[ 92.120539][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts. 2025/12/10 03:10:28 parsed 1 programs [ 101.100881][ T5808] cgroup: Unknown subsys name 'net' [ 101.362455][ T5808] cgroup: Unknown subsys name 'cpuset' [ 101.417134][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 103.616025][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 108.129062][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 108.468945][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.470534][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.470736][ T5832] bridge_slave_0: entered allmulticast mode [ 108.472715][ T5832] bridge_slave_0: entered promiscuous mode [ 108.480995][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.481243][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.481445][ T5832] bridge_slave_1: entered allmulticast mode [ 108.484666][ T5832] bridge_slave_1: entered promiscuous mode [ 108.663375][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.667842][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.810588][ T5832] team0: Port device team_slave_0 added [ 108.813966][ T5832] team0: Port device team_slave_1 added [ 108.949090][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.949105][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.949124][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.952498][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.952515][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.952541][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.314841][ T5832] hsr_slave_0: entered promiscuous mode [ 109.317818][ T5832] hsr_slave_1: entered promiscuous mode [ 109.711927][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.735252][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.770687][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.813347][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.959668][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.017492][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.028223][ T986] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.029043][ T986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.055601][ T1327] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.062521][ T1327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.302316][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.368002][ T5832] veth0_vlan: entered promiscuous mode [ 110.375942][ T5832] veth1_vlan: entered promiscuous mode [ 110.430527][ T5832] veth0_macvtap: entered promiscuous mode [ 110.434703][ T5832] veth1_macvtap: entered promiscuous mode [ 110.456106][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.473890][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.492302][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.494272][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.494323][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.494362][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.250917][ T1002] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.530131][ T1002] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.750651][ T1002] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.902560][ T1002] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.411992][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.412026][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.490755][ T1327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.490778][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.287967][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.290384][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.291241][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.292471][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.293449][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.700158][ T1002] bridge_slave_1: left allmulticast mode [ 114.700427][ T1002] bridge_slave_1: left promiscuous mode [ 114.703118][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.779920][ T1002] bridge_slave_0: left allmulticast mode [ 114.779951][ T1002] bridge_slave_0: left promiscuous mode [ 114.780249][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.358536][ T61] Bluetooth: hci0: command tx timeout [ 116.517510][ T1002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.597735][ T1002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.619929][ T1002] bond0 (unregistering): Released all slaves [ 117.052898][ T1002] hsr_slave_0: left promiscuous mode [ 117.103387][ T1002] hsr_slave_1: left promiscuous mode [ 117.104486][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.104561][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.158527][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.158559][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.280226][ T1002] veth1_macvtap: left promiscuous mode [ 117.280449][ T1002] veth0_macvtap: left promiscuous mode [ 117.280732][ T1002] veth1_vlan: left promiscuous mode [ 117.281026][ T1002] veth0_vlan: left promiscuous mode [ 119.367342][ T1002] team0 (unregistering): Port device team_slave_1 removed [ 119.557194][ T1002] team0 (unregistering): Port device team_slave_0 removed 2025/12/10 03:10:56 executed programs: 0 [ 125.155048][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.168989][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.169818][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.171981][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.173713][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.263653][ T5981] chnl_net:caif_netlink_parms(): no params data found [ 126.847035][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.847235][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.847416][ T5981] bridge_slave_0: entered allmulticast mode [ 126.849493][ T5981] bridge_slave_0: entered promiscuous mode [ 126.854587][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.854738][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.854860][ T5981] bridge_slave_1: entered allmulticast mode [ 126.887558][ T5981] bridge_slave_1: entered promiscuous mode [ 127.011323][ T5981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.014534][ T5981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.169897][ T5981] team0: Port device team_slave_0 added [ 127.172546][ T5981] team0: Port device team_slave_1 added [ 127.236575][ T61] Bluetooth: hci0: command tx timeout [ 127.537385][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.537405][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.537425][ T5981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.539279][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.539294][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.539318][ T5981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.802784][ T5981] hsr_slave_0: entered promiscuous mode [ 127.803818][ T5981] hsr_slave_1: entered promiscuous mode [ 129.316664][ T61] Bluetooth: hci0: command tx timeout [ 129.441363][ T5981] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 129.484011][ T5981] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 129.523222][ T5981] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 129.561412][ T5981] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 129.751988][ T5981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.784022][ T5981] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.804715][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.805156][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.829360][ T986] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.829688][ T986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.214277][ T5981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.302580][ T5981] veth0_vlan: entered promiscuous mode [ 130.323133][ T5981] veth1_vlan: entered promiscuous mode [ 130.367517][ T5981] veth0_macvtap: entered promiscuous mode [ 130.390853][ T5981] veth1_macvtap: entered promiscuous mode [ 130.423797][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.450754][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.465019][ T1002] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.486566][ T1002] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.503159][ T1002] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.504233][ T1002] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.727873][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.727898][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.793708][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.793733][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/10 03:11:02 executed programs: 2 [ 130.990576][ T6068] loop0: detected capacity change from 0 to 1024 [ 131.219966][ T6068] [ 131.219980][ T6068] ============================================ [ 131.219988][ T6068] WARNING: possible recursive locking detected [ 131.220009][ T6068] syzkaller #0 Not tainted [ 131.220020][ T6068] -------------------------------------------- [ 131.220028][ T6068] syz.0.17/6068 is trying to acquire lock: [ 131.220039][ T6068] ffff88803be8a0a0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x2d0 [ 131.220121][ T6068] [ 131.220121][ T6068] but task is already holding lock: [ 131.220128][ T6068] ffff88803be8a0a0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x2d0 [ 131.220186][ T6068] [ 131.220186][ T6068] other info that might help us debug this: [ 131.220193][ T6068] Possible unsafe locking scenario: [ 131.220193][ T6068] [ 131.220199][ T6068] CPU0 [ 131.220204][ T6068] ---- [ 131.220209][ T6068] lock(&tree->tree_lock/1); [ 131.220228][ T6068] lock(&tree->tree_lock/1); [ 131.220247][ T6068] [ 131.220247][ T6068] *** DEADLOCK *** [ 131.220247][ T6068] [ 131.220252][ T6068] May be due to missing lock nesting notation [ 131.220252][ T6068] [ 131.220259][ T6068] 5 locks held by syz.0.17/6068: [ 131.220272][ T6068] #0: ffff888036890480 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 131.220333][ T6068] #1: ffff888035d5b058 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: do_truncate+0x171/0x220 [ 131.220402][ T6068] #2: ffff888035d5adf8 (&hip->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1f8/0x1c40 [ 131.220455][ T6068] #3: ffff88803be8a0a0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x168/0x2d0 [ 131.220516][ T6068] #4: ffff888035d580f8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1f8/0x1c40 [ 131.220566][ T6068] [ 131.220566][ T6068] stack backtrace: [ 131.220591][ T6068] CPU: 1 UID: 0 PID: 6068 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 131.220615][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.220637][ T6068] Call Trace: [ 131.220652][ T6068] [ 131.220661][ T6068] dump_stack_lvl+0x189/0x250 [ 131.220693][ T6068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.220721][ T6068] ? __pfx__printk+0x10/0x10 [ 131.220739][ T6068] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 131.220769][ T6068] ? print_lock_name+0xde/0x100 [ 131.220803][ T6068] print_deadlock_bug+0x279/0x290 [ 131.220824][ T6068] __lock_acquire+0x2540/0x2cf0 [ 131.220864][ T6068] ? hfsplus_find_init+0x168/0x2d0 [ 131.220893][ T6068] lock_acquire+0x117/0x340 [ 131.220918][ T6068] ? hfsplus_find_init+0x168/0x2d0 [ 131.220954][ T6068] ? hfsplus_find_init+0x168/0x2d0 [ 131.220983][ T6068] mutex_lock_nested+0x5a/0x1d0 [ 131.221002][ T6068] ? hfsplus_find_init+0x168/0x2d0 [ 131.221034][ T6068] hfsplus_find_init+0x168/0x2d0 [ 131.221064][ T6068] hfsplus_file_extend+0x40e/0x1c40 [ 131.221093][ T6068] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 131.221123][ T6068] ? __asan_memset+0x22/0x50 [ 131.221149][ T6068] ? hfsplus_brec_find+0x1a9/0x510 [ 131.221183][ T6068] hfsplus_bmap_reserve+0x128/0x520 [ 131.221217][ T6068] __hfsplus_ext_write_extent+0x2b0/0x5e0 [ 131.221244][ T6068] __hfsplus_ext_cache_extent+0x9f/0xd40 [ 131.221273][ T6068] hfsplus_file_extend+0x437/0x1c40 [ 131.221302][ T6068] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 131.221330][ T6068] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 131.221366][ T6068] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 131.221393][ T6068] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 131.221421][ T6068] ? rt_spin_lock+0x1c1/0x3e0 [ 131.221441][ T6068] ? rcu_is_watching+0x15/0xb0 [ 131.221464][ T6068] hfsplus_get_block+0x40c/0x1600 [ 131.221494][ T6068] ? __pfx_hfsplus_get_block+0x10/0x10 [ 131.221518][ T6068] ? rt_spin_unlock+0x161/0x200 [ 131.221543][ T6068] __block_write_begin_int+0x6b5/0x1900 [ 131.221583][ T6068] ? __pfx_hfsplus_get_block+0x10/0x10 [ 131.221607][ T6068] ? __pfx___block_write_begin_int+0x10/0x10 [ 131.221639][ T6068] ? __filemap_get_folio_mpol+0x6fa/0xa50 [ 131.221672][ T6068] cont_write_begin+0x78c/0xb50 [ 131.221709][ T6068] ? __pfx_cont_write_begin+0x10/0x10 [ 131.221742][ T6068] ? folio_unlock+0x101/0x160 [ 131.221771][ T6068] hfsplus_write_begin+0x66/0xb0 [ 131.221791][ T6068] ? __pfx_hfsplus_get_block+0x10/0x10 [ 131.221815][ T6068] cont_write_begin+0x2fd/0xb50 [ 131.221852][ T6068] ? __pfx_cont_write_begin+0x10/0x10 [ 131.221884][ T6068] ? smk_access+0x14c/0x4e0 [ 131.221917][ T6068] hfsplus_write_begin+0x66/0xb0 [ 131.221937][ T6068] ? __pfx_hfsplus_get_block+0x10/0x10 [ 131.221962][ T6068] generic_cont_expand_simple+0x13f/0x210 [ 131.221994][ T6068] ? __pfx_inode_dio_wait+0x10/0x10 [ 131.222022][ T6068] ? __pfx_generic_cont_expand_simple+0x10/0x10 [ 131.222057][ T6068] ? setattr_prepare+0x1e7/0xac0 [ 131.222088][ T6068] ? __pfx_current_time+0x10/0x10 [ 131.222115][ T6068] hfsplus_setattr+0x169/0x270 [ 131.222137][ T6068] ? __pfx_hfsplus_setattr+0x10/0x10 [ 131.222160][ T6068] notify_change+0xc18/0xf60 [ 131.222196][ T6068] do_truncate+0x1a4/0x220 [ 131.222227][ T6068] ? __pfx_do_truncate+0x10/0x10 [ 131.222265][ T6068] vfs_truncate+0x493/0x520 [ 131.222297][ T6068] ? __pfx_vfs_truncate+0x10/0x10 [ 131.222325][ T6068] ? kmem_cache_free+0x18f/0x8d0 [ 131.222368][ T6068] do_sys_truncate+0xdb/0x190 [ 131.222398][ T6068] ? __pfx_do_sys_truncate+0x10/0x10 [ 131.222432][ T6068] __x64_sys_truncate+0x5b/0x70 [ 131.222463][ T6068] do_syscall_64+0xfa/0xf80 [ 131.222491][ T6068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.222511][ T6068] ? clear_bhb_loop+0x60/0xb0 [ 131.222534][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.222554][ T6068] RIP: 0033:0x7f577db9f749 [ 131.222580][ T6068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.222597][ T6068] RSP: 002b:00007ffc9a398998 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 131.222620][ T6068] RAX: ffffffffffffffda RBX: 00007f577ddf5fa0 RCX: 00007f577db9f749 [ 131.222636][ T6068] RDX: 0000000000000000 RSI: 0000000003000000 RDI: 0000200000000900 [ 131.222650][ T6068] RBP: 00007f577dc23f91 R08: 0000000000000000 R09: 0000000000000000 [ 131.222664][ T6068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.222677][ T6068] R13: 00007f577ddf5fa0 R14: 00007f577ddf5fa0 R15: 0000000000000002 [ 131.222700][ T6068] [ 131.222756][ T6068] ------------[ cut here ]------------ [ 131.222764][ T6068] rtmutex deadlock detected [ 131.222775][ T6068] WARNING: kernel/locking/rtmutex.c:1674 at 0x0, CPU#1: syz.0.17/6068 [ 131.222800][ T6068] Modules linked in: [ 131.222817][ T6068] CPU: 1 UID: 0 PID: 6068 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 131.222842][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.222854][ T6068] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0 [ 131.222877][ T6068] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 86 00 00 00 48 89 f7 e8 66 3b 01 00 48 8d 3d cf a8 08 04 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1c 25 08 e0 b0 91 4c [ 131.222894][ T6068] RSP: 0018:ffffc90004826d30 EFLAGS: 00010286 [ 131.222912][ T6068] RAX: 0000000080000000 RBX: ffffc90004826dc0 RCX: 0000000000000000 [ 131.222926][ T6068] RDX: 0000000000000000 RSI: ffffffff8b3efa40 RDI: ffffffff8eddb8f0 [ 131.222941][ T6068] RBP: ffffc90004826ec8 R08: ffffffff8eda9677 R09: 1ffffffff1db52ce [ 131.222956][ T6068] R10: dffffc0000000000 R11: fffffbfff1db52cf R12: 1ffff92000904db4 [ 131.222972][ T6068] R13: ffffffff8ad50b09 R14: ffff88803be8a048 R15: dffffc0000000000 [ 131.222988][ T6068] FS: 000055556e5da500(0000) GS:ffff888126e12000(0000) knlGS:0000000000000000 [ 131.223006][ T6068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.223021][ T6068] CR2: 00007ffe6aff5eec CR3: 000000003c24c000 CR4: 00000000003526f0 [ 131.223040][ T6068] Call Trace: [ 131.223047][ T6068] [ 131.223054][ T6068] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 131.223071][ T6068] rt_mutex_slowlock+0x666/0x6b0 [ 131.223092][ T6068] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 131.223112][ T6068] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 131.223144][ T6068] ? hfsplus_find_init+0x168/0x2d0 [ 131.223174][ T6068] mutex_lock_nested+0x16a/0x1d0 [ 131.223197][ T6068] hfsplus_find_init+0x168/0x2d0 [ 131.223229][ T6068] hfsplus_file_extend+0x40e/0x1c40 [ 131.223259][ T6068] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 131.223289][ T6068] ? __asan_memset+0x22/0x50 [ 131.223316][ T6068] ? hfsplus_brec_find+0x1a9/0x510 [ 131.223378][ T6068] hfsplus_bmap_reserve+0x128/0x520 [ 131.223413][ T6068] __hfsplus_ext_write_extent+0x2b0/0x5e0 [ 131.223454][ T6068] __hfsplus_ext_cache_extent+0x9f/0xd40 [ 131.223481][ T6068] hfsplus_file_extend+0x437/0x1c40 [ 131.223510][ T6068] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 131.223537][ T6068] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 131.223566][ T6068] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 131.223593][ T6068] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 131.223621][ T6068] ? rt_spin_lock+0x1c1/0x3e0 [ 131.223641][ T6068] ? rcu_is_watching+0x15/0xb0 [ 131.223665][ T6068] hfsplus_get_block+0x40c/0x1600 [ 131.223693][ T6068] ? __pfx_hfsplus_get_block+0x10/0x10 [ 131.223717][ T6068] ? rt_spin_unlock+0x161/0x200 [ 131.223742][ T6068] __block_write_begin_int+0x6b5/0x1900 [ 131.223781][ T6068] ? __pfx_hfsplus_get_block+0x10/0x10 [ 131.223805][ T6068] ? __pfx___block_write_begin_int+0x10/0x10 [ 131.223837][ T6068] ? __filemap_get_folio_mpol+0x6fa/0xa50 [ 131.223868][ T6068] cont_write_begin+0x78c/0xb50 [ 131.223905][ T6068] ? __pfx_cont_write_begin+0x10/0x10 [ 131.223938][ T6068] ? folio_unlock+0x101/0x160 [ 131.223964][ T6068] hfsplus_write_begin+0x66/0xb0 [ 131.223981][ T6068] ? __pfx_hfsplus_get_block+0x10/0x10 [ 131.224003][ T6068] cont_write_begin+0x2fd/0xb50 [ 131.224036][ T6068] ? __pfx_cont_write_begin+0x10/0x10 [ 131.224066][ T6068] ? smk_access+0x14c/0x4e0 [ 131.224098][ T6068] hfsplus_write_begin+0x66/0xb0 [ 131.224118][ T6068] ? __pfx_hfsplus_get_block+0x10/0x10 [ 131.224143][ T6068] generic_cont_expand_simple+0x13f/0x210 [ 131.224175][ T6068] ? __pfx_inode_dio_wait+0x10/0x10 [ 131.224202][ T6068] ? __pfx_generic_cont_expand_simple+0x10/0x10 [ 131.224234][ T6068] ? setattr_prepare+0x1e7/0xac0 [ 131.224266][ T6068] ? __pfx_current_time+0x10/0x10 [ 131.224293][ T6068] hfsplus_setattr+0x169/0x270 [ 131.224315][ T6068] ? __pfx_hfsplus_setattr+0x10/0x10 [ 131.224339][ T6068] notify_change+0xc18/0xf60 [ 131.224380][ T6068] do_truncate+0x1a4/0x220 [ 131.224410][ T6068] ? __pfx_do_truncate+0x10/0x10 [ 131.224449][ T6068] vfs_truncate+0x493/0x520 [ 131.224482][ T6068] ? __pfx_vfs_truncate+0x10/0x10 [ 131.224510][ T6068] ? kmem_cache_free+0x18f/0x8d0 [ 131.224547][ T6068] do_sys_truncate+0xdb/0x190 [ 131.224576][ T6068] ? __pfx_do_sys_truncate+0x10/0x10 [ 131.224611][ T6068] __x64_sys_truncate+0x5b/0x70 [ 131.224641][ T6068] do_syscall_64+0xfa/0xf80 [ 131.224669][ T6068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.224690][ T6068] ? clear_bhb_loop+0x60/0xb0 [ 131.224714][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.224734][ T6068] RIP: 0033:0x7f577db9f749 [ 131.224751][ T6068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.224768][ T6068] RSP: 002b:00007ffc9a398998 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 131.224790][ T6068] RAX: ffffffffffffffda RBX: 00007f577ddf5fa0 RCX: 00007f577db9f749 [ 131.224806][ T6068] RDX: 0000000000000000 RSI: 0000000003000000 RDI: 0000200000000900 [ 131.224820][ T6068] RBP: 00007f577dc23f91 R08: 0000000000000000 R09: 0000000000000000 [ 131.224832][ T6068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.224844][ T6068] R13: 00007f577ddf5fa0 R14: 00007f577ddf5fa0 R15: 0000000000000002 [ 131.224866][ T6068] [ 131.224876][ T6068] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 131.224892][ T6068] CPU: 1 UID: 0 PID: 6068 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 131.224915][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.224927][ T6068] Call Trace: [ 131.224934][ T6068] [ 131.224942][ T6068] dump_stack_lvl+0x99/0x250 [ 131.224969][ T6068] ? __asan_memcpy+0x40/0x70 [ 131.224994][ T6068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.225021][ T6068] ? __pfx__printk+0x10/0x10 [ 131.225047][ T6068] vpanic+0x237/0x6d0 [ 131.225077][ T6068] ? __pfx_vpanic+0x10/0x10 [ 131.225105][ T6068] ? is_bpf_text_address+0x292/0x2b0 [ 131.225133][ T6068] ? is_bpf_text_address+0x26/0x2b0 [ 131.225164][ T6068] panic+0xb9/0xc0 [ 131.225192][ T6068] ? __pfx_panic+0x10/0x10 [ 131.225229][ T6068] __warn+0x317/0x4b0 [ 131.225261][ T6068] __report_bug+0x288/0x500 [ 131.225285][ T6068] ? __show_trace_log_lvl+0x4fb/0x550 [ 131.225316][ T6068] ? __pfx___report_bug+0x10/0x10 [ 131.225352][ T6068] ? __printk_cpu_sync_put+0x68/0x80 [ 131.225380][ T6068] ? dump_stack_lvl+0x1e0/0x250 [ 131.225411][ T6068] report_bug_entry+0x16a/0x220 [ 131.225436][ T6068] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 131.225457][ T6068] ? rt_mutex_handle_deadlock+0x26/0xb0 [ 131.225477][ T6068] handle_bug+0xca/0x200 [ 131.225506][ T6068] exc_invalid_op+0x1a/0x50 [ 131.225536][ T6068] asm_exc_invalid_op+0x1a/0x20 [ 131.225556][ T6068] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0 [ 131.225579][ T6068] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 86 00 00 00 48 89 f7 e8 66 3b 01 00 48 8d 3d cf a8 08 04 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1c 25 08 e0 b0 91 4c [ 131.225596][ T6068] RSP: 0018:ffffc90004826d30 EFLAGS: 00010286 [ 131.225616][ T6068] RAX: 0000000080000000 RBX: ffffc90004826dc0 RCX: 0000000000000000 [ 131.225631][ T6068] RDX: 0000000000000000 RSI: ffffffff8b3efa40 RDI: ffffffff8eddb8f0 [ 131.225646][ T6068] RBP: ffffc90004826ec8 R08: ffffffff8eda9677 R09: 1ffffffff1db52ce [ 131.225663][ T6068] R10: dffffc0000000000 R11: fffffbfff1db52cf R12: 1ffff92000904db4 [ 131.225679][ T6068] R13: ffffffff8ad50b09 R14: ffff88803be8a048 R15: dffffc0000000000 [ 131.225697][ T6068] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 131.225725][ T6068] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 131.225745][ T6068] rt_mutex_slowlock+0x666/0x6b0 [ 131.225766][ T6068] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 131.225787][ T6068] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 131.225820][ T6068] ? hfsplus_find_init+0x168/0x2d0 [ 131.225850][ T6068] mutex_lock_nested+0x16a/0x1d0 [ 131.225872][ T6068] hfsplus_find_init+0x168/0x2d0 [ 131.225905][ T6068] hfsplus_file_extend+0x40e/0x1c40 [ 131.225935][ T6068] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 131.225967][ T6068] ? __asan_memset+0x22/0x50 [ 131.225993][ T6068] ? hfsplus_brec_find+0x1a9/0x510 [ 131.226028][ T6068] hfsplus_bmap_reserve+0x128/0x520 [ 131.226063][ T6068] __hfsplus_ext_write_extent+0x2b0/0x5e0 [ 131.226091][ T6068] __hfsplus_ext_cache_extent+0x9f/0xd40 [ 131.226120][ T6068] hfsplus_file_extend+0x437/0x1c40 [ 131.226150][ T6068] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 131.226177][ T6068] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 131.226207][ T6068] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 131.226234][ T6068] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 131.226262][ T6068] ? rt_spin_lock+0x1c1/0x3e0 [ 131.226282][ T6068] ? rcu_is_watching+0x15/0xb0 [ 131.226306][ T6068] hfsplus_get_block+0x40c/0x1600 [ 131.226331][ T6068] ? __pfx_hfsplus_get_block+0x10/0x10 [ 131.226360][ T6068] ? rt_spin_unlock+0x161/0x200 [ 131.226383][ T6068] __block_write_begin_int+0x6b5/0x1900 [ 131.226418][ T6068] ? __pfx_hfsplus_get_block+0x10/0x10 [ 131.226442][ T6068] ? __pfx___block_write_begin_int+0x10/0x10 [ 131.226475][ T6068] ? __filemap_get_folio_mpol+0x6fa/0xa50 [ 131.226506][ T6068] cont_write_begin+0x78c/0xb50 [ 131.226541][ T6068] ? __pfx_cont_write_begin+0x10/0x10 [ 131.226573][ T6068] ? folio_unlock+0x101/0x160 [ 131.226602][ T6068] hfsplus_write_begin+0x66/0xb0 [ 131.226622][ T6068] ? __pfx_hfsplus_get_block+0x10/0x10 [ 131.226647][ T6068] cont_write_begin+0x2fd/0xb50 [ 131.226683][ T6068] ? __pfx_cont_write_begin+0x10/0x10 [ 131.226713][ T6068] ? smk_access+0x14c/0x4e0 [ 131.226746][ T6068] hfsplus_write_begin+0x66/0xb0 [ 131.226765][ T6068] ? __pfx_hfsplus_get_block+0x10/0x10 [ 131.226790][ T6068] generic_cont_expand_simple+0x13f/0x210 [ 131.226823][ T6068] ? __pfx_inode_dio_wait+0x10/0x10 [ 131.226850][ T6068] ? __pfx_generic_cont_expand_simple+0x10/0x10 [ 131.226883][ T6068] ? setattr_prepare+0x1e7/0xac0 [ 131.226915][ T6068] ? __pfx_current_time+0x10/0x10 [ 131.226942][ T6068] hfsplus_setattr+0x169/0x270 [ 131.226965][ T6068] ? __pfx_hfsplus_setattr+0x10/0x10 [ 131.226989][ T6068] notify_change+0xc18/0xf60 [ 131.227023][ T6068] do_truncate+0x1a4/0x220 [ 131.227052][ T6068] ? __pfx_do_truncate+0x10/0x10 [ 131.227089][ T6068] vfs_truncate+0x493/0x520 [ 131.227120][ T6068] ? __pfx_vfs_truncate+0x10/0x10 [ 131.227147][ T6068] ? kmem_cache_free+0x18f/0x8d0 [ 131.227181][ T6068] do_sys_truncate+0xdb/0x190 [ 131.227210][ T6068] ? __pfx_do_sys_truncate+0x10/0x10 [ 131.227245][ T6068] __x64_sys_truncate+0x5b/0x70 [ 131.227274][ T6068] do_syscall_64+0xfa/0xf80 [ 131.227301][ T6068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.227322][ T6068] ? clear_bhb_loop+0x60/0xb0 [ 131.227354][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.227374][ T6068] RIP: 0033:0x7f577db9f749 [ 131.227392][ T6068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.227409][ T6068] RSP: 002b:00007ffc9a398998 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 131.227430][ T6068] RAX: ffffffffffffffda RBX: 00007f577ddf5fa0 RCX: 00007f577db9f749 [ 131.227445][ T6068] RDX: 0000000000000000 RSI: 0000000003000000 RDI: 0000200000000900 [ 131.227460][ T6068] RBP: 00007f577dc23f91 R08: 0000000000000000 R09: 0000000000000000 [ 131.227474][ T6068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.227487][ T6068] R13: 00007f577ddf5fa0 R14: 00007f577ddf5fa0 R15: 0000000000000002 [ 131.227510][ T6068] [ 131.227859][ T6068] Kernel Offset: disabled