[ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.103' (ECDSA) to the list of known hosts. syzkaller login: [ 34.364815] IPVS: ftp: loaded support on port[0] = 21 [ 34.459112] chnl_net:caif_netlink_parms(): no params data found [ 34.514876] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.521452] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.529674] device bridge_slave_0 entered promiscuous mode [ 34.537422] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.544441] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.551403] device bridge_slave_1 entered promiscuous mode [ 34.568961] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 34.577797] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 34.595788] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 34.603125] team0: Port device team_slave_0 added [ 34.609275] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 34.616986] team0: Port device team_slave_1 added [ 34.632538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.639103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.665074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.676917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.683149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.709169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.724981] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 34.732337] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 34.751797] device hsr_slave_0 entered promiscuous mode [ 34.757615] device hsr_slave_1 entered promiscuous mode [ 34.764693] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 34.771885] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 34.837068] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.843523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.850662] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.857149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.888894] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 34.896004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.905613] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 34.914984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.924833] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.931935] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.939377] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 34.950567] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 34.957685] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.966808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.975781] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.982112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.992395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.001008] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.007396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.024521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.032320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.040665] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.050118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.061290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.071926] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 35.079225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.086707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.100150] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 35.107878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.114673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.125895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.159225] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 35.169424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.201485] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 35.208815] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 35.215657] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 35.225038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.232486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.239752] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.248821] device veth0_vlan entered promiscuous mode [ 35.257368] device veth1_vlan entered promiscuous mode [ 35.264118] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 35.272416] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 35.285362] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 35.295601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.302733] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.310304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.320355] device veth0_macvtap entered promiscuous mode [ 35.326939] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 35.336338] device veth1_macvtap entered promiscuous mode [ 35.345615] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 35.356158] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 35.366723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.373640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.382076] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.392365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.399492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.509440] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 35.516779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.529140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.542813] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready executing program [ 35.554654] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 35.561326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.568966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.576890] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.619535] ------------[ cut here ]------------ [ 35.624954] WARNING: CPU: 0 PID: 8375 at fs/inode.c:286 drop_nlink.cold+0x11/0x41 [ 35.632580] Kernel panic - not syncing: panic_on_warn set ... [ 35.632580] [ 35.640022] CPU: 0 PID: 8375 Comm: syz-executor502 Not tainted 4.19.211-syzkaller #0 [ 35.647888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 35.657235] Call Trace: [ 35.659811] dump_stack+0x1fc/0x2ef [ 35.663439] panic+0x26a/0x50e [ 35.666623] ? __warn_printk+0xf3/0xf3 [ 35.670503] ? drop_nlink.cold+0x11/0x41 [ 35.674557] ? __probe_kernel_read+0x130/0x1b0 [ 35.679125] ? __warn.cold+0x5/0x5a [ 35.682742] ? __warn+0xe4/0x200 [ 35.686097] ? drop_nlink.cold+0x11/0x41 [ 35.690144] __warn.cold+0x20/0x5a [ 35.693668] ? io_schedule_timeout+0x140/0x140 [ 35.698230] ? drop_nlink.cold+0x11/0x41 [ 35.702276] report_bug+0x262/0x2b0 [ 35.705886] do_error_trap+0x1d7/0x310 [ 35.709765] ? math_error+0x310/0x310 [ 35.713546] ? __irq_work_queue_local+0x101/0x160 [ 35.718397] ? irq_work_queue+0x29/0x80 [ 35.722533] ? error_entry+0x72/0xd0 [ 35.726230] ? trace_hardirqs_off_caller+0x6e/0x210 [ 35.731248] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 35.736091] invalid_op+0x14/0x20 [ 35.739550] RIP: 0010:drop_nlink.cold+0x11/0x41 [ 35.744207] Code: f9 e8 9c bd 6d f9 48 c7 c7 80 a8 74 88 e8 fb ee fe ff 0f 0b e9 9f 50 b4 f9 e8 84 bd 6d f9 48 c7 c7 80 b0 74 88 e8 e3 ee fe ff <0f> 0b b8 ff ff 37 00 4c 89 e2 48 c1 ea 03 48 c1 e0 2a 0f b6 04 02 [ 35.763200] RSP: 0018:ffff8880aed07ce8 EFLAGS: 00010282 [ 35.768551] RAX: 0000000000000024 RBX: 0000000000000000 RCX: 0000000000000000 [ 35.775798] RDX: 0000000000000000 RSI: ffffffff814dff01 RDI: ffffed1015da0f8f [ 35.783052] RBP: ffff88808ace0b90 R08: 0000000000000024 R09: 0000000000000000 [ 35.790309] R10: 0000000000000005 R11: 0000000000000000 R12: ffff88808ace0bd8 [ 35.797580] R13: ffff88808e64c4c0 R14: ffff8880aed07d68 R15: ffff8880ac2ce440 [ 35.804858] ? vprintk_func+0x81/0x180 [ 35.808735] ? drop_nlink.cold+0x11/0x41 [ 35.812781] vfat_rmdir+0x2f6/0x4f0 [ 35.816404] ? vfat_lookup+0x610/0x610 [ 35.820283] vfs_rmdir.part.0+0x10f/0x3d0 [ 35.824411] do_rmdir+0x3fd/0x490 [ 35.827846] ? __ia32_sys_mkdir+0x80/0x80 [ 35.832070] ? ret_from_fork+0x8/0x30 [ 35.835972] ? trace_hardirqs_off_caller+0x6e/0x210 [ 35.840971] ? do_syscall_64+0x21/0x620 [ 35.844928] do_syscall_64+0xf9/0x620 [ 35.849132] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 35.854322] RIP: 0033:0x7f5df7bd6d99 [ 35.858019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 35.876904] RSP: 002b:00007f5df7355208 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 35.884590] RAX: ffffffffffffffda RBX: 000000000000003e RCX: 00007f5df7bd6d99 [ 35.891837] RDX: 00007f5df7bd6d99 RSI: 00007f5df7bd6d99 RDI: 0000000020000300 [ 35.899086] RBP: 00007f5df7c55490 R08: 00007f5df7c55498 R09: 00007f5df7c55498 [ 35.906341] R10: 00007f5df7c55498 R11: 0000000000000246 R12: 00007f5df7c5549c [ 35.913596] R13: 00007ffe0c07c19f R14: 00007f5df7355300 R15: 0000000000022000 [ 35.921193] Kernel Offset: disabled [ 35.924861] Rebooting in 86400 seconds..