Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. 2025/10/27 09:21:38 parsed 1 programs [ 82.605267][ T4269] cgroup: Unknown subsys name 'net' [ 82.742705][ T4269] cgroup: Unknown subsys name 'rlimit' [ 84.343383][ T4269] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 86.898214][ T951] cfg80211: failed to load regulatory.db [ 87.037621][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.046208][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.063049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.082411][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.091880][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.102438][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.561116][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 88.614227][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.622366][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.630689][ T4331] device bridge_slave_0 entered promiscuous mode [ 88.640113][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.647337][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.655186][ T4331] device bridge_slave_1 entered promiscuous mode [ 88.686803][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.698090][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.735491][ T4331] team0: Port device team_slave_0 added [ 88.743841][ T4331] team0: Port device team_slave_1 added [ 88.764603][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.772292][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.798302][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.819382][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.826536][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.853075][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.897597][ T4331] device hsr_slave_0 entered promiscuous mode [ 88.904401][ T4331] device hsr_slave_1 entered promiscuous mode [ 89.023360][ T4331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.043581][ T4331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.052980][ T4331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.063165][ T4331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.102599][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.109910][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.118798][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.126065][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.187161][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.201865][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.211936][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.222261][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.237085][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.288269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.296967][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.304228][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.321798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.331185][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.338455][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.366361][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.376598][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.419254][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.433087][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.442364][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.464989][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.473789][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.485476][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.743521][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.752359][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.769326][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.788480][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.797903][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.820140][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.828631][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.838106][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.846310][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.857335][ T4331] device veth0_vlan entered promiscuous mode [ 89.872852][ T4331] device veth1_vlan entered promiscuous mode [ 89.893822][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.902903][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.912163][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.921799][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.932736][ T4331] device veth0_macvtap entered promiscuous mode [ 89.945635][ T4331] device veth1_macvtap entered promiscuous mode [ 89.961929][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.970668][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.979430][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.989238][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.000686][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.012194][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.023454][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.032356][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.044375][ T4331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.054664][ T4331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.064635][ T4331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.073767][ T4331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.457044][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.584265][ T4362] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.593414][ T4362] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.602420][ T4362] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.611429][ T4362] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.620167][ T4362] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.627666][ T4362] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/10/27 09:21:49 executed programs: 0 [ 91.081000][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.089998][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.097899][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.107854][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.115677][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.123616][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.266654][ T4372] chnl_net:caif_netlink_parms(): no params data found [ 91.319841][ T4372] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.327312][ T4372] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.336128][ T4372] device bridge_slave_0 entered promiscuous mode [ 91.345809][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.353263][ T4372] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.361345][ T4372] device bridge_slave_1 entered promiscuous mode [ 91.387258][ T4372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.398421][ T4372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.425597][ T4372] team0: Port device team_slave_0 added [ 91.434041][ T4372] team0: Port device team_slave_1 added [ 91.455249][ T4372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.462522][ T4372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.489019][ T4372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.502127][ T4372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.509292][ T4372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.535577][ T4372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.580466][ T4372] device hsr_slave_0 entered promiscuous mode [ 91.588605][ T4372] device hsr_slave_1 entered promiscuous mode [ 91.595267][ T4372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.604253][ T4372] Cannot create hsr debugfs directory [ 92.520528][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.217641][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 94.939693][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.980674][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.306020][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 95.833267][ T4372] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.844292][ T4372] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.855354][ T4372] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.880469][ T4372] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.018686][ T4372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.034249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.049367][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.062692][ T4372] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.073904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.085443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.097578][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.104853][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.117129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.132180][ T9] device hsr_slave_0 left promiscuous mode [ 96.140466][ T9] device hsr_slave_1 left promiscuous mode [ 96.147805][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.155333][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.164728][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.172618][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.181871][ T9] device bridge_slave_1 left promiscuous mode [ 96.188959][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.204338][ T9] device bridge_slave_0 left promiscuous mode [ 96.212145][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.238644][ T9] device veth1_macvtap left promiscuous mode [ 96.245196][ T9] device veth0_macvtap left promiscuous mode [ 96.251859][ T9] device veth1_vlan left promiscuous mode [ 96.258258][ T9] device veth0_vlan left promiscuous mode [ 96.627421][ T9] team0 (unregistering): Port device team_slave_1 removed [ 96.660796][ T9] team0 (unregistering): Port device team_slave_0 removed [ 96.695415][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.729801][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.045490][ T9] bond0 (unregistering): Released all slaves [ 97.130267][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.139737][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.149927][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.157141][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.165501][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.175800][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.187005][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.196791][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.205726][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.226354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.235795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.249259][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.260701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.272909][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.281821][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.292980][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.376252][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 97.525460][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.533344][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.549194][ T4372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.574712][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.585240][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.607970][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.618169][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.628906][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.637336][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.650063][ T4372] device veth0_vlan entered promiscuous mode [ 97.661465][ T4372] device veth1_vlan entered promiscuous mode [ 97.682782][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.691959][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.702084][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.711450][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.723133][ T4372] device veth0_macvtap entered promiscuous mode [ 97.734011][ T4372] device veth1_macvtap entered promiscuous mode [ 97.768127][ T4372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.775600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.786233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.794962][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.805675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.823156][ T4372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.832623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.841997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.853572][ T4372] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.863498][ T4372] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.872603][ T4372] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.882436][ T4372] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.934832][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.955286][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.975057][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.988193][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.997434][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.016431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.111516][ T4423] loop0: detected capacity change from 0 to 4096 [ 98.138049][ T4423] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 98.172754][ T4423] [ 98.175179][ T4423] ============================================ [ 98.181465][ T4423] WARNING: possible recursive locking detected [ 98.187924][ T4423] syzkaller #0 Not tainted [ 98.192369][ T4423] -------------------------------------------- [ 98.198549][ T4423] syz.0.17/4423 is trying to acquire lock: [ 98.204390][ T4423] ffff888071659e80 (&ni->ni_lock/5){+.+.}-{3:3}, at: mi_read+0x2d0/0x590 [ 98.212914][ T4423] [ 98.212914][ T4423] but task is already holding lock: [ 98.220310][ T4423] ffff88805b461e80 (&ni->ni_lock/5){+.+.}-{3:3}, at: ntfs_link+0xf2/0x280 [ 98.228923][ T4423] [ 98.228923][ T4423] other info that might help us debug this: [ 98.237125][ T4423] Possible unsafe locking scenario: [ 98.237125][ T4423] [ 98.246246][ T4423] CPU0 [ 98.249534][ T4423] ---- [ 98.252818][ T4423] lock(&ni->ni_lock/5); [ 98.257168][ T4423] lock(&ni->ni_lock/5); [ 98.261535][ T4423] [ 98.261535][ T4423] *** DEADLOCK *** [ 98.261535][ T4423] [ 98.269768][ T4423] May be due to missing lock nesting notation [ 98.269768][ T4423] [ 98.278092][ T4423] 6 locks held by syz.0.17/4423: [ 98.284857][ T4423] #0: ffff88807926c460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 98.294206][ T4423] #1: ffff88805b4619c0 (&type->i_mutex_dir_key#8/1){+.+.}-{3:3}, at: filename_create+0x1f2/0x450 [ 98.305595][ T4423] #2: ffff88805b462120 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: vfs_link+0x513/0x7c0 [ 98.315813][ T4423] #3: ffff88805b461720 (&ni->ni_lock/6){+.+.}-{3:3}, at: ntfs_link+0xd7/0x280 [ 98.324813][ T4423] #4: ffff88805b461e80 (&ni->ni_lock/5){+.+.}-{3:3}, at: ntfs_link+0xf2/0x280 [ 98.333805][ T4423] #5: ffff88807926a120 (&wnd->rw_lock/1){+.+.}-{3:3}, at: ntfs_look_free_mft+0x160/0xd40 [ 98.343774][ T4423] [ 98.343774][ T4423] stack backtrace: [ 98.349687][ T4423] CPU: 1 PID: 4423 Comm: syz.0.17 Not tainted syzkaller #0 [ 98.356980][ T4423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 98.367054][ T4423] Call Trace: [ 98.370371][ T4423] [ 98.373312][ T4423] dump_stack_lvl+0x168/0x22e [ 98.378019][ T4423] ? show_regs_print_info+0x12/0x12 [ 98.383230][ T4423] ? load_image+0x3b0/0x3b0 [ 98.388018][ T4423] __lock_acquire+0x122f/0x7c50 [ 98.393097][ T4423] ? lockdep_lock+0x1e0/0x1e0 [ 98.397790][ T4423] ? __lock_acquire+0x28b5/0x7c50 [ 98.402845][ T4423] ? verify_lock_unused+0x140/0x140 [ 98.408336][ T4423] lock_acquire+0x1b4/0x490 [ 98.412867][ T4423] ? mi_read+0x2d0/0x590 [ 98.417124][ T4423] ? ntfs_read_run_nb+0x28e/0xe00 [ 98.422168][ T4423] ? __might_sleep+0xd0/0xd0 [ 98.426778][ T4423] ? read_lock_is_recursive+0x10/0x10 [ 98.432167][ T4423] ? mi_format_new+0xeb/0x5d0 [ 98.436862][ T4423] __mutex_lock+0x120/0xaf0 [ 98.441381][ T4423] ? mi_read+0x2d0/0x590 [ 98.445728][ T4423] ? mi_read+0x2d0/0x590 [ 98.449987][ T4423] ? mi_read+0x1fd/0x590 [ 98.454247][ T4423] ? mutex_lock_nested+0x10/0x10 [ 98.459209][ T4423] ? __up_read+0x27c/0x660 [ 98.463637][ T4423] ? __lock_acquire+0x7c50/0x7c50 [ 98.468677][ T4423] ? up_read+0x20/0x20 [ 98.472758][ T4423] ? preempt_count_add+0x8d/0x190 [ 98.477793][ T4423] mi_read+0x2d0/0x590 [ 98.481889][ T4423] mi_format_new+0x1ba/0x5d0 [ 98.486496][ T4423] ni_add_subrecord+0xcc/0x440 [ 98.491270][ T4423] ntfs_look_free_mft+0x6a4/0xd40 [ 98.496327][ T4423] ? ntfs_refresh_zone+0x3a0/0x3a0 [ 98.501462][ T4423] ? ni_create_attr_list+0x165/0x12c0 [ 98.506873][ T4423] ? mi_enum_attr+0x1ed/0x9d0 [ 98.511568][ T4423] ni_create_attr_list+0x8a2/0x12c0 [ 98.516783][ T4423] ? ni_remove_attr+0x8a0/0x8a0 [ 98.521652][ T4423] ? ntfs_link+0x114/0x280 [ 98.526081][ T4423] ? vfs_link+0x615/0x7c0 [ 98.530442][ T4423] ? do_linkat+0x274/0x550 [ 98.534884][ T4423] ? __x64_sys_link+0x82/0x90 [ 98.539579][ T4423] ? do_syscall_64+0x4c/0xa0 [ 98.544191][ T4423] ni_ins_attr_ext+0x31a/0xa00 [ 98.549033][ T4423] ? ni_find_attr+0x1fc/0x860 [ 98.553774][ T4423] ? ni_expand_list+0xe90/0xe90 [ 98.558680][ T4423] ? ni_load_mi+0x110/0x110 [ 98.563488][ T4423] ? ntfs_nls_to_utf16+0x558/0xa10 [ 98.569680][ T4423] ni_add_name+0x4fb/0xa00 [ 98.574129][ T4423] ntfs_link_inode+0x12e/0x170 [ 98.578921][ T4423] ntfs_link+0x114/0x280 [ 98.583178][ T4423] ? try_break_deleg+0x79/0x120 [ 98.588055][ T4423] vfs_link+0x615/0x7c0 [ 98.592235][ T4423] do_linkat+0x274/0x550 [ 98.596493][ T4423] ? __phys_addr_symbol+0x2b/0x70 [ 98.601542][ T4423] ? fsnotify_link+0x240/0x240 [ 98.606323][ T4423] ? getname_flags+0x206/0x500 [ 98.611111][ T4423] __x64_sys_link+0x82/0x90 [ 98.615627][ T4423] do_syscall_64+0x4c/0xa0 [ 98.620168][ T4423] ? clear_bhb_loop+0x60/0xb0 [ 98.624858][ T4423] ? clear_bhb_loop+0x60/0xb0 [ 98.629593][ T4423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.635549][ T4423] RIP: 0033:0x7f3adef8efc9 [ 98.639994][ T4423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.659982][ T4423] RSP: 002b:00007ffe1a105aa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 98.668510][ T4423] RAX: ffffffffffffffda RBX: 00007f3adf1e5fa0 RCX: 00007f3adef8efc9 [ 98.676491][ T4423] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000200000000940 [ 98.684480][ T4423] RBP: 00007f3adf011f91 R08: 0000000000000000 R09: 0000000000000000 [ 98.692467][ T4423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.700458][ T4423] R13: 00007f3adf1e5fa0 R14: 00007f3adf1e5fa0 R15: 0000000000000002 [ 98.708464][ T4423]