[ 91.901400][ T31] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.10.31' (ED25519) to the list of known hosts. 2026/01/18 20:48:22 parsed 1 programs [ 99.331320][ T5807] cgroup: Unknown subsys name 'net' [ 99.552799][ T5807] cgroup: Unknown subsys name 'cpuset' [ 99.617555][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 101.621076][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 104.749700][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.749728][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.805068][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.805092][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.322643][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 107.638328][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.639397][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.639593][ T5849] bridge_slave_0: entered allmulticast mode [ 107.641686][ T5849] bridge_slave_0: entered promiscuous mode [ 107.649687][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.650257][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.650741][ T5849] bridge_slave_1: entered allmulticast mode [ 107.660558][ T5849] bridge_slave_1: entered promiscuous mode [ 107.736264][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.747940][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.959605][ T5849] team0: Port device team_slave_0 added [ 107.963351][ T5849] team0: Port device team_slave_1 added [ 108.079053][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.079071][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.079095][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.083491][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.083508][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.083534][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.216541][ T5849] hsr_slave_0: entered promiscuous mode [ 108.229802][ T5849] hsr_slave_1: entered promiscuous mode [ 108.616297][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.681406][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.716431][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.752009][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.981524][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.005045][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.023156][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.023955][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.048423][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.049294][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.300406][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.358041][ T5849] veth0_vlan: entered promiscuous mode [ 109.365920][ T5849] veth1_vlan: entered promiscuous mode [ 109.409889][ T5849] veth0_macvtap: entered promiscuous mode [ 109.416221][ T5849] veth1_macvtap: entered promiscuous mode [ 109.445746][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.464822][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.489468][ T158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.491827][ T158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.491892][ T158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.491930][ T158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.272042][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.510207][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.740696][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.793825][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.804437][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.806349][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.827133][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.829202][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.001772][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.617424][ T41] bridge_slave_1: left allmulticast mode [ 112.617553][ T41] bridge_slave_1: left promiscuous mode [ 112.618023][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.678589][ T41] bridge_slave_0: left allmulticast mode [ 112.678614][ T41] bridge_slave_0: left promiscuous mode [ 112.680164][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.127692][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.187940][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.209426][ T41] bond0 (unregistering): Released all slaves [ 114.539634][ T41] hsr_slave_0: left promiscuous mode [ 114.557271][ T41] hsr_slave_1: left promiscuous mode [ 114.558488][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.558568][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.598915][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.598945][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.718827][ T41] veth1_macvtap: left promiscuous mode [ 114.719062][ T41] veth0_macvtap: left promiscuous mode [ 114.719357][ T41] veth1_vlan: left promiscuous mode [ 114.719660][ T41] veth0_vlan: left promiscuous mode [ 117.147823][ T41] team0 (unregistering): Port device team_slave_1 removed [ 117.357699][ T41] team0 (unregistering): Port device team_slave_0 removed 2026/01/18 20:48:47 executed programs: 0 [ 121.045420][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.057248][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.062956][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.064485][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.065343][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.656367][ T5965] chnl_net:caif_netlink_parms(): no params data found [ 121.935722][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.936052][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.936214][ T5965] bridge_slave_0: entered allmulticast mode [ 121.958738][ T5965] bridge_slave_0: entered promiscuous mode [ 121.977325][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.977546][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.977749][ T5965] bridge_slave_1: entered allmulticast mode [ 121.980912][ T5965] bridge_slave_1: entered promiscuous mode [ 122.168649][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.173966][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.260986][ T5965] team0: Port device team_slave_0 added [ 122.299553][ T5965] team0: Port device team_slave_1 added [ 122.478618][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.478637][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.478671][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.530270][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.530323][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.530401][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.810450][ T5965] hsr_slave_0: entered promiscuous mode [ 122.811449][ T5965] hsr_slave_1: entered promiscuous mode [ 123.179003][ T61] Bluetooth: hci0: command tx timeout [ 124.519154][ T5965] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.553619][ T5965] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.593299][ T5965] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.647410][ T5965] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.832466][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.865482][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.879513][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.879738][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.905216][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.905366][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.256926][ T61] Bluetooth: hci0: command tx timeout [ 125.279389][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.363426][ T5965] veth0_vlan: entered promiscuous mode [ 125.382952][ T5965] veth1_vlan: entered promiscuous mode [ 125.439485][ T5965] veth0_macvtap: entered promiscuous mode [ 125.454519][ T5965] veth1_macvtap: entered promiscuous mode [ 125.485933][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.509912][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.534348][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.534400][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.534439][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.534476][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.786317][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.786340][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.882430][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.882453][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/18 20:48:52 executed programs: 2 [ 126.048790][ T6066] loop0: detected capacity change from 0 to 64 [ 126.051590][ T6066] ======================================================= [ 126.051590][ T6066] WARNING: The mand mount option has been deprecated and [ 126.051590][ T6066] and is ignored by this kernel. Remove the mand [ 126.051590][ T6066] option from the mount to silence this warning. [ 126.051590][ T6066] ======================================================= [ 126.085949][ T6066] hfs: unable to locate alternate MDB [ 126.085986][ T6066] hfs: continuing without an alternate MDB [ 126.399131][ T6066] [ 126.399144][ T6066] ============================================ [ 126.399158][ T6066] WARNING: possible recursive locking detected [ 126.399176][ T6066] syzkaller #0 Not tainted [ 126.399188][ T6066] -------------------------------------------- [ 126.399196][ T6066] syz.0.17/6066 is trying to acquire lock: [ 126.399207][ T6066] ffff888028b5a0a0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 [ 126.399288][ T6066] [ 126.399288][ T6066] but task is already holding lock: [ 126.399295][ T6066] ffff888028b5a0a0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 [ 126.399345][ T6066] [ 126.399345][ T6066] other info that might help us debug this: [ 126.399352][ T6066] Possible unsafe locking scenario: [ 126.399352][ T6066] [ 126.399358][ T6066] CPU0 [ 126.399364][ T6066] ---- [ 126.399369][ T6066] lock(&tree->tree_lock/1); [ 126.399389][ T6066] lock(&tree->tree_lock/1); [ 126.399408][ T6066] [ 126.399408][ T6066] *** DEADLOCK *** [ 126.399408][ T6066] [ 126.399414][ T6066] May be due to missing lock nesting notation [ 126.399414][ T6066] [ 126.399422][ T6066] 5 locks held by syz.0.17/6066: [ 126.399433][ T6066] #0: ffff888028b58480 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 126.399494][ T6066] #1: ffff888025dc18c0 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: do_truncate+0x18f/0x250 [ 126.399559][ T6066] #2: ffff888025dc16e8 (&HFS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf2/0x15e0 [ 126.399616][ T6066] #3: ffff888028b5a0a0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300 [ 126.399673][ T6066] #4: ffff888025dc0128 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf2/0x15e0 [ 126.399726][ T6066] [ 126.399726][ T6066] stack backtrace: [ 126.399747][ T6066] CPU: 0 UID: 0 PID: 6066 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.399770][ T6066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.399794][ T6066] Call Trace: [ 126.399806][ T6066] [ 126.399815][ T6066] dump_stack_lvl+0xe8/0x150 [ 126.399846][ T6066] print_deadlock_bug+0x279/0x290 [ 126.399880][ T6066] __lock_acquire+0x253f/0x2cf0 [ 126.399921][ T6066] ? hfs_find_init+0x18e/0x300 [ 126.399940][ T6066] lock_acquire+0x106/0x330 [ 126.399968][ T6066] ? hfs_find_init+0x18e/0x300 [ 126.399991][ T6066] ? hfs_find_init+0x18e/0x300 [ 126.400015][ T6066] ? hfs_find_init+0x18e/0x300 [ 126.400034][ T6066] mutex_lock_nested+0x5a/0x1d0 [ 126.400065][ T6066] ? hfs_find_init+0x18e/0x300 [ 126.400084][ T6066] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.400110][ T6066] hfs_find_init+0x18e/0x300 [ 126.400133][ T6066] hfs_extend_file+0x35c/0x15e0 [ 126.400174][ T6066] ? __pfx_hfs_extend_file+0x10/0x10 [ 126.400204][ T6066] ? lockdep_unlock+0x6b/0xf0 [ 126.400228][ T6066] ? __lock_acquire+0x146e/0x2cf0 [ 126.400263][ T6066] ? __asan_memset+0x22/0x50 [ 126.400289][ T6066] ? hfs_brec_find+0x19a/0x510 [ 126.400313][ T6066] hfs_bmap_reserve+0x107/0x430 [ 126.400348][ T6066] __hfs_ext_write_extent+0x1fa/0x470 [ 126.400379][ T6066] __hfs_ext_cache_extent+0x6b/0x9b0 [ 126.400409][ T6066] ? hfs_find_init+0x18e/0x300 [ 126.400432][ T6066] hfs_extend_file+0x39b/0x15e0 [ 126.400459][ T6066] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 126.400493][ T6066] ? __pfx_hfs_extend_file+0x10/0x10 [ 126.400524][ T6066] ? clean_bdev_aliases+0x62e/0x750 [ 126.400560][ T6066] ? __pfx_clean_bdev_aliases+0x10/0x10 [ 126.400595][ T6066] hfs_get_block+0x412/0xc50 [ 126.400631][ T6066] ? __pfx_hfs_get_block+0x10/0x10 [ 126.400661][ T6066] ? rt_spin_unlock+0x160/0x200 [ 126.400698][ T6066] __block_write_begin_int+0x6c6/0x1910 [ 126.400737][ T6066] ? __pfx_hfs_get_block+0x10/0x10 [ 126.400766][ T6066] ? __pfx___block_write_begin_int+0x10/0x10 [ 126.400796][ T6066] ? __filemap_get_folio_mpol+0x6fa/0xa50 [ 126.400830][ T6066] cont_write_begin+0x737/0xae0 [ 126.400869][ T6066] ? __pfx_cont_write_begin+0x10/0x10 [ 126.400902][ T6066] ? folio_unlock+0x101/0x160 [ 126.400948][ T6066] hfs_write_begin+0x66/0xb0 [ 126.400977][ T6066] ? __pfx_hfs_get_block+0x10/0x10 [ 126.401007][ T6066] cont_write_begin+0x2e7/0xae0 [ 126.401037][ T6066] ? __lock_acquire+0x6b5/0x2cf0 [ 126.401071][ T6066] ? __pfx_cont_write_begin+0x10/0x10 [ 126.401104][ T6066] ? unmap_mapping_range+0xb7/0x180 [ 126.401135][ T6066] hfs_write_begin+0x66/0xb0 [ 126.401171][ T6066] ? __pfx_hfs_get_block+0x10/0x10 [ 126.401202][ T6066] hfs_file_truncate+0x1cf/0xb70 [ 126.401241][ T6066] ? __pfx_hfs_file_truncate+0x10/0x10 [ 126.401273][ T6066] ? unmap_mapping_range+0xe6/0x180 [ 126.401301][ T6066] ? __pfx_unmap_mapping_range+0x10/0x10 [ 126.401327][ T6066] ? setattr_prepare+0x1e6/0xac0 [ 126.401360][ T6066] ? truncate_setsize+0xcf/0xf0 [ 126.401383][ T6066] hfs_inode_setattr+0x4a9/0x670 [ 126.401415][ T6066] ? try_break_deleg+0x7c/0x130 [ 126.401444][ T6066] ? __pfx_hfs_inode_setattr+0x10/0x10 [ 126.401476][ T6066] notify_change+0xc18/0xf60 [ 126.401511][ T6066] do_truncate+0x1c2/0x250 [ 126.401542][ T6066] ? __pfx_do_truncate+0x10/0x10 [ 126.401580][ T6066] vfs_truncate+0x4b4/0x540 [ 126.401613][ T6066] ? __pfx_vfs_truncate+0x10/0x10 [ 126.401641][ T6066] ? kmem_cache_free+0x18d/0x8c0 [ 126.401677][ T6066] do_sys_truncate+0xf1/0x1c0 [ 126.401708][ T6066] ? __pfx_do_sys_truncate+0x10/0x10 [ 126.401738][ T6066] ? rcu_is_watching+0x15/0xb0 [ 126.401763][ T6066] __x64_sys_truncate+0x5b/0x70 [ 126.401793][ T6066] do_syscall_64+0xe2/0xf80 [ 126.401817][ T6066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.401838][ T6066] ? trace_irq_disable+0x37/0x100 [ 126.401861][ T6066] ? clear_bhb_loop+0x60/0xb0 [ 126.401885][ T6066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.401905][ T6066] RIP: 0033:0x7fccb138acb9 [ 126.401931][ T6066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.401949][ T6066] RSP: 002b:00007ffe1470ca38 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 126.401972][ T6066] RAX: ffffffffffffffda RBX: 00007fccb1605fa0 RCX: 00007fccb138acb9 [ 126.401989][ T6066] RDX: 0000000000000000 RSI: 0000000001001bfc RDI: 0000200000000040 [ 126.402003][ T6066] RBP: 00007fccb13f8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 126.402017][ T6066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.402030][ T6066] R13: 00007fccb1605fac R14: 00007fccb1605fa0 R15: 00007fccb1605fa0 [ 126.402055][ T6066] [ 126.402104][ T6066] ------------[ cut here ]------------ [ 126.402112][ T6066] rtmutex deadlock detected [ 126.402122][ T6066] WARNING: kernel/locking/rtmutex.c:1674 at rt_mutex_handle_deadlock+0x21/0xb0, CPU#0: syz.0.17/6066 [ 126.402171][ T6066] Modules linked in: [ 126.402205][ T6066] CPU: 0 UID: 0 PID: 6066 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.402228][ T6066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.402241][ T6066] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0 [ 126.402276][ T6066] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 81 00 00 00 48 89 f7 e8 96 39 01 00 48 8d 3d 5f 8c 2f 04 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1d c3 69 05 07 4c 8d [ 126.402293][ T6066] RSP: 0018:ffffc90003c16c30 EFLAGS: 00010286 [ 126.402312][ T6066] RAX: 0000000080000000 RBX: ffffc90003c16cc0 RCX: 0000000000000000 [ 126.402327][ T6066] RDX: 0000000000000000 RSI: ffffffff8b5f6240 RDI: ffffffff8f1e9290 [ 126.402342][ T6066] RBP: ffffc90003c16dc8 R08: ffffffff8f1b6f77 R09: 1ffffffff1e36dee [ 126.402358][ T6066] R10: dffffc0000000000 R11: fffffbfff1e36def R12: 1ffff92000782d94 [ 126.402375][ T6066] R13: ffffffff8aef00ed R14: ffff888028b5a048 R15: dffffc0000000000 [ 126.402392][ T6066] FS: 000055558bf25500(0000) GS:ffff8881268d9000(0000) knlGS:0000000000000000 [ 126.402410][ T6066] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.402426][ T6066] CR2: 000055d588562138 CR3: 0000000040f94000 CR4: 00000000003526f0 [ 126.402445][ T6066] Call Trace: [ 126.402452][ T6066] [ 126.402461][ T6066] ? rt_mutex_slowlock+0x1fd/0x710 [ 126.402494][ T6066] rt_mutex_slowlock+0x6c0/0x710 [ 126.402529][ T6066] ? rt_mutex_slowlock+0x1fd/0x710 [ 126.402562][ T6066] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 126.402604][ T6066] ? hfs_find_init+0x18e/0x300 [ 126.402629][ T6066] ? hfs_find_init+0x18e/0x300 [ 126.402649][ T6066] mutex_lock_nested+0x168/0x1d0 [ 126.402679][ T6066] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.402707][ T6066] hfs_find_init+0x18e/0x300 [ 126.402730][ T6066] hfs_extend_file+0x35c/0x15e0 [ 126.402765][ T6066] ? __pfx_hfs_extend_file+0x10/0x10 [ 126.402794][ T6066] ? lockdep_unlock+0x6b/0xf0 [ 126.402820][ T6066] ? __lock_acquire+0x146e/0x2cf0 [ 126.402855][ T6066] ? __asan_memset+0x22/0x50 [ 126.402882][ T6066] ? hfs_brec_find+0x19a/0x510 [ 126.402908][ T6066] hfs_bmap_reserve+0x107/0x430 [ 126.402942][ T6066] __hfs_ext_write_extent+0x1fa/0x470 [ 126.402976][ T6066] __hfs_ext_cache_extent+0x6b/0x9b0 [ 126.403006][ T6066] ? hfs_find_init+0x18e/0x300 [ 126.403029][ T6066] hfs_extend_file+0x39b/0x15e0 [ 126.403059][ T6066] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 126.403092][ T6066] ? __pfx_hfs_extend_file+0x10/0x10 [ 126.403126][ T6066] ? clean_bdev_aliases+0x62e/0x750 [ 126.403172][ T6066] ? __pfx_clean_bdev_aliases+0x10/0x10 [ 126.403207][ T6066] hfs_get_block+0x412/0xc50 [ 126.403244][ T6066] ? __pfx_hfs_get_block+0x10/0x10 [ 126.403273][ T6066] ? rt_spin_unlock+0x160/0x200 [ 126.403314][ T6066] __block_write_begin_int+0x6c6/0x1910 [ 126.403355][ T6066] ? __pfx_hfs_get_block+0x10/0x10 [ 126.403385][ T6066] ? __pfx___block_write_begin_int+0x10/0x10 [ 126.403419][ T6066] ? __filemap_get_folio_mpol+0x6fa/0xa50 [ 126.403453][ T6066] cont_write_begin+0x737/0xae0 [ 126.403493][ T6066] ? __pfx_cont_write_begin+0x10/0x10 [ 126.403526][ T6066] ? folio_unlock+0x101/0x160 [ 126.403555][ T6066] hfs_write_begin+0x66/0xb0 [ 126.403584][ T6066] ? __pfx_hfs_get_block+0x10/0x10 [ 126.403638][ T6066] cont_write_begin+0x2e7/0xae0 [ 126.403672][ T6066] ? __lock_acquire+0x6b5/0x2cf0 [ 126.403707][ T6066] ? __pfx_cont_write_begin+0x10/0x10 [ 126.403739][ T6066] ? unmap_mapping_range+0xb7/0x180 [ 126.403771][ T6066] hfs_write_begin+0x66/0xb0 [ 126.403801][ T6066] ? __pfx_hfs_get_block+0x10/0x10 [ 126.403830][ T6066] hfs_file_truncate+0x1cf/0xb70 [ 126.403869][ T6066] ? __pfx_hfs_file_truncate+0x10/0x10 [ 126.403901][ T6066] ? unmap_mapping_range+0xe6/0x180 [ 126.403930][ T6066] ? __pfx_unmap_mapping_range+0x10/0x10 [ 126.403957][ T6066] ? setattr_prepare+0x1e6/0xac0 [ 126.403989][ T6066] ? truncate_setsize+0xcf/0xf0 [ 126.404013][ T6066] hfs_inode_setattr+0x4a9/0x670 [ 126.404044][ T6066] ? try_break_deleg+0x7c/0x130 [ 126.404075][ T6066] ? __pfx_hfs_inode_setattr+0x10/0x10 [ 126.404107][ T6066] notify_change+0xc18/0xf60 [ 126.404144][ T6066] do_truncate+0x1c2/0x250 [ 126.404184][ T6066] ? __pfx_do_truncate+0x10/0x10 [ 126.404224][ T6066] vfs_truncate+0x4b4/0x540 [ 126.404259][ T6066] ? __pfx_vfs_truncate+0x10/0x10 [ 126.404334][ T6066] ? kmem_cache_free+0x18d/0x8c0 [ 126.404372][ T6066] do_sys_truncate+0xf1/0x1c0 [ 126.404405][ T6066] ? __pfx_do_sys_truncate+0x10/0x10 [ 126.404437][ T6066] ? rcu_is_watching+0x15/0xb0 [ 126.404462][ T6066] __x64_sys_truncate+0x5b/0x70 [ 126.404495][ T6066] do_syscall_64+0xe2/0xf80 [ 126.404520][ T6066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.404541][ T6066] ? trace_irq_disable+0x37/0x100 [ 126.404565][ T6066] ? clear_bhb_loop+0x60/0xb0 [ 126.404590][ T6066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.404612][ T6066] RIP: 0033:0x7fccb138acb9 [ 126.404629][ T6066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.404647][ T6066] RSP: 002b:00007ffe1470ca38 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 126.404670][ T6066] RAX: ffffffffffffffda RBX: 00007fccb1605fa0 RCX: 00007fccb138acb9 [ 126.404687][ T6066] RDX: 0000000000000000 RSI: 0000000001001bfc RDI: 0000200000000040 [ 126.404701][ T6066] RBP: 00007fccb13f8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 126.404714][ T6066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.404727][ T6066] R13: 00007fccb1605fac R14: 00007fccb1605fa0 R15: 00007fccb1605fa0 [ 126.404752][ T6066] [ 126.404763][ T6066] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.404779][ T6066] CPU: 0 UID: 0 PID: 6066 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.404802][ T6066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.404815][ T6066] Call Trace: [ 126.404823][ T6066] [ 126.404831][ T6066] vpanic+0x1e0/0x670 [ 126.404865][ T6066] panic+0xc5/0xd0 [ 126.404894][ T6066] ? __pfx_panic+0x10/0x10 [ 126.404932][ T6066] __warn+0x315/0x4a0 [ 126.404961][ T6066] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 126.404995][ T6066] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 126.405030][ T6066] __report_bug+0x29a/0x540 [ 126.405056][ T6066] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 126.405092][ T6066] ? __pfx___report_bug+0x10/0x10 [ 126.405119][ T6066] ? __show_trace_log_lvl+0x478/0x550 [ 126.405161][ T6066] report_bug_entry+0x19a/0x290 [ 126.405185][ T6066] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 126.405217][ T6066] ? rt_mutex_handle_deadlock+0x26/0xb0 [ 126.405249][ T6066] handle_bug+0xca/0x200 [ 126.405279][ T6066] exc_invalid_op+0x1a/0x50 [ 126.405307][ T6066] asm_exc_invalid_op+0x1a/0x20 [ 126.405327][ T6066] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0 [ 126.405360][ T6066] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 81 00 00 00 48 89 f7 e8 96 39 01 00 48 8d 3d 5f 8c 2f 04 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1d c3 69 05 07 4c 8d [ 126.405377][ T6066] RSP: 0018:ffffc90003c16c30 EFLAGS: 00010286 [ 126.405396][ T6066] RAX: 0000000080000000 RBX: ffffc90003c16cc0 RCX: 0000000000000000 [ 126.405413][ T6066] RDX: 0000000000000000 RSI: ffffffff8b5f6240 RDI: ffffffff8f1e9290 [ 126.405428][ T6066] RBP: ffffc90003c16dc8 R08: ffffffff8f1b6f77 R09: 1ffffffff1e36dee [ 126.405444][ T6066] R10: dffffc0000000000 R11: fffffbfff1e36def R12: 1ffff92000782d94 [ 126.405461][ T6066] R13: ffffffff8aef00ed R14: ffff888028b5a048 R15: dffffc0000000000 [ 126.405479][ T6066] ? rt_mutex_slowlock+0x1fd/0x710 [ 126.405518][ T6066] ? rt_mutex_slowlock+0x1fd/0x710 [ 126.405550][ T6066] rt_mutex_slowlock+0x6c0/0x710 [ 126.405585][ T6066] ? rt_mutex_slowlock+0x1fd/0x710 [ 126.405618][ T6066] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 126.405659][ T6066] ? hfs_find_init+0x18e/0x300 [ 126.405683][ T6066] ? hfs_find_init+0x18e/0x300 [ 126.405703][ T6066] mutex_lock_nested+0x168/0x1d0 [ 126.405734][ T6066] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.405761][ T6066] hfs_find_init+0x18e/0x300 [ 126.405785][ T6066] hfs_extend_file+0x35c/0x15e0 [ 126.405819][ T6066] ? __pfx_hfs_extend_file+0x10/0x10 [ 126.405850][ T6066] ? lockdep_unlock+0x6b/0xf0 [ 126.405874][ T6066] ? __lock_acquire+0x146e/0x2cf0 [ 126.405909][ T6066] ? __asan_memset+0x22/0x50 [ 126.405937][ T6066] ? hfs_brec_find+0x19a/0x510 [ 126.405963][ T6066] hfs_bmap_reserve+0x107/0x430 [ 126.405998][ T6066] __hfs_ext_write_extent+0x1fa/0x470 [ 126.406031][ T6066] __hfs_ext_cache_extent+0x6b/0x9b0 [ 126.406063][ T6066] ? hfs_find_init+0x18e/0x300 [ 126.406087][ T6066] hfs_extend_file+0x39b/0x15e0 [ 126.406117][ T6066] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 126.406158][ T6066] ? __pfx_hfs_extend_file+0x10/0x10 [ 126.406192][ T6066] ? clean_bdev_aliases+0x62e/0x750 [ 126.406227][ T6066] ? __pfx_clean_bdev_aliases+0x10/0x10 [ 126.406262][ T6066] hfs_get_block+0x412/0xc50 [ 126.406298][ T6066] ? __pfx_hfs_get_block+0x10/0x10 [ 126.406329][ T6066] ? rt_spin_unlock+0x160/0x200 [ 126.406367][ T6066] __block_write_begin_int+0x6c6/0x1910 [ 126.406408][ T6066] ? __pfx_hfs_get_block+0x10/0x10 [ 126.406439][ T6066] ? __pfx___block_write_begin_int+0x10/0x10 [ 126.406472][ T6066] ? __filemap_get_folio_mpol+0x6fa/0xa50 [ 126.406505][ T6066] cont_write_begin+0x737/0xae0 [ 126.406544][ T6066] ? __pfx_cont_write_begin+0x10/0x10 [ 126.406578][ T6066] ? folio_unlock+0x101/0x160 [ 126.406607][ T6066] hfs_write_begin+0x66/0xb0 [ 126.406636][ T6066] ? __pfx_hfs_get_block+0x10/0x10 [ 126.406668][ T6066] cont_write_begin+0x2e7/0xae0 [ 126.406700][ T6066] ? __lock_acquire+0x6b5/0x2cf0 [ 126.406736][ T6066] ? __pfx_cont_write_begin+0x10/0x10 [ 126.406773][ T6066] ? unmap_mapping_range+0xb7/0x180 [ 126.406804][ T6066] hfs_write_begin+0x66/0xb0 [ 126.406833][ T6066] ? __pfx_hfs_get_block+0x10/0x10 [ 126.406863][ T6066] hfs_file_truncate+0x1cf/0xb70 [ 126.406902][ T6066] ? __pfx_hfs_file_truncate+0x10/0x10 [ 126.406935][ T6066] ? unmap_mapping_range+0xe6/0x180 [ 126.406964][ T6066] ? __pfx_unmap_mapping_range+0x10/0x10 [ 126.406991][ T6066] ? setattr_prepare+0x1e6/0xac0 [ 126.407023][ T6066] ? truncate_setsize+0xcf/0xf0 [ 126.407047][ T6066] hfs_inode_setattr+0x4a9/0x670 [ 126.407079][ T6066] ? try_break_deleg+0x7c/0x130 [ 126.407109][ T6066] ? __pfx_hfs_inode_setattr+0x10/0x10 [ 126.407142][ T6066] notify_change+0xc18/0xf60 [ 126.407186][ T6066] do_truncate+0x1c2/0x250 [ 126.407216][ T6066] ? __pfx_do_truncate+0x10/0x10 [ 126.407256][ T6066] vfs_truncate+0x4b4/0x540 [ 126.407289][ T6066] ? __pfx_vfs_truncate+0x10/0x10 [ 126.407319][ T6066] ? kmem_cache_free+0x18d/0x8c0 [ 126.407354][ T6066] do_sys_truncate+0xf1/0x1c0 [ 126.407387][ T6066] ? __pfx_do_sys_truncate+0x10/0x10 [ 126.407418][ T6066] ? rcu_is_watching+0x15/0xb0 [ 126.407442][ T6066] __x64_sys_truncate+0x5b/0x70 [ 126.407473][ T6066] do_syscall_64+0xe2/0xf80 [ 126.407499][ T6066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.407520][ T6066] ? trace_irq_disable+0x37/0x100 [ 126.407542][ T6066] ? clear_bhb_loop+0x60/0xb0 [ 126.407567][ T6066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.407587][ T6066] RIP: 0033:0x7fccb138acb9 [ 126.407605][ T6066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.407623][ T6066] RSP: 002b:00007ffe1470ca38 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 126.407644][ T6066] RAX: ffffffffffffffda RBX: 00007fccb1605fa0 RCX: 00007fccb138acb9 [ 126.407661][ T6066] RDX: 0000000000000000 RSI: 0000000001001bfc RDI: 0000200000000040 [ 126.407675][ T6066] RBP: 00007fccb13f8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 126.407689][ T6066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.407701][ T6066] R13: 00007fccb1605fac R14: 00007fccb1605fa0 R15: 00007fccb1605fa0 [ 126.407727][ T6066] [ 126.408332][ T6066] Kernel Offset: disabled