Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts. 2026/06/19 05:05:47 parsed 1 programs 2026/06/19 05:05:47 serving rpc on tcp://45225 [ 80.303990][ T5603] cgroup: Unknown subsys name 'net' [ 80.545216][ T5603] cgroup: Unknown subsys name 'cpuset' [ 80.622465][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.105424][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.587146][ T5640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.587417][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.587611][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.588147][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.588532][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.875370][ T5662] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.875518][ T5662] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.875635][ T5662] bridge_slave_0: entered allmulticast mode [ 86.876892][ T5662] bridge_slave_0: entered promiscuous mode [ 86.878656][ T5662] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.878750][ T5662] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.879002][ T5662] bridge_slave_1: entered allmulticast mode [ 86.879946][ T5662] bridge_slave_1: entered promiscuous mode [ 86.938189][ T5662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.940353][ T5662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.954630][ T31] cfg80211: failed to load regulatory.db [ 86.979024][ T5662] team0: Port device team_slave_0 added [ 86.981247][ T5662] team0: Port device team_slave_1 added [ 87.008833][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.008847][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.008867][ T5662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.010045][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.010056][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.010076][ T5662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.120034][ T5662] hsr_slave_0: entered promiscuous mode [ 87.120757][ T5662] hsr_slave_1: entered promiscuous mode [ 87.371578][ T5662] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.414982][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.415801][ T5662] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.464362][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.465186][ T5662] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.504139][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.504853][ T5662] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.544009][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.563482][ T5662] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.563586][ T5662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.563776][ T5662] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.563836][ T5662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.627038][ T5662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.673081][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.712478][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.956389][ T5662] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.960896][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.960987][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.981646][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.983388][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.333889][ T5662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.367988][ T5662] veth0_vlan: entered promiscuous mode [ 88.379385][ T5662] veth1_vlan: entered promiscuous mode [ 88.403464][ T5662] veth0_macvtap: entered promiscuous mode [ 88.406317][ T5662] veth1_macvtap: entered promiscuous mode [ 88.426869][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.431731][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.453636][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.455693][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.455961][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.457994][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.955194][ T77] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.223841][ T77] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.083654][ T77] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.180611][ T3435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.180643][ T3435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.210912][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.210934][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.635612][ T77] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/06/19 05:06:01 executed programs: 0 [ 90.749148][ T4909] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.749435][ T4909] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.749693][ T4909] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.750513][ T4909] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.751038][ T4909] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.152432][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.152596][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.152747][ T5730] bridge_slave_0: entered allmulticast mode [ 91.153799][ T5730] bridge_slave_0: entered promiscuous mode [ 91.155261][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.155371][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.155458][ T5730] bridge_slave_1: entered allmulticast mode [ 91.156415][ T5730] bridge_slave_1: entered promiscuous mode [ 91.216914][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.219565][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.254285][ T5730] team0: Port device team_slave_0 added [ 91.256014][ T5730] team0: Port device team_slave_1 added [ 91.280632][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.280645][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.280666][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.281711][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.281722][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.281741][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.383599][ T5730] hsr_slave_0: entered promiscuous mode [ 91.384408][ T5730] hsr_slave_1: entered promiscuous mode [ 91.384835][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 91.384860][ T5730] Cannot create hsr debugfs directory [ 91.602485][ T77] bridge_slave_1: left allmulticast mode [ 91.602513][ T77] bridge_slave_1: left promiscuous mode [ 91.602698][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.762732][ T77] bridge_slave_0: left allmulticast mode [ 91.762761][ T77] bridge_slave_0: left promiscuous mode [ 91.762932][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.432730][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.512576][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.533321][ T77] bond0 (unregistering): Released all slaves [ 92.577476][ T5255] 8021q: adding VLAN 0 to HW filter on device eth1 [ 92.792122][ T59] Bluetooth: hci0: command tx timeout [ 92.992091][ T77] hsr_slave_0: left promiscuous mode [ 93.033228][ T77] hsr_slave_1: left promiscuous mode [ 93.033814][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.033830][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.072926][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.072956][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.132511][ T77] veth1_macvtap: left promiscuous mode [ 93.132566][ T77] veth0_macvtap: left promiscuous mode [ 93.132672][ T77] veth1_vlan: left promiscuous mode [ 93.132746][ T77] veth0_vlan: left promiscuous mode [ 93.652583][ T77] team0 (unregistering): Port device team_slave_1 removed [ 93.692507][ T77] team0 (unregistering): Port device team_slave_0 removed [ 94.102234][ T5255] 8021q: adding VLAN 0 to HW filter on device eth2 [ 94.871939][ T59] Bluetooth: hci0: command tx timeout [ 95.136968][ T5730] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.175632][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.176427][ T5730] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.224118][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.225013][ T5730] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.254408][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.255371][ T5730] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.304277][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.359198][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.377403][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.388909][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.389008][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.408917][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.409056][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.696167][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.731438][ T5730] veth0_vlan: entered promiscuous mode [ 95.742763][ T5730] veth1_vlan: entered promiscuous mode [ 95.770057][ T5730] veth0_macvtap: entered promiscuous mode [ 95.779933][ T5730] veth1_macvtap: entered promiscuous mode [ 95.797786][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.810916][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.826321][ T1019] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.827106][ T1019] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.827870][ T1019] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.827910][ T1019] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.975223][ T1019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.975247][ T1019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.005062][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.005085][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/06/19 05:06:06 executed programs: 2 [ 96.300394][ T5820] loop0: detected capacity change from 0 to 32768 [ 96.301254][ T5820] ======================================================= [ 96.301254][ T5820] WARNING: The mand mount option has been deprecated and [ 96.301254][ T5820] and is ignored by this kernel. Remove the mand [ 96.301254][ T5820] option from the mount to silence this warning. [ 96.301254][ T5820] ======================================================= [ 96.363315][ T5820] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 96.377371][ T37] audit: type=1800 audit(1781845566.872:2): pid=5820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 96.952353][ T59] Bluetooth: hci0: command tx timeout [ 97.022958][ T5730] ocfs2: Unmounting device (7,0) on (node local) [ 97.262067][ T5826] loop0: detected capacity change from 0 to 32768 [ 97.300148][ T5826] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 97.314904][ T37] audit: type=1800 audit(1781845567.812:3): pid=5826 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.18" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 98.022631][ T5730] ocfs2: Unmounting device (7,0) on (node local) [ 98.260345][ T5832] loop0: detected capacity change from 0 to 32768 [ 98.281710][ T5832] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 98.297401][ T37] audit: type=1800 audit(1781845568.792:4): pid=5832 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.19" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 99.022586][ T5730] ocfs2: Unmounting device (7,0) on (node local) [ 99.032874][ T59] Bluetooth: hci0: command tx timeout [ 99.254129][ T5838] loop0: detected capacity change from 0 to 32768 [ 99.274708][ T5838] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 99.278798][ T37] audit: type=1800 audit(1781845569.772:5): pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.20" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 100.022821][ T5730] ocfs2: Unmounting device (7,0) on (node local) [ 100.255070][ T5844] loop0: detected capacity change from 0 to 32768 [ 100.278294][ T5844] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 100.291953][ T37] audit: type=1800 audit(1781845570.782:6): pid=5844 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.21" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 101.033680][ T5730] ocfs2: Unmounting device (7,0) on (node local) [ 101.264823][ T5850] loop0: detected capacity change from 0 to 32768 [ 101.289149][ T5850] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 101.304160][ T37] audit: type=1800 audit(1781845571.802:7): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.22" name="file1" dev="loop0" ino=17058 res=0 errno=0 2026/06/19 05:06:12 executed programs: 8 [ 102.042640][ T5730] ocfs2: Unmounting device (7,0) on (node local) [ 102.270929][ T5856] loop0: detected capacity change from 0 to 32768 [ 102.294148][ T5856] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 102.298368][ T37] audit: type=1800 audit(1781845572.792:8): pid=5856 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.23" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 103.042596][ T5730] ocfs2: Unmounting device (7,0) on (node local) [ 103.265867][ T5862] loop0: detected capacity change from 0 to 32768 [ 103.284005][ T5862] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 103.288177][ T37] audit: type=1800 audit(1781845573.782:9): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.24" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 104.032551][ T5730] ocfs2: Unmounting device (7,0) on (node local) [ 104.266191][ T5868] loop0: detected capacity change from 0 to 32768 [ 104.291488][ T5868] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 104.305354][ T37] audit: type=1800 audit(1781845574.802:10): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.25" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 105.043192][ T5730] ocfs2: Unmounting device (7,0) on (node local) [ 105.277338][ T5874] loop0: detected capacity change from 0 to 32768 [ 105.310027][ T5874] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 105.322478][ T37] audit: type=1800 audit(1781845575.822:11): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.26" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 106.052935][ T5730] ocfs2: Unmounting device (7,0) on (node local) [ 106.283587][ T5880] loop0: detected capacity change from 0 to 32768 [ 106.306722][ T5880] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 106.322619][ T37] audit: type=1800 audit(1781845576.822:12): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.27" name="file1" dev="loop0" ino=17058 res=0 errno=0 2026/06/19 05:06:17 executed programs: 13 [ 107.052877][ T5730] ocfs2: Unmounting device (7,0) on (node local) [ 107.277069][ T5886] loop0: detected capacity change from 0 to 32768 [ 107.301739][ T5886] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 107.315203][ T37] audit: type=1800 audit(1781845577.812:13): pid=5886 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.28" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 108.042607][ T5730] ocfs2: Unmounting device (7,0) on (node local) [ 108.273499][ T5892] loop0: detected capacity change from 0 to 32768 [ 108.297010][ T5892] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 108.311094][ T37] audit: type=1800 audit(1781845578.802:14): pid=5892 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.29" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 109.052686][ T5730] ocfs2: Unmounting device (7,0) on (node local) [ 109.280934][ T5900] loop0: detected capacity change from 0 to 32768 [ 109.307041][ T5900] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 109.310945][ T37] audit: type=1800 audit(1781845579.802:15): pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.30" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 110.052932][ T5730] ocfs2: Unmounting device (7,0) on (node local) [ 110.284369][ T5908] loop0: detected capacity change from 0 to 32768 [ 110.308194][ T5908] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 110.321540][ T37] audit: type=1800 audit(1781845580.812:16): pid=5908 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.31" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 111.052993][ T5730] ocfs2: Unmounting device (7,0) on (node local) [ 111.287773][ T5914] loop0: detected capacity change from 0 to 32768 [ 111.310537][ T5914] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 111.322219][ T37] audit: type=1800 audit(1781845581.812:17): pid=5914 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.32" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 112.053237][ T5730] ocfs2: Unmounting device (7,0) on (node local) [ 112.283834][ T5921] loop0: detected capacity change from 0 to 32768 [ 112.305448][ T5921] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 112.309963][ T37] audit: type=1800 audit(1781845582.802:18): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.33" name="file1" dev="loop0" ino=17058 res=0 errno=0 2026/06/19 05:06:23 executed programs: 19 [ 113.042653][ T5730] ocfs2: Unmounting device (7,0) on (node local) [ 113.270941][ T5928] loop0: detected capacity change from 0 to 32768 [ 113.295589][ T5928] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 113.299988][ T37] audit: type=1800 audit(1781845583.792:19): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.34" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 114.053980][ T5730] ocfs2: Unmounting device (7,0) on (node local) [ 114.284238][ T5934] loop0: detected capacity change from 0 to 32768 [ 114.307439][ T5934] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 114.311421][ T37] audit: type=1800 audit(1781845584.802:20): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.35" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 115.062719][ T5730] ocfs2: Unmounting device (7,0) on (node local) [ 115.289931][ T5940] loop0: detected capacity change from 0 to 32768 [ 115.314676][ T5940] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 115.318405][ T37] audit: type=1800 audit(1781845585.812:21): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.36" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 115.390288][ T5940] ------------[ cut here ]------------ [ 115.390303][ T5940] kernel BUG at fs/ocfs2/refcounttree.c:2890! [ [ 115.390356][ T5940] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 115.390390][ T5940] CPU: 1 UID: 0 PID: 5940 Comm: syz.0.36 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.390416][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 115.390435][ T5940] RIP: 0010:ocfs2_clear_cow_buffer+0x79/0x80 [ 115.390477][ T5940] Code: 02 75 21 e8 a9 1e 01 fe 48 89 df be 08 00 00 00 e8 ec 26 6a fe f0 80 23 ef 31 c0 5b 41 5e e9 ce f3 5f 07 cc e8 88 1e 01 fe 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 115.390499][ T5940] RSP: 0018:ffffc90003fa6d58 EFLAGS: 00010293 [ 115.390523][ T5940] RAX: ffffffff83c3c8d8 RBX: ffff888059d30120 RCX: ffff88802a683e00 [ 115.390541][ T5940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.390554][ T5940] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 115.390566][ T5940] R10: dffffc0000000000 R11: ffffed100b3a6025 R12: ffff888059d30120 [ 115.390584][ T5940] R13: ffff888059d30000 R14: 0000000000000002 R15: 0000000000001000 [ 115.390599][ T5940] FS: 00007fd052bf66c0(0000) GS:ffff888126250000(0000) knlGS:0000000000000000 [ 115.390617][ T5940] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.390632][ T5940] CR2: 00007fd0535ea540 CR3: 0000000046414000 CR4: 00000000003526f0 [ 115.390651][ T5940] Call Trace: [ 115.390659][ T5940] [ 115.390668][ T5940] walk_page_buffers+0x94/0x1e0 [ 115.390704][ T5940] ? __pfx_ocfs2_clear_cow_buffer+0x10/0x10 [ 115.390729][ T5940] ocfs2_duplicate_clusters_by_page+0x70b/0xcd0 [ 115.390768][ T5940] ? __pfx_ocfs2_duplicate_clusters_by_page+0x10/0x10 [ 115.390793][ T5940] ? ocfs2_start_trans+0x4e2/0x700 [ 115.390819][ T5940] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 115.390845][ T5940] ? __pfx_ocfs2_duplicate_clusters_by_page+0x10/0x10 [ 115.390868][ T5940] ocfs2_replace_cow+0xaf4/0x1c90 [ 115.390907][ T5940] ? __pfx_ocfs2_replace_cow+0x10/0x10 [ 115.390930][ T5940] ? trace_irq_enable+0x3b/0x140 [ 115.390957][ T5940] ? rwbase_write_lock+0x550/0x720 [ 115.390991][ T5940] ? ocfs2_lock_refcount_tree+0x8b1/0x9e0 [ 115.391030][ T5940] ? __pfx_ocfs2_lock_refcount_tree+0x10/0x10 [ 115.391070][ T5940] ? __kasan_kmalloc+0x93/0xb0 [ 115.391094][ T5940] ? __kmalloc_cache_noprof+0x3a2/0x690 [ 115.391118][ T5940] ? ocfs2_refcount_cow+0x539/0xd40 [ 115.391141][ T5940] ocfs2_refcount_cow+0x790/0xd40 [ 115.391164][ T5940] ? rcu_is_watching+0x15/0xb0 [ 115.391196][ T5940] ? __pfx_ocfs2_inode_lock_full_nested+0x10/0x10 [ 115.391235][ T5940] ? __pfx_ocfs2_refcount_cow+0x10/0x10 [ 115.391257][ T5940] ? rcu_is_watching+0x15/0xb0 [ 115.391288][ T5940] ? rcu_is_watching+0x15/0xb0 [ 115.391318][ T5940] ? trace_irq_enable+0x3b/0x140 [ 115.391350][ T5940] ? ocfs2_inode_lock_for_extent_tree+0x72/0x190 [ 115.391386][ T5940] ocfs2_file_write_iter+0xf29/0x1f20 [ 115.391415][ T5940] ? __kmalloc_noprof+0x3e3/0x7a0 [ 115.391436][ T5940] ? iter_file_splice_write+0x1ed/0x1240 [ 115.391470][ T5940] ? direct_splice_actor+0x104/0x160 [ 115.391511][ T5940] ? __pfx_ocfs2_file_write_iter+0x10/0x10 [ 115.391556][ T5940] ? rcu_is_watching+0x15/0xb0 [ 115.391590][ T5940] ? __asan_memset+0x22/0x50 [ 115.391631][ T5940] iter_file_splice_write+0xa36/0x1240 [ 115.391678][ T5940] ? __pfx_iter_file_splice_write+0x10/0x10 [ 115.391715][ T5940] ? lock_acquire+0x5f/0x350 [ 115.391771][ T5940] ? preempt_count_add+0x91/0x190 [ 115.391803][ T5940] ? __pfx_iter_file_splice_write+0x10/0x10 [ 115.391838][ T5940] direct_splice_actor+0x104/0x160 [ 115.391872][ T5940] splice_direct_to_actor+0x586/0xcc0 [ 115.391914][ T5940] ? __pfx_direct_splice_actor+0x10/0x10 [ 115.391947][ T5940] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 115.391986][ T5940] do_splice_direct+0x19b/0x2a0 [ 115.392021][ T5940] ? __pfx_do_splice_direct+0x10/0x10 [ 115.392056][ T5940] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 115.392078][ T5940] ? bpf_lsm_file_permission+0x9/0x20 [ 115.392100][ T5940] ? security_file_permission+0x75/0x260 [ 115.392130][ T5940] ? rw_verify_area+0x209/0x4d0 [ 115.392152][ T5940] do_sendfile+0x540/0x7e0 [ 115.392185][ T5940] ? __pfx_do_sendfile+0x10/0x10 [ 115.392218][ T5940] ? __se_sys_futex+0x3a8/0x450 [ 115.392251][ T5940] __se_sys_sendfile64+0x144/0x1a0 [ 115.392280][ T5940] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 115.392310][ T5940] ? rcu_is_watching+0x15/0xb0 [ 115.392341][ T5940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.392365][ T5940] do_syscall_64+0x174/0x580 [ 115.392392][ T5940] ? trace_irq_disable+0x3b/0x140 [ 115.392417][ T5940] ? clear_bhb_loop+0x40/0x90 [ 115.392443][ T5940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.392464][ T5940] RIP: 0033:0x7fd05359ce59 [ 115.392498][ T5940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.392518][ T5940] RSP: 002b:00007fd052bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 115.392542][ T5940] RAX: ffffffffffffffda RBX: 00007fd053815fa0 RCX: 00007fd05359ce59 [ 115.392558][ T5940] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 115.392571][ T5940] RBP: 00007fd053632e6f R08: 0000000000000000 R09: 0000000000000000 [ 115.392585][ T5940] R10: 0000000020fffe82 R11: 0000000000000246 R12: 0000000000000000 [ 115.392599][ T5940] R13: 00007fd053816038 R14: 00007fd053815fa0 R15: 00007fff6370ad38 [ 115.392624][ T5940] [ 115.392632][ T5940] Modules linked in: [ 115.392714][ T5940] ---[ end trace 0000000000000000 ]--- [ 115.401489][ T5940] RIP: 0010:ocfs2_clear_cow_buffer+0x79/0x80 [ 115.401634][ T5940] Code: 02 75 21 e8 a9 1e 01 fe 48 89 df be 08 00 00 00 e8 ec 26 6a fe f0 80 23 ef 31 c0 5b 41 5e e9 ce f3 5f 07 cc e8 88 1e 01 fe 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 115.401682][ T5940] RSP: 0018:ffffc90003fa6d58 EFLAGS: 00010293 [ 115.401737][ T5940] RAX: ffffffff83c3c8d8 RBX: ffff888059d30120 RCX: ffff88802a683e00 [ 115.401774][ T5940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.401815][ T5940] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 115.404922][ T5940] R10: dffffc0000000000 R11: ffffed100b3a6025 R12: ffff888059d30120 [ 115.404987][ T5940] R13: ffff888059d30000 R14: 0000000000000002 R15: 0000000000001000 [ 115.405073][ T5940] FS: 00007fd052bf66c0(0000) GS:ffff888126250000(0000) knlGS:0000000000000000 [ 115.405105][ T5940] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.405120][ T5940] CR2: 00007fd0535ea540 CR3: 0000000046414000 CR4: 00000000003526f0 [ 115.405142][ T5940] Kernel panic - not syncing: Fatal exception [ 115.405364][ T5940] Kernel Offset: disabled