syzkaller login: qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x7d000)
[ 90.085297][ T1031] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[ 90.095920][ T1031] ata1: failed to read log page 10h (errno=-5)
[ 90.109136][ T1031] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0
[ 90.112960][ T1031] ata1.00: irq_stat 0x41000000
[ 90.114924][ T1031] ata1.00: failed command: WRITE FPDMA QUEUED
[ 90.117282][ T1031] ata1.00: cmd 61/e8:70:56:91:04/03:00:00:00:00/40 tag 14 ncq dma 512000 out
[ 90.117282][ T1031] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 90.141709][ T1031] ata1.00: status: { DRDY }
[ 90.149173][ T1031] ata1.00: failed command: WRITE FPDMA QUEUED
[ 90.152941][ T1031] ata1.00: cmd 61/d8:78:3e:95:04/06:00:00:00:00/40 tag 15 ncq dma 897024 out
[ 90.152941][ T1031] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 90.175022][ T1031] ata1.00: status: { DRDY }
[ 90.184642][ T1031] ata1.00: configured for UDMA/100
[ 90.190239][ T1031] ata1: EH complete
Warning: Permanently added '[localhost]:56253' (ED25519) to the list of known hosts.
[ 97.071347][ T805] cfg80211: failed to load regulatory.db
2026/07/03 12:02:55 parsed 1 programs
2026/07/03 12:02:55 serving rpc on tcp://44025
[ 100.244224][ T5297] cgroup: Unknown subsys name 'net'
[ 100.293588][ T5297] cgroup: Unknown subsys name 'cpuset'
[ 100.297633][ T5297] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 101.883339][ T5297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xa8000)
[ 107.159829][ T1031] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[ 107.169016][ T1031] ata1: failed to read log page 10h (errno=-5)
[ 107.179366][ T1031] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0
[ 107.194255][ T1031] ata1.00: irq_stat 0x41000008
[ 107.201329][ T1031] ata1.00: failed command: READ FPDMA QUEUED
[ 107.209477][ T1031] ata1.00: cmd 60/40:70:36:4e:0c/05:00:00:00:00/40 tag 14 ncq dma 688128 in
[ 107.209477][ T1031] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 107.222695][ T1031] ata1.00: status: { DRDY }
[ 107.224445][ T1031] ata1.00: error: { ABRT }
[ 107.228637][ T1031] ata1.00: configured for UDMA/100
[ 107.231162][ T1031] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 107.234523][ T1031] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current]
[ 107.237175][ T1031] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information
[ 107.240647][ T1031] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 0c 4e 36 00 05 40 00
[ 107.244508][ T1031] I/O error, dev sda, sector 806454 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2
[ 107.248601][ T1031] ata1: EH complete
[ 107.680671][ T5314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 112.825237][ T5349] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.828844][ T5349] bridge0: port 1(bridge_slave_0) entered disabled state
[ 112.831853][ T5349] bridge_slave_0: entered allmulticast mode
[ 112.835434][ T5349] bridge_slave_0: entered promiscuous mode
[ 112.842381][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state
[ 112.845296][ T5349] bridge0: port 2(bridge_slave_1) entered disabled state
[ 112.849228][ T5349] bridge_slave_1: entered allmulticast mode
[ 112.853551][ T5349] bridge_slave_1: entered promiscuous mode
[ 112.887376][ T5349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 112.896760][ T5349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 112.959053][ T5349] team0: Port device team_slave_0 added
[ 112.964116][ T5349] team0: Port device team_slave_1 added
[ 113.029742][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 113.033411][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 113.062326][ T5349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 113.091496][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 113.098845][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 113.128576][ T5349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 113.210570][ T5349] hsr_slave_0: entered promiscuous mode
[ 113.213805][ T5349] hsr_slave_1: entered promiscuous mode
[ 113.608600][ T5349] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 113.648944][ T5349] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 113.656163][ T5349] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 113.673815][ T5349] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 113.681263][ T5349] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 113.699449][ T5349] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 113.705923][ T5349] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 113.726743][ T5349] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 113.966535][ T5349] 8021q: adding VLAN 0 to HW filter on device bond0
[ 114.025696][ T5349] 8021q: adding VLAN 0 to HW filter on device team0
[ 114.048134][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 114.052195][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 114.091352][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 114.094718][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 114.859376][ T5349] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 114.960720][ T5349] veth0_vlan: entered promiscuous mode
[ 114.983121][ T5349] veth1_vlan: entered promiscuous mode
[ 115.049045][ T5349] veth0_macvtap: entered promiscuous mode
[ 115.065805][ T5349] veth1_macvtap: entered promiscuous mode
[ 115.097638][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 115.114417][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 115.132043][ T1154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.155822][ T1154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.165726][ T1154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.181265][ T1154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.441653][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 115.587686][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.022710][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.501490][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.961471][ T5402] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 116.968686][ T4654] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 116.972693][ T4654] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 116.981377][ T4654] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 116.986940][ T4654] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 117.546073][ T37] bridge_slave_1: left allmulticast mode
[ 117.563245][ T37] bridge_slave_1: left promiscuous mode
[ 117.580483][ T37] bridge0: port 2(bridge_slave_1) entered disabled state
[ 117.593248][ T37] bridge_slave_0: left allmulticast mode
[ 117.609103][ T37] bridge_slave_0: left promiscuous mode
[ 117.611832][ T37] bridge0: port 1(bridge_slave_0) entered disabled state
[ 117.963979][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 117.984050][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 117.999780][ T37] bond0 (unregistering): Released all slaves
[ 118.124581][ T37] hsr_slave_0: left promiscuous mode
[ 118.148371][ T37] hsr_slave_1: left promiscuous mode
[ 118.161721][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 118.178653][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 118.191324][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 118.199683][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 118.254227][ T37] veth1_macvtap: left promiscuous mode
[ 118.279184][ T37] veth0_macvtap: left promiscuous mode
[ 118.288850][ T37] veth1_vlan: left promiscuous mode
[ 118.293481][ T37] veth0_vlan: left promiscuous mode
[ 118.836129][ T37] team0 (unregistering): Port device team_slave_1 removed
[ 118.853457][ T37] team0 (unregistering): Port device team_slave_0 removed
[ 119.003970][ T5000] 8021q: adding VLAN 0 to HW filter on device eth2
[ 119.345749][ T185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.369763][ T185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.733708][ T5000] 8021q: adding VLAN 0 to HW filter on device eth3
[ 119.760194][ T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.775928][ T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 120.649995][ T5000] 8021q: adding VLAN 0 to HW filter on device eth4
[ 121.484423][ T5000] 8021q: adding VLAN 0 to HW filter on device eth5
2026/07/03 12:03:20 executed programs: 0
[ 122.314164][ T44] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 122.321776][ T44] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 122.325921][ T44] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 122.333131][ T44] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 122.336290][ T44] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 123.032866][ T5454] bridge0: port 1(bridge_slave_0) entered blocking state
[ 123.035800][ T5454] bridge0: port 1(bridge_slave_0) entered disabled state
[ 123.038806][ T5454] bridge_slave_0: entered allmulticast mode
[ 123.041785][ T5454] bridge_slave_0: entered promiscuous mode
[ 123.045788][ T5454] bridge0: port 2(bridge_slave_1) entered blocking state
[ 123.049427][ T5454] bridge0: port 2(bridge_slave_1) entered disabled state
[ 123.052778][ T5454] bridge_slave_1: entered allmulticast mode
[ 123.056171][ T5454] bridge_slave_1: entered promiscuous mode
[ 123.092188][ T5454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 123.101829][ T5454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 123.127889][ T5454] team0: Port device team_slave_0 added
[ 123.133920][ T5454] team0: Port device team_slave_1 added
[ 123.162326][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 123.165109][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 123.176279][ T5454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 123.185068][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 123.188313][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 123.202670][ T5454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 123.236469][ T5454] hsr_slave_0: entered promiscuous mode
[ 123.239965][ T5454] hsr_slave_1: entered promiscuous mode
[ 123.999146][ T5454] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 124.013608][ T5454] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 124.024822][ T5454] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 124.040107][ T5454] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 124.054151][ T5454] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 124.080041][ T5454] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 124.089566][ T5454] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 124.113150][ T5454] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 124.285479][ T5454] 8021q: adding VLAN 0 to HW filter on device bond0
[ 124.323945][ T5454] 8021q: adding VLAN 0 to HW filter on device team0
[ 124.346759][ T37] bridge0: port 1(bridge_slave_0) entered blocking state
[ 124.350103][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 124.376020][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 124.379002][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 124.420653][ T44] Bluetooth: hci0: command tx timeout
[ 125.087615][ T5454] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 125.210636][ T5454] veth0_vlan: entered promiscuous mode
[ 125.245048][ T5454] veth1_vlan: entered promiscuous mode
[ 125.306369][ T5454] veth0_macvtap: entered promiscuous mode
[ 125.319861][ T5454] veth1_macvtap: entered promiscuous mode
[ 125.344035][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 125.363054][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 125.392211][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.411080][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.417781][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.435373][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 125.606682][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.620181][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 125.730755][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.740680][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 125.973121][ T5525] loop0: detected capacity change from 0 to 64
[ 125.991898][ T5525] =======================================================
[ 125.991898][ T5525] WARNING: The mand mount option has been deprecated and
[ 125.991898][ T5525] and is ignored by this kernel. Remove the mand
[ 125.991898][ T5525] option from the mount to silence this warning.
[ 125.991898][ T5525] =======================================================
[ 126.188673][ T5525] loop0: detected capacity change from 64 to 0
[ 126.222487][ T12] Buffer I/O error on dev loop0, logical block 8, lost async page write
[ 126.238820][ T12] Buffer I/O error on dev loop0, logical block 9, lost async page write
[ 126.247844][ T12] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 126.262097][ T12] Buffer I/O error on dev loop0, logical block 11, lost async page write
[ 126.275125][ T12] Buffer I/O error on dev loop0, logical block 16, lost async page write
[ 126.286658][ T12] Buffer I/O error on dev loop0, logical block 17, lost async page write
[ 126.295527][ T12] Buffer I/O error on dev loop0, logical block 18, lost async page write
[ 126.304139][ T12] Buffer I/O error on dev loop0, logical block 19, lost async page write
[ 126.329257][ T5525] Buffer I/O error on dev loop0, logical block 62, lost sync page write
[ 126.340226][ T5525] hfs: unable to read volume bitmap
[ 126.352437][ T12] Buffer I/O error on dev loop0, logical block 4, lost async page write
[ 126.493756][ T5533] loop0: detected capacity change from 0 to 64
[ 126.499044][ T44] Bluetooth: hci0: command tx timeout
[ 126.569380][ T5533] loop0: detected capacity change from 64 to 0
[ 126.582226][ T5533] hfs: unable to read volume bitmap
[ 126.626268][ T5454] ------------[ cut here ]------------
[ 126.628438][ T5454] !buffer_uptodate(bh)
[ 126.628447][ T5454] WARNING: fs/buffer.c:1093 at mark_buffer_dirty+0x299/0x410, CPU#0: syz-executor/5454
[ 126.633639][ T5454] Modules linked in:
[ 126.635578][ T5454] CPU: 0 UID: 0 PID: 5454 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full)
[ 126.639077][ T5454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 126.642743][ T5454] RIP: 0010:mark_buffer_dirty+0x299/0x410
[ 126.644895][ T5454] Code: 4c 89 f7 e8 c9 11 d9 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 5e fb ff e8 9f f3 69 ff eb 8c e8 98 f3 69 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 8a f3 69 ff 90 0f 0b 90 e9 cf fd ff ff
[ 126.652960][ T5454] RSP: 0018:ffffc90001c0fbf0 EFLAGS: 00010293
[ 126.655087][ T5454] RAX: ffffffff825c8e78 RBX: ffff88804501cd20 RCX: ffff88803ab40000
[ 126.658220][ T5454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 126.661262][ T5454] RBP: 1ffff11006780c01 R08: ffff88804501cd27 R09: 1ffff11008a039a4
[ 126.664410][ T5454] R10: dffffc0000000000 R11: ffffed1008a039a5 R12: dffffc0000000000
[ 126.667741][ T5454] R13: ffff888033c06668 R14: ffff888013711c0b R15: ffff8880136da492
[ 126.670948][ T5454] FS: 0000555586ef3500(0000) GS:ffff88808c54e000(0000) knlGS:0000000000000000
[ 126.674505][ T5454] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 126.676816][ T5454] CR2: 00007f16db930000 CR3: 00000000484b1000 CR4: 0000000000352ef0
[ 126.679623][ T5454] Call Trace:
[ 126.680942][ T5454]
[ 126.682020][ T5454] hfs_mdb_commit+0x860/0x1160
[ 126.683811][ T5454] hfs_sync_fs+0x1d/0x30
[ 126.685568][ T5454] sync_filesystem+0xee/0x230
[ 126.687548][ T5454] generic_shutdown_super+0x77/0x2d0
[ 126.689738][ T5454] kill_block_super+0x44/0x90
[ 126.691488][ T5454] hfs_kill_super+0x41/0x50
[ 126.693189][ T5454] deactivate_locked_super+0xbc/0x130
[ 126.695155][ T5454] cleanup_mnt+0x3d3/0x460
[ 126.696856][ T5454] task_work_run+0x1d9/0x270
[ 126.698618][ T5454] ? __pfx_task_work_run+0x10/0x10
[ 126.700631][ T5454] exit_to_user_mode_loop+0x1fa/0x730
[ 126.703078][ T5454] ? rcu_is_watching+0x15/0xb0
[ 126.705365][ T5454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 126.707580][ T5454] do_syscall_64+0x353/0x580
[ 126.709382][ T5454] ? trace_irq_disable+0x3b/0x140
[ 126.711040][ T5454] ? clear_bhb_loop+0x40/0x90
[ 126.712621][ T5454] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 126.714585][ T5454] RIP: 0033:0x7f74cbb9f097
[ 126.716083][ T5454] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 126.723613][ T5454] RSP: 002b:00007fff335c8fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 126.727313][ T5454] RAX: 0000000000000000 RBX: 00007f74cbc332ca RCX: 00007f74cbb9f097
[ 126.730531][ T5454] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff335c9080
[ 126.733497][ T5454] RBP: 00007fff335c9080 R08: 00007fff335ca080 R09: 00000000ffffffff
[ 126.736901][ T5454] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff335ca110
[ 126.740444][ T5454] R13: 00007f74cbc332ca R14: 000000000001edf7 R15: 00007fff335ca150
[ 126.743334][ T5454]
[ 126.744644][ T5454] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 126.747591][ T5454] CPU: 0 UID: 0 PID: 5454 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full)
[ 126.751258][ T5454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 126.755424][ T5454] Call Trace:
[ 126.756764][ T5454]
[ 126.757915][ T5454] vpanic+0x56c/0xa60
[ 126.759605][ T5454] ? __pfx__printk+0x10/0x10
[ 126.761986][ T5454] ? __pfx_vpanic+0x10/0x10
[ 126.764556][ T5454] ? is_bpf_text_address+0x292/0x2b0
[ 126.766649][ T5454] ? is_bpf_text_address+0x26/0x2b0
[ 126.768551][ T5454] panic+0xc5/0xd0
[ 126.769780][ T5454] ? __pfx_panic+0x10/0x10
[ 126.771189][ T5454] __warn+0x315/0x4c0
[ 126.772613][ T5454] ? mark_buffer_dirty+0x299/0x410
[ 126.774697][ T5454] ? mark_buffer_dirty+0x299/0x410
[ 126.777122][ T5454] __report_bug+0x331/0x530
[ 126.779331][ T5454] ? mark_buffer_dirty+0x299/0x410
[ 126.781534][ T5454] ? __pfx___report_bug+0x10/0x10
[ 126.783463][ T5454] ? schedule+0x16e/0x2b0
[ 126.785149][ T5454] ? wb_wait_for_completion+0x61a/0x700
[ 126.787238][ T5454] ? mark_buffer_dirty+0x299/0x410
[ 126.789111][ T5454] report_bug+0x16a/0x220
[ 126.790799][ T5454] ? mark_buffer_dirty+0x299/0x410
[ 126.792896][ T5454] ? mark_buffer_dirty+0x29b/0x410
[ 126.795122][ T5454] handle_bug+0x9c/0x200
[ 126.797061][ T5454] exc_invalid_op+0x1a/0x50
[ 126.798968][ T5454] asm_exc_invalid_op+0x1a/0x20
[ 126.800752][ T5454] RIP: 0010:mark_buffer_dirty+0x299/0x410
[ 126.802853][ T5454] Code: 4c 89 f7 e8 c9 11 d9 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 d4 5e fb ff e8 9f f3 69 ff eb 8c e8 98 f3 69 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 8a f3 69 ff 90 0f 0b 90 e9 cf fd ff ff
[ 126.810544][ T5454] RSP: 0018:ffffc90001c0fbf0 EFLAGS: 00010293
[ 126.813191][ T5454] RAX: ffffffff825c8e78 RBX: ffff88804501cd20 RCX: ffff88803ab40000
[ 126.816068][ T5454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 126.818939][ T5454] RBP: 1ffff11006780c01 R08: ffff88804501cd27 R09: 1ffff11008a039a4
[ 126.822174][ T5454] R10: dffffc0000000000 R11: ffffed1008a039a5 R12: dffffc0000000000
[ 126.825594][ T5454] R13: ffff888033c06668 R14: ffff888013711c0b R15: ffff8880136da492
[ 126.830184][ T5454] ? mark_buffer_dirty+0x298/0x410
[ 126.832843][ T5454] hfs_mdb_commit+0x860/0x1160
[ 126.834827][ T5454] hfs_sync_fs+0x1d/0x30
[ 126.836554][ T5454] sync_filesystem+0xee/0x230
[ 126.838572][ T5454] generic_shutdown_super+0x77/0x2d0
[ 126.840492][ T5454] kill_block_super+0x44/0x90
[ 126.842018][ T5454] hfs_kill_super+0x41/0x50
[ 126.843453][ T5454] deactivate_locked_super+0xbc/0x130
[ 126.845365][ T5454] cleanup_mnt+0x3d3/0x460
[ 126.847112][ T5454] task_work_run+0x1d9/0x270
[ 126.849162][ T5454] ? __pfx_task_work_run+0x10/0x10
[ 126.851860][ T5454] exit_to_user_mode_loop+0x1fa/0x730
[ 126.854659][ T5454] ? rcu_is_watching+0x15/0xb0
[ 126.856879][ T5454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 126.859425][ T5454] do_syscall_64+0x353/0x580
[ 126.861160][ T5454] ? trace_irq_disable+0x3b/0x140
[ 126.863224][ T5454] ? clear_bhb_loop+0x40/0x90
[ 126.865153][ T5454] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 126.867572][ T5454] RIP: 0033:0x7f74cbb9f097
[ 126.869512][ T5454] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 126.877243][ T5454] RSP: 002b:00007fff335c8fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 126.880989][ T5454] RAX: 0000000000000000 RBX: 00007f74cbc332ca RCX: 00007f74cbb9f097
[ 126.884178][ T5454] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff335c9080
[ 126.887243][ T5454] RBP: 00007fff335c9080 R08: 00007fff335ca080 R09: 00000000ffffffff
[ 126.890438][ T5454] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff335ca110
[ 126.893546][ T5454] R13: 00007f74cbc332ca R14: 000000000001edf7 R15: 00007fff335ca150
[ 126.896370][ T5454]
[ 126.898155][ T5454] Kernel Offset: disabled
[ 126.900069][ T5454] Rebooting in 86400 seconds..