Warning: Permanently added '[localhost]:8317' (ED25519) to the list of known hosts. 2026/01/27 18:11:27 parsed 1 programs syzkaller login: [ 83.958376][ T5316] cgroup: Unknown subsys name 'net' [ 84.029045][ T5316] cgroup: Unknown subsys name 'cpuset' [ 84.034948][ T5316] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.732299][ T5316] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.663478][ T5329] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.839402][ T1241] cfg80211: failed to load regulatory.db [ 93.840489][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.844139][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.897881][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.904593][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.799548][ T46] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.804637][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.808235][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.811851][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.815185][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.779816][ T5398] chnl_net:caif_netlink_parms(): no params data found [ 97.892439][ T5398] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.905968][ T5398] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.908930][ T5398] bridge_slave_0: entered allmulticast mode [ 97.912763][ T5398] bridge_slave_0: entered promiscuous mode [ 97.919404][ T5398] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.922383][ T5398] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.925552][ T5398] bridge_slave_1: entered allmulticast mode [ 97.929288][ T5398] bridge_slave_1: entered promiscuous mode [ 97.949756][ T5398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.955449][ T5398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.979159][ T5398] team0: Port device team_slave_0 added [ 97.983311][ T5398] team0: Port device team_slave_1 added [ 98.005579][ T5398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.009034][ T5398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.020061][ T5398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.026855][ T5398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.030496][ T5398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.044259][ T5398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.079856][ T5398] hsr_slave_0: entered promiscuous mode [ 98.082811][ T5398] hsr_slave_1: entered promiscuous mode [ 98.224230][ T5398] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.247317][ T5398] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.259382][ T5398] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.277360][ T5398] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.311871][ T5398] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.314901][ T5398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.318506][ T5398] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.321601][ T5398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.376408][ T5398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.390207][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.394673][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.407412][ T5398] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.419348][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.422514][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.434010][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.437327][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.630025][ T5398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.667033][ T5398] veth0_vlan: entered promiscuous mode [ 98.676988][ T5398] veth1_vlan: entered promiscuous mode [ 98.704145][ T5398] veth0_macvtap: entered promiscuous mode [ 98.711407][ T5398] veth1_macvtap: entered promiscuous mode [ 98.728844][ T5398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.739124][ T5398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.751376][ T1041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.762076][ T1041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.777689][ T1041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.781285][ T1041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.950261][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.998384][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.030401][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.072970][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/01/27 18:11:45 executed programs: 0 [ 99.780521][ T46] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.784450][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.789586][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.794032][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.797881][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.996234][ T5428] chnl_net:caif_netlink_parms(): no params data found [ 100.109384][ T5428] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.112937][ T5428] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.117381][ T5428] bridge_slave_0: entered allmulticast mode [ 100.121055][ T5428] bridge_slave_0: entered promiscuous mode [ 100.125557][ T5428] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.129196][ T5428] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.132251][ T5428] bridge_slave_1: entered allmulticast mode [ 100.136638][ T5428] bridge_slave_1: entered promiscuous mode [ 100.166035][ T5428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.172928][ T5428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.212961][ T5428] team0: Port device team_slave_0 added [ 100.220499][ T5428] team0: Port device team_slave_1 added [ 100.253048][ T5428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.256303][ T5428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.267635][ T5428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.273614][ T5428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.277615][ T5428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.288683][ T5428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.324556][ T5428] hsr_slave_0: entered promiscuous mode [ 100.327933][ T5428] hsr_slave_1: entered promiscuous mode [ 100.330884][ T5428] debugfs: 'hsr0' already exists in 'hsr' [ 100.333192][ T5428] Cannot create hsr debugfs directory [ 101.654592][ T43] bridge_slave_1: left allmulticast mode [ 101.659623][ T43] bridge_slave_1: left promiscuous mode [ 101.662694][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.689169][ T43] bridge_slave_0: left allmulticast mode [ 101.691579][ T43] bridge_slave_0: left promiscuous mode [ 101.694566][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.831134][ T46] Bluetooth: hci0: command tx timeout [ 102.047089][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.053388][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.058728][ T43] bond0 (unregistering): Released all slaves [ 102.177524][ T43] hsr_slave_0: left promiscuous mode [ 102.180420][ T43] hsr_slave_1: left promiscuous mode [ 102.190046][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.193123][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.204011][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.217880][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.233157][ T43] veth1_macvtap: left promiscuous mode [ 102.235282][ T43] veth0_macvtap: left promiscuous mode [ 102.254874][ T43] veth1_vlan: left promiscuous mode [ 102.262234][ T43] veth0_vlan: left promiscuous mode [ 102.708275][ T43] team0 (unregistering): Port device team_slave_1 removed [ 102.735886][ T43] team0 (unregistering): Port device team_slave_0 removed [ 103.274171][ T5428] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.297847][ T5428] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.312611][ T5428] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.329663][ T5428] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.639148][ T5428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.684147][ T5428] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.701438][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.704309][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.728131][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.731528][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.906117][ T46] Bluetooth: hci0: command tx timeout [ 104.087545][ T5428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.155352][ T5428] veth0_vlan: entered promiscuous mode [ 104.170664][ T5428] veth1_vlan: entered promiscuous mode [ 104.220523][ T5428] veth0_macvtap: entered promiscuous mode [ 104.228286][ T5428] veth1_macvtap: entered promiscuous mode [ 104.242476][ T5428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.251217][ T5428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.261780][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.267628][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.271418][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.275008][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.335027][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.345298][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.370199][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.373720][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.490975][ T5477] loop0: detected capacity change from 0 to 4096 [ 104.530196][ T5477] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 104.566449][ T5477] ntfs3(loop0): Failed to load $Extend (-22). [ 104.570006][ T5477] ntfs3(loop0): Failed to initialize $Extend. [ 104.832019][ T25] audit: type=1326 audit(1769537510.635:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5476 comm="syz.0.17" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca6399aeb9 code=0x0 [ 104.897331][ T5478] FAULT_INJECTION: forcing a failure. [ 104.897331][ T5478] name failslab, interval 1, probability 0, space 0, times 1 [ 104.903082][ T5478] CPU: 0 UID: 0 PID: 5478 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 104.903102][ T5478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.903109][ T5478] Call Trace: [ 104.903117][ T5478] [ 104.903124][ T5478] dump_stack_lvl+0xe8/0x150 [ 104.903218][ T5478] should_fail_ex+0x412/0x560 [ 104.903263][ T5478] should_failslab+0xa8/0x100 [ 104.903276][ T5478] __kmalloc_noprof+0xde/0x7e0 [ 104.903293][ T5478] ? indx_read+0x27c/0xc20 [ 104.903310][ T5478] indx_read+0x27c/0xc20 [ 104.903332][ T5478] indx_find+0x4b8/0xbb0 [ 104.903351][ T5478] ? __pfx_indx_find+0x10/0x10 [ 104.903366][ T5478] ? ni_find_attr+0x1dd/0x570 [ 104.903378][ T5478] ? indx_delete_entry+0x120/0x31b0 [ 104.903393][ T5478] indx_delete_entry+0x473/0x31b0 [ 104.903414][ T5478] ? mi_find_attr+0x2b6/0x2c0 [ 104.903429][ T5478] ? ntfs_set_state+0xa0/0x6b0 [ 104.903443][ T5478] ? __pfx_indx_delete_entry+0x10/0x10 [ 104.903455][ T5478] ? __pfx_ntfs_set_state+0x10/0x10 [ 104.903473][ T5478] ? ni_remove_name+0x1ad/0x7d0 [ 104.903489][ T5478] ni_remove_name+0x22d/0x7d0 [ 104.903509][ T5478] ntfs_unlink_inode+0x34a/0x6b0 [ 104.903526][ T5478] ? __pfx_ntfs_unlink_inode+0x10/0x10 [ 104.903539][ T5478] ? down_write+0x16d/0x200 [ 104.903594][ T5478] ? __pfx_down_write+0x10/0x10 [ 104.903610][ T5478] ntfs_unlink+0xf2/0x150 [ 104.903627][ T5478] vfs_unlink+0x380/0x650 [ 104.903651][ T5478] do_unlinkat+0x2e3/0x590 [ 104.903671][ T5478] ? __pfx_do_unlinkat+0x10/0x10 [ 104.903690][ T5478] ? getname_flags+0x1e4/0x540 [ 104.903711][ T5478] __x64_sys_unlink+0x47/0x50 [ 104.903727][ T5478] do_syscall_64+0xe2/0xf80 [ 104.903739][ T5478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.903750][ T5478] ? trace_irq_disable+0x37/0x100 [ 104.903762][ T5478] ? clear_bhb_loop+0x60/0xb0 [ 104.903777][ T5478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.903788][ T5478] RIP: 0033:0x7fca6399aeb9 [ 104.903823][ T5478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.903833][ T5478] RSP: 002b:00007fca648f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 104.903848][ T5478] RAX: ffffffffffffffda RBX: 00007fca63c16090 RCX: 00007fca6399aeb9 [ 104.903857][ T5478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 104.903864][ T5478] RBP: 00007fca648f4090 R08: 0000000000000000 R09: 0000000000000000 [ 104.903871][ T5478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.903878][ T5478] R13: 00007fca63c16128 R14: 00007fca63c16090 R15: 00007ffedc73d3d8 [ 104.903900][ T5478] 2026/01/27 18:11:51 executed programs: 3 [ 105.409313][ T5480] loop0: detected capacity change from 0 to 4096 [ 105.435354][ T5480] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 105.458128][ T5480] ntfs3(loop0): Failed to load $Extend (-22). [ 105.460726][ T5480] ntfs3(loop0): Failed to initialize $Extend. [ 105.776429][ T25] audit: type=1326 audit(1769537511.585:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.0.18" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca6399aeb9 code=0x0 [ 105.880028][ T5481] FAULT_INJECTION: forcing a failure. [ 105.880028][ T5481] name failslab, interval 1, probability 0, space 0, times 0 [ 105.886143][ T5481] CPU: 0 UID: 0 PID: 5481 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 105.886162][ T5481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 105.886170][ T5481] Call Trace: [ 105.886223][ T5481] [ 105.886229][ T5481] dump_stack_lvl+0xe8/0x150 [ 105.886307][ T5481] should_fail_ex+0x412/0x560 [ 105.886352][ T5481] should_failslab+0xa8/0x100 [ 105.886366][ T5481] kmem_cache_alloc_noprof+0x87/0x6e0 [ 105.886380][ T5481] ? wnd_add_free_ext+0x833/0xe60 [ 105.886392][ T5481] wnd_add_free_ext+0x833/0xe60 [ 105.886405][ T5481] wnd_set_free+0x4bf/0x5c0 [ 105.886426][ T5481] mark_as_free_ex+0x1c8/0x390 [ 105.886442][ T5481] run_unpack+0x7aa/0xc90 [ 105.886464][ T5481] run_unpack_ex+0xd2/0xb90 [ 105.886485][ T5481] ? __lock_acquire+0x6b5/0x2cf0 [ 105.886503][ T5481] ? __pfx_run_unpack_ex+0x10/0x10 [ 105.886528][ T5481] ? mi_enum_attr+0x743/0x9f0 [ 105.886544][ T5481] ni_delete_all+0x363/0x8a0 [ 105.886560][ T5481] ? __pfx_ni_delete_all+0x10/0x10 [ 105.886573][ T5481] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.886624][ T5481] ni_clear+0x315/0x530 [ 105.886634][ T5481] ? clear_inode+0x123/0x1c0 [ 105.886650][ T5481] ? __pfx_ntfs_evict_inode+0x10/0x10 [ 105.886661][ T5481] evict+0x61e/0xb10 [ 105.886680][ T5481] ? __pfx_evict+0x10/0x10 [ 105.886694][ T5481] ? _raw_spin_unlock+0x28/0x50 [ 105.886708][ T5481] ? iput+0xcc2/0x1020 [ 105.886722][ T5481] do_unlinkat+0x354/0x590 [ 105.886741][ T5481] ? __pfx_do_unlinkat+0x10/0x10 [ 105.886758][ T5481] ? getname_flags+0x1e4/0x540 [ 105.886778][ T5481] __x64_sys_unlink+0x47/0x50 [ 105.886792][ T5481] do_syscall_64+0xe2/0xf80 [ 105.886804][ T5481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.886815][ T5481] ? trace_irq_disable+0x37/0x100 [ 105.886825][ T5481] ? clear_bhb_loop+0x60/0xb0 [ 105.886838][ T5481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.886849][ T5481] RIP: 0033:0x7fca6399aeb9 [ 105.886875][ T5481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.886885][ T5481] RSP: 002b:00007fca648f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 105.886898][ T5481] RAX: ffffffffffffffda RBX: 00007fca63c16090 RCX: 00007fca6399aeb9 [ 105.886906][ T5481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 105.886912][ T5481] RBP: 00007fca648f4090 R08: 0000000000000000 R09: 0000000000000000 [ 105.886919][ T5481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 105.886926][ T5481] R13: 00007fca63c16128 R14: 00007fca63c16090 R15: 00007ffedc73d3d8 [ 105.886943][ T5481] [ 105.887980][ T5481] ------------[ cut here ]------------ [ 106.002817][ T5481] 1 [ 106.002829][ T5481] WARNING: fs/ntfs3/bitmap.c:217 at wnd_add_free_ext+0xb92/0xe60, CPU#0: syz.0.18/5481 [ 106.007903][ T5481] Modules linked in: [ 106.009647][ T5481] CPU: 0 UID: 0 PID: 5481 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 106.013468][ T5481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.018447][ T5481] RIP: 0010:wnd_add_free_ext+0xb92/0xe60 [ 106.021475][ T5481] Code: 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 44 8a 14 ff 4d 89 2f 4c 89 ef 48 89 de e8 b6 5e 7a 08 eb 0d e8 3f af aa fe 90 <0f> 0b 90 4c 8b 24 24 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 [ 106.029658][ T5481] RSP: 0018:ffffc90003f677c8 EFLAGS: 00010293 [ 106.032382][ T5481] RAX: ffffffff8319d7b1 RBX: ffff88804437a2e0 RCX: ffff888000be8000 [ 106.035930][ T5481] RDX: 0000000000000000 RSI: 0000000000000019 RDI: 0000000000000019 [ 106.039216][ T5481] RBP: 0000000000000019 R08: ffff888047706c2b R09: 1ffff11008ee0d85 [ 106.042491][ T5481] R10: dffffc0000000000 R11: ffffed1008ee0d86 R12: dffffc0000000000 [ 106.046437][ T5481] R13: ffff88804a4c96c0 R14: ffff88804a5346c0 R15: 0000000000000019 [ 106.049790][ T5481] FS: 00007fca648f46c0(0000) GS:ffff88808ccea000(0000) knlGS:0000000000000000 [ 106.053790][ T5481] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.057243][ T5481] CR2: 00007fca648f3ff8 CR3: 0000000052ad1000 CR4: 0000000000352ef0 [ 106.060508][ T5481] Call Trace: [ 106.061968][ T5481] [ 106.063159][ T5481] wnd_set_free+0x4bf/0x5c0 [ 106.065160][ T5481] mark_as_free_ex+0x1c8/0x390 [ 106.067465][ T5481] run_unpack+0x7aa/0xc90 [ 106.069235][ T5481] run_unpack_ex+0xd2/0xb90 [ 106.071234][ T5481] ? __lock_acquire+0x6b5/0x2cf0 [ 106.073485][ T5481] ? __pfx_run_unpack_ex+0x10/0x10 [ 106.075765][ T5481] ? mi_enum_attr+0x743/0x9f0 [ 106.077890][ T5481] ni_delete_all+0x363/0x8a0 [ 106.079934][ T5481] ? __pfx_ni_delete_all+0x10/0x10 [ 106.082239][ T5481] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.084511][ T5481] ni_clear+0x315/0x530 [ 106.086476][ T5481] ? clear_inode+0x123/0x1c0 [ 106.088486][ T5481] ? __pfx_ntfs_evict_inode+0x10/0x10 [ 106.090713][ T5481] evict+0x61e/0xb10 [ 106.092351][ T5481] ? __pfx_evict+0x10/0x10 [ 106.094302][ T5481] ? _raw_spin_unlock+0x28/0x50 [ 106.096539][ T5481] ? iput+0xcc2/0x1020 [ 106.098255][ T5481] do_unlinkat+0x354/0x590 [ 106.100115][ T5481] ? __pfx_do_unlinkat+0x10/0x10 [ 106.102263][ T5481] ? getname_flags+0x1e4/0x540 [ 106.104277][ T5481] __x64_sys_unlink+0x47/0x50 [ 106.106400][ T5481] do_syscall_64+0xe2/0xf80 [ 106.108393][ T5481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.110815][ T5481] ? trace_irq_disable+0x37/0x100 [ 106.112834][ T5481] ? clear_bhb_loop+0x60/0xb0 [ 106.114885][ T5481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.117451][ T5481] RIP: 0033:0x7fca6399aeb9 [ 106.119377][ T5481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.127475][ T5481] RSP: 002b:00007fca648f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 106.131122][ T5481] RAX: ffffffffffffffda RBX: 00007fca63c16090 RCX: 00007fca6399aeb9 [ 106.134552][ T5481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 106.138275][ T5481] RBP: 00007fca648f4090 R08: 0000000000000000 R09: 0000000000000000 [ 106.141770][ T5481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.145141][ T5481] R13: 00007fca63c16128 R14: 00007fca63c16090 R15: 00007ffedc73d3d8 [ 106.148752][ T5481] [ 106.150109][ T5481] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.153358][ T5481] CPU: 0 UID: 0 PID: 5481 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 106.157201][ T5481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.161368][ T5481] Call Trace: [ 106.162842][ T5481] [ 106.164096][ T5481] vpanic+0x1e0/0x670 [ 106.165778][ T5481] panic+0xc5/0xd0 [ 106.167329][ T5481] ? __pfx_panic+0x10/0x10 [ 106.169249][ T5481] __warn+0x315/0x4a0 [ 106.171170][ T5481] ? wnd_add_free_ext+0xb92/0xe60 [ 106.175078][ T5481] ? wnd_add_free_ext+0xb92/0xe60 [ 106.177243][ T5481] __report_bug+0x29a/0x540 [ 106.179088][ T5481] ? bdev_getblk+0xbe/0x6e0 [ 106.181156][ T5481] ? wnd_add_free_ext+0xb92/0xe60 [ 106.183301][ T5481] ? __pfx___report_bug+0x10/0x10 [ 106.185414][ T5481] ? __bread_gfp+0xc3/0x3b0 [ 106.187376][ T5481] ? ntfs_bread+0xcf/0x1e0 [ 106.189333][ T5481] ? wnd_add_free_ext+0xb92/0xe60 [ 106.191517][ T5481] report_bug+0x16a/0x220 [ 106.193357][ T5481] ? wnd_add_free_ext+0xb92/0xe60 [ 106.195538][ T5481] ? wnd_add_free_ext+0xb94/0xe60 [ 106.197640][ T5481] handle_bug+0x98/0x200 [ 106.199474][ T5481] exc_invalid_op+0x1a/0x50 [ 106.201492][ T5481] asm_exc_invalid_op+0x1a/0x20 [ 106.203517][ T5481] RIP: 0010:wnd_add_free_ext+0xb92/0xe60 [ 106.206285][ T5481] Code: 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 44 8a 14 ff 4d 89 2f 4c 89 ef 48 89 de e8 b6 5e 7a 08 eb 0d e8 3f af aa fe 90 <0f> 0b 90 4c 8b 24 24 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 [ 106.214237][ T5481] RSP: 0018:ffffc90003f677c8 EFLAGS: 00010293 [ 106.216658][ T5481] RAX: ffffffff8319d7b1 RBX: ffff88804437a2e0 RCX: ffff888000be8000 [ 106.220108][ T5481] RDX: 0000000000000000 RSI: 0000000000000019 RDI: 0000000000000019 [ 106.223427][ T5481] RBP: 0000000000000019 R08: ffff888047706c2b R09: 1ffff11008ee0d85 [ 106.226757][ T5481] R10: dffffc0000000000 R11: ffffed1008ee0d86 R12: dffffc0000000000 [ 106.230131][ T5481] R13: ffff88804a4c96c0 R14: ffff88804a5346c0 R15: 0000000000000019 [ 106.234536][ T5481] ? wnd_add_free_ext+0xb91/0xe60 [ 106.236891][ T5481] ? wnd_add_free_ext+0xb91/0xe60 [ 106.239051][ T5481] wnd_set_free+0x4bf/0x5c0 [ 106.241076][ T5481] mark_as_free_ex+0x1c8/0x390 [ 106.243036][ T5481] run_unpack+0x7aa/0xc90 [ 106.244892][ T5481] run_unpack_ex+0xd2/0xb90 [ 106.246872][ T5481] ? __lock_acquire+0x6b5/0x2cf0 [ 106.248941][ T5481] ? __pfx_run_unpack_ex+0x10/0x10 [ 106.251205][ T5481] ? mi_enum_attr+0x743/0x9f0 [ 106.253435][ T5481] ni_delete_all+0x363/0x8a0 [ 106.255579][ T5481] ? __pfx_ni_delete_all+0x10/0x10 [ 106.257747][ T5481] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.259770][ T5481] ni_clear+0x315/0x530 [ 106.261612][ T5481] ? clear_inode+0x123/0x1c0 [ 106.263663][ T5481] ? __pfx_ntfs_evict_inode+0x10/0x10 [ 106.265977][ T5481] evict+0x61e/0xb10 [ 106.267604][ T5481] ? __pfx_evict+0x10/0x10 [ 106.269365][ T5481] ? _raw_spin_unlock+0x28/0x50 [ 106.271307][ T5481] ? iput+0xcc2/0x1020 [ 106.272768][ T5481] do_unlinkat+0x354/0x590 [ 106.274659][ T5481] ? __pfx_do_unlinkat+0x10/0x10 [ 106.276867][ T5481] ? getname_flags+0x1e4/0x540 [ 106.278867][ T5481] __x64_sys_unlink+0x47/0x50 [ 106.280872][ T5481] do_syscall_64+0xe2/0xf80 [ 106.282903][ T5481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.285409][ T5481] ? trace_irq_disable+0x37/0x100 [ 106.287557][ T5481] ? clear_bhb_loop+0x60/0xb0 [ 106.289228][ T5481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.291427][ T5481] RIP: 0033:0x7fca6399aeb9 [ 106.293376][ T5481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.301510][ T5481] RSP: 002b:00007fca648f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 106.305887][ T5481] RAX: ffffffffffffffda RBX: 00007fca63c16090 RCX: 00007fca6399aeb9 [ 106.309214][ T5481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 106.312586][ T5481] RBP: 00007fca648f4090 R08: 0000000000000000 R09: 0000000000000000 [ 106.315998][ T5481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.319414][ T5481] R13: 00007fca63c16128 R14: 00007fca63c16090 R15: 00007ffedc73d3d8 [ 106.322841][ T5481] [ 106.324651][ T5481] Kernel Offset: disabled [ 106.326605][ T5481] Rebooting in 86400 seconds..