Warning: Permanently added '10.128.1.180' (ED25519) to the list of known hosts. 2024/05/21 07:13:19 fuzzer started 2024/05/21 07:13:19 dialing manager at 10.128.0.163:30011 [ 66.180024][ T3550] cgroup: Unknown subsys name 'net' [ 66.353495][ T3550] cgroup: Unknown subsys name 'rlimit' 2024/05/21 07:13:21 starting 5 executor processes [ 67.618676][ T3552] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.893256][ T3567] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.901450][ T3567] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.909238][ T3567] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.917285][ T3567] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.925663][ T3567] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.933279][ T3567] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.062198][ T3565] chnl_net:caif_netlink_parms(): no params data found [ 68.117001][ T3565] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.125396][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.133835][ T3565] device bridge_slave_0 entered promiscuous mode [ 68.144602][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.151727][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.160205][ T3565] device bridge_slave_1 entered promiscuous mode [ 68.183787][ T3565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.195655][ T3565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.220687][ T3565] team0: Port device team_slave_0 added [ 68.229258][ T3565] team0: Port device team_slave_1 added [ 68.249903][ T3565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.257032][ T3565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.282978][ T3565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.296201][ T3565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.303334][ T3565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.329359][ T3565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.362315][ T3565] device hsr_slave_0 entered promiscuous mode [ 68.369803][ T3565] device hsr_slave_1 entered promiscuous mode [ 68.469875][ T3565] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.480687][ T3565] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.490453][ T3565] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.499933][ T3565] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.523288][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.530538][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.538656][ T3565] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.545786][ T3565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.599987][ T3565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.612591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.625102][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.633636][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.641651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 68.656463][ T3565] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.668343][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.677560][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.685191][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.704843][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.714582][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.721666][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.742162][ T3565] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.753184][ T3565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.767233][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.776415][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.786428][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.795448][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.804564][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.812324][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.947639][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.955582][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.968459][ T3565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.163544][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.172633][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.190057][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.198513][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.209580][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.217556][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.225732][ T3565] device veth0_vlan entered promiscuous mode [ 69.238819][ T3565] device veth1_vlan entered promiscuous mode [ 69.259813][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.267989][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.276115][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.284778][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.296896][ T3565] device veth0_macvtap entered promiscuous mode [ 69.306787][ T3565] device veth1_macvtap entered promiscuous mode [ 69.323821][ T3565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.331406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.339863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.348086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.357212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.368953][ T3565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.376466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.385356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.397341][ T3565] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.406506][ T3565] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.415384][ T3565] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.424968][ T3565] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.490104][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.506863][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.516249][ T3577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.526048][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) unshare(0x400) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESHEX, @ANYRES32], 0x11, 0x6a0, &(0x7f0000004200)="$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") openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0xa3}) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000200)='./file0\x00', 0x0, 0x1) faccessat2(r3, &(0x7f0000000140)='./file0\x00', 0x5, 0x0) membarrier(0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000b40)={0x2020}, 0x2020) getdents64(0xffffffffffffffff, &(0x7f0000000500)=""/45, 0x2d) eventfd2(0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40104593, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "7f0e279d2e5cf55a61c5c40d6e76943e0347c7cbf6336e676a359b970be7f3f3"}) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000240)={0x0, 0x2, 0x0}) listen(r0, 0xfff) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500180600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6004020000"], 0x0) [ 69.534206][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.543206][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.615130][ T3590] loop4: detected capacity change from 0 to 1024 [ 69.625546][ T3590] hfsplus: unable to parse mount options [ 69.676147][ T3562] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 executing program 4: syz_mount_image$minix(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x1a4, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c6780820040000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) [ 69.789102][ T3596] loop4: detected capacity change from 0 to 47 [ 69.864617][ T3596] ======================================================= [ 69.864617][ T3596] WARNING: The mand mount option has been deprecated and [ 69.864617][ T3596] and is ignored by this kernel. Remove the mand [ 69.864617][ T3596] option from the mount to silence this warning. [ 69.864617][ T3596] ======================================================= [ 69.956520][ T48] Bluetooth: hci0: command tx timeout executing program 4: syz_mount_image$minix(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x1a4, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c6780820040000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) [ 70.146260][ T3565] minix_free_block (loop4:20): bit already cleared [ 70.152983][ T3565] minix_free_block (loop4:21): bit already cleared [ 70.181697][ T3565] minix_free_block (loop4:22): bit already cleared [ 70.197297][ T3565] minix_free_block (loop4:19): bit already cleared [ 70.219790][ T3565] ------------[ cut here ]------------ [ 70.225587][ T3565] WARNING: CPU: 1 PID: 3565 at fs/inode.c:332 drop_nlink+0xbb/0x100 [ 70.233733][ T3565] Modules linked in: [ 70.233839][ T3567] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.237639][ T3565] CPU: 1 PID: 3565 Comm: syz-executor.4 Not tainted 6.1.91-syzkaller #0 [ 70.253151][ T3565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 70.263308][ T3565] RIP: 0010:drop_nlink+0xbb/0x100 [ 70.268399][ T3565] Code: 49 8b 1e 48 8d bb c0 07 00 00 be 08 00 00 00 e8 eb 0b ea ff f0 48 ff 83 c0 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 b5 8a 92 ff <0f> 0b eb 89 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 70.288167][ T3565] RSP: 0018:ffffc90003c3fc50 EFLAGS: 00010293 [ 70.289375][ T3567] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.294306][ T3565] RAX: ffffffff81f8029b RBX: 1ffff1100deb5965 RCX: ffff88801fa5bb80 [ 70.303922][ T3566] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.309813][ T3565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.320063][ T3567] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.324827][ T3565] RBP: 0000000000000000 R08: ffffffff81f8021f R09: ffffed100deb596d [ 70.334968][ T3567] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.339807][ T3565] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88806f5acb28 [ 70.347195][ T3567] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.354728][ T3565] R13: ffff8880757bb8f8 R14: ffff88806f5acae0 R15: dffffc0000000000 [ 70.354750][ T3565] FS: 0000555556311480(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 70.354770][ T3565] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.354787][ T3565] CR2: 00007f4a3c0d66cc CR3: 0000000065b72000 CR4: 00000000003506e0 [ 70.354806][ T3565] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.354820][ T3565] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.354834][ T3565] Call Trace: [ 70.354842][ T3565] [ 70.354852][ T3565] ? __warn+0x15a/0x520 [ 70.354878][ T3565] ? drop_nlink+0xbb/0x100 [ 70.354913][ T3565] ? report_bug+0x2af/0x500 [ 70.354948][ T3565] ? drop_nlink+0xbb/0x100 [ 70.433479][ T3565] ? handle_bug+0x3d/0x70 [ 70.437879][ T3565] ? exc_invalid_op+0x16/0x40 [ 70.442610][ T3565] ? asm_exc_invalid_op+0x16/0x20 [ 70.447729][ T3565] ? drop_nlink+0x3f/0x100 [ 70.452198][ T3565] ? drop_nlink+0xbb/0x100 [ 70.456708][ T3565] ? drop_nlink+0xbb/0x100 [ 70.461174][ T3565] minix_unlink+0x14a/0x1a0 [ 70.465769][ T3565] ? minix_link+0x110/0x110 [ 70.470311][ T3565] ? may_delete+0x560/0x700 [ 70.474892][ T3565] ? bpf_lsm_inode_unlink+0x5/0x10 [ 70.480040][ T3565] ? security_inode_unlink+0xca/0x110 [ 70.480766][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.485471][ T3565] vfs_unlink+0x359/0x5f0 [ 70.485517][ T3565] do_unlinkat+0x4a5/0x820 [ 70.495217][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.496897][ T3565] ? fsnotify_link_count+0xf0/0xf0 [ 70.502074][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.508239][ T3565] __x64_sys_unlink+0x45/0x50 [ 70.525093][ T3565] do_syscall_64+0x3b/0xb0 [ 70.526967][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.529536][ T3565] ? clear_bhb_loop+0x45/0xa0 [ 70.538427][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.541170][ T3565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.548514][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.554086][ T3565] RIP: 0033:0x7f5f2467c697 [ 70.554112][ T3565] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 70.554130][ T3565] RSP: 002b:00007ffd9e99d578 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 70.554157][ T3565] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5f2467c697 [ 70.554173][ T3565] RDX: 00007ffd9e99d5a0 RSI: 00007ffd9e99d630 RDI: 00007ffd9e99d630 [ 70.554189][ T3565] RBP: 00007ffd9e99d630 R08: 0000000000000000 R09: 0000000000000000 [ 70.617830][ T3565] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd9e99e720 [ 70.625881][ T3565] R13: 00007f5f246c8336 R14: 000000000001106a R15: 0000000000000007 [ 70.633950][ T3565] [ 70.637010][ T3565] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 70.644313][ T3565] CPU: 1 PID: 3565 Comm: syz-executor.4 Not tainted 6.1.91-syzkaller #0 [ 70.652664][ T3565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 70.662741][ T3565] Call Trace: [ 70.666042][ T3565] [ 70.668997][ T3565] dump_stack_lvl+0x1e3/0x2cb [ 70.673719][ T3565] ? nf_tcp_handle_invalid+0x642/0x642 [ 70.679228][ T3565] ? panic+0x764/0x764 [ 70.683345][ T3565] ? vscnprintf+0x59/0x80 [ 70.687766][ T3565] panic+0x318/0x764 [ 70.691709][ T3565] ? __warn+0x169/0x520 [ 70.695897][ T3565] ? memcpy_page_flushcache+0xfc/0xfc [ 70.701322][ T3565] __warn+0x348/0x520 [ 70.705332][ T3565] ? drop_nlink+0xbb/0x100 [ 70.709784][ T3565] report_bug+0x2af/0x500 [ 70.714145][ T3565] ? drop_nlink+0xbb/0x100 [ 70.718610][ T3565] handle_bug+0x3d/0x70 [ 70.722807][ T3565] exc_invalid_op+0x16/0x40 [ 70.727345][ T3565] asm_exc_invalid_op+0x16/0x20 [ 70.732214][ T3565] RIP: 0010:drop_nlink+0xbb/0x100 [ 70.737252][ T3565] Code: 49 8b 1e 48 8d bb c0 07 00 00 be 08 00 00 00 e8 eb 0b ea ff f0 48 ff 83 c0 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 b5 8a 92 ff <0f> 0b eb 89 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 70.756865][ T3565] RSP: 0018:ffffc90003c3fc50 EFLAGS: 00010293 [ 70.762939][ T3565] RAX: ffffffff81f8029b RBX: 1ffff1100deb5965 RCX: ffff88801fa5bb80 [ 70.770926][ T3565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.778908][ T3565] RBP: 0000000000000000 R08: ffffffff81f8021f R09: ffffed100deb596d [ 70.786886][ T3565] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88806f5acb28 [ 70.794862][ T3565] R13: ffff8880757bb8f8 R14: ffff88806f5acae0 R15: dffffc0000000000 [ 70.802849][ T3565] ? drop_nlink+0x3f/0x100 [ 70.807281][ T3565] ? drop_nlink+0xbb/0x100 [ 70.811719][ T3565] minix_unlink+0x14a/0x1a0 [ 70.816327][ T3565] ? minix_link+0x110/0x110 [ 70.820843][ T3565] ? may_delete+0x560/0x700 [ 70.825358][ T3565] ? bpf_lsm_inode_unlink+0x5/0x10 [ 70.830506][ T3565] ? security_inode_unlink+0xca/0x110 [ 70.835894][ T3565] vfs_unlink+0x359/0x5f0 [ 70.840238][ T3565] do_unlinkat+0x4a5/0x820 [ 70.844666][ T3565] ? fsnotify_link_count+0xf0/0xf0 [ 70.849806][ T3565] __x64_sys_unlink+0x45/0x50 [ 70.854494][ T3565] do_syscall_64+0x3b/0xb0 [ 70.858922][ T3565] ? clear_bhb_loop+0x45/0xa0 [ 70.863610][ T3565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.869514][ T3565] RIP: 0033:0x7f5f2467c697 [ 70.873936][ T3565] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 70.893548][ T3565] RSP: 002b:00007ffd9e99d578 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 70.901969][ T3565] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5f2467c697 [ 70.909943][ T3565] RDX: 00007ffd9e99d5a0 RSI: 00007ffd9e99d630 RDI: 00007ffd9e99d630 [ 70.917918][ T3565] RBP: 00007ffd9e99d630 R08: 0000000000000000 R09: 0000000000000000 [ 70.925894][ T3565] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd9e99e720 [ 70.933882][ T3565] R13: 00007f5f246c8336 R14: 000000000001106a R15: 0000000000000007 [ 70.941894][ T3565] [ 70.945199][ T3565] Kernel Offset: disabled [ 70.949568][ T3565] Rebooting in 86400 seconds..