Warning: Permanently added '10.128.0.76' (ED25519) to the list of known hosts. 2026/08/20 05:51:59 parsed 1 programs 2026/08/20 05:51:59 serving rpc on tcp://43393 [ 84.537087][ T5784] cgroup: Unknown subsys name 'net' [ 84.667488][ T5784] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.443039][ T5784] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.699703][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 91.787350][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.795340][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.802799][ T5858] bridge_slave_0: entered allmulticast mode [ 91.809929][ T5858] bridge_slave_0: entered promiscuous mode [ 91.823426][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.830674][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.837812][ T5858] bridge_slave_1: entered allmulticast mode [ 91.845405][ T5858] bridge_slave_1: entered promiscuous mode [ 91.871775][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.884322][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.925991][ T5858] team0: Port device team_slave_0 added [ 91.935834][ T5858] team0: Port device team_slave_1 added [ 91.968392][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.975615][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.002805][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.016693][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.023941][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.050474][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.111849][ T5858] hsr_slave_0: entered promiscuous mode [ 92.118222][ T5858] hsr_slave_1: entered promiscuous mode [ 92.223525][ T28] cfg80211: failed to load regulatory.db [ 92.295713][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.307389][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.317738][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.334567][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.359437][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.366695][ T5858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.374656][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.381795][ T5858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.462019][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.493701][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.521137][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.544026][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.557447][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.565007][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.582677][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.589821][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.666199][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.977478][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.018225][ T5858] veth0_vlan: entered promiscuous mode [ 93.033658][ T5858] veth1_vlan: entered promiscuous mode [ 93.061660][ T5858] veth0_macvtap: entered promiscuous mode [ 93.072170][ T5858] veth1_macvtap: entered promiscuous mode [ 93.089251][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.107359][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.119365][ T5858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.128553][ T5858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.139438][ T5858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.148828][ T5858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.311730][ T72] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.326729][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.337977][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.347643][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.356467][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.365916][ T5875] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.373944][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.636793][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.649963][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.686762][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.695091][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/08/20 05:52:10 executed programs: 0 [ 94.128881][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.138153][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.151452][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.160651][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.168675][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.176374][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.325685][ T5890] chnl_net:caif_netlink_parms(): no params data found [ 94.389484][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.400035][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.407598][ T5890] bridge_slave_0: entered allmulticast mode [ 94.414892][ T5890] bridge_slave_0: entered promiscuous mode [ 94.425169][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.433767][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.441370][ T5890] bridge_slave_1: entered allmulticast mode [ 94.448193][ T5890] bridge_slave_1: entered promiscuous mode [ 94.479075][ T5890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.492274][ T5890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.527862][ T5890] team0: Port device team_slave_0 added [ 94.535506][ T5890] team0: Port device team_slave_1 added [ 94.564154][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.571182][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.598048][ T5890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.611632][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.618599][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.645601][ T5890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.697199][ T5890] hsr_slave_0: entered promiscuous mode [ 94.705060][ T5890] hsr_slave_1: entered promiscuous mode [ 94.711595][ T5890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.719362][ T5890] Cannot create hsr debugfs directory [ 95.753945][ T72] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.221856][ T5084] Bluetooth: hci0: command tx timeout [ 98.221948][ T72] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.294920][ T72] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.305314][ T5084] Bluetooth: hci0: command tx timeout [ 99.215847][ T72] hsr_slave_0: left promiscuous mode [ 99.222375][ T72] hsr_slave_1: left promiscuous mode [ 99.229027][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.237440][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.246651][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.255010][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.263521][ T72] bridge_slave_1: left allmulticast mode [ 99.270507][ T72] bridge_slave_1: left promiscuous mode [ 99.277106][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.290024][ T72] bridge_slave_0: left allmulticast mode [ 99.297106][ T72] bridge_slave_0: left promiscuous mode [ 99.303356][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.332174][ T72] veth1_macvtap: left promiscuous mode [ 99.338627][ T72] veth0_macvtap: left promiscuous mode [ 99.348296][ T72] veth1_vlan: left promiscuous mode [ 99.354687][ T72] veth0_vlan: left promiscuous mode [ 99.829675][ T72] team0 (unregistering): Port device team_slave_1 removed [ 99.865962][ T72] team0 (unregistering): Port device team_slave_0 removed [ 99.898919][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.936235][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.176294][ T72] bond0 (unregistering): Released all slaves [ 100.241700][ T5890] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.252207][ T5890] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.262513][ T5890] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.273901][ T5890] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.373829][ T5890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.381943][ T5084] Bluetooth: hci0: command tx timeout [ 100.396200][ T5890] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.413876][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.421203][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.440853][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.448027][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.697654][ T5890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.736410][ T5890] veth0_vlan: entered promiscuous mode [ 100.747621][ T5890] veth1_vlan: entered promiscuous mode [ 100.777538][ T5890] veth0_macvtap: entered promiscuous mode [ 100.788213][ T5890] veth1_macvtap: entered promiscuous mode [ 100.823282][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.846648][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.858765][ T5890] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.869961][ T5890] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.878764][ T5890] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.887588][ T5890] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.974853][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.986177][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/08/20 05:52:17 executed programs: 2 [ 101.024336][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.032732][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.098392][ T5932] syz.0.17[5932]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 101.348525][ T5932] loop0: detected capacity change from 0 to 32768 [ 101.358925][ T5932] ======================================================= [ 101.358925][ T5932] WARNING: The mand mount option has been deprecated and [ 101.358925][ T5932] and is ignored by this kernel. Remove the mand [ 101.358925][ T5932] option from the mount to silence this warning. [ 101.358925][ T5932] ======================================================= [ 101.462260][ T5932] JBD2: Ignoring recovery information on journal [ 101.549489][ T5932] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 101.574601][ T27] audit: type=1800 audit(1787205138.167:2): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 101.675117][ T27] audit: type=1800 audit(1787205138.267:3): pid=5936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 101.947065][ T5932] syz.0.17 (5932) used greatest stack depth: 18264 bytes left [ 101.987067][ T5890] [ 101.989440][ T5890] ====================================================== [ 101.996449][ T5890] WARNING: possible circular locking dependency detected [ 102.003470][ T5890] syzkaller #0 Not tainted [ 102.007884][ T5890] ------------------------------------------------------ [ 102.014888][ T5890] syz-executor/5890 is trying to acquire lock: [ 102.021055][ T5890] ffff88805fa3d118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: __ocfs2_flush_truncate_log+0x352/0x1130 [ 102.034198][ T5890] [ 102.034198][ T5890] but task is already holding lock: [ 102.041639][ T5890] ffff88805f851818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x47/0x60 [ 102.054338][ T5890] [ 102.054338][ T5890] which lock already depends on the new lock. [ 102.054338][ T5890] [ 102.064832][ T5890] [ 102.064832][ T5890] the existing dependency chain (in reverse order) is: [ 102.073850][ T5890] [ 102.073850][ T5890] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 102.084829][ T5890] down_write+0x97/0x200 [ 102.089634][ T5890] __ocfs2_move_extents_range+0x1a35/0x3450 [ 102.096084][ T5890] ocfs2_move_extents+0x3f9/0xa10 [ 102.101914][ T5890] ocfs2_ioctl_move_extents+0x4db/0x6e0 [ 102.107989][ T5890] ocfs2_ioctl+0x199/0x7e0 [ 102.112922][ T5890] __se_sys_ioctl+0xfd/0x170 [ 102.118176][ T5890] do_syscall_64+0x55/0xb0 [ 102.123153][ T5890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.129656][ T5890] [ 102.129656][ T5890] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 102.140172][ T5890] __lock_acquire+0x37ef/0x7d80 [ 102.145542][ T5890] lock_acquire+0x19e/0x420 [ 102.150557][ T5890] down_write+0x97/0x200 [ 102.155321][ T5890] __ocfs2_flush_truncate_log+0x352/0x1130 [ 102.161638][ T5890] ocfs2_flush_truncate_log+0x4f/0x60 [ 102.167530][ T5890] ocfs2_sync_fs+0x11d/0x330 [ 102.173350][ T5890] sync_filesystem+0x1c2/0x220 [ 102.178645][ T5890] generic_shutdown_super+0x6f/0x2b0 [ 102.184464][ T5890] kill_block_super+0x44/0x90 [ 102.189669][ T5890] deactivate_locked_super+0x97/0x100 [ 102.195569][ T5890] cleanup_mnt+0x3d7/0x460 [ 102.200516][ T5890] task_work_run+0x1d4/0x260 [ 102.205802][ T5890] exit_to_user_mode_loop+0xe6/0x110 [ 102.211609][ T5890] exit_to_user_mode_prepare+0xee/0x180 [ 102.217673][ T5890] syscall_exit_to_user_mode+0x1a/0x50 [ 102.223759][ T5890] do_syscall_64+0x61/0xb0 [ 102.228718][ T5890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.235142][ T5890] [ 102.235142][ T5890] other info that might help us debug this: [ 102.235142][ T5890] [ 102.245454][ T5890] Possible unsafe locking scenario: [ 102.245454][ T5890] [ 102.252902][ T5890] CPU0 CPU1 [ 102.258257][ T5890] ---- ---- [ 102.263612][ T5890] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 102.270891][ T5890] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 102.280708][ T5890] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 102.290535][ T5890] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 102.297811][ T5890] [ 102.297811][ T5890] *** DEADLOCK *** [ 102.297811][ T5890] [ 102.305947][ T5890] 2 locks held by syz-executor/5890: [ 102.311219][ T5890] #0: ffff88802d78a0e0 (&type->s_umount_key#56){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 102.321396][ T5890] #1: ffff88805f851818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x47/0x60 [ 102.334528][ T5890] [ 102.334528][ T5890] stack backtrace: [ 102.340450][ T5890] CPU: 0 PID: 5890 Comm: syz-executor Not tainted syzkaller #0 [ 102.348002][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.358156][ T5890] Call Trace: [ 102.361430][ T5890] [ 102.364363][ T5890] dump_stack_lvl+0x18c/0x250 [ 102.369036][ T5890] ? load_image+0x420/0x420 [ 102.373531][ T5890] ? show_regs_print_info+0x20/0x20 [ 102.378725][ T5890] ? print_circular_bug+0x12b/0x1a0 [ 102.383928][ T5890] check_noncircular+0x2fc/0x400 [ 102.388896][ T5890] ? print_deadlock_bug+0x5d0/0x5d0 [ 102.394108][ T5890] ? lockdep_lock+0xf5/0x230 [ 102.398744][ T5890] ? _find_first_zero_bit+0xd6/0x100 [ 102.404059][ T5890] __lock_acquire+0x37ef/0x7d80 [ 102.408909][ T5890] ? verify_lock_unused+0x140/0x140 [ 102.414107][ T5890] ? verify_lock_unused+0x140/0x140 [ 102.419302][ T5890] ? igrab+0x8b/0xa0 [ 102.423211][ T5890] ? __lock_acquire+0x7d80/0x7d80 [ 102.428227][ T5890] ? do_raw_spin_lock+0x11f/0x2b0 [ 102.433252][ T5890] lock_acquire+0x19e/0x420 [ 102.437773][ T5890] ? __ocfs2_flush_truncate_log+0x352/0x1130 [ 102.443753][ T5890] ? _raw_spin_unlock+0x28/0x40 [ 102.448598][ T5890] ? ocfs2_get_system_file_inode+0x1f9/0x820 [ 102.454619][ T5890] ? __might_sleep+0xe0/0xe0 [ 102.459222][ T5890] ? read_lock_is_recursive+0x20/0x20 [ 102.464599][ T5890] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 102.470753][ T5890] ? __wake_up+0x132/0x1a0 [ 102.475167][ T5890] down_write+0x97/0x200 [ 102.479409][ T5890] ? __ocfs2_flush_truncate_log+0x352/0x1130 [ 102.485403][ T5890] ? down_read_killable+0x340/0x340 [ 102.490659][ T5890] ? _raw_write_unlock+0x28/0x40 [ 102.495590][ T5890] ? jbd2_journal_unlock_updates+0x84/0xe0 [ 102.501390][ T5890] __ocfs2_flush_truncate_log+0x352/0x1130 [ 102.507197][ T5890] ? ocfs2_truncate_log_needs_flush+0x310/0x310 [ 102.513432][ T5890] ? read_lock_is_recursive+0x20/0x20 [ 102.518831][ T5890] ? down_write+0x16e/0x200 [ 102.523331][ T5890] ? down_read_killable+0x340/0x340 [ 102.528525][ T5890] ? __rwlock_init+0x150/0x150 [ 102.533287][ T5890] ocfs2_flush_truncate_log+0x4f/0x60 [ 102.538655][ T5890] ocfs2_sync_fs+0x11d/0x330 [ 102.543355][ T5890] ? ocfs2_put_super+0x1b0/0x1b0 [ 102.548456][ T5890] ? writeback_inodes_sb_nr+0x30/0x30 [ 102.553826][ T5890] sync_filesystem+0x1c2/0x220 [ 102.558581][ T5890] generic_shutdown_super+0x6f/0x2b0 [ 102.563858][ T5890] kill_block_super+0x44/0x90 [ 102.568527][ T5890] deactivate_locked_super+0x97/0x100 [ 102.573894][ T5890] cleanup_mnt+0x3d7/0x460 [ 102.578309][ T5890] task_work_run+0x1d4/0x260 [ 102.583080][ T5890] ? task_work_cancel+0x220/0x220 [ 102.588114][ T5890] ? exit_to_user_mode_loop+0x3b/0x110 [ 102.593586][ T5890] exit_to_user_mode_loop+0xe6/0x110 [ 102.598934][ T5890] exit_to_user_mode_prepare+0xee/0x180 [ 102.604504][ T5890] syscall_exit_to_user_mode+0x1a/0x50 [ 102.609984][ T5890] do_syscall_64+0x61/0xb0 [ 102.614400][ T5890] ? clear_bhb_loop+0x40/0x90 [ 102.619071][ T5890] ? clear_bhb_loop+0x40/0x90 [ 102.623756][ T5890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.629642][ T5890] RIP: 0033:0x7f39bf19f317 [ 102.634061][ T5890] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 102.653679][ T5890] RSP: 002b:00007ffc0498adb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 102.662122][ T5890] RAX: 0000000000000000 RBX: 00007f39bf234474 RCX: 00007f39bf19f317 [ 102.670103][ T5890] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0498ae70 [ 102.678084][ T5890] RBP: 00007ffc0498ae70 R08: 00007ffc0498be70 R09: 00000000ffffffff [ 102.686049][ T5890] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc0498bf00 [ 102.694013][ T5890] R13: 00007f39bf234474 R14: 0000000000018e00 R15: 00007ffc0498bf40 [ 102.702068][ T5890] [ 102.706534][ T5084] Bluetooth: hci0: command tx timeout [ 102.731661][ T5890] ocfs2: Unmounting device (7,0) on (node local) [ 102.944100][ T5938] loop0: detected capacity change from 0 to 32768 [ 102.968932][ T5938] JBD2: Ignoring recovery information on journal [ 102.996119][ T5938] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 103.012865][ T27] audit: type=1800 audit(1787205139.607:4): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 103.069122][ T27] audit: type=1800 audit(1787205139.657:5): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 103.354807][ T5938] (syz.0.18,5938,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 103.400445][ T5890] ocfs2: Unmounting device (7,0) on (node local) [ 103.615959][ T5944] loop0: detected capacity change from 0 to 32768 [ 103.637146][ T5944] JBD2: Ignoring recovery information on journal [ 103.671795][ T5944] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 103.690108][ T27] audit: type=1800 audit(1787205140.277:6): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.19" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 103.739574][ T27] audit: type=1800 audit(1787205140.327:7): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.19" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 104.050673][ T5944] (syz.0.19,5944,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 104.102812][ T5890] ocfs2: Unmounting device (7,0) on (node local) [ 104.316304][ T5950] loop0: detected capacity change from 0 to 32768 [ 104.331425][ T5950] JBD2: Ignoring recovery information on journal [ 104.357769][ T5950] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 104.369820][ T27] audit: type=1800 audit(1787205140.967:8): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.20" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 104.426269][ T27] audit: type=1800 audit(1787205141.017:9): pid=5954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.20" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 104.766813][ T5950] (syz.0.20,5950,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 104.823131][ T5890] ocfs2: Unmounting device (7,0) on (node local) [ 105.036967][ T5956] loop0: detected capacity change from 0 to 32768 [ 105.060485][ T5956] JBD2: Ignoring recovery information on journal [ 105.090100][ T5956] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 105.103452][ T27] audit: type=1800 audit(1787205141.697:10): pid=5956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.21" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 105.156466][ T27] audit: type=1800 audit(1787205141.747:11): pid=5960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.21" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 105.380406][ T5956] (syz.0.21,5956,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 105.414513][ T5890] ocfs2: Unmounting device (7,0) on (node local) [ 105.628122][ T5962] loop0: detected capacity change from 0 to 32768 [ 105.643493][ T5962] JBD2: Ignoring recovery information on journal [ 105.667739][ T5962] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. 2026/08/20 05:52:22 executed programs: 8 [ 106.084035][ T5962] (syz.0.22,5962,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 106.144807][ T5890] ocfs2: Unmounting device (7,0) on (node local) [ 106.365521][ T5968] loop0: detected capacity change from 0 to 32768 [ 106.386229][ T5968] JBD2: Ignoring recovery information on journal [ 106.410396][ T5968] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 106.752687][ T5968] (syz.0.23,5968,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 106.798274][ T5890] ocfs2: Unmounting device (7,0) on (node local) [ 107.012755][ T5974] loop0: detected capacity change from 0 to 32768 [ 107.033358][ T5974] JBD2: Ignoring recovery information on journal [ 107.061146][ T5974] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 107.073142][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 107.073155][ T27] audit: type=1800 audit(1787205143.667:16): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.24" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 107.154996][ T27] audit: type=1800 audit(1787205143.747:17): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.24" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 107.468806][ T5974] (syz.0.24,5974,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 107.524841][ T5890] ocfs2: Unmounting device (7,0) on (node local) [ 107.740410][ T5980] loop0: detected capacity change from 0 to 32768 [ 107.766109][ T5980] JBD2: Ignoring recovery information on journal [ 107.791683][ T5980] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 107.814777][ T27] audit: type=1800 audit(1787205144.407:18): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.25" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 107.894765][ T27] audit: type=1800 audit(1787205144.487:19): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.25" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 108.224529][ T5980] (syz.0.25,5980,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 108.280553][ T5890] ocfs2: Unmounting device (7,0) on (node local) [ 108.490441][ T5986] loop0: detected capacity change from 0 to 32768 [ 108.511441][ T5986] JBD2: Ignoring recovery information on journal [ 108.539988][ T5986] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 108.553063][ T27] audit: type=1800 audit(1787205145.147:20): pid=5986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.26" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 108.628384][ T27] audit: type=1800 audit(1787205145.217:21): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.26" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 108.982707][ T5986] (syz.0.26,5986,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 109.042710][ T5890] ocfs2: Unmounting device (7,0) on (node local) [ 109.258634][ T5992] loop0: detected capacity change from 0 to 32768 [ 109.278541][ T5992] JBD2: Ignoring recovery information on journal [ 109.301888][ T5992] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 109.324725][ T27] audit: type=1800 audit(1787205145.917:22): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.27" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 109.380641][ T27] audit: type=1800 audit(1787205145.967:23): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.27" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 109.616840][ T5992] (syz.0.27,5992,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 109.653327][ T5890] ocfs2: Unmounting device (7,0) on (node local) [ 109.859355][ T5998] loop0: detected capacity change from 0 to 32768 [ 109.879813][ T5998] JBD2: Ignoring recovery information on journal [ 109.902516][ T5998] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 109.917952][ T27] audit: type=1800 audit(1787205146.507:24): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.28" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 109.992491][ T27] audit: type=1800 audit(1787205146.587:25): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.28" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 110.291242][ T5998] (syz.0.28,5998,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 110.339542][ T5890] ocfs2: Unmounting device (7,0) on (node local) [ 110.557063][ T6004] loop0: detected capacity change from 0 to 32768 [ 110.577261][ T6004] JBD2: Ignoring recovery information on journal [ 110.626657][ T6004] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 111.046864][ T6004] (syz.0.29,6004,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 111.109127][ T5890] ocfs2: Unmounting device (7,0) on (node local) [ 111.318461][ T6010] loop0: detected capacity change from 0 to 32768 [ 111.340449][ T6010] JBD2: Ignoring recovery information on journal [ 111.377138][ T6010] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. 2026/08/20 05:52:28 executed programs: 16 [ 111.724939][ T6010] (syz.0.30,6010,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 111.772342][ T5890] ocfs2: Unmounting device (7,0) on (node local) [ 111.990550][ T6016] loop0: detected capacity change from 0 to 32768 [ 112.013837][ T6016] JBD2: Ignoring recovery information on journal