qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x2a8000) qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x3c4000) [ 96.994837][ T10] cfg80211: failed to load regulatory.db [ 153.971539][ T1026] ata1.00: exception Emask 0x0 SAct 0x40004000 SErr 0x0 action 0x6 frozen [ 153.975204][ T1026] ata1.00: failed command: WRITE FPDMA QUEUED [ 153.977850][ T1026] ata1.00: cmd 61/40:70:4e:56:04/15:00:00:00:00/40 tag 14 ncq dma 2785280 ou [ 153.977850][ T1026] res 40/00:00:00:00:00/00:00:00:00:00/00 Emask 0x4 (timeout) [ 153.984650][ T1026] ata1.00: status: { DRDY } [ 153.986743][ T1026] ata1.00: failed command: WRITE FPDMA QUEUED [ 153.989684][ T1026] ata1.00: cmd 61/20:f0:36:a1:05/1e:00:00:00:00/40 tag 30 ncq dma 3948544 ou [ 153.989684][ T1026] res 40/00:00:00:00:00/00:00:00:00:00/00 Emask 0x4 (timeout) [ 153.998332][ T1026] ata1.00: status: { DRDY } [ 154.000442][ T1026] ata1: hard resetting link [ 154.323423][ T1026] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 154.328320][ T1026] ata1.00: configured for UDMA/100 [ 154.331444][ T1026] ata1: EH complete qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x2a8000) [ 154.362292][ T1026] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 154.365271][ T1026] ata1: failed to read log page 10h (errno=-5) [ 154.367989][ T1026] ata1.00: NCQ disabled due to excessive errors [ 154.370669][ T1026] ata1.00: exception Emask 0x1 SAct 0x1800 SErr 0x0 action 0x0 [ 154.374000][ T1026] ata1.00: irq_stat 0x41000000 [ 154.376035][ T1026] ata1.00: failed command: WRITE FPDMA QUEUED [ 154.378682][ T1026] ata1.00: cmd 61/40:58:4e:56:04/15:00:00:00:00/40 tag 11 ncq dma 2785280 ou [ 154.378682][ T1026] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 154.386069][ T1026] ata1.00: status: { DRDY } [ 154.388369][ T1026] ata1.00: failed command: WRITE FPDMA QUEUED [ 154.391331][ T1026] ata1.00: cmd 61/20:60:36:a1:05/1e:00:00:00:00/40 tag 12 ncq dma 3948544 ou [ 154.391331][ T1026] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 154.399339][ T1026] ata1.00: status: { DRDY } [ 154.402724][ T1026] ata1.00: configured for UDMA/100 [ 154.405655][ T1026] ata1: EH complete Warning: Permanently added '[localhost]:49120' (ED25519) to the list of known hosts. 2026/05/27 09:07:49 parsed 1 programs [ 160.800980][ T5306] cgroup: Unknown subsys name 'net' [ 160.856332][ T5306] cgroup: Unknown subsys name 'cpuset' [ 160.864174][ T5306] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 162.622429][ T5306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 168.463412][ T44] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.477035][ T44] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.483587][ T44] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.496452][ T44] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.504281][ T44] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.364119][ T5323] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 170.592516][ T44] Bluetooth: hci0: command tx timeout [ 175.818317][ T5322] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.834517][ T5322] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.852255][ T5322] bridge_slave_0: entered allmulticast mode [ 175.868416][ T5322] bridge_slave_0: entered promiscuous mode [ 176.086328][ T5322] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.097811][ T5322] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.116050][ T5322] bridge_slave_1: entered allmulticast mode [ 176.132868][ T5322] bridge_slave_1: entered promiscuous mode [ 176.594439][ T5322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.747578][ T5322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.361161][ T5322] team0: Port device team_slave_0 added [ 178.738155][ T5322] team0: Port device team_slave_1 added [ 179.333339][ T5322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.353334][ T5322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.397473][ T5322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.414661][ T5322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.432410][ T5322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.467338][ T5322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.543719][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.560987][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.598125][ T5322] hsr_slave_0: entered promiscuous mode [ 180.612920][ T5322] hsr_slave_1: entered promiscuous mode [ 181.804070][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.818956][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.527623][ T5322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.659755][ T5322] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 182.695190][ T5322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 182.735191][ T5322] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 182.750338][ T5322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 182.776127][ T5322] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 182.793155][ T5322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 182.824715][ T5322] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 183.477360][ T5322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.782752][ T5322] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.807708][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.810931][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.879568][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.883122][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.977231][ T5322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.115868][ T5322] veth0_vlan: entered promiscuous mode [ 186.156762][ T5322] veth1_vlan: entered promiscuous mode [ 186.253662][ T5322] veth0_macvtap: entered promiscuous mode [ 186.284678][ T5322] veth1_macvtap: entered promiscuous mode [ 186.336312][ T5322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.365302][ T5322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.415559][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.449922][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.462033][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.500342][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/05/27 09:08:32 executed programs: 0 [ 202.442240][ T5322] syz-executor (5322) used greatest stack depth: 15736 bytes left [ 202.599840][ T5445] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.606011][ T5445] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.617634][ T5445] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.627572][ T5445] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.633118][ T5445] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.862294][ T136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.034519][ T44] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.049175][ T44] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.055638][ T44] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.063054][ T44] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.068509][ T44] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.229638][ T136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.262708][ T5445] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.270442][ T5445] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.277194][ T5445] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.287330][ T5445] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.295580][ T5445] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.503107][ T136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.714279][ T136] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.979270][ T44] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.988482][ T44] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.998614][ T44] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.008831][ T44] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.016568][ T44] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.205439][ T44] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.214961][ T44] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.225832][ T44] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.236438][ T44] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.244248][ T44] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.432797][ T4657] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 204.448065][ T4657] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 204.456125][ T4657] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 204.470299][ T4657] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 204.475831][ T4657] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 204.517957][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.527912][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.832004][ T4657] Bluetooth: hci0: command tx timeout [ 204.936634][ T136] bridge_slave_1: left allmulticast mode [ 204.970614][ T136] bridge_slave_1: left promiscuous mode [ 204.993931][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.032283][ T136] bridge_slave_0: left allmulticast mode [ 205.050361][ T136] bridge_slave_0: left promiscuous mode [ 205.070876][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.151549][ T4657] Bluetooth: hci2: command tx timeout [ 205.391594][ T4657] Bluetooth: hci3: command tx timeout [ 205.532639][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.566176][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.580762][ T136] bond0 (unregistering): Released all slaves [ 205.849034][ T136] hsr_slave_0: left promiscuous mode [ 205.898070][ T136] hsr_slave_1: left promiscuous mode [ 205.917912][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.947786][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.980697][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.006080][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.109030][ T136] veth1_macvtap: left promiscuous mode [ 206.112716][ T4657] Bluetooth: hci1: command tx timeout [ 206.121468][ T136] veth0_macvtap: left promiscuous mode [ 206.131410][ T136] veth1_vlan: left promiscuous mode [ 206.134071][ T136] veth0_vlan: left promiscuous mode [ 206.272162][ T4657] Bluetooth: hci4: command tx timeout [ 206.512269][ T4657] Bluetooth: hci5: command tx timeout [ 206.566453][ T136] team0 (unregistering): Port device team_slave_1 removed [ 206.583903][ T136] team0 (unregistering): Port device team_slave_0 removed [ 206.911296][ T4657] Bluetooth: hci0: command tx timeout [ 207.232189][ T4657] Bluetooth: hci2: command tx timeout [ 207.471539][ T4657] Bluetooth: hci3: command tx timeout [ 208.178936][ T5003] 8021q: adding VLAN 0 to HW filter on device eth2 [ 208.191185][ T4657] Bluetooth: hci1: command tx timeout [ 208.357454][ T4657] Bluetooth: hci4: command tx timeout [ 208.591444][ T4657] Bluetooth: hci5: command tx timeout [ 208.992131][ T4657] Bluetooth: hci0: command tx timeout [ 209.043571][ T5447] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.047531][ T5447] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.058148][ T5447] bridge_slave_0: entered allmulticast mode [ 209.065667][ T5447] bridge_slave_0: entered promiscuous mode [ 209.229436][ T5447] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.242641][ T5447] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.255750][ T5447] bridge_slave_1: entered allmulticast mode [ 209.268939][ T5447] bridge_slave_1: entered promiscuous mode [ 209.311500][ T4657] Bluetooth: hci2: command tx timeout [ 209.398413][ T5003] 8021q: adding VLAN 0 to HW filter on device eth3 [ 209.478756][ T5451] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.484603][ T5451] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.488179][ T5451] bridge_slave_0: entered allmulticast mode [ 209.495039][ T5451] bridge_slave_0: entered promiscuous mode [ 209.518433][ T5447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.539794][ T5451] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.543869][ T5451] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.547482][ T5451] bridge_slave_1: entered allmulticast mode [ 209.551213][ T4657] Bluetooth: hci3: command tx timeout [ 209.555048][ T5451] bridge_slave_1: entered promiscuous mode [ 209.576288][ T5447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.725821][ T5451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.744109][ T5451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.865567][ T5447] team0: Port device team_slave_0 added [ 209.968527][ T5451] team0: Port device team_slave_0 added [ 209.983392][ T5447] team0: Port device team_slave_1 added [ 210.095560][ T5451] team0: Port device team_slave_1 added [ 210.197828][ T5440] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.211279][ T5440] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.216065][ T5440] bridge_slave_0: entered allmulticast mode [ 210.225283][ T5440] bridge_slave_0: entered promiscuous mode [ 210.272392][ T4657] Bluetooth: hci1: command tx timeout [ 210.316554][ T5440] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.320294][ T5440] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.324172][ T5440] bridge_slave_1: entered allmulticast mode [ 210.328220][ T5440] bridge_slave_1: entered promiscuous mode [ 210.334667][ T5003] 8021q: adding VLAN 0 to HW filter on device eth4 [ 210.338200][ T5442] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.343511][ T5442] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.347326][ T5442] bridge_slave_0: entered allmulticast mode [ 210.354706][ T5442] bridge_slave_0: entered promiscuous mode [ 210.360068][ T5451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.364092][ T5451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.376337][ T5451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.383377][ T5447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.386659][ T5447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.398800][ T5447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.431197][ T4657] Bluetooth: hci4: command tx timeout [ 210.452226][ T5442] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.455433][ T5442] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.458602][ T5442] bridge_slave_1: entered allmulticast mode [ 210.463203][ T5442] bridge_slave_1: entered promiscuous mode [ 210.478572][ T5451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.482286][ T5451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.493911][ T5451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.499586][ T5447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.503240][ T5447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.515197][ T5447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.604578][ T5440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.618350][ T5442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.635370][ T5473] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.639007][ T5473] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.643453][ T5473] bridge_slave_0: entered allmulticast mode [ 210.647771][ T5473] bridge_slave_0: entered promiscuous mode [ 210.654863][ T5440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.671951][ T4657] Bluetooth: hci5: command tx timeout [ 210.712394][ T5442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.804415][ T5473] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.815350][ T5473] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.822040][ T5473] bridge_slave_1: entered allmulticast mode [ 210.833396][ T5473] bridge_slave_1: entered promiscuous mode [ 210.914307][ T5451] hsr_slave_0: entered promiscuous mode [ 210.923483][ T5451] hsr_slave_1: entered promiscuous mode [ 210.973155][ T5464] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.981769][ T5464] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.985740][ T5464] bridge_slave_0: entered allmulticast mode [ 210.995164][ T5464] bridge_slave_0: entered promiscuous mode [ 211.012755][ T5473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.048998][ T5442] team0: Port device team_slave_0 added [ 211.072649][ T4657] Bluetooth: hci0: command tx timeout [ 211.084765][ T5464] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.097881][ T5464] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.113460][ T5464] bridge_slave_1: entered allmulticast mode [ 211.125656][ T5464] bridge_slave_1: entered promiscuous mode [ 211.160209][ T5473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.205991][ T5440] team0: Port device team_slave_0 added [ 211.213537][ T5442] team0: Port device team_slave_1 added [ 211.228447][ T5447] hsr_slave_0: entered promiscuous mode [ 211.242599][ T5447] hsr_slave_1: entered promiscuous mode [ 211.247540][ T5447] debugfs: 'hsr0' already exists in 'hsr' [ 211.250515][ T5447] Cannot create hsr debugfs directory [ 211.264494][ T5003] 8021q: adding VLAN 0 to HW filter on device eth5 [ 211.308910][ T5464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.377010][ T5440] team0: Port device team_slave_1 added [ 211.391492][ T4657] Bluetooth: hci2: command tx timeout [ 211.467633][ T5464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.487929][ T5473] team0: Port device team_slave_0 added [ 211.514510][ T5473] team0: Port device team_slave_1 added [ 211.631227][ T4657] Bluetooth: hci3: command tx timeout [ 211.694997][ T5440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.701987][ T5440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.731528][ T5440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.743248][ T5440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.751392][ T5440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.781428][ T5440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.789669][ T5442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.801680][ T5442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.826206][ T5442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.849512][ T5473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.853803][ T5473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.866458][ T5473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.889910][ T5442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.901664][ T5442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.922178][ T5442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.958081][ T5464] team0: Port device team_slave_0 added [ 211.969457][ T5473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.973262][ T5473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.985470][ T5473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.011892][ T5464] team0: Port device team_slave_1 added [ 212.170219][ T5464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.173303][ T5464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.186204][ T5464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.216338][ T5440] hsr_slave_0: entered promiscuous mode [ 212.219810][ T5440] hsr_slave_1: entered promiscuous mode [ 212.223857][ T5440] debugfs: 'hsr0' already exists in 'hsr' [ 212.226821][ T5440] Cannot create hsr debugfs directory [ 212.237089][ T5442] hsr_slave_0: entered promiscuous mode [ 212.240575][ T5442] hsr_slave_1: entered promiscuous mode [ 212.244455][ T5442] debugfs: 'hsr0' already exists in 'hsr' [ 212.247377][ T5442] Cannot create hsr debugfs directory [ 212.263234][ T5464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.268478][ T5464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.282291][ T5464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.351551][ T4657] Bluetooth: hci1: command tx timeout [ 212.499600][ T5473] hsr_slave_0: entered promiscuous mode [ 212.511406][ T4657] Bluetooth: hci4: command tx timeout [ 212.516849][ T5473] hsr_slave_1: entered promiscuous mode [ 212.525308][ T5473] debugfs: 'hsr0' already exists in 'hsr' [ 212.532731][ T5473] Cannot create hsr debugfs directory [ 212.570100][ T5464] hsr_slave_0: entered promiscuous mode [ 212.574071][ T5464] hsr_slave_1: entered promiscuous mode [ 212.577679][ T5464] debugfs: 'hsr0' already exists in 'hsr' [ 212.580925][ T5464] Cannot create hsr debugfs directory [ 212.751314][ T4657] Bluetooth: hci5: command tx timeout [ 212.956355][ T5447] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.967255][ T5447] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.007342][ T5447] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 213.015333][ T5447] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.019176][ T5447] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 213.029913][ T5447] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.199150][ T5447] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.216253][ T5447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.698357][ T5447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.790216][ T5447] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.886109][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.889506][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.932488][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.936349][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.983408][ T5440] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 214.007641][ T5440] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 214.023794][ T5440] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 214.045568][ T5440] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 214.049167][ T5440] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 214.064244][ T5440] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 214.089523][ T5440] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 214.113938][ T5440] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 214.459738][ T5451] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 214.479889][ T5451] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 214.497796][ T5451] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 214.530613][ T5451] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 214.542457][ T5451] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 214.557089][ T5451] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 214.584343][ T5451] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 214.612211][ T5451] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 215.046565][ T5442] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.076642][ T5442] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 215.099822][ T5442] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.126161][ T5442] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 215.139514][ T5442] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.165529][ T5442] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 215.185578][ T5442] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.200743][ T5442] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 215.680205][ T5473] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 215.713496][ T5473] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 215.723722][ T5473] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 215.740018][ T5473] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 215.756506][ T5440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.774711][ T5473] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 215.798516][ T5473] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 215.836561][ T5473] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 215.860759][ T5473] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 216.070049][ T5440] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.124381][ T5447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.150381][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.153146][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.283379][ T5451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.296779][ T1056] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.300189][ T1056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.324326][ T5464] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 216.340189][ T5464] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.352410][ T5464] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 216.372360][ T5464] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.411392][ T5464] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 216.420142][ T5464] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.434121][ T5464] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 216.446610][ T5464] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 216.598437][ T5451] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.682242][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.686215][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.769160][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.772861][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.843826][ T5442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.947719][ T5447] veth0_vlan: entered promiscuous mode [ 217.054778][ T5442] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.149950][ T5447] veth1_vlan: entered promiscuous mode [ 217.164370][ T1056] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.167956][ T1056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.214305][ T1056] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.217495][ T1056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.252530][ T5473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.410357][ T5473] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.473897][ T1056] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.477395][ T1056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.547853][ T1056] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.550840][ T1056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.579932][ T5447] veth0_macvtap: entered promiscuous mode [ 217.600518][ T5464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.666789][ T5447] veth1_macvtap: entered promiscuous mode [ 217.852148][ T5464] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.930249][ T1056] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.934135][ T1056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.967127][ T5447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.995009][ T5447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.060338][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.063681][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.114066][ T136] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.140214][ T136] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.211619][ T1164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.233342][ T1164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.457121][ T5440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.840063][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.876102][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.057754][ T1056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.088992][ T1056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.160854][ T5440] veth0_vlan: entered promiscuous mode [ 219.228525][ T5451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.329629][ T5440] veth1_vlan: entered promiscuous mode [ 219.666664][ T5440] veth0_macvtap: entered promiscuous mode 2026/05/27 09:08:50 executed programs: 12 [ 219.737664][ T5440] veth1_macvtap: entered promiscuous mode [ 219.926441][ T5442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.024525][ T5440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.124932][ T5440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.206999][ T1056] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.227698][ T1056] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.255043][ T1056] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.280450][ T1056] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.438886][ T5473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.698199][ T5442] veth0_vlan: entered promiscuous mode [ 220.895124][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.920940][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.932677][ T5442] veth1_vlan: entered promiscuous mode [ 221.088843][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.105656][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.130296][ T5464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.196777][ T5451] veth0_vlan: entered promiscuous mode [ 221.288541][ T5451] veth1_vlan: entered promiscuous mode [ 221.402832][ T5442] veth0_macvtap: entered promiscuous mode [ 221.503178][ T5442] veth1_macvtap: entered promiscuous mode [ 221.663112][ T5442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.677527][ T5464] veth0_vlan: entered promiscuous mode [ 221.741476][ T5442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.772156][ T5451] veth0_macvtap: entered promiscuous mode [ 221.793734][ T1107] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.807070][ T1107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.835488][ T1107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.848524][ T1107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.869793][ T5464] veth1_vlan: entered promiscuous mode [ 221.893815][ T5451] veth1_macvtap: entered promiscuous mode [ 222.098153][ T5451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.193722][ T5451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.216235][ T5473] veth0_vlan: entered promiscuous mode [ 222.322621][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.335657][ T5735] loop0: detected capacity change from 0 to 32768 [ 222.348670][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.353686][ T1056] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.376187][ T136] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.395604][ T5464] veth0_macvtap: entered promiscuous mode [ 222.432185][ T136] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.458074][ T136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.490348][ T5735] (syz.0.17,5735,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 222.545383][ T5735] (syz.0.17,5735,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 222.566258][ T5473] veth1_vlan: entered promiscuous mode [ 222.590564][ T5464] veth1_macvtap: entered promiscuous mode [ 222.688663][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.719370][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.830692][ T5735] JBD2: Ignoring recovery information on journal [ 222.859655][ T5464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.114932][ T5464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.129613][ T5735] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 223.219198][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.235273][ T136] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.257512][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.272296][ T136] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.329923][ T136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.349191][ T136] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.448406][ T5473] veth0_macvtap: entered promiscuous mode [ 223.529486][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.540151][ T5473] veth1_macvtap: entered promiscuous mode [ 223.549951][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.909767][ T5473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.035209][ T5473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.065798][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.100980][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.187570][ T24] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.220781][ T24] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.359992][ T24] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.389220][ T24] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.426825][ T5746] [ 224.427989][ T5746] ====================================================== [ 224.431112][ T5746] WARNING: possible circular locking dependency detected [ 224.434241][ T5746] syzkaller #0 Not tainted [ 224.436295][ T5746] ------------------------------------------------------ [ 224.439414][ T5746] syz.0.17/5746 is trying to acquire lock: [ 224.442013][ T5746] ffff888046987658 (&oi->ip_alloc_sem){+.+.}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xb6/0x340 [ 224.446625][ T5746] [ 224.446625][ T5746] but task is already holding lock: [ 224.449823][ T5746] ffff8880469876e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x340 [ 224.454441][ T5746] [ 224.454441][ T5746] which lock already depends on the new lock. [ 224.454441][ T5746] [ 224.459175][ T5746] [ 224.459175][ T5746] the existing dependency chain (in reverse order) is: [ 224.463131][ T5746] [ 224.463131][ T5746] -> #3 (&oi->ip_xattr_sem){++++}-{4:4}: [ 224.466569][ T5746] down_read+0x47/0x2e0 [ 224.468656][ T5746] ocfs2_init_acl+0x2fd/0x7e0 [ 224.470765][ T5746] ocfs2_mknod+0x1679/0x2260 [ 224.472852][ T5746] ocfs2_create+0x195/0x460 [ 224.474925][ T5746] path_openat+0x1395/0x3860 [ 224.477053][ T5746] do_file_open+0x23e/0x4a0 [ 224.479354][ T5746] do_sys_openat2+0x113/0x200 [ 224.481804][ T5746] __x64_sys_creat+0x8f/0xc0 [ 224.484028][ T5746] do_syscall_64+0x15f/0x560 [ 224.486195][ T5746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.488995][ T5746] [ 224.488995][ T5746] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 224.492882][ T5746] down_read+0x47/0x2e0 [ 224.495051][ T5746] ocfs2_start_trans+0x3ab/0x700 [ 224.497634][ T5746] ocfs2_modify_bh+0xe3/0x4d0 [ 224.499863][ T5746] ocfs2_local_read_info+0x1454/0x1810 [ 224.502509][ T5746] dquot_load_quota_sb+0x791/0xbd0 [ 224.504996][ T5746] dquot_load_quota_inode+0x2e1/0x5d0 [ 224.507593][ T5746] ocfs2_enable_quotas+0x1c8/0x4a0 [ 224.509996][ T5746] ocfs2_fill_super+0x5356/0x6970 [ 224.512475][ T5746] get_tree_bdev_flags+0x431/0x4f0 [ 224.515081][ T5746] vfs_get_tree+0x92/0x2a0 [ 224.517313][ T5746] do_new_mount+0x341/0xd30 [ 224.519433][ T5746] __se_sys_mount+0x31d/0x420 [ 224.521717][ T5746] do_syscall_64+0x15f/0x560 [ 224.523915][ T5746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.526726][ T5746] [ 224.526726][ T5746] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 224.530080][ T5746] ocfs2_start_trans+0x2ac/0x700 [ 224.532425][ T5746] ocfs2_truncate_file+0x631/0x14e0 [ 224.535125][ T5746] ocfs2_setattr+0x15e5/0x1ca0 [ 224.537792][ T5746] notify_change+0xc1a/0xf40 [ 224.540637][ T5746] do_truncate+0x1c2/0x250 [ 224.542952][ T5746] path_openat+0x2f89/0x3860 [ 224.545291][ T5746] do_file_open+0x23e/0x4a0 [ 224.547624][ T5746] do_sys_openat2+0x113/0x200 [ 224.550035][ T5746] __x64_sys_open+0x11e/0x150 [ 224.552407][ T5746] do_syscall_64+0x15f/0x560 [ 224.554855][ T5746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.557742][ T5746] [ 224.557742][ T5746] -> #0 (&oi->ip_alloc_sem){+.+.}-{4:4}: [ 224.561255][ T5746] __lock_acquire+0x15a5/0x2cf0 [ 224.563752][ T5746] lock_acquire+0x106/0x350 [ 224.566065][ T5746] down_write+0x96/0x200 [ 224.568217][ T5746] ocfs2_try_remove_refcount_tree+0xb6/0x340 [ 224.571128][ T5746] ocfs2_truncate_file+0xdf3/0x14e0 [ 224.573568][ T5746] ocfs2_setattr+0x15e5/0x1ca0 [ 224.575944][ T5746] notify_change+0xc1a/0xf40 [ 224.578223][ T5746] do_truncate+0x1c2/0x250 [ 224.580508][ T5746] path_openat+0x2f89/0x3860 [ 224.582737][ T5746] do_file_open+0x23e/0x4a0 [ 224.585011][ T5746] do_sys_openat2+0x113/0x200 [ 224.587415][ T5746] __x64_sys_open+0x11e/0x150 [ 224.589769][ T5746] do_syscall_64+0x15f/0x560 [ 224.592052][ T5746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.594935][ T5746] [ 224.594935][ T5746] other info that might help us debug this: [ 224.594935][ T5746] [ 224.599451][ T5746] Chain exists of: [ 224.599451][ T5746] &oi->ip_alloc_sem --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 224.599451][ T5746] [ 224.605811][ T5746] Possible unsafe locking scenario: [ 224.605811][ T5746] [ 224.609091][ T5746] CPU0 CPU1 [ 224.611441][ T5746] ---- ---- [ 224.613920][ T5746] lock(&oi->ip_xattr_sem); [ 224.616086][ T5746] lock(&journal->j_trans_barrier); [ 224.619390][ T5746] lock(&oi->ip_xattr_sem); [ 224.622453][ T5746] lock(&oi->ip_alloc_sem); [ 224.624375][ T5746] [ 224.624375][ T5746] *** DEADLOCK *** [ 224.624375][ T5746] [ 224.627712][ T5746] 3 locks held by syz.0.17/5746: [ 224.629826][ T5746] #0: ffff88801cf4c410 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 224.633760][ T5746] #1: ffff8880469879a0 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: do_truncate+0x18f/0x250 [ 224.638127][ T5746] #2: ffff8880469876e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x340 [ 224.642916][ T5746] [ 224.642916][ T5746] stack backtrace: [ 224.645511][ T5746] CPU: 0 UID: 0 PID: 5746 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 224.645528][ T5746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.645535][ T5746] Call Trace: [ 224.645543][ T5746] [ 224.645549][ T5746] dump_stack_lvl+0xe8/0x150 [ 224.645563][ T5746] print_circular_bug+0x2e1/0x300 [ 224.645578][ T5746] check_noncircular+0x12e/0x150 [ 224.645592][ T5746] __lock_acquire+0x15a5/0x2cf0 [ 224.645616][ T5746] ? ocfs2_try_remove_refcount_tree+0xb6/0x340 [ 224.645629][ T5746] lock_acquire+0x106/0x350 [ 224.645640][ T5746] ? ocfs2_try_remove_refcount_tree+0xb6/0x340 [ 224.645654][ T5746] down_write+0x96/0x200 [ 224.645665][ T5746] ? ocfs2_try_remove_refcount_tree+0xb6/0x340 [ 224.645675][ T5746] ? __pfx_down_write+0x10/0x10 [ 224.645687][ T5746] ocfs2_try_remove_refcount_tree+0xb6/0x340 [ 224.645700][ T5746] ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10 [ 224.645711][ T5746] ? ocfs2_metadata_cache_get_super+0x43/0x80 [ 224.645723][ T5746] ocfs2_truncate_file+0xdf3/0x14e0 [ 224.645741][ T5746] ? __pfx_ocfs2_truncate_file+0x10/0x10 [ 224.645755][ T5746] ? do_raw_spin_unlock+0x4d/0x210 [ 224.645769][ T5746] ? _raw_spin_unlock+0x28/0x50 [ 224.645782][ T5746] ? ocfs2_inode_lock_tracker+0x436/0x710 [ 224.645795][ T5746] ? __pfx_ocfs2_inode_lock_tracker+0x10/0x10 [ 224.645805][ T5746] ? ocfs2_rw_lock+0x13a/0x250 [ 224.645814][ T5746] ? __pfx___dquot_initialize+0x10/0x10 [ 224.645824][ T5746] ? __pfx_ocfs2_rw_lock+0x10/0x10 [ 224.645835][ T5746] ? do_raw_spin_unlock+0x4d/0x210 [ 224.645847][ T5746] ? jbd2_journal_begin_ordered_truncate+0xbb/0x150 [ 224.645859][ T5746] ocfs2_setattr+0x15e5/0x1ca0 [ 224.645870][ T5746] ? __pfx_ocfs2_setattr+0x10/0x10 [ 224.645882][ T5746] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 224.645897][ T5746] ? lockdep_hardirqs_on+0x7a/0x110 [ 224.645912][ T5746] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 224.645922][ T5746] ? seqcount_lockdep_reader_access+0xea/0x100 [ 224.645936][ T5746] ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0 [ 224.645946][ T5746] ? current_time+0x22a/0x370 [ 224.645958][ T5746] ? evm_inode_setattr+0x1b6/0x7d0 [ 224.645973][ T5746] ? __pfx_current_time+0x10/0x10 [ 224.645985][ T5746] ? try_break_deleg+0x5b/0x180 [ 224.645998][ T5746] ? __pfx_ocfs2_setattr+0x10/0x10 [ 224.646007][ T5746] notify_change+0xc1a/0xf40 [ 224.646021][ T5746] do_truncate+0x1c2/0x250 [ 224.646034][ T5746] ? __pfx_do_truncate+0x10/0x10 [ 224.646045][ T5746] ? apparmor_file_truncate+0x39f/0x470 [ 224.646057][ T5746] path_openat+0x2f89/0x3860 [ 224.646073][ T5746] ? __pfx_stack_trace_save+0x10/0x10 [ 224.646091][ T5746] ? __pfx_path_openat+0x10/0x10 [ 224.646103][ T5746] ? __x64_sys_open+0x11e/0x150 [ 224.646116][ T5746] do_file_open+0x23e/0x4a0 [ 224.646130][ T5746] ? __pfx_do_file_open+0x10/0x10 [ 224.646141][ T5746] ? _raw_spin_unlock+0x28/0x50 [ 224.646149][ T5746] ? alloc_fd+0x64b/0x6c0 [ 224.646160][ T5746] do_sys_openat2+0x113/0x200 [ 224.646169][ T5746] ? __se_sys_futex+0x3a8/0x450 [ 224.646181][ T5746] ? __pfx_do_sys_openat2+0x10/0x10 [ 224.646191][ T5746] ? rcu_is_watching+0x15/0xb0 [ 224.646204][ T5746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.646215][ T5746] __x64_sys_open+0x11e/0x150 [ 224.646225][ T5746] do_syscall_64+0x15f/0x560 [ 224.646234][ T5746] ? trace_irq_disable+0x3b/0x140 [ 224.646248][ T5746] ? clear_bhb_loop+0x40/0x90 [ 224.646260][ T5746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.646270][ T5746] RIP: 0033:0x7f6b88b9ce59 [ 224.646282][ T5746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.646290][ T5746] RSP: 002b:00007f6b89a40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 224.646302][ T5746] RAX: ffffffffffffffda RBX: 00007f6b88e16180 RCX: 00007f6b88b9ce59 [ 224.646309][ T5746] RDX: 0000000000000020 RSI: 000000000014927e RDI: 0000200000001340 [ 224.646316][ T5746] RBP: 00007f6b88c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 224.646323][ T5746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.646329][ T5746] R13: 00007f6b88e16218 R14: 00007f6b88e16180 R15: 00007ffda79b0408 [ 224.646340][ T5746] [ 225.550725][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.554313][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.578686][ T5440] ocfs2: Unmounting device (7,0) on (node local) [ 225.663110][ T5473] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' 2026/05/27 09:08:56 executed programs: 18 [ 225.833256][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.858743][ T5473] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 225.865950][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.011551][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.040289][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.295711][ T5755] loop0: detected capacity change from 0 to 32768 [ 227.339497][ T5755] (syz.0.25,5755,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 227.404610][ T5755] (syz.0.25,5755,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 227.513011][ T5755] JBD2: Ignoring recovery information on journal [ 227.643064][ T5755] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 227.935677][ T5440] ocfs2: Unmounting device (7,0) on (node local) [ 229.380239][ T5775] loop0: detected capacity change from 0 to 32768 [ 229.415091][ T5775] (syz.0.31,5775,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 229.464222][ T5775] (syz.0.31,5775,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 229.573975][ T5775] JBD2: Ignoring recovery information on journal [ 229.700678][ T5775] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 229.993363][ T5440] ocfs2: Unmounting device (7,0) on (node local) 2026/05/27 09:09:01 executed programs: 37 [ 231.360554][ T5794] loop0: detected capacity change from 0 to 32768 [ 231.399293][ T5794] (syz.0.40,5794,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 231.447857][ T5794] (syz.0.40,5794,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 231.527297][ T5794] JBD2: Ignoring recovery information on journal [ 231.627664][ T5794] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 231.862834][ T5440] ocfs2: Unmounting device (7,0) on (node local) [ 233.168729][ T5810] loop0: detected capacity change from 0 to 32768 [ 233.213321][ T5810] (syz.0.46,5810,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 233.271180][ T5810] (syz.0.46,5810,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 233.383023][ T5810] JBD2: Ignoring recovery information on journal [ 233.503756][ T5810] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 233.753492][ T5440] ocfs2: Unmounting device (7,0) on (node local)