Warning: Permanently added '10.128.1.183' (ED25519) to the list of known hosts. 2026/03/23 22:45:59 parsed 1 programs [ 53.036548][ T4187] cgroup: Unknown subsys name 'net' [ 53.185605][ T4187] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.448492][ T4187] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.487872][ T4214] chnl_net:caif_netlink_parms(): no params data found [ 56.549846][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.557642][ T4214] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.566072][ T4214] device bridge_slave_0 entered promiscuous mode [ 56.575690][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.583062][ T4214] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.591336][ T4214] device bridge_slave_1 entered promiscuous mode [ 56.616181][ T4214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.627380][ T4214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.653806][ T4214] team0: Port device team_slave_0 added [ 56.661585][ T4214] team0: Port device team_slave_1 added [ 56.682819][ T4214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.689777][ T4214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.716102][ T4214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.731917][ T4214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.738871][ T4214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.764810][ T4214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.802436][ T4214] device hsr_slave_0 entered promiscuous mode [ 56.809343][ T4214] device hsr_slave_1 entered promiscuous mode [ 56.930070][ T4214] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.945892][ T4214] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.961008][ T4214] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.970870][ T4214] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.998647][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.005871][ T4214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.013706][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.020809][ T4214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.078093][ T4214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.092447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.104500][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.112919][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.121331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 57.136610][ T4214] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.148096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.158059][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.165180][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.194294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.204034][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.211136][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.221503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.230976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.248135][ T4214] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.261569][ T4214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.275067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.283327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.292760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.302375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.413517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.422998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.435339][ T4214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.455889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.465110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.483323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.491804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.499913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.508799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.518486][ T4214] device veth0_vlan entered promiscuous mode [ 57.530699][ T4214] device veth1_vlan entered promiscuous mode [ 57.567949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.577637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.586010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.597009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.606685][ T4214] device veth0_macvtap entered promiscuous mode [ 57.620749][ T4214] device veth1_macvtap entered promiscuous mode [ 57.636764][ T4214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.645022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.654171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.662500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.671877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.683143][ T4214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.690524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.699062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.709897][ T4214] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.718856][ T4214] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.727882][ T4214] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.737616][ T4214] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.979532][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.988058][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.000330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.024797][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.032704][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.040120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.626673][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/03/23 22:46:07 executed programs: 0 [ 59.795886][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 59.834129][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.841351][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.849008][ T4283] device bridge_slave_0 entered promiscuous mode [ 59.857091][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.864211][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.873424][ T4283] device bridge_slave_1 entered promiscuous mode [ 59.890081][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.902797][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.922345][ T4283] team0: Port device team_slave_0 added [ 59.929583][ T4283] team0: Port device team_slave_1 added [ 59.945120][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.952271][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.978533][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.990260][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.997373][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.023751][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.049220][ T4283] device hsr_slave_0 entered promiscuous mode [ 60.056274][ T4283] device hsr_slave_1 entered promiscuous mode [ 60.062986][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.070907][ T4283] Cannot create hsr debugfs directory [ 61.811291][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 62.577098][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.626380][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.686943][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.589802][ T4283] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.600076][ T4283] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.610732][ T4283] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.620012][ T4283] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.683052][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.716932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.724885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.735244][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.744367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.753675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.762034][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.769065][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.777709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.789709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.798763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.807463][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.814673][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.838348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.846961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.858744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.867986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.877236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.890618][ T4201] Bluetooth: hci0: command 0x041b tx timeout [ 63.906845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.915664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.928432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.937180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.967473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.976696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.987225][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.075993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.083829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.112736][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.127725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.138020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.169982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.178527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.189081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.196787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.207145][ T4283] device veth0_vlan entered promiscuous mode [ 64.235349][ T4283] device veth1_vlan entered promiscuous mode [ 64.252541][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.261737][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.269623][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.278578][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.288932][ T4283] device veth0_macvtap entered promiscuous mode [ 64.299068][ T4283] device veth1_macvtap entered promiscuous mode [ 64.333994][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.344909][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.356626][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.368178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.378895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.387519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.396450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.406611][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.417225][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.428060][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.441510][ T9] device hsr_slave_0 left promiscuous mode [ 64.447824][ T9] device hsr_slave_1 left promiscuous mode [ 64.454675][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.462397][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.471293][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.478748][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.486567][ T9] device bridge_slave_1 left promiscuous mode [ 64.493410][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.505970][ T9] device bridge_slave_0 left promiscuous mode [ 64.513180][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.528984][ T9] device veth1_macvtap left promiscuous mode [ 64.535657][ T9] device veth0_macvtap left promiscuous mode [ 64.541878][ T9] device veth1_vlan left promiscuous mode [ 64.547734][ T9] device veth0_vlan left promiscuous mode [ 64.687219][ T9] team0 (unregistering): Port device team_slave_1 removed [ 64.702611][ T9] team0 (unregistering): Port device team_slave_0 removed [ 64.716003][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.734016][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.781191][ T9] bond0 (unregistering): Released all slaves [ 64.825106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.833813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.846765][ T4283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.858323][ T4283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.867315][ T4283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.876287][ T4283] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.944345][ T240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.954013][ T240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.962638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.978715][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.987221][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.995735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.043285][ T4345] loop0: detected capacity change from 0 to 64 [ 65.971170][ T4201] Bluetooth: hci0: command 0x040f tx timeout [ 66.089058][ T4345] [ 66.091405][ T4345] ====================================================== [ 66.098409][ T4345] WARNING: possible circular locking dependency detected [ 66.105423][ T4345] syzkaller #0 Not tainted [ 66.109821][ T4345] ------------------------------------------------------ [ 66.116815][ T4345] syz.0.17/4345 is trying to acquire lock: [ 66.122594][ T4345] ffff88807aad80f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 66.133366][ T4345] [ 66.133366][ T4345] but task is already holding lock: [ 66.140710][ T4345] ffff88802b3f40b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 66.149997][ T4345] [ 66.149997][ T4345] which lock already depends on the new lock. [ 66.149997][ T4345] [ 66.160373][ T4345] [ 66.160373][ T4345] the existing dependency chain (in reverse order) is: [ 66.169360][ T4345] [ 66.169360][ T4345] -> #1 (&tree->tree_lock/1){+.+.}-{3:3}: [ 66.177241][ T4345] __mutex_lock_common+0x1e3/0x2400 [ 66.182944][ T4345] mutex_lock_nested+0x17/0x20 [ 66.188207][ T4345] hfs_find_init+0x15b/0x1d0 [ 66.193295][ T4345] hfs_extend_file+0x35d/0x13f0 [ 66.198643][ T4345] hfs_bmap_reserve+0x103/0x420 [ 66.203989][ T4345] hfs_cat_create+0x204/0x8e0 [ 66.209161][ T4345] hfs_create+0x62/0xd0 [ 66.213815][ T4345] path_openat+0x11db/0x2fa0 [ 66.218907][ T4345] do_filp_open+0x1e2/0x410 [ 66.223929][ T4345] do_sys_openat2+0x150/0x4b0 [ 66.229102][ T4345] __x64_sys_open+0x11b/0x140 [ 66.234281][ T4345] do_syscall_64+0x4c/0xa0 [ 66.239200][ T4345] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.245592][ T4345] [ 66.245592][ T4345] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 66.254772][ T4345] __lock_acquire+0x2c42/0x7d10 [ 66.260130][ T4345] lock_acquire+0x19e/0x400 [ 66.265133][ T4345] __mutex_lock_common+0x1e3/0x2400 [ 66.270828][ T4345] mutex_lock_nested+0x17/0x20 [ 66.276092][ T4345] hfs_extend_file+0xfb/0x13f0 [ 66.281356][ T4345] hfs_bmap_reserve+0x103/0x420 [ 66.286703][ T4345] __hfs_ext_write_extent+0x1fa/0x470 [ 66.292572][ T4345] __hfs_ext_cache_extent+0x6b/0x9b0 [ 66.298355][ T4345] hfs_extend_file+0x39c/0x13f0 [ 66.303704][ T4345] hfs_get_block+0x40f/0xc50 [ 66.308795][ T4345] __block_write_begin_int+0x565/0x15d0 [ 66.314842][ T4345] cont_write_begin+0x598/0x7b0 [ 66.320189][ T4345] hfs_write_begin+0x92/0xe0 [ 66.325284][ T4345] cont_write_begin+0x263/0x7b0 [ 66.330633][ T4345] hfs_write_begin+0x92/0xe0 [ 66.335719][ T4345] hfs_file_truncate+0x1c2/0xa10 [ 66.341163][ T4345] hfs_inode_setattr+0x4ab/0x6f0 [ 66.346683][ T4345] notify_change+0xbcd/0xee0 [ 66.351770][ T4345] do_truncate+0x1ac/0x240 [ 66.356686][ T4345] vfs_truncate+0x262/0x2f0 [ 66.362118][ T4345] do_sys_truncate+0xf2/0x1c0 [ 66.367293][ T4345] do_syscall_64+0x4c/0xa0 [ 66.372208][ T4345] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.378599][ T4345] [ 66.378599][ T4345] other info that might help us debug this: [ 66.378599][ T4345] [ 66.388800][ T4345] Possible unsafe locking scenario: [ 66.388800][ T4345] [ 66.396224][ T4345] CPU0 CPU1 [ 66.401563][ T4345] ---- ---- [ 66.406903][ T4345] lock(&tree->tree_lock/1); [ 66.411567][ T4345] lock(&HFS_I(tree->inode)->extents_lock); [ 66.420047][ T4345] lock(&tree->tree_lock/1); [ 66.427222][ T4345] lock(&HFS_I(tree->inode)->extents_lock); [ 66.433177][ T4345] [ 66.433177][ T4345] *** DEADLOCK *** [ 66.433177][ T4345] [ 66.441299][ T4345] 4 locks held by syz.0.17/4345: [ 66.446210][ T4345] #0: ffff88802b3f0460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 66.455412][ T4345] #1: ffff88807aad9628 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: do_truncate+0x198/0x240 [ 66.465740][ T4345] #2: ffff88807aad9478 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 66.476413][ T4345] #3: ffff88802b3f40b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 66.486131][ T4345] [ 66.486131][ T4345] stack backtrace: [ 66.492008][ T4345] CPU: 0 PID: 4345 Comm: syz.0.17 Not tainted syzkaller #0 [ 66.499179][ T4345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 66.509220][ T4345] Call Trace: [ 66.512509][ T4345] [ 66.515423][ T4345] dump_stack_lvl+0x188/0x250 [ 66.520090][ T4345] ? load_image+0x400/0x400 [ 66.524590][ T4345] ? show_regs_print_info+0x20/0x20 [ 66.529786][ T4345] ? print_circular_bug+0x12b/0x1a0 [ 66.534976][ T4345] check_noncircular+0x296/0x330 [ 66.539905][ T4345] ? look_up_lock_class+0x71/0x110 [ 66.545002][ T4345] ? add_chain_block+0x940/0x940 [ 66.549916][ T4345] ? lockdep_lock+0xf1/0x1f0 [ 66.554484][ T4345] ? mark_lock+0x94/0x320 [ 66.558791][ T4345] ? mark_lock+0x94/0x320 [ 66.563097][ T4345] __lock_acquire+0x2c42/0x7d10 [ 66.567932][ T4345] ? verify_lock_unused+0x140/0x140 [ 66.573118][ T4345] ? verify_lock_unused+0x140/0x140 [ 66.578296][ T4345] ? mark_lock+0x94/0x320 [ 66.582601][ T4345] ? __lock_acquire+0x13bc/0x7d10 [ 66.587606][ T4345] ? verify_lock_unused+0x140/0x140 [ 66.592786][ T4345] lock_acquire+0x19e/0x400 [ 66.597268][ T4345] ? hfs_extend_file+0xfb/0x13f0 [ 66.602184][ T4345] ? __might_sleep+0xf0/0xf0 [ 66.606843][ T4345] ? mark_lock+0x94/0x320 [ 66.611147][ T4345] ? read_lock_is_recursive+0x10/0x10 [ 66.616515][ T4345] ? hfs_extend_file+0xfb/0x13f0 [ 66.621453][ T4345] __mutex_lock_common+0x1e3/0x2400 [ 66.626648][ T4345] ? hfs_extend_file+0xfb/0x13f0 [ 66.631577][ T4345] ? verify_lock_unused+0x140/0x140 [ 66.636772][ T4345] ? hfs_bnode_read+0x245/0x920 [ 66.641607][ T4345] ? mutex_lock_io_nested+0x60/0x60 [ 66.646797][ T4345] ? hfs_bnode_read_u8+0x88/0xd0 [ 66.651721][ T4345] ? hfs_bnode_read_u16+0xd0/0xd0 [ 66.656731][ T4345] mutex_lock_nested+0x17/0x20 [ 66.661481][ T4345] hfs_extend_file+0xfb/0x13f0 [ 66.666224][ T4345] ? hfs_bnode_read+0x48d/0x920 [ 66.671056][ T4345] ? hfs_ext_keycmp+0x1c3/0x310 [ 66.675887][ T4345] ? hfs_get_block+0xc50/0xc50 [ 66.680645][ T4345] ? hfs_rename+0x320/0x320 [ 66.685142][ T4345] ? hfs_find_exit+0xa0/0xa0 [ 66.689715][ T4345] ? do_raw_spin_unlock+0x11d/0x230 [ 66.694893][ T4345] ? hfs_brec_find+0x3c9/0x500 [ 66.699639][ T4345] hfs_bmap_reserve+0x103/0x420 [ 66.704478][ T4345] __hfs_ext_write_extent+0x1fa/0x470 [ 66.709832][ T4345] __hfs_ext_cache_extent+0x6b/0x9b0 [ 66.715098][ T4345] ? mutex_lock_nested+0x17/0x20 [ 66.720018][ T4345] ? hfs_find_init+0x15b/0x1d0 [ 66.724762][ T4345] hfs_extend_file+0x39c/0x13f0 [ 66.729595][ T4345] ? hfs_get_block+0xc50/0xc50 [ 66.734342][ T4345] ? hfs_get_block+0x985/0xc50 [ 66.739088][ T4345] ? pagevec_lookup_range+0x30/0x70 [ 66.744266][ T4345] ? clean_bdev_aliases+0x762/0x8a0 [ 66.749443][ T4345] hfs_get_block+0x40f/0xc50 [ 66.754014][ T4345] ? hfs_free_extents+0x430/0x430 [ 66.759013][ T4345] ? do_raw_spin_unlock+0x11d/0x230 [ 66.764191][ T4345] ? create_page_buffers+0x238/0x320 [ 66.769453][ T4345] __block_write_begin_int+0x565/0x15d0 [ 66.774981][ T4345] ? hfs_free_extents+0x430/0x430 [ 66.779988][ T4345] ? page_zero_new_buffers+0x490/0x490 [ 66.785428][ T4345] ? wait_for_stable_page+0xd9/0x110 [ 66.790693][ T4345] cont_write_begin+0x598/0x7b0 [ 66.795527][ T4345] ? __lock_acquire+0x7d10/0x7d10 [ 66.800532][ T4345] ? generic_cont_expand_simple+0x1a0/0x1a0 [ 66.806419][ T4345] ? unlock_page+0x17c/0x1f0 [ 66.811000][ T4345] hfs_write_begin+0x92/0xe0 [ 66.815577][ T4345] ? hfs_free_extents+0x430/0x430 [ 66.820597][ T4345] cont_write_begin+0x263/0x7b0 [ 66.825440][ T4345] ? generic_cont_expand_simple+0x1a0/0x1a0 [ 66.831316][ T4345] hfs_write_begin+0x92/0xe0 [ 66.835887][ T4345] ? hfs_free_extents+0x430/0x430 [ 66.840893][ T4345] hfs_file_truncate+0x1c2/0xa10 [ 66.845810][ T4345] ? unmap_mapping_range+0xc8/0x100 [ 66.850989][ T4345] ? __lock_acquire+0x7d10/0x7d10 [ 66.855994][ T4345] ? hfs_extend_file+0x13f0/0x13f0 [ 66.861086][ T4345] ? rwsem_write_trylock+0x135/0x1c0 [ 66.866351][ T4345] ? up_write+0x1bb/0x420 [ 66.870657][ T4345] ? unmap_mapping_range+0xc8/0x100 [ 66.875837][ T4345] hfs_inode_setattr+0x4ab/0x6f0 [ 66.880753][ T4345] ? bpf_lsm_inode_setattr+0x5/0x10 [ 66.885927][ T4345] ? try_break_deleg+0x79/0x120 [ 66.890758][ T4345] ? hfs_evict_inode+0x100/0x100 [ 66.895672][ T4345] notify_change+0xbcd/0xee0 [ 66.900246][ T4345] do_truncate+0x1ac/0x240 [ 66.904647][ T4345] ? rcu_lock_release+0x20/0x20 [ 66.909480][ T4345] ? bpf_lsm_path_truncate+0x5/0x10 [ 66.914656][ T4345] vfs_truncate+0x262/0x2f0 [ 66.919142][ T4345] do_sys_truncate+0xf2/0x1c0 [ 66.923796][ T4345] ? lock_chain_count+0x20/0x20 [ 66.928637][ T4345] ? break_lease+0xd0/0xd0 [ 66.933040][ T4345] ? lockdep_hardirqs_on+0x94/0x140 [ 66.938252][ T4345] do_syscall_64+0x4c/0xa0 [ 66.942662][ T4345] ? clear_bhb_loop+0x30/0x80 [ 66.947328][ T4345] ? clear_bhb_loop+0x30/0x80 [ 66.951990][ T4345] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.957875][ T4345] RIP: 0033:0x7f25cac83799 [ 66.962273][ T4345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.981856][ T4345] RSP: 002b:00007f25ca2e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 66.990253][ T4345] RAX: ffffffffffffffda RBX: 00007f25caefcfa0 RCX: 00007f25cac83799 [ 66.998206][ T4345] RDX: 0000000000000000 RSI: 0000000003000000 RDI: 0000200000000900 [ 67.006155][ T4345] RBP: 00007f25cad19c99 R08: 0000000000000000 R09: 0000000000000000 [ 67.014106][ T4345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.022055][ T4345] R13: 00007f25caefd038 R14: 00007f25caefcfa0 R15: 00007ffc61ef08d8 [ 67.030009][ T4345] [ 68.050633][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 70.211090][ T240] attempt to access beyond end of device [ 70.211090][ T240] loop0: rw=1048577, want=160, limit=64 [ 70.222225][ T240] Buffer I/O error on dev loop0, logical block 159, lost async page write [ 70.231223][ T240] attempt to access beyond end of device [ 70.231223][ T240] loop0: rw=1048577, want=161, limit=64 [ 70.242281][ T240] Buffer I/O error on dev loop0, logical block 160, lost async page write [ 70.250816][ T240] attempt to access beyond end of device [ 70.250816][ T240] loop0: rw=1048577, want=162, limit=64 [ 70.261840][ T240] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 70.270350][ T240] attempt to access beyond end of device [ 70.270350][ T240] loop0: rw=1048577, want=163, limit=64 [ 70.281369][ T240] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 70.289873][ T240] attempt to access beyond end of device [ 70.289873][ T240] loop0: rw=1048577, want=164, limit=64 [ 70.301102][ T240] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 70.309616][ T240] attempt to access beyond end of device [ 70.309616][ T240] loop0: rw=1048577, want=168, limit=64 [ 70.320877][ T240] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 70.329396][ T240] attempt to access beyond end of device [ 70.329396][ T240] loop0: rw=1048577, want=170, limit=64 [ 70.340524][ T240] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 70.349039][ T240] attempt to access beyond end of device [ 70.349039][ T240] loop0: rw=1048577, want=172, limit=64 [ 70.360066][ T240] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 70.368626][ T240] attempt to access beyond end of device [ 70.368626][ T240] loop0: rw=1048577, want=173, limit=64 [ 70.379643][ T240] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 70.388311][ T240] attempt to access beyond end of device [ 70.388311][ T240] loop0: rw=1048577, want=174, limit=64 [ 70.399327][ T240] Buffer I/O error on dev loop0, logical block 173, lost async page write [ 71.252227][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.258529][ T1421] ieee802154 phy1 wpan1: encryption failed: -22