Warning: Permanently added '[localhost]:9031' (ED25519) to the list of known hosts. 2026/01/14 10:52:32 parsed 1 programs syzkaller login: [ 52.151052][ T5814] cgroup: Unknown subsys name 'net' [ 52.279926][ T5814] cgroup: Unknown subsys name 'cpuset' [ 52.285252][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.193535][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.280121][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.692550][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 56.740902][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.743434][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.745658][ T5839] bridge_slave_0: entered allmulticast mode [ 56.748508][ T5839] bridge_slave_0: entered promiscuous mode [ 56.753387][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.755539][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.757944][ T5839] bridge_slave_1: entered allmulticast mode [ 56.760488][ T5839] bridge_slave_1: entered promiscuous mode [ 56.779468][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.784247][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.803873][ T5839] team0: Port device team_slave_0 added [ 56.807745][ T5839] team0: Port device team_slave_1 added [ 56.821571][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.823620][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.831321][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.835991][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.838169][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.845538][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.894697][ T5839] hsr_slave_0: entered promiscuous mode [ 56.897953][ T5839] hsr_slave_1: entered promiscuous mode [ 57.056896][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.064808][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.071265][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.078119][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.107123][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.109912][ T5839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.113245][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.116107][ T5839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.170830][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.185241][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.190494][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.201931][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.211650][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.214381][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.223617][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.226404][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.352794][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.391005][ T5839] veth0_vlan: entered promiscuous mode [ 57.399858][ T5839] veth1_vlan: entered promiscuous mode [ 57.423021][ T5839] veth0_macvtap: entered promiscuous mode [ 57.429297][ T5839] veth1_macvtap: entered promiscuous mode [ 57.443971][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.454072][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.463819][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.468354][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.472074][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.475674][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.582862][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.637486][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.690157][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.732495][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.147430][ T5885] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.150382][ T5885] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.153103][ T5885] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.158746][ T5885] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.161659][ T5885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.509658][ T4186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.512121][ T4186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.533511][ T4186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.538962][ T4186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/14 10:52:41 executed programs: 0 [ 59.634363][ T5200] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.637783][ T5200] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.640952][ T5200] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.644594][ T5200] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.649538][ T5200] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.761394][ T5920] chnl_net:caif_netlink_parms(): no params data found [ 59.809308][ T5920] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.811612][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.813734][ T5920] bridge_slave_0: entered allmulticast mode [ 59.816303][ T5920] bridge_slave_0: entered promiscuous mode [ 59.819342][ T5920] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.821448][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.823561][ T5920] bridge_slave_1: entered allmulticast mode [ 59.826042][ T5920] bridge_slave_1: entered promiscuous mode [ 59.841067][ T5920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.845309][ T5920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.861157][ T5920] team0: Port device team_slave_0 added [ 59.864107][ T5920] team0: Port device team_slave_1 added [ 59.879712][ T5920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.881721][ T5920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.889607][ T5920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.893811][ T5920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.895895][ T5920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.903096][ T5920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.926518][ T5920] hsr_slave_0: entered promiscuous mode [ 59.928645][ T5920] hsr_slave_1: entered promiscuous mode [ 59.930703][ T5920] debugfs: 'hsr0' already exists in 'hsr' [ 59.932472][ T5920] Cannot create hsr debugfs directory [ 60.723729][ T13] bridge_slave_1: left allmulticast mode [ 60.726469][ T13] bridge_slave_1: left promiscuous mode [ 60.729138][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.741195][ T13] bridge_slave_0: left allmulticast mode [ 60.743416][ T13] bridge_slave_0: left promiscuous mode [ 60.745862][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.937071][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.942402][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.947012][ T13] bond0 (unregistering): Released all slaves [ 61.043249][ T13] hsr_slave_0: left promiscuous mode [ 61.045364][ T13] hsr_slave_1: left promiscuous mode [ 61.047863][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.050117][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.052934][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.055411][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.065755][ T13] veth1_macvtap: left promiscuous mode [ 61.068075][ T13] veth0_macvtap: left promiscuous mode [ 61.070089][ T13] veth1_vlan: left promiscuous mode [ 61.072745][ T13] veth0_vlan: left promiscuous mode [ 61.296279][ T13] team0 (unregistering): Port device team_slave_1 removed [ 61.313848][ T13] team0 (unregistering): Port device team_slave_0 removed [ 61.639625][ T5920] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.644072][ T5920] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.654084][ T5920] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.662447][ T5920] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.714178][ T5920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.726679][ T5200] Bluetooth: hci0: command tx timeout [ 61.740341][ T5920] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.751301][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.753620][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.766511][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.769024][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.216255][ T5920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.280734][ T5920] veth0_vlan: entered promiscuous mode [ 62.285509][ T5920] veth1_vlan: entered promiscuous mode [ 62.299303][ T5920] veth0_macvtap: entered promiscuous mode [ 62.303210][ T5920] veth1_macvtap: entered promiscuous mode [ 62.311951][ T5920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.325010][ T5920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.338145][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.344367][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.367995][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.372339][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.449066][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.451782][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.482626][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.485722][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.533202][ T5964] loop0: detected capacity change from 0 to 512 [ 62.560629][ T5964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.580823][ T33] audit: type=1800 audit(1768387964.435:2): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 62.593887][ T5964] BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:321 [ 62.597896][ T5964] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5964, name: syz.0.17 [ 62.600824][ T5964] preempt_count: 1, expected: 0 [ 62.602282][ T5964] RCU nest depth: 0, expected: 0 [ 62.603927][ T5964] 1 lock held by syz.0.17/5964: [ 62.605443][ T5964] #0: ffff88811839aa20 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: ext4_file_read_iter+0x298/0x660 [ 62.609729][ T5964] Preemption disabled at: [ 62.609739][ T5964] [] __iomap_dio_rw+0x30d/0x2510 [ 62.613360][ T5964] CPU: 0 UID: 0 PID: 5964 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 62.613373][ T5964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 62.613379][ T5964] Call Trace: [ 62.613387][ T5964] [ 62.613392][ T5964] dump_stack_lvl+0x1a9/0x280 [ 62.613413][ T5964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 62.613425][ T5964] ? __pfx__printk+0x10/0x10 [ 62.613435][ T5964] ? print_lock_name+0xde/0x100 [ 62.613445][ T5964] ? __iomap_dio_rw+0x30d/0x2510 [ 62.613459][ T5964] __might_resched+0x4b0/0x630 [ 62.613474][ T5964] ? __iomap_dio_rw+0x30d/0x2510 [ 62.613484][ T5964] ? __pfx___might_resched+0x10/0x10 [ 62.613501][ T5964] ? __kmalloc_noprof+0xa3/0x7d0 [ 62.613517][ T5964] __kmalloc_noprof+0xbc/0x7d0 [ 62.613528][ T5964] ? __iomap_dio_rw+0xbdd/0x2510 [ 62.613542][ T5964] __iomap_dio_rw+0xbdd/0x2510 [ 62.613575][ T5964] ? arch_stack_walk+0xfb/0x150 [ 62.613603][ T5964] ? __pfx___iomap_dio_rw+0x10/0x10 [ 62.613645][ T5964] ? ext4_inode_journal_mode+0x18c/0x480 [ 62.613658][ T5964] iomap_dio_rw+0x45/0xb0 [ 62.613670][ T5964] ext4_file_read_iter+0x4f8/0x660 [ 62.613687][ T5964] copy_splice_read+0x5ff/0xaa0 [ 62.613707][ T5964] ? __pfx_iter_file_splice_write+0x10/0x10 [ 62.613724][ T5964] ? __pfx_copy_splice_read+0x10/0x10 [ 62.613737][ T5964] ? rcu_read_lock_any_held+0xb3/0x140 [ 62.613750][ T5964] ? direct_splice_actor+0x10c/0x160 [ 62.613761][ T5964] ? file_end_write+0x156/0x250 [ 62.613767][ T5964] ? direct_splice_actor+0x10c/0x160 [ 62.613777][ T5964] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 62.613786][ T5964] splice_direct_to_actor+0x4a0/0xc70 [ 62.613798][ T5964] ? __pfx_direct_splice_actor+0x10/0x10 [ 62.613810][ T5964] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 62.613819][ T5964] ? futex_hash+0x40/0x2d0 [ 62.613826][ T5964] ? futex_hash+0x2ad/0x2d0 [ 62.613835][ T5964] do_splice_direct+0x195/0x290 [ 62.613845][ T5964] ? __pfx_do_splice_direct+0x10/0x10 [ 62.613854][ T5964] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 62.613863][ T5964] ? rw_verify_area+0x255/0x4d0 [ 62.613873][ T5964] do_sendfile+0x535/0x7c0 [ 62.613880][ T5964] ? mntput_no_expire+0xc0/0x870 [ 62.613890][ T5964] ? __pfx_do_sendfile+0x10/0x10 [ 62.613896][ T5964] ? dput+0x37/0x2b0 [ 62.613903][ T5964] ? __se_sys_futex+0x3a8/0x440 [ 62.613913][ T5964] __se_sys_sendfile64+0x144/0x1a0 [ 62.613920][ T5964] ? __pfx___se_sys_futex+0x10/0x10 [ 62.613929][ T5964] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 62.613936][ T5964] ? do_syscall_64+0xb4/0xfa0 [ 62.613946][ T5964] do_syscall_64+0xf0/0xfa0 [ 62.613953][ T5964] ? lockdep_hardirqs_on+0x9b/0x150 [ 62.613962][ T5964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.613969][ T5964] ? exc_page_fault+0xa7/0xf0 [ 62.613977][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.613983][ T5964] RIP: 0033:0x7f8cd8b9acb9 [ 62.613991][ T5964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.613996][ T5964] RSP: 002b:00007ffeab7c8828 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 62.614005][ T5964] RAX: ffffffffffffffda RBX: 00007f8cd8e15fa0 RCX: 00007f8cd8b9acb9 [ 62.614009][ T5964] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 62.614013][ T5964] RBP: 00007f8cd8c08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 62.614017][ T5964] R10: 0000000000fffe82 R11: 0000000000000246 R12: 0000000000000000 [ 62.614021][ T5964] R13: 00007f8cd8e15fac R14: 00007f8cd8e15fa0 R15: 00007f8cd8e15fa0 [ 62.614030][ T5964] [ 62.748175][ T5920] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.091416][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.507399][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.665386][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.714728][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.819370][ T13] bridge_slave_1: left allmulticast mode [ 65.821264][ T13] bridge_slave_1: left promiscuous mode [ 65.822983][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.828459][ T13] bridge_slave_0: left allmulticast mode [ 65.830173][ T13] bridge_slave_0: left promiscuous mode [ 65.832169][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.964422][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.969006][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.972172][ T13] bond0 (unregistering): Released all slaves [ 66.213300][ T13] hsr_slave_0: left promiscuous mode [ 66.216567][ T13] hsr_slave_1: left promiscuous mode [ 66.219151][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.222058][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.225667][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.230441][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.237458][ T13] veth1_macvtap: left promiscuous mode [ 66.239180][ T13] veth0_macvtap: left promiscuous mode [ 66.240860][ T13] veth1_vlan: left promiscuous mode [ 66.242926][ T13] veth0_vlan: left promiscuous mode [ 66.456761][ T13] team0 (unregistering): Port device team_slave_1 removed [ 66.474049][ T13] team0 (unregistering): Port device team_slave_0 removed [ 71.570176][ T1360] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.572812][ T1360] ieee802154 phy1 wpan1: encryption failed: -22