[ 83.755106][ T4309] team0 (unregistering): Port device team_slave_1 removed [ 83.767952][ T4309] team0 (unregistering): Port device team_slave_0 removed [ 83.781252][ T4309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.794205][ T4309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.855054][ T4309] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.6' (ED25519) to the list of known hosts. 2026/08/17 20:49:55 parsed 1 programs [ 93.055243][ T4479] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 96.042574][ T4277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.058107][ T4277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.079156][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.092212][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.100874][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.109657][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.524927][ T4592] chnl_net:caif_netlink_parms(): no params data found [ 96.724038][ T4592] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.738388][ T4592] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.746416][ T4592] device bridge_slave_0 entered promiscuous mode [ 96.776226][ T4592] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.783557][ T4592] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.792713][ T4592] device bridge_slave_1 entered promiscuous mode [ 96.830287][ T4592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.841807][ T4592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.872583][ T4592] team0: Port device team_slave_0 added [ 96.882066][ T4592] team0: Port device team_slave_1 added [ 96.904372][ T4592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.911489][ T4592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.938351][ T4592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.951285][ T4592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.958658][ T4592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.985524][ T4592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.024563][ T4592] device hsr_slave_0 entered promiscuous mode [ 97.031646][ T4592] device hsr_slave_1 entered promiscuous mode [ 97.605287][ T4592] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.649343][ T4592] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.661787][ T4592] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.673702][ T4592] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.814303][ T4592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.830030][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.839078][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.851432][ T4592] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.862642][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.872190][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.882483][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.889923][ T4277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.901743][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.957515][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.967440][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.978452][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.985973][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.998337][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.021257][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.031292][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.042624][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.053576][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.062983][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.073308][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.082716][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.092657][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.101622][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.111474][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.123189][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.295372][ T4592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.304730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.313430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.346005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.355993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.384081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.393123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.405609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.413973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.426706][ T4592] device veth0_vlan entered promiscuous mode [ 98.450480][ T4592] device veth1_vlan entered promiscuous mode [ 98.474466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.484349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.492972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.504413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.516137][ T4592] device veth0_macvtap entered promiscuous mode [ 98.585626][ T4592] device veth1_macvtap entered promiscuous mode [ 98.603688][ T4592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.612191][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.621762][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.630200][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.640616][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.656061][ T4592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.665245][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.674697][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.690286][ T4592] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.699552][ T4592] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.709681][ T4592] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.718735][ T4592] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/08/17 20:50:04 executed programs: 0 [ 99.172490][ T4733] chnl_net:caif_netlink_parms(): no params data found [ 99.276562][ T4733] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.286184][ T4733] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.295077][ T4733] device bridge_slave_0 entered promiscuous mode [ 99.306236][ T4733] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.314708][ T4733] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.325552][ T4733] device bridge_slave_1 entered promiscuous mode [ 99.391344][ T4733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.421295][ T4733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.474493][ T4733] team0: Port device team_slave_0 added [ 99.489855][ T4733] team0: Port device team_slave_1 added [ 99.540262][ T4733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.547362][ T4733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.607897][ T4733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.643084][ T4733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.650921][ T4733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.708638][ T4733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.794824][ T4733] device hsr_slave_0 entered promiscuous mode [ 99.812654][ T4733] device hsr_slave_1 entered promiscuous mode [ 99.824968][ T4733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.833544][ T4733] Cannot create hsr debugfs directory [ 99.968825][ T4733] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.998061][ T4621] Bluetooth: hci0: command 0x0409 tx timeout [ 103.077838][ T4618] Bluetooth: hci0: command 0x041b tx timeout [ 103.212195][ T4733] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.862695][ T4733] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.904854][ T4733] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.982643][ T4733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.993357][ T4733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.001903][ T4733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.011254][ T4733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.055640][ T4733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.066909][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.075888][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.086611][ T4733] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.097789][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.106618][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.115709][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.123007][ T4277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.132773][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.147158][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.156283][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.165067][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.172406][ T4277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.183054][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.194293][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.212475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.221795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.231491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.242684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.251650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.266176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.275243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.287291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.296276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.311837][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.384482][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.393230][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.410835][ T4733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.426883][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.436068][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.459953][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.468625][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.478230][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.486056][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.495131][ T4733] device veth0_vlan entered promiscuous mode [ 104.513051][ T4733] device veth1_vlan entered promiscuous mode [ 104.530865][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.539525][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.548082][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.556797][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.567621][ T4733] device veth0_macvtap entered promiscuous mode [ 104.582676][ T4733] device veth1_macvtap entered promiscuous mode [ 104.595576][ T4733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.606737][ T4733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.619973][ T4733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.631276][ T4309] device hsr_slave_0 left promiscuous mode [ 104.638186][ T4309] device hsr_slave_1 left promiscuous mode [ 104.645058][ T4309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.653012][ T4309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.661457][ T4309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.669051][ T4309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.676834][ T4309] device bridge_slave_1 left promiscuous mode [ 104.683387][ T4309] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.692158][ T4309] device bridge_slave_0 left promiscuous mode [ 104.698722][ T4309] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.711073][ T4309] device veth1_macvtap left promiscuous mode [ 104.717401][ T4309] device veth0_macvtap left promiscuous mode [ 104.723900][ T4309] device veth1_vlan left promiscuous mode [ 104.729914][ T4309] device veth0_vlan left promiscuous mode [ 104.855866][ T4309] team0 (unregistering): Port device team_slave_1 removed [ 104.870938][ T4309] team0 (unregistering): Port device team_slave_0 removed [ 104.883930][ T4309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.898048][ T4309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.946985][ T4309] bond0 (unregistering): Released all slaves [ 105.017400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.026409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.034637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.043641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.054967][ T4733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.067466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.076637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.087977][ T4733] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.096968][ T4733] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.106638][ T4733] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.116224][ T4733] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.158417][ T4621] Bluetooth: hci0: command 0x040f tx timeout [ 105.190219][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.199988][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/08/17 20:50:11 executed programs: 2 [ 105.216573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.229333][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.240173][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.255725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.293655][ T4969] loop0: detected capacity change from 0 to 64 [ 105.347546][ T4969] FAULT_INJECTION: forcing a failure. [ 105.347546][ T4969] name failslab, interval 1, probability 0, space 0, times 1 [ 105.360945][ T4969] CPU: 1 PID: 4969 Comm: syz.0.15 Not tainted syzkaller #0 [ 105.369590][ T4969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.380100][ T4969] Call Trace: [ 105.383373][ T4969] [ 105.386295][ T4969] dump_stack_lvl+0x188/0x250 [ 105.391071][ T4969] ? show_regs_print_info+0x20/0x20 [ 105.396386][ T4969] ? load_image+0x410/0x410 [ 105.401076][ T4969] ? __lock_acquire+0x7b50/0x7b50 [ 105.406210][ T4969] should_fail+0x383/0x4b0 [ 105.410719][ T4969] should_failslab+0x5/0x20 [ 105.415220][ T4969] slab_pre_alloc_hook+0x51/0xc0 [ 105.420171][ T4969] __kmalloc+0x6b/0x340 [ 105.424462][ T4969] ? __hfs_bnode_create+0xee/0xbd0 [ 105.429571][ T4969] __hfs_bnode_create+0xee/0xbd0 [ 105.434807][ T4969] ? stack_trace_snprint+0xe0/0xe0 [ 105.440195][ T4969] ? hfs_bnode_find+0x211/0xce0 [ 105.447367][ T4969] ? hfs_bnode_get+0x40/0x40 [ 105.452090][ T4969] ? do_raw_spin_lock+0x128/0x2f0 [ 105.457120][ T4969] ? __rwlock_init+0x140/0x140 [ 105.462006][ T4969] ? lockdep_unlock+0x143/0x2e0 [ 105.466869][ T4969] ? do_raw_spin_unlock+0x11d/0x230 [ 105.472471][ T4969] hfs_bnode_find+0x21d/0xce0 [ 105.477414][ T4969] ? hfs_bnode_unlink+0x680/0x680 [ 105.482438][ T4969] ? __lock_acquire+0x7b50/0x7b50 [ 105.487479][ T4969] ? hfs_bmap_reserve+0x3db/0x420 [ 105.492514][ T4969] ? mark_lock+0x94/0x320 [ 105.497123][ T4969] hfs_bmap_alloc+0xa6/0x670 [ 105.501800][ T4969] ? __rwlock_init+0x140/0x140 [ 105.506561][ T4969] ? hfs_bmap_reserve+0x420/0x420 [ 105.511699][ T4969] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 105.517862][ T4969] ? lockdep_hardirqs_on+0x94/0x140 [ 105.523084][ T4969] hfs_btree_inc_height+0xf6/0xac0 [ 105.528410][ T4969] ? hfs_brec_insert+0xb70/0xb70 [ 105.533361][ T4969] ? __mutex_trylock_common+0x15c/0x260 [ 105.539088][ T4969] ? rcu_lock_release+0x20/0x20 [ 105.544128][ T4969] ? hfs_find_init+0x83/0x1d0 [ 105.548857][ T4969] hfs_brec_insert+0x13e/0xb70 [ 105.553821][ T4969] ? memset+0x1e/0x40 [ 105.557837][ T4969] ? hfs_bmap_reserve+0x3db/0x420 [ 105.562865][ T4969] ? hfs_brec_keylen+0x360/0x360 [ 105.567922][ T4969] ? mutex_lock_io_nested+0x60/0x60 [ 105.573144][ T4969] __hfs_ext_write_extent+0x2a3/0x470 [ 105.578658][ T4969] __hfs_ext_cache_extent+0x6e/0x9a0 [ 105.584116][ T4969] ? mutex_lock_nested+0x17/0x20 [ 105.589263][ T4969] ? hfs_find_init+0x14e/0x1d0 [ 105.594063][ T4969] hfs_extend_file+0x378/0x1380 [ 105.599035][ T4969] ? hfs_get_block+0xbe0/0xbe0 [ 105.603797][ T4969] ? hfs_get_block+0x93b/0xbe0 [ 105.608568][ T4969] ? pagevec_lookup_range+0x30/0x70 [ 105.613758][ T4969] ? clean_bdev_aliases+0x762/0x8a0 [ 105.618958][ T4969] hfs_get_block+0x3fe/0xbe0 [ 105.623587][ T4969] ? hfs_free_extents+0x430/0x430 [ 105.628605][ T4969] ? do_raw_spin_unlock+0x11d/0x230 [ 105.633795][ T4969] ? create_page_buffers+0x238/0x320 [ 105.639370][ T4969] __block_write_begin_int+0x565/0x15d0 [ 105.644947][ T4969] ? hfs_free_extents+0x430/0x430 [ 105.650337][ T4969] ? page_zero_new_buffers+0x490/0x490 [ 105.656326][ T4969] ? mark_lock+0x94/0x320 [ 105.660916][ T4969] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 105.667005][ T4969] ? wait_for_stable_page+0xd9/0x110 [ 105.672383][ T4969] cont_write_begin+0x598/0x7b0 [ 105.677343][ T4969] ? ktime_get_coarse_real_ts64+0x2b/0x120 [ 105.683417][ T4969] ? generic_cont_expand_simple+0x1a0/0x1a0 [ 105.689620][ T4969] ? verify_lock_unused+0x140/0x140 [ 105.695042][ T4969] ? verify_lock_unused+0x140/0x140 [ 105.700235][ T4969] ? __vfs_getxattr+0x32d/0x3e0 [ 105.705092][ T4969] hfs_write_begin+0x92/0xe0 [ 105.710008][ T4969] ? hfs_free_extents+0x430/0x430 [ 105.715224][ T4969] generic_perform_write+0x2b6/0x550 [ 105.720608][ T4969] ? atime_needs_update+0x770/0x770 [ 105.725860][ T4969] ? grab_cache_page_write_begin+0xa0/0xa0 [ 105.731909][ T4969] ? file_remove_privs+0x5d0/0x5d0 [ 105.737114][ T4969] ? rwsem_write_trylock+0x135/0x1c0 [ 105.742483][ T4969] ? clear_nonspinnable+0x60/0x60 [ 105.747624][ T4969] __generic_file_write_iter+0x261/0x4e0 [ 105.753312][ T4969] ? generic_write_checks+0x3be/0x460 [ 105.758685][ T4969] generic_file_write_iter+0xa6/0x1b0 [ 105.764155][ T4969] vfs_write+0x748/0xd70 [ 105.768405][ T4969] ? file_end_write+0x250/0x250 [ 105.773300][ T4969] ? mutex_lock_nested+0x17/0x20 [ 105.778249][ T4969] ? __fdget_pos+0x2bf/0x370 [ 105.782889][ T4969] ? ksys_write+0x70/0x260 [ 105.787319][ T4969] ksys_write+0x153/0x260 [ 105.791674][ T4969] ? __ia32_sys_read+0x80/0x80 [ 105.796481][ T4969] ? lockdep_hardirqs_on+0x94/0x140 [ 105.801701][ T4969] do_syscall_64+0x4c/0xa0 [ 105.806153][ T4969] ? clear_bhb_loop+0x30/0x80 [ 105.810848][ T4969] ? clear_bhb_loop+0x30/0x80 [ 105.815525][ T4969] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.821450][ T4969] RIP: 0033:0x7fd6f2014429 [ 105.825902][ T4969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.845684][ T4969] RSP: 002b:00007fd6f128a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.854105][ T4969] RAX: ffffffffffffffda RBX: 00007fd6f21e1f80 RCX: 00007fd6f2014429 [ 105.862315][ T4969] RDX: 000000000001000a RSI: 0000000020000300 RDI: 0000000000000005 [ 105.870295][ T4969] RBP: 00007fd6f128a090 R08: 0000000000000000 R09: 0000000000000000 [ 105.878383][ T4969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.886420][ T4969] R13: 0000000000000000 R14: 00007fd6f21e1f80 R15: 00007ffd933663e8 [ 105.894414][ T4969] [ 105.906012][ T4969] hfs: new node 0 already hashed? [ 105.911638][ T4969] ------------[ cut here ]------------ [ 105.917212][ T4969] WARNING: CPU: 1 PID: 4969 at fs/hfs/bnode.c:532 hfs_bnode_create+0x3c7/0x450 [ 105.926615][ T4969] Modules linked in: [ 105.930593][ T4969] CPU: 1 PID: 4969 Comm: syz.0.15 Not tainted syzkaller #0 [ 105.937987][ T4969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.948313][ T4969] RIP: 0010:hfs_bnode_create+0x3c7/0x450 [ 105.954588][ T4969] Code: 95 3f 8a 89 ee e8 19 52 86 07 e9 61 fd ff ff e8 8f dc 49 ff 4c 89 ef e8 07 66 9a 07 48 c7 c7 20 96 3f 8a 89 ee e8 f9 51 86 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 6d fc ff ff 4c [ 105.974480][ T4969] RSP: 0018:ffffc90002fef018 EFLAGS: 00010246 [ 105.982385][ T4969] RAX: 000000000000001f RBX: ffff88806fd46000 RCX: e71a86047f1bad00 [ 105.990747][ T4969] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 105.999755][ T4969] RBP: 0000000000000000 R08: ffffc90002feeb47 R09: 1ffff920005fdd68 [ 106.008471][ T4969] R10: dffffc0000000000 R11: fffff520005fdd69 R12: 0000000000000000 [ 106.016643][ T4969] R13: ffff88806fd460e0 R14: ffff88806ffd0900 R15: dffffc0000000000 [ 106.024739][ T4969] FS: 00007fd6f128a6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 106.034025][ T4969] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.047917][ T4969] CR2: 00007fd6f2061500 CR3: 0000000071682000 CR4: 00000000003506f0 [ 106.055937][ T4969] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 106.065827][ T4969] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 106.074188][ T4969] Call Trace: [ 106.077865][ T4969] [ 106.080909][ T4969] hfs_bmap_alloc+0x5b6/0x670 [ 106.085604][ T4969] ? hfs_bmap_reserve+0x420/0x420 [ 106.091513][ T4969] hfs_btree_inc_height+0xf6/0xac0 [ 106.096644][ T4969] ? hfs_brec_insert+0x6d8/0xb70 [ 106.101774][ T4969] ? __lock_acquire+0x7b50/0x7b50 [ 106.106975][ T4969] ? hfs_brec_insert+0xb70/0xb70 [ 106.112337][ T4969] ? do_raw_spin_unlock+0x11d/0x230 [ 106.124787][ T4969] hfs_brec_insert+0x71d/0xb70 [ 106.129705][ T4969] ? hfs_brec_keylen+0x360/0x360 [ 106.134655][ T4969] ? mutex_lock_io_nested+0x60/0x60 [ 106.140212][ T4969] __hfs_ext_write_extent+0x2a3/0x470 [ 106.145823][ T4969] __hfs_ext_cache_extent+0x6e/0x9a0 [ 106.151238][ T4969] ? mutex_lock_nested+0x17/0x20 [ 106.156490][ T4969] ? hfs_find_init+0x14e/0x1d0 [ 106.161978][ T4969] hfs_extend_file+0x378/0x1380 [ 106.166979][ T4969] ? hfs_get_block+0xbe0/0xbe0 [ 106.172100][ T4969] ? hfs_get_block+0x93b/0xbe0 [ 106.176896][ T4969] ? pagevec_lookup_range+0x30/0x70 [ 106.182693][ T4969] ? clean_bdev_aliases+0x762/0x8a0 [ 106.188423][ T4969] hfs_get_block+0x3fe/0xbe0 [ 106.193219][ T4969] ? hfs_free_extents+0x430/0x430 [ 106.201969][ T4969] ? do_raw_spin_unlock+0x11d/0x230 [ 106.207297][ T4969] ? create_page_buffers+0x238/0x320 [ 106.212966][ T4969] __block_write_begin_int+0x565/0x15d0 [ 106.218921][ T4969] ? hfs_free_extents+0x430/0x430 [ 106.223955][ T4969] ? page_zero_new_buffers+0x490/0x490 [ 106.229730][ T4969] ? mark_lock+0x94/0x320 [ 106.234116][ T4969] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 106.240580][ T4969] ? wait_for_stable_page+0xd9/0x110 [ 106.245901][ T4969] cont_write_begin+0x598/0x7b0 [ 106.250932][ T4969] ? ktime_get_coarse_real_ts64+0x2b/0x120 [ 106.256925][ T4969] ? generic_cont_expand_simple+0x1a0/0x1a0 [ 106.263450][ T4969] ? verify_lock_unused+0x140/0x140 [ 106.268771][ T4969] ? verify_lock_unused+0x140/0x140 [ 106.274580][ T4969] ? __vfs_getxattr+0x32d/0x3e0 [ 106.279933][ T4969] hfs_write_begin+0x92/0xe0 [ 106.284858][ T4969] ? hfs_free_extents+0x430/0x430 [ 106.290052][ T4969] generic_perform_write+0x2b6/0x550 [ 106.295897][ T4969] ? atime_needs_update+0x770/0x770 [ 106.301208][ T4969] ? grab_cache_page_write_begin+0xa0/0xa0 [ 106.307251][ T4969] ? file_remove_privs+0x5d0/0x5d0 [ 106.313220][ T4969] ? rwsem_write_trylock+0x135/0x1c0 [ 106.319062][ T4969] ? clear_nonspinnable+0x60/0x60 [ 106.324154][ T4969] __generic_file_write_iter+0x261/0x4e0 [ 106.330291][ T4969] ? generic_write_checks+0x3be/0x460 [ 106.335698][ T4969] generic_file_write_iter+0xa6/0x1b0 [ 106.341390][ T4969] vfs_write+0x748/0xd70 [ 106.345934][ T4969] ? file_end_write+0x250/0x250 [ 106.351912][ T4969] ? mutex_lock_nested+0x17/0x20 [ 106.356903][ T4969] ? __fdget_pos+0x2bf/0x370 [ 106.362185][ T4969] ? ksys_write+0x70/0x260 [ 106.366901][ T4969] ksys_write+0x153/0x260 [ 106.371356][ T4969] ? __ia32_sys_read+0x80/0x80 [ 106.376562][ T4969] ? lockdep_hardirqs_on+0x94/0x140 [ 106.382192][ T4969] do_syscall_64+0x4c/0xa0 [ 106.386912][ T4969] ? clear_bhb_loop+0x30/0x80 [ 106.391763][ T4969] ? clear_bhb_loop+0x30/0x80 [ 106.396771][ T4969] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.403137][ T4969] RIP: 0033:0x7fd6f2014429 [ 106.407848][ T4969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.429791][ T4969] RSP: 002b:00007fd6f128a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.439152][ T4969] RAX: ffffffffffffffda RBX: 00007fd6f21e1f80 RCX: 00007fd6f2014429 [ 106.447339][ T4969] RDX: 000000000001000a RSI: 0000000020000300 RDI: 0000000000000005 [ 106.455479][ T4969] RBP: 00007fd6f128a090 R08: 0000000000000000 R09: 0000000000000000 [ 106.463803][ T4969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.472194][ T4969] R13: 0000000000000000 R14: 00007fd6f21e1f80 R15: 00007ffd933663e8 [ 106.480809][ T4969] [ 106.483870][ T4969] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.491233][ T4969] CPU: 0 PID: 4969 Comm: syz.0.15 Not tainted syzkaller #0 [ 106.498480][ T4969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.508886][ T4969] Call Trace: [ 106.512172][ T4969] [ 106.515210][ T4969] dump_stack_lvl+0x188/0x250 [ 106.519925][ T4969] ? show_regs_print_info+0x20/0x20 [ 106.525140][ T4969] ? load_image+0x410/0x410 [ 106.529679][ T4969] panic+0x2f8/0x850 [ 106.533590][ T4969] ? bpf_jit_dump+0xd0/0xd0 [ 106.538105][ T4969] ? hfs_bnode_create+0x3c7/0x450 [ 106.543132][ T4969] __warn+0x248/0x2b0 [ 106.547117][ T4969] ? hfs_bnode_create+0x3c7/0x450 [ 106.552149][ T4969] report_bug+0x1b9/0x2e0 [ 106.556505][ T4969] handle_bug+0x3a/0x70 [ 106.560671][ T4969] exc_invalid_op+0x16/0x40 [ 106.565294][ T4969] asm_exc_invalid_op+0x16/0x20 [ 106.570148][ T4969] RIP: 0010:hfs_bnode_create+0x3c7/0x450 [ 106.575789][ T4969] Code: 95 3f 8a 89 ee e8 19 52 86 07 e9 61 fd ff ff e8 8f dc 49 ff 4c 89 ef e8 07 66 9a 07 48 c7 c7 20 96 3f 8a 89 ee e8 f9 51 86 07 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 6d fc ff ff 4c [ 106.595801][ T4969] RSP: 0018:ffffc90002fef018 EFLAGS: 00010246 [ 106.602020][ T4969] RAX: 000000000000001f RBX: ffff88806fd46000 RCX: e71a86047f1bad00 [ 106.610116][ T4969] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 106.618484][ T4969] RBP: 0000000000000000 R08: ffffc90002feeb47 R09: 1ffff920005fdd68 [ 106.626473][ T4969] R10: dffffc0000000000 R11: fffff520005fdd69 R12: 0000000000000000 [ 106.634474][ T4969] R13: ffff88806fd460e0 R14: ffff88806ffd0900 R15: dffffc0000000000 [ 106.642613][ T4969] ? hfs_bnode_create+0x3c7/0x450 [ 106.647659][ T4969] hfs_bmap_alloc+0x5b6/0x670 [ 106.652344][ T4969] ? hfs_bmap_reserve+0x420/0x420 [ 106.657424][ T4969] hfs_btree_inc_height+0xf6/0xac0 [ 106.662715][ T4969] ? hfs_brec_insert+0x6d8/0xb70 [ 106.667662][ T4969] ? __lock_acquire+0x7b50/0x7b50 [ 106.672700][ T4969] ? hfs_brec_insert+0xb70/0xb70 [ 106.677736][ T4969] ? do_raw_spin_unlock+0x11d/0x230 [ 106.682955][ T4969] hfs_brec_insert+0x71d/0xb70 [ 106.687781][ T4969] ? hfs_brec_keylen+0x360/0x360 [ 106.692722][ T4969] ? mutex_lock_io_nested+0x60/0x60 [ 106.698026][ T4969] __hfs_ext_write_extent+0x2a3/0x470 [ 106.703421][ T4969] __hfs_ext_cache_extent+0x6e/0x9a0 [ 106.708792][ T4969] ? mutex_lock_nested+0x17/0x20 [ 106.713736][ T4969] ? hfs_find_init+0x14e/0x1d0 [ 106.718597][ T4969] hfs_extend_file+0x378/0x1380 [ 106.723457][ T4969] ? hfs_get_block+0xbe0/0xbe0 [ 106.728227][ T4969] ? hfs_get_block+0x93b/0xbe0 [ 106.733008][ T4969] ? pagevec_lookup_range+0x30/0x70 [ 106.738302][ T4969] ? clean_bdev_aliases+0x762/0x8a0 [ 106.743552][ T4969] hfs_get_block+0x3fe/0xbe0 [ 106.748179][ T4969] ? hfs_free_extents+0x430/0x430 [ 106.753209][ T4969] ? do_raw_spin_unlock+0x11d/0x230 [ 106.758415][ T4969] ? create_page_buffers+0x238/0x320 [ 106.763834][ T4969] __block_write_begin_int+0x565/0x15d0 [ 106.769495][ T4969] ? hfs_free_extents+0x430/0x430 [ 106.774710][ T4969] ? page_zero_new_buffers+0x490/0x490 [ 106.780167][ T4969] ? mark_lock+0x94/0x320 [ 106.784504][ T4969] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 106.790498][ T4969] ? wait_for_stable_page+0xd9/0x110 [ 106.795805][ T4969] cont_write_begin+0x598/0x7b0 [ 106.800676][ T4969] ? ktime_get_coarse_real_ts64+0x2b/0x120 [ 106.806887][ T4969] ? generic_cont_expand_simple+0x1a0/0x1a0 [ 106.812973][ T4969] ? verify_lock_unused+0x140/0x140 [ 106.818288][ T4969] ? verify_lock_unused+0x140/0x140 [ 106.823496][ T4969] ? __vfs_getxattr+0x32d/0x3e0 [ 106.828400][ T4969] hfs_write_begin+0x92/0xe0 [ 106.833001][ T4969] ? hfs_free_extents+0x430/0x430 [ 106.838130][ T4969] generic_perform_write+0x2b6/0x550 [ 106.843616][ T4969] ? atime_needs_update+0x770/0x770 [ 106.848960][ T4969] ? grab_cache_page_write_begin+0xa0/0xa0 [ 106.854782][ T4969] ? file_remove_privs+0x5d0/0x5d0 [ 106.859913][ T4969] ? rwsem_write_trylock+0x135/0x1c0 [ 106.865208][ T4969] ? clear_nonspinnable+0x60/0x60 [ 106.870256][ T4969] __generic_file_write_iter+0x261/0x4e0 [ 106.875897][ T4969] ? generic_write_checks+0x3be/0x460 [ 106.881372][ T4969] generic_file_write_iter+0xa6/0x1b0 [ 106.886846][ T4969] vfs_write+0x748/0xd70 [ 106.891131][ T4969] ? file_end_write+0x250/0x250 [ 106.896084][ T4969] ? mutex_lock_nested+0x17/0x20 [ 106.901315][ T4969] ? __fdget_pos+0x2bf/0x370 [ 106.905916][ T4969] ? ksys_write+0x70/0x260 [ 106.910459][ T4969] ksys_write+0x153/0x260 [ 106.914822][ T4969] ? __ia32_sys_read+0x80/0x80 [ 106.919703][ T4969] ? lockdep_hardirqs_on+0x94/0x140 [ 106.925022][ T4969] do_syscall_64+0x4c/0xa0 [ 106.929479][ T4969] ? clear_bhb_loop+0x30/0x80 [ 106.934205][ T4969] ? clear_bhb_loop+0x30/0x80 [ 106.938974][ T4969] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.944957][ T4969] RIP: 0033:0x7fd6f2014429 [ 106.949365][ T4969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.969192][ T4969] RSP: 002b:00007fd6f128a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.977685][ T4969] RAX: ffffffffffffffda RBX: 00007fd6f21e1f80 RCX: 00007fd6f2014429 [ 106.985782][ T4969] RDX: 000000000001000a RSI: 0000000020000300 RDI: 0000000000000005 [ 106.993916][ T4969] RBP: 00007fd6f128a090 R08: 0000000000000000 R09: 0000000000000000 [ 107.001997][ T4969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.010044][ T4969] R13: 0000000000000000 R14: 00007fd6f21e1f80 R15: 00007ffd933663e8 [ 107.018014][ T4969] [ 107.021282][ T4969] Kernel Offset: disabled [ 107.025720][ T4969] Rebooting in 86400 seconds..