qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x18b000) [ 129.479958][ T1021] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 129.493156][ T1021] ata1: failed to read log page 10h (errno=-5) [ 129.504839][ T1021] ata1.00: exception Emask 0x1 SAct 0x40000001 SErr 0x0 action 0x0 [ 129.521132][ T1021] ata1.00: irq_stat 0x41000000 [ 129.532953][ T1021] ata1.00: failed command: WRITE FPDMA QUEUED [ 129.542731][ T1021] ata1.00: cmd 61/c8:00:fe:97:04/05:00:00:00:00/40 tag 0 ncq dma 757760 out [ 129.542731][ T1021] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 129.574877][ T1021] ata1.00: status: { DRDY } [ 129.577616][ T1021] ata1.00: failed command: WRITE FPDMA QUEUED [ 129.589012][ T1021] ata1.00: cmd 61/58:f0:a6:8b:04/0c:00:00:00:00/40 tag 30 ncq dma 1617920 ou [ 129.589012][ T1021] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 129.610135][ T1021] ata1.00: status: { DRDY } [ 129.621313][ T1021] ata1.00: configured for UDMA/100 [ 129.638965][ T1021] ata1: EH complete Warning: Permanently added '[localhost]:48673' (ED25519) to the list of known hosts. 2026/08/13 15:49:08 parsed 1 programs [ 137.935317][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.939134][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x400000) [ 140.434850][ T1021] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 140.437679][ T1021] ata1: failed to read log page 10h (errno=-5) [ 140.440246][ T1021] ata1.00: NCQ disabled due to excessive errors [ 140.443006][ T1021] ata1.00: exception Emask 0x1 SAct 0x1800 SErr 0x0 action 0x0 [ 140.464785][ T1021] ata1.00: irq_stat 0x40000000 [ 140.467148][ T1021] ata1.00: failed command: WRITE FPDMA QUEUED [ 140.469765][ T1021] ata1.00: cmd 61/00:58:76:3a:05/20:00:00:00:00/40 tag 11 ncq dma 4194304 ou [ 140.469765][ T1021] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 140.483657][ T1021] ata1.00: status: { DRDY } [ 140.493636][ T1021] ata1.00: failed command: WRITE FPDMA QUEUED [ 140.496276][ T1021] ata1.00: cmd 61/b8:60:36:a1:05/02:00:00:00:00/40 tag 12 ncq dma 356352 out [ 140.496276][ T1021] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 140.513533][ T1021] ata1.00: status: { DRDY } [ 140.516886][ T1021] ata1.00: configured for UDMA/100 [ 140.519454][ T1021] ata1: EH complete Setting up swapspace version 1, size = 127995904 bytes [ 142.918613][ T5599] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 149.436003][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.439333][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.442543][ T5628] bridge_slave_0: entered allmulticast mode [ 149.446938][ T5628] bridge_slave_0: entered promiscuous mode [ 149.452047][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.455627][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.458775][ T5628] bridge_slave_1: entered allmulticast mode [ 149.462488][ T5628] bridge_slave_1: entered promiscuous mode [ 149.488588][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.497063][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.532180][ T5628] team0: Port device team_slave_0 added [ 149.538356][ T5628] team0: Port device team_slave_1 added [ 149.559521][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.562734][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.574068][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.580542][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.584006][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.595663][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.645784][ T5628] hsr_slave_0: entered promiscuous mode [ 149.654366][ T5628] hsr_slave_1: entered promiscuous mode [ 150.442041][ T5628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 150.464767][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.477796][ T5628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 150.488389][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.504382][ T5628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 150.523140][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.536097][ T5628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 150.547368][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.707003][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.745207][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.763259][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.766493][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.794876][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.797967][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.515846][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.608237][ T5628] veth0_vlan: entered promiscuous mode [ 151.629258][ T5628] veth1_vlan: entered promiscuous mode [ 151.700519][ T5628] veth0_macvtap: entered promiscuous mode [ 151.716940][ T5628] veth1_macvtap: entered promiscuous mode [ 151.746387][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.761602][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.794058][ T180] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.803870][ T180] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.833594][ T180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.844430][ T180] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.195613][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.276546][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.589573][ T5331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.597749][ T5331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.602305][ T5331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.613821][ T5331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.619752][ T5331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.826888][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.702214][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.347424][ T13] bridge_slave_1: left allmulticast mode [ 154.355374][ T13] bridge_slave_1: left promiscuous mode [ 154.363674][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.371470][ T13] bridge_slave_0: left allmulticast mode [ 154.383546][ T13] bridge_slave_0: left promiscuous mode [ 154.386249][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.662783][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.681661][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.695842][ T13] bond0 (unregistering): Released all slaves [ 154.770489][ T13] hsr_slave_0: left promiscuous mode [ 154.778400][ T13] hsr_slave_1: left promiscuous mode [ 154.792435][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.807740][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.823250][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.833720][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.859606][ T13] veth1_macvtap: left promiscuous mode [ 154.862086][ T13] veth0_macvtap: left promiscuous mode [ 154.867602][ T13] veth1_vlan: left promiscuous mode [ 154.869709][ T13] veth0_vlan: left promiscuous mode [ 155.069983][ T13] team0 (unregistering): Port device team_slave_1 removed [ 155.082946][ T13] team0 (unregistering): Port device team_slave_0 removed [ 155.266983][ T178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.280744][ T178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.430768][ T178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.440813][ T178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.071539][ T4988] 8021q: adding VLAN 0 to HW filter on device eth2 [ 157.203050][ T4988] 8021q: adding VLAN 0 to HW filter on device eth3 [ 157.991566][ T4988] 8021q: adding VLAN 0 to HW filter on device eth4 [ 158.767633][ T4988] 8021q: adding VLAN 0 to HW filter on device eth5 2026/08/13 15:49:31 executed programs: 0 [ 159.395359][ T4642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.401902][ T4642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.407548][ T4642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.412414][ T4642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.417441][ T4642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.941891][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.945157][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.948329][ T5808] bridge_slave_0: entered allmulticast mode [ 159.952201][ T5808] bridge_slave_0: entered promiscuous mode [ 159.959500][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.962765][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.966774][ T5808] bridge_slave_1: entered allmulticast mode [ 159.971224][ T5808] bridge_slave_1: entered promiscuous mode [ 160.001494][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.009382][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.034552][ T5808] team0: Port device team_slave_0 added [ 160.039250][ T5808] team0: Port device team_slave_1 added [ 160.063047][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.067137][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.078695][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.085255][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.088352][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.099893][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.140178][ T5808] hsr_slave_0: entered promiscuous mode [ 160.144072][ T5808] hsr_slave_1: entered promiscuous mode [ 160.794893][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 160.810908][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 160.823057][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 160.839621][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 160.854602][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 160.860379][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 160.871678][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 160.898180][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 161.068258][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.102900][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.126392][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.129626][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.159151][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.162315][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.455365][ T4642] Bluetooth: hci0: command tx timeout [ 161.925683][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.012115][ T5808] veth0_vlan: entered promiscuous mode [ 162.041858][ T5808] veth1_vlan: entered promiscuous mode [ 162.100777][ T5808] veth0_macvtap: entered promiscuous mode [ 162.121512][ T5808] veth1_macvtap: entered promiscuous mode [ 162.160524][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.193113][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.296925][ T178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.318463][ T178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.386099][ T178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.394638][ T178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.459638][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.464789][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.473713][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.478429][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.234116][ T5876] loop0: detected capacity change from 0 to 32768 [ 163.319999][ T5876] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.17 (5876) [ 163.440626][ T5876] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 163.453024][ T5876] BTRFS info (device loop0): using sha256 checksum algorithm [ 163.534085][ T4642] Bluetooth: hci0: command tx timeout [ 163.560228][ T5876] BTRFS info (device loop0): enabling ssd optimizations [ 163.569553][ T5876] BTRFS info (device loop0): turning on async discard [ 163.579708][ T5876] BTRFS info (device loop0): enabling free space tree [ 163.632104][ T5876] FAULT_INJECTION: forcing a failure. [ 163.632104][ T5876] name failslab, interval 1, probability 0, space 0, times 1 [ 163.645408][ T5876] CPU: 0 UID: 0 PID: 5876 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 163.645427][ T5876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.645434][ T5876] Call Trace: [ 163.645439][ T5876] [ 163.645444][ T5876] dump_stack_lvl+0xe8/0x150 [ 163.645478][ T5876] should_fail_ex+0x40c/0x560 [ 163.645509][ T5876] should_failslab+0xa8/0x100 [ 163.645525][ T5876] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 163.645544][ T5876] ? __btrfs_run_delayed_items+0x94/0x420 [ 163.645561][ T5876] ? __btrfs_run_delayed_items+0x94/0x420 [ 163.645578][ T5876] ? btrfs_alloc_path+0x9/0x30 [ 163.645596][ T5876] __btrfs_run_delayed_items+0x94/0x420 [ 163.645613][ T5876] ? kvm_clock_get_cycles+0x47/0x60 [ 163.645631][ T5876] btrfs_commit_transaction+0x844/0x30b0 [ 163.645652][ T5876] ? btrfs_commit_transaction+0x182/0x30b0 [ 163.645676][ T5876] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 163.645702][ T5876] ? do_raw_spin_unlock+0x4d/0x210 [ 163.645715][ T5876] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 163.645732][ T5876] ? record_root_in_trans+0x28c/0x330 [ 163.645751][ T5876] ? btrfs_qgroup_convert_reserved_meta+0xe5/0xd10 [ 163.645766][ T5876] ? btrfs_record_root_in_trans+0x164/0x180 [ 163.645783][ T5876] ? start_transaction+0x431/0x18b0 [ 163.645799][ T5876] ? __pfx_btrfs_qgroup_convert_reserved_meta+0x10/0x10 [ 163.645815][ T5876] ? btrfs_record_root_in_trans+0x122/0x180 [ 163.645834][ T5876] btrfs_mksubvol+0xa4a/0x10c0 [ 163.645855][ T5876] ? __pfx_btrfs_mksubvol+0x10/0x10 [ 163.645870][ T5876] ? __fget_files+0x3a2/0x420 [ 163.645886][ T5876] btrfs_mksnapshot+0xa3/0xe0 [ 163.645902][ T5876] __btrfs_ioctl_snap_create+0x45d/0x6b0 [ 163.645920][ T5876] ? __pfx___btrfs_ioctl_snap_create+0x10/0x10 [ 163.645938][ T5876] ? _copy_from_user+0x94/0xb0 [ 163.645991][ T5876] btrfs_ioctl_snap_create+0x131/0x190 [ 163.646013][ T5876] btrfs_ioctl+0xb98/0xd50 [ 163.646029][ T5876] ? __pfx_btrfs_ioctl+0x10/0x10 [ 163.646045][ T5876] __se_sys_ioctl+0xfc/0x170 [ 163.646063][ T5876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.646076][ T5876] do_syscall_64+0x174/0x580 [ 163.646089][ T5876] ? trace_irq_disable+0x3b/0x140 [ 163.646104][ T5876] ? clear_bhb_loop+0x70/0xc0 [ 163.646118][ T5876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.646129][ T5876] RIP: 0033:0x7f27a939af39 [ 163.646141][ T5876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.646151][ T5876] RSP: 002b:00007f27aa2db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.646164][ T5876] RAX: ffffffffffffffda RBX: 00007f27a9605fa0 RCX: 00007f27a939af39 [ 163.646172][ T5876] RDX: 0000200000001600 RSI: 0000000050009401 RDI: 0000000000000003 [ 163.646178][ T5876] RBP: 00007f27aa2db090 R08: 0000000000000000 R09: 0000000000000000 [ 163.646185][ T5876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.646190][ T5876] R13: 00007f27a9606038 R14: 00007f27a9605fa0 R15: 00007ffeb12ffc88 [ 163.646210][ T5876] [ 163.646425][ T5876] BTRFS warning (device loop0): Skipping commit of aborted transaction. [ 163.862931][ T5876] BTRFS error (device loop0 state A): Transaction 9 aborted (error -12) [ 163.885720][ T5876] BTRFS: error (device loop0 state A) in cleanup_transaction:2068: errno=-12 Out of memory [ 163.891047][ T5876] BTRFS info (device loop0 state EA): forced readonly [ 163.927341][ T5808] BTRFS info (device loop0 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 164.356605][ T5901] loop0: detected capacity change from 0 to 32768 [ 164.379147][ T5901] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.18 (5901) [ 164.412237][ T5901] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 164.425458][ T5901] BTRFS info (device loop0): using sha256 checksum algorithm [ 164.482363][ T5901] BTRFS info (device loop0): enabling ssd optimizations [ 164.485725][ T5901] BTRFS info (device loop0): turning on async discard [ 164.491736][ T5901] BTRFS info (device loop0): enabling free space tree [ 164.626080][ T5808] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d 2026/08/13 15:49:36 executed programs: 4 [ 164.992438][ T5918] loop0: detected capacity change from 0 to 32768 [ 165.005635][ T5918] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.19 (5918) [ 165.035322][ T5918] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 165.046278][ T5918] BTRFS info (device loop0): using sha256 checksum algorithm [ 165.171665][ T5918] BTRFS info (device loop0): enabling ssd optimizations [ 165.181511][ T5918] BTRFS info (device loop0): turning on async discard [ 165.191645][ T5918] BTRFS info (device loop0): enabling free space tree [ 165.277012][ T5808] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 165.613521][ T4642] Bluetooth: hci0: command tx timeout [ 165.790442][ T5936] loop0: detected capacity change from 0 to 32768 [ 165.802556][ T5936] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.20 (5936) [ 165.846372][ T5936] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 165.860619][ T5936] BTRFS info (device loop0): using sha256 checksum algorithm [ 165.953935][ T5936] BTRFS info (device loop0): enabling ssd optimizations [ 165.957392][ T5936] BTRFS info (device loop0): turning on async discard [ 165.964042][ T5936] BTRFS info (device loop0): enabling free space tree [ 166.030785][ T5808] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.460144][ T5953] loop0: detected capacity change from 0 to 32768 [ 166.469043][ T5953] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.21 (5953) [ 166.500971][ T5953] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.510343][ T5953] BTRFS info (device loop0): using sha256 checksum algorithm [ 166.585652][ T5953] BTRFS info (device loop0): enabling ssd optimizations [ 166.592256][ T5953] BTRFS info (device loop0): turning on async discard [ 166.603738][ T5953] BTRFS info (device loop0): enabling free space tree [ 166.738625][ T5808] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.260654][ T5970] loop0: detected capacity change from 0 to 32768 [ 167.298012][ T5970] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.22 (5970) [ 167.328688][ T5970] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.339577][ T5970] BTRFS info (device loop0): using sha256 checksum algorithm [ 167.418013][ T5970] BTRFS info (device loop0): enabling ssd optimizations [ 167.425851][ T5970] BTRFS info (device loop0): turning on async discard [ 167.434047][ T5970] BTRFS info (device loop0): enabling free space tree [ 167.498232][ T5808] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.694961][ T4642] Bluetooth: hci0: command tx timeout [ 167.996804][ T5988] loop0: detected capacity change from 0 to 32768 [ 168.007171][ T5988] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.23 (5988) [ 168.034173][ T5988] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.043040][ T5988] BTRFS info (device loop0): using sha256 checksum algorithm [ 168.128890][ T5988] BTRFS info (device loop0): enabling ssd optimizations [ 168.143583][ T5988] BTRFS info (device loop0): turning on async discard [ 168.146475][ T5988] BTRFS info (device loop0): enabling free space tree [ 168.269656][ T5808] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.658330][ T6005] loop0: detected capacity change from 0 to 32768 [ 168.666575][ T6005] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.24 (6005) [ 168.688286][ T6005] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.697657][ T6005] BTRFS info (device loop0): using sha256 checksum algorithm [ 168.760870][ T6005] BTRFS info (device loop0): enabling ssd optimizations [ 168.770467][ T6005] BTRFS info (device loop0): turning on async discard [ 168.774793][ T6005] BTRFS info (device loop0): enabling free space tree [ 168.793962][ T6005] FAULT_INJECTION: forcing a failure. [ 168.793962][ T6005] name failslab, interval 1, probability 0, space 0, times 0 [ 168.814471][ T6005] CPU: 0 UID: 0 PID: 6005 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT(full) [ 168.814490][ T6005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.814496][ T6005] Call Trace: [ 168.814502][ T6005] [ 168.814507][ T6005] dump_stack_lvl+0xe8/0x150 [ 168.814530][ T6005] should_fail_ex+0x40c/0x560 [ 168.814552][ T6005] should_failslab+0xa8/0x100 [ 168.814568][ T6005] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 168.814586][ T6005] ? add_delayed_ref+0x123/0x1ed0 [ 168.814598][ T6005] ? add_delayed_ref+0x123/0x1ed0 [ 168.814616][ T6005] add_delayed_ref+0x123/0x1ed0 [ 168.814627][ T6005] ? do_raw_spin_unlock+0x4d/0x210 [ 168.814673][ T6005] ? set_extent_bit+0x133e/0x1c60 [ 168.814687][ T6005] ? down_write_nested+0x174/0x210 [ 168.814713][ T6005] btrfs_alloc_tree_block+0xd42/0x12a0 [ 168.814743][ T6005] ? __pfx_btrfs_alloc_tree_block+0x10/0x10 [ 168.814761][ T6005] ? btrfs_tree_lock_nested+0x45/0x250 [ 168.814781][ T6005] btrfs_copy_root+0x45f/0xcc0 [ 168.814805][ T6005] ? __pfx_btrfs_copy_root+0x10/0x10 [ 168.814821][ T6005] ? rcu_needs_cpu+0x40/0xb0 [ 168.814837][ T6005] ? btrfs_tree_lock_nested+0xb1/0x250 [ 168.814856][ T6005] create_pending_snapshot+0xa15/0x2610 [ 168.814891][ T6005] ? __pfx_create_pending_snapshot+0x10/0x10 [ 168.814907][ T6005] ? __mutex_lock+0x30d/0x1550 [ 168.814941][ T6005] create_pending_snapshots+0x17c/0x1c0 [ 168.814957][ T6005] btrfs_commit_transaction+0xf95/0x30b0 [ 168.814979][ T6005] ? btrfs_commit_transaction+0x182/0x30b0 [ 168.815004][ T6005] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.815019][ T6005] ? do_raw_spin_unlock+0x4d/0x210 [ 168.815033][ T6005] ? __pfx_btrfs_commit_transaction+0x10/0x10 [ 168.815050][ T6005] ? record_root_in_trans+0x28c/0x330 [ 168.815070][ T6005] ? btrfs_qgroup_convert_reserved_meta+0xe5/0xd10 [ 168.815085][ T6005] ? btrfs_record_root_in_trans+0x164/0x180 [ 168.815104][ T6005] ? start_transaction+0x431/0x18b0 [ 168.815120][ T6005] ? __pfx_btrfs_qgroup_convert_reserved_meta+0x10/0x10 [ 168.815158][ T6005] ? btrfs_record_root_in_trans+0x122/0x180 [ 168.815178][ T6005] btrfs_mksubvol+0xa4a/0x10c0 [ 168.815201][ T6005] ? __pfx_btrfs_mksubvol+0x10/0x10 [ 168.815216][ T6005] ? __fget_files+0x3a2/0x420 [ 168.815233][ T6005] btrfs_mksnapshot+0xa3/0xe0 [ 168.815253][ T6005] __btrfs_ioctl_snap_create+0x45d/0x6b0 [ 168.815271][ T6005] ? __pfx___btrfs_ioctl_snap_create+0x10/0x10 [ 168.815290][ T6005] ? _copy_from_user+0x94/0xb0 [ 168.815306][ T6005] btrfs_ioctl_snap_create+0x131/0x190 [ 168.815327][ T6005] btrfs_ioctl+0xb98/0xd50 [ 168.815343][ T6005] ? __pfx_btrfs_ioctl+0x10/0x10 [ 168.815359][ T6005] __se_sys_ioctl+0xfc/0x170 [ 168.815375][ T6005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.815388][ T6005] do_syscall_64+0x174/0x580 [ 168.815404][ T6005] ? clear_bhb_loop+0x70/0xc0 [ 168.815419][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.815431][ T6005] RIP: 0033:0x7f27a939af39 [ 168.815443][ T6005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.815451][ T6005] RSP: 002b:00007f27aa2db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.815465][ T6005] RAX: ffffffffffffffda RBX: 00007f27a9605fa0 RCX: 00007f27a939af39 [ 168.815473][ T6005] RDX: 0000200000001600 RSI: 0000000050009401 RDI: 0000000000000003 [ 168.815480][ T6005] RBP: 00007f27aa2db090 R08: 0000000000000000 R09: 0000000000000000 [ 168.815487][ T6005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 168.815494][ T6005] R13: 00007f27a9606038 R14: 00007f27a9605fa0 R15: 00007ffeb12ffc88 [ 168.815513][ T6005] [ 168.815706][ T6005] BTRFS error (device loop0 state A): Transaction 9 aborted (error -12) [ 169.017090][ T6005] BTRFS: error (device loop0 state A) in create_pending_snapshot:1825: errno=-12 Out of memory [ 169.022181][ T6005] BTRFS info (device loop0 state EA): forced readonly [ 169.028961][ T6005] BTRFS warning (device loop0 state EA): Skipping commit of aborted transaction. [ 169.032909][ T6005] BTRFS: error (device loop0 state EA) in cleanup_transaction:2068: errno=-12 Out of memory [ 169.044752][ T5808] BTRFS info (device loop0 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.068906][ T5808] ------------[ cut here ]------------ [ 169.071398][ T5808] 1 [ 169.071410][ T5808] WARNING: fs/btrfs/space-info.h:286 at btrfs_space_info_update_bytes_may_use+0x318/0x650, CPU#0: syz-executor/5808 [ 169.077830][ T5808] Modules linked in: [ 169.079813][ T5808] CPU: 0 UID: 0 PID: 5808 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 169.084090][ T5808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.088504][ T5808] RIP: 0010:btrfs_space_info_update_bytes_may_use+0x318/0x650 [ 169.091668][ T5808] Code: 00 00 74 08 4c 89 ff e8 36 a1 fe fd 4d 8b 27 4c 89 e7 48 8b 6c 24 18 48 89 ee e8 d3 6d 8f fd 49 39 ec 73 1c e8 69 6b 8f fd 90 <0f> 0b 90 31 db 43 80 7c 35 00 00 0f 85 48 ff ff ff e9 4b ff ff ff [ 169.100218][ T5808] RSP: 0018:ffffc90002607a18 EFLAGS: 00010293 [ 169.102757][ T5808] RAX: ffffffff8437a647 RBX: ffffffffffea0000 RCX: ffff88801fbaa540 [ 169.106503][ T5808] RDX: 0000000000000000 RSI: 0000000000160000 RDI: 000000000015f000 [ 169.110959][ T5808] RBP: 0000000000160000 R08: ffffffff90576d37 R09: 1ffffffff20aeda6 [ 169.114516][ T5808] R10: dffffc0000000000 R11: fffffbfff20aeda7 R12: 000000000015f000 [ 169.117887][ T5808] R13: 1ffff11009b0c210 R14: dffffc0000000000 R15: ffff88804d861080 [ 169.121190][ T5808] FS: 000055557f218500(0000) GS:ffff88808c549000(0000) knlGS:0000000000000000 [ 169.125479][ T5808] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.128595][ T5808] CR2: 000055557f233a28 CR3: 0000000043d46000 CR4: 0000000000352ef0 [ 169.131919][ T5808] Call Trace: [ 169.133295][ T5808] [ 169.134670][ T5808] btrfs_block_rsv_release+0x47b/0x590 [ 169.136810][ T5808] btrfs_release_global_block_rsv+0x33/0x300 [ 169.139360][ T5808] btrfs_free_block_groups+0xdf1/0x1090 [ 169.141848][ T5808] close_ctree+0x7d3/0x1200 [ 169.143870][ T5808] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 169.146268][ T5808] ? __pfx_close_ctree+0x10/0x10 [ 169.148379][ T5808] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 169.150837][ T5808] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 169.153833][ T5808] ? btrfs_put_super+0x48/0x1c0 [ 169.156013][ T5808] ? __pfx_btrfs_put_super+0x10/0x10 [ 169.158261][ T5808] generic_shutdown_super+0x13d/0x2d0 [ 169.160519][ T5808] kill_anon_super+0x3b/0x70 [ 169.162823][ T5808] btrfs_kill_super+0x41/0x50 [ 169.164926][ T5808] deactivate_locked_super+0xbc/0x130 [ 169.167297][ T5808] cleanup_mnt+0x3d3/0x460 [ 169.169241][ T5808] task_work_run+0x1d9/0x270 [ 169.171212][ T5808] ? __pfx_task_work_run+0x10/0x10 [ 169.173707][ T5808] exit_to_user_mode_loop+0x1fa/0x730 [ 169.176068][ T5808] ? rcu_is_watching+0x15/0xb0 [ 169.178105][ T5808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.180872][ T5808] do_syscall_64+0x353/0x580 [ 169.182911][ T5808] ? trace_irq_disable+0x3b/0x140 [ 169.185190][ T5808] ? clear_bhb_loop+0x70/0xc0 [ 169.187239][ T5808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.189721][ T5808] RIP: 0033:0x7f27a939c197 [ 169.191603][ T5808] Code: a2 c7 05 fc 83 23 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 169.199510][ T5808] RSP: 002b:00007ffeb12feef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 169.203044][ T5808] RAX: 0000000000000000 RBX: 00007f27a942f33b RCX: 00007f27a939c197 [ 169.206577][ T5808] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb12fefb0 [ 169.209983][ T5808] RBP: 00007ffeb12fefb0 R08: 00007ffeb12fffb0 R09: 00000000ffffffff [ 169.213271][ T5808] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb1300040 [ 169.217250][ T5808] R13: 00007f27a942f33b R14: 00000000000292ca R15: 00007ffeb1300080 [ 169.220710][ T5808] [ 169.222076][ T5808] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 169.225114][ T5808] CPU: 0 UID: 0 PID: 5808 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 169.229057][ T5808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.233271][ T5808] Call Trace: [ 169.234791][ T5808] [ 169.236094][ T5808] vpanic+0x56c/0xa60 [ 169.237910][ T5808] ? __pfx__printk+0x10/0x10 [ 169.239937][ T5808] ? __pfx_vpanic+0x10/0x10 [ 169.241957][ T5808] ? is_bpf_text_address+0x292/0x2b0 [ 169.244271][ T5808] ? is_bpf_text_address+0x26/0x2b0 [ 169.246535][ T5808] panic+0xc5/0xd0 [ 169.248264][ T5808] ? __pfx_panic+0x10/0x10 [ 169.250251][ T5808] __warn+0x315/0x4c0 [ 169.252043][ T5808] ? btrfs_space_info_update_bytes_may_use+0x318/0x650 [ 169.255001][ T5808] ? btrfs_space_info_update_bytes_may_use+0x318/0x650 [ 169.257874][ T5808] __report_bug+0x276/0x570 [ 169.259781][ T5808] ? btrfs_space_info_update_bytes_may_use+0x318/0x650 [ 169.262857][ T5808] ? __pfx___report_bug+0x10/0x10 [ 169.265073][ T5808] ? kasan_save_track+0x4f/0x80 [ 169.267187][ T5808] ? kasan_save_track+0x3e/0x80 [ 169.269363][ T5808] ? kasan_save_free_info+0x40/0x50 [ 169.271623][ T5808] ? __kasan_slab_free+0x5c/0x80 [ 169.273700][ T5808] ? kmem_cache_free+0x182/0x650 [ 169.275846][ T5808] ? __lock_acquire+0x683/0x2cf0 [ 169.277919][ T5808] ? btrfs_space_info_update_bytes_may_use+0x318/0x650 [ 169.280764][ T5808] report_bug+0x16a/0x220 [ 169.282605][ T5808] ? btrfs_space_info_update_bytes_may_use+0x318/0x650 [ 169.285356][ T5808] ? btrfs_space_info_update_bytes_may_use+0x31a/0x650 [ 169.288257][ T5808] handle_bug+0x9c/0x200 [ 169.289940][ T5808] exc_invalid_op+0x1a/0x50 [ 169.291762][ T5808] asm_exc_invalid_op+0x1a/0x20 [ 169.293840][ T5808] RIP: 0010:btrfs_space_info_update_bytes_may_use+0x318/0x650 [ 169.297100][ T5808] Code: 00 00 74 08 4c 89 ff e8 36 a1 fe fd 4d 8b 27 4c 89 e7 48 8b 6c 24 18 48 89 ee e8 d3 6d 8f fd 49 39 ec 73 1c e8 69 6b 8f fd 90 <0f> 0b 90 31 db 43 80 7c 35 00 00 0f 85 48 ff ff ff e9 4b ff ff ff [ 169.305492][ T5808] RSP: 0018:ffffc90002607a18 EFLAGS: 00010293 [ 169.308086][ T5808] RAX: ffffffff8437a647 RBX: ffffffffffea0000 RCX: ffff88801fbaa540 [ 169.311484][ T5808] RDX: 0000000000000000 RSI: 0000000000160000 RDI: 000000000015f000 [ 169.314795][ T5808] RBP: 0000000000160000 R08: ffffffff90576d37 R09: 1ffffffff20aeda6 [ 169.318210][ T5808] R10: dffffc0000000000 R11: fffffbfff20aeda7 R12: 000000000015f000 [ 169.321671][ T5808] R13: 1ffff11009b0c210 R14: dffffc0000000000 R15: ffff88804d861080 [ 169.324985][ T5808] ? btrfs_space_info_update_bytes_may_use+0x317/0x650 [ 169.327881][ T5808] ? btrfs_space_info_update_bytes_may_use+0x317/0x650 [ 169.330805][ T5808] btrfs_block_rsv_release+0x47b/0x590 [ 169.333098][ T5808] btrfs_release_global_block_rsv+0x33/0x300 [ 169.335631][ T5808] btrfs_free_block_groups+0xdf1/0x1090 [ 169.337960][ T5808] close_ctree+0x7d3/0x1200 [ 169.340007][ T5808] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 169.342592][ T5808] ? __pfx_close_ctree+0x10/0x10 [ 169.344691][ T5808] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 169.347253][ T5808] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 169.350096][ T5808] ? btrfs_put_super+0x48/0x1c0 [ 169.352259][ T5808] ? __pfx_btrfs_put_super+0x10/0x10 [ 169.354566][ T5808] generic_shutdown_super+0x13d/0x2d0 [ 169.356956][ T5808] kill_anon_super+0x3b/0x70 [ 169.358983][ T5808] btrfs_kill_super+0x41/0x50 [ 169.361013][ T5808] deactivate_locked_super+0xbc/0x130 [ 169.363390][ T5808] cleanup_mnt+0x3d3/0x460 [ 169.365331][ T5808] task_work_run+0x1d9/0x270 [ 169.367381][ T5808] ? __pfx_task_work_run+0x10/0x10 [ 169.369549][ T5808] exit_to_user_mode_loop+0x1fa/0x730 [ 169.371858][ T5808] ? rcu_is_watching+0x15/0xb0 [ 169.373919][ T5808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.376526][ T5808] do_syscall_64+0x353/0x580 [ 169.378548][ T5808] ? trace_irq_disable+0x3b/0x140 [ 169.380765][ T5808] ? clear_bhb_loop+0x70/0xc0 [ 169.382894][ T5808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.385383][ T5808] RIP: 0033:0x7f27a939c197 [ 169.387356][ T5808] Code: a2 c7 05 fc 83 23 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 169.395581][ T5808] RSP: 002b:00007ffeb12feef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 169.399205][ T5808] RAX: 0000000000000000 RBX: 00007f27a942f33b RCX: 00007f27a939c197 [ 169.402666][ T5808] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb12fefb0 [ 169.406204][ T5808] RBP: 00007ffeb12fefb0 R08: 00007ffeb12fffb0 R09: 00000000ffffffff [ 169.409723][ T5808] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb1300040 [ 169.413230][ T5808] R13: 00007f27a942f33b R14: 00000000000292ca R15: 00007ffeb1300080 [ 169.416591][ T5808] [ 169.418161][ T5808] Kernel Offset: disabled [ 169.419863][ T5808] Rebooting in 86400 seconds..