syzkaller login: qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x400000) [ 93.051375][ T1012] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 93.054482][ T1012] ata1: failed to read log page 10h (errno=-5) [ 93.057358][ T1012] ata1.00: exception Emask 0x1 SAct 0x40000001 SErr 0x0 action 0x0 [ 93.069485][ T1012] ata1.00: irq_stat 0x41000000 [ 93.072190][ T1012] ata1.00: failed command: WRITE FPDMA QUEUED [ 93.075154][ T1012] ata1.00: cmd 61/00:00:36:69:05/18:00:00:00:00/40 tag 0 ncq dma 3145728 ou [ 93.075154][ T1012] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 93.100502][ T1012] ata1.00: status: { DRDY } [ 93.103235][ T1012] ata1.00: failed command: WRITE FPDMA QUEUED [ 93.106299][ T1012] ata1.00: cmd 61/00:f0:36:49:05/20:00:00:00:00/40 tag 30 ncq dma 4194304 ou [ 93.106299][ T1012] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 93.130673][ T1012] ata1.00: status: { DRDY } [ 93.135047][ T1012] ata1.00: configured for UDMA/100 [ 93.137808][ T1012] ata1: EH complete qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x400000) Warning: Permanently added '[localhost]:62860' (ED25519) to the list of known hosts. [ 97.327116][ T1347] cfg80211: failed to load regulatory.db [ 123.573770][ T1012] ata1.00: exception Emask 0x0 SAct 0x800 SErr 0x0 action 0x6 frozen [ 123.577636][ T1012] ata1.00: failed command: WRITE FPDMA QUEUED [ 123.581626][ T1012] ata1.00: cmd 61/00:58:36:49:05/20:00:00:00:00/40 tag 11 ncq dma 4194304 ou [ 123.581626][ T1012] res 40/00:00:00:00:00/00:00:00:00:00/00 Emask 0x4 (timeout) [ 123.589295][ T1012] ata1.00: status: { DRDY } [ 123.591922][ T1012] ata1: hard resetting link [ 123.914541][ T1012] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 123.919187][ T1012] ata1.00: configured for UDMA/100 [ 123.922496][ T1012] ata1: EH complete qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x391000) [ 124.071921][ T1012] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 124.076647][ T1012] ata1: failed to read log page 10h (errno=-5) [ 124.079825][ T1012] ata1.00: NCQ disabled due to excessive errors [ 124.089032][ T1012] ata1.00: exception Emask 0x1 SAct 0x100 SErr 0x0 action 0x0 [ 124.100616][ T1012] ata1.00: irq_stat 0x41000008 [ 124.103031][ T1012] ata1.00: failed command: WRITE FPDMA QUEUED [ 124.105792][ T1012] ata1.00: cmd 61/88:40:36:e1:05/1c:00:00:00:00/40 tag 8 ncq dma 3739648 ou [ 124.105792][ T1012] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 124.130396][ T1012] ata1.00: status: { DRDY } [ 124.132939][ T1012] ata1.00: error: { ABRT } [ 124.141135][ T1012] ata1.00: configured for UDMA/100 [ 124.152082][ T1012] ata1: EH complete 2026/04/05 23:21:21 parsed 1 programs [ 129.285426][ T5327] cgroup: Unknown subsys name 'net' [ 129.344259][ T5327] cgroup: Unknown subsys name 'cpuset' [ 129.353719][ T5327] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 131.383577][ T5327] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 135.903878][ T5349] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 136.059539][ T5355] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.068631][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.072414][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.078701][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.083798][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 138.091983][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.095681][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.136515][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.142448][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.001531][ T5399] chnl_net:caif_netlink_parms(): no params data found [ 140.088213][ T5399] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.093205][ T5399] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.096677][ T5399] bridge_slave_0: entered allmulticast mode [ 140.101245][ T5399] bridge_slave_0: entered promiscuous mode [ 140.111323][ T5399] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.114771][ T5399] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.118578][ T5399] bridge_slave_1: entered allmulticast mode [ 140.123394][ T5399] bridge_slave_1: entered promiscuous mode [ 140.153704][ T5399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.159860][ T5399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.196331][ T5399] team0: Port device team_slave_0 added [ 140.201664][ T5399] team0: Port device team_slave_1 added [ 140.226955][ T5399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.230228][ T5399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.242900][ T5399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.252442][ T5399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.255775][ T5399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.268601][ T5399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.313674][ T5399] hsr_slave_0: entered promiscuous mode [ 140.317750][ T5399] hsr_slave_1: entered promiscuous mode [ 140.491869][ T5399] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.504014][ T5399] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.512095][ T5399] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 140.519506][ T5399] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 140.559105][ T5399] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.563064][ T5399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.568562][ T5399] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.572431][ T5399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.636107][ T5399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.653068][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.657853][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.671478][ T5399] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.681348][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.684436][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.698239][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.701800][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.908838][ T5399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.955111][ T5399] veth0_vlan: entered promiscuous mode [ 140.969464][ T5399] veth1_vlan: entered promiscuous mode [ 141.003933][ T5399] veth0_macvtap: entered promiscuous mode [ 141.010136][ T5399] veth1_macvtap: entered promiscuous mode [ 141.029986][ T5399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.043230][ T5399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.054843][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.059006][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.079667][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.098888][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.278590][ T1065] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.331434][ T1065] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.367933][ T1065] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.433480][ T1065] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 qemu-system-x86_64: hw/ide/core.c:934: ide_dma_cb: Assertion `prep_size >= 0 && prep_size <= n * 512' failed. Connection to localhost closed by remote host.