./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3077614980
<...>
forked to background, child pid 3180
no interfaces have a carrier
[ 34.477781][ T3181] 8021q: adding VLAN 0 to HW filter on device bond0
[ 34.487196][ T3181] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.25' (ECDSA) to the list of known hosts.
execve("./syz-executor3077614980", ["./syz-executor3077614980"], 0x7fff6ebe2cc0 /* 10 vars */) = 0
brk(NULL) = 0x5555565eb000
brk(0x5555565ebc40) = 0x5555565ebc40
arch_prctl(ARCH_SET_FS, 0x5555565eb300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3077614980", 4096) = 28
brk(0x55555660cc40) = 0x55555660cc40
brk(0x55555660d000) = 0x55555660d000
mprotect(0x7f27eed9c000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
mkdir("./file1", 000) = 0
mkdir("./bus", 000) = 0
mkdir("./file0", 000) = 0
mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,nfs_export=on,") = 0
open("./bus", O_RDONLY) = 3
syzkaller login: [ 51.470109][ T3609] ------------[ cut here ]------------
[ 51.475935][ T3609] memcpy: detected field-spanning write (size 93) of single field "&fh->fb" at fs/overlayfs/export.c:799 (size 21)
[ 51.488389][ T3609] WARNING: CPU: 0 PID: 3609 at fs/overlayfs/export.c:799 ovl_fh_to_dentry+0x880/0x950
[ 51.498158][ T3609] Modules linked in:
[ 51.502036][ T3609] CPU: 0 PID: 3609 Comm: syz-executor307 Not tainted 6.1.0-rc2-syzkaller-00105-gb229b6ca5abb #0
[ 51.512471][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
[ 51.522543][ T3609] RIP: 0010:ovl_fh_to_dentry+0x880/0x950
[ 51.528162][ T3609] Code: f9 ff ff e8 c2 0f ab fe b9 15 00 00 00 4c 89 f6 48 c7 c2 e0 26 28 8a 48 c7 c7 40 27 28 8a c6 05 77 db fa 0a 01 e8 0c 31 78 06 <0f> 0b e9 ec f8 ff ff 49 c7 c6 ea ff ff ff bb ea ff ff ff c7 44 24
[ 51.547892][ T3609] RSP: 0018:ffffc90003e6fb30 EFLAGS: 00010282
[ 51.553999][ T3609] RAX: 0000000000000000 RBX: 0000000000000060 RCX: 0000000000000000
[ 51.561954][ T3609] RDX: ffff88801e5e57c0 RSI: ffffffff81621b98 RDI: fffff520007cdf58
[ 51.569949][ T3609] RBP: ffff88807f4a4180 R08: 0000000000000005 R09: 0000000000000000
[ 51.578025][ T3609] R10: 0000000080000000 R11: 203a7970636d656d R12: 00000000000000fb
[ 51.586130][ T3609] R13: 1ffff920007cdf6e R14: 000000000000005d R15: ffff88807f4a4183
[ 51.594304][ T3609] FS: 00005555565eb300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 51.603303][ T3609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 51.609902][ T3609] CR2: 00005632055db6f8 CR3: 00000000204b2000 CR4: 0000000000350ee0
[ 51.617980][ T3609] Call Trace:
[ 51.621289][ T3609]
[ 51.624238][ T3609] ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 51.630079][ T3609] ? __stack_depot_save+0x260/0x560
[ 51.635321][ T3609] ? ovl_get_dentry+0x6c0/0x6c0
[ 51.640182][ T3609] ? kasan_save_stack+0x31/0x40
[ 51.645076][ T3609] exportfs_decode_fh_raw+0x127/0x7d0
[ 51.650478][ T3609] ? drop_caches_sysctl_handler+0x110/0x110
[ 51.656418][ T3609] ? ovl_get_dentry+0x6c0/0x6c0
[ 51.661279][ T3609] ? __schedule+0xaf1/0x53f0
[ 51.665903][ T3609] ? reconnect_path+0x810/0x810
[ 51.670796][ T3609] ? ___slab_alloc+0xca0/0x1400
[ 51.675673][ T3609] ? trace_hardirqs_on+0x2d/0x160
[ 51.680799][ T3609] ? do_handle_open+0xfc/0x8b0
[ 51.685590][ T3609] ? rcu_read_lock_sched_held+0xd/0x70
[ 51.691071][ T3609] ? rcu_read_lock_sched_held+0xd/0x70
[ 51.696770][ T3609] ? lock_acquire+0x4fc/0x630
[ 51.701453][ T3609] ? rcu_read_lock_sched_held+0xd/0x70
[ 51.706938][ T3609] ? lock_release+0x5cb/0x810
[ 51.711633][ T3609] ? __might_fault+0xd1/0x170
[ 51.716349][ T3609] ? lock_downgrade+0x6e0/0x6e0
[ 51.721225][ T3609] ? drop_caches_sysctl_handler+0x110/0x110
[ 51.727152][ T3609] exportfs_decode_fh+0x38/0x90
[ 51.732019][ T3609] do_handle_open+0x2b6/0x8b0
[ 51.736730][ T3609] ? do_sys_name_to_handle+0x4c0/0x4c0
[ 51.742207][ T3609] ? _raw_spin_unlock_irq+0x1f/0x40
[ 51.747437][ T3609] ? trace_hardirqs_on+0x2d/0x160
[ 51.752485][ T3609] ? _raw_spin_unlock_irq+0x2a/0x40
[ 51.757676][ T3609] ? ptrace_notify+0xfa/0x140
[ 51.762390][ T3609] do_syscall_64+0x35/0xb0
[ 51.766840][ T3609] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 51.772763][ T3609] RIP: 0033:0x7f27eed2fcc9
[ 51.777201][ T3609] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 51.796840][ T3609] RSP: 002b:00007fffc2b58678 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[ 51.805300][ T3609] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f27eed2fcc9
[ 51.813319][ T3609] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003
[ 51.821319][ T3609] RBP: 00007f27eecf3e70 R08: 0000000000000000 R09: 0000000000000000
[ 51.829344][ T3609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f27eecf3f00
[ 51.837353][ T3609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 51.845396][ T3609]
[ 51.848430][ T3609] Kernel panic - not syncing: panic_on_warn set ...
[ 51.854992][ T3609] CPU: 1 PID: 3609 Comm: syz-executor307 Not tainted 6.1.0-rc2-syzkaller-00105-gb229b6ca5abb #0
[ 51.865379][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
[ 51.875416][ T3609] Call Trace:
[ 51.878673][ T3609]
[ 51.881586][ T3609] dump_stack_lvl+0xcd/0x134
[ 51.886171][ T3609] panic+0x2c8/0x622
[ 51.890084][ T3609] ? panic_print_sys_info.part.0+0x110/0x110
[ 51.896058][ T3609] ? __warn.cold+0x24b/0x350
[ 51.900634][ T3609] ? ovl_fh_to_dentry+0x880/0x950
[ 51.905642][ T3609] __warn.cold+0x25c/0x350
[ 51.910045][ T3609] ? __wake_up_klogd.part.0+0x99/0xf0
[ 51.915397][ T3609] ? ovl_fh_to_dentry+0x880/0x950
[ 51.920400][ T3609] report_bug+0x1bc/0x210
[ 51.924721][ T3609] handle_bug+0x3c/0x70
[ 51.928865][ T3609] exc_invalid_op+0x14/0x40
[ 51.933353][ T3609] asm_exc_invalid_op+0x16/0x20
[ 51.938187][ T3609] RIP: 0010:ovl_fh_to_dentry+0x880/0x950
[ 51.943805][ T3609] Code: f9 ff ff e8 c2 0f ab fe b9 15 00 00 00 4c 89 f6 48 c7 c2 e0 26 28 8a 48 c7 c7 40 27 28 8a c6 05 77 db fa 0a 01 e8 0c 31 78 06 <0f> 0b e9 ec f8 ff ff 49 c7 c6 ea ff ff ff bb ea ff ff ff c7 44 24
[ 51.963403][ T3609] RSP: 0018:ffffc90003e6fb30 EFLAGS: 00010282
[ 51.969449][ T3609] RAX: 0000000000000000 RBX: 0000000000000060 RCX: 0000000000000000
[ 51.977403][ T3609] RDX: ffff88801e5e57c0 RSI: ffffffff81621b98 RDI: fffff520007cdf58
[ 51.985362][ T3609] RBP: ffff88807f4a4180 R08: 0000000000000005 R09: 0000000000000000
[ 51.993316][ T3609] R10: 0000000080000000 R11: 203a7970636d656d R12: 00000000000000fb
[ 52.001272][ T3609] R13: 1ffff920007cdf6e R14: 000000000000005d R15: ffff88807f4a4183
[ 52.009235][ T3609] ? vprintk+0x88/0x90
[ 52.013303][ T3609] ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 52.019101][ T3609] ? __stack_depot_save+0x260/0x560
[ 52.024294][ T3609] ? ovl_get_dentry+0x6c0/0x6c0
[ 52.029154][ T3609] ? kasan_save_stack+0x31/0x40
[ 52.034000][ T3609] exportfs_decode_fh_raw+0x127/0x7d0
[ 52.039372][ T3609] ? drop_caches_sysctl_handler+0x110/0x110
[ 52.045258][ T3609] ? ovl_get_dentry+0x6c0/0x6c0
[ 52.050184][ T3609] ? __schedule+0xaf1/0x53f0
[ 52.054769][ T3609] ? reconnect_path+0x810/0x810
[ 52.059614][ T3609] ? ___slab_alloc+0xca0/0x1400
[ 52.064458][ T3609] ? trace_hardirqs_on+0x2d/0x160
[ 52.069469][ T3609] ? do_handle_open+0xfc/0x8b0
[ 52.074231][ T3609] ? rcu_read_lock_sched_held+0xd/0x70
[ 52.079678][ T3609] ? rcu_read_lock_sched_held+0xd/0x70
[ 52.085122][ T3609] ? lock_acquire+0x4fc/0x630
[ 52.089787][ T3609] ? rcu_read_lock_sched_held+0xd/0x70
[ 52.095249][ T3609] ? lock_release+0x5cb/0x810
[ 52.099941][ T3609] ? __might_fault+0xd1/0x170
[ 52.104607][ T3609] ? lock_downgrade+0x6e0/0x6e0
[ 52.109449][ T3609] ? drop_caches_sysctl_handler+0x110/0x110
[ 52.115358][ T3609] exportfs_decode_fh+0x38/0x90
[ 52.120207][ T3609] do_handle_open+0x2b6/0x8b0
[ 52.124877][ T3609] ? do_sys_name_to_handle+0x4c0/0x4c0
[ 52.130326][ T3609] ? _raw_spin_unlock_irq+0x1f/0x40
[ 52.135522][ T3609] ? trace_hardirqs_on+0x2d/0x160
[ 52.140535][ T3609] ? _raw_spin_unlock_irq+0x2a/0x40
[ 52.145722][ T3609] ? ptrace_notify+0xfa/0x140
[ 52.150387][ T3609] do_syscall_64+0x35/0xb0
[ 52.154811][ T3609] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 52.160695][ T3609] RIP: 0033:0x7f27eed2fcc9
[ 52.165095][ T3609] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 52.184791][ T3609] RSP: 002b:00007fffc2b58678 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[ 52.193194][ T3609] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f27eed2fcc9
[ 52.201153][ T3609] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003
[ 52.209107][ T3609] RBP: 00007f27eecf3e70 R08: 0000000000000000 R09: 0000000000000000
[ 52.217063][ T3609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f27eecf3f00
[ 52.225023][ T3609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 52.232986][ T3609]
[ 52.236936][ T3609] Kernel Offset: disabled
[ 52.241271][ T3609] Rebooting in 86400 seconds..