./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3651614606
<...>
Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts.
execve("./syz-executor3651614606", ["./syz-executor3651614606"], 0x7ffc64072510 /* 10 vars */) = 0
brk(NULL) = 0x555555748000
brk(0x555555748c40) = 0x555555748c40
arch_prctl(ARCH_SET_FS, 0x555555748300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3651614606", 4096) = 28
brk(0x555555769c40) = 0x555555769c40
brk(0x55555576a000) = 0x55555576a000
mprotect(0x7fa84bff2000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
mkdir("./file1", 000) = 0
mkdir("./bus", 000) = 0
mkdir("./file0", 000) = 0
mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,nfs_export=on,") = 0
open("./bus", O_RDONLY) = 3
syzkaller login: [ 38.249175][ T3608] ------------[ cut here ]------------
[ 38.254775][ T3608] memcpy: detected field-spanning write (size 93) of single field "&fh->fb" at fs/overlayfs/export.c:799 (size 21)
[ 38.267209][ T3608] WARNING: CPU: 0 PID: 3608 at fs/overlayfs/export.c:799 ovl_fh_to_dentry+0x880/0x950
[ 38.276859][ T3608] Modules linked in:
[ 38.280780][ T3608] CPU: 1 PID: 3608 Comm: syz-executor365 Not tainted 6.0.0-rc6-next-20220921-syzkaller #0
[ 38.290737][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2022
[ 38.300853][ T3608] RIP: 0010:ovl_fh_to_dentry+0x880/0x950
[ 38.306543][ T3608] Code: f9 ff ff e8 62 b6 ab fe b9 15 00 00 00 4c 89 f6 48 c7 c2 a0 0f 28 8a 48 c7 c7 00 10 28 8a c6 05 a7 86 fa 0a 01 e8 4d ad 76 06 <0f> 0b e9 ec f8 ff ff 49 c7 c6 ea ff ff ff bb ea ff ff ff c7 44 24
[ 38.326187][ T3608] RSP: 0018:ffffc90003d7fb30 EFLAGS: 00010282
[ 38.332246][ T3608] RAX: 0000000000000000 RBX: 0000000000000060 RCX: 0000000000000000
[ 38.340248][ T3608] RDX: ffff88801f9f8000 RSI: ffffffff81620348 RDI: fffff520007aff58
[ 38.348245][ T3608] RBP: ffff88801798b900 R08: 0000000000000005 R09: 0000000000000000
[ 38.356241][ T3608] R10: 0000000080000000 R11: 203a7970636d656d R12: 00000000000000fb
[ 38.364269][ T3608] R13: 1ffff920007aff6e R14: 000000000000005d R15: ffff88801798b903
[ 38.372239][ T3608] FS: 0000555555748300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 38.381195][ T3608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.387821][ T3608] CR2: 00007f2ec877aa70 CR3: 0000000021a2b000 CR4: 00000000003506e0
[ 38.395829][ T3608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.403821][ T3608] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.411780][ T3608] Call Trace:
[ 38.415082][ T3608]
[ 38.418015][ T3608] ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 38.423856][ T3608] ? __stack_depot_save+0x260/0x560
[ 38.429062][ T3608] ? ovl_get_dentry+0x6c0/0x6c0
[ 38.433943][ T3608] ? kasan_save_stack+0x31/0x40
[ 38.438812][ T3608] exportfs_decode_fh_raw+0x127/0x7d0
[ 38.444213][ T3608] ? drop_caches_sysctl_handler+0x110/0x110
[ 38.450127][ T3608] ? ovl_get_dentry+0x6c0/0x6c0
[ 38.455003][ T3608] ? __schedule+0xbda/0x55c0
[ 38.459597][ T3608] ? reconnect_path+0x810/0x810
[ 38.464484][ T3608] ? ___slab_alloc+0xcee/0x1430
[ 38.469466][ T3608] ? trace_hardirqs_on+0x2d/0x160
[ 38.474531][ T3608] ? do_handle_open+0xfc/0x8b0
[ 38.479308][ T3608] ? lock_release+0x810/0x810
[ 38.484012][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 38.489493][ T3608] ? lock_acquire+0x4fc/0x630
[ 38.494356][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 38.499852][ T3608] ? lock_release+0x5cb/0x810
[ 38.504567][ T3608] ? __might_fault+0xd1/0x170
[ 38.509266][ T3608] ? lock_downgrade+0x6e0/0x6e0
[ 38.514172][ T3608] ? drop_caches_sysctl_handler+0x110/0x110
[ 38.520084][ T3608] exportfs_decode_fh+0x38/0x90
[ 38.524966][ T3608] do_handle_open+0x2b6/0x8b0
[ 38.529658][ T3608] ? do_sys_name_to_handle+0x4c0/0x4c0
[ 38.535144][ T3608] ? _raw_spin_unlock_irq+0x1f/0x40
[ 38.540358][ T3608] ? trace_hardirqs_on+0x2d/0x160
[ 38.545449][ T3608] ? _raw_spin_unlock_irq+0x2a/0x40
[ 38.550666][ T3608] ? ptrace_notify+0xfa/0x140
[ 38.555443][ T3608] do_syscall_64+0x35/0xb0
[ 38.559882][ T3608] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 38.565848][ T3608] RIP: 0033:0x7fa84bf85cc9
[ 38.570269][ T3608] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 38.589910][ T3608] RSP: 002b:00007ffd45ccfbd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[ 38.598370][ T3608] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa84bf85cc9
[ 38.606372][ T3608] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003
[ 38.614364][ T3608] RBP: 00007fa84bf49e70 R08: 0000000000000000 R09: 0000000000000000
[ 38.622341][ T3608] R10: 0000000000000073 R11: 0000000000000246 R12: 00007fa84bf49f00
[ 38.630337][ T3608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 38.638358][ T3608]
[ 38.641381][ T3608] Kernel panic - not syncing: panic_on_warn set ...
[ 38.647952][ T3608] CPU: 1 PID: 3608 Comm: syz-executor365 Not tainted 6.0.0-rc6-next-20220921-syzkaller #0
[ 38.657825][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2022
[ 38.667868][ T3608] Call Trace:
[ 38.671134][ T3608]
[ 38.674053][ T3608] dump_stack_lvl+0xcd/0x134
[ 38.678639][ T3608] panic+0x2c8/0x622
[ 38.682532][ T3608] ? panic_print_sys_info.part.0+0x110/0x110
[ 38.688507][ T3608] ? __warn.cold+0x24b/0x350
[ 38.693082][ T3608] ? ovl_fh_to_dentry+0x880/0x950
[ 38.698099][ T3608] __warn.cold+0x25c/0x350
[ 38.702504][ T3608] ? __wake_up_klogd.part.0+0x99/0xf0
[ 38.707864][ T3608] ? ovl_fh_to_dentry+0x880/0x950
[ 38.712877][ T3608] report_bug+0x1bc/0x210
[ 38.717202][ T3608] handle_bug+0x3c/0x60
[ 38.721346][ T3608] exc_invalid_op+0x14/0x40
[ 38.725836][ T3608] asm_exc_invalid_op+0x16/0x20
[ 38.730679][ T3608] RIP: 0010:ovl_fh_to_dentry+0x880/0x950
[ 38.736304][ T3608] Code: f9 ff ff e8 62 b6 ab fe b9 15 00 00 00 4c 89 f6 48 c7 c2 a0 0f 28 8a 48 c7 c7 00 10 28 8a c6 05 a7 86 fa 0a 01 e8 4d ad 76 06 <0f> 0b e9 ec f8 ff ff 49 c7 c6 ea ff ff ff bb ea ff ff ff c7 44 24
[ 38.755897][ T3608] RSP: 0018:ffffc90003d7fb30 EFLAGS: 00010282
[ 38.761947][ T3608] RAX: 0000000000000000 RBX: 0000000000000060 RCX: 0000000000000000
[ 38.769904][ T3608] RDX: ffff88801f9f8000 RSI: ffffffff81620348 RDI: fffff520007aff58
[ 38.777861][ T3608] RBP: ffff88801798b900 R08: 0000000000000005 R09: 0000000000000000
[ 38.785834][ T3608] R10: 0000000080000000 R11: 203a7970636d656d R12: 00000000000000fb
[ 38.793797][ T3608] R13: 1ffff920007aff6e R14: 000000000000005d R15: ffff88801798b903
[ 38.801758][ T3608] ? vprintk+0x88/0x90
[ 38.805821][ T3608] ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 38.811619][ T3608] ? __stack_depot_save+0x260/0x560
[ 38.816808][ T3608] ? ovl_get_dentry+0x6c0/0x6c0
[ 38.821651][ T3608] ? kasan_save_stack+0x31/0x40
[ 38.826497][ T3608] exportfs_decode_fh_raw+0x127/0x7d0
[ 38.831866][ T3608] ? drop_caches_sysctl_handler+0x110/0x110
[ 38.837752][ T3608] ? ovl_get_dentry+0x6c0/0x6c0
[ 38.842615][ T3608] ? __schedule+0xbda/0x55c0
[ 38.847195][ T3608] ? reconnect_path+0x810/0x810
[ 38.852037][ T3608] ? ___slab_alloc+0xcee/0x1430
[ 38.856877][ T3608] ? trace_hardirqs_on+0x2d/0x160
[ 38.861889][ T3608] ? do_handle_open+0xfc/0x8b0
[ 38.866643][ T3608] ? lock_release+0x810/0x810
[ 38.871308][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 38.876759][ T3608] ? lock_acquire+0x4fc/0x630
[ 38.881422][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 38.886873][ T3608] ? lock_release+0x5cb/0x810
[ 38.891536][ T3608] ? __might_fault+0xd1/0x170
[ 38.896200][ T3608] ? lock_downgrade+0x6e0/0x6e0
[ 38.901039][ T3608] ? drop_caches_sysctl_handler+0x110/0x110
[ 38.906926][ T3608] exportfs_decode_fh+0x38/0x90
[ 38.911776][ T3608] do_handle_open+0x2b6/0x8b0
[ 38.916448][ T3608] ? do_sys_name_to_handle+0x4c0/0x4c0
[ 38.921896][ T3608] ? _raw_spin_unlock_irq+0x1f/0x40
[ 38.927260][ T3608] ? trace_hardirqs_on+0x2d/0x160
[ 38.932269][ T3608] ? _raw_spin_unlock_irq+0x2a/0x40
[ 38.937461][ T3608] ? ptrace_notify+0xfa/0x140
[ 38.942127][ T3608] do_syscall_64+0x35/0xb0
[ 38.946540][ T3608] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 38.952427][ T3608] RIP: 0033:0x7fa84bf85cc9
[ 38.956828][ T3608] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 38.976422][ T3608] RSP: 002b:00007ffd45ccfbd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[ 38.984830][ T3608] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa84bf85cc9
[ 38.992790][ T3608] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003
[ 39.000749][ T3608] RBP: 00007fa84bf49e70 R08: 0000000000000000 R09: 0000000000000000
[ 39.008710][ T3608] R10: 0000000000000073 R11: 0000000000000246 R12: 00007fa84bf49f00
[ 39.016671][ T3608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 39.024986][ T3608]
[ 39.028173][ T3608] Kernel Offset: disabled
[ 39.032493][ T3608] Rebooting in 86400 seconds..