Warning: Permanently added '10.128.1.129' (ED25519) to the list of known hosts. 2026/07/18 01:27:33 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 42.027953][ T2462] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2026/07/18 01:27:38 executed programs: 0 [ 47.149305][ T3277] loop3: detected capacity change from 0 to 64 [ 47.317897][ T3277] [ 47.320630][ T3277] ====================================================== [ 47.328146][ T3277] WARNING: possible circular locking dependency detected [ 47.335916][ T3277] syzkaller #0 Not tainted [ 47.341239][ T3277] ------------------------------------------------------ [ 47.348260][ T3277] syz.3.17/3277 is trying to acquire lock: [ 47.354500][ T3277] ffff88811e4180f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0x32/0x260 [ 47.365904][ T3277] [ 47.365904][ T3277] but task is already holding lock: [ 47.375227][ T3277] ffff88810a88a0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x72/0xa0 [ 47.384862][ T3277] [ 47.384862][ T3277] which lock already depends on the new lock. [ 47.384862][ T3277] [ 47.396416][ T3277] [ 47.396416][ T3277] the existing dependency chain (in reverse order) is: [ 47.406110][ T3277] [ 47.406110][ T3277] -> #1 (&tree->tree_lock/1){+.+.}-{3:3}: [ 47.415060][ T3277] __mutex_lock+0x6c/0x680 [ 47.420176][ T3277] hfs_find_init+0x72/0xa0 [ 47.425448][ T3277] hfs_ext_read_extent+0x4d/0x190 [ 47.430991][ T3277] hfs_extend_file+0x161/0x260 [ 47.436523][ T3277] hfs_bmap_reserve+0x70/0x80 [ 47.442143][ T3277] hfs_cat_create+0x9c/0x370 [ 47.447337][ T3277] hfs_create+0x38/0x90 [ 47.452446][ T3277] lookup_open.isra.0+0x62e/0x790 [ 47.458474][ T3277] path_openat+0x2ce/0xb10 [ 47.463748][ T3277] do_filp_open+0xa4/0x150 [ 47.468790][ T3277] do_sys_openat2+0x92/0x160 [ 47.474177][ T3277] __x64_sys_open+0x50/0x90 [ 47.479226][ T3277] do_syscall_64+0x33/0x90 [ 47.484346][ T3277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.491182][ T3277] [ 47.491182][ T3277] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 47.501691][ T3277] __lock_acquire+0x10b6/0x1a40 [ 47.507609][ T3277] lock_acquire+0xbb/0x2a0 [ 47.513086][ T3277] __mutex_lock+0x6c/0x680 [ 47.520113][ T3277] hfs_extend_file+0x32/0x260 [ 47.525663][ T3277] hfs_bmap_reserve+0x70/0x80 [ 47.531497][ T3277] __hfs_ext_write_extent+0x8e/0xb0 [ 47.539266][ T3277] hfs_ext_read_extent+0x150/0x190 [ 47.545696][ T3277] hfs_extend_file+0x161/0x260 [ 47.552658][ T3277] hfs_get_block+0x62/0x1f0 [ 47.559443][ T3277] __block_write_begin_int+0x126/0x530 [ 47.567528][ T3277] cont_write_begin+0x1f8/0x370 [ 47.573679][ T3277] hfs_write_begin+0x31/0x70 [ 47.579125][ T3277] cont_write_begin+0x10e/0x370 [ 47.584762][ T3277] hfs_write_begin+0x31/0x70 [ 47.589860][ T3277] hfs_file_truncate+0x2a5/0x320 [ 47.596716][ T3277] hfs_inode_setattr+0x10c/0x180 [ 47.602595][ T3277] notify_change+0x39f/0x530 [ 47.609163][ T3277] do_truncate+0x7b/0xd0 [ 47.614834][ T3277] vfs_truncate+0x125/0x150 [ 47.620152][ T3277] do_sys_truncate.part.0+0x85/0xa0 [ 47.627477][ T3277] do_syscall_64+0x33/0x90 [ 47.633196][ T3277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.640829][ T3277] [ 47.640829][ T3277] other info that might help us debug this: [ 47.640829][ T3277] [ 47.653806][ T3277] Possible unsafe locking scenario: [ 47.653806][ T3277] [ 47.662640][ T3277] CPU0 CPU1 [ 47.668302][ T3277] ---- ---- [ 47.674035][ T3277] lock(&tree->tree_lock/1); [ 47.678704][ T3277] lock(&HFS_I(tree->inode)->extents_lock); [ 47.687459][ T3277] lock(&tree->tree_lock/1); [ 47.695388][ T3277] lock(&HFS_I(tree->inode)->extents_lock); [ 47.702044][ T3277] [ 47.702044][ T3277] *** DEADLOCK *** [ 47.702044][ T3277] [ 47.710485][ T3277] 4 locks held by syz.3.17/3277: [ 47.715971][ T3277] #0: ffff88810c3dc460 (sb_writers#13){.+.+}-{0:0}, at: vfs_truncate+0x3c/0x150 [ 47.725547][ T3277] #1: ffff88811e4194a8 (&sb->s_type->i_mutex_key#20){+.+.}-{3:3}, at: do_truncate+0x6b/0xd0 [ 47.737265][ T3277] #2: ffff88811e4192f8 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0x32/0x260 [ 47.748555][ T3277] #3: ffff88810a88a0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x72/0xa0 [ 47.758793][ T3277] [ 47.758793][ T3277] stack backtrace: [ 47.764950][ T3277] CPU: 1 PID: 3277 Comm: syz.3.17 Not tainted syzkaller #0 [ 47.772693][ T3277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 47.785784][ T3277] Call Trace: [ 47.789898][ T3277] [ 47.793418][ T3277] dump_stack_lvl+0x57/0x7d [ 47.797920][ T3277] check_noncircular+0xcc/0xe0 [ 47.803126][ T3277] ? unwind_get_return_address+0x16/0x30 [ 47.810407][ T3277] __lock_acquire+0x10b6/0x1a40 [ 47.816707][ T3277] lock_acquire+0xbb/0x2a0 [ 47.822985][ T3277] ? hfs_extend_file+0x32/0x260 [ 47.827859][ T3277] ? lock_acquire+0xbb/0x2a0 [ 47.833109][ T3277] ? hfs_bnode_find+0x32/0x340 [ 47.838341][ T3277] __mutex_lock+0x6c/0x680 [ 47.843012][ T3277] ? hfs_extend_file+0x32/0x260 [ 47.848271][ T3277] ? hfs_extend_file+0x32/0x260 [ 47.853509][ T3277] ? hfs_bnode_read+0xef/0x130 [ 47.858489][ T3277] ? __hfs_brec_find+0xa0/0x170 [ 47.864200][ T3277] hfs_extend_file+0x32/0x260 [ 47.869044][ T3277] ? hfs_brec_find+0xff/0x150 [ 47.874096][ T3277] hfs_bmap_reserve+0x70/0x80 [ 47.879127][ T3277] __hfs_ext_write_extent+0x8e/0xb0 [ 47.884538][ T3277] hfs_ext_read_extent+0x150/0x190 [ 47.889990][ T3277] hfs_extend_file+0x161/0x260 [ 47.895846][ T3277] ? __mark_inode_dirty+0x374/0x400 [ 47.901820][ T3277] hfs_get_block+0x62/0x1f0 [ 47.907161][ T3277] __block_write_begin_int+0x126/0x530 [ 47.912987][ T3277] ? hfs_extend_file+0x260/0x260 [ 47.918098][ T3277] cont_write_begin+0x1f8/0x370 [ 47.923213][ T3277] ? hfs_extend_file+0x260/0x260 [ 47.928351][ T3277] ? __block_commit_write.constprop.0.isra.0+0x7e/0x100 [ 47.935885][ T3277] hfs_write_begin+0x31/0x70 [ 47.940573][ T3277] ? hfs_extend_file+0x260/0x260 [ 47.945695][ T3277] cont_write_begin+0x10e/0x370 [ 47.950866][ T3277] ? hfs_extend_file+0x260/0x260 [ 47.956188][ T3277] hfs_write_begin+0x31/0x70 [ 47.961129][ T3277] ? hfs_extend_file+0x260/0x260 [ 47.966222][ T3277] hfs_file_truncate+0x2a5/0x320 [ 47.972297][ T3277] ? up_write+0x12/0xd0 [ 47.976868][ T3277] ? unmap_mapping_pages+0x68/0x140 [ 47.982166][ T3277] hfs_inode_setattr+0x10c/0x180 [ 47.987271][ T3277] notify_change+0x39f/0x530 [ 47.991998][ T3277] ? __vfs_getxattr+0x25/0x70 [ 47.996856][ T3277] ? do_truncate+0x7b/0xd0 [ 48.001278][ T3277] do_truncate+0x7b/0xd0 [ 48.005876][ T3277] vfs_truncate+0x125/0x150 [ 48.010783][ T3277] do_sys_truncate.part.0+0x85/0xa0 [ 48.016625][ T3277] do_syscall_64+0x33/0x90 [ 48.021208][ T3277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.028025][ T3277] RIP: 0033:0x7fcab1f42799 [ 48.033141][ T3277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.055643][ T3277] RSP: 002b:00007fcab1da5028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 48.066426][ T3277] RAX: ffffffffffffffda RBX: 00007fcab21bbfa0 RCX: 00007fcab1f42799 [ 48.075939][ T3277] RDX: 0000000000000000 RSI: 0000000003000000 RDI: 0000200000000900 [ 48.085120][ T3277] RBP: 00007fcab1fd8c99 R08: 0000000000000000 R09: 0000000000000000 [ 48.094698][ T3277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.103483][ T3277] R13: 00007fcab21bc038 R14: 00007fcab21bbfa0 R15: 00007ffd7159def8 [ 48.112272][ T3277] [ 52.194885][ T87] attempt to access beyond end of device [ 52.194885][ T87] loop3: rw=1048577, want=160, limit=64 [ 52.206381][ T87] Buffer I/O error on dev loop3, logical block 159, lost async page write [ 52.215341][ T87] attempt to access beyond end of device [ 52.215341][ T87] loop3: rw=1048577, want=161, limit=64 [ 52.226639][ T87] Buffer I/O error on dev loop3, logical block 160, lost async page write [ 52.235621][ T87] attempt to access beyond end of device [ 52.235621][ T87] loop3: rw=1048577, want=162, limit=64 [ 52.247387][ T87] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 52.257296][ T87] attempt to access beyond end of device [ 52.257296][ T87] loop3: rw=1048577, want=163, limit=64 [ 52.269842][ T87] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 52.278938][ T87] attempt to access beyond end of device [ 52.278938][ T87] loop3: rw=1048577, want=164, limit=64 [ 52.290160][ T87] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 52.300299][ T87] attempt to access beyond end of device [ 52.300299][ T87] loop3: rw=1048577, want=168, limit=64 [ 52.312800][ T87] Buffer I/O error on dev loop3, logical block 167, lost async page write [ 52.322263][ T87] attempt to access beyond end of device [ 52.322263][ T87] loop3: rw=1048577, want=170, limit=64 [ 52.334725][ T87] Buffer I/O error on dev loop3, logical block 169, lost async page write [ 52.343909][ T87] attempt to access beyond end of device [ 52.343909][ T87] loop3: rw=1048577, want=172, limit=64 [ 52.356657][ T87] Buffer I/O error on dev loop3, logical block 171, lost async page write [ 52.367889][ T87] attempt to access beyond end of device [ 52.367889][ T87] loop3: rw=1048577, want=173, limit=64 [ 52.380843][ T87] Buffer I/O error on dev loop3, logical block 172, lost async page write [ 52.389884][ T87] attempt to access beyond end of device [ 52.389884][ T87] loop3: rw=1048577, want=174, limit=64 [ 52.402284][ T87] Buffer I/O error on dev loop3, logical block 173, lost async page write