syzkaller login: [ 96.934048][ T1379] cfg80211: failed to load regulatory.db qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x1f1000) [ 165.411651][ T1029] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 165.422667][ T1029] ata1: failed to read log page 10h (errno=-5) [ 165.428652][ T1029] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 165.436204][ T1029] ata1.00: irq_stat 0x41000000 [ 165.440442][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 165.450130][ T1029] ata1.00: cmd 61/88:70:ae:71:04/0f:00:00:00:00/40 tag 14 ncq dma 2035712 ou [ 165.450130][ T1029] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 165.461625][ T1029] ata1.00: status: { DRDY } [ 165.470091][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 165.473006][ T1029] ata1.00: cmd 61/00:78:36:81:04/20:00:00:00:00/40 tag 15 ncq dma 4194304 ou [ 165.473006][ T1029] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 165.490177][ T1029] ata1.00: status: { DRDY } [ 165.495533][ T1029] ata1.00: configured for UDMA/100 [ 165.500565][ T1029] ata1: EH complete qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x400000) qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x400000) [ 165.531420][ T1029] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 165.534123][ T1029] ata1: failed to read log page 10h (errno=-5) [ 165.536788][ T1029] ata1.00: exception Emask 0x1 SAct 0x78000000 SErr 0x0 action 0x0 [ 165.539765][ T1029] ata1.00: irq_stat 0x41000000 [ 165.554391][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 165.557820][ T1029] ata1.00: cmd 61/00:d8:36:c1:04/20:00:00:00:00/40 tag 27 ncq dma 4194304 ou [ 165.557820][ T1029] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 165.578544][ T1029] ata1.00: status: { DRDY } [ 165.582051][ T1029] ata1.00: error: { ABRT } [ 165.588957][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 165.595753][ T1029] ata1.00: cmd 61/00:e0:36:a1:04/20:00:00:00:00/40 tag 28 ncq dma 4194304 ou [ 165.595753][ T1029] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 165.611284][ T1029] ata1.00: status: { DRDY } [ 165.615427][ T1029] ata1.00: error: { ABRT } [ 165.621934][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 165.628054][ T1029] ata1.00: cmd 61/88:e8:ae:71:04/0f:00:00:00:00/40 tag 29 ncq dma 2035712 ou [ 165.628054][ T1029] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 165.646062][ T1029] ata1.00: status: { DRDY } [ 165.648120][ T1029] ata1.00: error: { ABRT } [ 165.652871][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 165.661452][ T1029] ata1.00: cmd 61/00:f0:36:81:04/20:00:00:00:00/40 tag 30 ncq dma 4194304 ou [ 165.661452][ T1029] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 165.679310][ T1029] ata1.00: status: { DRDY } [ 165.682378][ T1029] ata1.00: error: { ABRT } [ 165.687496][ T1029] ata1.00: configured for UDMA/100 [ 165.695971][ T1029] ata1: EH complete qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x1f1000) [ 165.721091][ T1029] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 165.724088][ T1029] ata1: failed to read log page 10h (errno=-5) [ 165.726689][ T1029] ata1.00: exception Emask 0x1 SAct 0xf000 SErr 0x0 action 0x0 [ 165.729826][ T1029] ata1.00: irq_stat 0x41000000 [ 165.737043][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 165.743772][ T1029] ata1.00: cmd 61/00:60:36:c1:04/20:00:00:00:00/40 tag 12 ncq dma 4194304 ou [ 165.743772][ T1029] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 165.761199][ T1029] ata1.00: status: { DRDY } [ 165.763243][ T1029] ata1.00: error: { ABRT } [ 165.765161][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 165.767709][ T1029] ata1.00: cmd 61/00:68:36:a1:04/20:00:00:00:00/40 tag 13 ncq dma 4194304 ou [ 165.767709][ T1029] res 50/04:01:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 165.789089][ T1029] ata1.00: status: { DRDY } [ 165.800195][ T1029] ata1.00: error: { ABRT } [ 165.802526][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 165.805136][ T1029] ata1.00: cmd 61/88:70:ae:71:04/0f:00:00:00:00/40 tag 14 ncq dma 2035712 ou [ 165.805136][ T1029] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 165.828591][ T1029] ata1.00: status: { DRDY } [ 165.831329][ T1029] ata1.00: error: { ABRT } [ 165.833327][ T1029] ata1.00: failed command: WRITE FPDMA QUEUED [ 165.835905][ T1029] ata1.00: cmd 61/00:78:36:81:04/20:00:00:00:00/40 tag 15 ncq dma 4194304 ou [ 165.835905][ T1029] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 165.857003][ T1029] ata1.00: status: { DRDY } [ 165.860595][ T1029] ata1.00: error: { ABRT } [ 165.866112][ T1029] ata1.00: configured for UDMA/100 [ 165.874539][ T1029] ata1: EH complete Warning: Permanently added '[localhost]:22891' (ED25519) to the list of known hosts. 2026/06/02 02:16:16 parsed 1 programs [ 174.478029][ T5322] cgroup: Unknown subsys name 'net' [ 174.525840][ T5322] cgroup: Unknown subsys name 'cpuset' [ 174.531950][ T5322] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 176.379688][ T5322] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 183.375090][ T5330] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.390765][ T5330] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.394814][ T5330] bridge_slave_0: entered allmulticast mode [ 183.399139][ T5330] bridge_slave_0: entered promiscuous mode [ 183.418570][ T5330] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.440770][ T5330] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.446252][ T5330] bridge_slave_1: entered allmulticast mode [ 183.457865][ T5330] bridge_slave_1: entered promiscuous mode [ 183.539941][ T5330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.582882][ T5330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.645922][ T5330] team0: Port device team_slave_0 added [ 183.664244][ T5330] team0: Port device team_slave_1 added [ 183.731276][ T5330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.740246][ T5330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.760651][ T5330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.777026][ T5330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.790147][ T5330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.811231][ T5330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.881626][ T5330] hsr_slave_0: entered promiscuous mode [ 183.891738][ T5330] hsr_slave_1: entered promiscuous mode [ 184.239881][ T5330] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 184.266140][ T5330] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.284480][ T5330] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 184.297741][ T5330] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 184.313565][ T5330] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 184.323937][ T5330] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 184.331715][ T5330] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 184.347676][ T5330] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 184.529529][ T5330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.568133][ T5330] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.587829][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.591457][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.628584][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.631793][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.726459][ T5330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 184.737073][ T5330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.138872][ T5330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.195971][ T5330] veth0_vlan: entered promiscuous mode [ 185.206513][ T5330] veth1_vlan: entered promiscuous mode [ 185.246106][ T5330] veth0_macvtap: entered promiscuous mode [ 185.254528][ T5330] veth1_macvtap: entered promiscuous mode [ 185.276498][ T5330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.288375][ T5330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.305725][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.327878][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.336205][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.353834][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.495614][ T5330] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 185.926709][ T1059] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.978095][ T1059] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.029023][ T1059] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.164723][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.177603][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.268589][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.281425][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.929946][ T1059] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.359669][ T1059] bridge_slave_1: left allmulticast mode [ 188.369847][ T1059] bridge_slave_1: left promiscuous mode [ 188.383882][ T1059] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.435930][ T1059] bridge_slave_0: left allmulticast mode [ 188.449030][ T1059] bridge_slave_0: left promiscuous mode [ 188.461723][ T1059] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.971994][ T1059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.991231][ T1059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.006237][ T1059] bond0 (unregistering): Released all slaves [ 189.169952][ T1059] hsr_slave_0: left promiscuous mode [ 189.185831][ T1059] hsr_slave_1: left promiscuous mode [ 189.202722][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.220451][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.259544][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.272758][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.327191][ T1059] veth1_macvtap: left promiscuous mode [ 189.341151][ T1059] veth0_macvtap: left promiscuous mode [ 189.350442][ T1059] veth1_vlan: left promiscuous mode [ 189.353244][ T1059] veth0_vlan: left promiscuous mode [ 189.962573][ T1059] team0 (unregistering): Port device team_slave_1 removed [ 189.985084][ T1059] team0 (unregistering): Port device team_slave_0 removed [ 191.385241][ T5002] 8021q: adding VLAN 0 to HW filter on device eth2 [ 192.341347][ T5002] 8021q: adding VLAN 0 to HW filter on device eth3 [ 193.078629][ T5002] 8021q: adding VLAN 0 to HW filter on device eth4 [ 194.036211][ T5002] 8021q: adding VLAN 0 to HW filter on device eth5 [ 195.383980][ T5455] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.390821][ T5455] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.394269][ T5455] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.397669][ T5455] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.401357][ T5455] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/06/02 02:16:43 executed programs: 0 [ 199.027197][ T4656] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.034785][ T4656] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.039016][ T4656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.042614][ T4656] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.046904][ T4656] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x1dc000) [ 199.611684][ T5481] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.620483][ T5481] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.630610][ T5481] bridge_slave_0: entered allmulticast mode [ 199.637249][ T5481] bridge_slave_0: entered promiscuous mode [ 199.648537][ T5481] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.652389][ T5481] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.655608][ T5481] bridge_slave_1: entered allmulticast mode [ 199.659570][ T5481] bridge_slave_1: entered promiscuous mode [ 199.688836][ T5481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.695273][ T5481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.721295][ T5481] team0: Port device team_slave_0 added [ 199.726377][ T5481] team0: Port device team_slave_1 added [ 199.749207][ T5481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.752543][ T5481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.764437][ T5481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.770652][ T5481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.773780][ T5481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.785724][ T5481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.826667][ T5481] hsr_slave_0: entered promiscuous mode [ 199.829768][ T5481] hsr_slave_1: entered promiscuous mode [ 200.505532][ T5481] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 200.522530][ T5481] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 200.532333][ T5481] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 200.544625][ T5481] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 200.560743][ T5481] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 200.569305][ T5481] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 200.578652][ T5481] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 200.596596][ T5481] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 200.789638][ T5481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.819694][ T5481] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.838977][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.842284][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.864492][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.867652][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.091598][ T4656] Bluetooth: hci0: command tx timeout [ 201.624671][ T5481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.706034][ T5481] veth0_vlan: entered promiscuous mode [ 201.739599][ T5481] veth1_vlan: entered promiscuous mode [ 201.805704][ T5481] veth0_macvtap: entered promiscuous mode [ 201.827338][ T5481] veth1_macvtap: entered promiscuous mode [ 201.867974][ T5481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.884604][ T5481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.909569][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.919498][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.934066][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.943741][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.155825][ T178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.169156][ T178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.243128][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.254927][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.913258][ T5549] loop0: detected capacity change from 0 to 32768 [ 202.943006][ T5549] ======================================================= [ 202.943006][ T5549] WARNING: The mand mount option has been deprecated and [ 202.943006][ T5549] and is ignored by this kernel. Remove the mand [ 202.943006][ T5549] option from the mount to silence this warning. [ 202.943006][ T5549] ======================================================= [ 203.170440][ T4656] Bluetooth: hci0: command tx timeout [ 204.024801][ T110] ------------[ cut here ]------------ [ 204.027243][ T110] lp >= size || lp < 0 [ 204.027254][ T110] WARNING: fs/jfs/jfs_dmap.c:2962 at dbAdjTree+0x454/0x4e0, CPU#0: jfsCommit/110 [ 204.032874][ T110] Modules linked in: [ 204.035599][ T110] CPU: 0 UID: 0 PID: 110 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 204.039542][ T110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.043689][ T110] RIP: 0010:dbAdjTree+0x454/0x4e0 [ 204.047001][ T110] Code: 5a ff ff ff e8 3d a7 64 fe eb 05 e8 36 a7 64 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 1d a7 64 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff [ 204.055364][ T110] RSP: 0018:ffffc900013a7588 EFLAGS: 00010293 [ 204.058773][ T110] RAX: ffffffff83611ef3 RBX: ffff888054cea010 RCX: ffff888000f2ca80 [ 204.062570][ T110] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 204.065778][ T110] RBP: 0000000000020056 R08: ffffea0001533a87 R09: 1ffffd40002a6750 [ 204.068995][ T110] R10: dffffc0000000000 R11: fffff940002a6751 R12: ffff888054cea018 [ 204.072662][ T110] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 204.075885][ T110] FS: 0000000000000000(0000) GS:ffff88808c891000(0000) knlGS:0000000000000000 [ 204.079528][ T110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.082528][ T110] CR2: 00007f7755a49263 CR3: 000000000e74a000 CR4: 0000000000352ef0 [ 204.085799][ T110] Call Trace: [ 204.087299][ T110] [ 204.088476][ T110] ? __pfx_lock_metapage+0x10/0x10 [ 204.090845][ T110] dbJoin+0x238/0x300 [ 204.092568][ T110] dbFreeBits+0x4e1/0xdb0 [ 204.094413][ T110] dbFree+0x336/0x650 [ 204.096258][ T110] txFreeMap+0x9e6/0xde0 [ 204.097956][ T110] ? do_raw_spin_unlock+0x4d/0x210 [ 204.100230][ T110] xtTruncate+0xd38/0x2f20 [ 204.102180][ T110] ? __pfx_xtTruncate+0x10/0x10 [ 204.104352][ T110] ? __mark_inode_dirty+0x6ec/0x13b0 [ 204.106537][ T110] ? __asan_memset+0x22/0x50 [ 204.108482][ T110] ? __dquot_initialize+0x21b/0xd30 [ 204.110986][ T110] jfs_free_zero_link+0x35b/0x4c0 [ 204.113819][ T110] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 204.116443][ T110] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 204.119077][ T110] ? do_raw_spin_lock+0x12b/0x2f0 [ 204.121306][ T110] jfs_evict_inode+0x363/0x440 [ 204.123365][ T110] ? evict+0x612/0xb10 [ 204.125136][ T110] ? __pfx_jfs_evict_inode+0x10/0x10 [ 204.127272][ T110] evict+0x61e/0xb10 [ 204.128989][ T110] ? __pfx_evict+0x10/0x10 [ 204.131183][ T110] ? _raw_spin_unlock+0x28/0x50 [ 204.133213][ T110] ? iput+0xb25/0xe80 [ 204.134841][ T110] jfs_lazycommit+0x43d/0xaa0 [ 204.136802][ T110] ? __pfx_jfs_lazycommit+0x10/0x10 [ 204.139010][ T110] ? __pfx_default_wake_function+0x10/0x10 [ 204.141503][ T110] ? __kthread_parkme+0x7a/0x1f0 [ 204.143708][ T110] kthread+0x389/0x470 [ 204.145421][ T110] ? __pfx_jfs_lazycommit+0x10/0x10 [ 204.147751][ T110] ? __pfx_kthread+0x10/0x10 [ 204.149733][ T110] ret_from_fork+0x514/0xb70 [ 204.151910][ T110] ? __pfx_ret_from_fork+0x10/0x10 [ 204.154108][ T110] ? __switch_to+0xc79/0x1410 [ 204.156104][ T110] ? __pfx_kthread+0x10/0x10 [ 204.158061][ T110] ret_from_fork_asm+0x1a/0x30 [ 204.159952][ T110] [ 204.161645][ T110] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 204.164698][ T110] CPU: 0 UID: 0 PID: 110 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 204.168254][ T110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.172302][ T110] Call Trace: [ 204.173676][ T110] [ 204.174972][ T110] vpanic+0x56c/0xa60 [ 204.176748][ T110] ? __pfx__printk+0x10/0x10 [ 204.178789][ T110] ? __pfx_vpanic+0x10/0x10 [ 204.180750][ T110] ? is_bpf_text_address+0x292/0x2b0 [ 204.183053][ T110] ? is_bpf_text_address+0x26/0x2b0 [ 204.185168][ T110] panic+0xc5/0xd0 [ 204.186624][ T110] ? __pfx_panic+0x10/0x10 [ 204.188543][ T110] ? ret_from_fork_asm+0x1a/0x30 [ 204.190747][ T110] __warn+0x315/0x4c0 [ 204.192491][ T110] ? dbAdjTree+0x454/0x4e0 [ 204.194257][ T110] ? dbAdjTree+0x454/0x4e0 [ 204.196039][ T110] __report_bug+0x29a/0x540 [ 204.197872][ T110] ? arch_stack_walk+0x11b/0x150 [ 204.199921][ T110] ? dbAdjTree+0x454/0x4e0 [ 204.201796][ T110] ? __pfx___report_bug+0x10/0x10 [ 204.204031][ T110] ? filemap_get_entry+0xcd/0x3f0 [ 204.205976][ T110] ? dbAdjTree+0x454/0x4e0 [ 204.207800][ T110] report_bug+0x16a/0x220 [ 204.209368][ T110] ? dbAdjTree+0x454/0x4e0 [ 204.211264][ T110] ? dbAdjTree+0x456/0x4e0 [ 204.213248][ T110] handle_bug+0x9c/0x200 [ 204.214992][ T110] exc_invalid_op+0x1a/0x50 [ 204.216889][ T110] asm_exc_invalid_op+0x1a/0x20 [ 204.218873][ T110] RIP: 0010:dbAdjTree+0x454/0x4e0 [ 204.221019][ T110] Code: 5a ff ff ff e8 3d a7 64 fe eb 05 e8 36 a7 64 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 1d a7 64 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff [ 204.228278][ T110] RSP: 0018:ffffc900013a7588 EFLAGS: 00010293 [ 204.230590][ T110] RAX: ffffffff83611ef3 RBX: ffff888054cea010 RCX: ffff888000f2ca80 [ 204.233546][ T110] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 204.236677][ T110] RBP: 0000000000020056 R08: ffffea0001533a87 R09: 1ffffd40002a6750 [ 204.239618][ T110] R10: dffffc0000000000 R11: fffff940002a6751 R12: ffff888054cea018 [ 204.242843][ T110] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 204.246009][ T110] ? dbAdjTree+0x453/0x4e0 [ 204.247940][ T110] ? dbAdjTree+0x453/0x4e0 [ 204.249830][ T110] ? __pfx_lock_metapage+0x10/0x10 [ 204.252109][ T110] dbJoin+0x238/0x300 [ 204.253890][ T110] dbFreeBits+0x4e1/0xdb0 [ 204.255795][ T110] dbFree+0x336/0x650 [ 204.257577][ T110] txFreeMap+0x9e6/0xde0 [ 204.259592][ T110] ? do_raw_spin_unlock+0x4d/0x210 [ 204.261821][ T110] xtTruncate+0xd38/0x2f20 [ 204.263863][ T110] ? __pfx_xtTruncate+0x10/0x10 [ 204.265931][ T110] ? __mark_inode_dirty+0x6ec/0x13b0 [ 204.268055][ T110] ? __asan_memset+0x22/0x50 [ 204.269714][ T110] ? __dquot_initialize+0x21b/0xd30 [ 204.271677][ T110] jfs_free_zero_link+0x35b/0x4c0 [ 204.273564][ T110] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 204.275620][ T110] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 204.277899][ T110] ? do_raw_spin_lock+0x12b/0x2f0 [ 204.279868][ T110] jfs_evict_inode+0x363/0x440 [ 204.281695][ T110] ? evict+0x612/0xb10 [ 204.283396][ T110] ? __pfx_jfs_evict_inode+0x10/0x10 [ 204.285532][ T110] evict+0x61e/0xb10 [ 204.287145][ T110] ? __pfx_evict+0x10/0x10 [ 204.288802][ T110] ? _raw_spin_unlock+0x28/0x50 [ 204.290654][ T110] ? iput+0xb25/0xe80 [ 204.292287][ T110] jfs_lazycommit+0x43d/0xaa0 [ 204.294144][ T110] ? __pfx_jfs_lazycommit+0x10/0x10 [ 204.296177][ T110] ? __pfx_default_wake_function+0x10/0x10 [ 204.298526][ T110] ? __kthread_parkme+0x7a/0x1f0 [ 204.300326][ T110] kthread+0x389/0x470 [ 204.301808][ T110] ? __pfx_jfs_lazycommit+0x10/0x10 [ 204.303715][ T110] ? __pfx_kthread+0x10/0x10 [ 204.305383][ T110] ret_from_fork+0x514/0xb70 [ 204.307040][ T110] ? __pfx_ret_from_fork+0x10/0x10 [ 204.308991][ T110] ? __switch_to+0xc79/0x1410 [ 204.310847][ T110] ? __pfx_kthread+0x10/0x10 [ 204.312756][ T110] ret_from_fork_asm+0x1a/0x30 [ 204.314541][ T110] [ 204.316033][ T110] Kernel Offset: disabled [ 204.317663][ T110] Rebooting in 86400 seconds..