Warning: Permanently added '10.128.0.63' (ED25519) to the list of known hosts. 2026/09/28 11:04:30 parsed 1 programs 2026/09/28 11:04:30 serving rpc on tcp://39959 [ 91.552407][ T5787] cgroup: Unknown subsys name 'net' [ 91.669939][ T5787] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.999750][ T9] cfg80211: failed to load regulatory.db [ 93.388080][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.342438][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.350476][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.384157][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.392182][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.094496][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 96.200612][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.208513][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.215908][ T5819] bridge_slave_0: entered allmulticast mode [ 96.223536][ T5819] bridge_slave_0: entered promiscuous mode [ 96.237317][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.244603][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.251892][ T5819] bridge_slave_1: entered allmulticast mode [ 96.262873][ T5819] bridge_slave_1: entered promiscuous mode [ 96.310408][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.322654][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.366126][ T5819] team0: Port device team_slave_0 added [ 96.377605][ T5819] team0: Port device team_slave_1 added [ 96.409868][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.416998][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.443026][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.456424][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.463941][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.489983][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.542089][ T5819] hsr_slave_0: entered promiscuous mode [ 96.548570][ T5819] hsr_slave_1: entered promiscuous mode [ 96.710228][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.723846][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.734460][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.746749][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.862620][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.899915][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.914794][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.922111][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.952185][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.959339][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.218172][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.277584][ T5819] veth0_vlan: entered promiscuous mode [ 97.289486][ T5819] veth1_vlan: entered promiscuous mode [ 97.328804][ T5819] veth0_macvtap: entered promiscuous mode [ 97.339315][ T5819] veth1_macvtap: entered promiscuous mode [ 97.366248][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.393428][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.406625][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.416802][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.425914][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.435217][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.628584][ T5819] syz-executor (5819) used greatest stack depth: 20752 bytes left [ 97.659385][ T2928] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.047881][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.057120][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.065225][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.081781][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.089553][ T5878] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.098257][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.523849][ T2928] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/09/28 11:04:42 executed programs: 0 [ 101.083070][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.093214][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.101313][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.109612][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.118488][ T5878] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 101.126500][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.281532][ T5893] chnl_net:caif_netlink_parms(): no params data found [ 101.355294][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.362602][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.369781][ T5893] bridge_slave_0: entered allmulticast mode [ 101.377335][ T5893] bridge_slave_0: entered promiscuous mode [ 101.386898][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.394391][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.401668][ T5893] bridge_slave_1: entered allmulticast mode [ 101.408703][ T5893] bridge_slave_1: entered promiscuous mode [ 101.438600][ T5893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.451480][ T5893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.485093][ T5893] team0: Port device team_slave_0 added [ 101.493162][ T5893] team0: Port device team_slave_1 added [ 101.519086][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.526248][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.552265][ T5893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.564632][ T5893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.571738][ T5893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.597992][ T5893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.645340][ T5893] hsr_slave_0: entered promiscuous mode [ 101.652517][ T5893] hsr_slave_1: entered promiscuous mode [ 101.659089][ T5893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.667692][ T5893] Cannot create hsr debugfs directory [ 102.883358][ T2928] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.937653][ T2928] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.194864][ T5878] Bluetooth: hci0: command tx timeout [ 103.772810][ T2928] hsr_slave_0: left promiscuous mode [ 103.779337][ T2928] hsr_slave_1: left promiscuous mode [ 103.786301][ T2928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.794871][ T2928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.804111][ T2928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.812060][ T2928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.820026][ T2928] bridge_slave_1: left allmulticast mode [ 103.826249][ T2928] bridge_slave_1: left promiscuous mode [ 103.835296][ T2928] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.848575][ T2928] bridge_slave_0: left allmulticast mode [ 103.855366][ T2928] bridge_slave_0: left promiscuous mode [ 103.861839][ T2928] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.893219][ T2928] veth1_macvtap: left promiscuous mode [ 103.899151][ T2928] veth0_macvtap: left promiscuous mode [ 103.905406][ T2928] veth1_vlan: left promiscuous mode [ 103.914314][ T2928] veth0_vlan: left promiscuous mode [ 104.420054][ T2928] team0 (unregistering): Port device team_slave_1 removed [ 104.458243][ T2928] team0 (unregistering): Port device team_slave_0 removed [ 104.496668][ T2928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.527628][ T2928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.764159][ T2928] bond0 (unregistering): Released all slaves [ 104.870601][ T5893] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.884131][ T5893] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.894600][ T5893] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.907215][ T5893] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.014132][ T5893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.033947][ T5893] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.053371][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.060663][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.078396][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.085590][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.271329][ T5878] Bluetooth: hci0: command tx timeout [ 105.348899][ T5893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.448913][ T5893] veth0_vlan: entered promiscuous mode [ 105.468075][ T5893] veth1_vlan: entered promiscuous mode [ 105.525506][ T5893] veth0_macvtap: entered promiscuous mode [ 105.536438][ T5893] veth1_macvtap: entered promiscuous mode [ 105.563560][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.577813][ T5893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.591906][ T5893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.600660][ T5893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.610332][ T5893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.619948][ T5893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.685590][ T4804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.699497][ T4804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.726863][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.736269][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.785855][ T5933] syz.0.17[5933]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 106.170652][ T5933] loop0: detected capacity change from 0 to 32768 [ 106.181177][ T5933] ======================================================= [ 106.181177][ T5933] WARNING: The mand mount option has been deprecated and [ 106.181177][ T5933] and is ignored by this kernel. Remove the mand [ 106.181177][ T5933] option from the mount to silence this warning. [ 106.181177][ T5933] ======================================================= [ 106.327917][ T5933] JBD2: Ignoring recovery information on journal [ 106.427631][ T5933] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 106.494569][ T28] audit: type=1800 audit(1790593487.970:2): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 106.572316][ T28] audit: type=1800 audit(1790593488.050:3): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=17058 res=0 errno=0 2026/09/28 11:04:48 executed programs: 3 [ 106.697471][ T5893] ocfs2: Unmounting device (7,0) on (node local) [ 107.155052][ T5938] loop0: detected capacity change from 0 to 32768 [ 107.214380][ T5938] JBD2: Ignoring recovery information on journal [ 107.273135][ T5938] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 107.320869][ T28] audit: type=1800 audit(1790593488.800:4): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 107.358707][ T5878] Bluetooth: hci0: command tx timeout [ 107.418085][ T28] audit: type=1800 audit(1790593488.900:5): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 107.619022][ T5938] syz.0.18 (5938) used greatest stack depth: 18264 bytes left [ 107.648037][ T5893] [ 107.650405][ T5893] ====================================================== [ 107.657429][ T5893] WARNING: possible circular locking dependency detected [ 107.664459][ T5893] syzkaller #0 Not tainted [ 107.668873][ T5893] ------------------------------------------------------ [ 107.675890][ T5893] syz-executor/5893 is trying to acquire lock: [ 107.682041][ T5893] ffff88805ea11818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: __ocfs2_flush_truncate_log+0x352/0x1130 [ 107.695215][ T5893] [ 107.695215][ T5893] but task is already holding lock: [ 107.702605][ T5893] ffff88805ea16d98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x47/0x60 [ 107.715324][ T5893] [ 107.715324][ T5893] which lock already depends on the new lock. [ 107.715324][ T5893] [ 107.725739][ T5893] [ 107.725739][ T5893] the existing dependency chain (in reverse order) is: [ 107.734776][ T5893] [ 107.734776][ T5893] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 107.745315][ T5893] down_write+0x97/0x200 [ 107.750102][ T5893] __ocfs2_move_extents_range+0x1a35/0x3450 [ 107.756541][ T5893] ocfs2_move_extents+0x3f9/0xa10 [ 107.762111][ T5893] ocfs2_ioctl_move_extents+0x4db/0x6e0 [ 107.768203][ T5893] ocfs2_ioctl+0x199/0x7e0 [ 107.773173][ T5893] __se_sys_ioctl+0xfd/0x170 [ 107.778310][ T5893] do_syscall_64+0x55/0xb0 [ 107.783274][ T5893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.789721][ T5893] [ 107.789721][ T5893] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 107.800257][ T5893] __lock_acquire+0x37ef/0x7d80 [ 107.805654][ T5893] lock_acquire+0x19e/0x420 [ 107.810702][ T5893] down_write+0x97/0x200 [ 107.815495][ T5893] __ocfs2_flush_truncate_log+0x352/0x1130 [ 107.821852][ T5893] ocfs2_flush_truncate_log+0x4f/0x60 [ 107.827775][ T5893] ocfs2_sync_fs+0x11d/0x330 [ 107.832915][ T5893] sync_filesystem+0x1c2/0x220 [ 107.838218][ T5893] generic_shutdown_super+0x6f/0x2b0 [ 107.844063][ T5893] kill_block_super+0x44/0x90 [ 107.849281][ T5893] deactivate_locked_super+0x97/0x100 [ 107.855369][ T5893] cleanup_mnt+0x3d7/0x460 [ 107.860331][ T5893] task_work_run+0x1d4/0x260 [ 107.865472][ T5893] exit_to_user_mode_loop+0xe6/0x110 [ 107.871305][ T5893] exit_to_user_mode_prepare+0xee/0x180 [ 107.877416][ T5893] syscall_exit_to_user_mode+0x1a/0x50 [ 107.883415][ T5893] do_syscall_64+0x61/0xb0 [ 107.888376][ T5893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.894822][ T5893] [ 107.894822][ T5893] other info that might help us debug this: [ 107.894822][ T5893] [ 107.905069][ T5893] Possible unsafe locking scenario: [ 107.905069][ T5893] [ 107.912533][ T5893] CPU0 CPU1 [ 107.917919][ T5893] ---- ---- [ 107.923303][ T5893] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 107.930614][ T5893] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 107.940440][ T5893] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 107.950268][ T5893] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 107.957581][ T5893] [ 107.957581][ T5893] *** DEADLOCK *** [ 107.957581][ T5893] [ 107.965737][ T5893] 2 locks held by syz-executor/5893: [ 107.971044][ T5893] #0: ffff8880193800e0 (&type->s_umount_key#56){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 107.981260][ T5893] #1: ffff88805ea16d98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x47/0x60 [ 107.994432][ T5893] [ 107.994432][ T5893] stack backtrace: [ 108.000354][ T5893] CPU: 1 PID: 5893 Comm: syz-executor Not tainted syzkaller #0 [ 108.007930][ T5893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.018010][ T5893] Call Trace: [ 108.021309][ T5893] [ 108.024262][ T5893] dump_stack_lvl+0x18c/0x250 [ 108.028976][ T5893] ? load_image+0x420/0x420 [ 108.033500][ T5893] ? show_regs_print_info+0x20/0x20 [ 108.038739][ T5893] ? print_circular_bug+0x12b/0x1a0 [ 108.043959][ T5893] check_noncircular+0x2fc/0x400 [ 108.049098][ T5893] ? print_deadlock_bug+0x5d0/0x5d0 [ 108.054318][ T5893] ? lockdep_lock+0xf5/0x230 [ 108.058936][ T5893] ? _find_first_zero_bit+0xd6/0x100 [ 108.064247][ T5893] __lock_acquire+0x37ef/0x7d80 [ 108.069120][ T5893] ? verify_lock_unused+0x140/0x140 [ 108.074351][ T5893] ? verify_lock_unused+0x140/0x140 [ 108.079574][ T5893] ? igrab+0x8b/0xa0 [ 108.083492][ T5893] ? __lock_acquire+0x7d80/0x7d80 [ 108.088538][ T5893] ? do_raw_spin_lock+0x11f/0x2b0 [ 108.093595][ T5893] lock_acquire+0x19e/0x420 [ 108.098119][ T5893] ? __ocfs2_flush_truncate_log+0x352/0x1130 [ 108.104126][ T5893] ? _raw_spin_unlock+0x28/0x40 [ 108.109007][ T5893] ? ocfs2_get_system_file_inode+0x1f9/0x820 [ 108.115101][ T5893] ? __might_sleep+0xe0/0xe0 [ 108.119722][ T5893] ? read_lock_is_recursive+0x20/0x20 [ 108.125127][ T5893] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 108.131408][ T5893] ? __wake_up+0x132/0x1a0 [ 108.135854][ T5893] down_write+0x97/0x200 [ 108.140132][ T5893] ? __ocfs2_flush_truncate_log+0x352/0x1130 [ 108.146146][ T5893] ? down_read_killable+0x340/0x340 [ 108.151383][ T5893] ? _raw_write_unlock+0x28/0x40 [ 108.156348][ T5893] ? jbd2_journal_unlock_updates+0x84/0xe0 [ 108.162189][ T5893] __ocfs2_flush_truncate_log+0x352/0x1130 [ 108.168031][ T5893] ? ocfs2_truncate_log_needs_flush+0x310/0x310 [ 108.174297][ T5893] ? read_lock_is_recursive+0x20/0x20 [ 108.179696][ T5893] ? down_write+0x16e/0x200 [ 108.184226][ T5893] ? down_read_killable+0x340/0x340 [ 108.189449][ T5893] ? __rwlock_init+0x150/0x150 [ 108.194247][ T5893] ocfs2_flush_truncate_log+0x4f/0x60 [ 108.199645][ T5893] ocfs2_sync_fs+0x11d/0x330 [ 108.204266][ T5893] ? ocfs2_put_super+0x1b0/0x1b0 [ 108.209228][ T5893] ? writeback_inodes_sb_nr+0x30/0x30 [ 108.214633][ T5893] sync_filesystem+0x1c2/0x220 [ 108.219426][ T5893] generic_shutdown_super+0x6f/0x2b0 [ 108.224733][ T5893] kill_block_super+0x44/0x90 [ 108.229439][ T5893] deactivate_locked_super+0x97/0x100 [ 108.234831][ T5893] cleanup_mnt+0x3d7/0x460 [ 108.239277][ T5893] task_work_run+0x1d4/0x260 [ 108.243907][ T5893] ? task_work_cancel+0x220/0x220 [ 108.248958][ T5893] ? exit_to_user_mode_loop+0x3b/0x110 [ 108.254443][ T5893] exit_to_user_mode_loop+0xe6/0x110 [ 108.259759][ T5893] exit_to_user_mode_prepare+0xee/0x180 [ 108.265348][ T5893] syscall_exit_to_user_mode+0x1a/0x50 [ 108.270829][ T5893] do_syscall_64+0x61/0xb0 [ 108.275285][ T5893] ? clear_bhb_loop+0x40/0x90 [ 108.279989][ T5893] ? clear_bhb_loop+0x40/0x90 [ 108.284706][ T5893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.290634][ T5893] RIP: 0033:0x7f08b879f397 [ 108.295078][ T5893] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 108.314708][ T5893] RSP: 002b:00007ffe99f0a328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 108.323153][ T5893] RAX: 0000000000000000 RBX: 00007f08b88344bb RCX: 00007f08b879f397 [ 108.331145][ T5893] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe99f0a3e0 [ 108.339142][ T5893] RBP: 00007ffe99f0a3e0 R08: 00007ffe99f0b3e0 R09: 00000000ffffffff [ 108.347137][ T5893] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe99f0b470 [ 108.355171][ T5893] R13: 00007f08b88344bb R14: 000000000001a427 R15: 00007ffe99f0b4b0 [ 108.363178][ T5893] [ 108.386025][ T5893] ocfs2: Unmounting device (7,0) on (node local) [ 108.626357][ T5944] loop0: detected capacity change from 0 to 32768 [ 108.649036][ T5944] JBD2: Ignoring recovery information on journal [ 108.683378][ T5944] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 108.695309][ T28] audit: type=1800 audit(1790593490.180:6): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.19" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 108.769014][ T28] audit: type=1800 audit(1790593490.250:7): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.19" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 109.163788][ T5944] (syz.0.19,5944,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 109.242086][ T5893] ocfs2: Unmounting device (7,0) on (node local) [ 109.431075][ T5878] Bluetooth: hci0: command tx timeout [ 109.494772][ T5950] loop0: detected capacity change from 0 to 32768 [ 109.514340][ T5950] JBD2: Ignoring recovery information on journal [ 109.552184][ T5950] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 109.565827][ T28] audit: type=1800 audit(1790593491.050:8): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.20" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 109.626377][ T28] audit: type=1800 audit(1790593491.110:9): pid=5954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.20" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 109.925409][ T5950] (syz.0.20,5950,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 109.974996][ T5893] ocfs2: Unmounting device (7,0) on (node local) [ 110.240628][ T5956] loop0: detected capacity change from 0 to 32768 [ 110.257582][ T5956] JBD2: Ignoring recovery information on journal [ 110.286924][ T5956] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 110.299352][ T28] audit: type=1800 audit(1790593491.780:10): pid=5956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.21" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 110.364403][ T28] audit: type=1800 audit(1790593491.850:11): pid=5960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.21" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 110.707698][ T5956] (syz.0.21,5956,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 110.768061][ T5893] ocfs2: Unmounting device (7,0) on (node local) [ 111.020943][ T5962] loop0: detected capacity change from 0 to 32768 [ 111.038898][ T5962] JBD2: Ignoring recovery information on journal [ 111.072781][ T5962] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 111.524475][ T5962] (syz.0.22,5962,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 111.606202][ T5893] ocfs2: Unmounting device (7,0) on (node local) [ 111.864022][ T5968] loop0: detected capacity change from 0 to 32768 [ 111.886206][ T5968] JBD2: Ignoring recovery information on journal [ 111.937111][ T5968] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 111.949358][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 111.949372][ T28] audit: type=1800 audit(1790593493.430:14): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.23" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 112.028605][ T28] audit: type=1800 audit(1790593493.510:15): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.23" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 112.396310][ T5968] (syz.0.23,5968,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 112.419568][ T5968] syz.0.23 (5968) used greatest stack depth: 18032 bytes left 2026/09/28 11:04:53 executed programs: 9 [ 112.486892][ T5893] ocfs2: Unmounting device (7,0) on (node local) [ 112.726253][ T5974] loop0: detected capacity change from 0 to 32768 [ 112.743518][ T5974] JBD2: Ignoring recovery information on journal [ 112.771008][ T5974] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 112.783386][ T28] audit: type=1800 audit(1790593494.270:16): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.24" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 112.864660][ T28] audit: type=1800 audit(1790593494.350:17): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.24" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 113.192271][ T5974] (syz.0.24,5974,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 113.246547][ T5893] ocfs2: Unmounting device (7,0) on (node local) [ 113.493952][ T5980] loop0: detected capacity change from 0 to 32768 [ 113.527294][ T5980] JBD2: Ignoring recovery information on journal [ 113.576067][ T5980] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 113.594538][ T28] audit: type=1800 audit(1790593495.080:18): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.25" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 113.646768][ T28] audit: type=1800 audit(1790593495.130:19): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.25" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 113.921112][ T5980] (syz.0.25,5980,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 113.967313][ T5893] ocfs2: Unmounting device (7,0) on (node local) [ 114.214825][ T5986] loop0: detected capacity change from 0 to 32768 [ 114.234450][ T5986] JBD2: Ignoring recovery information on journal [ 114.270426][ T5986] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 114.282494][ T28] audit: type=1800 audit(1790593495.770:20): pid=5986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.26" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 114.340227][ T28] audit: type=1800 audit(1790593495.820:21): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.26" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 114.675095][ T5986] (syz.0.26,5986,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 114.734453][ T5893] ocfs2: Unmounting device (7,0) on (node local) [ 114.995355][ T5992] loop0: detected capacity change from 0 to 32768 [ 115.014155][ T5992] JBD2: Ignoring recovery information on journal [ 115.039023][ T5992] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 115.053648][ T28] audit: type=1800 audit(1790593496.540:22): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.27" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 115.105263][ T28] audit: type=1800 audit(1790593496.590:23): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.27" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 115.415370][ T5992] (syz.0.27,5992,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 115.465721][ T5893] ocfs2: Unmounting device (7,0) on (node local) [ 115.713404][ T5998] loop0: detected capacity change from 0 to 32768 [ 115.735434][ T5998] JBD2: Ignoring recovery information on journal [ 115.760962][ T5998] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 116.174623][ T5998] (syz.0.28,5998,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 116.242693][ T5893] ocfs2: Unmounting device (7,0) on (node local) [ 116.494858][ T6004] loop0: detected capacity change from 0 to 32768 [ 116.514211][ T6004] JBD2: Ignoring recovery information on journal [ 116.541970][ T6004] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 116.963761][ T6004] (syz.0.29,6004,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 117.033578][ T5893] ocfs2: Unmounting device (7,0) on (node local) [ 117.283862][ T6010] loop0: detected capacity change from 0 to 32768 [ 117.314175][ T6010] JBD2: Ignoring recovery information on journal [ 117.342813][ T6010] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 117.357743][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 117.357756][ T28] audit: type=1800 audit(1790593498.840:28): pid=6010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.30" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 117.443740][ T28] audit: type=1800 audit(1790593498.930:29): pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.30" name="file1" dev="loop0" ino=17058 res=0 errno=0