Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. 2026/08/21 00:48:26 parsed 1 programs 2026/08/21 00:48:26 serving rpc on tcp://34171 [ 84.311863][ T5785] cgroup: Unknown subsys name 'net' [ 84.442376][ T5785] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.898257][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.514160][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.528265][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.536457][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.544655][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.555539][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.563736][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.572970][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 89.644360][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.652647][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.660158][ T5846] bridge_slave_0: entered allmulticast mode [ 89.667590][ T5846] bridge_slave_0: entered promiscuous mode [ 89.685683][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.692847][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.700408][ T5846] bridge_slave_1: entered allmulticast mode [ 89.707216][ T5846] bridge_slave_1: entered promiscuous mode [ 89.730974][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.750341][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.778023][ T5846] team0: Port device team_slave_0 added [ 89.786885][ T5846] team0: Port device team_slave_1 added [ 89.815822][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.822844][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.848778][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.862726][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.869741][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.895747][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.944227][ T5846] hsr_slave_0: entered promiscuous mode [ 89.950951][ T5846] hsr_slave_1: entered promiscuous mode [ 90.086887][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.099676][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.118586][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.128208][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.222007][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.241378][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.268132][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.275676][ T2916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.296075][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.303443][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.494412][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.538809][ T5846] veth0_vlan: entered promiscuous mode [ 90.555547][ T5846] veth1_vlan: entered promiscuous mode [ 90.582540][ T5846] veth0_macvtap: entered promiscuous mode [ 90.597388][ T5846] veth1_macvtap: entered promiscuous mode [ 90.617697][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.636254][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.649703][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.658988][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.667897][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.676921][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.189548][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.686776][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.694803][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.734314][ T2956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.742332][ T2956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/08/21 00:48:36 executed programs: 0 [ 92.812551][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.822993][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.831030][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.839630][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.848193][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.856345][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.977380][ T5893] chnl_net:caif_netlink_parms(): no params data found [ 93.037807][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.044987][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.052411][ T5893] bridge_slave_0: entered allmulticast mode [ 93.059282][ T5893] bridge_slave_0: entered promiscuous mode [ 93.068016][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.075499][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.082812][ T5893] bridge_slave_1: entered allmulticast mode [ 93.089768][ T5893] bridge_slave_1: entered promiscuous mode [ 93.112566][ T5893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.124395][ T5893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.150964][ T5893] team0: Port device team_slave_0 added [ 93.159538][ T5893] team0: Port device team_slave_1 added [ 93.181819][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.189410][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.215551][ T5893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.228689][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.236177][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.262368][ T5893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.297805][ T5893] hsr_slave_0: entered promiscuous mode [ 93.304089][ T5893] hsr_slave_1: entered promiscuous mode [ 93.310484][ T5893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.319092][ T5893] Cannot create hsr debugfs directory [ 93.678729][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.916517][ T5089] Bluetooth: hci0: command tx timeout [ 95.877460][ T971] cfg80211: failed to load regulatory.db [ 96.305594][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.369909][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.995446][ T5089] Bluetooth: hci0: command tx timeout [ 97.249288][ T5893] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.281907][ T5893] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.295615][ T5893] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.306973][ T5893] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.332946][ T12] hsr_slave_0: left promiscuous mode [ 97.339699][ T12] hsr_slave_1: left promiscuous mode [ 97.345817][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.353247][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.361876][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.369384][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.378455][ T12] bridge_slave_1: left allmulticast mode [ 97.384172][ T12] bridge_slave_1: left promiscuous mode [ 97.391051][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.403535][ T12] bridge_slave_0: left allmulticast mode [ 97.410377][ T12] bridge_slave_0: left promiscuous mode [ 97.416200][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.439064][ T12] veth1_macvtap: left promiscuous mode [ 97.445450][ T12] veth0_macvtap: left promiscuous mode [ 97.451058][ T12] veth1_vlan: left promiscuous mode [ 97.456779][ T12] veth0_vlan: left promiscuous mode [ 97.849904][ T12] team0 (unregistering): Port device team_slave_1 removed [ 97.880968][ T12] team0 (unregistering): Port device team_slave_0 removed [ 97.908344][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.942610][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.152528][ T12] bond0 (unregistering): Released all slaves [ 98.279600][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.307375][ T5893] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.322310][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.329526][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.345079][ T2916] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.352245][ T2916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.580849][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.617690][ T5893] veth0_vlan: entered promiscuous mode [ 98.632680][ T5893] veth1_vlan: entered promiscuous mode [ 98.686679][ T5893] veth0_macvtap: entered promiscuous mode [ 98.706976][ T5893] veth1_macvtap: entered promiscuous mode [ 98.751181][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.767061][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.779907][ T5893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.788838][ T5893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.799319][ T5893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.808329][ T5893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.864828][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.878726][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.900590][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.908930][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.968796][ T5932] syz.0.17[5932]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 99.076631][ T5089] Bluetooth: hci0: command tx timeout [ 99.203550][ T5932] loop0: detected capacity change from 0 to 32768 [ 99.212530][ T5932] ======================================================= [ 99.212530][ T5932] WARNING: The mand mount option has been deprecated and [ 99.212530][ T5932] and is ignored by this kernel. Remove the mand [ 99.212530][ T5932] option from the mount to silence this warning. [ 99.212530][ T5932] ======================================================= [ 99.274153][ T5932] JBD2: Ignoring recovery information on journal [ 99.335175][ T5932] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 99.360744][ T2956] (kworker/u4:11,2956,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1 [ 99.416283][ T5932] [ 99.418687][ T5932] ====================================================== [ 99.425778][ T5932] WARNING: possible circular locking dependency detected [ 99.432895][ T5932] syzkaller #0 Not tainted [ 99.437331][ T5932] ------------------------------------------------------ [ 99.444330][ T5932] syz.0.17/5932 is trying to acquire lock: [ 99.450117][ T5932] ffff88802ed78608 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_setattr+0xc84/0x1bf0 [ 99.459103][ T5932] [ 99.459103][ T5932] but task is already holding lock: [ 99.466465][ T5932] ffff88805ee7dbe0 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_setattr+0xc77/0x1bf0 [ 99.475798][ T5932] [ 99.475798][ T5932] which lock already depends on the new lock. [ 99.475798][ T5932] [ 99.486642][ T5932] [ 99.486642][ T5932] the existing dependency chain (in reverse order) is: [ 99.495678][ T5932] [ 99.495678][ T5932] -> #3 (&oi->ip_alloc_sem){+.+.}-{3:3}: [ 99.503499][ T5932] down_write+0x97/0x200 [ 99.508277][ T5932] ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 99.515124][ T5932] ocfs2_xattr_set+0x63a/0x13a0 [ 99.520518][ T5932] ocfs2_set_acl+0x4d4/0x580 [ 99.525625][ T5932] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 99.531090][ T5932] vfs_remove_acl+0x4e7/0x750 [ 99.536290][ T5932] ovl_workdir_create+0x44a/0x7e0 [ 99.541824][ T5932] ovl_get_workdir+0x30e/0x1770 [ 99.547193][ T5932] ovl_fill_super+0x77a/0x1280 [ 99.552484][ T5932] get_tree_nodev+0xb5/0x140 [ 99.557586][ T5932] vfs_get_tree+0x8c/0x280 [ 99.562519][ T5932] do_new_mount+0x24a/0xa40 [ 99.567546][ T5932] __se_sys_mount+0x2e7/0x3d0 [ 99.572741][ T5932] do_syscall_64+0x55/0xb0 [ 99.577682][ T5932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.584181][ T5932] [ 99.584181][ T5932] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}: [ 99.592002][ T5932] down_read+0x46/0x2e0 [ 99.596672][ T5932] ocfs2_init_acl+0x30a/0x770 [ 99.601866][ T5932] ocfs2_mknod+0x1427/0x2310 [ 99.606968][ T5932] ocfs2_mkdir+0x196/0x430 [ 99.611893][ T5932] vfs_mkdir+0x2a5/0x470 [ 99.616653][ T5932] do_mkdirat+0x1dc/0x450 [ 99.621491][ T5932] __x64_sys_mkdirat+0x89/0xa0 [ 99.626766][ T5932] do_syscall_64+0x55/0xb0 [ 99.631779][ T5932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.638186][ T5932] [ 99.638186][ T5932] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 99.646692][ T5932] down_read+0x46/0x2e0 [ 99.651362][ T5932] ocfs2_start_trans+0x3a8/0x6f0 [ 99.656826][ T5932] ocfs2_mknod+0xf33/0x2310 [ 99.661840][ T5932] ocfs2_mkdir+0x196/0x430 [ 99.666766][ T5932] vfs_mkdir+0x2a5/0x470 [ 99.671521][ T5932] do_mkdirat+0x1dc/0x450 [ 99.676371][ T5932] __x64_sys_mkdirat+0x89/0xa0 [ 99.681646][ T5932] do_syscall_64+0x55/0xb0 [ 99.686591][ T5932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.692997][ T5932] [ 99.692997][ T5932] -> #0 (sb_internal#2){.+.+}-{0:0}: [ 99.700462][ T5932] __lock_acquire+0x37ef/0x7d80 [ 99.705912][ T5932] lock_acquire+0x19e/0x420 [ 99.710927][ T5932] ocfs2_start_trans+0x2a9/0x6f0 [ 99.716403][ T5932] ocfs2_setattr+0xc84/0x1bf0 [ 99.721597][ T5932] notify_change+0xb05/0xde0 [ 99.726741][ T5932] ovl_workdir_create+0x624/0x7e0 [ 99.732283][ T5932] ovl_get_workdir+0x30e/0x1770 [ 99.737646][ T5932] ovl_fill_super+0x77a/0x1280 [ 99.742922][ T5932] get_tree_nodev+0xb5/0x140 [ 99.748062][ T5932] vfs_get_tree+0x8c/0x280 [ 99.753007][ T5932] do_new_mount+0x24a/0xa40 [ 99.758034][ T5932] __se_sys_mount+0x2e7/0x3d0 [ 99.763227][ T5932] do_syscall_64+0x55/0xb0 [ 99.768162][ T5932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 99.774570][ T5932] [ 99.774570][ T5932] other info that might help us debug this: [ 99.774570][ T5932] [ 99.784789][ T5932] Chain exists of: [ 99.784789][ T5932] sb_internal#2 --> &oi->ip_xattr_sem --> &oi->ip_alloc_sem [ 99.784789][ T5932] [ 99.798015][ T5932] Possible unsafe locking scenario: [ 99.798015][ T5932] [ 99.805450][ T5932] CPU0 CPU1 [ 99.810803][ T5932] ---- ---- [ 99.816152][ T5932] lock(&oi->ip_alloc_sem); [ 99.820733][ T5932] lock(&oi->ip_xattr_sem); [ 99.827835][ T5932] lock(&oi->ip_alloc_sem); [ 99.834931][ T5932] rlock(sb_internal#2); [ 99.839256][ T5932] [ 99.839256][ T5932] *** DEADLOCK *** [ 99.839256][ T5932] [ 99.847402][ T5932] 5 locks held by syz.0.17/5932: [ 99.852338][ T5932] #0: ffff88802d3c80e0 (&type->s_umount_key#57/1){+.+.}-{3:3}, at: alloc_super+0x1fb/0x910 [ 99.862457][ T5932] #1: ffff88802ed78418 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 99.871691][ T5932] #2: ffff88805ee7c2d8 (&sb->s_type->i_mutex_key#20/1){+.+.}-{3:3}, at: ovl_workdir_create+0x15d/0x7e0 [ 99.882842][ T5932] #3: ffff88805ee7df58 (&sb->s_type->i_mutex_key#22){+.+.}-{3:3}, at: ovl_workdir_create+0x5a2/0x7e0 [ 99.893810][ T5932] #4: ffff88805ee7dbe0 (&oi->ip_alloc_sem){+.+.}-{3:3}, at: ocfs2_setattr+0xc77/0x1bf0 [ 99.903553][ T5932] [ 99.903553][ T5932] stack backtrace: [ 99.909560][ T5932] CPU: 0 PID: 5932 Comm: syz.0.17 Not tainted syzkaller #0 [ 99.916752][ T5932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.926817][ T5932] Call Trace: [ 99.930123][ T5932] [ 99.933176][ T5932] dump_stack_lvl+0x18c/0x250 [ 99.937913][ T5932] ? load_image+0x420/0x420 [ 99.942444][ T5932] ? show_regs_print_info+0x20/0x20 [ 99.947637][ T5932] ? print_circular_bug+0x12b/0x1a0 [ 99.952835][ T5932] check_noncircular+0x2fc/0x400 [ 99.957767][ T5932] ? print_deadlock_bug+0x5d0/0x5d0 [ 99.962956][ T5932] ? lockdep_lock+0xf5/0x230 [ 99.967541][ T5932] ? _find_first_zero_bit+0xd6/0x100 [ 99.972825][ T5932] __lock_acquire+0x37ef/0x7d80 [ 99.977680][ T5932] ? verify_lock_unused+0x140/0x140 [ 99.982895][ T5932] ? verify_lock_unused+0x140/0x140 [ 99.988093][ T5932] ? verify_lock_unused+0x140/0x140 [ 99.993287][ T5932] lock_acquire+0x19e/0x420 [ 99.997836][ T5932] ? ocfs2_setattr+0xc84/0x1bf0 [ 100.002683][ T5932] ? __might_sleep+0xe0/0xe0 [ 100.007278][ T5932] ? do_raw_spin_lock+0x11f/0x2b0 [ 100.012296][ T5932] ? read_lock_is_recursive+0x20/0x20 [ 100.017661][ T5932] ? __rwlock_init+0x150/0x150 [ 100.022419][ T5932] ? do_raw_spin_unlock+0x121/0x230 [ 100.027611][ T5932] ocfs2_start_trans+0x2a9/0x6f0 [ 100.032543][ T5932] ? ocfs2_setattr+0xc84/0x1bf0 [ 100.037391][ T5932] ? ocfs2_recovery_exit+0x50/0x50 [ 100.042498][ T5932] ? setattr_prepare+0x1e5/0xac0 [ 100.047430][ T5932] ocfs2_setattr+0xc84/0x1bf0 [ 100.052103][ T5932] ? ocfs2_extend_allocation+0x1830/0x1830 [ 100.057906][ T5932] ? ktime_get_coarse_real_ts64+0x2f/0x120 [ 100.063723][ T5932] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 100.070026][ T5932] ? ktime_get_coarse_real_ts64+0x10a/0x120 [ 100.075928][ T5932] ? current_time+0x196/0x290 [ 100.080606][ T5932] ? inode_set_ctime_current+0x2e0/0x2e0 [ 100.086253][ T5932] ? down_write+0x16e/0x200 [ 100.090765][ T5932] ? evm_inode_setattr+0x10a/0x6c0 [ 100.095877][ T5932] ? security_inode_setattr+0xdc/0x140 [ 100.101340][ T5932] ? try_break_deleg+0x79/0x120 [ 100.106197][ T5932] ? ocfs2_extend_allocation+0x1830/0x1830 [ 100.112006][ T5932] notify_change+0xb05/0xde0 [ 100.116599][ T5932] ovl_workdir_create+0x624/0x7e0 [ 100.121624][ T5932] ? ovl_statfs+0x2f0/0x2f0 [ 100.126122][ T5932] ? rcu_read_lock_any_held+0xb4/0x140 [ 100.131578][ T5932] ? __mnt_want_write+0x223/0x2a0 [ 100.136604][ T5932] ovl_get_workdir+0x30e/0x1770 [ 100.141450][ T5932] ? do_raw_spin_unlock+0x121/0x230 [ 100.146648][ T5932] ? ovl_get_upper+0x5c0/0x5c0 [ 100.151404][ T5932] ? ovl_inuse_trylock+0xbd/0xd0 [ 100.156339][ T5932] ? ovl_get_upper+0x3c3/0x5c0 [ 100.161096][ T5932] ? ovl_fill_super+0x1280/0x1280 [ 100.166117][ T5932] ? ovl_fill_super+0x2dd/0x1280 [ 100.171048][ T5932] ? rcu_is_watching+0x15/0xb0 [ 100.175810][ T5932] ? ovl_fill_super+0x2dd/0x1280 [ 100.180743][ T5932] ? __kmalloc+0xe5/0x240 [ 100.185081][ T5932] ovl_fill_super+0x77a/0x1280 [ 100.189889][ T5932] ? virtio_fs_zero_page_range+0x140/0x140 [ 100.195692][ T5932] get_tree_nodev+0xb5/0x140 [ 100.200276][ T5932] vfs_get_tree+0x8c/0x280 [ 100.204685][ T5932] do_new_mount+0x24a/0xa40 [ 100.209186][ T5932] __se_sys_mount+0x2e7/0x3d0 [ 100.213856][ T5932] ? __x64_sys_mount+0xc0/0xc0 [ 100.218614][ T5932] ? lockdep_hardirqs_on+0x98/0x150 [ 100.223808][ T5932] ? __x64_sys_mount+0x20/0xc0 [ 100.228619][ T5932] do_syscall_64+0x55/0xb0 [ 100.233033][ T5932] ? clear_bhb_loop+0x40/0x90 [ 100.237706][ T5932] ? clear_bhb_loop+0x40/0x90 [ 100.242381][ T5932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.248267][ T5932] RIP: 0033:0x7f446919e0d9 [ 100.252782][ T5932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.272421][ T5932] RSP: 002b:00007fff6764fdb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 100.280870][ T5932] RAX: ffffffffffffffda RBX: 00007f4469425fa0 RCX: 00007f446919e0d9 [ 100.288843][ T5932] RDX: 0000200000000b80 RSI: 0000200000000240 RDI: 0000000000000000 [ 100.296812][ T5932] RBP: 00007f4469235024 R08: 0000200000001440 R09: 0000000000000000 [ 100.304783][ T5932] R10: 0000000002000008 R11: 0000000000000246 R12: 0000000000000000 [ 100.312763][ T5932] R13: 00007f4469425fac R14: 00007f4469425fa0 R15: 00007f4469425fa0 [ 100.320736][ T5932] [ 100.344101][ T5932] overlayfs: upper fs does not support tmpfile. [ 100.351315][ T5932] (syz.0.17,5932,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1 [ 100.367359][ T5932] (syz.0.17,5932,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 100.376118][ T5932] (syz.0.17,5932,0):__ocfs2_prepare_orphan_dir:2171 ERROR: status = -2 [ 100.384474][ T5932] (syz.0.17,5932,0):ocfs2_prepare_orphan_dir:2213 ERROR: status = -2 [ 100.392922][ T5932] (syz.0.17,5932,0):ocfs2_prepare_orphan_dir:2229 ERROR: status = -2 [ 100.401093][ T5932] (syz.0.17,5932,0):ocfs2_unlink:965 ERROR: status = -2 [ 100.408432][ T5932] overlayfs: cleanup of 'work/#1' failed (-2) [ 100.414747][ T5932] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 100.422966][ T5932] overlayfs: upper fs missing required features. [ 100.444359][ T5893] ocfs2: Unmounting device (7,0) on (node local)