Warning: Permanently added '[localhost]:49420' (ED25519) to the list of known hosts. 2025/10/12 09:33:31 parsed 1 programs syzkaller login: [ 83.772546][ T5309] cgroup: Unknown subsys name 'net' [ 83.838730][ T5309] cgroup: Unknown subsys name 'cpuset' [ 83.843999][ T5309] cgroup: Unknown subsys name 'rlimit' [ 85.431874][ T5309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.010207][ T5323] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.830054][ T9] cfg80211: failed to load regulatory.db [ 94.680559][ T5371] chnl_net:caif_netlink_parms(): no params data found [ 94.797243][ T5371] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.801044][ T5371] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.804031][ T5371] bridge_slave_0: entered allmulticast mode [ 94.816660][ T5371] bridge_slave_0: entered promiscuous mode [ 94.826620][ T5371] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.829474][ T5371] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.832449][ T5371] bridge_slave_1: entered allmulticast mode [ 94.846692][ T5371] bridge_slave_1: entered promiscuous mode [ 94.895910][ T5371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.901876][ T5371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.947788][ T5371] team0: Port device team_slave_0 added [ 94.956901][ T5371] team0: Port device team_slave_1 added [ 95.002679][ T5371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.016177][ T5371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.035439][ T5371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.045311][ T5371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.047664][ T5371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.074979][ T5371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.139759][ T5371] hsr_slave_0: entered promiscuous mode [ 95.142645][ T5371] hsr_slave_1: entered promiscuous mode [ 95.397540][ T5371] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.421741][ T5371] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.449205][ T5371] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.475814][ T5371] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.529927][ T5371] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.533073][ T5371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.537147][ T5371] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.540134][ T5371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.577235][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.581397][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.657174][ T5371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.684144][ T5371] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.701337][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.704085][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.727912][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.731063][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.033401][ T5371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.104302][ T5371] veth0_vlan: entered promiscuous mode [ 96.118454][ T5371] veth1_vlan: entered promiscuous mode [ 96.164008][ T5371] veth0_macvtap: entered promiscuous mode [ 96.182779][ T5371] veth1_macvtap: entered promiscuous mode [ 96.209262][ T5371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.229404][ T5371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.249471][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.253481][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.267052][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.270773][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.522050][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.606709][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.667120][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.742643][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.012000][ T5404] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.018182][ T5404] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.021649][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.026142][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.029357][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.361256][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.364289][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.396181][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.399438][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/10/12 09:33:48 executed programs: 0 [ 98.305544][ T4665] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.309327][ T4665] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.312633][ T4665] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.317853][ T4665] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.321734][ T4665] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.482993][ T12] bridge_slave_1: left allmulticast mode [ 98.495200][ T12] bridge_slave_1: left promiscuous mode [ 98.498688][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.510804][ T12] bridge_slave_0: left allmulticast mode [ 98.513464][ T12] bridge_slave_0: left promiscuous mode [ 98.525542][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.791566][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.797879][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.802904][ T12] bond0 (unregistering): Released all slaves [ 98.890818][ T12] hsr_slave_0: left promiscuous mode [ 98.909708][ T12] hsr_slave_1: left promiscuous mode [ 98.915977][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.919186][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.944384][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.955020][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.987351][ T12] veth1_macvtap: left promiscuous mode [ 98.989730][ T12] veth0_macvtap: left promiscuous mode [ 98.992099][ T12] veth1_vlan: left promiscuous mode [ 98.994224][ T12] veth0_vlan: left promiscuous mode [ 99.579905][ T12] team0 (unregistering): Port device team_slave_1 removed [ 99.598924][ T12] team0 (unregistering): Port device team_slave_0 removed [ 100.152532][ T5420] chnl_net:caif_netlink_parms(): no params data found [ 100.376617][ T47] Bluetooth: hci0: command tx timeout [ 100.561730][ T5420] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.565569][ T5420] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.568722][ T5420] bridge_slave_0: entered allmulticast mode [ 100.584230][ T5420] bridge_slave_0: entered promiscuous mode [ 100.608160][ T5420] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.611342][ T5420] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.614614][ T5420] bridge_slave_1: entered allmulticast mode [ 100.633930][ T5420] bridge_slave_1: entered promiscuous mode [ 100.766123][ T5420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.772418][ T5420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.903637][ T5420] team0: Port device team_slave_0 added [ 100.926630][ T5420] team0: Port device team_slave_1 added [ 101.029357][ T5420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.032386][ T5420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.060176][ T5420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.088133][ T5420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.091006][ T5420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.121769][ T5420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.253016][ T5420] hsr_slave_0: entered promiscuous mode [ 101.268851][ T5420] hsr_slave_1: entered promiscuous mode [ 101.829253][ T5420] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.846612][ T5420] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.852471][ T5420] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.876492][ T5420] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.994519][ T5420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.031581][ T5420] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.050315][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.053658][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.087423][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.090443][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.433418][ T5420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.456160][ T47] Bluetooth: hci0: command tx timeout [ 102.508308][ T5420] veth0_vlan: entered promiscuous mode [ 102.527374][ T5420] veth1_vlan: entered promiscuous mode [ 102.564678][ T5420] veth0_macvtap: entered promiscuous mode [ 102.590272][ T5420] veth1_macvtap: entered promiscuous mode [ 102.612461][ T5420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.631446][ T5420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.659482][ T1042] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.663391][ T1042] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.675213][ T1042] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.678854][ T1042] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.771431][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.779722][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.826591][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.829904][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.120740][ T5482] loop0: detected capacity change from 0 to 4096 [ 103.171644][ T5482] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 103.287508][ T5482] INFO: trying to register non-static key. [ 103.290070][ T5482] The code is fine but needs lockdep annotation, or maybe [ 103.293996][ T5482] you didn't initialize this object before use? [ 103.296721][ T5482] turning off the locking correctness validator. [ 103.299707][ T5482] CPU: 0 UID: 0 PID: 5482 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 103.299721][ T5482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.299727][ T5482] Call Trace: [ 103.299734][ T5482] [ 103.299739][ T5482] dump_stack_lvl+0x189/0x250 [ 103.299834][ T5482] ? rcu_is_watching+0x15/0xb0 [ 103.299849][ T5482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.299858][ T5482] ? __pfx__printk+0x10/0x10 [ 103.299867][ T5482] ? __is_module_percpu_address+0x39b/0x3f0 [ 103.299879][ T5482] ? is_module_address+0x17/0xf0 [ 103.299889][ T5482] assign_lock_key+0x133/0x150 [ 103.299903][ T5482] register_lock_class+0x105/0x320 [ 103.299915][ T5482] __lock_acquire+0x99/0xd20 [ 103.299927][ T5482] ? ntfs_setattr+0x70e/0xbe0 [ 103.299989][ T5482] lock_acquire+0x120/0x360 [ 103.300002][ T5482] ? ntfs_setattr+0x70e/0xbe0 [ 103.300012][ T5482] ? __pfx___mutex_lock+0x10/0x10 [ 103.300851][ T5482] down_write+0x96/0x1f0 [ 103.300862][ T5482] ? ntfs_setattr+0x70e/0xbe0 [ 103.300872][ T5482] ? __pfx_down_write+0x10/0x10 [ 103.300881][ T5482] ? setattr_prepare+0x1e7/0xac0 [ 103.300896][ T5482] ? truncate_setsize+0xcf/0xf0 [ 103.300909][ T5482] ntfs_setattr+0x70e/0xbe0 [ 103.300923][ T5482] ? __pfx_ntfs_setattr+0x10/0x10 [ 103.300933][ T5482] ? try_break_deleg+0x79/0x130 [ 103.300945][ T5482] ? __pfx_ntfs_setattr+0x10/0x10 [ 103.300955][ T5482] notify_change+0xc1a/0xf40 [ 103.300969][ T5482] do_truncate+0x1a4/0x220 [ 103.300979][ T5482] ? __pfx_do_truncate+0x10/0x10 [ 103.300986][ T5482] ? apparmor_path_truncate+0x238/0x2d0 [ 103.301003][ T5482] vfs_truncate+0x493/0x520 [ 103.301012][ T5482] ? __pfx_vfs_truncate+0x10/0x10 [ 103.301022][ T5482] do_sys_truncate+0xdb/0x190 [ 103.301031][ T5482] ? __pfx_do_sys_truncate+0x10/0x10 [ 103.301039][ T5482] ? do_user_addr_fault+0xc85/0x1380 [ 103.301052][ T5482] __x64_sys_truncate+0x5b/0x70 [ 103.301061][ T5482] do_syscall_64+0xfa/0xfa0 [ 103.301070][ T5482] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.301084][ T5482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.301093][ T5482] ? clear_bhb_loop+0x60/0xb0 [ 103.301103][ T5482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.301113][ T5482] RIP: 0033:0x7fe5b658eec9 [ 103.301125][ T5482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.301133][ T5482] RSP: 002b:00007ffce7f01338 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 103.301145][ T5482] RAX: ffffffffffffffda RBX: 00007fe5b67e5fa0 RCX: 00007fe5b658eec9 [ 103.301152][ T5482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000013c0 [ 103.301157][ T5482] RBP: 00007fe5b6611f91 R08: 0000000000000000 R09: 0000000000000000 [ 103.301163][ T5482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.301168][ T5482] R13: 00007fe5b67e5fa0 R14: 00007fe5b67e5fa0 R15: 0000000000000002 [ 103.301178][ T5482] [ 103.489415][ T5482] ntfs3(loop0): ino=19, "file1" attr_set_size [ 103.492063][ T5482] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 103.497853][ T5482] ------------[ cut here ]------------ [ 103.500311][ T5482] DEBUG_RWSEMS_WARN_ON(sem->magic != sem): count = 0x1, magic = 0x0, owner = 0xffff888000ad4900, curr 0xffff888000ad4900, list not empty [ 103.507529][ T5482] WARNING: CPU: 0 PID: 5482 at kernel/locking/rwsem.c:1375 up_write+0x2d1/0x420 [ 103.511410][ T5482] Modules linked in: [ 103.513193][ T5482] CPU: 0 UID: 0 PID: 5482 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 103.517392][ T5482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.522133][ T5482] RIP: 0010:up_write+0x2d1/0x420 [ 103.524366][ T5482] Code: c7 c7 20 ff 6a 8b 48 c7 c6 80 00 6b 8b 48 8b 54 24 08 48 8b 0c 24 4c 8b 44 24 10 4d 89 e1 41 52 e8 84 37 e6 ff 48 83 c4 08 90 <0f> 0b 90 90 e9 a4 fd ff ff 90 0f 0b 90 e9 8c fe ff ff c6 05 d8 13 [ 103.532734][ T5482] RSP: 0018:ffffc90002aefa10 EFLAGS: 00010292 [ 103.535489][ T5482] RAX: 746fb4b6f8f64000 RBX: ffff888036b45158 RCX: ffff888000ad4900 [ 103.538957][ T5482] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 103.542486][ T5482] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 103.546082][ T5482] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: ffff888000ad4900 [ 103.549569][ T5482] R13: ffff888036b451c0 R14: 1ffff11006d68a38 R15: ffff888036b451b0 [ 103.552969][ T5482] FS: 00005555678b9500(0000) GS:ffff88808d301000(0000) knlGS:0000000000000000 [ 103.556954][ T5482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.559804][ T5482] CR2: 00007f4bb43ea000 CR3: 00000000336a3000 CR4: 0000000000352ef0 [ 103.563315][ T5482] Call Trace: [ 103.564925][ T5482] [ 103.566483][ T5482] ntfs_setattr+0x7de/0xbe0 [ 103.568512][ T5482] ? __pfx_ntfs_setattr+0x10/0x10 [ 103.570724][ T5482] ? try_break_deleg+0x79/0x130 [ 103.572803][ T5482] ? __pfx_ntfs_setattr+0x10/0x10 [ 103.575454][ T5482] notify_change+0xc1a/0xf40 [ 103.577501][ T5482] do_truncate+0x1a4/0x220 [ 103.579483][ T5482] ? __pfx_do_truncate+0x10/0x10 [ 103.581671][ T5482] ? apparmor_path_truncate+0x238/0x2d0 [ 103.584127][ T5482] vfs_truncate+0x493/0x520 [ 103.586201][ T5482] ? __pfx_vfs_truncate+0x10/0x10 [ 103.588404][ T5482] do_sys_truncate+0xdb/0x190 [ 103.590362][ T5482] ? __pfx_do_sys_truncate+0x10/0x10 [ 103.592641][ T5482] ? do_user_addr_fault+0xc85/0x1380 [ 103.594943][ T5482] __x64_sys_truncate+0x5b/0x70 [ 103.596882][ T5482] do_syscall_64+0xfa/0xfa0 [ 103.598711][ T5482] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.600706][ T5482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.603161][ T5482] ? clear_bhb_loop+0x60/0xb0 [ 103.605177][ T5482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.607715][ T5482] RIP: 0033:0x7fe5b658eec9 [ 103.609648][ T5482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.617799][ T5482] RSP: 002b:00007ffce7f01338 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 103.621259][ T5482] RAX: ffffffffffffffda RBX: 00007fe5b67e5fa0 RCX: 00007fe5b658eec9 [ 103.624632][ T5482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000013c0 [ 103.628162][ T5482] RBP: 00007fe5b6611f91 R08: 0000000000000000 R09: 0000000000000000 [ 103.631711][ T5482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.635273][ T5482] R13: 00007fe5b67e5fa0 R14: 00007fe5b67e5fa0 R15: 0000000000000002 [ 103.638646][ T5482] [ 103.639953][ T5482] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.642810][ T5482] CPU: 0 UID: 0 PID: 5482 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 103.646676][ T5482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.651123][ T5482] Call Trace: [ 103.652508][ T5482] [ 103.653754][ T5482] dump_stack_lvl+0x99/0x250 [ 103.655873][ T5482] ? __asan_memcpy+0x40/0x70 [ 103.657911][ T5482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.660186][ T5482] ? __pfx__printk+0x10/0x10 [ 103.662108][ T5482] vpanic+0x237/0x6d0 [ 103.663916][ T5482] ? __pfx_vpanic+0x10/0x10 [ 103.665889][ T5482] panic+0xb9/0xc0 [ 103.667477][ T5482] ? __pfx_panic+0x10/0x10 [ 103.669275][ T5482] __warn+0x31b/0x4b0 [ 103.670971][ T5482] ? up_write+0x2d1/0x420 [ 103.672640][ T5482] ? up_write+0x2d1/0x420 [ 103.674404][ T5482] report_bug+0x2be/0x4f0 [ 103.676311][ T5482] ? up_write+0x2d1/0x420 [ 103.678207][ T5482] ? up_write+0x2d1/0x420 [ 103.680083][ T5482] ? up_write+0x2d3/0x420 [ 103.681803][ T5482] handle_bug+0x84/0x160 [ 103.683622][ T5482] exc_invalid_op+0x1a/0x50 [ 103.685577][ T5482] asm_exc_invalid_op+0x1a/0x20 [ 103.687798][ T5482] RIP: 0010:up_write+0x2d1/0x420 [ 103.689869][ T5482] Code: c7 c7 20 ff 6a 8b 48 c7 c6 80 00 6b 8b 48 8b 54 24 08 48 8b 0c 24 4c 8b 44 24 10 4d 89 e1 41 52 e8 84 37 e6 ff 48 83 c4 08 90 <0f> 0b 90 90 e9 a4 fd ff ff 90 0f 0b 90 e9 8c fe ff ff c6 05 d8 13 [ 103.697687][ T5482] RSP: 0018:ffffc90002aefa10 EFLAGS: 00010292 [ 103.700203][ T5482] RAX: 746fb4b6f8f64000 RBX: ffff888036b45158 RCX: ffff888000ad4900 [ 103.703555][ T5482] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 103.707019][ T5482] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 103.710260][ T5482] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: ffff888000ad4900 [ 103.713647][ T5482] R13: ffff888036b451c0 R14: 1ffff11006d68a38 R15: ffff888036b451b0 [ 103.717128][ T5482] ntfs_setattr+0x7de/0xbe0 [ 103.718981][ T5482] ? __pfx_ntfs_setattr+0x10/0x10 [ 103.720905][ T5482] ? try_break_deleg+0x79/0x130 [ 103.723083][ T5482] ? __pfx_ntfs_setattr+0x10/0x10 [ 103.725280][ T5482] notify_change+0xc1a/0xf40 [ 103.727335][ T5482] do_truncate+0x1a4/0x220 [ 103.729368][ T5482] ? __pfx_do_truncate+0x10/0x10 [ 103.731577][ T5482] ? apparmor_path_truncate+0x238/0x2d0 [ 103.734106][ T5482] vfs_truncate+0x493/0x520 [ 103.736090][ T5482] ? __pfx_vfs_truncate+0x10/0x10 [ 103.738321][ T5482] do_sys_truncate+0xdb/0x190 [ 103.740509][ T5482] ? __pfx_do_sys_truncate+0x10/0x10 [ 103.742794][ T5482] ? do_user_addr_fault+0xc85/0x1380 [ 103.745265][ T5482] __x64_sys_truncate+0x5b/0x70 [ 103.747587][ T5482] do_syscall_64+0xfa/0xfa0 [ 103.749598][ T5482] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.751768][ T5482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.754453][ T5482] ? clear_bhb_loop+0x60/0xb0 [ 103.756500][ T5482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.759048][ T5482] RIP: 0033:0x7fe5b658eec9 [ 103.760882][ T5482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.768847][ T5482] RSP: 002b:00007ffce7f01338 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 103.772540][ T5482] RAX: ffffffffffffffda RBX: 00007fe5b67e5fa0 RCX: 00007fe5b658eec9 [ 103.775828][ T5482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000013c0 [ 103.779015][ T5482] RBP: 00007fe5b6611f91 R08: 0000000000000000 R09: 0000000000000000 [ 103.782147][ T5482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.785162][ T5482] R13: 00007fe5b67e5fa0 R14: 00007fe5b67e5fa0 R15: 0000000000000002 [ 103.787786][ T5482] [ 103.789374][ T5482] Kernel Offset: disabled [ 103.790870][ T5482] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:33:53 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006f RBX=000000000000006f RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002aef1f0 R8 =ffff888033b78237 R9 =1ffff1100676f046 R10=dffffc0000000000 R11=ffffffff851da090 R12=dffffc0000000000 R13=ffffffff99a13914 R14=ffffffff99d273c0 R15=0000000000000000 RIP=ffffffff851da10c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555678b9500 ffffffff 00c00000 GS =0000 ffff88808d301000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa95158b6b0 CR3=00000000336a3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce7f01610 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe5b6612fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe5b6612fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe5b6612fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe5b6612fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe5b661305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe5b661313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000