Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts. 2025/10/16 18:58:15 parsed 1 programs [ 81.131692][ T4272] cgroup: Unknown subsys name 'net' [ 81.268245][ T4272] cgroup: Unknown subsys name 'rlimit' [ 82.801713][ T4272] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 85.272682][ T4314] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.286163][ T4314] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.294765][ T4314] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.304503][ T4316] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.312891][ T4316] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.320494][ T4316] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.540363][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.554198][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.576612][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.587640][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.595859][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.605803][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.295738][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 86.354166][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.363140][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.372693][ T4331] device bridge_slave_0 entered promiscuous mode [ 86.388556][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.396115][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.404567][ T4331] device bridge_slave_1 entered promiscuous mode [ 86.433644][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.445899][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.476739][ T4331] team0: Port device team_slave_0 added [ 86.485060][ T4331] team0: Port device team_slave_1 added [ 86.510853][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.518216][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.545351][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.568408][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.575447][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.601489][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.636595][ T4331] device hsr_slave_0 entered promiscuous mode [ 86.643748][ T4331] device hsr_slave_1 entered promiscuous mode [ 86.762391][ T4331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.811605][ T4331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.820807][ T4331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.831019][ T4331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.913231][ T14] cfg80211: failed to load regulatory.db [ 86.999356][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.072606][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.082760][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.105372][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.139813][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.150259][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.161668][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.169483][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.202604][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.212194][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.221507][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.230772][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.237976][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.250087][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.271818][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.283821][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.293478][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.303640][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.314110][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.323965][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.347282][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.356932][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.370353][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.601088][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.609379][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.623492][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.646724][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.656179][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.679008][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.687976][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.696924][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.704946][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.719057][ T4331] device veth0_vlan entered promiscuous mode [ 87.730899][ T4331] device veth1_vlan entered promiscuous mode [ 87.754226][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.762624][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.770678][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.779791][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.793717][ T4331] device veth0_macvtap entered promiscuous mode [ 87.803088][ T4331] device veth1_macvtap entered promiscuous mode [ 87.819908][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.827948][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.836651][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.845107][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.854267][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.866462][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.878399][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.887420][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.899509][ T4331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.908797][ T4331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.918534][ T4331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.927660][ T4331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.165637][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/10/16 18:58:26 executed programs: 0 [ 89.225745][ T4316] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.234091][ T4316] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.243434][ T4316] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.252492][ T4316] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.260823][ T4316] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.268874][ T4316] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.410635][ T4368] chnl_net:caif_netlink_parms(): no params data found [ 89.458160][ T4368] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.465480][ T4368] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.474476][ T4368] device bridge_slave_0 entered promiscuous mode [ 89.483885][ T4368] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.491111][ T4368] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.499308][ T4368] device bridge_slave_1 entered promiscuous mode [ 89.528664][ T4368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.541084][ T4368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.569957][ T4368] team0: Port device team_slave_0 added [ 89.579264][ T4368] team0: Port device team_slave_1 added [ 89.599835][ T4368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.607014][ T4368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.633357][ T4368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.646529][ T4368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.653689][ T4368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.680475][ T4368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.724373][ T4368] device hsr_slave_0 entered promiscuous mode [ 89.731429][ T4368] device hsr_slave_1 entered promiscuous mode [ 89.738417][ T4368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.746817][ T4368] Cannot create hsr debugfs directory [ 90.153717][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.312055][ T4316] Bluetooth: hci0: command 0x0409 tx timeout [ 92.391059][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.445442][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.309833][ T9] device hsr_slave_0 left promiscuous mode [ 93.317770][ T9] device hsr_slave_1 left promiscuous mode [ 93.327964][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.336285][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.348767][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.356677][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.367314][ T9] device bridge_slave_1 left promiscuous mode [ 93.374761][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.389397][ T9] device bridge_slave_0 left promiscuous mode [ 93.397144][ T4316] Bluetooth: hci0: command 0x041b tx timeout [ 93.403800][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.435002][ T9] device veth1_macvtap left promiscuous mode [ 93.441810][ T9] device veth0_macvtap left promiscuous mode [ 93.447985][ T9] device veth1_vlan left promiscuous mode [ 93.456993][ T9] device veth0_vlan left promiscuous mode [ 93.848462][ T9] team0 (unregistering): Port device team_slave_1 removed [ 93.879960][ T9] team0 (unregistering): Port device team_slave_0 removed [ 93.908520][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.939642][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.223961][ T9] bond0 (unregistering): Released all slaves [ 94.339716][ T4368] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.355263][ T4368] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.365488][ T4368] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.376144][ T4368] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.466278][ T4368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.479453][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.487676][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.504433][ T4368] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.516836][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.525906][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.535182][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.542394][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.561286][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.569462][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.578491][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.588002][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.595428][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.604491][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.620228][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.642397][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.653269][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.662243][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.672600][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.681755][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.690164][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.699342][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.711979][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.720621][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.730834][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.973727][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.982034][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.996391][ T4368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.016124][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.025044][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.044632][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.053152][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.062595][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.070495][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.094253][ T4368] device veth0_vlan entered promiscuous mode [ 95.106646][ T4368] device veth1_vlan entered promiscuous mode [ 95.129399][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.138888][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.147722][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.157099][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.183550][ T4368] device veth0_macvtap entered promiscuous mode [ 95.195136][ T4368] device veth1_macvtap entered promiscuous mode [ 95.219551][ T4368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.227914][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.236977][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.246114][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.256921][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.285197][ T4368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.295585][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.305860][ T1125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.336811][ T4368] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.346502][ T4368] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.355499][ T4368] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.364885][ T4368] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.471689][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 95.515783][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.539520][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.553426][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.584120][ T4420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.592261][ T4420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.602022][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.670899][ T4421] loop0: detected capacity change from 0 to 1024 [ 95.707535][ T4421] [ 95.709939][ T4421] ============================================ [ 95.716123][ T4421] WARNING: possible recursive locking detected [ 95.722411][ T4421] syzkaller #0 Not tainted [ 95.726863][ T4421] -------------------------------------------- [ 95.733046][ T4421] syz.0.17/4421 is trying to acquire lock: [ 95.738889][ T4421] ffff88807c491548 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_get_block+0x39b/0x1530 [ 95.750033][ T4421] [ 95.750033][ T4421] but task is already holding lock: [ 95.757694][ T4421] ffff88807c492988 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x28f/0xb30 [ 95.769249][ T4421] [ 95.769249][ T4421] other info that might help us debug this: [ 95.777435][ T4421] Possible unsafe locking scenario: [ 95.777435][ T4421] [ 95.784924][ T4421] CPU0 [ 95.788226][ T4421] ---- [ 95.791607][ T4421] lock(&HFSPLUS_I(inode)->extents_lock); [ 95.797461][ T4421] lock(&HFSPLUS_I(inode)->extents_lock); [ 95.803362][ T4421] [ 95.803362][ T4421] *** DEADLOCK *** [ 95.803362][ T4421] [ 95.811526][ T4421] May be due to missing lock nesting notation [ 95.811526][ T4421] [ 95.819858][ T4421] 4 locks held by syz.0.17/4421: [ 95.824814][ T4421] #0: ffff888019af2460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 95.834152][ T4421] #1: ffff88807c492b80 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: do_truncate+0x183/0x220 [ 95.844529][ T4421] #2: ffff88807c492988 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x28f/0xb30 [ 95.856244][ T4421] #3: ffff88802fe4d8f8 (&sbi->alloc_mutex){+.+.}-{3:3}, at: hfsplus_block_free+0xbf/0x4b0 [ 95.866375][ T4421] [ 95.866375][ T4421] stack backtrace: [ 95.872305][ T4421] CPU: 0 PID: 4421 Comm: syz.0.17 Not tainted syzkaller #0 [ 95.879607][ T4421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.889688][ T4421] Call Trace: [ 95.892981][ T4421] [ 95.895922][ T4421] dump_stack_lvl+0x168/0x22e [ 95.900667][ T4421] ? show_regs_print_info+0x12/0x12 [ 95.905871][ T4421] ? load_image+0x3b0/0x3b0 [ 95.910752][ T4421] __lock_acquire+0x122f/0x7c50 [ 95.915645][ T4421] ? unwind_get_return_address+0x49/0x80 [ 95.921297][ T4421] ? stack_trace_save+0xe0/0xe0 [ 95.926207][ T4421] ? check_noncircular+0x16f/0x310 [ 95.931612][ T4421] ? verify_lock_unused+0x140/0x140 [ 95.936920][ T4421] ? lockdep_unlock+0x133/0x2d0 [ 95.941875][ T4421] ? lockdep_lock+0x1e0/0x1e0 [ 95.946584][ T4421] ? add_lock_to_list+0x191/0x280 [ 95.951923][ T4421] lock_acquire+0x1b4/0x490 [ 95.956922][ T4421] ? hfsplus_get_block+0x39b/0x1530 [ 95.962376][ T4421] ? __might_sleep+0xd0/0xd0 [ 95.967033][ T4421] ? read_lock_is_recursive+0x10/0x10 [ 95.972428][ T4421] ? verify_lock_unused+0x140/0x140 [ 95.978091][ T4421] __mutex_lock+0x120/0xaf0 [ 95.982612][ T4421] ? hfsplus_get_block+0x39b/0x1530 [ 95.987821][ T4421] ? memset+0x1e/0x40 [ 95.991905][ T4421] ? hfsplus_get_block+0x39b/0x1530 [ 95.997313][ T4421] ? mutex_lock_nested+0x10/0x10 [ 96.002281][ T4421] hfsplus_get_block+0x39b/0x1530 [ 96.007502][ T4421] ? alloc_buffer_head+0xd4/0x100 [ 96.012552][ T4421] ? hfsplus_ext_write_extent+0x200/0x200 [ 96.018367][ T4421] ? create_empty_buffers+0x59e/0x7a0 [ 96.023756][ T4421] ? verify_lock_unused+0x140/0x140 [ 96.029065][ T4421] ? do_raw_spin_unlock+0x11d/0x230 [ 96.034292][ T4421] ? create_page_buffers+0x24f/0x4a0 [ 96.039784][ T4421] block_read_full_folio+0x3c9/0xed0 [ 96.045117][ T4421] ? _raw_spin_unlock_irq+0x1f/0x40 [ 96.050365][ T4421] ? hfsplus_ext_write_extent+0x200/0x200 [ 96.056295][ T4421] ? block_is_partially_uptodate+0x5f0/0x5f0 [ 96.062401][ T4421] ? __lock_acquire+0x7c50/0x7c50 [ 96.067464][ T4421] ? folio_put+0xd0/0xd0 [ 96.071803][ T4421] ? filemap_alloc_folio+0xdb/0x460 [ 96.077027][ T4421] filemap_read_folio+0x160/0x760 [ 96.082165][ T4421] ? folio_batch_add_and_move+0x14a/0x250 [ 96.087929][ T4421] ? hfsplus_writepage+0x30/0x30 [ 96.092886][ T4421] ? maybe_unlock_mmap_for_io+0x140/0x140 [ 96.098624][ T4421] ? hfsplus_block_free+0xbf/0x4b0 [ 96.103857][ T4421] do_read_cache_folio+0x2a0/0x760 [ 96.109020][ T4421] ? hfsplus_writepage+0x30/0x30 [ 96.114008][ T4421] do_read_cache_page+0x32/0x220 [ 96.119229][ T4421] hfsplus_block_free+0x128/0x4b0 [ 96.124552][ T4421] ? hfsplus_find_init+0x85/0x1c0 [ 96.129620][ T4421] hfsplus_free_extents+0x10d/0xa50 [ 96.135018][ T4421] hfsplus_file_truncate+0x731/0xb30 [ 96.140582][ T4421] ? hfsplus_add_extent+0x890/0x890 [ 96.145982][ T4421] ? __up_read+0x27c/0x660 [ 96.150740][ T4421] ? unmap_mapping_range+0x91/0x100 [ 96.156188][ T4421] hfsplus_setattr+0x1c0/0x280 [ 96.161328][ T4421] ? hfsplus_fileattr_set+0x330/0x330 [ 96.166913][ T4421] notify_change+0xc74/0xf40 [ 96.171780][ T4421] do_truncate+0x197/0x220 [ 96.176323][ T4421] ? put_page_bootmem+0x2c0/0x2c0 [ 96.181370][ T4421] ? bpf_lsm_path_truncate+0x5/0x10 [ 96.186605][ T4421] vfs_truncate+0x262/0x2f0 [ 96.191133][ T4421] do_sys_truncate+0xdc/0x190 [ 96.195946][ T4421] ? break_lease+0xd0/0xd0 [ 96.200416][ T4421] ? lockdep_hardirqs_on+0x94/0x140 [ 96.205635][ T4421] do_syscall_64+0x4c/0xa0 [ 96.210695][ T4421] ? clear_bhb_loop+0x60/0xb0 [ 96.215489][ T4421] ? clear_bhb_loop+0x60/0xb0 [ 96.220201][ T4421] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.226207][ T4421] RIP: 0033:0x7f506a18eec9 [ 96.230643][ T4421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.250724][ T4421] RSP: 002b:00007ffdd55ddc38 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 96.259536][ T4421] RAX: ffffffffffffffda RBX: 00007f506a3e5fa0 RCX: 00007f506a18eec9 [ 96.267879][ T4421] RDX: 0000000000000000 RSI: 0008000000000000 RDI: 0000200000000080 [ 96.276057][ T4421] RBP: 00007f506a211f91 R08: 0000000000000000 R09: 0000000000000000 [ 96.284351][ T4421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.292335][ T4421] R13: 00007f506a3e5fa0 R14: 00007f506a3e5fa0 R15: 0000000000000002 [ 96.300358][ T4421] [ 96.310583][ T4421] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.325670][ T4421] hfsplus: request for non-existent node 16777216 in B*Tree [ 96.335867][ T4421] hfsplus: unable to mark blocks free: error -5 [ 96.343428][ T4421] hfsplus: can't free extent