Warning: Permanently added '[localhost]:51559' (ED25519) to the list of known hosts. 2026/10/10 12:34:18 parsed 1 programs 2026/10/10 12:34:18 serving rpc on tcp://40451 syzkaller login: qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xbf000) [ 92.126092][ T10] cfg80211: failed to load regulatory.db [ 93.917395][ T5285] cgroup: Unknown subsys name 'net' [ 93.976412][ T5285] cgroup: Unknown subsys name 'cpuset' [ 93.979549][ T5285] cgroup: Unknown subsys name 'rlimit' [ 122.221159][ T1026] ata1.00: exception Emask 0x0 SAct 0x4000 SErr 0x0 action 0x6 frozen [ 122.221238][ T1026] ata1.00: failed command: WRITE FPDMA QUEUED [ 122.221244][ T1026] ata1.00: cmd 61/f8:70:f6:5c:04/05:00:00:00:00/40 tag 14 ncq dma 782336 out [ 122.221244][ T1026] res 40/00:00:00:00:00/00:00:00:00:00/00 Emask 0x4 (timeout) [ 122.221269][ T1026] ata1.00: status: { DRDY } [ 122.221340][ T1026] ata1: hard resetting link [ 122.541724][ T1026] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 122.544587][ T1026] ata1.00: configured for UDMA/100 [ 122.544916][ T1026] ata1: EH complete Setting up swapspace version 1, size = 127995904 bytes [ 123.916903][ T5285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 129.088852][ T5314] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 131.101950][ T188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.101970][ T188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.148332][ T188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.148348][ T188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.782385][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.785115][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.785594][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.786186][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.786828][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 135.158229][ T5373] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.160117][ T5373] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.160220][ T5373] bridge_slave_0: entered allmulticast mode [ 135.178139][ T5373] bridge_slave_0: entered promiscuous mode [ 135.186847][ T5373] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.187709][ T5373] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.187809][ T5373] bridge_slave_1: entered allmulticast mode [ 135.190184][ T5373] bridge_slave_1: entered promiscuous mode [ 135.261849][ T5373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.265231][ T5373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.297557][ T5373] team0: Port device team_slave_0 added [ 135.299322][ T5373] team0: Port device team_slave_1 added [ 135.325276][ T5373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.325291][ T5373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.325305][ T5373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.327897][ T5373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.327906][ T5373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.327920][ T5373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.403005][ T5373] hsr_slave_0: entered promiscuous mode [ 135.403787][ T5373] hsr_slave_1: entered promiscuous mode [ 135.770456][ T5373] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.811533][ T5373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 135.812482][ T5373] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 135.828308][ T5373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 135.830439][ T5373] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 135.846667][ T5373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 135.848840][ T5373] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 135.864174][ T5373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 135.948942][ T5373] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.949030][ T5373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.949756][ T5373] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.949844][ T5373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.978636][ T106] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.980320][ T106] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.104997][ T5373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.137401][ T5373] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.163211][ T188] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.163646][ T188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.170026][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.170096][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.759489][ T5373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.809634][ T5373] veth0_vlan: entered promiscuous mode [ 136.819714][ T5373] veth1_vlan: entered promiscuous mode [ 136.853181][ T5373] veth0_macvtap: entered promiscuous mode [ 136.857097][ T5373] veth1_macvtap: entered promiscuous mode [ 136.887472][ T5373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.904493][ T5373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.943543][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.997109][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.997277][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.011989][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.313317][ T1106] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.163322][ T1106] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.208376][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.208432][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.987664][ T1106] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.555228][ T1106] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.774333][ T1106] bridge_slave_1: left allmulticast mode [ 139.774386][ T1106] bridge_slave_1: left promiscuous mode [ 139.775303][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.796290][ T1106] bridge_slave_0: left allmulticast mode [ 139.796310][ T1106] bridge_slave_0: left promiscuous mode [ 139.796517][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.127642][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.138855][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.146789][ T1106] bond0 (unregistering): Released all slaves [ 140.269048][ T1106] hsr_slave_0: left promiscuous mode [ 140.269590][ T1106] hsr_slave_1: left promiscuous mode [ 140.270431][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.270455][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.294832][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.294846][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.345411][ T1106] veth1_macvtap: left promiscuous mode [ 140.347577][ T1106] veth0_macvtap: left promiscuous mode [ 140.347678][ T1106] veth1_vlan: left promiscuous mode [ 140.347739][ T1106] veth0_vlan: left promiscuous mode [ 140.996723][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 141.025172][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 141.250333][ T4991] 8021q: adding VLAN 0 to HW filter on device eth2 2026/10/10 12:35:08 executed programs: 0 [ 141.555248][ T4646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.559876][ T4646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.570605][ T4646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 141.575365][ T4646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 141.575628][ T4646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.007262][ T4991] 8021q: adding VLAN 0 to HW filter on device eth3 [ 142.642213][ T4991] 8021q: adding VLAN 0 to HW filter on device eth4 [ 143.033502][ T4991] 8021q: adding VLAN 0 to HW filter on device eth5 [ 143.049490][ T5436] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.049604][ T5436] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.049684][ T5436] bridge_slave_0: entered allmulticast mode [ 143.066392][ T5436] bridge_slave_0: entered promiscuous mode [ 143.074941][ T5436] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.075839][ T5436] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.076061][ T5436] bridge_slave_1: entered allmulticast mode [ 143.078760][ T5436] bridge_slave_1: entered promiscuous mode [ 143.139758][ T5436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.149206][ T5436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.215450][ T5436] team0: Port device team_slave_0 added [ 143.218841][ T5436] team0: Port device team_slave_1 added [ 143.266347][ T5436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.266361][ T5436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.266375][ T5436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.293588][ T5436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.293599][ T5436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.293613][ T5436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.383928][ T5436] hsr_slave_0: entered promiscuous mode [ 143.384746][ T5436] hsr_slave_1: entered promiscuous mode [ 143.643513][ T4646] Bluetooth: hci0: command tx timeout [ 144.068939][ T5436] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.080685][ T5436] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 144.085619][ T5436] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.097151][ T5436] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 144.098765][ T5436] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.112812][ T5436] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 144.113724][ T5436] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.129954][ T5436] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 144.336561][ T5436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.382311][ T5436] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.401521][ T188] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.401587][ T188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.446135][ T188] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.446205][ T188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.158701][ T5436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.263235][ T5436] veth0_vlan: entered promiscuous mode [ 145.279267][ T5436] veth1_vlan: entered promiscuous mode [ 145.341388][ T5436] veth0_macvtap: entered promiscuous mode [ 145.347343][ T5436] veth1_macvtap: entered promiscuous mode [ 145.381424][ T5436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.410241][ T5436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.471613][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.471711][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.471725][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.471737][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.636733][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.636750][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.715011][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.715027][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.726035][ T4646] Bluetooth: hci0: command tx timeout [ 146.029369][ T5520] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 146.202907][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 146.366034][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.369376][ T10] usb 5-1: config 0 has no interfaces? [ 146.384691][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.384710][ T10] usb 5-1: Product: syz [ 146.384716][ T10] usb 5-1: Manufacturer: syz [ 146.384721][ T10] usb 5-1: SerialNumber: syz [ 146.431863][ T10] usb 5-1: config 0 descriptor?? [ 146.644797][ T935] usb 5-1: USB disconnect, device number 2 [ 147.195080][ T5537] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ 2026/10/10 12:35:14 executed programs: 3 [ 147.289638][ T5538] ------------[ cut here ]------------ [ 147.289653][ T5538] 1 [ 147.289658][ T5538] WARNING: mm/page_alloc.c:5340 at __alloc_frozen_pages_noprof+0x425/0x5a0, CPU#0: syz.0.18/5538 [ 147.298940][ T5538] Modules linked in: [ 147.300676][ T5538] CPU: 0 UID: 0 PID: 5538 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 147.304692][ T5538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.308977][ T5538] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0 [ 147.311782][ T5538] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 86 ab 37 0f 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d 8c 1f 53 0f 67 48 0f b9 3a e9 68 [ 147.320299][ T5538] RSP: 0018:ffffc900026cf560 EFLAGS: 00010246 [ 147.323235][ T5538] RAX: ffffc900026cf500 RBX: 1ffff920004d9eb0 RCX: 0000000000000000 [ 147.326827][ T5538] RDX: 0000000000000000 RSI: 0000000000000034 RDI: ffffc900026cf5c8 [ 147.330745][ T5538] RBP: ffffc900026cf658 R08: ffffc900026cf5c7 R09: 0000000000000000 [ 147.334786][ T5538] R10: ffffc900026cf5a0 R11: fffff520004d9eb9 R12: 0000000000000000 [ 147.338574][ T5538] R13: 0000000000000000 R14: 0000000000040dc0 R15: 0000000000000000 [ 147.342234][ T5538] FS: 00007f4cb1dc46c0(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000 [ 147.345979][ T5538] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.349079][ T5538] CR2: 00007f31032c5e9c CR3: 0000000013e1d000 CR4: 0000000000352ef0 [ 147.352718][ T5538] Call Trace: [ 147.354154][ T5538] [ 147.355393][ T5538] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 147.358185][ T5538] ? __pfx_policy_nodemask+0x10/0x10 [ 147.360495][ T5538] alloc_pages_mpol+0x21e/0x390 [ 147.362723][ T5538] ? setup_conf+0x23a/0x1040 [ 147.364874][ T5538] ___kmalloc_large_node+0x4f/0x120 [ 147.367079][ T5538] __kmalloc_large_node_noprof+0x18/0x90 [ 147.369574][ T5538] __kmalloc_noprof+0x3fb/0x720 [ 147.371828][ T5538] ? __kmalloc_cache_noprof+0x14d/0x600 [ 147.374160][ T5538] ? setup_conf+0x1bc/0x1040 [ 147.376239][ T5538] ? setup_conf+0x23a/0x1040 [ 147.378361][ T5538] ? ufs_setattr+0xa2/0xe20 [ 147.380406][ T5538] setup_conf+0x23a/0x1040 [ 147.382541][ T5538] raid1_run+0x14d/0xa50 [ 147.384410][ T5538] ? xa_find_after+0xae/0x430 [ 147.386521][ T5538] ? __pfx_raid1_run+0x10/0x10 [ 147.388658][ T5538] ? do_raw_spin_unlock+0x4d/0x200 [ 147.391021][ T5538] ? _raw_spin_unlock+0x28/0x50 [ 147.393230][ T5538] ? get_pers+0x22b/0x2e0 [ 147.395152][ T5538] ? __pfx_get_pers+0x10/0x10 [ 147.397256][ T5538] ? preempt_schedule_thunk+0x16/0x40 [ 147.399743][ T5538] md_run+0xc3d/0x1cd0 [ 147.401821][ T5538] ? __pfx_md_run+0x10/0x10 [ 147.403834][ T5538] do_md_run+0x35/0x720 [ 147.405830][ T5538] ? md_ioctl+0x1e23/0x2610 [ 147.407876][ T5538] md_ioctl+0x1e2b/0x2610 [ 147.410170][ T5538] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 147.413383][ T5538] ? tomoyo_path_number_perm+0x219/0x5f0 [ 147.416154][ T5538] ? __pfx_md_ioctl+0x10/0x10 [ 147.418374][ T5538] ? do_vfs_ioctl+0x116f/0x1530 [ 147.420567][ T5538] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 147.422989][ T5538] ? hook_file_ioctl+0x1f2/0x600 [ 147.425233][ T5538] ? __pfx_md_ioctl+0x10/0x10 [ 147.427320][ T5538] blkdev_ioctl+0x5e3/0x740 [ 147.431284][ T5538] ? __pfx_blkdev_ioctl+0x10/0x10 [ 147.434069][ T5538] ? __fget_files+0x2a/0x420 [ 147.436084][ T5538] ? bpf_lsm_file_ioctl+0x9/0x20 [ 147.438174][ T5538] ? __pfx_blkdev_ioctl+0x10/0x10 [ 147.440228][ T5538] __se_sys_ioctl+0xfc/0x170 [ 147.442801][ T5538] do_syscall_64+0x166/0x520 [ 147.444784][ T5538] ? trace_irq_disable+0x3b/0x140 [ 147.446897][ T5538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.449528][ T5538] ? clear_bhb_loop+0x70/0xc0 [ 147.451721][ T5538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.454298][ T5538] RIP: 0033:0x7f4cb0f9e1d9 [ 147.456351][ T5538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.464679][ T5538] RSP: 002b:00007f4cb1dc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.468211][ T5538] RAX: ffffffffffffffda RBX: 00007f4cb1226090 RCX: 00007f4cb0f9e1d9 [ 147.471606][ T5538] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000005 [ 147.474900][ T5538] RBP: 00007f4cb1035888 R08: 0000000000000000 R09: 0000000000000000 [ 147.478213][ T5538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.481908][ T5538] R13: 00007f4cb1226128 R14: 00007f4cb1226090 R15: 00007ffd96c81ad8 [ 147.485284][ T5538] [ 147.486663][ T5538] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 147.489736][ T5538] CPU: 0 UID: 0 PID: 5538 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 147.493581][ T5538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.497900][ T5538] Call Trace: [ 147.499285][ T5538] [ 147.500544][ T5538] vpanic+0x56d/0xa60 [ 147.502290][ T5538] ? __pfx__printk+0x10/0x10 [ 147.504528][ T5538] ? __pfx_vpanic+0x10/0x10 [ 147.506549][ T5538] ? is_bpf_text_address+0x292/0x2b0 [ 147.508997][ T5538] ? is_bpf_text_address+0x26/0x2b0 [ 147.511324][ T5538] panic+0xc5/0xd0 [ 147.513055][ T5538] ? __pfx_panic+0x10/0x10 [ 147.515038][ T5538] __warn+0x315/0x4c0 [ 147.516874][ T5538] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 147.521688][ T5538] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 147.524409][ T5538] __report_bug+0x276/0x570 [ 147.526471][ T5538] ? is_bpf_text_address+0x292/0x2b0 [ 147.528905][ T5538] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 147.531603][ T5538] ? __pfx___report_bug+0x10/0x10 [ 147.533842][ T5538] ? do_raw_spin_lock+0x12b/0x2f0 [ 147.536114][ T5538] ? lock_acquire+0x115/0x350 [ 147.538206][ T5538] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 147.540677][ T5538] report_bug+0x16b/0x220 [ 147.542405][ T5538] ? __alloc_frozen_pages_noprof+0x425/0x5a0 [ 147.544874][ T5538] ? __alloc_frozen_pages_noprof+0x427/0x5a0 [ 147.547487][ T5538] handle_bug+0x9c/0x200 [ 147.549425][ T5538] exc_invalid_op+0x1a/0x50 [ 147.551506][ T5538] asm_exc_invalid_op+0x1a/0x20 [ 147.553620][ T5538] RIP: 0010:__alloc_frozen_pages_noprof+0x425/0x5a0 [ 147.556538][ T5538] Code: 90 e9 76 fe ff ff 41 81 e6 3f ff ff ff 44 89 f1 41 83 e6 f7 a9 00 00 00 10 44 0f 44 f1 e9 45 fd ff ff c6 05 86 ab 37 0f 01 90 <0f> 0b 90 e9 8b fe ff ff 48 8d 3d 8c 1f 53 0f 67 48 0f b9 3a e9 68 [ 147.565085][ T5538] RSP: 0018:ffffc900026cf560 EFLAGS: 00010246 [ 147.567814][ T5538] RAX: ffffc900026cf500 RBX: 1ffff920004d9eb0 RCX: 0000000000000000 [ 147.571372][ T5538] RDX: 0000000000000000 RSI: 0000000000000034 RDI: ffffc900026cf5c8 [ 147.574919][ T5538] RBP: ffffc900026cf658 R08: ffffc900026cf5c7 R09: 0000000000000000 [ 147.578550][ T5538] R10: ffffc900026cf5a0 R11: fffff520004d9eb9 R12: 0000000000000000 [ 147.582095][ T5538] R13: 0000000000000000 R14: 0000000000040dc0 R15: 0000000000000000 [ 147.585567][ T5538] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 147.588436][ T5538] ? __pfx_policy_nodemask+0x10/0x10 [ 147.590775][ T5538] alloc_pages_mpol+0x21e/0x390 [ 147.592982][ T5538] ? setup_conf+0x23a/0x1040 [ 147.595069][ T5538] ___kmalloc_large_node+0x4f/0x120 [ 147.597403][ T5538] __kmalloc_large_node_noprof+0x18/0x90 [ 147.599953][ T5538] __kmalloc_noprof+0x3fb/0x720 [ 147.602061][ T5538] ? __kmalloc_cache_noprof+0x14d/0x600 [ 147.604310][ T5538] ? setup_conf+0x1bc/0x1040 [ 147.606445][ T5538] ? setup_conf+0x23a/0x1040 [ 147.608632][ T5538] ? ufs_setattr+0xa2/0xe20 [ 147.610814][ T5538] setup_conf+0x23a/0x1040 [ 147.612902][ T5538] raid1_run+0x14d/0xa50 [ 147.614845][ T5538] ? xa_find_after+0xae/0x430 [ 147.617043][ T5538] ? __pfx_raid1_run+0x10/0x10 [ 147.619355][ T5538] ? do_raw_spin_unlock+0x4d/0x200 [ 147.621586][ T5538] ? _raw_spin_unlock+0x28/0x50 [ 147.623712][ T5538] ? get_pers+0x22b/0x2e0 [ 147.625543][ T5538] ? __pfx_get_pers+0x10/0x10 [ 147.627627][ T5538] ? preempt_schedule_thunk+0x16/0x40 [ 147.629991][ T5538] md_run+0xc3d/0x1cd0 [ 147.631875][ T5538] ? __pfx_md_run+0x10/0x10 [ 147.633918][ T5538] do_md_run+0x35/0x720 [ 147.635774][ T5538] ? md_ioctl+0x1e23/0x2610 [ 147.637805][ T5538] md_ioctl+0x1e2b/0x2610 [ 147.639716][ T5538] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 147.641991][ T5538] ? tomoyo_path_number_perm+0x219/0x5f0 [ 147.644454][ T5538] ? __pfx_md_ioctl+0x10/0x10 [ 147.646524][ T5538] ? do_vfs_ioctl+0x116f/0x1530 [ 147.648636][ T5538] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 147.650729][ T5538] ? hook_file_ioctl+0x1f2/0x600 [ 147.652914][ T5538] ? __pfx_md_ioctl+0x10/0x10 [ 147.654929][ T5538] blkdev_ioctl+0x5e3/0x740 [ 147.656858][ T5538] ? __pfx_blkdev_ioctl+0x10/0x10 [ 147.659053][ T5538] ? __fget_files+0x2a/0x420 [ 147.661006][ T5538] ? bpf_lsm_file_ioctl+0x9/0x20 [ 147.663221][ T5538] ? __pfx_blkdev_ioctl+0x10/0x10 [ 147.665452][ T5538] __se_sys_ioctl+0xfc/0x170 [ 147.667574][ T5538] do_syscall_64+0x166/0x520 [ 147.669702][ T5538] ? trace_irq_disable+0x3b/0x140 [ 147.671838][ T5538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.674490][ T5538] ? clear_bhb_loop+0x70/0xc0 [ 147.676501][ T5538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.678900][ T5538] RIP: 0033:0x7f4cb0f9e1d9 [ 147.680831][ T5538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.688653][ T5538] RSP: 002b:00007f4cb1dc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.692221][ T5538] RAX: ffffffffffffffda RBX: 00007f4cb1226090 RCX: 00007f4cb0f9e1d9 [ 147.695317][ T5538] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000005 [ 147.698840][ T5538] RBP: 00007f4cb1035888 R08: 0000000000000000 R09: 0000000000000000 [ 147.702263][ T5538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.705807][ T5538] R13: 00007f4cb1226128 R14: 00007f4cb1226090 R15: 00007ffd96c81ad8 [ 147.709371][ T5538] [ 147.711211][ T5538] Kernel Offset: disabled [ 147.713125][ T5538] Rebooting in 86400 seconds..