program: r0 = syz_open_dev$video(&(0x7f0000000040), 0xffffffffffffff6c, 0x101443) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000180)='./file0\x00', 0x200010, &(0x7f00000008c0)=ANY=[], 0x1, 0xf43, &(0x7f0000002140)="$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") r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfb0e00000000000000a9000ff8c37ee7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000840)='./bus\x00', 0x210052, &(0x7f0000000b40)={[{@fat=@debug}, {@fat=@gid}, {@dots}, {@dots}, {}, {@dots}, {@nodots}, {@fat=@errors_continue}, {@fat=@showexec}, {@dots}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@dots}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x2}}, {@fat=@umask={'umask', 0x3d, 0x5}}, {@fat=@uid}, {@dots}, {@dots}], [{@fsmagic={'fsmagic', 0x3d, 0xfb}}, {@pcr={'pcr', 0x3d, 0x16}}, {@uid_gt}, {@context={'context', 0x3d, 'system_u'}}, {@flag='ro'}, {@audit}, {@subj_role}, {@hash}]}, 0x5, 0x1c7, &(0x7f0000000500)="$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") setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000200), 0x4) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71060000000000000069ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r7}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) write$cgroup_pid(r3, &(0x7f0000000240)=r4, 0x12) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file4\x00', 0x1000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)=0xff) [ 93.167409][ T1401] cfg80211: failed to load regulatory.db [ 93.209913][ T5290] Bluetooth: hci0: command tx timeout [ 93.402989][ T5327] loop0: detected capacity change from 0 to 4096 [ 93.463018][ T5334] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.536056][ T5327] loop0: detected capacity change from 4096 to 64 [ 93.566160][ T5327] loop0: detected capacity change from 64 to 0 [ 93.604518][ T5327] ------------[ cut here ]------------ [ 93.607233][ T5327] !(inode_state_read_once(inode) & I_LINKABLE) [ 93.607242][ T5327] WARNING: fs/inode.c:465 at inc_nlink+0x122/0x150, CPU#0: syz.0.0/5327 [ 93.613462][ T5327] Modules linked in: [ 93.615317][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.619532][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.623486][ T5327] RIP: 0010:inc_nlink+0x122/0x150 [ 93.625771][ T5327] Code: e5 ff e9 3a ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4c ff ff ff 48 89 df e8 69 64 e5 ff e9 3f ff ff ff e8 bf 38 76 ff 90 <0f> 0b 90 eb 80 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 50 ff ff ff [ 93.633703][ T5327] RSP: 0018:ffffc9000f27f448 EFLAGS: 00010287 [ 93.636460][ T5327] RAX: ffffffff8250d911 RBX: ffff888012334db8 RCX: 0000000000100000 [ 93.639976][ T5327] RDX: ffffc90020001000 RSI: 00000000000010ab RDI: 00000000000010ac [ 93.643407][ T5327] RBP: 0000000000000000 R08: ffffffff9057b237 R09: 1ffffffff20af646 [ 93.646976][ T5327] R10: dffffc0000000000 R11: fffffbfff20af647 R12: dffffc0000000000 [ 93.650446][ T5327] R13: 1ffff110024669b7 R14: ffff888012334d70 R15: ffff888012334e40 [ 93.653862][ T5327] FS: 00007fbc7d5d76c0(0000) GS:ffff88808c545000(0000) knlGS:0000000000000000 [ 93.658069][ T5327] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.660826][ T5327] CR2: 0000000000000000 CR3: 000000001d35c000 CR4: 0000000000352ef0 [ 93.664191][ T5327] Call Trace: [ 93.665970][ T5327] [ 93.667377][ T5327] nilfs_mkdir+0x10d/0x390 [ 93.669394][ T5327] ? __pfx_nilfs_mkdir+0x10/0x10 [ 93.671546][ T5327] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 93.673723][ T5327] vfs_mkdir+0x406/0x620 [ 93.675718][ T5327] ovl_workdir_create+0x45f/0x8b0 [ 93.678073][ T5327] ? __pfx_ovl_workdir_create+0x10/0x10 [ 93.680529][ T5327] ? mnt_get_write_access+0x213/0x280 [ 93.682891][ T5327] ovl_fill_super+0x19ad/0x5d40 [ 93.685040][ T5327] ? lockdep_unlock+0x5d/0xd0 [ 93.687049][ T5327] ? __mutex_trylock_common+0x15f/0x270 [ 93.689481][ T5327] ? __pfx_ovl_fill_super+0x10/0x10 [ 93.691692][ T5327] ? shrinker_register+0x112/0x210 [ 93.693966][ T5327] ? __mutex_unlock_slowpath+0x731/0x900 [ 93.696654][ T5327] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 93.699354][ T5327] ? __raw_spin_lock_init+0x45/0x100 [ 93.701687][ T5327] ? __init_swait_queue_head+0xa8/0x150 [ 93.704168][ T5327] ? shrinker_register+0x158/0x210 [ 93.706508][ T5327] ? sget_fc+0x1833/0x1900 [ 93.708488][ T5327] ? __pfx_ovl_next_opt+0x10/0x10 [ 93.710506][ T5327] ? __pfx_ovl_fill_super+0x10/0x10 [ 93.712608][ T5327] get_tree_nodev+0xbb/0x150 [ 93.714638][ T5327] vfs_get_tree+0x92/0x2a0 [ 93.716660][ T5327] do_new_mount+0x319/0xdc0 [ 93.718570][ T5327] ? __pfx_do_new_mount+0x10/0x10 [ 93.720729][ T5327] ? ns_capable+0x89/0xe0 [ 93.722651][ T5327] ? path_mount+0x647/0x1040 [ 93.724624][ T5327] ? user_path_at+0xd4/0x160 [ 93.726711][ T5327] __se_sys_mount+0x31d/0x420 [ 93.728785][ T5327] ? __pfx___se_sys_mount+0x10/0x10 [ 93.731089][ T5327] ? __x64_sys_mount+0x20/0xc0 [ 93.733193][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.735771][ T5327] do_syscall_64+0x174/0x580 [ 93.737723][ T5327] ? trace_irq_disable+0x3b/0x140 [ 93.739916][ T5327] ? clear_bhb_loop+0x40/0x90 [ 93.741919][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.744313][ T5327] RIP: 0033:0x7fbc7c79de99 [ 93.746357][ T5327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.754665][ T5327] RSP: 002b:00007fbc7d5d6fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 93.758426][ T5327] RAX: ffffffffffffffda RBX: 00007fbc7ca25fa0 RCX: 00007fbc7c79de99 [ 93.761881][ T5327] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 93.765049][ T5327] RBP: 00007fbc7c833eaf R08: 0000200000000080 R09: 0000000000000000 [ 93.768324][ T5327] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000000 [ 93.771522][ T5327] R13: 00007fbc7ca26038 R14: 00007fbc7ca25fa0 R15: 00007ffd6e5200a8 [ 93.774984][ T5327] [ 93.776432][ T5327] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.779549][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.783265][ T5327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.787201][ T5327] Call Trace: [ 93.788727][ T5327] [ 93.790045][ T5327] vpanic+0x56c/0xa60 [ 93.791738][ T5327] ? __pfx__printk+0x10/0x10 [ 93.793718][ T5327] ? __pfx_vpanic+0x10/0x10 [ 93.795799][ T5327] ? is_bpf_text_address+0x292/0x2b0 [ 93.798096][ T5327] ? is_bpf_text_address+0x26/0x2b0 [ 93.800376][ T5327] panic+0xc5/0xd0 [ 93.802020][ T5327] ? __pfx_panic+0x10/0x10 [ 93.803957][ T5327] __warn+0x315/0x4c0 [ 93.805653][ T5327] ? inc_nlink+0x122/0x150 [ 93.807511][ T5327] ? inc_nlink+0x122/0x150 [ 93.809245][ T5327] __report_bug+0x276/0x570 [ 93.811102][ T5327] ? inc_nlink+0x122/0x150 [ 93.813013][ T5327] ? __pfx___report_bug+0x10/0x10 [ 93.815152][ T5327] ? lockdep_unlock+0x5d/0xd0 [ 93.817080][ T5327] ? inc_nlink+0x122/0x150 [ 93.818995][ T5327] report_bug+0x16a/0x220 [ 93.820872][ T5327] ? inc_nlink+0x122/0x150 [ 93.822783][ T5327] ? inc_nlink+0x124/0x150 [ 93.824712][ T5327] handle_bug+0x9c/0x200 [ 93.826394][ T5327] exc_invalid_op+0x1a/0x50 [ 93.828232][ T5327] asm_exc_invalid_op+0x1a/0x20 [ 93.830278][ T5327] RIP: 0010:inc_nlink+0x122/0x150 [ 93.832314][ T5327] Code: e5 ff e9 3a ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4c ff ff ff 48 89 df e8 69 64 e5 ff e9 3f ff ff ff e8 bf 38 76 ff 90 <0f> 0b 90 eb 80 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 50 ff ff ff [ 93.840219][ T5327] RSP: 0018:ffffc9000f27f448 EFLAGS: 00010287 [ 93.842691][ T5327] RAX: ffffffff8250d911 RBX: ffff888012334db8 RCX: 0000000000100000 [ 93.845970][ T5327] RDX: ffffc90020001000 RSI: 00000000000010ab RDI: 00000000000010ac [ 93.849335][ T5327] RBP: 0000000000000000 R08: ffffffff9057b237 R09: 1ffffffff20af646 [ 93.852562][ T5327] R10: dffffc0000000000 R11: fffffbfff20af647 R12: dffffc0000000000 [ 93.856133][ T5327] R13: 1ffff110024669b7 R14: ffff888012334d70 R15: ffff888012334e40 [ 93.859398][ T5327] ? inc_nlink+0x121/0x150 [ 93.861363][ T5327] ? inc_nlink+0x121/0x150 [ 93.863264][ T5327] nilfs_mkdir+0x10d/0x390 [ 93.865167][ T5327] ? __pfx_nilfs_mkdir+0x10/0x10 [ 93.867256][ T5327] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 93.869587][ T5327] vfs_mkdir+0x406/0x620 [ 93.871438][ T5327] ovl_workdir_create+0x45f/0x8b0 [ 93.873478][ T5327] ? __pfx_ovl_workdir_create+0x10/0x10 [ 93.875687][ T5327] ? mnt_get_write_access+0x213/0x280 [ 93.878000][ T5327] ovl_fill_super+0x19ad/0x5d40 [ 93.880111][ T5327] ? lockdep_unlock+0x5d/0xd0 [ 93.882162][ T5327] ? __mutex_trylock_common+0x15f/0x270 [ 93.884403][ T5327] ? __pfx_ovl_fill_super+0x10/0x10 [ 93.886752][ T5327] ? shrinker_register+0x112/0x210 [ 93.888912][ T5327] ? __mutex_unlock_slowpath+0x731/0x900 [ 93.891280][ T5327] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 93.893862][ T5327] ? __raw_spin_lock_init+0x45/0x100 [ 93.896147][ T5327] ? __init_swait_queue_head+0xa8/0x150 [ 93.898313][ T5327] ? shrinker_register+0x158/0x210 [ 93.900367][ T5327] ? sget_fc+0x1833/0x1900 [ 93.902310][ T5327] ? __pfx_ovl_next_opt+0x10/0x10 [ 93.904394][ T5327] ? __pfx_ovl_fill_super+0x10/0x10 [ 93.906343][ T5327] get_tree_nodev+0xbb/0x150 [ 93.908338][ T5327] vfs_get_tree+0x92/0x2a0 [ 93.910215][ T5327] do_new_mount+0x319/0xdc0 [ 93.912153][ T5327] ? __pfx_do_new_mount+0x10/0x10 [ 93.914237][ T5327] ? ns_capable+0x89/0xe0 [ 93.916029][ T5327] ? path_mount+0x647/0x1040 [ 93.918001][ T5327] ? user_path_at+0xd4/0x160 [ 93.919927][ T5327] __se_sys_mount+0x31d/0x420 [ 93.921921][ T5327] ? __pfx___se_sys_mount+0x10/0x10 [ 93.923989][ T5327] ? __x64_sys_mount+0x20/0xc0 [ 93.925960][ T5327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.928524][ T5327] do_syscall_64+0x174/0x580 [ 93.930452][ T5327] ? trace_irq_disable+0x3b/0x140 [ 93.932473][ T5327] ? clear_bhb_loop+0x40/0x90 [ 93.934378][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.936740][ T5327] RIP: 0033:0x7fbc7c79de99 [ 93.938322][ T5327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.945578][ T5327] RSP: 002b:00007fbc7d5d6fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 93.948996][ T5327] RAX: ffffffffffffffda RBX: 00007fbc7ca25fa0 RCX: 00007fbc7c79de99 [ 93.952294][ T5327] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 93.955608][ T5327] RBP: 00007fbc7c833eaf R08: 0000200000000080 R09: 0000000000000000 [ 93.958993][ T5327] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000000 [ 93.962209][ T5327] R13: 00007fbc7ca26038 R14: 00007fbc7ca25fa0 R15: 00007ffd6e5200a8 [ 93.965393][ T5327] [ 93.967123][ T5327] Kernel Offset: disabled [ 93.968972][ T5327] Rebooting in 86400 seconds..