./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2933343321
<...>
forked to background, child pid 3178
[ 27.518293][ T3179] 8021q: adding VLAN 0 to HW filter on device bond0
[ 27.534967][ T3179] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: [ 27.776207][ T3263] ssh-keygen (3263) used greatest stack depth: 22736 bytes left
OK
syzkaller
Warning: Permanently added '10.128.0.44' (ECDSA) to the list of known hosts.
execve("./syz-executor2933343321", ["./syz-executor2933343321"], 0x7fffc8265230 /* 10 vars */) = 0
brk(NULL) = 0x555556369000
brk(0x555556369d00) = 0x555556369d00
arch_prctl(ARCH_SET_FS, 0x5555563693c0) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2933343321", 4096) = 28
brk(0x55555638ad00) = 0x55555638ad00
brk(0x55555638b000) = 0x55555638b000
mprotect(0x7f1317c3d000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7f1317b8eae0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f1317b8edd0}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7f1317b8eae0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f1317b8edd0}, NULL, 8) = 0
mkdir("./file0", 0777) = 0
--- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
pipe2([3, 4], 0) = 0
write(4, "\x15\x00\x00\x00\x65\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 21) = 21
dup(4) = 5
mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000005,") = -1 EREMOTEIO (Remote I/O error)
write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24
write(5, "\xb0\x00\x00\x00\x00\x00\x00\x6b\x2e\x7f\xb3\xf3\x73\x25\xda\x31\x44\x1d\xb4\x8c\xe3\x66\xa2\x33\xa6\x5b\x0f\xf5\x73\x17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 176) = 176
write(5, "\x4c\x01\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 311) = 311
mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000004,") = 0
syzkaller login: [ 50.360708][ T3606] ------------[ cut here ]------------
[ 50.366300][ T3606] WARNING: CPU: 0 PID: 3606 at fs/inode.c:388 inc_nlink+0x144/0x160
[ 50.374514][ T3606] Modules linked in:
[ 50.378417][ T3606] CPU: 0 PID: 3606 Comm: syz-executor293 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0
[ 50.388489][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 50.398708][ T3606] RIP: 0010:inc_nlink+0x144/0x160
[ 50.403783][ T3606] Code: ff 4c 89 e7 e8 7d 89 ea ff e9 42 ff ff ff 4c 89 e7 e8 00 89 ea ff e9 fc fe ff ff 4c 89 e7 e8 f3 88 ea ff eb d4 e8 1c 84 9e ff <0f> 0b e9 6e ff ff ff e8 f0 88 ea ff e9 44 ff ff ff e8 e6 88 ea ff
[ 50.424475][ T3606] RSP: 0018:ffffc90002d9fcc0 EFLAGS: 00010293
[ 50.430533][ T3606] RAX: 0000000000000000 RBX: ffff888072780000 RCX: 0000000000000000
[ 50.438538][ T3606] RDX: ffff88801f061d40 RSI: ffffffff81dc32f4 RDI: 0000000000000007
[ 50.446554][ T3606] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[ 50.454562][ T3606] R10: 0000000000000000 R11: 0000000000000002 R12: ffff888072780048
[ 50.462868][ T3606] R13: ffff88801b2db490 R14: ffff8880727805d8 R15: ffff88814a70e600
[ 50.470850][ T3606] FS: 00005555563693c0(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 50.479837][ T3606] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 50.486496][ T3606] CR2: 0000564eedc52578 CR3: 000000007311d000 CR4: 00000000003506e0
[ 50.494519][ T3606] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 50.502580][ T3606] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 50.510561][ T3606] Call Trace:
[ 50.513879][ T3606]
[ 50.516816][ T3606] v9fs_vfs_mkdir_dotl+0x478/0x770
[ 50.521998][ T3606] ? v9fs_vfs_create_dotl+0x30/0x30
[ 50.527220][ T3606] ? privileged_wrt_inode_uidgid+0x120/0x3a0
[ 50.533246][ T3606] ? capable_wrt_inode_uidgid+0xe6/0x170
[ 50.538902][ T3606] ? generic_permission+0x38a/0x7a0
[ 50.544161][ T3606] ? bpf_lsm_inode_permission+0x5/0x10
[ 50.549643][ T3606] ? bpf_lsm_inode_mkdir+0x5/0x10
[ 50.554774][ T3606] vfs_mkdir+0x413/0x690
[ 50.559038][ T3606] do_mkdirat+0x285/0x300
[ 50.563442][ T3606] ? __ia32_sys_mknod+0xa0/0xa0
[ 50.568316][ T3606] ? getname_flags.part.0+0x1dd/0x4f0
[ 50.573750][ T3606] __x64_sys_mkdir+0xf2/0x140
[ 50.578445][ T3606] do_syscall_64+0x35/0xb0
[ 50.582932][ T3606] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 50.588850][ T3606] RIP: 0033:0x7f1317bd0819
[ 50.593308][ T3606] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.613006][ T3606] RSP: 002b:00007ffe601fb598 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 50.621615][ T3606] RAX: ffffffffffffffda RBX: 00007ffe601fb5a8 RCX: 00007f1317bd0819
[ 50.629610][ T3606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0
[ 50.637830][ T3606] RBP: 00007ffe601fb5a0 R08: 00007f1317b8eae0 R09: 00007f1317b8eae0
[ 50.645862][ T3606] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000
[ 50.653897][ T3606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 50.661921][ T3606]
[ 50.664946][ T3606] Kernel panic - not syncing: panic_on_warn set ...
[ 50.671513][ T3606] CPU: 1 PID: 3606 Comm: syz-executor293 Not tainted 5.19.0-rc4-next-20220628-syzkaller #0
[ 50.681477][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 50.691516][ T3606] Call Trace:
[ 50.694782][ T3606]
[ 50.697702][ T3606] dump_stack_lvl+0xcd/0x134
[ 50.702293][ T3606] panic+0x2d7/0x636
[ 50.706186][ T3606] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 50.712184][ T3606] ? __warn.cold+0x248/0x2c4
[ 50.716775][ T3606] ? inc_nlink+0x144/0x160
[ 50.721185][ T3606] __warn.cold+0x259/0x2c4
[ 50.725594][ T3606] ? inc_nlink+0x144/0x160
[ 50.730000][ T3606] report_bug+0x1bc/0x210
[ 50.734330][ T3606] handle_bug+0x3c/0x60
[ 50.738489][ T3606] exc_invalid_op+0x14/0x40
[ 50.742996][ T3606] asm_exc_invalid_op+0x1b/0x20
[ 50.747847][ T3606] RIP: 0010:inc_nlink+0x144/0x160
[ 50.752875][ T3606] Code: ff 4c 89 e7 e8 7d 89 ea ff e9 42 ff ff ff 4c 89 e7 e8 00 89 ea ff e9 fc fe ff ff 4c 89 e7 e8 f3 88 ea ff eb d4 e8 1c 84 9e ff <0f> 0b e9 6e ff ff ff e8 f0 88 ea ff e9 44 ff ff ff e8 e6 88 ea ff
[ 50.772481][ T3606] RSP: 0018:ffffc90002d9fcc0 EFLAGS: 00010293
[ 50.778562][ T3606] RAX: 0000000000000000 RBX: ffff888072780000 RCX: 0000000000000000
[ 50.786546][ T3606] RDX: ffff88801f061d40 RSI: ffffffff81dc32f4 RDI: 0000000000000007
[ 50.794524][ T3606] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[ 50.802492][ T3606] R10: 0000000000000000 R11: 0000000000000002 R12: ffff888072780048
[ 50.810459][ T3606] R13: ffff88801b2db490 R14: ffff8880727805d8 R15: ffff88814a70e600
[ 50.818439][ T3606] ? inc_nlink+0x144/0x160
[ 50.822885][ T3606] v9fs_vfs_mkdir_dotl+0x478/0x770
[ 50.828011][ T3606] ? v9fs_vfs_create_dotl+0x30/0x30
[ 50.833216][ T3606] ? privileged_wrt_inode_uidgid+0x120/0x3a0
[ 50.839209][ T3606] ? capable_wrt_inode_uidgid+0xe6/0x170
[ 50.844849][ T3606] ? generic_permission+0x38a/0x7a0
[ 50.850054][ T3606] ? bpf_lsm_inode_permission+0x5/0x10
[ 50.855530][ T3606] ? bpf_lsm_inode_mkdir+0x5/0x10
[ 50.860582][ T3606] vfs_mkdir+0x413/0x690
[ 50.864852][ T3606] do_mkdirat+0x285/0x300
[ 50.869191][ T3606] ? __ia32_sys_mknod+0xa0/0xa0
[ 50.874049][ T3606] ? getname_flags.part.0+0x1dd/0x4f0
[ 50.879429][ T3606] __x64_sys_mkdir+0xf2/0x140
[ 50.884114][ T3606] do_syscall_64+0x35/0xb0
[ 50.888536][ T3606] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 50.894431][ T3606] RIP: 0033:0x7f1317bd0819
[ 50.898845][ T3606] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.918449][ T3606] RSP: 002b:00007ffe601fb598 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 50.926859][ T3606] RAX: ffffffffffffffda RBX: 00007ffe601fb5a8 RCX: 00007f1317bd0819
[ 50.934832][ T3606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0
[ 50.942813][ T3606] RBP: 00007ffe601fb5a0 R08: 00007f1317b8eae0 R09: 00007f1317b8eae0
[ 50.950782][ T3606] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000
[ 50.958768][ T3606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 50.966751][ T3606]
[ 50.970038][ T3606] Kernel Offset: disabled
[ 50.974424][ T3606] Rebooting in 86400 seconds..