Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. 2026/08/13 13:23:11 parsed 1 programs 2026/08/13 13:23:11 serving rpc on tcp://42309 [ 73.861309][ T4284] cgroup: Unknown subsys name 'net' [ 73.965305][ T4284] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.285539][ T4284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 77.238038][ T4315] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.246701][ T4315] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.255146][ T4315] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.263137][ T4315] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.271669][ T4315] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.279581][ T4315] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.212622][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.220977][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.231809][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.258045][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.265934][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.274187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.045195][ T4364] chnl_net:caif_netlink_parms(): no params data found [ 79.098200][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.106392][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.114761][ T4364] device bridge_slave_0 entered promiscuous mode [ 79.124519][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.132370][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.140199][ T4364] device bridge_slave_1 entered promiscuous mode [ 79.166082][ T4364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.177052][ T4364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.197507][ T4364] team0: Port device team_slave_0 added [ 79.211715][ T4364] team0: Port device team_slave_1 added [ 79.234556][ T4364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.241807][ T4364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.268885][ T4364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.282215][ T4364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.289295][ T4364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.315274][ T4364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.371416][ T4364] device hsr_slave_0 entered promiscuous mode [ 79.379186][ T4364] device hsr_slave_1 entered promiscuous mode [ 79.531083][ T4364] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.542906][ T4364] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.555157][ T4364] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.567428][ T4364] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.648349][ T4364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.667575][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.676829][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.688284][ T4364] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.702583][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.712786][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.723408][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.730792][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.741502][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.765418][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.776338][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.787173][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.794320][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.819001][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.830601][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.843963][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.853264][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.863527][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.874683][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.883443][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.894522][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.907141][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.925114][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.076828][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.085409][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.100373][ T4364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.128144][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.153672][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.163020][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.171075][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.181844][ T4364] device veth0_vlan entered promiscuous mode [ 80.197198][ T4364] device veth1_vlan entered promiscuous mode [ 80.206475][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.229660][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.238514][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.253866][ T4364] device veth0_macvtap entered promiscuous mode [ 80.264699][ T4364] device veth1_macvtap entered promiscuous mode [ 80.281900][ T4364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.290343][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.301021][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.319896][ T4364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.327177][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.336270][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.347646][ T4364] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.357706][ T4364] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.367599][ T4364] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.376368][ T4364] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.555620][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/08/13 13:23:19 executed programs: 0 [ 80.885344][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.893591][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.902247][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.911113][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.922987][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.930608][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.036081][ T4386] chnl_net:caif_netlink_parms(): no params data found [ 81.078026][ T4386] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.086047][ T4386] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.094300][ T4386] device bridge_slave_0 entered promiscuous mode [ 81.104401][ T4386] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.111667][ T4386] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.119818][ T4386] device bridge_slave_1 entered promiscuous mode [ 81.138083][ T4386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.149651][ T4386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.182398][ T4386] team0: Port device team_slave_0 added [ 81.190945][ T4386] team0: Port device team_slave_1 added [ 81.206991][ T4386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.214176][ T4386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.240688][ T4386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.258270][ T4386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.265698][ T4386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.293638][ T4386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.331167][ T4386] device hsr_slave_0 entered promiscuous mode [ 81.337890][ T4386] device hsr_slave_1 entered promiscuous mode [ 81.344846][ T4386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.352866][ T4386] Cannot create hsr debugfs directory [ 82.800791][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.999427][ T4315] Bluetooth: hci0: command 0x0409 tx timeout [ 85.080338][ T4315] Bluetooth: hci0: command 0x041b tx timeout [ 85.348877][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.402177][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.211809][ T4386] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.221486][ T4386] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.236755][ T9] device hsr_slave_0 left promiscuous mode [ 86.243841][ T9] device hsr_slave_1 left promiscuous mode [ 86.250835][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.258283][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.267656][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.275384][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.284427][ T9] device bridge_slave_1 left promiscuous mode [ 86.292002][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.304892][ T9] device bridge_slave_0 left promiscuous mode [ 86.312441][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.336678][ T9] device veth1_macvtap left promiscuous mode [ 86.343243][ T9] device veth0_macvtap left promiscuous mode [ 86.350155][ T9] device veth1_vlan left promiscuous mode [ 86.356281][ T9] device veth0_vlan left promiscuous mode [ 86.650518][ T9] team0 (unregistering): Port device team_slave_1 removed [ 86.675482][ T9] team0 (unregistering): Port device team_slave_0 removed [ 86.700319][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.725951][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.873239][ T9] bond0 (unregistering): Released all slaves [ 86.957664][ T4386] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.966747][ T4386] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.003564][ T126] cfg80211: failed to load regulatory.db [ 87.032989][ T4386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.046094][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.054484][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.074871][ T4386] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.085073][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.094316][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.104224][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.111371][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.120499][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.138666][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.147403][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.156655][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.163739][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.171367][ T4315] Bluetooth: hci0: command 0x040f tx timeout [ 87.192750][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.205317][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.214519][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.223493][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.232224][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.247178][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.256009][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.264917][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.273906][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.291563][ T4386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.303167][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.314809][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.323833][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.496728][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.505108][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.521350][ T4386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.537776][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.546774][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.572364][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.580940][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.590445][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.598189][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.611884][ T4386] device veth0_vlan entered promiscuous mode [ 87.622166][ T4386] device veth1_vlan entered promiscuous mode [ 87.642281][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.650625][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.659545][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.667882][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.679284][ T4386] device veth0_macvtap entered promiscuous mode [ 87.687862][ T4386] device veth1_macvtap entered promiscuous mode [ 87.708691][ T4386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.716682][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.725342][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.733869][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.743379][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.760450][ T4386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.768963][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.777502][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.790390][ T4386] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.799875][ T4386] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.809431][ T4386] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.818276][ T4386] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.875675][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.884192][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.895181][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.917248][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.926302][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.934503][ T1120] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.135252][ T4431] loop0: detected capacity change from 0 to 32768 [ 88.144533][ T4431] ======================================================= [ 88.144533][ T4431] WARNING: The mand mount option has been deprecated and [ 88.144533][ T4431] and is ignored by this kernel. Remove the mand [ 88.144533][ T4431] option from the mount to silence this warning. [ 88.144533][ T4431] ======================================================= [ 88.207545][ T4431] JBD2: Ignoring recovery information on journal [ 88.238563][ T4431] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 88.262499][ T26] audit: type=1800 audit(1786627406.967:2): pid=4431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 88.340337][ T26] audit: type=1800 audit(1786627407.047:3): pid=4435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 88.684773][ T4431] [ 88.687148][ T4431] ====================================================== [ 88.694180][ T4431] WARNING: possible circular locking dependency detected [ 88.701195][ T4431] syzkaller #0 Not tainted [ 88.705609][ T4431] ------------------------------------------------------ [ 88.712632][ T4431] syz.0.17/4431 is trying to acquire lock: [ 88.718436][ T4431] ffff88805cc0d108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: __ocfs2_flush_truncate_log+0x36a/0x1220 [ 88.731597][ T4431] [ 88.731597][ T4431] but task is already holding lock: [ 88.738960][ T4431] ffff8880747cd108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_try_to_free_truncate_log+0x19f/0x370 [ 88.752949][ T4431] [ 88.752949][ T4431] which lock already depends on the new lock. [ 88.752949][ T4431] [ 88.763431][ T4431] [ 88.763431][ T4431] the existing dependency chain (in reverse order) is: [ 88.772442][ T4431] [ 88.772442][ T4431] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 88.783020][ T4431] down_write+0x36/0x60 [ 88.787700][ T4431] __ocfs2_move_extents_range+0x1a31/0x3450 [ 88.794104][ T4431] ocfs2_move_extents+0x409/0xa40 [ 88.799642][ T4431] ocfs2_ioctl_move_extents+0x4d4/0x6e0 [ 88.805711][ T4431] ocfs2_ioctl+0x31d/0x7c0 [ 88.810663][ T4431] __se_sys_ioctl+0xfa/0x170 [ 88.815774][ T4431] do_syscall_64+0x4c/0xa0 [ 88.820710][ T4431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.827142][ T4431] [ 88.827142][ T4431] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 88.837648][ T4431] __lock_acquire+0x2d18/0x7c40 [ 88.843020][ T4431] lock_acquire+0x1bb/0x4a0 [ 88.848036][ T4431] down_write+0x36/0x60 [ 88.852694][ T4431] __ocfs2_flush_truncate_log+0x36a/0x1220 [ 88.859012][ T4431] ocfs2_try_to_free_truncate_log+0x1a7/0x370 [ 88.865593][ T4431] ocfs2_write_begin_nolock+0x3306/0x4590 [ 88.871819][ T4431] ocfs2_dio_wr_get_block+0xba4/0x1810 [ 88.877782][ T4431] __blockdev_direct_IO+0x171f/0x34c0 [ 88.883658][ T4431] ocfs2_direct_IO+0x233/0x2a0 [ 88.888929][ T4431] generic_file_direct_write+0x112/0x330 [ 88.895183][ T4431] __generic_file_write_iter+0x15f/0x2a0 [ 88.901334][ T4431] ocfs2_file_write_iter+0x1731/0x1fc0 [ 88.907328][ T4431] do_iter_write+0x638/0xb10 [ 88.912447][ T4431] iter_file_splice_write+0x6be/0xcf0 [ 88.918343][ T4431] direct_splice_actor+0xe1/0x130 [ 88.923888][ T4431] splice_direct_to_actor+0x4b8/0xbd0 [ 88.929855][ T4431] do_splice_direct+0x1ce/0x2f0 [ 88.935316][ T4431] do_sendfile+0x51b/0xe20 [ 88.940245][ T4431] __se_sys_sendfile64+0x141/0x1a0 [ 88.945867][ T4431] do_syscall_64+0x4c/0xa0 [ 88.950889][ T4431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.957288][ T4431] [ 88.957288][ T4431] other info that might help us debug this: [ 88.957288][ T4431] [ 88.967521][ T4431] Possible unsafe locking scenario: [ 88.967521][ T4431] [ 88.974960][ T4431] CPU0 CPU1 [ 88.980321][ T4431] ---- ---- [ 88.985676][ T4431] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 88.992972][ T4431] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 89.002763][ T4431] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 89.012551][ T4431] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 89.019839][ T4431] [ 89.019839][ T4431] *** DEADLOCK *** [ 89.019839][ T4431] [ 89.027973][ T4431] 4 locks held by syz.0.17/4431: [ 89.032892][ T4431] #0: ffff888079598460 (sb_writers#13){.+.+}-{0:0}, at: do_sendfile+0x4f6/0xe20 [ 89.042120][ T4431] #1: ffff88805cc0df48 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x45a/0x1fc0 [ 89.053410][ T4431] #2: ffff88805cc0dbe0 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_dio_wr_get_block+0x90c/0x1810 [ 89.063963][ T4431] #3: ffff8880747cd108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_try_to_free_truncate_log+0x19f/0x370 [ 89.077783][ T4431] [ 89.077783][ T4431] stack backtrace: [ 89.083689][ T4431] CPU: 0 PID: 4431 Comm: syz.0.17 Not tainted syzkaller #0 [ 89.090871][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.100915][ T4431] Call Trace: [ 89.104175][ T4431] [ 89.107087][ T4431] dump_stack_lvl+0x188/0x24e [ 89.111755][ T4431] ? load_image+0x410/0x410 [ 89.116260][ T4431] ? show_regs_print_info+0x12/0x12 [ 89.121457][ T4431] ? print_circular_bug+0x12b/0x1a0 [ 89.126637][ T4431] check_noncircular+0x296/0x330 [ 89.131561][ T4431] ? add_chain_block+0x9b0/0x9b0 [ 89.136482][ T4431] ? lockdep_lock+0xf1/0x1f0 [ 89.141077][ T4431] ? _find_first_zero_bit+0xd2/0x100 [ 89.146382][ T4431] __lock_acquire+0x2d18/0x7c40 [ 89.151683][ T4431] ? igrab+0x87/0x90 [ 89.155570][ T4431] ? verify_lock_unused+0x140/0x140 [ 89.160767][ T4431] ? __lock_acquire+0x7c40/0x7c40 [ 89.165802][ T4431] ? do_raw_spin_lock+0x128/0x2f0 [ 89.170811][ T4431] ? __rwlock_init+0x140/0x140 [ 89.175558][ T4431] ? do_raw_spin_unlock+0x11d/0x230 [ 89.180740][ T4431] lock_acquire+0x1bb/0x4a0 [ 89.185225][ T4431] ? __ocfs2_flush_truncate_log+0x36a/0x1220 [ 89.191546][ T4431] ? __wake_up+0x12e/0x1a0 [ 89.196048][ T4431] ? __might_sleep+0xd0/0xd0 [ 89.200626][ T4431] ? read_lock_is_recursive+0x10/0x10 [ 89.205987][ T4431] ? __bpf_trace_jbd2_shrink_checkpoint_list+0x50/0x50 [ 89.212832][ T4431] down_write+0x36/0x60 [ 89.217162][ T4431] ? __ocfs2_flush_truncate_log+0x36a/0x1220 [ 89.223130][ T4431] __ocfs2_flush_truncate_log+0x36a/0x1220 [ 89.229049][ T4431] ? ocfs2_file_write_iter+0x1731/0x1fc0 [ 89.234751][ T4431] ? iter_file_splice_write+0x6be/0xcf0 [ 89.240308][ T4431] ? direct_splice_actor+0xe1/0x130 [ 89.245499][ T4431] ? ocfs2_truncate_log_needs_flush+0x300/0x300 [ 89.251736][ T4431] ? rwsem_write_trylock+0x135/0x1c0 [ 89.257007][ T4431] ? clear_nonspinnable+0x60/0x60 [ 89.262035][ T4431] ? lock_chain_count+0x20/0x20 [ 89.266886][ T4431] ocfs2_try_to_free_truncate_log+0x1a7/0x370 [ 89.272965][ T4431] ? ocfs2_schedule_truncate_log_flush+0x110/0x110 [ 89.279470][ T4431] ? slab_free_freelist_hook+0x133/0x1b0 [ 89.285093][ T4431] ? ocfs2_write_begin_nolock+0x328b/0x4590 [ 89.290984][ T4431] ? __kmem_cache_free+0xb6/0x200 [ 89.296090][ T4431] ocfs2_write_begin_nolock+0x3306/0x4590 [ 89.301813][ T4431] ? ocfs2_size_fits_inline_data+0x90/0x90 [ 89.307617][ T4431] ? __lock_acquire+0x1465/0x7c40 [ 89.312633][ T4431] ? ocfs2_inode_lock_full_nested+0x149/0x1b10 [ 89.318783][ T4431] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 89.324786][ T4431] ? ocfs2_allocate_extend_trans+0x670/0x670 [ 89.330797][ T4431] ? rwsem_write_trylock+0x135/0x1c0 [ 89.336067][ T4431] ? clear_nonspinnable+0x60/0x60 [ 89.341096][ T4431] ? __might_sleep+0xd0/0xd0 [ 89.345669][ T4431] ? do_raw_spin_unlock+0x11d/0x230 [ 89.350856][ T4431] ? mlock_page_drain_local+0x75/0x490 [ 89.356304][ T4431] ocfs2_dio_wr_get_block+0xba4/0x1810 [ 89.361847][ T4431] ? ocfs2_lock_get_block+0x50/0x50 [ 89.367133][ T4431] ? get_page+0xa0/0x1b0 [ 89.371391][ T4431] ? __iov_iter_get_pages_alloc+0x8f0/0xaf0 [ 89.377277][ T4431] ? iov_iter_get_pages2+0x5b/0x90 [ 89.382390][ T4431] ? ocfs2_lock_get_block+0x50/0x50 [ 89.387750][ T4431] __blockdev_direct_IO+0x171f/0x34c0 [ 89.393221][ T4431] ? find_get_pages_range_tag+0x126/0x780 [ 89.398942][ T4431] ? sb_init_dio_done_wq+0x80/0x80 [ 89.404059][ T4431] ? ocfs2_lock_get_block+0x50/0x50 [ 89.409275][ T4431] ? filemap_read+0x3150/0x3150 [ 89.414124][ T4431] ? current_time+0x19b/0x2c0 [ 89.418798][ T4431] ? ocfs2_lock_get_block+0x50/0x50 [ 89.424100][ T4431] ocfs2_direct_IO+0x233/0x2a0 [ 89.428856][ T4431] generic_file_direct_write+0x112/0x330 [ 89.434477][ T4431] ? do_raw_spin_unlock+0x11d/0x230 [ 89.439843][ T4431] __generic_file_write_iter+0x15f/0x2a0 [ 89.445478][ T4431] ocfs2_file_write_iter+0x1731/0x1fc0 [ 89.450943][ T4431] ? ocfs2_file_read_iter+0xbb0/0xbb0 [ 89.456338][ T4431] ? aa_file_perm+0x3ea/0xf00 [ 89.461012][ T4431] ? aa_file_perm+0x112/0xf00 [ 89.465679][ T4431] ? kasan_set_track+0x60/0x70 [ 89.470446][ T4431] ? aa_path_link+0x8a0/0x8a0 [ 89.475310][ T4431] ? iter_file_splice_write+0x1a0/0xcf0 [ 89.480945][ T4431] ? direct_splice_actor+0xe1/0x130 [ 89.486130][ T4431] ? splice_direct_to_actor+0x4b8/0xbd0 [ 89.491661][ T4431] ? do_splice_direct+0x1ce/0x2f0 [ 89.496755][ T4431] ? do_sendfile+0x51b/0xe20 [ 89.501323][ T4431] ? __se_sys_sendfile64+0x141/0x1a0 [ 89.506597][ T4431] ? do_syscall_64+0x4c/0xa0 [ 89.511171][ T4431] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.517219][ T4431] ? end_current_label_crit_section+0x14b/0x170 [ 89.523444][ T4431] ? common_file_perm+0x171/0x1c0 [ 89.528538][ T4431] do_iter_write+0x638/0xb10 [ 89.533124][ T4431] ? vfs_iter_write+0xa0/0xa0 [ 89.537790][ T4431] ? PageUptodate+0xd9/0x2a0 [ 89.542376][ T4431] ? vfs_iter_write+0x67/0xa0 [ 89.547034][ T4431] iter_file_splice_write+0x6be/0xcf0 [ 89.552391][ T4431] ? splice_from_pipe+0x180/0x180 [ 89.557414][ T4431] ? splice_shrink_spd+0xc0/0xc0 [ 89.562338][ T4431] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 89.568934][ T4431] ? splice_from_pipe+0x180/0x180 [ 89.573960][ T4431] direct_splice_actor+0xe1/0x130 [ 89.578972][ T4431] splice_direct_to_actor+0x4b8/0xbd0 [ 89.584343][ T4431] ? direct_file_splice_eof+0xa0/0xa0 [ 89.589698][ T4431] ? pipe_to_sendpage+0x320/0x320 [ 89.594703][ T4431] ? common_file_perm+0x171/0x1c0 [ 89.599708][ T4431] ? fsnotify_perm+0x5a/0x550 [ 89.604363][ T4431] ? security_file_permission+0x75/0xa0 [ 89.609892][ T4431] do_splice_direct+0x1ce/0x2f0 [ 89.614726][ T4431] ? splice_direct_to_actor+0xbd0/0xbd0 [ 89.620252][ T4431] ? rcu_read_lock_any_held+0xb0/0x130 [ 89.625690][ T4431] ? do_splice_direct+0x2f0/0x2f0 [ 89.630705][ T4431] ? common_file_perm+0x171/0x1c0 [ 89.635813][ T4431] do_sendfile+0x51b/0xe20 [ 89.640225][ T4431] ? __ia32_sys_get_robust_list+0x100/0x100 [ 89.646726][ T4431] ? do_pwritev+0x3a0/0x3a0 [ 89.651232][ T4431] __se_sys_sendfile64+0x141/0x1a0 [ 89.656329][ T4431] ? lock_chain_count+0x20/0x20 [ 89.661166][ T4431] ? __x64_sys_sendfile64+0xa0/0xa0 [ 89.666348][ T4431] ? lockdep_hardirqs_on+0x94/0x140 [ 89.671543][ T4431] do_syscall_64+0x4c/0xa0 [ 89.675946][ T4431] ? clear_bhb_loop+0x60/0xb0 [ 89.680608][ T4431] ? clear_bhb_loop+0x60/0xb0 [ 89.685268][ T4431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.691150][ T4431] RIP: 0033:0x7f786139e0d9 [ 89.695552][ T4431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.715159][ T4431] RSP: 002b:00007f78621a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 89.724694][ T4431] RAX: ffffffffffffffda RBX: 00007f7861625fa0 RCX: 00007f786139e0d9 [ 89.732654][ T4431] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 89.740617][ T4431] RBP: 00007f7861435024 R08: 0000000000000000 R09: 0000000000000000 [ 89.748574][ T4431] R10: 0000000000fffe82 R11: 0000000000000246 R12: 0000000000000000 [ 89.756524][ T4431] R13: 00007f7861626038 R14: 00007f7861625fa0 R15: 00007ffe1717c678 [ 89.764506][ T4431] [ 89.779201][ T4315] Bluetooth: hci0: command 0x0419 tx timeout [ 89.797428][ T4431] syz.0.17 (4431) used greatest stack depth: 17648 bytes left [ 89.830649][ T4386] ocfs2: Unmounting device (7,0) on (node local)