[ 143.299389][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.303015][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xa8000) [ 145.917765][ T1010] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 145.920797][ T1010] ata1: failed to read log page 10h (errno=-5) [ 145.923566][ T1010] ata1.00: NCQ disabled due to excessive errors [ 145.944485][ T1010] ata1.00: exception Emask 0x1 SAct 0x40000001 SErr 0x0 action 0x0 [ 145.961022][ T1010] ata1.00: irq_stat 0x40000000 [ 145.963469][ T1010] ata1.00: failed command: WRITE FPDMA QUEUED [ 145.985906][ T1010] ata1.00: cmd 61/c0:00:b6:c4:04/02:00:00:00:00/40 tag 0 ncq dma 360448 out [ 145.985906][ T1010] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 145.993457][ T1010] ata1.00: status: { DRDY } [ 145.995623][ T1010] ata1.00: failed command: WRITE FPDMA QUEUED [ 146.019696][ T1010] ata1.00: cmd 61/40:f0:76:bf:04/05:00:00:00:00/40 tag 30 ncq dma 688128 out [ 146.019696][ T1010] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 146.055982][ T1010] ata1.00: status: { DRDY } [ 146.060220][ T1010] ata1.00: configured for UDMA/100 [ 146.068079][ T1010] ata1: EH complete Warning: Permanently added '[localhost]:47522' (ED25519) to the list of known hosts. 2026/04/03 09:11:54 parsed 1 programs [ 158.798274][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 165.052910][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.059298][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.062956][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.066854][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.071210][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.603746][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.617703][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.667192][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.672251][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.991141][ T5664] chnl_net:caif_netlink_parms(): no params data found [ 167.104049][ T5664] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.108535][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.112729][ T5664] bridge_slave_0: entered allmulticast mode [ 167.121366][ T5664] bridge_slave_0: entered promiscuous mode [ 167.128230][ T5664] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.131740][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.135155][ T5664] bridge_slave_1: entered allmulticast mode [ 167.143510][ T5664] bridge_slave_1: entered promiscuous mode [ 167.166601][ T5664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.174386][ T5664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.198630][ T5664] team0: Port device team_slave_0 added [ 167.204404][ T5664] team0: Port device team_slave_1 added [ 167.226335][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.229608][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.243412][ T5664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.250507][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.253652][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.267750][ T5664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.304266][ T5664] hsr_slave_0: entered promiscuous mode [ 167.308613][ T5664] hsr_slave_1: entered promiscuous mode [ 167.815685][ T5664] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 167.833849][ T5664] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 167.857646][ T5664] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 167.864468][ T5664] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 168.029391][ T5664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.059595][ T5664] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.079118][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.082568][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.115042][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.119348][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.184173][ T5664] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.201362][ T5664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.511001][ T5664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.613790][ T5664] veth0_vlan: entered promiscuous mode [ 168.646019][ T5664] veth1_vlan: entered promiscuous mode [ 168.692427][ T5664] veth0_macvtap: entered promiscuous mode [ 168.717830][ T5664] veth1_macvtap: entered promiscuous mode [ 168.754387][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.783076][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.821009][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.825672][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.849712][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.853632][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.181191][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/04/03 09:12:10 executed programs: 0 [ 169.807084][ T4666] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.814468][ T4666] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.819456][ T4666] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.823802][ T4666] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.829476][ T4666] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.217454][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.482458][ T5717] chnl_net:caif_netlink_parms(): no params data found [ 170.659341][ T5717] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.662700][ T5717] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.676207][ T5717] bridge_slave_0: entered allmulticast mode [ 170.686266][ T5717] bridge_slave_0: entered promiscuous mode [ 170.698762][ T5717] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.706413][ T5717] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.710093][ T5717] bridge_slave_1: entered allmulticast mode [ 170.722242][ T5717] bridge_slave_1: entered promiscuous mode [ 170.779541][ T5717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.796201][ T5717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.857202][ T5717] team0: Port device team_slave_0 added [ 170.862058][ T5717] team0: Port device team_slave_1 added [ 170.927001][ T5717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.931317][ T5717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.956391][ T5717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.972140][ T5717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.975374][ T5717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.014328][ T5717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.098110][ T5717] hsr_slave_0: entered promiscuous mode [ 171.113807][ T5717] hsr_slave_1: entered promiscuous mode [ 171.131733][ T5717] debugfs: 'hsr0' already exists in 'hsr' [ 171.134474][ T5717] Cannot create hsr debugfs directory [ 171.168273][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.670109][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.857990][ T45] Bluetooth: hci0: command tx timeout [ 171.918000][ T12] bridge_slave_1: left allmulticast mode [ 171.920585][ T12] bridge_slave_1: left promiscuous mode [ 171.924517][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.948336][ T12] bridge_slave_0: left allmulticast mode [ 171.950965][ T12] bridge_slave_0: left promiscuous mode [ 171.960725][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.274918][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.304808][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.317647][ T12] bond0 (unregistering): Released all slaves [ 172.441716][ T12] hsr_slave_0: left promiscuous mode [ 172.466505][ T12] hsr_slave_1: left promiscuous mode [ 172.470253][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.473751][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.486911][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.490216][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.509590][ T12] veth1_macvtap: left promiscuous mode [ 172.512540][ T12] veth0_macvtap: left promiscuous mode [ 172.526947][ T12] veth1_vlan: left promiscuous mode [ 172.529793][ T12] veth0_vlan: left promiscuous mode [ 172.785626][ T12] team0 (unregistering): Port device team_slave_1 removed [ 172.803318][ T12] team0 (unregistering): Port device team_slave_0 removed [ 173.163871][ T5717] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.173084][ T5717] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.223263][ T5717] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.243939][ T5717] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.350121][ T5717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.371439][ T5717] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.382499][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.386553][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.402472][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.406930][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.588667][ T5717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.634314][ T5717] veth0_vlan: entered promiscuous mode [ 173.643960][ T5717] veth1_vlan: entered promiscuous mode [ 173.672312][ T5717] veth0_macvtap: entered promiscuous mode [ 173.680165][ T5717] veth1_macvtap: entered promiscuous mode [ 173.694697][ T5717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.708578][ T5717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.719364][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.730254][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.748398][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.765429][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.813597][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.827353][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.854643][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.861246][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.937931][ T45] Bluetooth: hci0: command tx timeout [ 174.274949][ T5774] loop0: detected capacity change from 0 to 32768 [ 174.315594][ T5774] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 174.325571][ T5774] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 174.381696][ T5774] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 174.392941][ T4990] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 174.397207][ T4990] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 174.491870][ T4990] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 94ms [ 174.501591][ T4990] gfs2: fsid=syz:syz.0: jid=0: Done [ 174.504770][ T5774] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 174.669611][ T5774] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 176779 [ 174.678103][ T5774] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 174.686364][ T5774] ------------[ cut here ]------------ [ 174.689015][ T5774] kernel BUG at fs/gfs2/util.c:303! [ 174.691754][ T5774] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 174.697510][ T5774] CPU: 0 UID: 0 PID: 5774 Comm: syz.0.15 Not tainted syzkaller #0 PREEMPT(full) [ 174.701608][ T5774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.706219][ T5774] RIP: 0010:gfs2_assert_warn_i+0x2bb/0x2c0 [ 174.709136][ T5774] Code: fe 48 c7 c7 00 0f 1a 8c 4c 89 ee 48 8b 54 24 08 48 8b 4c 24 10 4c 8b 44 24 18 44 8b 4c 24 04 e8 4b 52 00 fd e8 d6 be 9e fd 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f [ 174.718729][ T5774] RSP: 0018:ffffc900033c7778 EFLAGS: 00010293 [ 174.721466][ T5774] RAX: ffffffff8427059a RBX: 1ffff11003f3e057 RCX: ffff88803b1224c0 [ 174.725614][ T5774] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 174.729889][ T5774] RBP: 1ffff11003f3e270 R08: ffffc900033c7507 R09: 1ffff92000678ea0 [ 174.733959][ T5774] R10: dffffc0000000000 R11: fffff52000678ea1 R12: ffff88801f9f02bc [ 174.738816][ T5774] R13: ffff88801f9f0000 R14: 0000000000000004 R15: dffffc0000000000 [ 174.743195][ T5774] FS: 00007f826976e6c0(0000) GS:ffff88808ca4c000(0000) knlGS:0000000000000000 [ 174.747358][ T5774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.750491][ T5774] CR2: 00007f4f997909c0 CR3: 0000000044138000 CR4: 0000000000352ef0 [ 174.754428][ T5774] Call Trace: [ 174.756515][ T5774] [ 174.758221][ T5774] gfs2_qd_dispose+0x466/0x570 [ 174.760755][ T5774] gfs2_quota_init+0xcd4/0x1220 [ 174.763012][ T5774] ? __pfx_gfs2_quota_init+0x10/0x10 [ 174.765580][ T5774] ? __pfx_wake_up_bit+0x10/0x10 [ 174.768008][ T5774] ? inode_go_inval+0x2a0/0x360 [ 174.770314][ T5774] gfs2_make_fs_rw+0x143/0x230 [ 174.772808][ T5774] gfs2_fill_super+0x1ba5/0x21d0 [ 174.775410][ T5774] ? __pfx_gfs2_fill_super+0x10/0x10 [ 174.778201][ T5774] ? init_locking+0xb8/0x210 [ 174.780402][ T5774] ? sb_set_blocksize+0x155/0x240 [ 174.782860][ T5774] ? setup_bdev_super+0x4c1/0x5b0 [ 174.785512][ T5774] get_tree_bdev_flags+0x431/0x4f0 [ 174.788473][ T5774] ? __pfx_gfs2_fill_super+0x10/0x10 [ 174.791456][ T5774] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 174.794278][ T5774] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 174.797623][ T5774] gfs2_get_tree+0x51/0x1e0 [ 174.800334][ T5774] vfs_get_tree+0x92/0x2a0 [ 174.803535][ T5774] do_new_mount+0x341/0xd30 [ 174.805985][ T5774] ? apparmor_capable+0x126/0x170 [ 174.808337][ T5774] ? __pfx_do_new_mount+0x10/0x10 [ 174.810931][ T5774] ? ns_capable+0x89/0xe0 [ 174.813315][ T5774] ? user_path_at+0xd4/0x160 [ 174.815812][ T5774] __se_sys_mount+0x31d/0x420 [ 174.818076][ T5774] ? __pfx___se_sys_mount+0x10/0x10 [ 174.820443][ T5774] ? __x64_sys_mount+0x20/0xc0 [ 174.822637][ T5774] do_syscall_64+0x14d/0xf80 [ 174.824847][ T5774] ? trace_irq_disable+0x3b/0x150 [ 174.827577][ T5774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.831331][ T5774] ? clear_bhb_loop+0x40/0x90 [ 174.834059][ T5774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.836674][ T5774] RIP: 0033:0x7f82689896ca [ 174.838825][ T5774] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.847710][ T5774] RSP: 002b:00007f826976de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 174.852324][ T5774] RAX: ffffffffffffffda RBX: 00007f826976dee0 RCX: 00007f82689896ca [ 174.856710][ T5774] RDX: 0000000020021140 RSI: 0000000020021180 RDI: 00007f826976dea0 [ 174.860364][ T5774] RBP: 0000000020021140 R08: 00007f826976dee0 R09: 000000000300c888 [ 174.864154][ T5774] R10: 000000000300c888 R11: 0000000000000246 R12: 0000000020021180 [ 174.867903][ T5774] R13: 00007f826976dea0 R14: 0000000000021170 R15: 0000000020000180 [ 174.871821][ T5774] [ 174.873494][ T5774] Modules linked in: [ 174.876979][ T5774] ---[ end trace 0000000000000000 ]--- [ 174.892598][ T5774] RIP: 0010:gfs2_assert_warn_i+0x2bb/0x2c0 [ 174.898043][ T5774] Code: fe 48 c7 c7 00 0f 1a 8c 4c 89 ee 48 8b 54 24 08 48 8b 4c 24 10 4c 8b 44 24 18 44 8b 4c 24 04 e8 4b 52 00 fd e8 d6 be 9e fd 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f [ 174.907360][ T5774] RSP: 0018:ffffc900033c7778 EFLAGS: 00010293 [ 174.910211][ T5774] RAX: ffffffff8427059a RBX: 1ffff11003f3e057 RCX: ffff88803b1224c0 [ 174.914095][ T5774] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 174.919785][ T5774] RBP: 1ffff11003f3e270 R08: ffffc900033c7507 R09: 1ffff92000678ea0 [ 174.923465][ T5774] R10: dffffc0000000000 R11: fffff52000678ea1 R12: ffff88801f9f02bc [ 174.927517][ T5774] R13: ffff88801f9f0000 R14: 0000000000000004 R15: dffffc0000000000 [ 174.932322][ T5774] FS: 00007f826976e6c0(0000) GS:ffff88808ca4c000(0000) knlGS:0000000000000000 [ 174.937423][ T5774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.940558][ T5774] CR2: 00007f4f997909c0 CR3: 0000000044138000 CR4: 0000000000352ef0 [ 174.944405][ T5774] Kernel panic - not syncing: Fatal exception [ 174.947774][ T5774] Kernel Offset: disabled [ 174.950054][ T5774] Rebooting in 86400 seconds..