Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts. 2026/10/22 21:56:22 parsed 1 programs 2026/10/22 21:56:22 serving rpc on tcp://43367 Setting up swapspace version 1, size = 127995904 bytes [ 106.782390][ T4546] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 108.316867][ T1495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.328644][ T1495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.337225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.355406][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.363808][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.372578][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 110.670557][ T4704] chnl_net:caif_netlink_parms(): no params data found [ 110.782173][ T4704] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.789675][ T4704] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.797814][ T4704] device bridge_slave_0 entered promiscuous mode [ 110.806514][ T4704] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.814164][ T4704] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.827630][ T4704] device bridge_slave_1 entered promiscuous mode [ 110.852758][ T4704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.864520][ T4704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.912020][ T4704] team0: Port device team_slave_0 added [ 110.920858][ T4704] team0: Port device team_slave_1 added [ 110.944761][ T4704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.952053][ T4704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.978856][ T4704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.992402][ T4704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.002418][ T4704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.029403][ T4704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.078500][ T4704] device hsr_slave_0 entered promiscuous mode [ 111.086087][ T4704] device hsr_slave_1 entered promiscuous mode [ 111.793895][ T4704] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.804248][ T4704] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.852635][ T4704] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.864217][ T4704] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.977216][ T4704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.028572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.037565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.050339][ T4704] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.067820][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.076950][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.089070][ T1495] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.096531][ T1495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.107175][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.116526][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.126841][ T1495] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.134048][ T1495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.144275][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.156570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.200269][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.210479][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.220627][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.232118][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.242433][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.258660][ T4704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.270341][ T4704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.289474][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.297719][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.314551][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.340090][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.353623][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.364607][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.500297][ T4704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.512639][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.521599][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.561691][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.572277][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.614218][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.624984][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.637533][ T4704] device veth0_vlan entered promiscuous mode [ 112.647462][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.656868][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.672568][ T4704] device veth1_vlan entered promiscuous mode [ 112.710657][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.730075][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.749032][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.763796][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.775624][ T4704] device veth0_macvtap entered promiscuous mode [ 112.792338][ T4704] device veth1_macvtap entered promiscuous mode [ 112.839272][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.846871][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.856990][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.866630][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.876507][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.890033][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.899618][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.909474][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.921414][ T4704] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.940288][ T4704] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.959695][ T4704] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.980063][ T4704] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/10/22 21:56:35 executed programs: 0 [ 114.852293][ T4832] chnl_net:caif_netlink_parms(): no params data found [ 115.005923][ T4832] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.021372][ T4832] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.032251][ T4832] device bridge_slave_0 entered promiscuous mode [ 115.042443][ T4832] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.053828][ T4832] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.062458][ T4832] device bridge_slave_1 entered promiscuous mode [ 115.102264][ T4832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.114577][ T4832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.146923][ T4832] team0: Port device team_slave_0 added [ 115.155338][ T4832] team0: Port device team_slave_1 added [ 115.194512][ T3093] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.211419][ T4832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.221316][ T4832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.254656][ T4832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.272457][ T4832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.283629][ T4832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.312838][ T4832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.351425][ T4832] device hsr_slave_0 entered promiscuous mode [ 115.358751][ T4832] device hsr_slave_1 entered promiscuous mode [ 115.365731][ T4832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.373963][ T4832] Cannot create hsr debugfs directory [ 116.718535][ T4261] Bluetooth: hci0: command 0x0409 tx timeout [ 118.114809][ T3093] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.175351][ T3093] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.256423][ T3093] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.808566][ T4299] Bluetooth: hci0: command 0x041b tx timeout [ 119.178734][ T4832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.212348][ T4832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.225599][ T4832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.236408][ T4832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.354088][ T4832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.374887][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.384069][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.396631][ T4832] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.407996][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.418750][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.427640][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.434912][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.469185][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 119.478273][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.490270][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.499810][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.507243][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.516883][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.544388][ T3093] device hsr_slave_0 left promiscuous mode [ 119.553114][ T3093] device hsr_slave_1 left promiscuous mode [ 119.560192][ T3093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.567659][ T3093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.577063][ T3093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.585938][ T3093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.594936][ T3093] device bridge_slave_1 left promiscuous mode [ 119.601717][ T3093] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.612341][ T3093] device bridge_slave_0 left promiscuous mode [ 119.619049][ T3093] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.632922][ T3093] device veth1_macvtap left promiscuous mode [ 119.639476][ T3093] device veth0_macvtap left promiscuous mode [ 119.645603][ T3093] device veth1_vlan left promiscuous mode [ 119.651823][ T3093] device veth0_vlan left promiscuous mode [ 119.865199][ T3093] team0 (unregistering): Port device team_slave_1 removed [ 119.882601][ T3093] team0 (unregistering): Port device team_slave_0 removed [ 119.897736][ T3093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.912961][ T3093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.978093][ T3093] bond0 (unregistering): Released all slaves [ 119.994592][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.003626][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.013915][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.023673][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.032984][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.043391][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.052333][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.061229][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.072240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.081896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.104393][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.244567][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.252906][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.265682][ T4832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.287901][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.297586][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.321093][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.330965][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.342731][ T4832] device veth0_vlan entered promiscuous mode [ 120.351587][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.360561][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.374228][ T4832] device veth1_vlan entered promiscuous mode [ 120.382353][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 120.404346][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 120.413668][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.434611][ T4832] device veth0_macvtap entered promiscuous mode [ 120.446563][ T4832] device veth1_macvtap entered promiscuous mode [ 120.467744][ T4832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.476222][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.489252][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.509328][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.519331][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.534939][ T4832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.543222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.554058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.567348][ T4832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.577260][ T4832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.588258][ T4832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.598195][ T4832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.663503][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.679880][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.698915][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/10/22 21:56:41 executed programs: 2 [ 120.716904][ T309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.726078][ T309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.737271][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.879356][ T4350] Bluetooth: hci0: command 0x040f tx timeout [ 121.032561][ T5089] loop0: detected capacity change from 0 to 32768 [ 121.089812][ T5089] ======================================================= [ 121.089812][ T5089] WARNING: The mand mount option has been deprecated and [ 121.089812][ T5089] and is ignored by this kernel. Remove the mand [ 121.089812][ T5089] option from the mount to silence this warning. [ 121.089812][ T5089] ======================================================= [ 121.182957][ T5089] JBD2: Ignoring recovery information on journal [ 121.244280][ T5089] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 121.303439][ T26] audit: type=1800 audit(1792706202.222:2): pid=5089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 121.390568][ T26] audit: type=1800 audit(1792706202.312:3): pid=5093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 121.660006][ T5089] syz.0.17 (5089) used greatest stack depth: 18336 bytes left [ 121.742924][ T4832] [ 121.745567][ T4832] ====================================================== [ 121.752601][ T4832] WARNING: possible circular locking dependency detected [ 121.759643][ T4832] syzkaller #0 Not tainted [ 121.764067][ T4832] ------------------------------------------------------ [ 121.771177][ T4832] syz-executor/4832 is trying to acquire lock: [ 121.777528][ T4832] ffff88806f3f5108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: __ocfs2_flush_truncate_log+0x351/0x1110 [ 121.790989][ T4832] [ 121.790989][ T4832] but task is already holding lock: [ 121.798990][ T4832] ffff88805b02b488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x43/0x60 [ 121.811887][ T4832] [ 121.811887][ T4832] which lock already depends on the new lock. [ 121.811887][ T4832] [ 121.822519][ T4832] [ 121.822519][ T4832] the existing dependency chain (in reverse order) is: [ 121.831685][ T4832] [ 121.831685][ T4832] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 121.842377][ T4832] down_write+0x38/0x60 [ 121.847080][ T4832] __ocfs2_move_extents_range+0x1a31/0x3450 [ 121.853514][ T4832] ocfs2_move_extents+0x409/0xa40 [ 121.859103][ T4832] ocfs2_ioctl_move_extents+0x4d7/0x6e0 [ 121.865461][ T4832] ocfs2_ioctl+0x31f/0x7a0 [ 121.870508][ T4832] __se_sys_ioctl+0xfa/0x170 [ 121.875722][ T4832] do_syscall_64+0x4c/0xa0 [ 121.880883][ T4832] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.887682][ T4832] [ 121.887682][ T4832] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 121.899012][ T4832] __lock_acquire+0x38f7/0x7d40 [ 121.904506][ T4832] lock_acquire+0x19f/0x400 [ 121.909561][ T4832] down_write+0x38/0x60 [ 121.914254][ T4832] __ocfs2_flush_truncate_log+0x351/0x1110 [ 121.920846][ T4832] ocfs2_flush_truncate_log+0x4b/0x60 [ 121.926796][ T4832] ocfs2_sync_fs+0x119/0x330 [ 121.931933][ T4832] sync_filesystem+0x1be/0x220 [ 121.937243][ T4832] generic_shutdown_super+0x6b/0x300 [ 121.943085][ T4832] kill_block_super+0x7c/0xe0 [ 121.948506][ T4832] deactivate_locked_super+0x93/0xf0 [ 121.954354][ T4832] cleanup_mnt+0x426/0x4d0 [ 121.959507][ T4832] task_work_run+0x125/0x1a0 [ 121.964649][ T4832] exit_to_user_mode_loop+0x10f/0x130 [ 121.971125][ T4832] exit_to_user_mode_prepare+0xee/0x180 [ 121.977210][ T4832] syscall_exit_to_user_mode+0x16/0x40 [ 121.983289][ T4832] do_syscall_64+0x58/0xa0 [ 121.988348][ T4832] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.994970][ T4832] [ 121.994970][ T4832] other info that might help us debug this: [ 121.994970][ T4832] [ 122.005540][ T4832] Possible unsafe locking scenario: [ 122.005540][ T4832] [ 122.013451][ T4832] CPU0 CPU1 [ 122.019063][ T4832] ---- ---- [ 122.024440][ T4832] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 122.031829][ T4832] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 122.042187][ T4832] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 122.052415][ T4832] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 122.059741][ T4832] [ 122.059741][ T4832] *** DEADLOCK *** [ 122.059741][ T4832] [ 122.067899][ T4832] 2 locks held by syz-executor/4832: [ 122.073194][ T4832] #0: ffff8880799d80e0 (&type->s_umount_key#54){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 122.083498][ T4832] #1: ffff88805b02b488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x43/0x60 [ 122.097066][ T4832] [ 122.097066][ T4832] stack backtrace: [ 122.103244][ T4832] CPU: 0 PID: 4832 Comm: syz-executor Not tainted syzkaller #0 [ 122.110889][ T4832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 122.121433][ T4832] Call Trace: [ 122.125075][ T4832] [ 122.128340][ T4832] dump_stack_lvl+0x188/0x250 [ 122.133057][ T4832] ? load_image+0x410/0x410 [ 122.137584][ T4832] ? show_regs_print_info+0x20/0x20 [ 122.142820][ T4832] ? print_circular_bug+0x12b/0x1a0 [ 122.148164][ T4832] check_noncircular+0x2f8/0x400 [ 122.153308][ T4832] ? print_deadlock_bug+0x5d0/0x5d0 [ 122.158528][ T4832] ? lockdep_lock+0xf1/0x1f0 [ 122.163155][ T4832] ? mark_lock+0x94/0x320 [ 122.167496][ T4832] ? mark_lock+0x94/0x320 [ 122.171904][ T4832] ? _find_first_zero_bit+0xd1/0xf0 [ 122.177210][ T4832] __lock_acquire+0x38f7/0x7d40 [ 122.182214][ T4832] ? igrab+0x87/0x90 [ 122.186131][ T4832] ? verify_lock_unused+0x140/0x140 [ 122.191530][ T4832] ? do_raw_spin_lock+0x128/0x2f0 [ 122.197171][ T4832] ? __rwlock_init+0x140/0x140 [ 122.202255][ T4832] ? do_raw_spin_unlock+0x11d/0x230 [ 122.207685][ T4832] ? _raw_spin_unlock+0x24/0x40 [ 122.212786][ T4832] lock_acquire+0x19f/0x400 [ 122.217582][ T4832] ? __ocfs2_flush_truncate_log+0x351/0x1110 [ 122.223951][ T4832] ? __wake_up+0x11c/0x180 [ 122.228557][ T4832] ? __might_sleep+0xf0/0xf0 [ 122.233257][ T4832] ? read_lock_is_recursive+0x10/0x10 [ 122.238648][ T4832] ? __bpf_trace_jbd2_shrink_checkpoint_list+0x50/0x50 [ 122.245522][ T4832] down_write+0x38/0x60 [ 122.249700][ T4832] ? __ocfs2_flush_truncate_log+0x351/0x1110 [ 122.255785][ T4832] __ocfs2_flush_truncate_log+0x351/0x1110 [ 122.261880][ T4832] ? ocfs2_truncate_log_needs_flush+0x300/0x300 [ 122.268231][ T4832] ? ocfs2_sync_fs+0xe1/0x330 [ 122.273171][ T4832] ? rwsem_write_trylock+0x135/0x1c0 [ 122.278504][ T4832] ? clear_nonspinnable+0x60/0x60 [ 122.283635][ T4832] ? __rwlock_init+0x140/0x140 [ 122.288435][ T4832] ocfs2_flush_truncate_log+0x4b/0x60 [ 122.293918][ T4832] ocfs2_sync_fs+0x119/0x330 [ 122.298527][ T4832] ? ocfs2_put_super+0x1b0/0x1b0 [ 122.303483][ T4832] ? get_nr_dirty_inodes+0x258/0x2e0 [ 122.308794][ T4832] sync_filesystem+0x1be/0x220 [ 122.313578][ T4832] generic_shutdown_super+0x6b/0x300 [ 122.318913][ T4832] kill_block_super+0x7c/0xe0 [ 122.324078][ T4832] deactivate_locked_super+0x93/0xf0 [ 122.329826][ T4832] cleanup_mnt+0x426/0x4d0 [ 122.334946][ T4832] task_work_run+0x125/0x1a0 [ 122.339778][ T4832] exit_to_user_mode_loop+0x10f/0x130 [ 122.345202][ T4832] exit_to_user_mode_prepare+0xee/0x180 [ 122.350987][ T4832] syscall_exit_to_user_mode+0x16/0x40 [ 122.356572][ T4832] do_syscall_64+0x58/0xa0 [ 122.361058][ T4832] ? clear_bhb_loop+0x30/0x80 [ 122.365901][ T4832] ? clear_bhb_loop+0x30/0x80 [ 122.370722][ T4832] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.376679][ T4832] RIP: 0033:0x7f526f059317 [ 122.381124][ T4832] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 122.401026][ T4832] RSP: 002b:00007ffc828312f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 122.409519][ T4832] RAX: 0000000000000000 RBX: 00007f526f0ee474 RCX: 00007f526f059317 [ 122.417693][ T4832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc828313b0 [ 122.426170][ T4832] RBP: 00007ffc828313b0 R08: 00007ffc828323b0 R09: 00000000ffffffff [ 122.434351][ T4832] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc82832440 [ 122.442379][ T4832] R13: 00007f526f0ee474 R14: 000000000001dae8 R15: 00007ffc82832480 [ 122.451336][ T4832] [ 122.483049][ T4832] ocfs2: Unmounting device (7,0) on (node local) [ 122.732605][ T5095] loop0: detected capacity change from 0 to 32768 [ 122.789949][ T5095] JBD2: Ignoring recovery information on journal [ 122.815397][ T5095] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 122.827061][ T26] audit: type=1800 audit(1792706203.742:4): pid=5095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 122.900712][ T26] audit: type=1800 audit(1792706203.822:5): pid=5099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 122.958602][ T4299] Bluetooth: hci0: command 0x0419 tx timeout [ 123.316052][ T5095] (syz.0.18,5095,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 123.363790][ T4832] ocfs2: Unmounting device (7,0) on (node local) [ 123.582428][ T5101] loop0: detected capacity change from 0 to 32768 [ 123.640874][ T5101] JBD2: Ignoring recovery information on journal [ 123.663288][ T5101] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 123.674588][ T26] audit: type=1800 audit(1792706204.592:6): pid=5101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.19" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 123.727138][ T26] audit: type=1800 audit(1792706204.642:7): pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.19" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 124.059621][ T5101] (syz.0.19,5101,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 124.098901][ T4832] ocfs2: Unmounting device (7,0) on (node local) [ 124.335994][ T5107] loop0: detected capacity change from 0 to 32768 [ 124.424635][ T5107] JBD2: Ignoring recovery information on journal [ 124.447112][ T5107] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 124.461357][ T26] audit: type=1800 audit(1792706205.382:8): pid=5107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.20" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 124.536364][ T26] audit: type=1800 audit(1792706205.452:9): pid=5111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.20" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 124.679899][ T5107] (syz.0.20,5107,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 124.700921][ T4832] ocfs2: Unmounting device (7,0) on (node local) [ 124.900010][ T5113] loop0: detected capacity change from 0 to 32768 [ 124.950062][ T5113] JBD2: Ignoring recovery information on journal [ 124.971760][ T5113] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 124.983807][ T26] audit: type=1800 audit(1792706205.902:10): pid=5113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.21" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 125.037246][ T26] audit: type=1800 audit(1792706205.952:11): pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.21" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 125.354595][ T5113] (syz.0.21,5113,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 125.390635][ T4832] ocfs2: Unmounting device (7,0) on (node local) [ 125.602719][ T5119] loop0: detected capacity change from 0 to 32768 [ 125.694219][ T5119] JBD2: Ignoring recovery information on journal [ 125.717439][ T5119] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. 2026/10/22 21:56:47 executed programs: 8 [ 126.169633][ T5119] (syz.0.22,5119,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 126.219282][ T4832] ocfs2: Unmounting device (7,0) on (node local) [ 126.461641][ T5125] loop0: detected capacity change from 0 to 32768 [ 126.520626][ T5125] JBD2: Ignoring recovery information on journal [ 126.543058][ T5125] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 126.555233][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 126.555249][ T26] audit: type=1800 audit(1792706207.472:14): pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.23" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 126.614648][ T26] audit: type=1800 audit(1792706207.532:15): pid=5129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.23" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 126.913503][ T5125] (syz.0.23,5125,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 126.950253][ T4832] ocfs2: Unmounting device (7,0) on (node local) [ 127.189592][ T5131] loop0: detected capacity change from 0 to 32768 [ 127.241445][ T5131] JBD2: Ignoring recovery information on journal [ 127.263328][ T5131] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 127.274736][ T26] audit: type=1800 audit(1792706208.192:16): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.24" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 127.350062][ T26] audit: type=1800 audit(1792706208.272:17): pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.24" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 127.755526][ T5131] (syz.0.24,5131,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 127.807833][ T4832] ocfs2: Unmounting device (7,0) on (node local) [ 128.033923][ T5137] loop0: detected capacity change from 0 to 32768 [ 128.100310][ T5137] JBD2: Ignoring recovery information on journal [ 128.125978][ T5137] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 128.137194][ T26] audit: type=1800 audit(1792706209.052:18): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.25" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 128.213068][ T26] audit: type=1800 audit(1792706209.132:19): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.25" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 128.599391][ T5137] (syz.0.25,5137,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 128.645615][ T4832] ocfs2: Unmounting device (7,0) on (node local) [ 128.880437][ T5143] loop0: detected capacity change from 0 to 32768 [ 128.937689][ T5143] JBD2: Ignoring recovery information on journal [ 128.960068][ T5143] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 128.972389][ T26] audit: type=1800 audit(1792706209.892:20): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.26" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 129.033926][ T26] audit: type=1800 audit(1792706209.952:21): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.26" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 129.366812][ T5143] (syz.0.26,5143,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 129.407980][ T4832] ocfs2: Unmounting device (7,0) on (node local) [ 129.639825][ T5149] loop0: detected capacity change from 0 to 32768 [ 129.686103][ T5149] JBD2: Ignoring recovery information on journal [ 129.709267][ T5149] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 129.723114][ T26] audit: type=1800 audit(1792706210.642:22): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.27" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 129.776664][ T26] audit: type=1800 audit(1792706210.692:23): pid=5153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.27" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 130.105198][ T5149] (syz.0.27,5149,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 130.141686][ T4832] ocfs2: Unmounting device (7,0) on (node local) [ 130.357635][ T5155] loop0: detected capacity change from 0 to 32768 [ 130.410299][ T5155] JBD2: Ignoring recovery information on journal [ 130.434182][ T5155] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 130.859574][ T5155] (syz.0.28,5155,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5 [ 130.909513][ T4832] ocfs2: Unmounting device (7,0) on (node local) [ 131.116057][ T5161] loop0: detected capacity change from 0 to 32768 [ 131.214341][ T5161] JBD2: Ignoring recovery information on journal [ 131.237275][ T5161] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. 2026/10/22 21:56:52 executed programs: 15