Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. 2026/06/28 17:41:13 parsed 1 programs 2026/06/28 17:41:13 serving rpc on tcp://44391 syzkaller login: [ 74.280881][ T4199] cgroup: Unknown subsys name 'net' [ 74.414084][ T4199] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.012720][ T4199] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 77.402814][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.411214][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.424192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.444814][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.453705][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.461782][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.380864][ T4236] chnl_net:caif_netlink_parms(): no params data found [ 78.454276][ T4236] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.462233][ T4236] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.472099][ T4236] device bridge_slave_0 entered promiscuous mode [ 78.482437][ T4236] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.491361][ T4236] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.499840][ T4236] device bridge_slave_1 entered promiscuous mode [ 78.530287][ T4236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.542358][ T4236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.575942][ T4236] team0: Port device team_slave_0 added [ 78.591207][ T4236] team0: Port device team_slave_1 added [ 78.613604][ T4236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.622178][ T4236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.650035][ T4236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.663663][ T4236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.672246][ T4236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.700224][ T4236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.741744][ T4236] device hsr_slave_0 entered promiscuous mode [ 78.750592][ T4236] device hsr_slave_1 entered promiscuous mode [ 78.895761][ T4236] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.911012][ T4236] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.922793][ T4236] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.933216][ T4236] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.965284][ T4236] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.972713][ T4236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.985405][ T4236] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.992732][ T4236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.065344][ T4236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.083040][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.094221][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.104074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 79.118479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.126621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.138859][ T4236] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.153059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.162414][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.169626][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.194457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.205578][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.213058][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.242530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.252360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.270554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.279672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.289429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.301840][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.453555][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.461949][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.477319][ T4236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.503038][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.513541][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.536169][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.547130][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.559928][ T4236] device veth0_vlan entered promiscuous mode [ 79.568912][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.578084][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.593783][ T4236] device veth1_vlan entered promiscuous mode [ 79.621967][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.630972][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.640830][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.649707][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.661061][ T4236] device veth0_macvtap entered promiscuous mode [ 79.673981][ T4236] device veth1_macvtap entered promiscuous mode [ 79.696302][ T4236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.705689][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.717204][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.725378][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.734648][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.750028][ T4236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.759781][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.769682][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.782655][ T4236] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.793121][ T4236] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.802509][ T4236] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.813515][ T4236] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.131345][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.503621][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.033521][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.124785][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/06/28 17:41:27 executed programs: 0 [ 86.318315][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 86.422043][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.429487][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.440432][ T4330] device bridge_slave_0 entered promiscuous mode [ 86.450441][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.459023][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.469910][ T4330] device bridge_slave_1 entered promiscuous mode [ 86.527489][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.541734][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.572112][ T4330] team0: Port device team_slave_0 added [ 86.583214][ T4330] team0: Port device team_slave_1 added [ 86.638492][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.645545][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.671943][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.687742][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.694745][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.721078][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.781836][ T4330] device hsr_slave_0 entered promiscuous mode [ 86.799124][ T1106] cfg80211: failed to load regulatory.db [ 86.836920][ T4330] device hsr_slave_1 entered promiscuous mode [ 86.846917][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.855033][ T4330] Cannot create hsr debugfs directory [ 87.044406][ T144] device hsr_slave_0 left promiscuous mode [ 87.062968][ T144] device hsr_slave_1 left promiscuous mode [ 87.072796][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.095888][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.107792][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.115264][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.137613][ T144] device bridge_slave_1 left promiscuous mode [ 87.144894][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.174065][ T144] device bridge_slave_0 left promiscuous mode [ 87.198853][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.224604][ T144] device veth1_macvtap left promiscuous mode [ 87.231159][ T144] device veth0_macvtap left promiscuous mode [ 87.238701][ T144] device veth1_vlan left promiscuous mode [ 87.244799][ T144] device veth0_vlan left promiscuous mode [ 87.479662][ T144] team0 (unregistering): Port device team_slave_1 removed [ 87.498618][ T144] team0 (unregistering): Port device team_slave_0 removed [ 87.513379][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.529012][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.584757][ T144] bond0 (unregistering): Released all slaves [ 88.147986][ T1106] Bluetooth: hci0: command 0x0409 tx timeout [ 88.224535][ T4330] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.239335][ T4330] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.257904][ T4330] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.279602][ T4330] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.382778][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.398172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.418181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.429515][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.450061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.467611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.496650][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.503802][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.527108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.550190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.567351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.586622][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.593740][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.623313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.652552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.671162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.688438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.718895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.727964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.738479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.748154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.759384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.768082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.778482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.788923][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.931425][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.949720][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.982517][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.044473][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.054110][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.091032][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.107851][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.129623][ T4330] device veth0_vlan entered promiscuous mode [ 89.137195][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.157066][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.183146][ T4330] device veth1_vlan entered promiscuous mode [ 89.231549][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.241125][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.257419][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.277203][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.299434][ T4330] device veth0_macvtap entered promiscuous mode [ 89.311567][ T4330] device veth1_macvtap entered promiscuous mode [ 89.329436][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.339032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.357515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.369011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.387961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.412620][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.429110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.447480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.470997][ T4330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.486658][ T4330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.495508][ T4330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.526504][ T4330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.648534][ T1274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.668384][ T1274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.676137][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.726235][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.738604][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.749165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.237964][ T1106] Bluetooth: hci0: command 0x041b tx timeout [ 90.241571][ T4422] loop0: detected capacity change from 0 to 32768 [ 90.267088][ T4422] ======================================================= [ 90.267088][ T4422] WARNING: The mand mount option has been deprecated and [ 90.267088][ T4422] and is ignored by this kernel. Remove the mand [ 90.267088][ T4422] option from the mount to silence this warning. [ 90.267088][ T4422] ======================================================= [ 90.421064][ T4422] JBD2: Ignoring recovery information on journal [ 90.583588][ T4422] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 90.689814][ T26] audit: type=1800 audit(1782668492.388:2): pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="bus" dev="loop0" ino=17058 res=0 errno=0 2026/06/28 17:41:33 executed programs: 3 [ 91.432178][ T4422] (syz.0.17,4422,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 91.447958][ T4422] syz.0.17 (4422) used greatest stack depth: 17808 bytes left [ 91.492110][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 91.978926][ T4477] loop0: detected capacity change from 0 to 32768 [ 92.060994][ T4477] JBD2: Ignoring recovery information on journal [ 92.089555][ T4477] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 92.104930][ T26] audit: type=1800 audit(1782668493.798:3): pid=4477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 92.316525][ T1106] Bluetooth: hci0: command 0x040f tx timeout [ 92.499474][ T4477] (syz.0.18,4477,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 92.522220][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 92.982475][ T4490] loop0: detected capacity change from 0 to 32768 [ 93.080618][ T4490] JBD2: Ignoring recovery information on journal [ 93.188212][ T4490] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 93.200955][ T26] audit: type=1800 audit(1782668494.898:4): pid=4490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.19" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 93.648140][ T4490] (syz.0.19,4490,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 93.680669][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 93.993061][ T4494] loop0: detected capacity change from 0 to 32768 [ 94.063771][ T4494] JBD2: Ignoring recovery information on journal [ 94.121437][ T4494] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 94.160727][ T26] audit: type=1800 audit(1782668495.858:5): pid=4494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.20" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 94.386554][ T4219] Bluetooth: hci0: command 0x0419 tx timeout [ 94.452535][ T4494] (syz.0.20,4494,1):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 94.469006][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 94.775142][ T4498] loop0: detected capacity change from 0 to 32768 [ 94.867411][ T4498] JBD2: Ignoring recovery information on journal [ 94.910019][ T4498] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 94.923715][ T26] audit: type=1800 audit(1782668496.618:6): pid=4498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.21" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 95.223021][ T4498] (syz.0.21,4498,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 95.238783][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 95.560698][ T4502] loop0: detected capacity change from 0 to 32768 [ 95.629715][ T4502] JBD2: Ignoring recovery information on journal [ 95.681086][ T4502] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 95.716028][ T26] audit: type=1800 audit(1782668497.408:7): pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.22" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 96.031115][ T4502] (syz.0.22,4502,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 96.045555][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 96.336558][ T4506] loop0: detected capacity change from 0 to 32768 [ 96.425392][ T4506] JBD2: Ignoring recovery information on journal [ 96.455266][ T4506] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 96.471819][ T26] audit: type=1800 audit(1782668498.168:8): pid=4506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.23" name="bus" dev="loop0" ino=17058 res=0 errno=0 2026/06/28 17:41:38 executed programs: 9 [ 96.755576][ T4506] (syz.0.23,4506,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 96.771151][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 97.080125][ T4510] loop0: detected capacity change from 0 to 32768 [ 97.143465][ T4510] JBD2: Ignoring recovery information on journal [ 97.171669][ T4510] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 97.185085][ T26] audit: type=1800 audit(1782668498.878:9): pid=4510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.24" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 97.474151][ T4510] (syz.0.24,4510,1):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 97.489309][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 97.802363][ T4514] loop0: detected capacity change from 0 to 32768 [ 97.895518][ T4514] JBD2: Ignoring recovery information on journal [ 97.925269][ T4514] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 97.939274][ T26] audit: type=1800 audit(1782668499.638:10): pid=4514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.25" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 98.237572][ T4514] (syz.0.25,4514,1):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 98.252939][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 98.563319][ T4518] loop0: detected capacity change from 0 to 32768 [ 98.618356][ T4518] JBD2: Ignoring recovery information on journal [ 98.646858][ T4518] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 98.659321][ T26] audit: type=1800 audit(1782668500.358:11): pid=4518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.26" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 98.955059][ T4518] (syz.0.26,4518,1):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 98.969211][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 99.250653][ T4522] loop0: detected capacity change from 0 to 32768 [ 99.314406][ T4522] JBD2: Ignoring recovery information on journal [ 99.345494][ T4522] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 99.359800][ T26] audit: type=1800 audit(1782668501.058:12): pid=4522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.27" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 99.657945][ T4522] (syz.0.27,4522,1):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 99.672670][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 99.970260][ T4526] loop0: detected capacity change from 0 to 32768 [ 100.037887][ T4526] JBD2: Ignoring recovery information on journal [ 100.067262][ T4526] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 100.081615][ T26] audit: type=1800 audit(1782668501.778:13): pid=4526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.28" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 100.412235][ T4526] (syz.0.28,4526,1):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 100.426719][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 100.721377][ T4530] loop0: detected capacity change from 0 to 32768 [ 100.788613][ T4530] JBD2: Ignoring recovery information on journal [ 100.820149][ T4530] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 100.834206][ T26] audit: type=1800 audit(1782668502.528:14): pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.29" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 101.144281][ T4530] (syz.0.29,4530,1):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 101.157875][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 101.462380][ T4534] loop0: detected capacity change from 0 to 32768 [ 101.535457][ T4534] JBD2: Ignoring recovery information on journal [ 101.563953][ T4534] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 101.577837][ T26] audit: type=1800 audit(1782668503.278:15): pid=4534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.30" name="bus" dev="loop0" ino=17058 res=0 errno=0 2026/06/28 17:41:43 executed programs: 16 [ 101.879778][ T4534] (syz.0.30,4534,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 101.893272][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 102.207962][ T4538] loop0: detected capacity change from 0 to 32768 [ 102.268288][ T4538] JBD2: Ignoring recovery information on journal [ 102.300820][ T4538] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 102.315876][ T26] audit: type=1800 audit(1782668504.018:16): pid=4538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.31" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 102.639649][ T4538] (syz.0.31,4538,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 102.654370][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 102.951657][ T4542] loop0: detected capacity change from 0 to 32768 [ 103.010207][ T4542] JBD2: Ignoring recovery information on journal [ 103.044745][ T4542] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 103.059175][ T26] audit: type=1800 audit(1782668504.758:17): pid=4542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.32" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 103.357825][ T4542] (syz.0.32,4542,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 103.372299][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 103.708189][ T4546] loop0: detected capacity change from 0 to 32768 [ 103.762745][ T4546] JBD2: Ignoring recovery information on journal [ 103.791431][ T4546] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 103.805336][ T26] audit: type=1800 audit(1782668505.498:18): pid=4546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.33" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 104.101510][ T4546] (syz.0.33,4546,1):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 104.116176][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 104.391206][ T4550] loop0: detected capacity change from 0 to 32768 [ 104.414960][ T4550] JBD2: Ignoring recovery information on journal [ 104.469808][ T4550] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 104.488014][ T26] audit: type=1800 audit(1782668506.188:19): pid=4550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.34" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 104.751380][ T4550] (syz.0.34,4550,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 104.765006][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 105.092598][ T4554] loop0: detected capacity change from 0 to 32768 [ 105.169221][ T4554] JBD2: Ignoring recovery information on journal [ 105.200728][ T4554] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 105.214364][ T26] audit: type=1800 audit(1782668506.908:20): pid=4554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.35" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 105.507140][ T4554] (syz.0.35,4554,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 105.521545][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 105.827983][ T4558] loop0: detected capacity change from 0 to 32768 [ 105.892535][ T4558] JBD2: Ignoring recovery information on journal [ 105.920650][ T4558] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 105.933392][ T26] audit: type=1800 audit(1782668507.638:21): pid=4558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.36" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 106.227999][ T4558] (syz.0.36,4558,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 106.242271][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 106.555111][ T4562] loop0: detected capacity change from 0 to 32768 [ 106.591091][ T4562] JBD2: Ignoring recovery information on journal [ 106.620525][ T4562] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 106.634409][ T26] audit: type=1800 audit(1782668508.328:22): pid=4562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.37" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 106.660007][ T4562] [ 106.662387][ T4562] ====================================================== [ 106.669467][ T4562] WARNING: possible circular locking dependency detected [ 106.676519][ T4562] syzkaller #0 Not tainted [ 106.680950][ T4562] ------------------------------------------------------ [ 106.687967][ T4562] syz.0.37/4562 is trying to acquire lock: [ 106.693767][ T4562] ffff88807b971488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 106.704782][ T4562] [ 106.704782][ T4562] but task is already holding lock: [ 106.712172][ T4562] ffff88805ef23120 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_dio_wr_get_block+0x90c/0x1810 [ 106.723267][ T4562] [ 106.723267][ T4562] which lock already depends on the new lock. [ 106.723267][ T4562] [ 106.733697][ T4562] [ 106.733697][ T4562] the existing dependency chain (in reverse order) is: [ 106.742743][ T4562] [ 106.742743][ T4562] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 106.751572][ T4562] down_read+0x44/0x2e0 [ 106.756307][ T4562] ocfs2_read_virt_blocks+0x240/0x8e0 [ 106.762253][ T4562] ocfs2_find_entry+0x39d/0x1f90 [ 106.767759][ T4562] ocfs2_find_files_on_disk+0xdb/0x2f0 [ 106.773890][ T4562] ocfs2_lookup_ino_from_name+0x4f/0xf0 [ 106.779997][ T4562] ocfs2_get_system_file_inode+0x33f/0x7f0 [ 106.786342][ T4562] ocfs2_init_global_system_inodes+0x315/0x6e0 [ 106.793089][ T4562] ocfs2_fill_super+0x4032/0x50c0 [ 106.798688][ T4562] mount_bdev+0x28a/0x3c0 [ 106.803563][ T4562] legacy_get_tree+0xe6/0x180 [ 106.808778][ T4562] vfs_get_tree+0x88/0x270 [ 106.813735][ T4562] do_new_mount+0x247/0xa40 [ 106.819052][ T4562] __se_sys_mount+0x2e3/0x3d0 [ 106.824275][ T4562] do_syscall_64+0x4c/0xa0 [ 106.829243][ T4562] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.835706][ T4562] [ 106.835706][ T4562] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}: [ 106.844056][ T4562] __lock_acquire+0x2c66/0x7b50 [ 106.849442][ T4562] lock_acquire+0x19e/0x400 [ 106.854494][ T4562] __mutex_lock_common+0x1e5/0x2400 [ 106.860239][ T4562] mutex_lock_nested+0x17/0x20 [ 106.865547][ T4562] ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 106.871909][ T4562] ocfs2_reserve_local_alloc_bits+0xfb/0x2630 [ 106.878586][ T4562] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 106.885461][ T4562] ocfs2_lock_allocators+0x2ce/0x5f0 [ 106.891285][ T4562] ocfs2_write_begin_nolock+0x1b97/0x44b0 [ 106.897537][ T4562] ocfs2_dio_wr_get_block+0xba4/0x1810 [ 106.903661][ T4562] __blockdev_direct_IO+0x142d/0x3b20 [ 106.909568][ T4562] ocfs2_direct_IO+0x233/0x2a0 [ 106.914860][ T4562] generic_file_direct_write+0x222/0x470 [ 106.921017][ T4562] __generic_file_write_iter+0x2b2/0x4e0 [ 106.927179][ T4562] ocfs2_file_write_iter+0x171a/0x1ee0 [ 106.933163][ T4562] do_iter_readv_writev+0x47d/0x5f0 [ 106.938915][ T4562] do_iter_write+0x1f8/0x7a0 [ 106.944037][ T4562] iter_file_splice_write+0x6be/0xcf0 [ 106.950102][ T4562] direct_splice_actor+0xe1/0x130 [ 106.955660][ T4562] splice_direct_to_actor+0x4e8/0xc00 [ 106.961716][ T4562] do_splice_direct+0x1d4/0x2f0 [ 106.967107][ T4562] do_sendfile+0x524/0xe30 [ 106.972053][ T4562] __se_sys_sendfile64+0x141/0x1a0 [ 106.977691][ T4562] do_syscall_64+0x4c/0xa0 [ 106.982633][ T4562] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.989055][ T4562] [ 106.989055][ T4562] other info that might help us debug this: [ 106.989055][ T4562] [ 106.999281][ T4562] Possible unsafe locking scenario: [ 106.999281][ T4562] [ 107.006736][ T4562] CPU0 CPU1 [ 107.012102][ T4562] ---- ---- [ 107.017473][ T4562] lock(&ocfs2_file_ip_alloc_sem_key); [ 107.023026][ T4562] lock(&osb->system_file_mutex); [ 107.030674][ T4562] lock(&ocfs2_file_ip_alloc_sem_key); [ 107.038865][ T4562] lock(&osb->system_file_mutex); [ 107.043988][ T4562] [ 107.043988][ T4562] *** DEADLOCK *** [ 107.043988][ T4562] [ 107.052160][ T4562] 3 locks held by syz.0.37/4562: [ 107.057123][ T4562] #0: ffff8880237cc460 (sb_writers#13){.+.+}-{0:0}, at: do_sendfile+0x4ff/0xe30 [ 107.066311][ T4562] #1: ffff88805ef23488 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x437/0x1ee0 [ 107.077640][ T4562] #2: ffff88805ef23120 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_dio_wr_get_block+0x90c/0x1810 [ 107.089267][ T4562] [ 107.089267][ T4562] stack backtrace: [ 107.095265][ T4562] CPU: 1 PID: 4562 Comm: syz.0.37 Not tainted syzkaller #0 [ 107.102467][ T4562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 107.112627][ T4562] Call Trace: [ 107.115911][ T4562] [ 107.118841][ T4562] dump_stack_lvl+0x188/0x250 [ 107.123529][ T4562] ? load_image+0x410/0x410 [ 107.128046][ T4562] ? show_regs_print_info+0x20/0x20 [ 107.133272][ T4562] ? print_circular_bug+0x12b/0x1a0 [ 107.138493][ T4562] check_noncircular+0x296/0x330 [ 107.143475][ T4562] ? add_chain_block+0x9b0/0x9b0 [ 107.148411][ T4562] ? lockdep_lock+0xf1/0x1f0 [ 107.153023][ T4562] ? mark_lock+0x94/0x320 [ 107.157352][ T4562] ? _find_first_zero_bit+0xd1/0xf0 [ 107.162560][ T4562] __lock_acquire+0x2c66/0x7b50 [ 107.167429][ T4562] ? mark_lock+0x94/0x320 [ 107.172033][ T4562] ? verify_lock_unused+0x140/0x140 [ 107.177255][ T4562] ? __lock_acquire+0x13dc/0x7b50 [ 107.182294][ T4562] ? mark_lock+0x94/0x320 [ 107.186628][ T4562] ? __lock_acquire+0x13dc/0x7b50 [ 107.191663][ T4562] lock_acquire+0x19e/0x400 [ 107.196174][ T4562] ? ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 107.202165][ T4562] ? __might_sleep+0xf0/0xf0 [ 107.206768][ T4562] ? read_lock_is_recursive+0x10/0x10 [ 107.212170][ T4562] ? rcu_is_watching+0x11/0xa0 [ 107.216942][ T4562] ? lock_release+0xb5/0x8a0 [ 107.221562][ T4562] __mutex_lock_common+0x1e5/0x2400 [ 107.226786][ T4562] ? ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 107.232817][ T4562] ? ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 107.239200][ T4562] ? ocfs2_get_system_file_inode+0x14c/0x7f0 [ 107.245218][ T4562] ? mutex_lock_io_nested+0x60/0x60 [ 107.250426][ T4562] ? __rwlock_init+0x140/0x140 [ 107.255196][ T4562] ? do_raw_spin_unlock+0x11d/0x230 [ 107.260407][ T4562] mutex_lock_nested+0x17/0x20 [ 107.265272][ T4562] ocfs2_get_system_file_inode+0x1a4/0x7f0 [ 107.271086][ T4562] ? stack_trace_snprint+0xe0/0xe0 [ 107.276204][ T4562] ? ocfs2_fast_symlink_readpage+0x3f0/0x3f0 [ 107.282189][ T4562] ? lockdep_unlock+0x143/0x2e0 [ 107.287062][ T4562] ? lockdep_lock+0x1f0/0x1f0 [ 107.291744][ T4562] ? add_lock_to_list+0x18d/0x280 [ 107.296860][ T4562] ? __lock_acquire+0x2844/0x7b50 [ 107.301914][ T4562] ocfs2_reserve_local_alloc_bits+0xfb/0x2630 [ 107.307996][ T4562] ? verify_lock_unused+0x140/0x140 [ 107.313227][ T4562] ? ocfs2_complete_local_alloc_recovery+0x580/0x580 [ 107.319955][ T4562] ? ocfs2_reserve_clusters_with_limit+0xda/0xc10 [ 107.326421][ T4562] ? ocfs2_lock_allocators+0x2ce/0x5f0 [ 107.332035][ T4562] ? ocfs2_write_begin_nolock+0x1b97/0x44b0 [ 107.337973][ T4562] ? ocfs2_dio_wr_get_block+0xba4/0x1810 [ 107.343627][ T4562] ? __blockdev_direct_IO+0x142d/0x3b20 [ 107.349193][ T4562] ? generic_file_direct_write+0x222/0x470 [ 107.355033][ T4562] ? __generic_file_write_iter+0x2b2/0x4e0 [ 107.360857][ T4562] ? ocfs2_file_write_iter+0x171a/0x1ee0 [ 107.366512][ T4562] ? do_iter_readv_writev+0x47d/0x5f0 [ 107.371939][ T4562] ? ocfs2_alloc_should_use_local+0x13a/0x2d0 [ 107.378018][ T4562] ? __lock_acquire+0x7b50/0x7b50 [ 107.383102][ T4562] ? do_raw_spin_lock+0x128/0x2f0 [ 107.388142][ T4562] ? __rwlock_init+0x140/0x140 [ 107.392919][ T4562] ? do_raw_spin_unlock+0x11d/0x230 [ 107.398129][ T4562] ? _raw_spin_unlock+0x24/0x40 [ 107.402990][ T4562] ? ocfs2_alloc_should_use_local+0x13a/0x2d0 [ 107.409068][ T4562] ? ocfs2_reserve_clusters_with_limit+0x15d/0xc10 [ 107.415621][ T4562] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 107.422009][ T4562] ? ocfs2_reserve_clusters+0x30/0x30 [ 107.427430][ T4562] ? __kasan_kmalloc+0xc6/0xe0 [ 107.432236][ T4562] ? rcu_is_watching+0x11/0xa0 [ 107.437014][ T4562] ? ocfs2_num_free_extents+0x2eb/0x5b0 [ 107.442578][ T4562] ? ocfs2_validate_extent_block+0x570/0x570 [ 107.448573][ T4562] ? do_splice_direct+0x1d4/0x2f0 [ 107.453606][ T4562] ? __se_sys_sendfile64+0x141/0x1a0 [ 107.458899][ T4562] ? do_syscall_64+0x4c/0xa0 [ 107.463517][ T4562] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.469629][ T4562] ocfs2_lock_allocators+0x2ce/0x5f0 [ 107.474934][ T4562] ? _ocfs2_clear_bit+0x40/0x40 [ 107.479798][ T4562] ? do_raw_spin_lock+0x128/0x2f0 [ 107.484921][ T4562] ? ocfs2_write_begin_nolock+0xf78/0x44b0 [ 107.490741][ T4562] ? rcu_is_watching+0x11/0xa0 [ 107.495543][ T4562] ? ocfs2_write_begin_nolock+0xf78/0x44b0 [ 107.501474][ T4562] ? kfree+0x4a/0x2a0 [ 107.505481][ T4562] ocfs2_write_begin_nolock+0x1b97/0x44b0 [ 107.511282][ T4562] ? ocfs2_size_fits_inline_data+0x90/0x90 [ 107.517142][ T4562] ? __lock_acquire+0x2844/0x7b50 [ 107.522225][ T4562] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 107.528250][ T4562] ? ocfs2_allocate_extend_trans+0x5d0/0x5d0 [ 107.534276][ T4562] ? ocfs2_orphan_add+0x11f0/0x11f0 [ 107.539496][ T4562] ? rwsem_write_trylock+0x135/0x1c0 [ 107.544817][ T4562] ? clear_nonspinnable+0x60/0x60 [ 107.549903][ T4562] ocfs2_dio_wr_get_block+0xba4/0x1810 [ 107.555396][ T4562] ? ocfs2_lock_get_block+0x50/0x50 [ 107.560633][ T4562] ? lockdep_init_map_type+0x98/0x900 [ 107.566053][ T4562] ? lockdep_softirqs_off+0x430/0x430 [ 107.571453][ T4562] ? slab_post_alloc_hook+0x68/0x380 [ 107.576787][ T4562] ? iov_iter_advance+0x2a2/0x390 [ 107.581833][ T4562] ? iov_iter_bvec_advance+0x16e/0x230 [ 107.587307][ T4562] ? ocfs2_lock_get_block+0x50/0x50 [ 107.592643][ T4562] __blockdev_direct_IO+0x142d/0x3b20 [ 107.598045][ T4562] ? sb_init_dio_done_wq+0x80/0x80 [ 107.603170][ T4562] ? ocfs2_lock_get_block+0x50/0x50 [ 107.608378][ T4562] ? invalidate_mapping_pagevec+0x30/0x30 [ 107.614141][ T4562] ? filemap_write_and_wait_range+0x2b0/0x3b0 [ 107.620226][ T4562] ? rcu_is_watching+0x11/0xa0 [ 107.625006][ T4562] ? __mark_inode_dirty+0x7c7/0xc90 [ 107.630226][ T4562] ? ocfs2_lock_get_block+0x50/0x50 [ 107.635434][ T4562] ocfs2_direct_IO+0x233/0x2a0 [ 107.640419][ T4562] generic_file_direct_write+0x222/0x470 [ 107.646174][ T4562] __generic_file_write_iter+0x2b2/0x4e0 [ 107.652012][ T4562] ? ocfs2_inode_unlock+0x11a/0x140 [ 107.657254][ T4562] ocfs2_file_write_iter+0x171a/0x1ee0 [ 107.662939][ T4562] ? ocfs2_file_read_iter+0xa80/0xa80 [ 107.668504][ T4562] ? rcu_lock_release+0x5/0x20 [ 107.673291][ T4562] ? __lock_acquire+0x7b50/0x7b50 [ 107.678341][ T4562] ? aa_file_perm+0x38b/0xe80 [ 107.683066][ T4562] ? __kasan_kmalloc+0xaf/0xe0 [ 107.687840][ T4562] ? splice_direct_to_actor+0x4e8/0xc00 [ 107.693394][ T4562] do_iter_readv_writev+0x47d/0x5f0 [ 107.698632][ T4562] ? aa_path_link+0x8a0/0x8a0 [ 107.703666][ T4562] ? generic_file_rw_checks+0x280/0x280 [ 107.709238][ T4562] ? common_file_perm+0x171/0x1c0 [ 107.714340][ T4562] ? fsnotify_perm+0x5d/0x560 [ 107.719054][ T4562] ? security_file_permission+0x75/0xa0 [ 107.724625][ T4562] do_iter_write+0x1f8/0x7a0 [ 107.729257][ T4562] ? memset+0x1e/0x40 [ 107.733265][ T4562] ? iov_iter_bvec+0xb4/0x170 [ 107.737971][ T4562] iter_file_splice_write+0x6be/0xcf0 [ 107.743358][ T4562] ? splice_from_pipe+0x180/0x180 [ 107.748388][ T4562] ? generic_file_splice_read+0x483/0x5f0 [ 107.754113][ T4562] ? splice_shrink_spd+0xc0/0xc0 [ 107.759077][ T4562] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 107.765675][ T4562] ? splice_from_pipe+0x180/0x180 [ 107.770702][ T4562] direct_splice_actor+0xe1/0x130 [ 107.775770][ T4562] splice_direct_to_actor+0x4e8/0xc00 [ 107.781159][ T4562] ? direct_file_splice_eof+0xa0/0xa0 [ 107.786562][ T4562] ? pipe_to_sendpage+0x320/0x320 [ 107.791589][ T4562] ? common_file_perm+0x171/0x1c0 [ 107.796613][ T4562] ? fsnotify_perm+0x5d/0x560 [ 107.801472][ T4562] ? security_file_permission+0x75/0xa0 [ 107.807143][ T4562] do_splice_direct+0x1d4/0x2f0 [ 107.812020][ T4562] ? splice_direct_to_actor+0xc00/0xc00 [ 107.817792][ T4562] ? rcu_read_lock_any_held+0xb0/0x130 [ 107.823269][ T4562] ? do_splice_direct+0x2f0/0x2f0 [ 107.828306][ T4562] ? common_file_perm+0x171/0x1c0 [ 107.833447][ T4562] do_sendfile+0x524/0xe30 [ 107.837894][ T4562] ? do_pwritev+0x3a0/0x3a0 [ 107.842412][ T4562] ? __lock_acquire+0x7b50/0x7b50 [ 107.847622][ T4562] __se_sys_sendfile64+0x141/0x1a0 [ 107.852765][ T4562] ? lock_chain_count+0x20/0x20 [ 107.857665][ T4562] ? __x64_sys_sendfile64+0xa0/0xa0 [ 107.862878][ T4562] ? lockdep_hardirqs_on+0x94/0x140 [ 107.868121][ T4562] do_syscall_64+0x4c/0xa0 [ 107.872540][ T4562] ? clear_bhb_loop+0x30/0x80 [ 107.877224][ T4562] ? clear_bhb_loop+0x30/0x80 [ 107.881903][ T4562] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.887816][ T4562] RIP: 0033:0x7fa0d5ac5e59 [ 107.892238][ T4562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.911935][ T4562] RSP: 002b:00007ffe8a081a78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 107.920370][ T4562] RAX: ffffffffffffffda RBX: 00007fa0d5d3efa0 RCX: 00007fa0d5ac5e59 [ 107.928350][ T4562] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 107.936471][ T4562] RBP: 00007fa0d5b5be6f R08: 0000000000000000 R09: 0000000000000000 [ 107.944690][ T4562] R10: 0000000000fffe82 R11: 0000000000000246 R12: 0000000000000000 [ 107.953054][ T4562] R13: 00007fa0d5d3efac R14: 00007fa0d5d3efa0 R15: 00007fa0d5d3efa0 [ 107.961085][ T4562] 2026/06/28 17:41:49 executed programs: 23 [ 108.171769][ T4562] (syz.0.37,4562,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 108.178538][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 108.432533][ T4570] loop0: detected capacity change from 0 to 32768 [ 108.497809][ T4570] JBD2: Ignoring recovery information on journal [ 108.519792][ T4570] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 108.531484][ T26] audit: type=1800 audit(1782668510.228:23): pid=4570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.38" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 108.741688][ T4570] (syz.0.38,4570,1):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 108.747077][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 108.995688][ T4576] loop0: detected capacity change from 0 to 32768 [ 109.081887][ T4576] JBD2: Ignoring recovery information on journal [ 109.104165][ T4576] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 109.115788][ T26] audit: type=1800 audit(1782668510.818:24): pid=4576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.39" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 109.341542][ T4576] (syz.0.39,4576,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 109.348649][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 109.587608][ T4580] loop0: detected capacity change from 0 to 32768 [ 109.649833][ T4580] JBD2: Ignoring recovery information on journal [ 109.675024][ T4580] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 109.704940][ T26] audit: type=1800 audit(1782668511.398:25): pid=4580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.40" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 109.925902][ T4580] (syz.0.40,4580,1):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 109.931793][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 110.154843][ T4584] loop0: detected capacity change from 0 to 32768 [ 110.198064][ T4584] JBD2: Ignoring recovery information on journal [ 110.219912][ T4584] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 110.231263][ T26] audit: type=1800 audit(1782668511.928:26): pid=4584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.41" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 110.426492][ T4584] (syz.0.41,4584,1):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 110.432597][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 110.673214][ T4588] loop0: detected capacity change from 0 to 32768 [ 110.718405][ T4588] JBD2: Ignoring recovery information on journal [ 110.740300][ T4588] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 110.751707][ T26] audit: type=1800 audit(1782668512.448:27): pid=4588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.42" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 110.951166][ T4588] (syz.0.42,4588,1):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 110.958281][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 111.195299][ T4592] loop0: detected capacity change from 0 to 32768 [ 111.247980][ T4592] JBD2: Ignoring recovery information on journal [ 111.271516][ T4592] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 111.282815][ T26] audit: type=1800 audit(1782668512.978:28): pid=4592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.43" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 111.484437][ T4592] (syz.0.43,4592,1):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 111.490583][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 111.750900][ T4596] loop0: detected capacity change from 0 to 32768 [ 111.798587][ T4596] JBD2: Ignoring recovery information on journal [ 111.820403][ T4596] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 111.831742][ T26] audit: type=1800 audit(1782668513.528:29): pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.44" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 112.051558][ T4596] (syz.0.44,4596,1):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 112.057404][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 112.306105][ T4600] loop0: detected capacity change from 0 to 32768 [ 112.355405][ T4600] JBD2: Ignoring recovery information on journal [ 112.378398][ T4600] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 112.389646][ T26] audit: type=1800 audit(1782668514.088:30): pid=4600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.45" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 112.604838][ T4600] (syz.0.45,4600,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 112.610871][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 112.847626][ T4604] loop0: detected capacity change from 0 to 32768 [ 112.898193][ T4604] JBD2: Ignoring recovery information on journal [ 112.919791][ T4604] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 112.931310][ T26] audit: type=1800 audit(1782668514.628:31): pid=4604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.46" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 113.124999][ T4604] (syz.0.46,4604,1):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 113.130915][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 113.368788][ T4608] loop0: detected capacity change from 0 to 32768 [ 113.422829][ T4608] JBD2: Ignoring recovery information on journal [ 113.456488][ T4608] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 113.477462][ T26] audit: type=1800 audit(1782668515.178:32): pid=4608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.47" name="bus" dev="loop0" ino=17058 res=0 errno=0 2026/06/28 17:41:55 executed programs: 33 [ 113.675622][ T4608] (syz.0.47,4608,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 113.681564][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 113.927601][ T4612] loop0: detected capacity change from 0 to 32768 [ 113.976142][ T4612] JBD2: Ignoring recovery information on journal [ 113.998853][ T4612] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 114.010401][ T26] audit: type=1800 audit(1782668515.708:33): pid=4612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.48" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 114.217966][ T4612] (syz.0.48,4612,1):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 114.223638][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 114.447102][ T4616] loop0: detected capacity change from 0 to 32768 [ 114.489841][ T4616] JBD2: Ignoring recovery information on journal [ 114.515091][ T4616] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 114.526466][ T26] audit: type=1800 audit(1782668516.228:34): pid=4616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.49" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 114.731959][ T4616] (syz.0.49,4616,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 114.737639][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 114.969576][ T4620] loop0: detected capacity change from 0 to 32768 [ 115.019094][ T4620] JBD2: Ignoring recovery information on journal [ 115.042181][ T4620] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 115.054021][ T26] audit: type=1800 audit(1782668516.758:35): pid=4620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.50" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 115.258113][ T4620] (syz.0.50,4620,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 115.263857][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 115.492643][ T4624] loop0: detected capacity change from 0 to 32768 [ 115.560581][ T4624] JBD2: Ignoring recovery information on journal [ 115.582665][ T4624] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 115.594011][ T26] audit: type=1800 audit(1782668517.298:36): pid=4624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.51" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 115.796794][ T4624] (syz.0.51,4624,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 115.802355][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 116.034995][ T4628] loop0: detected capacity change from 0 to 32768 [ 116.098067][ T4628] JBD2: Ignoring recovery information on journal [ 116.120481][ T4628] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 116.132258][ T26] audit: type=1800 audit(1782668517.828:37): pid=4628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.52" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 116.343080][ T4628] (syz.0.52,4628,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5 [ 116.348763][ T4330] ocfs2: Unmounting device (7,0) on (node local) [ 116.575724][ T4632] loop0: detected capacity change from 0 to 32768 [ 116.637277][ T4632] JBD2: Ignoring recovery information on journal [ 116.661889][ T4632] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.