Warning: Permanently added '[localhost]:29646' (ED25519) to the list of known hosts. 2025/04/22 14:37:40 ignoring optional flag "sandboxArg"="0" 2025/04/22 14:37:42 parsed 1 programs [ 123.557672][ T5629] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 127.265355][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.269487][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.302235][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.305481][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.253179][ T4670] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.256910][ T4670] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.260761][ T4670] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.264517][ T4670] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.267641][ T4670] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.646845][ T5695] chnl_net:caif_netlink_parms(): no params data found [ 129.707540][ T5695] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.711243][ T5695] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.714269][ T5695] bridge_slave_0: entered allmulticast mode [ 129.718002][ T5695] bridge_slave_0: entered promiscuous mode [ 129.723066][ T5695] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.726230][ T5695] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.730063][ T5695] bridge_slave_1: entered allmulticast mode [ 129.733700][ T5695] bridge_slave_1: entered promiscuous mode [ 129.757716][ T5695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.764427][ T5695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.785922][ T5695] team0: Port device team_slave_0 added [ 129.792285][ T5695] team0: Port device team_slave_1 added [ 129.811878][ T5695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.814559][ T5695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.825909][ T5695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.832167][ T5695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.834745][ T5695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.845331][ T5695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.878148][ T5695] hsr_slave_0: entered promiscuous mode [ 129.881375][ T5695] hsr_slave_1: entered promiscuous mode [ 130.462172][ T5695] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 130.472947][ T5695] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 130.489806][ T5695] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 130.495794][ T5695] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 130.647760][ T5695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.675842][ T5695] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.695513][ T3093] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.699103][ T3093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.736930][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.739890][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.052754][ T5695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.139704][ T5695] veth0_vlan: entered promiscuous mode [ 131.150935][ T5695] veth1_vlan: entered promiscuous mode [ 131.204486][ T5695] veth0_macvtap: entered promiscuous mode [ 131.220487][ T5695] veth1_macvtap: entered promiscuous mode [ 131.246190][ T5695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.274467][ T5695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.291649][ T5695] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.295152][ T5695] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.311043][ T5695] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.314595][ T5695] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.601502][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.657351][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.964550][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/04/22 14:37:56 executed programs: 0 [ 133.897106][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.915881][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.923030][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.926381][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.931231][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.934510][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.360385][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 134.431958][ T57] bridge_slave_1: left allmulticast mode [ 134.434230][ T57] bridge_slave_1: left promiscuous mode [ 134.436701][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.460860][ T57] bridge_slave_0: left allmulticast mode [ 134.463152][ T57] bridge_slave_0: left promiscuous mode [ 134.465439][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.920274][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.935667][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.945410][ T57] bond0 (unregistering): Released all slaves [ 135.040767][ T57] hsr_slave_0: left promiscuous mode [ 135.062634][ T57] hsr_slave_1: left promiscuous mode [ 135.066222][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.078991][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.089091][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.092097][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.115960][ T57] veth1_macvtap: left promiscuous mode [ 135.125197][ T57] veth0_macvtap: left promiscuous mode [ 135.127608][ T57] veth1_vlan: left promiscuous mode [ 135.139772][ T57] veth0_vlan: left promiscuous mode [ 135.426351][ T57] team0 (unregistering): Port device team_slave_1 removed [ 135.445057][ T57] team0 (unregistering): Port device team_slave_0 removed [ 135.677935][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.684986][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.688016][ T5794] bridge_slave_0: entered allmulticast mode [ 135.703322][ T5794] bridge_slave_0: entered promiscuous mode [ 135.711777][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.714592][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.717440][ T5794] bridge_slave_1: entered allmulticast mode [ 135.723209][ T5794] bridge_slave_1: entered promiscuous mode [ 135.793786][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.814677][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.894083][ T5794] team0: Port device team_slave_0 added [ 135.919373][ T5794] team0: Port device team_slave_1 added [ 135.967610][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.975807][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.989684][ T4670] Bluetooth: hci0: command tx timeout [ 136.008605][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.018308][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.029123][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.062742][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.333433][ T5794] hsr_slave_0: entered promiscuous mode [ 136.337207][ T5794] hsr_slave_1: entered promiscuous mode [ 136.884143][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 136.906865][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 136.921346][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 136.934717][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 137.086746][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.121258][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.134179][ T3093] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.137060][ T3093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.172244][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.175185][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.226042][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.490058][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.563470][ T5794] veth0_vlan: entered promiscuous mode [ 137.575835][ T5794] veth1_vlan: entered promiscuous mode [ 137.636113][ T5794] veth0_macvtap: entered promiscuous mode [ 137.648226][ T5794] veth1_macvtap: entered promiscuous mode [ 137.681060][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.702728][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.707723][ T5794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.718503][ T5794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.722105][ T5794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.725671][ T5794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.861405][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.864555][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.902134][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.904701][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.927979][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.936927][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.058689][ T4670] Bluetooth: hci0: command tx timeout [ 138.446792][ T5868] loop0: detected capacity change from 0 to 32768 [ 138.455518][ T5868] ======================================================= [ 138.455518][ T5868] WARNING: The mand mount option has been deprecated and [ 138.455518][ T5868] and is ignored by this kernel. Remove the mand [ 138.455518][ T5868] option from the mount to silence this warning. [ 138.455518][ T5868] ======================================================= [ 138.505943][ T5868] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 138.541979][ T26] audit: type=1800 audit(1745332681.032:2): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.16" name="file2" dev="loop0" ino=17060 res=0 errno=0 [ 138.706457][ T5875] Buffer I/O error on dev loop0, logical block 640, lost sync page write [ 138.711913][ T5875] JBD2: I/O error when updating journal superblock for loop0-75. [ 138.715320][ T5875] Aborting journal on device loop0-75. [ 138.719178][ T5876] (syz.0.16,5876,0):__ocfs2_journal_access:705 ERROR: Error -30 getting 1 access to buffer! [ 138.724046][ T5868] (syz.0.16,5868,0):__ocfs2_journal_access:705 ERROR: Error -30 getting 1 access to buffer! [ 138.728148][ T5875] Buffer I/O error on dev loop0, logical block 640, lost sync page write [ 138.732330][ T5876] (syz.0.16,5876,0):ocfs2_merge_rec_left:3605 ERROR: status = -30 [ 138.735526][ T5875] JBD2: I/O error when updating journal superblock for loop0-75. [ 138.739551][ T5868] (syz.0.16,5868,0):ocfs2_alloc_dinode_update_counts:1643 ERROR: status = -30 [ 138.743224][ T5876] (syz.0.16,5876,0):ocfs2_try_to_merge_extent:3798 ERROR: status = -30 [ 138.746693][ T5868] (syz.0.16,5868,0):ocfs2_search_chain:1896 ERROR: status = -30 [ 138.750785][ T5876] (syz.0.16,5876,0):ocfs2_split_extent:5143 ERROR: status = -30 [ 138.753957][ T5868] (syz.0.16,5868,0):ocfs2_search_chain:1926 ERROR: status = -30 [ 138.756944][ T5876] (syz.0.16,5876,0):ocfs2_change_extent_flag:5234 ERROR: status = -30 [ 138.761889][ T5868] (syz.0.16,5868,0):ocfs2_claim_suballoc_bits:1995 ERROR: status = -30 [ 138.765394][ T5876] (syz.0.16,5876,0):ocfs2_mark_extent_written:5280 ERROR: status = -30 [ 138.769671][ T5868] (syz.0.16,5868,0):ocfs2_claim_suballoc_bits:2038 ERROR: status = -30 [ 138.773069][ T5876] (syz.0.16,5876,0):ocfs2_dio_end_io_write:2352 ERROR: status = -30 [ 138.776372][ T5868] (syz.0.16,5868,0):__ocfs2_claim_clusters:2412 ERROR: status = -30 [ 138.783651][ T5876] (syz.0.16,5876,0):ocfs2_commit_trans:382 ERROR: status = -5 [ 138.787310][ T5868] (syz.0.16,5868,0):__ocfs2_claim_clusters:2420 ERROR: status = -30 [ 138.792760][ T5868] (syz.0.16,5868,0):ocfs2_add_clusters_in_btree:4838 ERROR: status = -30 [ 138.797012][ T5868] (syz.0.16,5868,0):ocfs2_write_cluster:1131 ERROR: status = -30 [ 138.800900][ T5868] (syz.0.16,5868,0):ocfs2_write_cluster_by_desc:1225 ERROR: status = -30 [ 138.804365][ T5868] (syz.0.16,5868,0):ocfs2_write_begin_nolock:1798 ERROR: status = -30 [ 138.814079][ T5875] journal_release_journal_head: freeing b_committed_data [ 138.817851][ T5868] (syz.0.16,5868,0):ocfs2_commit_trans:382 ERROR: status = -5 [ 138.822964][ T5868] (syz.0.16,5868,0):ocfs2_write_begin:1885 ERROR: status = -30 2025/04/22 14:38:01 executed programs: 3 [ 139.386163][ T5794] (syz-executor,5794,0):ocfs2_start_trans:357 ERROR: status = -30 [ 139.391057][ T5794] OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 139.395791][ T5794] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 139.401037][ T5794] OCFS2: File system is now read-only. [ 139.403410][ T5794] (syz-executor,5794,0):ocfs2_shutdown_local_alloc:419 ERROR: status = -30 [ 139.407310][ T5794] Buffer I/O error on dev loop0, logical block 17024, lost sync page write [ 139.412715][ T5794] (syz-executor,5794,0):ocfs2_write_block:78 ERROR: status = -5 [ 139.415904][ T5794] (syz-executor,5794,0):ocfs2_update_disk_slot:199 ERROR: status = -5 [ 139.424327][ T5794] (syz-executor,5794,0):ocfs2_put_slot:517 ERROR: status = -5 [ 139.428035][ T5794] (syz-executor,5794,0):ocfs2_journal_shutdown:1085 ERROR: status = -5 [ 139.434815][ T5794] ocfs2: Unmounting device (7,0) on (node local) [ 139.706650][ T5880] loop0: detected capacity change from 0 to 32768 [ 139.738335][ T5880] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 139.763193][ T26] audit: type=1800 audit(1745332682.252:3): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file2" dev="loop0" ino=17060 res=0 errno=0 [ 139.906101][ T5882] Buffer I/O error on dev loop0, logical block 640, lost sync page write [ 139.914663][ T5882] JBD2: I/O error when updating journal superblock for loop0-75. [ 139.918099][ T5882] Aborting journal on device loop0-75. [ 139.921000][ T5880] (syz.0.17,5880,0):ocfs2_start_trans:357 ERROR: status = -30 [ 139.925517][ T5880] OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 139.930603][ T5882] Buffer I/O error on dev loop0, logical block 640, lost sync page write [ 139.933923][ T5882] JBD2: I/O error when updating journal superblock for loop0-75. [ 139.937542][ T5880] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 139.944425][ T5882] journal_release_journal_head: freeing b_committed_data [ 139.951288][ T5880] OCFS2: File system is now read-only. [ 139.953701][ T5880] (syz.0.17,5880,0):ocfs2_write_begin_nolock:1751 ERROR: status = -30 [ 139.957294][ T5880] (syz.0.17,5880,0):ocfs2_write_begin:1885 ERROR: status = -30 [ 140.138724][ T4670] Bluetooth: hci0: command tx timeout [ 140.505517][ T5794] (syz-executor,5794,0):ocfs2_start_trans:357 ERROR: status = -30 [ 140.508832][ T5794] OCFS2: abort (device loop0): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 140.513597][ T5794] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 140.517318][ T5794] (syz-executor,5794,0):ocfs2_shutdown_local_alloc:419 ERROR: status = -30 [ 140.526813][ T5794] Buffer I/O error on dev loop0, logical block 17024, lost sync page write [ 140.530862][ T5794] (syz-executor,5794,0):ocfs2_write_block:78 ERROR: status = -5 [ 140.533859][ T5794] (syz-executor,5794,0):ocfs2_update_disk_slot:199 ERROR: status = -5 [ 140.536981][ T5794] (syz-executor,5794,0):ocfs2_put_slot:517 ERROR: status = -5 [ 140.542545][ T5794] (syz-executor,5794,0):ocfs2_journal_shutdown:1085 ERROR: status = -5 [ 140.546652][ T5794] ocfs2: Unmounting device (7,0) on (node local) [ 140.806229][ T5887] loop0: detected capacity change from 0 to 32768 [ 140.835156][ T5887] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 140.857179][ T26] audit: type=1800 audit(1745332683.342:4): pid=5887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18" name="file2" dev="loop0" ino=17060 res=0 errno=0 [ 141.002229][ T5889] Buffer I/O error on dev loop0, logical block 640, lost sync page write [ 141.005668][ T5889] JBD2: I/O error when updating journal superblock for loop0-75. [ 141.010312][ T5887] Aborting journal on device loop0-75. [ 141.013620][ T5890] (syz.0.18,5890,0):ocfs2_extend_trans:438 ERROR: status = -30 [ 141.016822][ T5887] Buffer I/O error on dev loop0, logical block 640, lost sync page write [ 141.021144][ T5890] (syz.0.18,5890,0):ocfs2_try_to_merge_extent:3817 ERROR: status = -30 [ 141.024521][ T5890] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 141.029216][ T5890] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 141.033732][ T5890] CPU: 0 UID: 0 PID: 5890 Comm: syz.0.18 Not tainted 6.15.0-rc3-syzkaller-ga33b5a08cbbd #0 PREEMPT(full) [ 141.038351][ T5890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.042651][ T5890] RIP: 0010:ocfs2_assure_trans_credits+0x80/0x3a0 [ 141.045325][ T5890] Code: 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 25 21 65 fe 49 8b 1c 24 eb 08 e8 3a e7 fa fd 4c 89 e3 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 01 21 65 fe 48 8b 2b 49 8d 7c 24 [ 141.053035][ T5890] RSP: 0018:ffffc9000cbd6e88 EFLAGS: 00010246 [ 141.055518][ T5890] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888000ed8000 [ 141.058662][ T5890] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.061720][ T5890] RBP: ffff888042693a1c R08: ffffffff83c7d5bb R09: ffffffff83bc7fb3 [ 141.064820][ T5890] R10: 0000000000000006 R11: ffff888000ed8000 R12: ffff8880426939f8 [ 141.067908][ T5890] R13: dffffc0000000000 R14: 000000000000000a R15: ffff888057556100 [ 141.071056][ T5890] FS: 00007f20e7b676c0(0000) GS:ffff88808c59a000(0000) knlGS:0000000000000000 [ 141.074536][ T5890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.077031][ T5890] CR2: 00007f20e7b45fd8 CR3: 0000000011ff2000 CR4: 0000000000352ef0 [ 141.080069][ T5890] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 141.083199][ T5890] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 141.086262][ T5890] Call Trace: [ 141.087628][ T5890] [ 141.088821][ T5890] ocfs2_dio_end_io+0xc36/0x1330 [ 141.090849][ T5890] ? __pfx_ocfs2_dio_end_io+0x10/0x10 [ 141.093009][ T5890] ? __pfx_ocfs2_journal_access_di+0x10/0x10 [ 141.095451][ T5890] ? __lock_acquire+0xad5/0xd80 [ 141.097413][ T5890] ? do_raw_spin_lock+0x151/0x370 [ 141.099480][ T5890] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 141.101911][ T5890] ? lockdep_hardirqs_on+0x9d/0x150 [ 141.103990][ T5890] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 141.106283][ T5890] ? __pfx_ocfs2_dio_end_io+0x10/0x10 [ 141.108351][ T5890] dio_complete+0x250/0x720 [ 141.110238][ T5890] __blockdev_direct_IO+0x3baf/0x4540 [ 141.112305][ T5890] ? __pfx___blockdev_direct_IO+0x10/0x10 [ 141.114565][ T5890] ? __pfx_invalidate_inode_pages2_range+0x10/0x10 [ 141.117165][ T5890] ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10 [ 141.119299][ T5890] ? do_raw_spin_unlock+0x58/0x8b0 [ 141.121385][ T5890] ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10 [ 141.123770][ T5890] ocfs2_direct_IO+0x255/0x2c0 [ 141.125745][ T5890] generic_file_direct_write+0x1e8/0x400 [ 141.128064][ T5890] __generic_file_write_iter+0x126/0x230 [ 141.130319][ T5890] ? ocfs2_file_write_iter+0x18e9/0x20d0 [ 141.132560][ T5890] ocfs2_file_write_iter+0x190f/0x20d0 [ 141.134756][ T5890] ? __pfx_ocfs2_file_write_iter+0x10/0x10 [ 141.136986][ T5890] ? aa_file_perm+0x139/0xf60 [ 141.138895][ T5890] ? aa_file_perm+0x139/0xf60 [ 141.140748][ T5890] ? aa_file_perm+0x3f1/0xf60 [ 141.142678][ T5890] ? lockdep_hardirqs_on+0x9d/0x150 [ 141.144752][ T5890] ? __pfx_aa_file_perm+0x10/0x10 [ 141.146790][ T5890] do_iter_readv_writev+0x71f/0x9d0 [ 141.148910][ T5890] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 141.151221][ T5890] ? rcu_read_lock_any_held+0xbb/0x160 [ 141.153436][ T5890] vfs_writev+0x38d/0xbc0 [ 141.155207][ T5890] ? __lock_acquire+0xad5/0xd80 [ 141.157186][ T5890] ? __pfx_vfs_writev+0x10/0x10 [ 141.159171][ T5890] ? __fget_files+0x2a/0x420 [ 141.160967][ T5890] ? __fget_files+0x39d/0x420 [ 141.162847][ T5890] ? __fget_files+0x2a/0x420 [ 141.164492][ T5890] __se_sys_pwritev2+0x1b8/0x2d0 [ 141.166424][ T5890] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 141.168487][ T5890] ? __x64_sys_pwritev2+0x21/0xf0 [ 141.170477][ T5890] do_syscall_64+0xf3/0x210 [ 141.172318][ T5890] ? clear_bhb_loop+0x45/0xa0 [ 141.174256][ T5890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.176419][ T5890] RIP: 0033:0x7f20e6d8d169 [ 141.178141][ T5890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.185408][ T5890] RSP: 002b:00007f20e7b67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 141.188564][ T5890] RAX: ffffffffffffffda RBX: 00007f20e6fa6080 RCX: 00007f20e6d8d169 [ 141.191618][ T5890] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 000000000000000a [ 141.194686][ T5890] RBP: 00007f20e6e0e2a0 R08: 0000000000000000 R09: 0000000000000003 [ 141.197811][ T5890] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000000 [ 141.201026][ T5890] R13: 0000000000000000 R14: 00007f20e6fa6080 R15: 00007ffe5226d838 [ 141.204230][ T5890] [ 141.205449][ T5890] Modules linked in: [ 141.207720][ T5890] ---[ end trace 0000000000000000 ]--- [ 141.219651][ T5887] JBD2: I/O error when updating journal superblock for loop0-75. [ 141.222808][ T5887] (syz.0.18,5887,0):__ocfs2_journal_access:705 ERROR: Error -5 getting 1 access to buffer! [ 141.226488][ T5887] (syz.0.18,5887,0):ocfs2_write_begin_nolock:1767 ERROR: status = -5 [ 141.232171][ T5887] (syz.0.18,5887,0):ocfs2_commit_trans:382 ERROR: status = -5 [ 141.235268][ T5887] (syz.0.18,5887,0):ocfs2_write_begin:1885 ERROR: status = -5 [ 141.238947][ T5889] journal_release_journal_head: freeing b_committed_data [ 141.242874][ T5890] RIP: 0010:ocfs2_assure_trans_credits+0x80/0x3a0 [ 141.245339][ T5890] Code: 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 25 21 65 fe 49 8b 1c 24 eb 08 e8 3a e7 fa fd 4c 89 e3 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 01 21 65 fe 48 8b 2b 49 8d 7c 24 [ 141.253627][ T5890] RSP: 0018:ffffc9000cbd6e88 EFLAGS: 00010246 [ 141.256190][ T5890] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888000ed8000 [ 141.260149][ T5890] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.263309][ T5890] RBP: ffff888042693a1c R08: ffffffff83c7d5bb R09: ffffffff83bc7fb3 [ 141.266584][ T5890] R10: 0000000000000006 R11: ffff888000ed8000 R12: ffff8880426939f8 [ 141.270424][ T5890] R13: dffffc0000000000 R14: 000000000000000a R15: ffff888057556100 [ 141.273787][ T5890] FS: 00007f20e7b676c0(0000) GS:ffff88808c59a000(0000) knlGS:0000000000000000 [ 141.278060][ T5890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.281020][ T5890] CR2: 00007f20e7b45fd8 CR3: 0000000011ff2000 CR4: 0000000000352ef0 [ 141.284494][ T5890] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 141.287811][ T5890] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 141.291639][ T5890] Kernel panic - not syncing: Fatal exception [ 141.294421][ T5890] Kernel Offset: disabled [ 141.296243][ T5890] Rebooting in 86400 seconds..