qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x34b000) [ 133.615452][ T1028] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 133.623156][ T1028] ata1: failed to read log page 10h (errno=-5) [ 133.628322][ T1028] ata1.00: exception Emask 0x1 SAct 0x1800 SErr 0x0 action 0x0 [ 133.636151][ T1028] ata1.00: irq_stat 0x40000000 [ 133.640939][ T1028] ata1.00: failed command: WRITE FPDMA QUEUED [ 133.651981][ T1028] ata1.00: cmd 61/58:58:a6:bf:04/1a:00:00:00:00/40 tag 11 ncq dma 3452928 ou [ 133.651981][ T1028] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 133.666850][ T1028] ata1.00: status: { DRDY } [ 133.673203][ T1028] ata1.00: failed command: WRITE FPDMA QUEUED [ 133.680641][ T1028] ata1.00: cmd 61/38:60:fe:d9:04/07:00:00:00:00/40 tag 12 ncq dma 946176 out [ 133.680641][ T1028] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 133.697302][ T1028] ata1.00: status: { DRDY } [ 133.700591][ T1028] ata1.00: error: { ABRT } [ 133.708469][ T1028] ata1.00: configured for UDMA/100 [ 133.714131][ T1028] ata1: EH complete Warning: Permanently added '[localhost]:4962' (ED25519) to the list of known hosts. 2026/05/14 05:19:27 parsed 1 programs [ 142.964832][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.968157][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 Setting up swapspace version 1, size = 127995904 bytes [ 146.022808][ T5579] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x26a000) [ 147.032556][ T1028] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 147.050900][ T1028] ata1: failed to read log page 10h (errno=-5) [ 147.055713][ T1028] ata1.00: NCQ disabled due to excessive errors [ 147.061543][ T1028] ata1.00: exception Emask 0x1 SAct 0x300 SErr 0x0 action 0x0 [ 147.071131][ T1028] ata1.00: irq_stat 0x41000000 [ 147.075989][ T1028] ata1.00: failed command: WRITE FPDMA QUEUED [ 147.083675][ T1028] ata1.00: cmd 61/50:40:de:c8:05/13:00:00:00:00/40 tag 8 ncq dma 2531328 ou [ 147.083675][ T1028] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 147.100974][ T1028] ata1.00: status: { DRDY } [ 147.121196][ T1028] ata1.00: failed command: WRITE FPDMA QUEUED [ 147.124603][ T1028] ata1.00: cmd 61/c8:48:36:dc:05/00:00:00:00:00/40 tag 9 ncq dma 102400 out [ 147.124603][ T1028] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 147.141007][ T1028] ata1.00: status: { DRDY } [ 147.151559][ T1028] ata1.00: configured for UDMA/100 [ 147.159528][ T1028] ata1: EH complete [ 154.720147][ T4656] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.730285][ T4656] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.736689][ T4656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.742621][ T4656] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.746712][ T4656] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.126136][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.141184][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.144478][ T5633] bridge_slave_0: entered allmulticast mode [ 156.148279][ T5633] bridge_slave_0: entered promiscuous mode [ 156.158446][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.171359][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.174753][ T5633] bridge_slave_1: entered allmulticast mode [ 156.182325][ T5633] bridge_slave_1: entered promiscuous mode [ 156.238990][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.246122][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.273312][ T5633] team0: Port device team_slave_0 added [ 156.277713][ T5633] team0: Port device team_slave_1 added [ 156.298434][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.308283][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.320005][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.326816][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.329959][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.341588][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.379753][ T5633] hsr_slave_0: entered promiscuous mode [ 156.383161][ T5633] hsr_slave_1: entered promiscuous mode [ 157.183002][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 157.202380][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 157.206865][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 157.225070][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 157.238088][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 157.254663][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 157.263790][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 157.282241][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 157.440403][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.478394][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.496009][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.499300][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.528650][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.532104][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.301907][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.394173][ T5633] veth0_vlan: entered promiscuous mode [ 158.419915][ T5633] veth1_vlan: entered promiscuous mode [ 158.480253][ T5633] veth0_macvtap: entered promiscuous mode [ 158.497602][ T5633] veth1_macvtap: entered promiscuous mode [ 158.533636][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.552524][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.581011][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.612065][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.631956][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.647587][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.057952][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.949658][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.451296][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.726055][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.796105][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.804627][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.905279][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.920207][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.200415][ T12] bridge_slave_1: left allmulticast mode [ 161.213300][ T12] bridge_slave_1: left promiscuous mode [ 161.224473][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.257317][ T12] bridge_slave_0: left allmulticast mode [ 161.268291][ T12] bridge_slave_0: left promiscuous mode [ 161.272199][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.559465][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.572915][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.583668][ T12] bond0 (unregistering): Released all slaves [ 161.703214][ T12] hsr_slave_0: left promiscuous mode [ 161.713438][ T12] hsr_slave_1: left promiscuous mode [ 161.718219][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.727747][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.741605][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.745001][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.768169][ T12] veth1_macvtap: left promiscuous mode [ 161.781303][ T12] veth0_macvtap: left promiscuous mode [ 161.783945][ T12] veth1_vlan: left promiscuous mode [ 161.786254][ T12] veth0_vlan: left promiscuous mode [ 162.210595][ T12] team0 (unregistering): Port device team_slave_1 removed [ 162.229335][ T12] team0 (unregistering): Port device team_slave_0 removed [ 163.137251][ T5002] 8021q: adding VLAN 0 to HW filter on device eth2 2026/05/14 05:19:49 executed programs: 0 [ 163.693259][ T4656] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.702698][ T4656] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.707411][ T4656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.713616][ T4656] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.718530][ T4656] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.958632][ T5002] 8021q: adding VLAN 0 to HW filter on device eth3 [ 164.440489][ T5002] 8021q: adding VLAN 0 to HW filter on device eth4 [ 164.819343][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.830929][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.834934][ T5768] bridge_slave_0: entered allmulticast mode [ 164.848375][ T5768] bridge_slave_0: entered promiscuous mode [ 164.857329][ T5002] 8021q: adding VLAN 0 to HW filter on device eth5 [ 164.861705][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.868730][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.874564][ T5768] bridge_slave_1: entered allmulticast mode [ 164.878590][ T5768] bridge_slave_1: entered promiscuous mode [ 164.938333][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.949089][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.998375][ T5768] team0: Port device team_slave_0 added [ 165.009802][ T5768] team0: Port device team_slave_1 added [ 165.061647][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.064929][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.079853][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.094526][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.101113][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.131194][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.181298][ T5768] hsr_slave_0: entered promiscuous mode [ 165.184518][ T5768] hsr_slave_1: entered promiscuous mode [ 165.763749][ T4656] Bluetooth: hci0: command tx timeout [ 165.819074][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 165.838229][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 165.851472][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 165.859582][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 165.872417][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 165.883595][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 165.892054][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 165.907841][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 166.058315][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.105456][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.125796][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.129075][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.155069][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.158392][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.870279][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.952692][ T5768] veth0_vlan: entered promiscuous mode [ 166.970491][ T5768] veth1_vlan: entered promiscuous mode [ 167.022434][ T5768] veth0_macvtap: entered promiscuous mode [ 167.044380][ T5768] veth1_macvtap: entered promiscuous mode [ 167.076592][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.095462][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.127025][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.142306][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.145994][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.149647][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.344078][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.356146][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.419414][ T180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.426480][ T180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.841158][ T4656] Bluetooth: hci0: command tx timeout [ 167.993325][ T5854] loop0: detected capacity change from 0 to 32768 [ 168.062676][ T5854] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 168.077308][ T5854] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 168.155176][ T5854] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 168.186309][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 168.197489][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 168.275968][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 78ms [ 168.284606][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 168.287406][ T5854] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 168.294577][ T5854] ------------[ cut here ]------------ [ 168.296979][ T5854] 1 [ 168.296987][ T5854] WARNING: mm/page_alloc.c:5202 at __alloc_frozen_pages_noprof+0x2d1/0x380, CPU#0: syz.0.17/5854 [ 168.303071][ T5854] Modules linked in: [ 168.305841][ T5854] CPU: 0 UID: 0 PID: 5854 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 168.309855][ T5854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.314476][ T5854] RIP: 0010:__alloc_frozen_pages_noprof+0x2d1/0x380 [ 168.317475][ T5854] Code: 74 10 4c 89 e7 89 54 24 0c e8 bb db 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a8 fe ff ff e9 a9 fe ff ff c6 05 9a 11 f6 0d 01 90 <0f> 0b 90 e9 17 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 168.325992][ T5854] RSP: 0018:ffffc900021ef460 EFLAGS: 00010246 [ 168.328791][ T5854] RAX: ffffc900021ef400 RBX: 000000000000000c RCX: 0000000000000000 [ 168.332497][ T5854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900021ef4c8 [ 168.336249][ T5854] RBP: ffffc900021ef548 R08: ffffc900021ef4c7 R09: 0000000000000000 [ 168.339697][ T5854] R10: ffffc900021ef4a0 R11: fffff5200043de99 R12: 0000000000000000 [ 168.343247][ T5854] R13: 1ffff9200043de90 R14: 0000000000040d40 R15: dffffc0000000000 [ 168.346690][ T5854] FS: 00007f25e6dfe6c0(0000) GS:ffff88808c881000(0000) knlGS:0000000000000000 [ 168.350483][ T5854] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.353475][ T5854] CR2: 00007f7ceb9909c0 CR3: 0000000050834000 CR4: 0000000000352ef0 [ 168.357334][ T5854] Call Trace: [ 168.359183][ T5854] [ 168.360520][ T5854] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 168.363364][ T5854] ? __pfx_policy_nodemask+0x10/0x10 [ 168.365588][ T5854] ? timer_init_key+0x161/0x2c0 [ 168.367710][ T5854] alloc_pages_mpol+0x235/0x490 [ 168.369742][ T5854] ___kmalloc_large_node+0x4e/0x120 [ 168.372018][ T5854] __kmalloc_large_node_noprof+0x18/0x90 [ 168.374476][ T5854] __kmalloc_noprof+0x3e8/0x760 [ 168.376934][ T5854] ? gfs2_ri_update+0x4b8/0x17c0 [ 168.379275][ T5854] gfs2_ri_update+0x4b8/0x17c0 [ 168.381612][ T5854] ? __pfx_gfs2_ri_update+0x10/0x10 [ 168.384023][ T5854] ? inode_go_held+0xf8/0x200 [ 168.385965][ T5854] ? gfs2_glock_wait+0x20f/0x2a0 [ 168.388200][ T5854] gfs2_rindex_update+0x2e9/0x3a0 [ 168.390311][ T5854] ? __pfx_gfs2_rindex_update+0x10/0x10 [ 168.392923][ T5854] ? init_inodes+0x24e/0x320 [ 168.394875][ T5854] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 168.397519][ T5854] init_inodes+0x24e/0x320 [ 168.399449][ T5854] gfs2_fill_super+0x1a38/0x21d0 [ 168.402016][ T5854] ? __pfx_gfs2_fill_super+0x10/0x10 [ 168.404524][ T5854] ? init_locking+0xb8/0x210 [ 168.406581][ T5854] ? sb_set_blocksize+0x155/0x240 [ 168.408986][ T5854] ? setup_bdev_super+0x4c1/0x5b0 [ 168.411157][ T5854] get_tree_bdev_flags+0x431/0x4f0 [ 168.413514][ T5854] ? __pfx_gfs2_fill_super+0x10/0x10 [ 168.415856][ T5854] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 168.418219][ T5854] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 168.421120][ T5854] gfs2_get_tree+0x51/0x1e0 [ 168.423187][ T5854] vfs_get_tree+0x92/0x2a0 [ 168.425178][ T5854] do_new_mount+0x341/0xd30 [ 168.427180][ T5854] ? apparmor_capable+0x126/0x170 [ 168.429385][ T5854] ? __pfx_do_new_mount+0x10/0x10 [ 168.431629][ T5854] ? ns_capable+0x89/0xe0 [ 168.433504][ T5854] ? user_path_at+0xd4/0x160 [ 168.435732][ T5854] __se_sys_mount+0x31d/0x420 [ 168.437787][ T5854] ? __pfx___se_sys_mount+0x10/0x10 [ 168.440092][ T5854] ? __x64_sys_mount+0x20/0xc0 [ 168.442343][ T5854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.445034][ T5854] do_syscall_64+0x15f/0xf80 [ 168.447109][ T5854] ? trace_irq_disable+0x3b/0x140 [ 168.449427][ T5854] ? clear_bhb_loop+0x40/0x90 [ 168.451748][ T5854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.454364][ T5854] RIP: 0033:0x7f25e779c14a [ 168.456322][ T5854] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.465002][ T5854] RSP: 002b:00007f25e6dfde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 168.468555][ T5854] RAX: ffffffffffffffda RBX: 00007f25e6dfdee0 RCX: 00007f25e779c14a [ 168.472397][ T5854] RDX: 0000200000000240 RSI: 0000200000001c00 RDI: 00007f25e6dfdea0 [ 168.475957][ T5854] RBP: 0000200000000240 R08: 00007f25e6dfdee0 R09: 0000000000000804 [ 168.479517][ T5854] R10: 0000000000000804 R11: 0000000000000246 R12: 0000200000001c00 [ 168.483235][ T5854] R13: 00007f25e6dfdea0 R14: 000000000001260b R15: 0000200000000280 [ 168.486759][ T5854] [ 168.488181][ T5854] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 168.491264][ T5854] CPU: 0 UID: 0 PID: 5854 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 168.495186][ T5854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.499592][ T5854] Call Trace: [ 168.501067][ T5854] [ 168.502438][ T5854] vpanic+0x56c/0xa60 [ 168.504253][ T5854] ? __pfx__printk+0x10/0x10 [ 168.506333][ T5854] ? __pfx_vpanic+0x10/0x10 [ 168.508342][ T5854] ? is_bpf_text_address+0x292/0x2b0 [ 168.510701][ T5854] ? is_bpf_text_address+0x26/0x2b0 [ 168.513016][ T5854] panic+0xc5/0xd0 [ 168.514674][ T5854] ? __pfx_panic+0x10/0x10 [ 168.516640][ T5854] __warn+0x315/0x4c0 [ 168.518429][ T5854] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 168.521047][ T5854] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 168.523729][ T5854] __report_bug+0x29a/0x540 [ 168.525761][ T5854] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 168.528478][ T5854] ? __pfx___report_bug+0x10/0x10 [ 168.530724][ T5854] ? irqentry_exit+0x218/0x760 [ 168.532909][ T5854] ? do_raw_spin_lock+0x12b/0x2f0 [ 168.535183][ T5854] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 168.537795][ T5854] report_bug+0x16a/0x220 [ 168.539704][ T5854] ? __alloc_frozen_pages_noprof+0x2d1/0x380 [ 168.542263][ T5854] ? __alloc_frozen_pages_noprof+0x2d3/0x380 [ 168.544923][ T5854] handle_bug+0x9c/0x200 [ 168.546881][ T5854] exc_invalid_op+0x1a/0x50 [ 168.548903][ T5854] asm_exc_invalid_op+0x1a/0x20 [ 168.551063][ T5854] RIP: 0010:__alloc_frozen_pages_noprof+0x2d1/0x380 [ 168.553900][ T5854] Code: 74 10 4c 89 e7 89 54 24 0c e8 bb db 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a8 fe ff ff e9 a9 fe ff ff c6 05 9a 11 f6 0d 01 90 <0f> 0b 90 e9 17 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 168.562062][ T5854] RSP: 0018:ffffc900021ef460 EFLAGS: 00010246 [ 168.564766][ T5854] RAX: ffffc900021ef400 RBX: 000000000000000c RCX: 0000000000000000 [ 168.568239][ T5854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900021ef4c8 [ 168.571692][ T5854] RBP: ffffc900021ef548 R08: ffffc900021ef4c7 R09: 0000000000000000 [ 168.575131][ T5854] R10: ffffc900021ef4a0 R11: fffff5200043de99 R12: 0000000000000000 [ 168.578617][ T5854] R13: 1ffff9200043de90 R14: 0000000000040d40 R15: dffffc0000000000 [ 168.582023][ T5854] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 168.584800][ T5854] ? __pfx_policy_nodemask+0x10/0x10 [ 168.587136][ T5854] ? timer_init_key+0x161/0x2c0 [ 168.589216][ T5854] alloc_pages_mpol+0x235/0x490 [ 168.591389][ T5854] ___kmalloc_large_node+0x4e/0x120 [ 168.593718][ T5854] __kmalloc_large_node_noprof+0x18/0x90 [ 168.596277][ T5854] __kmalloc_noprof+0x3e8/0x760 [ 168.598475][ T5854] ? gfs2_ri_update+0x4b8/0x17c0 [ 168.600722][ T5854] gfs2_ri_update+0x4b8/0x17c0 [ 168.602898][ T5854] ? __pfx_gfs2_ri_update+0x10/0x10 [ 168.605252][ T5854] ? inode_go_held+0xf8/0x200 [ 168.607378][ T5854] ? gfs2_glock_wait+0x20f/0x2a0 [ 168.609523][ T5854] gfs2_rindex_update+0x2e9/0x3a0 [ 168.611752][ T5854] ? __pfx_gfs2_rindex_update+0x10/0x10 [ 168.614207][ T5854] ? init_inodes+0x24e/0x320 [ 168.616232][ T5854] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 168.618765][ T5854] init_inodes+0x24e/0x320 [ 168.620744][ T5854] gfs2_fill_super+0x1a38/0x21d0 [ 168.622993][ T5854] ? __pfx_gfs2_fill_super+0x10/0x10 [ 168.625141][ T5854] ? init_locking+0xb8/0x210 [ 168.627145][ T5854] ? sb_set_blocksize+0x155/0x240 [ 168.629259][ T5854] ? setup_bdev_super+0x4c1/0x5b0 [ 168.631379][ T5854] get_tree_bdev_flags+0x431/0x4f0 [ 168.633646][ T5854] ? __pfx_gfs2_fill_super+0x10/0x10 [ 168.635947][ T5854] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 168.638297][ T5854] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 168.640707][ T5854] gfs2_get_tree+0x51/0x1e0 [ 168.642647][ T5854] vfs_get_tree+0x92/0x2a0 [ 168.644616][ T5854] do_new_mount+0x341/0xd30 [ 168.646598][ T5854] ? apparmor_capable+0x126/0x170 [ 168.648783][ T5854] ? __pfx_do_new_mount+0x10/0x10 [ 168.651015][ T5854] ? ns_capable+0x89/0xe0 [ 168.652963][ T5854] ? user_path_at+0xd4/0x160 [ 168.655046][ T5854] __se_sys_mount+0x31d/0x420 [ 168.657073][ T5854] ? __pfx___se_sys_mount+0x10/0x10 [ 168.659309][ T5854] ? __x64_sys_mount+0x20/0xc0 [ 168.661326][ T5854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.663809][ T5854] do_syscall_64+0x15f/0xf80 [ 168.665662][ T5854] ? trace_irq_disable+0x3b/0x140 [ 168.667874][ T5854] ? clear_bhb_loop+0x40/0x90 [ 168.669905][ T5854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.672529][ T5854] RIP: 0033:0x7f25e779c14a [ 168.674456][ T5854] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.682563][ T5854] RSP: 002b:00007f25e6dfde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 168.686207][ T5854] RAX: ffffffffffffffda RBX: 00007f25e6dfdee0 RCX: 00007f25e779c14a [ 168.689729][ T5854] RDX: 0000200000000240 RSI: 0000200000001c00 RDI: 00007f25e6dfdea0 [ 168.693212][ T5854] RBP: 0000200000000240 R08: 00007f25e6dfdee0 R09: 0000000000000804 [ 168.696536][ T5854] R10: 0000000000000804 R11: 0000000000000246 R12: 0000200000001c00 [ 168.699847][ T5854] R13: 00007f25e6dfdea0 R14: 000000000001260b R15: 0000200000000280 [ 168.703240][ T5854] [ 168.704988][ T5854] Kernel Offset: disabled [ 168.707680][ T5854] Rebooting in 86400 seconds..