qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xa9000)
[ 142.075873][ T1027] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[ 142.076012][ T1027] ata1: failed to read log page 10h (errno=-5)
[ 142.076030][ T1027] ata1.00: NCQ disabled due to excessive errors
[ 142.076038][ T1027] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0
[ 142.076049][ T1027] ata1.00: irq_stat 0x41000000
[ 142.076060][ T1027] ata1.00: failed command: WRITE FPDMA QUEUED
[ 142.076067][ T1027] ata1.00: cmd 61/48:70:ce:59:04/05:00:00:00:00/40 tag 14 ncq dma 692224 out
[ 142.076067][ T1027] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 142.076093][ T1027] ata1.00: status: { DRDY }
[ 142.076103][ T1027] ata1.00: failed command: WRITE FPDMA QUEUED
[ 142.076108][ T1027] ata1.00: cmd 61/20:78:16:5f:04/0a:00:00:00:00/40 tag 15 ncq dma 1327104 ou
[ 142.076108][ T1027] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 142.076135][ T1027] ata1.00: status: { DRDY }
[ 142.079157][ T1027] ata1.00: configured for UDMA/100
[ 142.083532][ T1027] ata1: EH complete
Warning: Permanently added '[localhost]:28267' (ED25519) to the list of known hosts.
[*] Starting reproducer for netlink_has_listeners null-ptr-deref...
[+] mkdir /sys/kernel/debug check passed.
[+] debugfs mounted or already present.
[ 151.686978][ T5618] rxe_eth0 speed is unknown, defaulting to 1000
[+] Child unshared CLONE_NEWNET.
[+] Netdevsim device 10 created in child netns.
[+] Configured dont_allow_reload=1 for netdevsim10.
[+] Child exiting now to initiate netns destruction.
[+] Child process exited cleanly.
[*] Sleeping 1 second to allow cleanup_net workqueue to process child netns...
[ 152.458700][ T4989] 8021q: adding VLAN 0 to HW filter on device dev11
[+] Sleep completed.
[*] Deleting netdevsim10 to trigger devlink port notification into dead netns...
[ 152.991030][ T5617] ==================================================================
[ 152.991044][ T5617] BUG: KASAN: null-ptr-deref in netlink_has_listeners+0x3d/0x3f0
[ 152.991257][ T5617] Read of size 8 at addr 0000000000000578 by task syz-executor333/5617
[ 152.991265][ T5617]
[ 152.991283][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: syz-executor333 Not tainted syzkaller #0 PREEMPT(full)
[ 152.991296][ T5617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 152.991303][ T5617] Call Trace:
[ 152.991318][ T5617]
[ 152.991323][ T5617] dump_stack_lvl+0xe8/0x150
[ 152.991381][ T5617] ? netlink_has_listeners+0x3d/0x3f0
[ 152.991391][ T5617] kasan_report+0x117/0x150
[ 152.991427][ T5617] ? netlink_has_listeners+0x3d/0x3f0
[ 152.991439][ T5617] kasan_check_range+0x264/0x2c0
[ 152.991456][ T5617] netlink_has_listeners+0x3d/0x3f0
[ 152.991469][ T5617] devlink_port_notify+0x18c/0x520
[ 152.991538][ T5617] ? __pfx_devlink_port_notify+0x10/0x10
[ 152.991553][ T5617] ? __devlink_port_type_set+0x5e4/0x7a0
[ 152.991568][ T5617] ? __local_bh_enable_ip+0xd6/0x140
[ 152.991603][ T5617] __devlink_port_type_set+0x5f1/0x7a0
[ 152.991619][ T5617] ? __pfx___devlink_port_type_set+0x10/0x10
[ 152.991633][ T5617] ? ip_vs_dst_event+0x171/0xc00
[ 152.991658][ T5617] ? unregister_netdevice_many_notify+0x1a3d/0x2140
[ 152.991701][ T5617] devlink_port_netdevice_event+0x25d/0x3a0
[ 152.991717][ T5617] notifier_call_chain+0x1a5/0x3d0
[ 152.991729][ T5617] unregister_netdevice_many_notify+0x1a76/0x2140
[ 152.991774][ T5617] ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 152.991787][ T5617] ? __mutex_lock+0x30b/0x1550
[ 152.991872][ T5617] ? do_raw_spin_lock+0x12b/0x2f0
[ 152.991889][ T5617] unregister_netdevice_queue+0x2f5/0x340
[ 152.991901][ T5617] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 152.991912][ T5617] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 152.991925][ T5617] nsim_destroy+0x275/0x800
[ 152.991977][ T5617] __nsim_dev_port_del+0x14e/0x200
[ 152.991987][ T5617] nsim_dev_reload_destroy+0x288/0x490
[ 152.991997][ T5617] nsim_drv_remove+0x58/0x170
[ 152.992006][ T5617] ? __pfx_nsim_bus_remove+0x10/0x10
[ 152.992013][ T5617] device_release_driver_internal+0x48b/0x880
[ 152.992092][ T5617] bus_remove_device+0x444/0x560
[ 152.992104][ T5617] ? __pfx_bus_remove_device+0x10/0x10
[ 152.992116][ T5617] ? kernfs_remove_by_name_ns+0x101/0x140
[ 152.992141][ T5617] device_del+0x524/0x8f0
[ 152.992153][ T5617] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 152.992164][ T5617] ? __pfx_device_del+0x10/0x10
[ 152.992177][ T5617] ? lock_acquire+0x115/0x350
[ 152.992188][ T5617] device_unregister+0x21/0xf0
[ 152.992200][ T5617] del_device_store+0x2b5/0x370
[ 152.992212][ T5617] ? __pfx_del_device_store+0x10/0x10
[ 152.992225][ T5617] ? sysfs_file_kobj+0x1e4/0x230
[ 152.992240][ T5617] ? sysfs_kf_write+0x166/0x260
[ 152.992255][ T5617] ? __pfx_sysfs_kf_write+0x10/0x10
[ 152.992269][ T5617] kernfs_fop_write_iter+0x3a4/0x540
[ 152.992282][ T5617] vfs_write+0x612/0xba0
[ 152.992297][ T5617] ? __pfx_vfs_write+0x10/0x10
[ 152.992311][ T5617] ? do_sys_openat2+0x14e/0x200
[ 152.992322][ T5617] ? kmem_cache_free+0x182/0x650
[ 152.992336][ T5617] ksys_write+0x150/0x270
[ 152.992351][ T5617] ? __pfx_ksys_write+0x10/0x10
[ 152.992368][ T5617] do_syscall_64+0x166/0x520
[ 152.992380][ T5617] ? trace_irq_disable+0x3b/0x140
[ 152.992403][ T5617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 152.992420][ T5617] ? clear_bhb_loop+0x70/0xc0
[ 152.992433][ T5617] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 152.992444][ T5617] RIP: 0033:0x7fb10e25df77
[ 152.992465][ T5617] Code: 48 89 fa 4c 89 df e8 98 1e 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 152.992474][ T5617] RSP: 002b:00007ffd1f1777c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[ 152.992486][ T5617] RAX: ffffffffffffffda RBX: 0000555587f6f400 RCX: 00007fb10e25df77
[ 152.992492][ T5617] RDX: 0000000000000003 RSI: 00007fb10e29d08b RDI: 0000000000000003
[ 152.992497][ T5617] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 152.992503][ T5617] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd1f177938
[ 152.992509][ T5617] R13: 0000000000000002 R14: 00007fb10e2c5c80 R15: 0000000000000002
[ 152.992520][ T5617]
[ 152.992524][ T5617] ==================================================================
[ 152.992531][ T5617] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 153.186826][ T5617] CPU: 0 UID: 0 PID: 5617 Comm: syz-executor333 Not tainted syzkaller #0 PREEMPT(full)
[ 153.190796][ T5617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 153.195127][ T5617] Call Trace:
[ 153.196466][ T5617]
[ 153.197612][ T5617] vpanic+0x56d/0xa60
[ 153.199310][ T5617] ? __pfx_vpanic+0x10/0x10
[ 153.201370][ T5617] panic+0xc5/0xd0
[ 153.203034][ T5617] ? __pfx_panic+0x10/0x10
[ 153.204726][ T5617] ? netlink_has_listeners+0x3d/0x3f0
[ 153.206845][ T5617] ? netlink_has_listeners+0x3d/0x3f0
[ 153.209266][ T5617] check_panic_on_warn+0x89/0xb0
[ 153.211435][ T5617] ? netlink_has_listeners+0x3d/0x3f0
[ 153.213763][ T5617] end_report+0x73/0x170
[ 153.215646][ T5617] ? netlink_has_listeners+0x3d/0x3f0
[ 153.218024][ T5617] kasan_report+0x128/0x150
[ 153.220072][ T5617] ? netlink_has_listeners+0x3d/0x3f0
[ 153.222357][ T5617] kasan_check_range+0x264/0x2c0
[ 153.224477][ T5617] netlink_has_listeners+0x3d/0x3f0
[ 153.226691][ T5617] devlink_port_notify+0x18c/0x520
[ 153.229004][ T5617] ? __pfx_devlink_port_notify+0x10/0x10
[ 153.231443][ T5617] ? __devlink_port_type_set+0x5e4/0x7a0
[ 153.233850][ T5617] ? __local_bh_enable_ip+0xd6/0x140
[ 153.236208][ T5617] __devlink_port_type_set+0x5f1/0x7a0
[ 153.238590][ T5617] ? __pfx___devlink_port_type_set+0x10/0x10
[ 153.241240][ T5617] ? ip_vs_dst_event+0x171/0xc00
[ 153.243426][ T5617] ? unregister_netdevice_many_notify+0x1a3d/0x2140
[ 153.246277][ T5617] devlink_port_netdevice_event+0x25d/0x3a0
[ 153.248976][ T5617] notifier_call_chain+0x1a5/0x3d0
[ 153.251468][ T5617] unregister_netdevice_many_notify+0x1a76/0x2140
[ 153.254235][ T5617] ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 153.257153][ T5617] ? __mutex_lock+0x30b/0x1550
[ 153.259200][ T5617] ? do_raw_spin_lock+0x12b/0x2f0
[ 153.261442][ T5617] unregister_netdevice_queue+0x2f5/0x340
[ 153.263768][ T5617] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 153.266500][ T5617] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 153.269097][ T5617] nsim_destroy+0x275/0x800
[ 153.271201][ T5617] __nsim_dev_port_del+0x14e/0x200
[ 153.273508][ T5617] nsim_dev_reload_destroy+0x288/0x490
[ 153.276477][ T5617] nsim_drv_remove+0x58/0x170
[ 153.278647][ T5617] ? __pfx_nsim_bus_remove+0x10/0x10
[ 153.280936][ T5617] device_release_driver_internal+0x48b/0x880
[ 153.283540][ T5617] bus_remove_device+0x444/0x560
[ 153.285666][ T5617] ? __pfx_bus_remove_device+0x10/0x10
[ 153.288031][ T5617] ? kernfs_remove_by_name_ns+0x101/0x140
[ 153.290427][ T5617] device_del+0x524/0x8f0
[ 153.292342][ T5617] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 153.294914][ T5617] ? __pfx_device_del+0x10/0x10
[ 153.297150][ T5617] ? lock_acquire+0x115/0x350
[ 153.299228][ T5617] device_unregister+0x21/0xf0
[ 153.301240][ T5617] del_device_store+0x2b5/0x370
[ 153.303402][ T5617] ? __pfx_del_device_store+0x10/0x10
[ 153.305749][ T5617] ? sysfs_file_kobj+0x1e4/0x230
[ 153.307935][ T5617] ? sysfs_kf_write+0x166/0x260
[ 153.310153][ T5617] ? __pfx_sysfs_kf_write+0x10/0x10
[ 153.312293][ T5617] kernfs_fop_write_iter+0x3a4/0x540
[ 153.314573][ T5617] vfs_write+0x612/0xba0
[ 153.316414][ T5617] ? __pfx_vfs_write+0x10/0x10
[ 153.318503][ T5617] ? do_sys_openat2+0x14e/0x200
[ 153.320693][ T5617] ? kmem_cache_free+0x182/0x650
[ 153.322855][ T5617] ksys_write+0x150/0x270
[ 153.324795][ T5617] ? __pfx_ksys_write+0x10/0x10
[ 153.326864][ T5617] do_syscall_64+0x166/0x520
[ 153.328813][ T5617] ? trace_irq_disable+0x3b/0x140
[ 153.331044][ T5617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 153.333684][ T5617] ? clear_bhb_loop+0x70/0xc0
[ 153.335773][ T5617] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 153.338375][ T5617] RIP: 0033:0x7fb10e25df77
[ 153.340410][ T5617] Code: 48 89 fa 4c 89 df e8 98 1e 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 153.348858][ T5617] RSP: 002b:00007ffd1f1777c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[ 153.352561][ T5617] RAX: ffffffffffffffda RBX: 0000555587f6f400 RCX: 00007fb10e25df77
[ 153.356091][ T5617] RDX: 0000000000000003 RSI: 00007fb10e29d08b RDI: 0000000000000003
[ 153.359487][ T5617] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 153.362998][ T5617] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd1f177938
[ 153.366299][ T5617] R13: 0000000000000002 R14: 00007fb10e2c5c80 R15: 0000000000000002
[ 153.369318][ T5617]
[ 153.371776][ T5617] Kernel Offset: disabled
[ 153.373568][ T5617] Rebooting in 86400 seconds..