loop0: detected capacity change from 0 to 32768 ... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... ------------[ cut here ]------------ !(inode_state_read_once(inode) & I_LINKABLE) WARNING: fs/inode.c:465 at inc_nlink+0x122/0x150 fs/inode.c:465, CPU#0: syz.0.0/5337 Modules linked in: CPU: 0 UID: 0 PID: 5337 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:inc_nlink+0x122/0x150 fs/inode.c:465 Code: e5 ff e9 3a ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4c ff ff ff 48 89 df e8 49 64 e5 ff e9 3f ff ff ff e8 af 3f 76 ff 90 <0f> 0b 90 eb 80 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 50 ff ff ff RSP: 0018:ffffc9000e3df2c8 EFLAGS: 00010293 RAX: ffffffff82504201 RBX: ffff888042e29ee8 RCX: ffff88800094ca80 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: ffffffff90579ff7 R09: 1ffffffff20af3fe R10: dffffc0000000000 R11: fffffbfff20af3ff R12: dffffc0000000000 R13: 1ffff110085c53dd R14: ffff888042e29ea0 R15: ffff888042e29f70 FS: 00007f7c038886c0(0000) GS:ffff88808c54d000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 00000000127c9000 CR4: 0000000000352ef0 Call Trace: jfs_mkdir+0x85e/0xb00 fs/jfs/namei.c:287 vfs_mkdir+0x406/0x620 fs/namei.c:5276 ovl_do_mkdir fs/overlayfs/overlayfs.h:257 [inline] ovl_workdir_create+0x45f/0x8b0 fs/overlayfs/super.c:345 ovl_make_workdir fs/overlayfs/super.c:678 [inline] ovl_get_workdir fs/overlayfs/super.c:836 [inline] ovl_fill_super_creds fs/overlayfs/super.c:1449 [inline] ovl_fill_super+0x19ad/0x5d40 fs/overlayfs/super.c:1560 vfs_get_super fs/super.c:1267 [inline] get_tree_nodev+0xbb/0x150 fs/super.c:1286 vfs_get_tree+0x92/0x2a0 fs/super.c:1694 fc_mount fs/namespace.c:1198 [inline] do_new_mount_fc fs/namespace.c:3765 [inline] do_new_mount+0x319/0xdc0 fs/namespace.c:3841 do_mount fs/namespace.c:4174 [inline] __do_sys_mount fs/namespace.c:4390 [inline] __se_sys_mount+0x31d/0x420 fs/namespace.c:4367 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f7c0299de59 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f7c03887fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f7c02c25fa0 RCX: 00007f7c0299de59 RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 RBP: 00007f7c02a33e6f R08: 0000200000000200 R09: 0000000000000000 R10: 0000000000000408 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f7c02c26038 R14: 00007f7c02c25fa0 R15: 00007ffe56d82de8