Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. 2025/07/21 03:06:34 ignoring optional flag "sandboxArg"="0" 2025/07/21 03:06:35 parsed 1 programs [ 89.902410][ T4272] cgroup: Unknown subsys name 'net' [ 90.064879][ T4272] cgroup: Unknown subsys name 'rlimit' [ 91.678065][ T4272] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 93.639157][ T126] cfg80211: failed to load regulatory.db [ 93.904545][ T4303] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.913381][ T4303] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.943992][ T4303] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.957043][ T4301] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.964874][ T4301] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.977633][ T4303] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.069566][ T4317] chnl_net:caif_netlink_parms(): no params data found [ 95.136162][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.144379][ T4317] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.152619][ T4317] device bridge_slave_0 entered promiscuous mode [ 95.162210][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.169688][ T4317] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.177704][ T4317] device bridge_slave_1 entered promiscuous mode [ 95.209269][ T4317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.220669][ T4317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.253427][ T4317] team0: Port device team_slave_0 added [ 95.261427][ T4317] team0: Port device team_slave_1 added [ 95.281041][ T4317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.288218][ T4317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.314314][ T4317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.327511][ T4317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.334533][ T4317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.360863][ T4317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.401296][ T4317] device hsr_slave_0 entered promiscuous mode [ 95.408858][ T4317] device hsr_slave_1 entered promiscuous mode [ 95.527141][ T4317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.545535][ T4317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.555715][ T4317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.567229][ T4317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.603486][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.610770][ T4317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.619384][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.626683][ T4317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.681989][ T4317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.694940][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.705967][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.715137][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.723867][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 95.747685][ T4317] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.760237][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.769437][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.776720][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.790414][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.799525][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.806614][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.843572][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.854219][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.879332][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.897007][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.912489][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.923379][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.119518][ T4317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.126697][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.134395][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.154995][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.163751][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.182966][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.192721][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.203874][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.212092][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.221307][ T4317] device veth0_vlan entered promiscuous mode [ 96.233469][ T4317] device veth1_vlan entered promiscuous mode [ 96.256898][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.265298][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.274147][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.283098][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.294216][ T4317] device veth0_macvtap entered promiscuous mode [ 96.304156][ T4317] device veth1_macvtap entered promiscuous mode [ 96.322476][ T4317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.331408][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.339870][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.350063][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.359306][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.371676][ T4317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.379881][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.389091][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.402317][ T4317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.411343][ T4317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.420658][ T4317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.430752][ T4317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.576832][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.769009][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.777040][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.794716][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.811090][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.819393][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.830810][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/07/21 03:06:46 executed programs: 0 [ 98.124333][ T4303] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.132363][ T4303] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.140636][ T4303] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.150488][ T4303] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.160008][ T4303] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.167374][ T4303] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.312868][ T4365] chnl_net:caif_netlink_parms(): no params data found [ 98.365036][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.372275][ T4365] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.380706][ T4365] device bridge_slave_0 entered promiscuous mode [ 98.388920][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.396028][ T4365] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.404808][ T4365] device bridge_slave_1 entered promiscuous mode [ 98.429544][ T4365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.441340][ T4365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.467874][ T4365] team0: Port device team_slave_0 added [ 98.476367][ T4365] team0: Port device team_slave_1 added [ 98.497281][ T4365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.504556][ T4365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.532410][ T4365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.545446][ T4365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.552543][ T4365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.578603][ T4365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.613423][ T4365] device hsr_slave_0 entered promiscuous mode [ 98.621523][ T4365] device hsr_slave_1 entered promiscuous mode [ 98.628326][ T4365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.636154][ T4365] Cannot create hsr debugfs directory [ 99.089860][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.188477][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 101.428427][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.501862][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.270030][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 102.366206][ T4365] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.376716][ T4365] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.396030][ T42] device hsr_slave_0 left promiscuous mode [ 102.407244][ T42] device hsr_slave_1 left promiscuous mode [ 102.414400][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.424227][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.433115][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.443355][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.451612][ T42] device bridge_slave_1 left promiscuous mode [ 102.461177][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.473438][ T42] device bridge_slave_0 left promiscuous mode [ 102.483235][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.515147][ T42] device veth1_macvtap left promiscuous mode [ 102.523917][ T42] device veth0_macvtap left promiscuous mode [ 102.530312][ T42] device veth1_vlan left promiscuous mode [ 102.536521][ T42] device veth0_vlan left promiscuous mode [ 102.939057][ T42] team0 (unregistering): Port device team_slave_1 removed [ 102.969931][ T42] team0 (unregistering): Port device team_slave_0 removed [ 102.998306][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.028666][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.304420][ T42] bond0 (unregistering): Released all slaves [ 103.367132][ T4365] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.377000][ T4365] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.480612][ T4365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.493609][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.501942][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.520701][ T4365] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.534190][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.544714][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.553705][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.561005][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.569913][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.581910][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.591016][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.602516][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.609682][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.623818][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.633401][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.645815][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.655077][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.663864][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.683798][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.693176][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.702440][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.711492][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.725619][ T4365] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.738288][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.749454][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.760092][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.995568][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.004921][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.020274][ T4365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.060319][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.071195][ T2939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.113149][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.124454][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.135665][ T4365] device veth0_vlan entered promiscuous mode [ 104.144246][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.154639][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.172135][ T4365] device veth1_vlan entered promiscuous mode [ 104.193963][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.203772][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.212370][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.221323][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.232004][ T4365] device veth0_macvtap entered promiscuous mode [ 104.254762][ T4365] device veth1_macvtap entered promiscuous mode [ 104.278733][ T4365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.286794][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.296834][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.306176][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.318429][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.330415][ T4365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.340113][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.348412][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 104.351417][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.404296][ T4365] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.414433][ T4365] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.423714][ T4365] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.433490][ T4365] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.509565][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.523562][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/07/21 03:06:52 executed programs: 2 [ 104.553896][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.566182][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.575041][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.584249][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.639559][ T4421] loop0: detected capacity change from 0 to 64 [ 104.659593][ T4421] ======================================================= [ 104.659593][ T4421] WARNING: The mand mount option has been deprecated and [ 104.659593][ T4421] and is ignored by this kernel. Remove the mand [ 104.659593][ T4421] option from the mount to silence this warning. [ 104.659593][ T4421] ======================================================= [ 104.810928][ T4423] loop0: detected capacity change from 0 to 64 [ 104.886524][ T4425] loop0: detected capacity change from 0 to 64 [ 104.953782][ T4427] loop0: detected capacity change from 0 to 64 [ 105.044466][ T4429] loop0: detected capacity change from 0 to 64 [ 105.064309][ T4429] [ 105.066715][ T4429] ====================================================== [ 105.073761][ T4429] WARNING: possible circular locking dependency detected [ 105.080804][ T4429] 6.1.146-syzkaller #0 Not tainted [ 105.085944][ T4429] ------------------------------------------------------ [ 105.092985][ T4429] syz.0.20/4429 is trying to acquire lock: [ 105.098817][ T4429] ffff88805d4f1af8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xd7/0x1280 [ 105.109679][ T4429] [ 105.109679][ T4429] but task is already holding lock: [ 105.117092][ T4429] ffff88801e30c0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 105.126482][ T4429] [ 105.126482][ T4429] which lock already depends on the new lock. [ 105.126482][ T4429] [ 105.136908][ T4429] [ 105.136908][ T4429] the existing dependency chain (in reverse order) is: [ 105.145929][ T4429] [ 105.145929][ T4429] -> #1 (&tree->tree_lock/1){+.+.}-{3:3}: [ 105.153854][ T4429] __mutex_lock+0x120/0xaf0 [ 105.158890][ T4429] hfs_find_init+0x15b/0x1d0 [ 105.164011][ T4429] hfs_extend_file+0x2eb/0x1280 [ 105.169404][ T4429] hfs_bmap_reserve+0x103/0x420 [ 105.174806][ T4429] hfs_cat_create+0x1c0/0x8d0 [ 105.180023][ T4429] hfs_create+0x62/0xd0 [ 105.184804][ T4429] path_openat+0x1187/0x2e70 [ 105.189952][ T4429] do_filp_open+0x1c1/0x3c0 [ 105.195090][ T4429] do_sys_openat2+0x142/0x490 [ 105.200321][ T4429] __x64_sys_openat+0x135/0x160 [ 105.205707][ T4429] do_syscall_64+0x4c/0xa0 [ 105.210651][ T4429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.217087][ T4429] [ 105.217087][ T4429] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 105.226308][ T4429] __lock_acquire+0x2cf8/0x7c50 [ 105.231699][ T4429] lock_acquire+0x1b4/0x490 [ 105.236731][ T4429] __mutex_lock+0x120/0xaf0 [ 105.241758][ T4429] hfs_extend_file+0xd7/0x1280 [ 105.247078][ T4429] hfs_bmap_reserve+0x103/0x420 [ 105.252486][ T4429] __hfs_ext_write_extent+0x1fa/0x470 [ 105.258411][ T4429] hfs_ext_write_extent+0x15e/0x1e0 [ 105.264170][ T4429] hfs_write_inode+0x8e/0x970 [ 105.269391][ T4429] __writeback_single_inode+0x75b/0x1160 [ 105.275601][ T4429] writeback_single_inode+0x221/0x8b0 [ 105.281503][ T4429] write_inode_now+0x15d/0x1d0 [ 105.286814][ T4429] hfs_file_fsync+0xa3/0x140 [ 105.291947][ T4429] generic_file_write_iter+0x25d/0x2e0 [ 105.297938][ T4429] vfs_write+0x44c/0x960 [ 105.302711][ T4429] ksys_write+0x143/0x240 [ 105.307574][ T4429] do_syscall_64+0x4c/0xa0 [ 105.312522][ T4429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.318983][ T4429] [ 105.318983][ T4429] other info that might help us debug this: [ 105.318983][ T4429] [ 105.329226][ T4429] Possible unsafe locking scenario: [ 105.329226][ T4429] [ 105.336682][ T4429] CPU0 CPU1 [ 105.342049][ T4429] ---- ---- [ 105.347415][ T4429] lock(&tree->tree_lock/1); [ 105.352109][ T4429] lock(&HFS_I(tree->inode)->extents_lock); [ 105.360609][ T4429] lock(&tree->tree_lock/1); [ 105.367810][ T4429] lock(&HFS_I(tree->inode)->extents_lock); [ 105.373795][ T4429] [ 105.373795][ T4429] *** DEADLOCK *** [ 105.373795][ T4429] [ 105.381952][ T4429] 3 locks held by syz.0.20/4429: [ 105.386917][ T4429] #0: ffff888078eac460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x256/0x960 [ 105.396113][ T4429] #1: ffff88805d4f3028 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: hfs_file_fsync+0x99/0x140 [ 105.406671][ T4429] #2: ffff88801e30c0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 105.416543][ T4429] [ 105.416543][ T4429] stack backtrace: [ 105.422728][ T4429] CPU: 0 PID: 4429 Comm: syz.0.20 Not tainted 6.1.146-syzkaller #0 [ 105.430657][ T4429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.440729][ T4429] Call Trace: [ 105.444026][ T4429] [ 105.446974][ T4429] dump_stack_lvl+0x168/0x22e [ 105.451693][ T4429] ? load_image+0x3b0/0x3b0 [ 105.456217][ T4429] ? show_regs_print_info+0x12/0x12 [ 105.461427][ T4429] ? print_circular_bug+0x12b/0x1a0 [ 105.466645][ T4429] check_noncircular+0x274/0x310 [ 105.471605][ T4429] ? add_chain_block+0x940/0x940 [ 105.476559][ T4429] ? lockdep_lock+0xdc/0x1e0 [ 105.481162][ T4429] ? _find_first_zero_bit+0xcf/0x100 [ 105.486483][ T4429] __lock_acquire+0x2cf8/0x7c50 [ 105.491355][ T4429] ? is_bpf_text_address+0x28b/0x2a0 [ 105.496764][ T4429] ? verify_lock_unused+0x140/0x140 [ 105.501974][ T4429] ? stack_trace_save+0x98/0xe0 [ 105.506858][ T4429] ? stack_trace_snprint+0xf0/0xf0 [ 105.511981][ T4429] ? check_noncircular+0x16f/0x310 [ 105.517107][ T4429] ? add_chain_block+0x940/0x940 [ 105.522414][ T4429] lock_acquire+0x1b4/0x490 [ 105.526939][ T4429] ? hfs_extend_file+0xd7/0x1280 [ 105.531894][ T4429] ? __might_sleep+0xd0/0xd0 [ 105.536497][ T4429] ? read_lock_is_recursive+0x10/0x10 [ 105.541901][ T4429] __mutex_lock+0x120/0xaf0 [ 105.546428][ T4429] ? hfs_extend_file+0xd7/0x1280 [ 105.551379][ T4429] ? verify_lock_unused+0x140/0x140 [ 105.556590][ T4429] ? hfs_extend_file+0xd7/0x1280 [ 105.561537][ T4429] ? mutex_lock_nested+0x10/0x10 [ 105.566481][ T4429] ? __stack_depot_save+0x421/0x460 [ 105.571704][ T4429] hfs_extend_file+0xd7/0x1280 [ 105.576487][ T4429] ? hfs_ext_write_extent+0x131/0x1e0 [ 105.581884][ T4429] ? hfs_write_inode+0x8e/0x970 [ 105.586751][ T4429] ? hfs_get_block+0xbd0/0xbd0 [ 105.591546][ T4429] ? trace_raw_output_contention_end+0xd0/0xd0 [ 105.597710][ T4429] ? rcu_is_watching+0x11/0xa0 [ 105.602490][ T4429] ? trace_contention_end+0x5f/0x170 [ 105.607794][ T4429] ? __mutex_lock+0x19e/0xaf0 [ 105.612482][ T4429] ? hfs_brec_find+0x18b/0x500 [ 105.617284][ T4429] hfs_bmap_reserve+0x103/0x420 [ 105.622245][ T4429] __hfs_ext_write_extent+0x1fa/0x470 [ 105.627644][ T4429] hfs_ext_write_extent+0x15e/0x1e0 [ 105.632860][ T4429] ? verify_lock_unused+0x140/0x140 [ 105.638081][ T4429] ? hfs_ext_keycmp+0x310/0x310 [ 105.642971][ T4429] hfs_write_inode+0x8e/0x970 [ 105.647674][ T4429] ? hfs_release_folio+0x500/0x500 [ 105.652807][ T4429] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 105.658196][ T4429] ? __writeback_single_inode+0x4ae/0x1160 [ 105.664015][ T4429] ? __lock_acquire+0x7c50/0x7c50 [ 105.669055][ T4429] ? do_raw_spin_lock+0x11d/0x280 [ 105.674093][ T4429] ? __rwlock_init+0x140/0x140 [ 105.678869][ T4429] ? __lock_acquire+0x7c50/0x7c50 [ 105.683906][ T4429] __writeback_single_inode+0x75b/0x1160 [ 105.689563][ T4429] writeback_single_inode+0x221/0x8b0 [ 105.694952][ T4429] ? write_inode_now+0x1d0/0x1d0 [ 105.699898][ T4429] ? errseq_check+0x3c/0x70 [ 105.704414][ T4429] write_inode_now+0x15d/0x1d0 [ 105.709212][ T4429] ? bdi_split_work_to_wbs+0x890/0x890 [ 105.714701][ T4429] ? clear_nonspinnable+0x60/0x60 [ 105.719755][ T4429] ? rwsem_write_trylock+0x12f/0x1b0 [ 105.725054][ T4429] ? clear_nonspinnable+0x60/0x60 [ 105.730087][ T4429] ? generic_write_checks_count+0x3d9/0x4c0 [ 105.735993][ T4429] hfs_file_fsync+0xa3/0x140 [ 105.740601][ T4429] generic_file_write_iter+0x25d/0x2e0 [ 105.746085][ T4429] vfs_write+0x44c/0x960 [ 105.750347][ T4429] ? file_end_write+0x250/0x250 [ 105.755225][ T4429] ? __up_read+0x27c/0x660 [ 105.759661][ T4429] ? __se_sys_futex+0x14a/0x440 [ 105.764525][ T4429] ? __fdget_pos+0x2b5/0x360 [ 105.769214][ T4429] ksys_write+0x143/0x240 [ 105.773559][ T4429] ? __ia32_sys_read+0x80/0x80 [ 105.778357][ T4429] ? lockdep_hardirqs_on+0x94/0x140 [ 105.783656][ T4429] do_syscall_64+0x4c/0xa0 [ 105.788083][ T4429] ? clear_bhb_loop+0x60/0xb0 [ 105.792769][ T4429] ? clear_bhb_loop+0x60/0xb0 [ 105.797455][ T4429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.803458][ T4429] RIP: 0033:0x7f63b338e9a9 [ 105.807980][ T4429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.827598][ T4429] RSP: 002b:00007ffcfd7cd368 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.836027][ T4429] RAX: ffffffffffffffda RBX: 00007f63b35b5fa0 RCX: 00007f63b338e9a9 [ 105.844028][ T4429] RDX: 0000000000001006 RSI: 0000200000000940 RDI: 0000000000000008 [ 105.852032][ T4429] RBP: 00007f63b3410d69 R08: 0000000000000000 R09: 0000000000000000 [ 105.860287][ T4429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.868355][ T4429] R13: 00007f63b35b5fa0 R14: 00007f63b35b5fa0 R15: 0000000000000003 [ 105.876432][ T4429] [ 105.934168][ T4431] loop0: detected capacity change from 0 to 64 [ 106.022966][ T4433] loop0: detected capacity change from 0 to 64 [ 106.130569][ T4435] loop0: detected capacity change from 0 to 64 [ 106.226975][ T4437] loop0: detected capacity change from 0 to 64 [ 106.272622][ T4365] hfs: walked past end of dir [ 109.754716][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.787323][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.794795][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 2025/07/21 03:06:58 executed programs: 12 [ 109.803532][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.812190][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.819421][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.830336][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 109.837815][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.857977][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.920341][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.965484][ T4440] chnl_net:caif_netlink_parms(): no params data found [ 110.038077][ T4440] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.045276][ T4440] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.053482][ T4440] device bridge_slave_0 entered promiscuous mode [ 110.061464][ T4440] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.069112][ T4440] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.076956][ T4440] device bridge_slave_1 entered promiscuous mode [ 110.099908][ T4440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.111093][ T4440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.134453][ T4440] team0: Port device team_slave_0 added [ 110.149336][ T4440] team0: Port device team_slave_1 added [ 110.172173][ T4440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.179736][ T4440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.207963][ T4440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.223819][ T4440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.231393][ T4440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.258789][ T4440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.300164][ T4440] device hsr_slave_0 entered promiscuous mode [ 110.306972][ T4440] device hsr_slave_1 entered promiscuous mode [ 110.415705][ T4440] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.431362][ T4440] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.441381][ T4440] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.451878][ T4440] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.478647][ T4440] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.485824][ T4440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.493302][ T4440] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.500468][ T4440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.551843][ T4440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.565851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.576570][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.584547][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.603331][ T4440] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.614025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.624158][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.631330][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.644312][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.653486][ T4420] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.660644][ T4420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.691357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.700654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.718889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.728556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.736797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.756031][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.855037][ T56] device hsr_slave_0 left promiscuous mode [ 110.868525][ T56] device hsr_slave_1 left promiscuous mode [ 110.882347][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.889899][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.897895][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.905393][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.915319][ T56] device bridge_slave_1 left promiscuous mode [ 110.922500][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.932450][ T56] device bridge_slave_0 left promiscuous mode [ 110.938890][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.950548][ T56] device veth1_macvtap left promiscuous mode [ 110.956617][ T56] device veth0_macvtap left promiscuous mode [ 110.964386][ T56] device veth1_vlan left promiscuous mode [ 110.971223][ T56] device veth0_vlan left promiscuous mode [ 111.148866][ T56] team0 (unregistering): Port device team_slave_1 removed [ 111.172802][ T56] team0 (unregistering): Port device team_slave_0 removed [ 111.196742][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.222297][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.294924][ T56] bond0 (unregistering): Released all slaves [ 111.438228][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.445723][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.457680][ T4440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.476575][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.487371][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.507085][ T4440] device veth0_vlan entered promiscuous mode [ 111.523137][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.548372][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.561969][ T4440] device veth1_vlan entered promiscuous mode [ 111.570529][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.578845][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.586693][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 111.607390][ T4440] device veth0_macvtap entered promiscuous mode [ 111.616665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 111.626607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.636746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.658943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 111.669807][ T4440] device veth1_macvtap entered promiscuous mode [ 111.686893][ T4440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.694875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.707886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.716667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.729784][ T4440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.757884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.768278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.784686][ T4440] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.794575][ T4440] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.803709][ T4440] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.812837][ T4440] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.865416][ T4440] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 111.879153][ T4303] Bluetooth: hci0: command 0x0409 tx timeout [ 111.890448][ T4420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.904630][ T4440] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 111.912453][ T4420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.923363][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.942153][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.951035][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.963454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 112.033547][ T4505] loop1: detected capacity change from 0 to 64 [ 112.116848][ T4509] loop1: detected capacity change from 0 to 64 [ 112.241463][ T4517] loop1: detected capacity change from 0 to 64 [ 112.281729][ T4440] hfs: walked past end of dir [ 112.344164][ T4520] loop1: detected capacity change from 0 to 64 [ 112.431813][ T4524] loop1: detected capacity change from 0 to 64 [ 112.488883][ T4440] hfs: walked past end of dir [ 112.535559][ T4528] loop1: detected capacity change from 0 to 64 [ 112.640668][ T4531] loop1: detected capacity change from 0 to 64 [ 112.771234][ T4534] loop1: detected capacity change from 0 to 64 [ 112.864105][ T4537] loop1: detected capacity change from 0 to 64 [ 112.902446][ T4440] hfs: walked past end of dir