Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. 2026/04/10 02:15:00 parsed 1 programs [ 63.617479][ T4270] cgroup: Unknown subsys name 'net' [ 63.751340][ T4270] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.027929][ T4270] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.460847][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.472267][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.483433][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.508263][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.517334][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.526591][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.463423][ T4331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.472245][ T4331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.484250][ T4331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.493008][ T4331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.502050][ T4331] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.510242][ T4331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.817285][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 68.859876][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.869657][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.879326][ T4339] device bridge_slave_0 entered promiscuous mode [ 68.892419][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.902489][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.911411][ T4339] device bridge_slave_1 entered promiscuous mode [ 68.954382][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.966328][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.986942][ T4339] team0: Port device team_slave_0 added [ 68.996200][ T4339] team0: Port device team_slave_1 added [ 69.029345][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.037425][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.066419][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.080190][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.088182][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.116565][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.155797][ T4339] device hsr_slave_0 entered promiscuous mode [ 69.162696][ T4339] device hsr_slave_1 entered promiscuous mode [ 69.279121][ T4339] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.291406][ T4339] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.302737][ T4339] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.313380][ T4339] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.386761][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.395192][ T4339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.406805][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.414767][ T4339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.498769][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.515385][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.526523][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.536537][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.546427][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 69.560645][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.571457][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.580808][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.588864][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.603338][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.613414][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.621484][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.642846][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.652202][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.668536][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.690386][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.703208][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.715310][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.888466][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.900280][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.934521][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.950869][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.960777][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.990265][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.999455][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.009697][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.018594][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.041771][ T4339] device veth0_vlan entered promiscuous mode [ 70.053583][ T4339] device veth1_vlan entered promiscuous mode [ 70.072175][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.081544][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.092082][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.103264][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.116941][ T4339] device veth0_macvtap entered promiscuous mode [ 70.143574][ T4339] device veth1_macvtap entered promiscuous mode [ 70.160161][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.170700][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.180275][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.189582][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.199196][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.220198][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.229640][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.239458][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.252194][ T4339] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.263630][ T4339] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.273024][ T4339] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.283014][ T4339] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.599358][ T32] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/04/10 02:15:09 executed programs: 0 [ 70.980372][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.995237][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.005909][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.015415][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.024229][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.035008][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.138161][ T4365] chnl_net:caif_netlink_parms(): no params data found [ 71.192588][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.201183][ T4365] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.210697][ T4365] device bridge_slave_0 entered promiscuous mode [ 71.219975][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.227783][ T4365] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.236131][ T4365] device bridge_slave_1 entered promiscuous mode [ 71.260272][ T4365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.275361][ T4365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.300597][ T4365] team0: Port device team_slave_0 added [ 71.309155][ T4365] team0: Port device team_slave_1 added [ 71.326257][ T4365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.334677][ T4365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.363861][ T4365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.381918][ T4365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.389970][ T4365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.418616][ T4365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.454935][ T4365] device hsr_slave_0 entered promiscuous mode [ 71.462612][ T4365] device hsr_slave_1 entered promiscuous mode [ 71.469839][ T4365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.478410][ T4365] Cannot create hsr debugfs directory [ 71.507900][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.515187][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.676848][ T32] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.115363][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 74.907125][ T32] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.978484][ T32] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.184536][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 75.809715][ T4365] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.837611][ T4365] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.850785][ T4365] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.862042][ T4365] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.978212][ T4365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.992889][ T32] device hsr_slave_0 left promiscuous mode [ 76.000283][ T32] device hsr_slave_1 left promiscuous mode [ 76.007095][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.015237][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.023587][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.031790][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.039903][ T32] device bridge_slave_1 left promiscuous mode [ 76.046989][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.057728][ T32] device bridge_slave_0 left promiscuous mode [ 76.065650][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.082805][ T32] device veth1_macvtap left promiscuous mode [ 76.089435][ T32] device veth0_macvtap left promiscuous mode [ 76.096892][ T32] device veth1_vlan left promiscuous mode [ 76.103356][ T32] device veth0_vlan left promiscuous mode [ 76.443166][ T32] team0 (unregistering): Port device team_slave_1 removed [ 76.472773][ T32] team0 (unregistering): Port device team_slave_0 removed [ 76.501062][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.530517][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.790969][ T32] bond0 (unregistering): Released all slaves [ 76.941369][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.950134][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.963485][ T4365] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.989653][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.004812][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.014893][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.022312][ T4408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.031825][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.043803][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.053329][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.062754][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.070337][ T4408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.082038][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.097507][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.121935][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.132364][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.142871][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.152158][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.172276][ T4365] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.184138][ T4365] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.198144][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.209551][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.218946][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.230090][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.239356][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.248810][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.264149][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 77.428451][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.436476][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.454191][ T4365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.473270][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.483298][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.505572][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.515669][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.527570][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.537262][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.547691][ T4365] device veth0_vlan entered promiscuous mode [ 77.559681][ T4365] device veth1_vlan entered promiscuous mode [ 77.576925][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.586748][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.595674][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.605485][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.619421][ T4365] device veth0_macvtap entered promiscuous mode [ 77.629620][ T4365] device veth1_macvtap entered promiscuous mode [ 77.645254][ T4365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.652998][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.662760][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.671712][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.681789][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.693187][ T4365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.704422][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.713501][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.726321][ T4365] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.736175][ T4365] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.745122][ T4365] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.756052][ T4365] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.806650][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.815098][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.830150][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.847419][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.855755][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.863741][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.915053][ T4413] loop0: detected capacity change from 0 to 1024 [ 77.964334][ T4413] [ 77.967092][ T4413] ============================================ [ 77.974036][ T4413] WARNING: possible recursive locking detected [ 77.981147][ T4413] syzkaller #0 Not tainted [ 77.985877][ T4413] -------------------------------------------- [ 77.992790][ T4413] syz.0.17/4413 is trying to acquire lock: [ 77.998943][ T4413] ffff888077e48e88 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_get_block+0x3a1/0x15a0 [ 78.010953][ T4413] [ 78.010953][ T4413] but task is already holding lock: [ 78.018678][ T4413] ffff888077e4a2c8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2b7/0xb60 [ 78.030450][ T4413] [ 78.030450][ T4413] other info that might help us debug this: [ 78.038642][ T4413] Possible unsafe locking scenario: [ 78.038642][ T4413] [ 78.046341][ T4413] CPU0 [ 78.049792][ T4413] ---- [ 78.053169][ T4413] lock(&HFSPLUS_I(inode)->extents_lock); [ 78.059399][ T4413] lock(&HFSPLUS_I(inode)->extents_lock); [ 78.065314][ T4413] [ 78.065314][ T4413] *** DEADLOCK *** [ 78.065314][ T4413] [ 78.074077][ T4413] May be due to missing lock nesting notation [ 78.074077][ T4413] [ 78.082562][ T4413] 4 locks held by syz.0.17/4413: [ 78.087666][ T4413] #0: ffff88807d9da460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 78.097080][ T4413] #1: ffff888077e4a4c0 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: do_truncate+0x198/0x240 [ 78.108127][ T4413] #2: ffff888077e4a2c8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2b7/0xb60 [ 78.119941][ T4413] #3: ffff8880291010f8 (&sbi->alloc_mutex){+.+.}-{3:3}, at: hfsplus_block_free+0xbf/0x4b0 [ 78.130712][ T4413] [ 78.130712][ T4413] stack backtrace: [ 78.136863][ T4413] CPU: 0 PID: 4413 Comm: syz.0.17 Not tainted syzkaller #0 [ 78.144235][ T4413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 78.154644][ T4413] Call Trace: [ 78.158039][ T4413] [ 78.161059][ T4413] dump_stack_lvl+0x188/0x24e [ 78.165774][ T4413] ? show_regs_print_info+0x12/0x12 [ 78.171254][ T4413] ? load_image+0x400/0x400 [ 78.176032][ T4413] __lock_acquire+0x123e/0x7d10 [ 78.181946][ T4413] ? unwind_get_return_address+0x49/0x80 [ 78.187679][ T4413] ? stack_trace_save+0xf0/0xf0 [ 78.192978][ T4413] ? verify_lock_unused+0x140/0x140 [ 78.199135][ T4413] ? lockdep_unlock+0x142/0x2e0 [ 78.207498][ T4413] ? lockdep_lock+0x1f0/0x1f0 [ 78.213619][ T4413] ? add_lock_to_list+0x191/0x280 [ 78.219525][ T4413] lock_acquire+0x1bb/0x4a0 [ 78.225319][ T4413] ? hfsplus_get_block+0x3a1/0x15a0 [ 78.231161][ T4413] ? __might_sleep+0xd0/0xd0 [ 78.236106][ T4413] ? read_lock_is_recursive+0x10/0x10 [ 78.242000][ T4413] ? verify_lock_unused+0x140/0x140 [ 78.247845][ T4413] __mutex_lock+0x12d/0xaf0 [ 78.253331][ T4413] ? hfsplus_get_block+0x3a1/0x15a0 [ 78.259180][ T4413] ? memset+0x1e/0x40 [ 78.263161][ T4413] ? hfsplus_get_block+0x3a1/0x15a0 [ 78.268559][ T4413] ? mutex_lock_nested+0x10/0x10 [ 78.273999][ T4413] hfsplus_get_block+0x3a1/0x15a0 [ 78.279295][ T4413] ? hfsplus_ext_write_extent+0x220/0x220 [ 78.285631][ T4413] ? do_raw_spin_unlock+0x11d/0x230 [ 78.291122][ T4413] ? create_page_buffers+0x24f/0x4a0 [ 78.296672][ T4413] block_read_full_folio+0x3e6/0xf00 [ 78.301954][ T4413] ? hfsplus_ext_write_extent+0x220/0x220 [ 78.307677][ T4413] ? block_is_partially_uptodate+0x5f0/0x5f0 [ 78.313951][ T4413] ? __lock_acquire+0x7d10/0x7d10 [ 78.319334][ T4413] ? folio_put+0xd0/0xd0 [ 78.323752][ T4413] ? folio_alloc+0x51/0x60 [ 78.328447][ T4413] filemap_read_folio+0x16b/0x770 [ 78.333727][ T4413] ? folio_batch_add_and_move+0x14a/0x250 [ 78.339621][ T4413] ? hfsplus_writepage+0x30/0x30 [ 78.344922][ T4413] ? maybe_unlock_mmap_for_io+0x140/0x140 [ 78.351190][ T4413] ? hfsplus_block_free+0xbf/0x4b0 [ 78.356942][ T4413] do_read_cache_folio+0x2a0/0x760 [ 78.362218][ T4413] ? hfsplus_writepage+0x30/0x30 [ 78.367795][ T4413] do_read_cache_page+0x32/0x220 [ 78.372933][ T4413] hfsplus_block_free+0x128/0x4b0 [ 78.378061][ T4413] ? hfsplus_find_init+0x85/0x1c0 [ 78.383434][ T4413] hfsplus_free_extents+0x10d/0xa50 [ 78.389616][ T4413] hfsplus_file_truncate+0x765/0xb60 [ 78.395384][ T4413] ? hfsplus_add_extent+0x890/0x890 [ 78.400848][ T4413] ? __up_read+0x2b2/0x6b0 [ 78.405436][ T4413] ? unmap_mapping_range+0x91/0x100 [ 78.410823][ T4413] hfsplus_setattr+0x1c0/0x280 [ 78.415884][ T4413] ? hfsplus_fileattr_set+0x330/0x330 [ 78.421680][ T4413] notify_change+0xc74/0xf40 [ 78.426836][ T4413] do_truncate+0x1ac/0x240 [ 78.431257][ T4413] ? put_page_bootmem+0x2c0/0x2c0 [ 78.436501][ T4413] ? ima_bprm_check+0x200/0x200 [ 78.441797][ T4413] ? bpf_lsm_path_truncate+0x5/0x10 [ 78.447323][ T4413] path_openat+0x2861/0x2ee0 [ 78.452026][ T4413] ? do_filp_open+0x430/0x430 [ 78.457228][ T4413] do_filp_open+0x1f1/0x430 [ 78.462111][ T4413] ? vfs_tmpfile+0x480/0x480 [ 78.466798][ T4413] ? _raw_spin_unlock+0x24/0x40 [ 78.471732][ T4413] ? alloc_fd+0x58f/0x630 [ 78.476448][ T4413] do_sys_openat2+0x150/0x4b0 [ 78.481413][ T4413] ? do_sys_open+0xe0/0xe0 [ 78.486266][ T4413] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 78.492928][ T4413] ? lock_chain_count+0x20/0x20 [ 78.498592][ T4413] __x64_sys_creat+0x8c/0xb0 [ 78.503475][ T4413] do_syscall_64+0x4c/0xa0 [ 78.508688][ T4413] ? clear_bhb_loop+0x60/0xb0 [ 78.513468][ T4413] ? clear_bhb_loop+0x60/0xb0 [ 78.518678][ T4413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.524743][ T4413] RIP: 0033:0x7f7e7b59c819 [ 78.529262][ T4413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.549490][ T4413] RSP: 002b:00007ffc303715e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 78.558165][ T4413] RAX: ffffffffffffffda RBX: 00007f7e7b815fa0 RCX: 00007f7e7b59c819 [ 78.566310][ T4413] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 00002000000000c0 [ 78.574720][ T4413] RBP: 00007f7e7b632c91 R08: 0000000000000000 R09: 0000000000000000 [ 78.583043][ T4413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.591136][ T4413] R13: 00007f7e7b815fac R14: 00007f7e7b815fa0 R15: 00007f7e7b815fa0 [ 78.599383][ T4413] [ 78.617244][ T4413] hfsplus: unable to mark blocks free: error -5 [ 78.624235][ T4413] hfsplus: can't free extent