[ 72.982219][ T5297] sshd (5297) used greatest stack depth: 18704 bytes left Warning: Permanently added '[localhost]:13865' (ED25519) to the list of known hosts. executing program [ 76.992741][ T5311] loop0: detected capacity change from 0 to 128 [ 77.053285][ T5311] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 77.058516][ T5311] syz-executor396: attempt to access beyond end of device [ 77.058516][ T5311] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 77.078954][ T5311] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 77.082781][ T5311] ------------[ cut here ]------------ [ 77.084841][ T5311] WARNING: CPU: 0 PID: 5311 at fs/inode.c:464 inc_nlink+0x127/0x150 [ 77.087962][ T5311] Modules linked in: [ 77.090419][ T5311] CPU: 0 UID: 0 PID: 5311 Comm: syz-executor396 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 77.097479][ T5311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.101720][ T5311] RIP: 0010:inc_nlink+0x127/0x150 [ 77.103680][ T5311] Code: ff e9 35 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 47 ff ff ff 4c 89 ef e8 d4 07 e7 ff e9 3a ff ff ff e8 da 6e 80 ff 90 <0f> 0b 90 e9 7b ff ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 49 [ 77.110741][ T5311] RSP: 0018:ffffc9000d0dfd30 EFLAGS: 00010293 [ 77.113140][ T5311] RAX: ffffffff823ee0c6 RBX: 1ffff11008ac0010 RCX: ffff88801ec14880 [ 77.116771][ T5311] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.120917][ T5311] RBP: 0000000000000000 R08: ffffffff823ee040 R09: 1ffff11006088020 [ 77.124737][ T5311] R10: dffffc0000000000 R11: ffffffff82e161f0 R12: dffffc0000000000 [ 77.127978][ T5311] R13: ffff888045600080 R14: ffff888045600038 R15: 0000000000000000 [ 77.131124][ T5311] FS: 000055559262e380(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 77.134882][ T5311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.137416][ T5311] CR2: 0000559ca0119058 CR3: 000000004129e000 CR4: 0000000000352ef0 [ 77.140688][ T5311] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 77.144329][ T5311] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.148016][ T5311] Call Trace: [ 77.149288][ T5311] [ 77.150475][ T5311] ? __warn+0x165/0x4d0 [ 77.152087][ T5311] ? inc_nlink+0x127/0x150 [ 77.153798][ T5311] ? report_bug+0x2b3/0x500 [ 77.155493][ T5311] ? inc_nlink+0x127/0x150 [ 77.157367][ T5311] ? handle_bug+0x60/0x90 [ 77.159351][ T5311] ? exc_invalid_op+0x1a/0x50 [ 77.161367][ T5311] ? asm_exc_invalid_op+0x1a/0x20 [ 77.163589][ T5311] ? __pfx_sysv_mkdir+0x10/0x10 [ 77.165614][ T5311] ? inc_nlink+0xa0/0x150 [ 77.167331][ T5311] ? inc_nlink+0x126/0x150 [ 77.169349][ T5311] ? inc_nlink+0x127/0x150 [ 77.171233][ T5311] sysv_mkdir+0x21/0x130 [ 77.173084][ T5311] vfs_mkdir+0x2f9/0x4f0 [ 77.174804][ T5311] do_mkdirat+0x264/0x3a0 [ 77.176579][ T5311] ? __check_object_size+0x47a/0x730 [ 77.178490][ T5311] ? __pfx_do_mkdirat+0x10/0x10 [ 77.180299][ T5311] ? strncpy_from_user+0x146/0x270 [ 77.182145][ T5311] ? getname_flags+0x1e3/0x540 [ 77.184658][ T5311] __x64_sys_mkdir+0x6c/0x80 [ 77.186935][ T5311] do_syscall_64+0xf3/0x230 [ 77.189270][ T5311] ? clear_bhb_loop+0x35/0x90 [ 77.191317][ T5311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.193961][ T5311] RIP: 0033:0x7f040f909a99 [ 77.195628][ T5311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.203479][ T5311] RSP: 002b:00007fff69c4d948 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 77.207022][ T5311] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f040f909a99 [ 77.210144][ T5311] RDX: 00007f040f908a91 RSI: 0000000000000000 RDI: 0000400000000040 [ 77.213254][ T5311] RBP: 00007f040f9865f0 R08: 0000000000009e89 R09: 000055559262f4c0 [ 77.216631][ T5311] R10: 00007fff69c4d810 R11: 0000000000000246 R12: 00007fff69c4d970 [ 77.219835][ T5311] R13: 00007fff69c4db98 R14: 431bde82d7b634db R15: 00007f040f95203b [ 77.222918][ T5311] [ 77.224286][ T5311] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 77.227654][ T5311] CPU: 0 UID: 0 PID: 5311 Comm: syz-executor396 Not tainted 6.14.0-rc2-syzkaller-00056-gab68d7eb7b1a #0 [ 77.232416][ T5311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.236889][ T5311] Call Trace: [ 77.238300][ T5311] [ 77.239434][ T5311] dump_stack_lvl+0x241/0x360 [ 77.241354][ T5311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.243417][ T5311] ? __pfx__printk+0x10/0x10 [ 77.245252][ T5311] ? vscnprintf+0x5d/0x90 [ 77.246980][ T5311] panic+0x349/0x880 [ 77.248903][ T5311] ? __warn+0x174/0x4d0 [ 77.251113][ T5311] ? __pfx_panic+0x10/0x10 [ 77.253023][ T5311] __warn+0x344/0x4d0 [ 77.254835][ T5311] ? inc_nlink+0x127/0x150 [ 77.256709][ T5311] report_bug+0x2b3/0x500 [ 77.258462][ T5311] ? inc_nlink+0x127/0x150 [ 77.260345][ T5311] handle_bug+0x60/0x90 [ 77.262319][ T5311] exc_invalid_op+0x1a/0x50 [ 77.264489][ T5311] asm_exc_invalid_op+0x1a/0x20 [ 77.266733][ T5311] RIP: 0010:inc_nlink+0x127/0x150 [ 77.268669][ T5311] Code: ff e9 35 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 47 ff ff ff 4c 89 ef e8 d4 07 e7 ff e9 3a ff ff ff e8 da 6e 80 ff 90 <0f> 0b 90 e9 7b ff ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 49 [ 77.276108][ T5311] RSP: 0018:ffffc9000d0dfd30 EFLAGS: 00010293 [ 77.279087][ T5311] RAX: ffffffff823ee0c6 RBX: 1ffff11008ac0010 RCX: ffff88801ec14880 [ 77.282955][ T5311] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.285620][ T5311] RBP: 0000000000000000 R08: ffffffff823ee040 R09: 1ffff11006088020 [ 77.288135][ T5311] R10: dffffc0000000000 R11: ffffffff82e161f0 R12: dffffc0000000000 [ 77.290740][ T5311] R13: ffff888045600080 R14: ffff888045600038 R15: 0000000000000000 [ 77.293625][ T5311] ? __pfx_sysv_mkdir+0x10/0x10 [ 77.295672][ T5311] ? inc_nlink+0xa0/0x150 [ 77.297631][ T5311] ? inc_nlink+0x126/0x150 [ 77.299598][ T5311] sysv_mkdir+0x21/0x130 [ 77.301355][ T5311] vfs_mkdir+0x2f9/0x4f0 [ 77.303214][ T5311] do_mkdirat+0x264/0x3a0 [ 77.304886][ T5311] ? __check_object_size+0x47a/0x730 [ 77.306809][ T5311] ? __pfx_do_mkdirat+0x10/0x10 [ 77.308656][ T5311] ? strncpy_from_user+0x146/0x270 [ 77.310581][ T5311] ? getname_flags+0x1e3/0x540 [ 77.312529][ T5311] __x64_sys_mkdir+0x6c/0x80 [ 77.314616][ T5311] do_syscall_64+0xf3/0x230 [ 77.316712][ T5311] ? clear_bhb_loop+0x35/0x90 [ 77.318903][ T5311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.321381][ T5311] RIP: 0033:0x7f040f909a99 [ 77.323167][ T5311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.330355][ T5311] RSP: 002b:00007fff69c4d948 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 77.333623][ T5311] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f040f909a99 [ 77.337748][ T5311] RDX: 00007f040f908a91 RSI: 0000000000000000 RDI: 0000400000000040 [ 77.342745][ T5311] RBP: 00007f040f9865f0 R08: 0000000000009e89 R09: 000055559262f4c0 [ 77.346152][ T5311] R10: 00007fff69c4d810 R11: 0000000000000246 R12: 00007fff69c4d970 [ 77.349257][ T5311] R13: 00007fff69c4db98 R14: 431bde82d7b634db R15: 00007f040f95203b [ 77.352491][ T5311] [ 77.354055][ T5311] Kernel Offset: disabled [ 77.355929][ T5311] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:12:00 Registers: info registers vcpu 0 CPU#0 RAX=1ffffffff34e9005 RBX=ffffffff9a748080 RCX=0000000000000000 RDX=00000000000003f9 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000d0df458 R8 =ffffffff8576ca16 R9 =fffff52001a1be6c R10=dffffc0000000000 R11=ffffffff8576c9d0 R12=0000000000000000 R13=dffffc0000000000 R14=00000000000003f9 R15=dffffc0000000000 RIP=ffffffff8576ca46 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055559262e380 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000559ca0119058 CR3=000000004129e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000044000001 Opmask01=000000000000001f Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4e1e2550 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d25203a7325206b 6e696c6d79732065 7461657263206f74 2064656c69614600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4800051f5600054e 4b4c49485c560540 5144405746054a51 054140494c444600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 000000302f716d00 30706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004449 55555f48544e5953 0000000000000021 0000000000007374 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a2648393a3a264b 393a3a263e393a3a 2648383a3a26483b 3a0a00307f617930 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 263f323a3a263b32 3a3a263a323a3a26 4c3d3a3a26333d3a 3a263c3d3a3a263f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000