[ 143.245025][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.251099][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x29b000) [ 145.258841][ T1029] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 145.261829][ T1029] ata1: failed to read log page 10h (errno=-5) [ 145.264729][ T1029] ata1.00: exception Emask 0x1 SAct 0x300 SErr 0x0 action 0x0 [ 145.300026][ T1029] ata1.00: irq_stat 0x41000000 [ 145.308704][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 145.311379][ T1029] ata1.00: cmd 61/d8:40:b6:67:04/14:00:00:00:00/40 tag 8 ncq dma 2732032 ou [ 145.311379][ T1029] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 145.330543][ T1029] ata1.00: status: { DRDY } [ 145.336215][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 145.341769][ T1029] ata1.00: cmd 61/d8:48:8e:7c:04/18:00:00:00:00/40 tag 9 ncq dma 3256320 ou [ 145.341769][ T1029] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 145.363343][ T1029] ata1.00: status: { DRDY } [ 145.376594][ T1029] ata1.00: configured for UDMA/100 [ 145.385675][ T1029] ata1: EH complete Warning: Permanently added '[localhost]:22409' (ED25519) to the list of known hosts. 2026/06/28 18:04:28 parsed 1 programs [ 156.995417][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 164.900711][ T5655] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.904875][ T5655] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.909244][ T5655] bridge_slave_0: entered allmulticast mode [ 164.913392][ T5655] bridge_slave_0: entered promiscuous mode [ 164.918994][ T5655] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.922284][ T5655] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.926094][ T5655] bridge_slave_1: entered allmulticast mode [ 164.932386][ T5655] bridge_slave_1: entered promiscuous mode [ 164.965267][ T5655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.975603][ T5655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.003266][ T5655] team0: Port device team_slave_0 added [ 165.010279][ T5655] team0: Port device team_slave_1 added [ 165.034969][ T5655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.038736][ T5655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.052086][ T5655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.059882][ T5655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.063053][ T5655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.075423][ T5655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.117899][ T5655] hsr_slave_0: entered promiscuous mode [ 165.121804][ T5655] hsr_slave_1: entered promiscuous mode [ 165.924944][ T5655] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 165.940390][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 165.953172][ T5655] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 165.971387][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 165.983012][ T5655] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 166.000854][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 166.010029][ T5655] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 166.032181][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 166.224506][ T5655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.264483][ T5655] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.296283][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.299920][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.320246][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.323642][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.174900][ T5655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.273552][ T5655] veth0_vlan: entered promiscuous mode [ 167.300522][ T5655] veth1_vlan: entered promiscuous mode [ 167.355994][ T5655] veth0_macvtap: entered promiscuous mode [ 167.378441][ T5655] veth1_macvtap: entered promiscuous mode [ 167.442134][ T5655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.459956][ T5655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.489182][ T161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.499681][ T161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.509689][ T161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.531802][ T161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.871045][ T4650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.887436][ T4650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.894606][ T4650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.902220][ T4650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.905904][ T4650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.009712][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.232739][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.808766][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.881256][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.889162][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.980541][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.992217][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.280843][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.988409][ T41] bridge_slave_1: left allmulticast mode [ 169.997071][ T41] bridge_slave_1: left promiscuous mode [ 170.000010][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.015360][ T41] bridge_slave_0: left allmulticast mode [ 170.027441][ T41] bridge_slave_0: left promiscuous mode [ 170.030296][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.381715][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.398614][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.409644][ T41] bond0 (unregistering): Released all slaves [ 170.521405][ T41] hsr_slave_0: left promiscuous mode [ 170.540364][ T41] hsr_slave_1: left promiscuous mode [ 170.548378][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.560701][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.585686][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.598546][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.633262][ T41] veth1_macvtap: left promiscuous mode [ 170.641992][ T41] veth0_macvtap: left promiscuous mode [ 170.651170][ T41] veth1_vlan: left promiscuous mode [ 170.661838][ T41] veth0_vlan: left promiscuous mode [ 171.308909][ T41] team0 (unregistering): Port device team_slave_1 removed [ 171.332997][ T41] team0 (unregistering): Port device team_slave_0 removed 2026/06/28 18:04:47 executed programs: 0 [ 171.464376][ T5378] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.473657][ T5378] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.480747][ T5378] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.487330][ T5378] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.493927][ T5378] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.326047][ T4996] 8021q: adding VLAN 0 to HW filter on device eth2 [ 173.087392][ T4996] 8021q: adding VLAN 0 to HW filter on device eth3 [ 173.424293][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.437082][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.441126][ T5777] bridge_slave_0: entered allmulticast mode [ 173.452232][ T5777] bridge_slave_0: entered promiscuous mode [ 173.471175][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.474735][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.488295][ T5777] bridge_slave_1: entered allmulticast mode [ 173.493793][ T5777] bridge_slave_1: entered promiscuous mode [ 173.534207][ T4996] 8021q: adding VLAN 0 to HW filter on device eth4 [ 173.556279][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.562171][ T5378] Bluetooth: hci0: command tx timeout [ 173.575272][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.619194][ T5777] team0: Port device team_slave_0 added [ 173.630028][ T5777] team0: Port device team_slave_1 added [ 173.690506][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.697454][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.724126][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.741141][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.748995][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.777188][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.863172][ T5777] hsr_slave_0: entered promiscuous mode [ 173.869745][ T5777] hsr_slave_1: entered promiscuous mode [ 174.011965][ T4996] 8021q: adding VLAN 0 to HW filter on device eth5 [ 174.720140][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 174.738149][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.747996][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 174.771980][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.787416][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 174.794986][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.808256][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 174.821359][ T5777] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.024227][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.082560][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.120724][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.124017][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.139843][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.143319][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.638949][ T5378] Bluetooth: hci0: command tx timeout [ 176.012008][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.099719][ T5777] veth0_vlan: entered promiscuous mode [ 176.119336][ T5777] veth1_vlan: entered promiscuous mode [ 176.176280][ T5777] veth0_macvtap: entered promiscuous mode [ 176.194118][ T5777] veth1_macvtap: entered promiscuous mode [ 176.237782][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.261443][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.295100][ T161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.303881][ T161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.319021][ T161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.327775][ T161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.499272][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.517089][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.581455][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.590447][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/06/28 18:04:52 executed programs: 2 [ 177.057785][ T803] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 177.197126][ T803] usb 5-1: device descriptor read/64, error -71 [ 177.437087][ T803] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 177.567025][ T803] usb 5-1: device descriptor read/64, error -71 [ 177.677368][ T803] usb usb5-port1: attempt power cycle [ 177.717151][ T5378] Bluetooth: hci0: command tx timeout [ 178.017146][ T803] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 178.040157][ T803] usb 5-1: device descriptor read/8, error -71 [ 178.278187][ T803] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 178.297997][ T803] usb 5-1: device descriptor read/8, error -71 [ 178.407229][ T803] usb usb5-port1: unable to enumerate USB device [ 179.639674][ C0] [ 179.641092][ C0] ============================= [ 179.643798][ C0] [ BUG: Invalid wait context ] [ 179.646089][ C0] syzkaller #0 Not tainted [ 179.648064][ C0] ----------------------------- [ 179.650201][ C0] swapper/0/0 is trying to lock: [ 179.652434][ C0] ffff888052185370 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x1f4/0x9a0 [ 179.657067][ C0] other info that might help us debug this: [ 179.659919][ C0] context-{2:2} [ 179.661580][ C0] 1 lock held by swapper/0/0: [ 179.663704][ C0] #0: ffff8880521858d0 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1bc/0x9a0 [ 179.668278][ C0] stack backtrace: [ 179.670196][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 179.670211][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.670219][ C0] Call Trace: [ 179.670227][ C0] [ 179.670233][ C0] dump_stack_lvl+0xe8/0x150 [ 179.670250][ C0] __lock_acquire+0xe39/0x2cf0 [ 179.670265][ C0] ? __lock_acquire+0x683/0x2cf0 [ 179.670278][ C0] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0 [ 179.670288][ C0] lock_acquire+0x106/0x350 [ 179.670297][ C0] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0 [ 179.670307][ C0] ? xa_load+0x1db/0x210 [ 179.670373][ C0] _raw_read_lock_irqsave+0x48/0x60 [ 179.670391][ C0] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0 [ 179.670402][ C0] kvm_xen_set_evtchn_fast+0x1f4/0x9a0 [ 179.670414][ C0] ? kvm_xen_set_evtchn_fast+0x1bc/0x9a0 [ 179.670423][ C0] xen_timer_callback+0x109/0x220 [ 179.670434][ C0] ? __pfx_xen_timer_callback+0x10/0x10 [ 179.670444][ C0] __hrtimer_run_queues+0x371/0xa10 [ 179.670463][ C0] hrtimer_interrupt+0x448/0x910 [ 179.670482][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 179.670497][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 179.670508][ C0] [ 179.670512][ C0] [ 179.670516][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 179.670528][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 179.670539][ C0] Code: fc 73 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 a9 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 179.670547][ C0] RSP: 0018:ffffffff8e607de0 EFLAGS: 00000242 [ 179.670559][ C0] RAX: 000000000009cedf RBX: ffffffff819aa370 RCX: 0000000080000001 [ 179.670567][ C0] RDX: 0000000000000001 RSI: ffffffff8dfe9274 RDI: ffffffff8c2ac780 [ 179.670574][ C0] RBP: ffffffff8e607eb8 R08: ffff88801fc338db R09: 1ffff11003f8671b [ 179.670582][ C0] R10: dffffc0000000000 R11: ffffed1003f8671c R12: 0000000000000000 [ 179.670588][ C0] R13: 1ffffffff1cd1de8 R14: 1ffffffff1cc0fc4 R15: dffffc0000000000 [ 179.670598][ C0] ? do_idle+0x2e0/0x540 [ 179.670612][ C0] default_idle+0x9/0x20 [ 179.670624][ C0] default_idle_call+0x72/0xb0 [ 179.670636][ C0] do_idle+0x2e0/0x540 [ 179.670647][ C0] ? __pfx_do_idle+0x10/0x10 [ 179.670659][ C0] cpu_startup_entry+0x43/0x60 [ 179.670669][ C0] rest_init+0x2de/0x300 [ 179.670683][ C0] start_kernel+0x392/0x3e0 [ 179.670740][ C0] x86_64_start_reservations+0x24/0x30 [ 179.670753][ C0] x86_64_start_kernel+0x137/0x1b0 [ 179.670763][ C0] common_startup_64+0x13e/0x157 [ 179.670791][ C0] [ 179.796945][ T5378] Bluetooth: hci0: command tx timeout [ 180.207325][ T803] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 180.336991][ T803] usb 5-1: device descriptor read/64, error -71 [ 180.576982][ T803] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 180.706953][ T803] usb 5-1: device descriptor read/64, error -71 [ 180.817211][ T803] usb usb5-port1: attempt power cycle [ 181.157425][ T803] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 181.177540][ T803] usb 5-1: device descriptor read/8, error -71 [ 181.416962][ T803] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 181.438053][ T803] usb 5-1: device descriptor read/8, error -71 [ 181.547656][ T803] usb usb5-port1: unable to enumerate USB device 2026/06/28 18:04:58 executed programs: 4 [ 183.236963][ T803] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 183.366943][ T803] usb 5-1: device descriptor read/64, error -71 [ 183.606916][ T803] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 183.736952][ T803] usb 5-1: device descriptor read/64, error -71 [ 183.847250][ T803] usb usb5-port1: attempt power cycle [ 184.187845][ T803] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 184.207470][ T803] usb 5-1: device descriptor read/8, error -71 [ 184.446967][ T803] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 184.467638][ T803] usb 5-1: device descriptor read/8, error -71 [ 184.580380][ T803] usb usb5-port1: unable to enumerate USB device [ 186.277559][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 186.406932][ T9] usb 5-1: device descriptor read/64, error -71 [ 186.646971][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 186.777012][ T9] usb 5-1: device descriptor read/64, error -71 [ 186.887946][ T9] usb usb5-port1: attempt power cycle [ 187.226974][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 187.247554][ T9] usb 5-1: device descriptor read/8, error -71 [ 187.487466][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 187.507702][ T9] usb 5-1: device descriptor read/8, error -71 [ 187.617205][ T9] usb usb5-port1: unable to enumerate USB device 2026/06/28 18:05:05 executed programs: 6 [ 189.319608][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 189.447018][ T9] usb 5-1: device descriptor read/64, error -71