./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3641528967
<...>
forked to background, child pid 3179
no interfaces have a carrier
[ 21.938212][ T3180] 8021q: adding VLAN 0 to HW filter on device bond0
[ 21.945829][ T3180] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.41' (ECDSA) to the list of known hosts.
execve("./syz-executor3641528967", ["./syz-executor3641528967"], 0x7ffdaf42c060 /* 10 vars */) = 0
brk(NULL) = 0x555556659000
brk(0x555556659d00) = 0x555556659d00
arch_prctl(ARCH_SET_FS, 0x5555566593c0) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3641528967", 4096) = 28
brk(0x55555667ad00) = 0x55555667ad00
brk(0x55555667b000) = 0x55555667b000
mprotect(0x7f984fb2e000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7f984fa7fae0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f984fa7fdd0}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7f984fa7fae0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f984fa7fdd0}, NULL, 8) = 0
mkdir("./file0", 0777) = 0
--- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
pipe2([3, 4], 0) = 0
write(4, "\x15\x00\x00\x00\x65\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 21) = 21
dup(4) = 5
mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000005,") = -1 EREMOTEIO (Remote I/O error)
write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24
write(5, "\xb0\x00\x00\x00\x00\x00\x00\x6b\x2e\x7f\xb3\xf3\x73\x25\xda\x31\x44\x1d\xb4\x8c\xe3\x66\xa2\x33\xa6\x5b\x0f\xf5\x73\x17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 176) = 176
write(5, "\x4c\x01\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 311) = 311
mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000004,") = 0
syzkaller login: [ 42.397247][ T3607] ------------[ cut here ]------------
[ 42.397258][ T3607] WARNING: CPU: 0 PID: 3607 at fs/inode.c:388 inc_nlink+0x144/0x160
[ 42.411451][ T3607] Modules linked in:
[ 42.415683][ T3607] CPU: 0 PID: 3607 Comm: syz-executor364 Not tainted 5.18.0-syzkaller-11817-g8171acb8bc9b #0
[ 42.426309][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 42.436535][ T3607] RIP: 0010:inc_nlink+0x144/0x160
[ 42.442257][ T3607] Code: ff 4c 89 e7 e8 ad c4 ea ff e9 42 ff ff ff 4c 89 e7 e8 30 c4 ea ff e9 fc fe ff ff 4c 89 e7 e8 23 c4 ea ff eb d4 e8 fc 03 9e ff <0f> 0b e9 6e ff ff ff e8 20 c4 ea ff e9 44 ff ff ff e8 16 c4 ea ff
[ 42.461999][ T3607] RSP: 0018:ffffc90002e7fcc0 EFLAGS: 00010293
[ 42.468095][ T3607] RAX: 0000000000000000 RBX: ffff888073288000 RCX: 0000000000000000
[ 42.477040][ T3607] RDX: ffff8880240f5880 RSI: ffffffff81dc8054 RDI: 0000000000000007
[ 42.485095][ T3607] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[ 42.493693][ T3607] R10: 0000000000000000 R11: 0000000000000002 R12: ffff888073288048
[ 42.501926][ T3607] R13: ffff888075971490 R14: ffff8880732885d8 R15: ffff888024ca2000
[ 42.509905][ T3607] FS: 00005555566593c0(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
[ 42.518923][ T3607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 42.525808][ T3607] CR2: 0000000020000080 CR3: 000000001e8d0000 CR4: 0000000000350ef0
[ 42.533864][ T3607] Call Trace:
[ 42.537340][ T3607]
[ 42.540328][ T3607] v9fs_vfs_mkdir_dotl+0x478/0x770
[ 42.545729][ T3607] ? v9fs_vfs_create_dotl+0x30/0x30
[ 42.551003][ T3607] ? capable_wrt_inode_uidgid+0xe6/0x170
[ 42.556734][ T3607] ? generic_permission+0x1d8/0x770
[ 42.562013][ T3607] ? from_kgid+0x87/0xc0
[ 42.566273][ T3607] ? security_inode_permission+0xc5/0xf0
[ 42.572091][ T3607] ? inode_permission.part.0+0xb5/0x670
[ 42.577652][ T3607] ? bpf_lsm_inode_mkdir+0x5/0x10
[ 42.582765][ T3607] vfs_mkdir+0x1c3/0x3b0
[ 42.587033][ T3607] do_mkdirat+0x285/0x300
[ 42.591450][ T3607] ? __ia32_sys_mknod+0xa0/0xa0
[ 42.596329][ T3607] ? getname_flags.part.0+0x1dd/0x4f0
[ 42.601775][ T3607] __x64_sys_mkdir+0xf2/0x140
[ 42.606474][ T3607] do_syscall_64+0x35/0xb0
[ 42.611345][ T3607] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 42.617320][ T3607] RIP: 0033:0x7f984fac1819
[ 42.621888][ T3607] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 42.641677][ T3607] RSP: 002b:00007fff68285388 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 42.650494][ T3607] RAX: ffffffffffffffda RBX: 00007fff68285398 RCX: 00007f984fac1819
[ 42.659280][ T3607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0
[ 42.667330][ T3607] RBP: 00007fff68285390 R08: 00007f984fa7fae0 R09: 00007f984fa7fae0
[ 42.675401][ T3607] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000
[ 42.683476][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 42.691982][ T3607]
[ 42.694998][ T3607] Kernel panic - not syncing: panic_on_warn set ...
[ 42.701832][ T3607] CPU: 0 PID: 3607 Comm: syz-executor364 Not tainted 5.18.0-syzkaller-11817-g8171acb8bc9b #0
[ 42.712263][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 42.722324][ T3607] Call Trace:
[ 42.725594][ T3607]
[ 42.728514][ T3607] dump_stack_lvl+0xcd/0x134
[ 42.733099][ T3607] panic+0x2d7/0x636
[ 42.736996][ T3607] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 42.742973][ T3607] ? __warn.cold+0x1d9/0x2cd
[ 42.747597][ T3607] ? inc_nlink+0x144/0x160
[ 42.752576][ T3607] __warn.cold+0x1ea/0x2cd
[ 42.757001][ T3607] ? inc_nlink+0x144/0x160
[ 42.761415][ T3607] report_bug+0x1bc/0x210
[ 42.765748][ T3607] handle_bug+0x3c/0x60
[ 42.769903][ T3607] exc_invalid_op+0x14/0x40
[ 42.775475][ T3607] asm_exc_invalid_op+0x1b/0x20
[ 42.780412][ T3607] RIP: 0010:inc_nlink+0x144/0x160
[ 42.785793][ T3607] Code: ff 4c 89 e7 e8 ad c4 ea ff e9 42 ff ff ff 4c 89 e7 e8 30 c4 ea ff e9 fc fe ff ff 4c 89 e7 e8 23 c4 ea ff eb d4 e8 fc 03 9e ff <0f> 0b e9 6e ff ff ff e8 20 c4 ea ff e9 44 ff ff ff e8 16 c4 ea ff
[ 42.805968][ T3607] RSP: 0018:ffffc90002e7fcc0 EFLAGS: 00010293
[ 42.812741][ T3607] RAX: 0000000000000000 RBX: ffff888073288000 RCX: 0000000000000000
[ 42.820706][ T3607] RDX: ffff8880240f5880 RSI: ffffffff81dc8054 RDI: 0000000000000007
[ 42.828671][ T3607] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[ 42.836730][ T3607] R10: 0000000000000000 R11: 0000000000000002 R12: ffff888073288048
[ 42.844710][ T3607] R13: ffff888075971490 R14: ffff8880732885d8 R15: ffff888024ca2000
[ 42.852696][ T3607] ? inc_nlink+0x144/0x160
[ 42.857698][ T3607] v9fs_vfs_mkdir_dotl+0x478/0x770
[ 42.862822][ T3607] ? v9fs_vfs_create_dotl+0x30/0x30
[ 42.868020][ T3607] ? capable_wrt_inode_uidgid+0xe6/0x170
[ 42.873656][ T3607] ? generic_permission+0x1d8/0x770
[ 42.878854][ T3607] ? from_kgid+0x87/0xc0
[ 42.883178][ T3607] ? security_inode_permission+0xc5/0xf0
[ 42.888898][ T3607] ? inode_permission.part.0+0xb5/0x670
[ 42.895243][ T3607] ? bpf_lsm_inode_mkdir+0x5/0x10
[ 42.900446][ T3607] vfs_mkdir+0x1c3/0x3b0
[ 42.906206][ T3607] do_mkdirat+0x285/0x300
[ 42.910905][ T3607] ? __ia32_sys_mknod+0xa0/0xa0
[ 42.915795][ T3607] ? getname_flags.part.0+0x1dd/0x4f0
[ 42.921358][ T3607] __x64_sys_mkdir+0xf2/0x140
[ 42.926398][ T3607] do_syscall_64+0x35/0xb0
[ 42.931104][ T3607] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 42.937086][ T3607] RIP: 0033:0x7f984fac1819
[ 42.941505][ T3607] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 42.961461][ T3607] RSP: 002b:00007fff68285388 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 42.971005][ T3607] RAX: ffffffffffffffda RBX: 00007fff68285398 RCX: 00007f984fac1819
[ 42.978973][ T3607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0
[ 42.986940][ T3607] RBP: 00007fff68285390 R08: 00007f984fa7fae0 R09: 00007f984fa7fae0
[ 42.994906][ T3607] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000
[ 43.002875][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 43.010853][ T3607]
[ 43.014338][ T3607] Kernel Offset: disabled
[ 43.018692][ T3607] Rebooting in 86400 seconds..