./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1846803613
<...>
DUID 00:04:53:46:a9:9d:03:7a:46:b2:48:ff:4a:ea:3f:46:f2:43
forked to background, child pid 3178
[ 27.249041][ T3179] 8021q: adding VLAN 0 to HW filter on device bond0
[ 27.259254][ T3179] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.228' (ECDSA) to the list of known hosts.
execve("./syz-executor1846803613", ["./syz-executor1846803613"], 0x7ffeec973d80 /* 10 vars */) = 0
brk(NULL) = 0x555556fbd000
brk(0x555556fbdd00) = 0x555556fbdd00
arch_prctl(ARCH_SET_FS, 0x555556fbd3c0) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1846803613", 4096) = 28
brk(0x555556fded00) = 0x555556fded00
brk(0x555556fdf000) = 0x555556fdf000
mprotect(0x7f6d59f40000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7f6d59e91ae0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f6d59e91dd0}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7f6d59e91ae0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f6d59e91dd0}, NULL, 8) = 0
mkdir("./file0", 0777) = 0
--- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
pipe2([3, 4], 0) = 0
write(4, "\x15\x00\x00\x00\x65\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 21) = 21
dup(4) = 5
mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000005,") = -1 EREMOTEIO (Remote I/O error)
write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24
write(5, "\xb0\x00\x00\x00\x00\x00\x00\x6b\x2e\x7f\xb3\xf3\x73\x25\xda\x31\x44\x1d\xb4\x8c\xe3\x66\xa2\x33\xa6\x5b\x0f\xf5\x73\x17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 176) = 176
write(5, "\x4c\x01\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 311) = 311
mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000004,") = 0
syzkaller login: [ 49.770860][ T3607] ------------[ cut here ]------------
[ 49.776508][ T3607] WARNING: CPU: 0 PID: 3607 at fs/inode.c:388 inc_nlink+0x144/0x160
[ 49.784600][ T3607] Modules linked in:
[ 49.788500][ T3607] CPU: 0 PID: 3607 Comm: syz-executor184 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0
[ 49.798695][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 49.808831][ T3607] RIP: 0010:inc_nlink+0x144/0x160
[ 49.813986][ T3607] Code: ff 4c 89 e7 e8 7d 89 ea ff e9 42 ff ff ff 4c 89 e7 e8 00 89 ea ff e9 fc fe ff ff 4c 89 e7 e8 f3 88 ea ff eb d4 e8 1c 84 9e ff <0f> 0b e9 6e ff ff ff e8 f0 88 ea ff e9 44 ff ff ff e8 e6 88 ea ff
[ 49.833703][ T3607] RSP: 0018:ffffc90002fdfcc0 EFLAGS: 00010293
[ 49.839817][ T3607] RAX: 0000000000000000 RBX: ffff8880747c8000 RCX: 0000000000000000
[ 49.847867][ T3607] RDX: ffff8880231b8000 RSI: ffffffff81dc32f4 RDI: 0000000000000007
[ 49.855959][ T3607] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[ 49.863967][ T3607] R10: 0000000000000000 R11: 0000000000000002 R12: ffff8880747c8048
[ 49.871944][ T3607] R13: ffff88804daa85e0 R14: ffff8880747c85d8 R15: ffff888016975000
[ 49.880213][ T3607] FS: 0000555556fbd3c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 49.889238][ T3607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 49.895906][ T3607] CR2: 00007f0b997d96a8 CR3: 000000007dd05000 CR4: 00000000003506f0
[ 49.903943][ T3607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 49.911934][ T3607] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 49.919969][ T3607] Call Trace:
[ 49.923297][ T3607]
[ 49.926243][ T3607] v9fs_vfs_mkdir_dotl+0x478/0x770
[ 49.931356][ T3607] ? v9fs_vfs_create_dotl+0x30/0x30
[ 49.936685][ T3607] ? privileged_wrt_inode_uidgid+0x120/0x3a0
[ 49.942733][ T3607] ? capable_wrt_inode_uidgid+0xe6/0x170
[ 49.948383][ T3607] ? generic_permission+0x38a/0x7a0
[ 49.953651][ T3607] ? bpf_lsm_inode_permission+0x5/0x10
[ 49.959132][ T3607] ? bpf_lsm_inode_mkdir+0x5/0x10
[ 49.964216][ T3607] vfs_mkdir+0x413/0x690
[ 49.968474][ T3607] do_mkdirat+0x285/0x300
[ 49.972869][ T3607] ? __ia32_sys_mknod+0xa0/0xa0
[ 49.977738][ T3607] ? getname_flags.part.0+0x1dd/0x4f0
[ 49.983354][ T3607] __x64_sys_mkdir+0xf2/0x140
[ 49.988038][ T3607] do_syscall_64+0x35/0xb0
[ 49.992456][ T3607] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 49.998416][ T3607] RIP: 0033:0x7f6d59ed3819
[ 50.002876][ T3607] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.022568][ T3607] RSP: 002b:00007ffc416e1728 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 50.031038][ T3607] RAX: ffffffffffffffda RBX: 00007ffc416e1738 RCX: 00007f6d59ed3819
[ 50.039090][ T3607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0
[ 50.047096][ T3607] RBP: 00007ffc416e1730 R08: 00007f6d59e91ae0 R09: 00007f6d59e91ae0
[ 50.055130][ T3607] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000
[ 50.063141][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 50.071118][ T3607]
[ 50.074194][ T3607] Kernel panic - not syncing: panic_on_warn set ...
[ 50.080776][ T3607] CPU: 0 PID: 3607 Comm: syz-executor184 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0
[ 50.090736][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 50.100786][ T3607] Call Trace:
[ 50.104049][ T3607]
[ 50.106965][ T3607] dump_stack_lvl+0xcd/0x134
[ 50.111550][ T3607] panic+0x2d7/0x636
[ 50.115438][ T3607] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 50.121415][ T3607] ? __warn.cold+0x248/0x2c4
[ 50.126362][ T3607] ? inc_nlink+0x144/0x160
[ 50.130775][ T3607] __warn.cold+0x259/0x2c4
[ 50.135191][ T3607] ? inc_nlink+0x144/0x160
[ 50.139597][ T3607] report_bug+0x1bc/0x210
[ 50.143928][ T3607] handle_bug+0x3c/0x60
[ 50.148083][ T3607] exc_invalid_op+0x14/0x40
[ 50.152591][ T3607] asm_exc_invalid_op+0x1b/0x20
[ 50.157440][ T3607] RIP: 0010:inc_nlink+0x144/0x160
[ 50.162465][ T3607] Code: ff 4c 89 e7 e8 7d 89 ea ff e9 42 ff ff ff 4c 89 e7 e8 00 89 ea ff e9 fc fe ff ff 4c 89 e7 e8 f3 88 ea ff eb d4 e8 1c 84 9e ff <0f> 0b e9 6e ff ff ff e8 f0 88 ea ff e9 44 ff ff ff e8 e6 88 ea ff
[ 50.182067][ T3607] RSP: 0018:ffffc90002fdfcc0 EFLAGS: 00010293
[ 50.188140][ T3607] RAX: 0000000000000000 RBX: ffff8880747c8000 RCX: 0000000000000000
[ 50.196106][ T3607] RDX: ffff8880231b8000 RSI: ffffffff81dc32f4 RDI: 0000000000000007
[ 50.204073][ T3607] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[ 50.212037][ T3607] R10: 0000000000000000 R11: 0000000000000002 R12: ffff8880747c8048
[ 50.220003][ T3607] R13: ffff88804daa85e0 R14: ffff8880747c85d8 R15: ffff888016975000
[ 50.227977][ T3607] ? inc_nlink+0x144/0x160
[ 50.232402][ T3607] v9fs_vfs_mkdir_dotl+0x478/0x770
[ 50.237528][ T3607] ? v9fs_vfs_create_dotl+0x30/0x30
[ 50.242733][ T3607] ? privileged_wrt_inode_uidgid+0x120/0x3a0
[ 50.248723][ T3607] ? capable_wrt_inode_uidgid+0xe6/0x170
[ 50.254368][ T3607] ? generic_permission+0x38a/0x7a0
[ 50.259566][ T3607] ? bpf_lsm_inode_permission+0x5/0x10
[ 50.265046][ T3607] ? bpf_lsm_inode_mkdir+0x5/0x10
[ 50.270079][ T3607] vfs_mkdir+0x413/0x690
[ 50.274324][ T3607] do_mkdirat+0x285/0x300
[ 50.278660][ T3607] ? __ia32_sys_mknod+0xa0/0xa0
[ 50.283516][ T3607] ? getname_flags.part.0+0x1dd/0x4f0
[ 50.288891][ T3607] __x64_sys_mkdir+0xf2/0x140
[ 50.293574][ T3607] do_syscall_64+0x35/0xb0
[ 50.297992][ T3607] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 50.303881][ T3607] RIP: 0033:0x7f6d59ed3819
[ 50.308293][ T3607] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.327898][ T3607] RSP: 002b:00007ffc416e1728 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 50.336308][ T3607] RAX: ffffffffffffffda RBX: 00007ffc416e1738 RCX: 00007f6d59ed3819
[ 50.344322][ T3607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0
[ 50.352289][ T3607] RBP: 00007ffc416e1730 R08: 00007f6d59e91ae0 R09: 00007f6d59e91ae0
[ 50.360252][ T3607] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000
[ 50.368217][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 50.376195][ T3607]
[ 50.379535][ T3607] Kernel Offset: disabled
[ 50.383930][ T3607] Rebooting in 86400 seconds..