./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2668509697
<...>
no interfaces have a carrier
forked to background, child pid 3180
[ 22.337327][ T3181] 8021q: adding VLAN 0 to HW filter on device bond0
[ 22.345150][ T3181] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.109' (ECDSA) to the list of known hosts.
execve("./syz-executor2668509697", ["./syz-executor2668509697"], 0x7fff8964c100 /* 10 vars */) = 0
brk(NULL) = 0x5555567a5000
brk(0x5555567a5d00) = 0x5555567a5d00
arch_prctl(ARCH_SET_FS, 0x5555567a53c0) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2668509697", 4096) = 28
brk(0x5555567c6d00) = 0x5555567c6d00
brk(0x5555567c7000) = 0x5555567c7000
mprotect(0x7f27b497e000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7f27b48cfae0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f27b48cfdd0}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7f27b48cfae0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f27b48cfdd0}, NULL, 8) = 0
mkdir("./file0", 0777) = 0
--- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
pipe2([3, 4], 0) = 0
write(4, "\x15\x00\x00\x00\x65\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 21) = 21
dup(4) = 5
mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000005,") = -1 EREMOTEIO (Remote I/O error)
write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24
write(5, "\xb0\x00\x00\x00\x00\x00\x00\x6b\x2e\x7f\xb3\xf3\x73\x25\xda\x31\x44\x1d\xb4\x8c\xe3\x66\xa2\x33\xa6\x5b\x0f\xf5\x73\x17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 176) = 176
write(5, "\x4c\x01\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 311) = 311
mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000004,") = 0
syzkaller login: [ 42.191546][ T3609] ------------[ cut here ]------------
[ 42.191555][ T3609] WARNING: CPU: 0 PID: 3609 at fs/inode.c:388 inc_nlink+0x144/0x160
[ 42.205427][ T3609] Modules linked in:
[ 42.209309][ T3609] CPU: 0 PID: 3609 Comm: syz-executor266 Not tainted 5.18.0-syzkaller-11817-g8171acb8bc9b #0
[ 42.219873][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 42.230207][ T3609] RIP: 0010:inc_nlink+0x144/0x160
[ 42.235327][ T3609] Code: ff 4c 89 e7 e8 ad c4 ea ff e9 42 ff ff ff 4c 89 e7 e8 30 c4 ea ff e9 fc fe ff ff 4c 89 e7 e8 23 c4 ea ff eb d4 e8 fc 03 9e ff <0f> 0b e9 6e ff ff ff e8 20 c4 ea ff e9 44 ff ff ff e8 16 c4 ea ff
[ 42.255109][ T3609] RSP: 0018:ffffc90002fafcc0 EFLAGS: 00010293
[ 42.261172][ T3609] RAX: 0000000000000000 RBX: ffff88801ea18000 RCX: 0000000000000000
[ 42.269235][ T3609] RDX: ffff88807d74bb00 RSI: ffffffff81dc8054 RDI: 0000000000000007
[ 42.277368][ T3609] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[ 42.285405][ T3609] R10: 0000000000000000 R11: 0000000000000002 R12: ffff88801ea18048
[ 42.293487][ T3609] R13: ffff88801e9782f0 R14: ffff88801ea185d8 R15: ffff888011b1ca00
[ 42.301559][ T3609] FS: 00005555567a53c0(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
[ 42.310573][ T3609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 42.317288][ T3609] CR2: 00000000005deca0 CR3: 0000000071104000 CR4: 0000000000350ef0
[ 42.325347][ T3609] Call Trace:
[ 42.325347][ T3609] Call Trace:
[ 42.325373][ T3609]
[ 42.325387][ T3609] v9fs_vfs_mkdir_dotl+0x478/0x770
[ 42.325428][ T3609] ? v9fs_vfs_create_dotl+0x30/0x30
[ 42.325460][ T3609] ? capable_wrt_inode_uidgid+0xe6/0x170
[ 42.325498][ T3609] ? generic_permission+0x1d8/0x770
[ 42.325526][ T3609] ? from_kgid+0x87/0xc0
[ 42.325556][ T3609] ? security_inode_permission+0xc5/0xf0
[ 42.325596][ T3609] ? inode_permission.part.0+0xb5/0x670
[ 42.325631][ T3609] ? bpf_lsm_inode_mkdir+0x5/0x10
[ 42.325671][ T3609] vfs_mkdir+0x1c3/0x3b0
[ 42.325704][ T3609] do_mkdirat+0x285/0x300
[ 42.325738][ T3609] ? __ia32_sys_mknod+0xa0/0xa0
[ 42.325773][ T3609] ? getname_flags.part.0+0x1dd/0x4f0
[ 42.325811][ T3609] __x64_sys_mkdir+0xf2/0x140
[ 42.325843][ T3609] do_syscall_64+0x35/0xb0
[ 42.325884][ T3609] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 42.325915][ T3609] RIP: 0033:0x7f27b4911819
[ 42.325939][ T3609] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 42.325965][ T3609] RSP: 002b:00007fffbb343868 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 42.325997][ T3609] RAX: ffffffffffffffda RBX: 00007fffbb343878 RCX: 00007f27b4911819
[ 42.326018][ T3609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0
[ 42.326037][ T3609] RBP: 00007fffbb343870 R08: 00007f27b48cfae0 R09: 00007f27b48cfae0
[ 42.326057][ T3609] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000
[ 42.326077][ T3609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 42.326117][ T3609]
[ 42.326130][ T3609] Kernel panic - not syncing: panic_on_warn set ...
[ 42.326142][ T3609] CPU: 0 PID: 3609 Comm: syz-executor266 Not tainted 5.18.0-syzkaller-11817-g8171acb8bc9b #0
[ 42.326173][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 42.326188][ T3609] Call Trace:
[ 42.326197][ T3609]
[ 42.326208][ T3609] dump_stack_lvl+0xcd/0x134
[ 42.326247][ T3609] panic+0x2d7/0x636
[ 42.326273][ T3609] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 42.326304][ T3609] ? __warn.cold+0x1d9/0x2cd
[ 42.326325][ T3609] ? inc_nlink+0x144/0x160
[ 42.326344][ T3609] __warn.cold+0x1ea/0x2cd
[ 42.326363][ T3609] ? inc_nlink+0x144/0x160
[ 42.326382][ T3609] report_bug+0x1bc/0x210
[ 42.326405][ T3609] handle_bug+0x3c/0x60
[ 42.326425][ T3609] exc_invalid_op+0x14/0x40
[ 42.326446][ T3609] asm_exc_invalid_op+0x1b/0x20
[ 42.326464][ T3609] RIP: 0010:inc_nlink+0x144/0x160
[ 42.326483][ T3609] Code: ff 4c 89 e7 e8 ad c4 ea ff e9 42 ff ff ff 4c 89 e7 e8 30 c4 ea ff e9 fc fe ff ff 4c 89 e7 e8 23 c4 ea ff eb d4 e8 fc 03 9e ff <0f> 0b e9 6e ff ff ff e8 20 c4 ea ff e9 44 ff ff ff e8 16 c4 ea ff
[ 42.326500][ T3609] RSP: 0018:ffffc90002fafcc0 EFLAGS: 00010293
[ 42.326517][ T3609] RAX: 0000000000000000 RBX: ffff88801ea18000 RCX: 0000000000000000
[ 42.326529][ T3609] RDX: ffff88807d74bb00 RSI: ffffffff81dc8054 RDI: 0000000000000007
[ 42.326542][ T3609] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[ 42.326554][ T3609] R10: 0000000000000000 R11: 0000000000000002 R12: ffff88801ea18048
[ 42.326566][ T3609] R13: ffff88801e9782f0 R14: ffff88801ea185d8 R15: ffff888011b1ca00
[ 42.326588][ T3609] ? inc_nlink+0x144/0x160
[ 42.326612][ T3609] v9fs_vfs_mkdir_dotl+0x478/0x770
[ 42.326636][ T3609] ? v9fs_vfs_create_dotl+0x30/0x30
[ 42.326657][ T3609] ? capable_wrt_inode_uidgid+0xe6/0x170
[ 42.326682][ T3609] ? generic_permission+0x1d8/0x770
[ 42.326699][ T3609] ? from_kgid+0x87/0xc0
[ 42.326718][ T3609] ? security_inode_permission+0xc5/0xf0
[ 42.326744][ T3609] ? inode_permission.part.0+0xb5/0x670
[ 42.326766][ T3609] ? bpf_lsm_inode_mkdir+0x5/0x10
[ 42.326792][ T3609] vfs_mkdir+0x1c3/0x3b0
[ 42.326814][ T3609] do_mkdirat+0x285/0x300
[ 42.326837][ T3609] ? __ia32_sys_mknod+0xa0/0xa0
[ 42.326860][ T3609] ? getname_flags.part.0+0x1dd/0x4f0
[ 42.326884][ T3609] __x64_sys_mkdir+0xf2/0x140
[ 42.326906][ T3609] do_syscall_64+0x35/0xb0
[ 42.326926][ T3609] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 42.326946][ T3609] RIP: 0033:0x7f27b4911819
[ 42.326961][ T3609] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 42.326978][ T3609] RSP: 002b:00007fffbb343868 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 42.326997][ T3609] RAX: ffffffffffffffda RBX: 00007fffbb343878 RCX: 00007f27b4911819
[ 42.327010][ T3609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0
[ 42.327022][ T3609] RBP: 00007fffbb343870 R08: 00007f27b48cfae0 R09: 00007f27b48cfae0
[ 42.327035][ T3609] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000
[ 42.327047][ T3609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 42.327073][ T3609]
[ 42.329302][ T3609] Kernel Offset: disabled