Warning: Permanently added '[localhost]:39635' (ED25519) to the list of known hosts. 2026/11/01 18:02:43 parsed 1 programs 2026/11/01 18:02:43 serving rpc on tcp://43219 syzkaller login: [ 124.801692][ T5314] cgroup: Unknown subsys name 'net' [ 124.878430][ T5314] cgroup: Unknown subsys name 'cpuset' [ 124.885284][ T5314] cgroup: Unknown subsys name 'rlimit' qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x183000) [ 125.225061][ T1029] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x400000) [ 125.225073][ T1029] ata1: failed to read log page 10h (errno=-5) [ 125.225082][ T1029] ata1.00: exception Emask 0x1 SAct 0x1800 SErr 0x0 action 0x0 [ 125.225098][ T1029] ata1.00: irq_stat 0x41000000 [ 125.225105][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 125.225109][ T1029] ata1.00: cmd 61/18:58:1e:35:08/0c:00:00:00:00/40 tag 11 ncq dma 1585152 ou [ 125.225109][ T1029] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 125.225128][ T1029] ata1.00: status: { DRDY } [ 125.225136][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 125.225142][ T1029] ata1.00: cmd 61/00:60:36:41:08/20:00:00:00:00/40 tag 12 ncq dma 4194304 ou [ 125.225142][ T1029] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 125.225168][ T1029] ata1.00: status: { DRDY } [ 125.226984][ T1029] ata1.00: configured for UDMA/100 [ 125.229794][ T1029] ata1: EH complete [ 125.294293][ T1029] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 125.294312][ T1029] ata1: failed to read log page 10h (errno=-5) [ 125.294322][ T1029] ata1.00: NCQ disabled due to excessive errors [ 125.294331][ T1029] ata1.00: exception Emask 0x1 SAct 0x7c0000 SErr 0x0 action 0x0 [ 125.294341][ T1029] ata1.00: irq_stat 0x41000000 [ 125.294351][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 125.294357][ T1029] ata1.00: cmd 61/00:90:36:61:08/20:00:00:00:00/40 tag 18 ncq dma 4194304 ou [ 125.294357][ T1029] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 125.294386][ T1029] ata1.00: status: { DRDY } [ 125.294393][ T1029] ata1.00: error: { ABRT } [ 125.294402][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 125.294408][ T1029] ata1.00: cmd 61/18:98:1e:35:08/0c:00:00:00:00/40 tag 19 ncq dma 1585152 ou [ 125.294408][ T1029] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 125.294435][ T1029] ata1.00: status: { DRDY } [ 125.294441][ T1029] ata1.00: error: { ABRT } [ 125.294448][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 125.294454][ T1029] ata1.00: cmd 61/00:a0:36:41:08/20:00:00:00:00/40 tag 20 ncq dma 4194304 ou [ 125.294454][ T1029] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 125.294481][ T1029] ata1.00: status: { DRDY } [ 125.294488][ T1029] ata1.00: error: { ABRT } [ 125.294496][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 125.294501][ T1029] ata1.00: cmd 61/00:a8:36:81:08/20:00:00:00:00/40 tag 21 ncq dma 4194304 ou [ 125.294501][ T1029] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 125.294528][ T1029] ata1.00: status: { DRDY } [ 125.294535][ T1029] ata1.00: error: { ABRT } [ 125.294543][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 125.294548][ T1029] ata1.00: cmd 61/08:b0:1e:1f:04/00:00:00:00:00/40 tag 22 ncq dma 4096 out [ 125.294548][ T1029] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 125.294576][ T1029] ata1.00: status: { DRDY } [ 125.294582][ T1029] ata1.00: error: { ABRT } [ 125.295571][ T1029] ata1.00: configured for UDMA/100 [ 125.296264][ T1029] ata1: EH complete [ 125.392716][ T1029] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 125.392733][ T1029] ata1.00: irq_stat 0x40000000 [ 125.392743][ T1029] ata1.00: failed command: WRITE DMA EXT [ 125.392750][ T1029] ata1.00: cmd 35/00:00:36:61:08/00:20:00:00:00/e0 tag 11 dma 4194304 out [ 125.392750][ T1029] res 41/04:00:36:61:08/00:20:00:00:00/e0 Emask 0x1 (device error) [ 125.392776][ T1029] ata1.00: status: { DRDY ERR } [ 125.392780][ T1029] ata1.00: error: { ABRT } [ 125.415907][ T1029] ata1.00: configured for UDMA/100 [ 125.416095][ T1029] ata1: EH complete [ 125.433583][ T1029] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 125.433604][ T1029] ata1.00: irq_stat 0x40000000 [ 125.433614][ T1029] ata1.00: failed command: WRITE DMA EXT [ 125.433620][ T1029] ata1.00: cmd 35/00:18:1e:35:08/00:0c:00:00:00/e0 tag 14 dma 1585152 out [ 125.433620][ T1029] res 41/04:18:1e:35:08/00:0c:00:00:00/e0 Emask 0x1 (device error) [ 125.433648][ T1029] ata1.00: status: { DRDY ERR } [ 125.433655][ T1029] ata1.00: error: { ABRT } [ 125.434611][ T1029] ata1.00: configured for UDMA/100 [ 125.434668][ T1029] ata1: EH complete Setting up swapspace version 1, size = 127995904 bytes [ 126.941168][ T5314] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 132.800448][ T5328] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 135.205358][ T5354] br_netfilter no longer supported in user namespaces [ 136.049352][ T5361] rxe_eth0 speed is unknown, defaulting to 1000 [ 136.094423][ T5361] rxe_eth0 speed is unknown, defaulting to 1000 [ 136.113999][ T5361] rxe_eth0 speed is unknown, defaulting to 1000 [ 136.322434][ T5361] infiniband rxe0: set active [ 136.323552][ T5361] infiniband rxe0: added rxe_eth0 [ 136.324828][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 136.345000][ T5361] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 136.345033][ T5361] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 136.345052][ T5361] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 136.396807][ T5361] RDS/IB: rxe0: added [ 136.399504][ T5361] smc: adding ib device rxe0 with port count 1 [ 136.399568][ T5361] smc: ib device rxe0 port 1 has no pnetid [ 136.400497][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 136.436712][ T5361] rxe_eth0 speed is unknown, defaulting to 1000 [ 136.768225][ T5361] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.769427][ T5361] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.769706][ T5361] bridge_slave_0: entered allmulticast mode [ 136.770819][ T5361] bridge_slave_0: entered promiscuous mode [ 136.788028][ T5361] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.788132][ T5361] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.788403][ T5361] bridge_slave_1: entered allmulticast mode [ 136.789619][ T5361] bridge_slave_1: entered promiscuous mode [ 136.847886][ T5361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.850422][ T5361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.883484][ T5361] team0: Port device team_slave_0 added [ 136.886002][ T5361] team0: Port device team_slave_1 added [ 136.921284][ T5361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.921299][ T5361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.921313][ T5361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.948007][ T5361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.948021][ T5361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.948034][ T5361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.064715][ T5361] hsr_slave_0: entered promiscuous mode [ 137.066506][ T5361] hsr_slave_1: entered promiscuous mode [ 137.483590][ T5361] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 137.500994][ T5361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 137.506564][ T5361] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 137.521258][ T5361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 137.527431][ T5361] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 137.539523][ T5361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 137.542358][ T5361] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 137.555399][ T5361] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 137.652616][ T5361] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.652708][ T5361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.653306][ T5361] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.653426][ T5361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.718829][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.721814][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.827739][ T5361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.872318][ T5361] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.890678][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.890753][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.910171][ T1059] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.910307][ T1059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.107388][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.108763][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.542497][ T5361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.631864][ T5361] veth0_vlan: entered promiscuous mode [ 138.648390][ T5361] veth1_vlan: entered promiscuous mode [ 138.714572][ T5361] veth0_macvtap: entered promiscuous mode [ 138.729922][ T5361] veth1_macvtap: entered promiscuous mode [ 138.772762][ T5361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.787240][ T5361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.863916][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.864864][ T1059] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.864890][ T1059] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.864908][ T1059] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.285201][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.308097][ T5406] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.312141][ T5406] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.320292][ T5406] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.320999][ T5406] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.321372][ T5406] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.385631][ T5405] rxe_eth0 speed is unknown, defaulting to 1000 [ 139.855405][ T5414] rxe_eth0 speed is unknown, defaulting to 1000 [ 140.130472][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.240718][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.240736][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.289597][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.289614][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.925051][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.964865][ T5421] rxe_eth0 speed is unknown, defaulting to 1000 [ 141.205202][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.442455][ T59] bridge_slave_1: left allmulticast mode [ 141.442492][ T59] bridge_slave_1: left promiscuous mode [ 141.443288][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.464827][ T59] bridge_slave_0: left allmulticast mode [ 141.464849][ T59] bridge_slave_0: left promiscuous mode [ 141.465759][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.933778][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.941028][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.979537][ T59] bond0 (unregistering): Released all slaves [ 142.094975][ T5428] rxe_eth0 speed is unknown, defaulting to 1000 [ 142.644841][ T5011] 8021q: adding VLAN 0 to HW filter on device eth2 [ 142.817045][ T59] hsr_slave_0: left promiscuous mode [ 142.819202][ T59] hsr_slave_1: left promiscuous mode [ 142.821476][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.821504][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.848947][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.848987][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.917121][ T59] veth1_macvtap: left promiscuous mode [ 142.917943][ T59] veth0_macvtap: left promiscuous mode [ 142.918037][ T59] veth1_vlan: left promiscuous mode [ 142.918145][ T59] veth0_vlan: left promiscuous mode [ 143.471103][ T59] team0 (unregistering): Port device team_slave_1 removed [ 143.486358][ T59] team0 (unregistering): Port device team_slave_0 removed [ 143.608341][ T5011] 8021q: adding VLAN 0 to HW filter on device eth3 [ 143.682835][ T5444] rxe_eth0 speed is unknown, defaulting to 1000 [ 144.455563][ T5011] 8021q: adding VLAN 0 to HW filter on device eth4 [ 145.702973][ T5467] rxe_eth0 speed is unknown, defaulting to 1000 [ 145.734765][ T5011] 8021q: adding VLAN 0 to HW filter on device eth5 [ 146.932358][ T5479] rxe_eth0 speed is unknown, defaulting to 1000 [ 147.882955][ T5488] rxe_eth0 speed is unknown, defaulting to 1000 [ 148.728488][ T5496] rxe_eth0 speed is unknown, defaulting to 1000 [ 148.899398][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 149.466911][ T5509] rxe_eth0 speed is unknown, defaulting to 1000 2026/11/01 18:03:12 executed programs: 0 [ 150.496691][ T4664] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.497919][ T4664] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.498348][ T4664] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.499796][ T4664] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.500236][ T4664] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.060648][ T5515] rxe_eth0 speed is unknown, defaulting to 1000 [ 151.382614][ T5515] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.382737][ T5515] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.382818][ T5515] bridge_slave_0: entered allmulticast mode [ 151.395356][ T5515] bridge_slave_0: entered promiscuous mode [ 151.401876][ T5515] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.401987][ T5515] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.402072][ T5515] bridge_slave_1: entered allmulticast mode [ 151.415890][ T5515] bridge_slave_1: entered promiscuous mode [ 151.442398][ T5515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.450061][ T5515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.473348][ T5515] team0: Port device team_slave_0 added [ 151.476061][ T5515] team0: Port device team_slave_1 added [ 151.497756][ T5515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.497771][ T5515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.497791][ T5515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.499314][ T5515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.499324][ T5515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.499338][ T5515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.569623][ T5515] hsr_slave_0: entered promiscuous mode [ 151.570336][ T5515] hsr_slave_1: entered promiscuous mode [ 152.194352][ T5515] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 152.208238][ T5515] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.209132][ T5515] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 152.222080][ T5515] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 152.227441][ T5515] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 152.238416][ T5515] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 152.239314][ T5515] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 152.255181][ T5515] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 152.417649][ T5515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.450993][ T5515] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.471322][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.471393][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.491809][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.491880][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.587338][ T5406] Bluetooth: hci0: command tx timeout [ 153.269481][ T5515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.369005][ T5515] veth0_vlan: entered promiscuous mode [ 153.410554][ T5515] veth1_vlan: entered promiscuous mode [ 153.470596][ T5515] veth0_macvtap: entered promiscuous mode [ 153.486227][ T5515] veth1_macvtap: entered promiscuous mode [ 153.519349][ T5515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.535519][ T5515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.654924][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.684124][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.735344][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.735957][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.802785][ T186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.802833][ T186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.881696][ T186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.881713][ T186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.094035][ T5581] ------------[ cut here ]------------ [ 154.094101][ T5581] 1 [ 154.094105][ T5581] WARNING: mm/slub.c:5459 at ___kmalloc_large_node+0x10c/0x170, CPU#0: syz.0.17/5581 [ 154.101893][ T5581] Modules linked in: [ 154.104019][ T5581] CPU: 0 UID: 0 PID: 5581 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 154.107926][ T5581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.112117][ T5581] RIP: 0010:___kmalloc_large_node+0x10c/0x170 [ 154.114894][ T5581] Code: 41 c7 46 30 00 00 00 f8 eb 03 45 31 ff 4c 89 ff 48 89 de 89 ea 5b 41 5c 41 5e 41 5f 5d e9 7c cb 0b 00 c6 05 98 ba 71 0f 01 90 <0f> 0b 90 31 c0 5b 41 5c 41 5e 41 5f 5d e9 52 31 d4 09 cc 89 ef 89 [ 154.122908][ T5581] RSP: 0018:ffffc90001bc7a00 EFLAGS: 00010246 [ 154.125669][ T5581] RAX: 0000000000000000 RBX: 0000000100000920 RCX: ffff888035548000 [ 154.129105][ T5581] RDX: 00000000ffffffff RSI: 0000000000000cc0 RDI: 0000000100000920 [ 154.132403][ T5581] RBP: 0000000000000cc0 R08: ffffffff85a49759 R09: 0000000000000000 [ 154.135882][ T5581] R10: dffffc0000000000 R11: ffffffff85adb330 R12: 1ffff92000378fb9 [ 154.139292][ T5581] R13: ffffffff85adaf1a R14: 0000000100000920 R15: 0000000100000920 [ 154.142737][ T5581] FS: 000055558d7c8500(0000) GS:ffff88808aa01000(0000) knlGS:0000000000000000 [ 154.146734][ T5581] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.149631][ T5581] CR2: 00007f2b5e388b80 CR3: 000000004536c000 CR4: 0000000000352ef0 [ 154.153275][ T5581] Call Trace: [ 154.154692][ T5581] [ 154.156131][ T5581] __kmalloc_large_node_noprof+0x18/0x90 [ 154.159313][ T5581] __kmalloc_noprof+0x3f6/0x710 [ 154.161848][ T5581] ? drm_syncobj_array_find+0x3a/0x440 [ 154.164406][ T5581] drm_syncobj_array_find+0x3a/0x440 [ 154.166624][ T5581] drm_syncobj_timeline_wait_ioctl+0x18a/0x640 [ 154.169232][ T5581] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 154.171949][ T5581] drm_ioctl_kernel+0x2df/0x3b0 [ 154.174172][ T5581] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 154.177002][ T5581] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 154.179235][ T5581] ? __might_fault+0xaf/0x130 [ 154.181253][ T5581] drm_ioctl+0x70e/0xba0 [ 154.183346][ T5581] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 154.186298][ T5581] ? __pfx_drm_ioctl+0x10/0x10 [ 154.188562][ T5581] ? __pfx___se_sys_futex+0x10/0x10 [ 154.190962][ T5581] ? bpf_lsm_file_ioctl+0x9/0x20 [ 154.193618][ T5581] ? __pfx_drm_ioctl+0x10/0x10 [ 154.196109][ T5581] __se_sys_ioctl+0xfc/0x170 [ 154.198162][ T5581] do_syscall_64+0x166/0x520 [ 154.200375][ T5581] ? trace_irq_disable+0x3b/0x140 [ 154.202430][ T5581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.204983][ T5581] ? clear_bhb_loop+0x70/0xc0 [ 154.206952][ T5581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.209605][ T5581] RIP: 0033:0x7f2b5e39f559 [ 154.211647][ T5581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.220176][ T5581] RSP: 002b:00007ffe5342e528 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.223802][ T5581] RAX: ffffffffffffffda RBX: 00007f2b5e625fa0 RCX: 00007f2b5e39f559 [ 154.227243][ T5581] RDX: 0000200000000280 RSI: 00000000c03064ca RDI: 0000000000000004 [ 154.230626][ T5581] RBP: 00007f2b5e436b50 R08: 0000000000000000 R09: 0000000000000000 [ 154.234139][ T5581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.237683][ T5581] R13: 00007f2b5e625fac R14: 00007f2b5e625fa0 R15: 00007f2b5e625fa0 [ 154.241114][ T5581] [ 154.242500][ T5581] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 154.245751][ T5581] CPU: 0 UID: 0 PID: 5581 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 154.249714][ T5581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.254095][ T5581] Call Trace: [ 154.255604][ T5581] [ 154.256914][ T5581] vpanic+0x26f/0x710 [ 154.258827][ T5581] panic+0xc5/0xd0 [ 154.260612][ T5581] ? __pfx_panic+0x10/0x10 [ 154.262632][ T5581] __warn+0x315/0x4c0 [ 154.264327][ T5581] ? ___kmalloc_large_node+0x10c/0x170 [ 154.266747][ T5581] ? ___kmalloc_large_node+0x10c/0x170 [ 154.269251][ T5581] __report_bug+0x276/0x570 [ 154.271339][ T5581] ? kernel_text_address+0xa5/0xe0 [ 154.274839][ T5581] ? ___kmalloc_large_node+0x10c/0x170 [ 154.277276][ T5581] ? __pfx___report_bug+0x10/0x10 [ 154.279501][ T5581] ? stack_trace_save+0xa9/0x100 [ 154.281712][ T5581] ? __pfx_stack_trace_save+0x10/0x10 [ 154.284089][ T5581] ? kasan_save_track+0x4f/0x80 [ 154.286215][ T5581] ? ___kmalloc_large_node+0x10c/0x170 [ 154.288604][ T5581] report_bug+0x16b/0x220 [ 154.290516][ T5581] ? ___kmalloc_large_node+0x10c/0x170 [ 154.292903][ T5581] ? ___kmalloc_large_node+0x10e/0x170 [ 154.295361][ T5581] handle_bug+0x9c/0x200 [ 154.297274][ T5581] exc_invalid_op+0x1a/0x50 [ 154.299334][ T5581] asm_exc_invalid_op+0x1a/0x20 [ 154.301466][ T5581] RIP: 0010:___kmalloc_large_node+0x10c/0x170 [ 154.304137][ T5581] Code: 41 c7 46 30 00 00 00 f8 eb 03 45 31 ff 4c 89 ff 48 89 de 89 ea 5b 41 5c 41 5e 41 5f 5d e9 7c cb 0b 00 c6 05 98 ba 71 0f 01 90 <0f> 0b 90 31 c0 5b 41 5c 41 5e 41 5f 5d e9 52 31 d4 09 cc 89 ef 89 [ 154.312425][ T5581] RSP: 0018:ffffc90001bc7a00 EFLAGS: 00010246 [ 154.315364][ T5581] RAX: 0000000000000000 RBX: 0000000100000920 RCX: ffff888035548000 [ 154.318611][ T5581] RDX: 00000000ffffffff RSI: 0000000000000cc0 RDI: 0000000100000920 [ 154.322002][ T5581] RBP: 0000000000000cc0 R08: ffffffff85a49759 R09: 0000000000000000 [ 154.325973][ T5581] R10: dffffc0000000000 R11: ffffffff85adb330 R12: 1ffff92000378fb9 [ 154.329640][ T5581] R13: ffffffff85adaf1a R14: 0000000100000920 R15: 0000000100000920 [ 154.333114][ T5581] ? drm_syncobj_array_find+0x3a/0x440 [ 154.335515][ T5581] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 154.338422][ T5581] ? drm_dev_enter+0x49/0x150 [ 154.340504][ T5581] __kmalloc_large_node_noprof+0x18/0x90 [ 154.343036][ T5581] __kmalloc_noprof+0x3f6/0x710 [ 154.345136][ T5581] ? drm_syncobj_array_find+0x3a/0x440 [ 154.347553][ T5581] drm_syncobj_array_find+0x3a/0x440 [ 154.349786][ T5581] drm_syncobj_timeline_wait_ioctl+0x18a/0x640 [ 154.352206][ T5581] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 154.354756][ T5581] drm_ioctl_kernel+0x2df/0x3b0 [ 154.356686][ T5581] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 154.359607][ T5581] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 154.361982][ T5581] ? __might_fault+0xaf/0x130 [ 154.364093][ T5581] drm_ioctl+0x70e/0xba0 [ 154.365992][ T5581] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 154.368983][ T5581] ? __pfx_drm_ioctl+0x10/0x10 [ 154.371102][ T5581] ? __pfx___se_sys_futex+0x10/0x10 [ 154.373387][ T5581] ? bpf_lsm_file_ioctl+0x9/0x20 [ 154.375605][ T5581] ? __pfx_drm_ioctl+0x10/0x10 [ 154.377718][ T5581] __se_sys_ioctl+0xfc/0x170 [ 154.379820][ T5581] do_syscall_64+0x166/0x520 [ 154.381833][ T5581] ? trace_irq_disable+0x3b/0x140 [ 154.384084][ T5581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.386717][ T5581] ? clear_bhb_loop+0x70/0xc0 [ 154.388906][ T5581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.391533][ T5581] RIP: 0033:0x7f2b5e39f559 [ 154.393492][ T5581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.401878][ T5581] RSP: 002b:00007ffe5342e528 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.405529][ T5581] RAX: ffffffffffffffda RBX: 00007f2b5e625fa0 RCX: 00007f2b5e39f559 [ 154.408835][ T5581] RDX: 0000200000000280 RSI: 00000000c03064ca RDI: 0000000000000004 [ 154.412008][ T5581] RBP: 00007f2b5e436b50 R08: 0000000000000000 R09: 0000000000000000 [ 154.415375][ T5581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.418715][ T5581] R13: 00007f2b5e625fac R14: 00007f2b5e625fa0 R15: 00007f2b5e625fa0 [ 154.422091][ T5581] [ 154.423810][ T5581] Kernel Offset: disabled [ 154.425687][ T5581] Rebooting in 86400 seconds..