./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2333725005
<...>
Warning: Permanently added '10.128.1.101' (ECDSA) to the list of known hosts.
execve("./syz-executor2333725005", ["./syz-executor2333725005"], 0x7ffcefc1ebe0 /* 10 vars */) = 0
brk(NULL) = 0x555555c55000
brk(0x555555c55d00) = 0x555555c55d00
arch_prctl(ARCH_SET_FS, 0x555555c553c0) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2333725005", 4096) = 28
brk(0x555555c76d00) = 0x555555c76d00
brk(0x555555c77000) = 0x555555c77000
mprotect(0x7f6cdd4c9000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7f6cdd41aae0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f6cdd41add0}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7f6cdd41aae0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f6cdd41add0}, NULL, 8) = 0
mkdir("./file0", 0777) = 0
--- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
pipe2([3, 4], 0) = 0
write(4, "\x15\x00\x00\x00\x61\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 21) = 21
dup(4) = 5
mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000005,") = -1 EREMOTEIO (Remote I/O error)
write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24
write(5, "\xb0\x00\x00\x00\x00\x00\x00\x6b\x2e\x7f\xb3\xf3\x73\x25\x7a\x00\xe4\x78\x55\xa6\x04\xc6\x09\x00\x00\x00\xa7\xa3\x5e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 176) = 176
write(5, "\x4c\x01\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 311) = 311
mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000004,") = 0
syzkaller login: [ 37.227718][ T3613] ------------[ cut here ]------------
[ 37.233316][ T3613] WARNING: CPU: 0 PID: 3613 at fs/inode.c:388 inc_nlink+0x144/0x160
[ 37.241359][ T3613] Modules linked in:
[ 37.245287][ T3613] CPU: 0 PID: 3613 Comm: syz-executor233 Not tainted 5.19.0-rc5-syzkaller-00228-ge5524c2a1fc4 #0
[ 37.256146][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 37.266784][ T3613] RIP: 0010:inc_nlink+0x144/0x160
[ 37.271863][ T3613] Code: ff 4c 89 e7 e8 fd c3 ea ff e9 42 ff ff ff 4c 89 e7 e8 80 c3 ea ff e9 fc fe ff ff 4c 89 e7 e8 73 c3 ea ff eb d4 e8 ac 0b 9e ff <0f> 0b e9 6e ff ff ff e8 70 c3 ea ff e9 44 ff ff ff e8 66 c3 ea ff
[ 37.291576][ T3613] RSP: 0018:ffffc900033bfcc0 EFLAGS: 00010293
[ 37.297834][ T3613] RAX: 0000000000000000 RBX: ffff888072a70000 RCX: 0000000000000000
[ 37.305825][ T3613] RDX: ffff88807e22d880 RSI: ffffffff81dc5ae4 RDI: 0000000000000007
[ 37.313875][ T3613] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[ 37.321879][ T3613] R10: 0000000000000000 R11: 0000000000000002 R12: ffff888072a70048
[ 37.329917][ T3613] R13: ffff888075a23318 R14: ffff888072a705d8 R15: ffff8880169d0600
[ 37.338004][ T3613] FS: 0000555555c553c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 37.346999][ T3613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 37.353689][ T3613] CR2: 0000000020001000 CR3: 0000000070729000 CR4: 0000000000350ef0
[ 37.361701][ T3613] Call Trace:
[ 37.364993][ T3613]
[ 37.368036][ T3613] v9fs_vfs_mkdir_dotl+0x478/0x770
[ 37.373192][ T3613] ? v9fs_vfs_create_dotl+0x30/0x30
[ 37.378561][ T3613] ? capable_wrt_inode_uidgid+0xe6/0x170
[ 37.384236][ T3613] ? generic_permission+0x1d8/0x770
[ 37.389528][ T3613] ? from_kgid+0x87/0xc0
[ 37.393798][ T3613] ? security_inode_permission+0xc5/0xf0
[ 37.399556][ T3613] ? inode_permission.part.0+0xb5/0x670
[ 37.405136][ T3613] ? bpf_lsm_inode_mkdir+0x5/0x10
[ 37.410261][ T3613] vfs_mkdir+0x1c3/0x3b0
[ 37.414538][ T3613] do_mkdirat+0x285/0x300
[ 37.419058][ T3613] ? __ia32_sys_mknod+0xa0/0xa0
[ 37.423931][ T3613] ? getname_flags.part.0+0x1dd/0x4f0
[ 37.429407][ T3613] __x64_sys_mkdir+0xf2/0x140
[ 37.434106][ T3613] do_syscall_64+0x35/0xb0
[ 37.438579][ T3613] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 37.444505][ T3613] RIP: 0033:0x7f6cdd45c819
[ 37.449004][ T3613] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 37.468840][ T3613] RSP: 002b:00007fff89bfb8e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 37.477502][ T3613] RAX: ffffffffffffffda RBX: 00007fff89bfb8f8 RCX: 00007f6cdd45c819
[ 37.485668][ T3613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0
[ 37.493711][ T3613] RBP: 00007fff89bfb8f0 R08: 00007f6cdd41aae0 R09: 00007f6cdd41aae0
[ 37.502020][ T3613] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000
[ 37.510088][ T3613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 37.518096][ T3613]
[ 37.521103][ T3613] Kernel panic - not syncing: panic_on_warn set ...
[ 37.527669][ T3613] CPU: 0 PID: 3613 Comm: syz-executor233 Not tainted 5.19.0-rc5-syzkaller-00228-ge5524c2a1fc4 #0
[ 37.538151][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 37.548190][ T3613] Call Trace:
[ 37.551459][ T3613]
[ 37.554373][ T3613] dump_stack_lvl+0xcd/0x134
[ 37.558981][ T3613] panic+0x2d7/0x636
[ 37.562949][ T3613] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 37.568918][ T3613] ? __warn.cold+0x1d1/0x2c5
[ 37.573492][ T3613] ? inc_nlink+0x144/0x160
[ 37.577900][ T3613] __warn.cold+0x1e2/0x2c5
[ 37.582320][ T3613] ? inc_nlink+0x144/0x160
[ 37.586734][ T3613] report_bug+0x1bc/0x210
[ 37.592387][ T3613] handle_bug+0x3c/0x60
[ 37.596551][ T3613] exc_invalid_op+0x14/0x40
[ 37.601061][ T3613] asm_exc_invalid_op+0x1b/0x20
[ 37.605911][ T3613] RIP: 0010:inc_nlink+0x144/0x160
[ 37.610938][ T3613] Code: ff 4c 89 e7 e8 fd c3 ea ff e9 42 ff ff ff 4c 89 e7 e8 80 c3 ea ff e9 fc fe ff ff 4c 89 e7 e8 73 c3 ea ff eb d4 e8 ac 0b 9e ff <0f> 0b e9 6e ff ff ff e8 70 c3 ea ff e9 44 ff ff ff e8 66 c3 ea ff
[ 37.630557][ T3613] RSP: 0018:ffffc900033bfcc0 EFLAGS: 00010293
[ 37.636631][ T3613] RAX: 0000000000000000 RBX: ffff888072a70000 RCX: 0000000000000000
[ 37.644610][ T3613] RDX: ffff88807e22d880 RSI: ffffffff81dc5ae4 RDI: 0000000000000007
[ 37.652590][ T3613] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[ 37.660562][ T3613] R10: 0000000000000000 R11: 0000000000000002 R12: ffff888072a70048
[ 37.668533][ T3613] R13: ffff888075a23318 R14: ffff888072a705d8 R15: ffff8880169d0600
[ 37.676517][ T3613] ? inc_nlink+0x144/0x160
[ 37.680942][ T3613] v9fs_vfs_mkdir_dotl+0x478/0x770
[ 37.686058][ T3613] ? v9fs_vfs_create_dotl+0x30/0x30
[ 37.691301][ T3613] ? capable_wrt_inode_uidgid+0xe6/0x170
[ 37.696940][ T3613] ? generic_permission+0x1d8/0x770
[ 37.702142][ T3613] ? from_kgid+0x87/0xc0
[ 37.706383][ T3613] ? security_inode_permission+0xc5/0xf0
[ 37.712055][ T3613] ? inode_permission.part.0+0xb5/0x670
[ 37.717621][ T3613] ? bpf_lsm_inode_mkdir+0x5/0x10
[ 37.722655][ T3613] vfs_mkdir+0x1c3/0x3b0
[ 37.726905][ T3613] do_mkdirat+0x285/0x300
[ 37.731239][ T3613] ? __ia32_sys_mknod+0xa0/0xa0
[ 37.736093][ T3613] ? getname_flags.part.0+0x1dd/0x4f0
[ 37.741474][ T3613] __x64_sys_mkdir+0xf2/0x140
[ 37.746160][ T3613] do_syscall_64+0x35/0xb0
[ 37.750588][ T3613] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 37.756485][ T3613] RIP: 0033:0x7f6cdd45c819
[ 37.760896][ T3613] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 37.780517][ T3613] RSP: 002b:00007fff89bfb8e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 37.788928][ T3613] RAX: ffffffffffffffda RBX: 00007fff89bfb8f8 RCX: 00007f6cdd45c819
[ 37.796894][ T3613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0
[ 37.804947][ T3613] RBP: 00007fff89bfb8f0 R08: 00007f6cdd41aae0 R09: 00007f6cdd41aae0
[ 37.813002][ T3613] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000
[ 37.820967][ T3613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 37.829040][ T3613]
[ 37.832625][ T3613] Kernel Offset: disabled
[ 37.836998][ T3613] Rebooting in 86400 seconds..