Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. [ 87.004943][ T9] cfg80211: failed to load regulatory.db 2025/12/04 08:29:24 parsed 1 programs [ 90.576131][ T5814] cgroup: Unknown subsys name 'net' [ 90.836116][ T5814] cgroup: Unknown subsys name 'cpuset' [ 90.891892][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.727237][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.144736][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.146148][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.146988][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.148603][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.149490][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.026019][ T1400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.026044][ T1400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.107310][ T1400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.107331][ T1400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.738462][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 102.291941][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.293663][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.293845][ T5880] bridge_slave_0: entered allmulticast mode [ 102.295547][ T5880] bridge_slave_0: entered promiscuous mode [ 102.300940][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.302407][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.302626][ T5880] bridge_slave_1: entered allmulticast mode [ 102.305186][ T5880] bridge_slave_1: entered promiscuous mode [ 102.516573][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.520964][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.804299][ T5880] team0: Port device team_slave_0 added [ 102.807935][ T5880] team0: Port device team_slave_1 added [ 103.005653][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.005665][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.005679][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.059645][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.059661][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.059681][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.310207][ T5880] hsr_slave_0: entered promiscuous mode [ 103.319378][ T5880] hsr_slave_1: entered promiscuous mode [ 103.776429][ T5880] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.800713][ T5880] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.835105][ T5880] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.879470][ T5880] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.011446][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.035392][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.047762][ T3141] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.048442][ T3141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.077399][ T1400] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.078065][ T1400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.307999][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.358087][ T5880] veth0_vlan: entered promiscuous mode [ 104.367072][ T5880] veth1_vlan: entered promiscuous mode [ 104.400503][ T5880] veth0_macvtap: entered promiscuous mode [ 104.408232][ T5880] veth1_macvtap: entered promiscuous mode [ 104.435033][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.452108][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.474278][ T1400] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.476871][ T1400] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.476916][ T1400] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.476948][ T1400] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.236562][ T3141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.474268][ T3141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.703349][ T3141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.975769][ T3141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/12/04 08:29:43 executed programs: 0 [ 106.813562][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.815335][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.816072][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.817108][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.818011][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.071417][ T5922] chnl_net:caif_netlink_parms(): no params data found [ 107.392760][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.392938][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.393095][ T5922] bridge_slave_0: entered allmulticast mode [ 107.394625][ T5922] bridge_slave_0: entered promiscuous mode [ 107.397898][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.398027][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.398133][ T5922] bridge_slave_1: entered allmulticast mode [ 107.399600][ T5922] bridge_slave_1: entered promiscuous mode [ 107.627033][ T5922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.630294][ T5922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.797490][ T5922] team0: Port device team_slave_0 added [ 107.800967][ T5922] team0: Port device team_slave_1 added [ 108.126269][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.126286][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.126311][ T5922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.130578][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.130591][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.130609][ T5922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.283569][ T3141] bridge_slave_1: left allmulticast mode [ 108.283775][ T3141] bridge_slave_1: left promiscuous mode [ 108.285555][ T3141] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.400967][ T3141] bridge_slave_0: left allmulticast mode [ 108.400997][ T3141] bridge_slave_0: left promiscuous mode [ 108.401422][ T3141] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.931281][ T5858] Bluetooth: hci0: command tx timeout [ 110.152338][ T3141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.211987][ T3141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.254438][ T3141] bond0 (unregistering): Released all slaves [ 110.393348][ T5922] hsr_slave_0: entered promiscuous mode [ 110.394135][ T5922] hsr_slave_1: entered promiscuous mode [ 110.394815][ T5922] debugfs: 'hsr0' already exists in 'hsr' [ 110.394897][ T5922] Cannot create hsr debugfs directory [ 110.651414][ T3141] hsr_slave_0: left promiscuous mode [ 110.671448][ T3141] hsr_slave_1: left promiscuous mode [ 110.673169][ T3141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.673246][ T3141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.732948][ T3141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.732981][ T3141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.808244][ T3141] veth1_macvtap: left promiscuous mode [ 110.808399][ T3141] veth0_macvtap: left promiscuous mode [ 110.808570][ T3141] veth1_vlan: left promiscuous mode [ 110.808746][ T3141] veth0_vlan: left promiscuous mode [ 111.001274][ T5858] Bluetooth: hci0: command tx timeout [ 112.911990][ T3141] team0 (unregistering): Port device team_slave_1 removed [ 113.081315][ T5858] Bluetooth: hci0: command tx timeout [ 113.101800][ T3141] team0 (unregistering): Port device team_slave_0 removed [ 115.161318][ T5858] Bluetooth: hci0: command tx timeout [ 116.405135][ T5922] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.434867][ T5922] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.841713][ T5922] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.896154][ T5922] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.075925][ T5922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.092938][ T5922] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.110528][ T1428] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.110656][ T1428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.138715][ T1400] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.138918][ T1400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.369092][ T5922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.424528][ T5922] veth0_vlan: entered promiscuous mode [ 117.517862][ T5922] veth1_vlan: entered promiscuous mode [ 117.612202][ T5922] veth0_macvtap: entered promiscuous mode [ 117.695716][ T5922] veth1_macvtap: entered promiscuous mode [ 117.728394][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.746433][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.763673][ T1010] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.763910][ T1010] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.763945][ T1010] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.763976][ T1010] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.015062][ T1400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.015083][ T1400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.063996][ T3141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.064017][ T3141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/04 08:29:55 executed programs: 2 [ 118.193483][ T5999] loop0: detected capacity change from 0 to 64 [ 118.197041][ T5999] ======================================================= [ 118.197041][ T5999] WARNING: The mand mount option has been deprecated and [ 118.197041][ T5999] and is ignored by this kernel. Remove the mand [ 118.197041][ T5999] option from the mount to silence this warning. [ 118.197041][ T5999] ======================================================= [ 118.249035][ T5999] hfs: unable to locate alternate MDB [ 118.249048][ T5999] hfs: continuing without an alternate MDB [ 118.417055][ T5999] [ 118.417064][ T5999] ============================================ [ 118.417068][ T5999] WARNING: possible recursive locking detected [ 118.417076][ T5999] syzkaller #0 Not tainted [ 118.417082][ T5999] -------------------------------------------- [ 118.417086][ T5999] syz.0.17/5999 is trying to acquire lock: [ 118.417093][ T5999] ffff888033d5c0a0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x2c0 [ 118.417132][ T5999] [ 118.417132][ T5999] but task is already holding lock: [ 118.417135][ T5999] ffff888033d5c0a0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x2c0 [ 118.417159][ T5999] [ 118.417159][ T5999] other info that might help us debug this: [ 118.417163][ T5999] Possible unsafe locking scenario: [ 118.417163][ T5999] [ 118.417166][ T5999] CPU0 [ 118.417168][ T5999] ---- [ 118.417171][ T5999] lock(&tree->tree_lock/1); [ 118.417180][ T5999] lock(&tree->tree_lock/1); [ 118.417188][ T5999] [ 118.417188][ T5999] *** DEADLOCK *** [ 118.417188][ T5999] [ 118.417191][ T5999] May be due to missing lock nesting notation [ 118.417191][ T5999] [ 118.417194][ T5999] 5 locks held by syz.0.17/5999: [ 118.417200][ T5999] #0: ffff888039430480 (sb_writers#12){.+.+}-{0:0}, at: do_ftruncate+0x452/0x570 [ 118.417226][ T5999] #1: ffff8880332318c0 (&sb->s_type->i_mutex_key#22){+.+.}-{4:4}, at: do_truncate+0x171/0x220 [ 118.417251][ T5999] #2: ffff8880332316e8 (&HFS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xda/0x14c0 [ 118.417272][ T5999] #3: ffff888033d5c0a0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x2c0 [ 118.417298][ T5999] #4: ffff888033230128 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xda/0x14c0 [ 118.417320][ T5999] [ 118.417320][ T5999] stack backtrace: [ 118.417332][ T5999] CPU: 1 UID: 0 PID: 5999 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 118.417343][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.417354][ T5999] Call Trace: [ 118.417359][ T5999] [ 118.417364][ T5999] dump_stack_lvl+0x189/0x250 [ 118.417378][ T5999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.417395][ T5999] ? __pfx__printk+0x10/0x10 [ 118.417414][ T5999] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 118.417436][ T5999] ? print_lock_name+0xde/0x100 [ 118.417458][ T5999] print_deadlock_bug+0x279/0x290 [ 118.417480][ T5999] __lock_acquire+0x2540/0x2cf0 [ 118.417507][ T5999] ? hfs_find_init+0x18e/0x2c0 [ 118.417523][ T5999] lock_acquire+0x117/0x340 [ 118.417541][ T5999] ? hfs_find_init+0x18e/0x2c0 [ 118.417564][ T5999] ? hfs_find_init+0x18e/0x2c0 [ 118.417579][ T5999] mutex_lock_nested+0x5a/0x1d0 [ 118.417588][ T5999] ? hfs_find_init+0x18e/0x2c0 [ 118.417600][ T5999] hfs_find_init+0x18e/0x2c0 [ 118.417612][ T5999] hfs_extend_file+0x2f6/0x14c0 [ 118.417622][ T5999] ? __pfx_hfs_extend_file+0x10/0x10 [ 118.417634][ T5999] ? __asan_memset+0x22/0x50 [ 118.417643][ T5999] ? hfs_brec_find+0x1a7/0x510 [ 118.417655][ T5999] hfs_bmap_reserve+0x107/0x430 [ 118.417672][ T5999] __hfs_ext_write_extent+0x1fa/0x470 [ 118.417688][ T5999] __hfs_ext_cache_extent+0x6b/0x9b0 [ 118.417696][ T5999] ? hfs_find_init+0x18e/0x2c0 [ 118.417708][ T5999] hfs_extend_file+0x31e/0x14c0 [ 118.417716][ T5999] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 118.417730][ T5999] ? __pfx_hfs_extend_file+0x10/0x10 [ 118.417740][ T5999] ? clean_bdev_aliases+0x5c9/0x6b0 [ 118.417752][ T5999] ? __pfx_clean_bdev_aliases+0x10/0x10 [ 118.417762][ T5999] hfs_get_block+0x3d7/0xbd0 [ 118.417773][ T5999] ? __pfx_hfs_get_block+0x10/0x10 [ 118.417781][ T5999] ? rt_spin_unlock+0x161/0x200 [ 118.417793][ T5999] __block_write_begin_int+0x6b5/0x1900 [ 118.417806][ T5999] ? __pfx_hfs_get_block+0x10/0x10 [ 118.417814][ T5999] ? __pfx___block_write_begin_int+0x10/0x10 [ 118.417826][ T5999] cont_write_begin+0x789/0xb50 [ 118.417839][ T5999] ? __pfx_cont_write_begin+0x10/0x10 [ 118.417850][ T5999] ? folio_unlock+0x101/0x160 [ 118.417860][ T5999] hfs_write_begin+0x66/0xb0 [ 118.417868][ T5999] ? __pfx_hfs_get_block+0x10/0x10 [ 118.417877][ T5999] cont_write_begin+0x2fd/0xb50 [ 118.417889][ T5999] ? __pfx_cont_write_begin+0x10/0x10 [ 118.417902][ T5999] hfs_write_begin+0x66/0xb0 [ 118.417910][ T5999] ? __pfx_hfs_get_block+0x10/0x10 [ 118.417924][ T5999] hfs_file_truncate+0x19d/0xad0 [ 118.417936][ T5999] ? __pfx_hfs_file_truncate+0x10/0x10 [ 118.417945][ T5999] ? unmap_mapping_range+0xde/0x170 [ 118.417956][ T5999] ? __pfx_unmap_mapping_range+0x10/0x10 [ 118.417965][ T5999] ? setattr_prepare+0x1e7/0xac0 [ 118.417976][ T5999] ? truncate_setsize+0xcf/0xf0 [ 118.417985][ T5999] hfs_inode_setattr+0x4a9/0x670 [ 118.417994][ T5999] ? try_break_deleg+0x7c/0x130 [ 118.418004][ T5999] ? __pfx_hfs_inode_setattr+0x10/0x10 [ 118.418013][ T5999] notify_change+0xc18/0xf60 [ 118.418025][ T5999] do_truncate+0x1a4/0x220 [ 118.418036][ T5999] ? __pfx_do_truncate+0x10/0x10 [ 118.418047][ T5999] ? __pfx_do_futex+0x10/0x10 [ 118.418062][ T5999] do_ftruncate+0x4b1/0x570 [ 118.418073][ T5999] ? __pfx_do_ftruncate+0x10/0x10 [ 118.418085][ T5999] __x64_sys_ftruncate+0x92/0xf0 [ 118.418095][ T5999] do_syscall_64+0xfa/0xf80 [ 118.418108][ T5999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.418118][ T5999] ? clear_bhb_loop+0x60/0xb0 [ 118.418129][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.418143][ T5999] RIP: 0033:0x7f001c3cf749 [ 118.418158][ T5999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.418167][ T5999] RSP: 002b:00007fff4eac8e58 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 118.418177][ T5999] RAX: ffffffffffffffda RBX: 00007f001c625fa0 RCX: 00007f001c3cf749 [ 118.418185][ T5999] RDX: 0000000000000000 RSI: 0000000008800000 RDI: 0000000000000004 [ 118.418191][ T5999] RBP: 00007f001c453f91 R08: 0000000000000000 R09: 0000000000000000 [ 118.418197][ T5999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.418203][ T5999] R13: 00007f001c625fa0 R14: 00007f001c625fa0 R15: 0000000000000002 [ 118.418213][ T5999] [ 118.418241][ T5999] ------------[ cut here ]------------ [ 118.418245][ T5999] rtmutex deadlock detected [ 118.418252][ T5999] WARNING: kernel/locking/rtmutex.c:1674 at 0x0, CPU#1: syz.0.17/5999 [ 118.418263][ T5999] Modules linked in: [ 118.418271][ T5999] CPU: 1 UID: 0 PID: 5999 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 118.418282][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.418288][ T5999] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0 [ 118.418299][ T5999] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 86 00 00 00 48 89 f7 e8 a6 3b 01 00 48 8d 3d 4f 40 17 04 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1c 25 08 f0 aa 91 4c [ 118.418306][ T5999] RSP: 0018:ffffc90004676d30 EFLAGS: 00010286 [ 118.418314][ T5999] RAX: 0000000080000000 RBX: ffffc90004676dc0 RCX: 0000000000000000 [ 118.418321][ T5999] RDX: 0000000000000000 RSI: ffffffff8b3e9bc0 RDI: ffffffff8edcaef0 [ 118.418328][ T5999] RBP: ffffc90004676ec8 R08: ffffffff8ed98d77 R09: 1ffffffff1db31ae [ 118.418335][ T5999] R10: dffffc0000000000 R11: fffffbfff1db31af R12: 1ffff920008cedb4 [ 118.418342][ T5999] R13: ffffffff8ac56989 R14: ffff888033d5c048 R15: dffffc0000000000 [ 118.418350][ T5999] FS: 000055558d8d3500(0000) GS:ffff888126e71000(0000) knlGS:0000000000000000 [ 118.418358][ T5999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.418365][ T5999] CR2: 00007f001c3b2a60 CR3: 0000000041976000 CR4: 00000000003526f0 [ 118.418374][ T5999] Call Trace: [ 118.418378][ T5999] [ 118.418382][ T5999] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 118.418392][ T5999] rt_mutex_slowlock+0x666/0x6b0 [ 118.418401][ T5999] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 118.418411][ T5999] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 118.418425][ T5999] ? hfs_find_init+0x18e/0x2c0 [ 118.418436][ T5999] mutex_lock_nested+0x16a/0x1d0 [ 118.418446][ T5999] hfs_find_init+0x18e/0x2c0 [ 118.418457][ T5999] hfs_extend_file+0x2f6/0x14c0 [ 118.418468][ T5999] ? __pfx_hfs_extend_file+0x10/0x10 [ 118.418479][ T5999] ? __asan_memset+0x22/0x50 [ 118.418487][ T5999] ? hfs_brec_find+0x1a7/0x510 [ 118.418500][ T5999] hfs_bmap_reserve+0x107/0x430 [ 118.418516][ T5999] __hfs_ext_write_extent+0x1fa/0x470 [ 118.418532][ T5999] __hfs_ext_cache_extent+0x6b/0x9b0 [ 118.418541][ T5999] ? hfs_find_init+0x18e/0x2c0 [ 118.418553][ T5999] hfs_extend_file+0x31e/0x14c0 [ 118.418561][ T5999] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 118.418574][ T5999] ? __pfx_hfs_extend_file+0x10/0x10 [ 118.418583][ T5999] ? clean_bdev_aliases+0x5c9/0x6b0 [ 118.418594][ T5999] ? __pfx_clean_bdev_aliases+0x10/0x10 [ 118.418605][ T5999] hfs_get_block+0x3d7/0xbd0 [ 118.418615][ T5999] ? __pfx_hfs_get_block+0x10/0x10 [ 118.418624][ T5999] ? rt_spin_unlock+0x161/0x200 [ 118.418636][ T5999] __block_write_begin_int+0x6b5/0x1900 [ 118.418648][ T5999] ? __pfx_hfs_get_block+0x10/0x10 [ 118.418657][ T5999] ? __pfx___block_write_begin_int+0x10/0x10 [ 118.418669][ T5999] cont_write_begin+0x789/0xb50 [ 118.418682][ T5999] ? __pfx_cont_write_begin+0x10/0x10 [ 118.418692][ T5999] ? folio_unlock+0x101/0x160 [ 118.418703][ T5999] hfs_write_begin+0x66/0xb0 [ 118.418711][ T5999] ? __pfx_hfs_get_block+0x10/0x10 [ 118.418720][ T5999] cont_write_begin+0x2fd/0xb50 [ 118.418732][ T5999] ? __pfx_cont_write_begin+0x10/0x10 [ 118.418745][ T5999] hfs_write_begin+0x66/0xb0 [ 118.418752][ T5999] ? __pfx_hfs_get_block+0x10/0x10 [ 118.418761][ T5999] hfs_file_truncate+0x19d/0xad0 [ 118.418772][ T5999] ? __pfx_hfs_file_truncate+0x10/0x10 [ 118.418782][ T5999] ? unmap_mapping_range+0xde/0x170 [ 118.418792][ T5999] ? __pfx_unmap_mapping_range+0x10/0x10 [ 118.418801][ T5999] ? setattr_prepare+0x1e7/0xac0 [ 118.418812][ T5999] ? truncate_setsize+0xcf/0xf0 [ 118.418820][ T5999] hfs_inode_setattr+0x4a9/0x670 [ 118.418830][ T5999] ? try_break_deleg+0x7c/0x130 [ 118.418840][ T5999] ? __pfx_hfs_inode_setattr+0x10/0x10 [ 118.418849][ T5999] notify_change+0xc18/0xf60 [ 118.418861][ T5999] do_truncate+0x1a4/0x220 [ 118.418871][ T5999] ? __pfx_do_truncate+0x10/0x10 [ 118.418882][ T5999] ? __pfx_do_futex+0x10/0x10 [ 118.418897][ T5999] do_ftruncate+0x4b1/0x570 [ 118.418908][ T5999] ? __pfx_do_ftruncate+0x10/0x10 [ 118.418925][ T5999] __x64_sys_ftruncate+0x92/0xf0 [ 118.418936][ T5999] do_syscall_64+0xfa/0xf80 [ 118.418949][ T5999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.418958][ T5999] ? clear_bhb_loop+0x60/0xb0 [ 118.418968][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.418977][ T5999] RIP: 0033:0x7f001c3cf749 [ 118.418984][ T5999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.418992][ T5999] RSP: 002b:00007fff4eac8e58 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 118.419001][ T5999] RAX: ffffffffffffffda RBX: 00007f001c625fa0 RCX: 00007f001c3cf749 [ 118.419008][ T5999] RDX: 0000000000000000 RSI: 0000000008800000 RDI: 0000000000000004 [ 118.419014][ T5999] RBP: 00007f001c453f91 R08: 0000000000000000 R09: 0000000000000000 [ 118.419020][ T5999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.419026][ T5999] R13: 00007f001c625fa0 R14: 00007f001c625fa0 R15: 0000000000000002 [ 118.419036][ T5999] [ 118.419041][ T5999] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 118.419048][ T5999] CPU: 1 UID: 0 PID: 5999 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 118.419059][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.419064][ T5999] Call Trace: [ 118.419068][ T5999] [ 118.419071][ T5999] dump_stack_lvl+0x99/0x250 [ 118.419083][ T5999] ? __asan_memcpy+0x40/0x70 [ 118.419091][ T5999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.419103][ T5999] ? __pfx__printk+0x10/0x10 [ 118.419119][ T5999] vpanic+0x237/0x6d0 [ 118.419132][ T5999] ? __pfx_vpanic+0x10/0x10 [ 118.419144][ T5999] ? is_bpf_text_address+0x292/0x2b0 [ 118.419155][ T5999] ? is_bpf_text_address+0x26/0x2b0 [ 118.419167][ T5999] panic+0xb9/0xc0 [ 118.419178][ T5999] ? __pfx_panic+0x10/0x10 [ 118.419194][ T5999] __warn+0x317/0x4b0 [ 118.419207][ T5999] __report_bug+0x288/0x500 [ 118.419220][ T5999] ? __show_trace_log_lvl+0x4fb/0x550 [ 118.419233][ T5999] ? __pfx___report_bug+0x10/0x10 [ 118.419246][ T5999] ? __printk_cpu_sync_put+0x68/0x80 [ 118.419258][ T5999] ? dump_stack_lvl+0x1e0/0x250 [ 118.419271][ T5999] report_bug_entry+0x16a/0x220 [ 118.419282][ T5999] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 118.419292][ T5999] ? rt_mutex_handle_deadlock+0x26/0xb0 [ 118.419301][ T5999] handle_bug+0xca/0x200 [ 118.419315][ T5999] exc_invalid_op+0x1a/0x50 [ 118.419329][ T5999] asm_exc_invalid_op+0x1a/0x20 [ 118.419339][ T5999] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0 [ 118.419348][ T5999] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 86 00 00 00 48 89 f7 e8 a6 3b 01 00 48 8d 3d 4f 40 17 04 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1c 25 08 f0 aa 91 4c [ 118.419356][ T5999] RSP: 0018:ffffc90004676d30 EFLAGS: 00010286 [ 118.419364][ T5999] RAX: 0000000080000000 RBX: ffffc90004676dc0 RCX: 0000000000000000 [ 118.419371][ T5999] RDX: 0000000000000000 RSI: ffffffff8b3e9bc0 RDI: ffffffff8edcaef0 [ 118.419378][ T5999] RBP: ffffc90004676ec8 R08: ffffffff8ed98d77 R09: 1ffffffff1db31ae [ 118.419385][ T5999] R10: dffffc0000000000 R11: fffffbfff1db31af R12: 1ffff920008cedb4 [ 118.419392][ T5999] R13: ffffffff8ac56989 R14: ffff888033d5c048 R15: dffffc0000000000 [ 118.419400][ T5999] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 118.419412][ T5999] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 118.419421][ T5999] rt_mutex_slowlock+0x666/0x6b0 [ 118.419431][ T5999] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 118.419440][ T5999] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 118.419454][ T5999] ? hfs_find_init+0x18e/0x2c0 [ 118.419465][ T5999] mutex_lock_nested+0x16a/0x1d0 [ 118.419475][ T5999] hfs_find_init+0x18e/0x2c0 [ 118.419487][ T5999] hfs_extend_file+0x2f6/0x14c0 [ 118.419498][ T5999] ? __pfx_hfs_extend_file+0x10/0x10 [ 118.419509][ T5999] ? __asan_memset+0x22/0x50 [ 118.419517][ T5999] ? hfs_brec_find+0x1a7/0x510 [ 118.419530][ T5999] hfs_bmap_reserve+0x107/0x430 [ 118.419546][ T5999] __hfs_ext_write_extent+0x1fa/0x470 [ 118.419562][ T5999] __hfs_ext_cache_extent+0x6b/0x9b0 [ 118.419571][ T5999] ? hfs_find_init+0x18e/0x2c0 [ 118.419583][ T5999] hfs_extend_file+0x31e/0x14c0 [ 118.419591][ T5999] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 118.419604][ T5999] ? __pfx_hfs_extend_file+0x10/0x10 [ 118.419614][ T5999] ? clean_bdev_aliases+0x5c9/0x6b0 [ 118.419625][ T5999] ? __pfx_clean_bdev_aliases+0x10/0x10 [ 118.419636][ T5999] hfs_get_block+0x3d7/0xbd0 [ 118.419647][ T5999] ? __pfx_hfs_get_block+0x10/0x10 [ 118.419656][ T5999] ? rt_spin_unlock+0x161/0x200 [ 118.419667][ T5999] __block_write_begin_int+0x6b5/0x1900 [ 118.419680][ T5999] ? __pfx_hfs_get_block+0x10/0x10 [ 118.419689][ T5999] ? __pfx___block_write_begin_int+0x10/0x10 [ 118.419701][ T5999] cont_write_begin+0x789/0xb50 [ 118.419713][ T5999] ? __pfx_cont_write_begin+0x10/0x10 [ 118.419724][ T5999] ? folio_unlock+0x101/0x160 [ 118.419735][ T5999] hfs_write_begin+0x66/0xb0 [ 118.419743][ T5999] ? __pfx_hfs_get_block+0x10/0x10 [ 118.419752][ T5999] cont_write_begin+0x2fd/0xb50 [ 118.419764][ T5999] ? __pfx_cont_write_begin+0x10/0x10 [ 118.419777][ T5999] hfs_write_begin+0x66/0xb0 [ 118.419785][ T5999] ? __pfx_hfs_get_block+0x10/0x10 [ 118.419794][ T5999] hfs_file_truncate+0x19d/0xad0 [ 118.419805][ T5999] ? __pfx_hfs_file_truncate+0x10/0x10 [ 118.419814][ T5999] ? unmap_mapping_range+0xde/0x170 [ 118.419825][ T5999] ? __pfx_unmap_mapping_range+0x10/0x10 [ 118.419834][ T5999] ? setattr_prepare+0x1e7/0xac0 [ 118.419845][ T5999] ? truncate_setsize+0xcf/0xf0 [ 118.419854][ T5999] hfs_inode_setattr+0x4a9/0x670 [ 118.419863][ T5999] ? try_break_deleg+0x7c/0x130 [ 118.419873][ T5999] ? __pfx_hfs_inode_setattr+0x10/0x10 [ 118.419883][ T5999] notify_change+0xc18/0xf60 [ 118.419894][ T5999] do_truncate+0x1a4/0x220 [ 118.419905][ T5999] ? __pfx_do_truncate+0x10/0x10 [ 118.419916][ T5999] ? __pfx_do_futex+0x10/0x10 [ 118.419935][ T5999] do_ftruncate+0x4b1/0x570 [ 118.419947][ T5999] ? __pfx_do_ftruncate+0x10/0x10 [ 118.419959][ T5999] __x64_sys_ftruncate+0x92/0xf0 [ 118.419969][ T5999] do_syscall_64+0xfa/0xf80 [ 118.419982][ T5999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.419991][ T5999] ? clear_bhb_loop+0x60/0xb0 [ 118.420002][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.420011][ T5999] RIP: 0033:0x7f001c3cf749 [ 118.420018][ T5999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.420026][ T5999] RSP: 002b:00007fff4eac8e58 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 118.420035][ T5999] RAX: ffffffffffffffda RBX: 00007f001c625fa0 RCX: 00007f001c3cf749 [ 118.420042][ T5999] RDX: 0000000000000000 RSI: 0000000008800000 RDI: 0000000000000004 [ 118.420048][ T5999] RBP: 00007f001c453f91 R08: 0000000000000000 R09: 0000000000000000 [ 118.420054][ T5999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.420060][ T5999] R13: 00007f001c625fa0 R14: 00007f001c625fa0 R15: 0000000000000002 [ 118.420070][ T5999] [ 118.420237][ T5999] Kernel Offset: disabled