[ 76.619781][ T23] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.228' (ED25519) to the list of known hosts. 2026/01/30 20:31:08 parsed 1 programs [ 85.582347][ T4604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 87.040235][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.052632][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.063996][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.064068][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.079921][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.090687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.729013][ T4659] chnl_net:caif_netlink_parms(): no params data found [ 88.798949][ T4659] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.806136][ T4659] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.814996][ T4659] device bridge_slave_0 entered promiscuous mode [ 88.824875][ T4659] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.832621][ T4659] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.841136][ T4659] device bridge_slave_1 entered promiscuous mode [ 88.859756][ T4659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.870343][ T4659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.890802][ T4659] team0: Port device team_slave_0 added [ 88.898047][ T4659] team0: Port device team_slave_1 added [ 88.914653][ T4659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.921703][ T4659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.948106][ T4659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.960868][ T4659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.967860][ T4659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.994178][ T4659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.021575][ T4659] device hsr_slave_0 entered promiscuous mode [ 89.028353][ T4659] device hsr_slave_1 entered promiscuous mode [ 89.513507][ T4659] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.546125][ T4659] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.556998][ T4659] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.567437][ T4659] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.672997][ T4659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.686716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.696541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.709765][ T4659] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.721191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.731482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.741676][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.748797][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.758472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.768982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.778456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.787175][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.794301][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.836272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.850497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.886996][ T4659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.898605][ T4659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.910423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.920999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.930254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.940285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.949427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.958434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.967092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.976023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.006963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.018427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.114395][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.122481][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.159605][ T4659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.180279][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.190128][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.213760][ T4659] device veth0_vlan entered promiscuous mode [ 90.225430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.235824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.244798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.253923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.289168][ T4659] device veth1_vlan entered promiscuous mode [ 90.309068][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.318194][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.326314][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.335893][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.348058][ T4659] device veth0_macvtap entered promiscuous mode [ 90.370454][ T4659] device veth1_macvtap entered promiscuous mode [ 90.399452][ T4659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.407170][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.430274][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.439456][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.458640][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.482580][ T4659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.498129][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.518638][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.540189][ T4659] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.549835][ T4659] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.567646][ T4659] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.576372][ T4659] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/30 20:31:17 executed programs: 0 [ 91.637046][ T4800] chnl_net:caif_netlink_parms(): no params data found [ 91.741628][ T4800] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.751109][ T4800] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.759681][ T4800] device bridge_slave_0 entered promiscuous mode [ 91.770858][ T4800] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.778117][ T4800] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.786046][ T4800] device bridge_slave_1 entered promiscuous mode [ 91.814451][ T4800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.842482][ T4800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.888202][ T4800] team0: Port device team_slave_0 added [ 91.896343][ T4800] team0: Port device team_slave_1 added [ 91.941404][ T4800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.957768][ T4800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.007787][ T4800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.033525][ T4800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.040896][ T4800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.069072][ T4800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.122989][ T4800] device hsr_slave_0 entered promiscuous mode [ 92.131514][ T4800] device hsr_slave_1 entered promiscuous mode [ 92.142903][ T4800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.150588][ T4800] Cannot create hsr debugfs directory [ 92.318927][ T4800] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.498928][ T4270] Bluetooth: hci0: command 0x0409 tx timeout [ 95.577941][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 95.612271][ T4800] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.672302][ T4800] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.764149][ T4800] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.903489][ T4800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.912176][ T4800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.921194][ T4800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.930980][ T4800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.980082][ T4800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.000980][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.008996][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.019005][ T4800] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.030720][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.039517][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.048496][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.055615][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.089655][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.098037][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.106688][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.115369][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.122448][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.130934][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.139706][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.148934][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.158006][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.166420][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.175728][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.184558][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.193011][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.201553][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.209951][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.220498][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.230347][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.311536][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.319155][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.331339][ T4800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.342068][ T144] device hsr_slave_0 left promiscuous mode [ 96.348750][ T144] device hsr_slave_1 left promiscuous mode [ 96.354978][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.363060][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.371328][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.378867][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.386496][ T144] device bridge_slave_1 left promiscuous mode [ 96.392910][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.401206][ T144] device bridge_slave_0 left promiscuous mode [ 96.407480][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.420490][ T144] device veth1_macvtap left promiscuous mode [ 96.426532][ T144] device veth0_macvtap left promiscuous mode [ 96.433161][ T144] device veth1_vlan left promiscuous mode [ 96.439135][ T144] device veth0_vlan left promiscuous mode [ 96.537395][ T144] team0 (unregistering): Port device team_slave_1 removed [ 96.551135][ T144] team0 (unregistering): Port device team_slave_0 removed [ 96.562243][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.574346][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.615640][ T144] bond0 (unregistering): Released all slaves [ 96.670695][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.679300][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.695620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.704201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.712818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.721050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.733054][ T4800] device veth0_vlan entered promiscuous mode [ 96.744929][ T4800] device veth1_vlan entered promiscuous mode [ 96.768279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.776914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.785797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.794504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.805334][ T4800] device veth0_macvtap entered promiscuous mode [ 96.814149][ T4800] device veth1_macvtap entered promiscuous mode [ 96.831220][ T4800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.839062][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.847942][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.855929][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.865063][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.876986][ T4800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.885447][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.895086][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.907199][ T4800] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.916302][ T4800] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.925382][ T4800] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.934470][ T4800] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.985781][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.002545][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.020480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/01/30 20:31:23 executed programs: 2 [ 97.031315][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.040191][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.051537][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.114265][ T5065] loop0: detected capacity change from 0 to 64 [ 97.361481][ T5068] loop0: detected capacity change from 0 to 64 [ 97.505862][ T5071] loop0: detected capacity change from 0 to 64 [ 97.658717][ T5074] loop0: detected capacity change from 0 to 64 [ 97.676805][ T4676] Bluetooth: hci0: command 0x040f tx timeout [ 97.694100][ T5074] [ 97.696475][ T5074] ====================================================== [ 97.703567][ T5074] WARNING: possible circular locking dependency detected [ 97.710768][ T5074] syzkaller #0 Not tainted [ 97.715175][ T5074] ------------------------------------------------------ [ 97.722176][ T5074] syz.0.19/5074 is trying to acquire lock: [ 97.727967][ T5074] ffff88807b7a00b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 97.737446][ T5074] [ 97.737446][ T5074] but task is already holding lock: [ 97.744800][ T5074] ffff88807b2380f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 97.755571][ T5074] [ 97.755571][ T5074] which lock already depends on the new lock. [ 97.755571][ T5074] [ 97.766042][ T5074] [ 97.766042][ T5074] the existing dependency chain (in reverse order) is: [ 97.775031][ T5074] [ 97.775031][ T5074] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 97.784210][ T5074] __mutex_lock_common+0x1e3/0x2400 [ 97.789910][ T5074] mutex_lock_nested+0x17/0x20 [ 97.795168][ T5074] hfs_extend_file+0xfb/0x13f0 [ 97.800427][ T5074] hfs_bmap_reserve+0x103/0x420 [ 97.805778][ T5074] __hfs_ext_write_extent+0x1fa/0x470 [ 97.811645][ T5074] hfs_ext_write_extent+0x17b/0x200 [ 97.817339][ T5074] hfs_write_inode+0xd8/0xa20 [ 97.822626][ T5074] __writeback_single_inode+0x6c3/0xda0 [ 97.828700][ T5074] writeback_sb_inodes+0xa4e/0x1680 [ 97.834417][ T5074] wb_writeback+0x45d/0xbe0 [ 97.839432][ T5074] wb_workfn+0x43a/0xf20 [ 97.844186][ T5074] process_one_work+0x85f/0x1010 [ 97.849800][ T5074] worker_thread+0xaa6/0x1290 [ 97.854975][ T5074] kthread+0x436/0x520 [ 97.859538][ T5074] ret_from_fork+0x1f/0x30 [ 97.864458][ T5074] [ 97.864458][ T5074] -> #0 (&tree->tree_lock/1){+.+.}-{3:3}: [ 97.872339][ T5074] __lock_acquire+0x2c42/0x7d10 [ 97.877692][ T5074] lock_acquire+0x19e/0x400 [ 97.882691][ T5074] __mutex_lock_common+0x1e3/0x2400 [ 97.888495][ T5074] mutex_lock_nested+0x17/0x20 [ 97.893759][ T5074] hfs_find_init+0x15b/0x1d0 [ 97.898848][ T5074] hfs_extend_file+0x35d/0x13f0 [ 97.904195][ T5074] hfs_bmap_reserve+0x103/0x420 [ 97.909538][ T5074] hfs_cat_create+0x204/0x8e0 [ 97.914715][ T5074] hfs_create+0x62/0xd0 [ 97.919367][ T5074] path_openat+0x11db/0x2fa0 [ 97.924474][ T5074] do_filp_open+0x1e2/0x410 [ 97.929570][ T5074] do_sys_openat2+0x150/0x4b0 [ 97.934927][ T5074] __x64_sys_openat+0x135/0x160 [ 97.940272][ T5074] do_syscall_64+0x4c/0xa0 [ 97.945189][ T5074] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.951600][ T5074] [ 97.951600][ T5074] other info that might help us debug this: [ 97.951600][ T5074] [ 97.961888][ T5074] Possible unsafe locking scenario: [ 97.961888][ T5074] [ 97.969310][ T5074] CPU0 CPU1 [ 97.974651][ T5074] ---- ---- [ 97.979995][ T5074] lock(&HFS_I(tree->inode)->extents_lock); [ 97.985954][ T5074] lock(&tree->tree_lock/1); [ 97.993129][ T5074] lock(&HFS_I(tree->inode)->extents_lock); [ 98.001601][ T5074] lock(&tree->tree_lock/1); [ 98.006253][ T5074] [ 98.006253][ T5074] *** DEADLOCK *** [ 98.006253][ T5074] [ 98.014371][ T5074] 4 locks held by syz.0.19/5074: [ 98.019277][ T5074] #0: ffff88807b456460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 98.028478][ T5074] #1: ffff88807b238928 (&type->i_mutex_dir_key#8){+.+.}-{3:3}, at: path_openat+0x803/0x2fa0 [ 98.038628][ T5074] #2: ffff88807b7a20b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 98.048167][ T5074] #3: ffff88807b2380f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 98.059453][ T5074] [ 98.059453][ T5074] stack backtrace: [ 98.065525][ T5074] CPU: 0 PID: 5074 Comm: syz.0.19 Not tainted syzkaller #0 [ 98.072705][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.082829][ T5074] Call Trace: [ 98.086097][ T5074] [ 98.089008][ T5074] dump_stack_lvl+0x188/0x250 [ 98.093711][ T5074] ? load_image+0x400/0x400 [ 98.098454][ T5074] ? show_regs_print_info+0x20/0x20 [ 98.103637][ T5074] ? print_circular_bug+0x12b/0x1a0 [ 98.108817][ T5074] check_noncircular+0x296/0x330 [ 98.113737][ T5074] ? add_chain_block+0x940/0x940 [ 98.118663][ T5074] ? lockdep_lock+0xf1/0x1f0 [ 98.123258][ T5074] ? mark_lock+0x94/0x320 [ 98.127572][ T5074] __lock_acquire+0x2c42/0x7d10 [ 98.132423][ T5074] ? mark_lock+0x94/0x320 [ 98.136737][ T5074] ? verify_lock_unused+0x140/0x140 [ 98.141922][ T5074] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 98.147883][ T5074] ? lock_chain_count+0x20/0x20 [ 98.152715][ T5074] ? __rwlock_init+0x140/0x140 [ 98.157452][ T5074] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 98.163325][ T5074] ? lockdep_hardirqs_on+0x94/0x140 [ 98.168537][ T5074] lock_acquire+0x19e/0x400 [ 98.173020][ T5074] ? hfs_find_init+0x15b/0x1d0 [ 98.177763][ T5074] ? __might_sleep+0xf0/0xf0 [ 98.182330][ T5074] ? read_lock_is_recursive+0x10/0x10 [ 98.187681][ T5074] ? __kasan_kmalloc+0xcc/0xf0 [ 98.192429][ T5074] ? __kasan_kmalloc+0xb5/0xf0 [ 98.197167][ T5074] ? hfs_find_init+0x84/0x1d0 [ 98.201819][ T5074] ? hfs_bmap_reserve+0x103/0x420 [ 98.206819][ T5074] ? hfs_cat_create+0x204/0x8e0 [ 98.211651][ T5074] ? hfs_create+0x62/0xd0 [ 98.215954][ T5074] ? do_filp_open+0x1e2/0x410 [ 98.220607][ T5074] ? hfs_find_init+0x15b/0x1d0 [ 98.225356][ T5074] __mutex_lock_common+0x1e3/0x2400 [ 98.230536][ T5074] ? hfs_find_init+0x15b/0x1d0 [ 98.235277][ T5074] ? mutex_lock_io_nested+0x60/0x60 [ 98.240464][ T5074] mutex_lock_nested+0x17/0x20 [ 98.245202][ T5074] hfs_find_init+0x15b/0x1d0 [ 98.249768][ T5074] hfs_extend_file+0x35d/0x13f0 [ 98.254596][ T5074] ? hfs_get_block+0xc50/0xc50 [ 98.259341][ T5074] ? hfs_find_init+0x15b/0x1d0 [ 98.264082][ T5074] ? __mutex_lock_common+0x465/0x2400 [ 98.269524][ T5074] ? mutex_lock_io_nested+0x60/0x60 [ 98.274707][ T5074] hfs_bmap_reserve+0x103/0x420 [ 98.279590][ T5074] hfs_cat_create+0x204/0x8e0 [ 98.284256][ T5074] ? hfs_new_inode+0x8d2/0xb50 [ 98.288995][ T5074] ? hfs_cat_build_key+0x170/0x170 [ 98.294085][ T5074] ? _raw_spin_unlock+0x24/0x40 [ 98.298918][ T5074] ? hfs_new_inode+0x8d2/0xb50 [ 98.303668][ T5074] hfs_create+0x62/0xd0 [ 98.307886][ T5074] ? hfs_lookup+0x320/0x320 [ 98.312363][ T5074] path_openat+0x11db/0x2fa0 [ 98.316950][ T5074] ? do_filp_open+0x410/0x410 [ 98.321609][ T5074] do_filp_open+0x1e2/0x410 [ 98.326096][ T5074] ? vfs_tmpfile+0x300/0x300 [ 98.330665][ T5074] ? _raw_spin_unlock+0x24/0x40 [ 98.335495][ T5074] ? alloc_fd+0x598/0x630 [ 98.339886][ T5074] do_sys_openat2+0x150/0x4b0 [ 98.344540][ T5074] ? __lock_acquire+0x7d10/0x7d10 [ 98.349545][ T5074] ? do_sys_open+0xe0/0xe0 [ 98.353941][ T5074] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 98.359901][ T5074] ? lock_chain_count+0x20/0x20 [ 98.364729][ T5074] ? vtime_user_exit+0x2c8/0x3e0 [ 98.369652][ T5074] __x64_sys_openat+0x135/0x160 [ 98.374495][ T5074] do_syscall_64+0x4c/0xa0 [ 98.378888][ T5074] ? clear_bhb_loop+0x30/0x80 [ 98.383542][ T5074] ? clear_bhb_loop+0x30/0x80 [ 98.388194][ T5074] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.394075][ T5074] RIP: 0033:0x7fe7857a68f9 [ 98.398478][ T5074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.418147][ T5074] RSP: 002b:00007fe784a0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 98.426651][ T5074] RAX: ffffffffffffffda RBX: 00007fe7859d4fa0 RCX: 00007fe7857a68f9 [ 98.434599][ T5074] RDX: 000000000000275a RSI: 0000400000000000 RDI: ffffffffffffff9c [ 98.442552][ T5074] RBP: 00007fe7858381bc R08: 0000000000000000 R09: 0000000000000000 [ 98.450506][ T5074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.458481][ T5074] R13: 0000000000000000 R14: 00007fe7859d4fa0 R15: 00007fff46ce80a8 [ 98.466635][ T5074] [ 98.531436][ T5074] hfs: request for non-existent node 16777216 in B*Tree [ 98.540731][ T5074] hfs: request for non-existent node 16777216 in B*Tree [ 98.548210][ T5074] hfs: inconsistency in B*Tree (5,0,1,0,1) [ 98.622218][ T5077] loop0: detected capacity change from 0 to 64 [ 98.709549][ T5080] loop0: detected capacity change from 0 to 64 [ 98.788454][ T5083] loop0: detected capacity change from 0 to 64 [ 98.845289][ T5086] loop0: detected capacity change from 0 to 64 [ 99.075335][ T5093] loop0: detected capacity change from 0 to 64 [ 99.189067][ T5096] loop0: detected capacity change from 0 to 64 [ 99.737923][ T4676] Bluetooth: hci0: command 0x0419 tx timeout 2026/01/30 20:31:28 executed programs: 48 [ 102.149566][ T5205] set_capacity_and_notify: 34 callbacks suppressed [ 102.149580][ T5205] loop0: detected capacity change from 0 to 64 [ 102.221807][ T5208] loop0: detected capacity change from 0 to 64 [ 102.279339][ T5212] loop0: detected capacity change from 0 to 64 [ 102.360068][ T5215] loop0: detected capacity change from 0 to 64 [ 102.445408][ T5218] loop0: detected capacity change from 0 to 64 [ 102.508499][ T5221] loop0: detected capacity change from 0 to 64 [ 102.579936][ T5224] loop0: detected capacity change from 0 to 64 [ 102.669376][ T5227] loop0: detected capacity change from 0 to 64 [ 102.746337][ T5230] loop0: detected capacity change from 0 to 64 [ 102.817884][ T5233] loop0: detected capacity change from 0 to 64 [ 104.830289][ T5297] hfs: request for non-existent node 16777216 in B*Tree [ 104.838649][ T5297] hfs: request for non-existent node 16777216 in B*Tree [ 104.845619][ T5297] hfs: inconsistency in B*Tree (5,0,1,0,1) [ 106.790493][ T5361] hfs: unable to parse mount options 2026/01/30 20:31:33 executed programs: 101 [ 107.178890][ T5368] set_capacity_and_notify: 41 callbacks suppressed [ 107.178903][ T5368] loop0: detected capacity change from 0 to 64 [ 107.264774][ T5371] loop0: detected capacity change from 0 to 64 [ 107.330565][ T5374] loop0: detected capacity change from 0 to 64 [ 107.338551][ T5374] hfs: unable to parse mount options [ 107.606425][ T5377] loop0: detected capacity change from 0 to 64 [ 107.679279][ T5380] loop0: detected capacity change from 0 to 64