] syz.0.33 (4447): drop_caches: 1 [ 106.039656][ T4448] loop0: detected capacity change from 0 to 4096 [ 106.046943][ T4448] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 106.102164][ T4448] ntfs: volume version 3.1. [ 106.170703][ T4448] syz.0.34 (4448): drop_caches: 1 [ 106.297451][ T4449] syz.0.35 (4449): drop_caches: 1 [ 106.372938][ T4450] ntfs: volume version 3.1. [ 106.440757][ T4450] syz.0.36 (4450): drop_caches: 1 [ 106.508185][ T4451] ntfs: volume version 3.1. [ 106.582098][ T4451] syz.0.37 (4451): drop_caches: 1 [ 106.656383][ T4452] ntfs: volume version 3.1. [ 106.727798][ T4452] syz.0.38 (4452): drop_caches: 1 2026/06/07 05:22:12 executed programs: 24 [ 106.787980][ T4453] set_capacity_and_notify: 3 callbacks suppressed [ 106.788030][ T4453] loop0: detected capacity change from 0 to 4096 [ 106.803186][ T4453] __ntfs_warning: 3 callbacks suppressed [ 106.803199][ T4453] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 106.842327][ T4453] ntfs: volume version 3.1. [ 106.911329][ T4453] syz.0.39 (4453): drop_caches: 1 [ 106.980008][ T4454] loop0: detected capacity change from 0 to 4096 [ 106.987263][ T4454] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 107.018990][ T4454] ntfs: volume version 3.1. [ 107.090982][ T4454] syz.0.40 (4454): drop_caches: 1 [ 107.153414][ T4455] loop0: detected capacity change from 0 to 4096 [ 107.160664][ T4455] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 107.194174][ T4455] ntfs: volume version 3.1. [ 107.263694][ T4455] syz.0.41 (4455): drop_caches: 1 [ 107.390122][ T4456] syz.0.42 (4456): drop_caches: 1 [ 107.433481][ T4457] loop0: detected capacity change from 0 to 4096 [ 107.441115][ T4457] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 107.478881][ T4457] ntfs: volume version 3.1. [ 107.548223][ T4457] syz.0.43 (4457): drop_caches: 1 [ 107.675507][ T4458] syz.0.44 (4458): drop_caches: 1 [ 107.717125][ T4459] loop0: detected capacity change from 0 to 4096 [ 107.724273][ T4459] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 107.771081][ T4459] ntfs: volume version 3.1. [ 107.842879][ T4459] syz.0.45 (4459): drop_caches: 1 [ 107.894046][ T4460] loop0: detected capacity change from 0 to 4096 [ 107.909724][ T4460] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 107.942396][ T4460] ntfs: volume version 3.1. [ 108.015455][ T4460] syz.0.46 (4460): drop_caches: 1 [ 108.150668][ T4461] syz.0.47 (4461): drop_caches: 1 [ 108.192897][ T4462] loop0: detected capacity change from 0 to 4096 [ 108.204596][ T4462] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 108.242069][ T4462] ntfs: volume version 3.1. [ 108.310079][ T4462] syz.0.48 (4462): drop_caches: 1 [ 108.371594][ T4463] loop0: detected capacity change from 0 to 4096 [ 108.384951][ T4463] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 108.426704][ T4463] ntfs: volume version 3.1. [ 108.494965][ T4463] syz.0.49 (4463): drop_caches: 1 [ 108.558812][ T4464] loop0: detected capacity change from 0 to 4096 [ 108.570381][ T4464] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 108.601873][ T4464] ntfs: volume version 3.1. [ 108.669792][ T4464] syz.0.50 (4464): drop_caches: 1 [ 108.798987][ T4465] syz.0.51 (4465): drop_caches: 1 [ 108.841012][ T4466] loop0: detected capacity change from 0 to 4096 [ 108.852348][ T4466] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 108.891497][ T4466] ntfs: volume version 3.1. [ 108.959874][ T4466] syz.0.52 (4466): drop_caches: 1 [ 109.086333][ T4467] syz.0.53 (4467): drop_caches: 1 [ 109.160767][ T4468] ntfs: volume version 3.1. [ 109.237780][ T4468] syz.0.54 (4468): drop_caches: 1 [ 109.358365][ T4469] syz.0.55 (4469): drop_caches: 1 [ 109.410046][ T4470] ntfs: volume version 3.1. [ 109.496772][ T4470] syz.0.56 (4470): drop_caches: 1 [ 109.585773][ T4471] ntfs: volume version 3.1. [ 109.654094][ T4471] syz.0.57 (4471): drop_caches: 1 [ 109.731080][ T4472] ntfs: volume version 3.1. [ 109.799498][ T4472] syz.0.58 (4472): drop_caches: 1 [ 109.880399][ T4473] ntfs: volume version 3.1. [ 109.954453][ T4473] syz.0.59 (4473): drop_caches: 1 [ 110.039012][ T4474] ntfs: volume version 3.1. [ 110.108576][ T4474] syz.0.60 (4474): drop_caches: 1 [ 110.237637][ T4475] syz.0.61 (4475): drop_caches: 1 [ 110.312460][ T4476] ntfs: volume version 3.1. [ 110.385783][ T4476] syz.0.62 (4476): drop_caches: 1 [ 110.516284][ T4477] syz.0.63 (4477): drop_caches: 1 [ 110.580072][ T4478] ntfs: volume version 3.1. [ 110.649877][ T4478] syz.0.64 (4478): drop_caches: 1 [ 110.774089][ T4479] syz.0.65 (4479): drop_caches: 1 [ 110.833856][ T4480] ntfs: volume version 3.1. [ 110.902107][ T4480] syz.0.66 (4480): drop_caches: 1 [ 110.983095][ T4481] ntfs: volume version 3.1. [ 111.051571][ T4481] syz.0.67 (4481): drop_caches: 1 [ 111.124828][ T4482] ntfs: volume version 3.1. [ 111.197124][ T4482] syz.0.68 (4482): drop_caches: 1 [ 111.264044][ T4483] ntfs: volume version 3.1. [ 111.338465][ T4483] syz.0.69 (4483): drop_caches: 1 [ 111.413276][ T4484] ntfs: volume version 3.1. [ 111.487058][ T4484] syz.0.70 (4484): drop_caches: 1 [ 111.556033][ T4485] ntfs: volume version 3.1. [ 111.628195][ T4485] syz.0.71 (4485): drop_caches: 1 [ 111.712839][ T4486] ntfs: volume version 3.1. [ 111.856157][ T4486] syz.0.72 (4486): drop_caches: 1 2026/06/07 05:22:17 executed programs: 58 [ 112.010903][ T4487] syz.0.73 (4487): drop_caches: 1 [ 112.052685][ T4488] set_capacity_and_notify: 15 callbacks suppressed [ 112.052698][ T4488] loop0: detected capacity change from 0 to 4096 [ 112.071878][ T4488] __ntfs_warning: 15 callbacks suppressed [ 112.071906][ T4488] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 112.120991][ T4488] ntfs: volume version 3.1. [ 112.192766][ T4488] syz.0.74 (4488): drop_caches: 1 [ 112.313928][ T4489] syz.0.75 (4489): drop_caches: 1 [ 112.359365][ T4490] loop0: detected capacity change from 0 to 4096 [ 112.371424][ T4490] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 112.403308][ T4490] ntfs: volume version 3.1. [ 112.472624][ T4490] syz.0.76 (4490): drop_caches: 1 [ 112.598856][ T4491] syz.0.77 (4491): drop_caches: 1 [ 112.637170][ T4492] loop0: detected capacity change from 0 to 4096 [ 112.644398][ T4492] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 112.680841][ T4492] ntfs: volume version 3.1. [ 112.748996][ T4492] syz.0.78 (4492): drop_caches: 1 [ 112.876146][ T4493] syz.0.79 (4493): drop_caches: 1