loop0: detected capacity change from 0 to 32768 ... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... ... Log Wrap ... Log Wrap ... Log Wrap ... ------------[ cut here ]------------ !(inode_state_read_once(inode) & I_LINKABLE) WARNING: fs/inode.c:465 at inc_nlink+0x122/0x150 fs/inode.c:465, CPU#0: syz.0.0/5344 Modules linked in: CPU: 0 UID: 0 PID: 5344 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:inc_nlink+0x122/0x150 fs/inode.c:465 Code: e4 ff e9 3a ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4c ff ff ff 48 89 df e8 69 30 e4 ff e9 3f ff ff ff e8 bf e0 6a ff 90 <0f> 0b 90 eb 80 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 50 ff ff ff RSP: 0018:ffffc9000f26f1c8 EFLAGS: 00010287 RAX: ffffffff825e41b1 RBX: ffff88800c1ca7c0 RCX: 0000000000100000 RDX: ffffc90020802000 RSI: 0000000000001939 RDI: 000000000000193a RBP: 0000000000000000 R08: ffffffff91be34bf R09: 1ffffffff237c697 R10: dffffc0000000000 R11: fffffbfff237c698 R12: dffffc0000000000 R13: 1ffff110018394f8 R14: ffff88800c1ca778 R15: ffff88800c1ca848 FS: 00007f28e06b16c0(0000) GS:ffff88808a9fa000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 0000000013c4e000 CR4: 0000000000352ef0 Call Trace: jfs_mkdir+0x857/0xaf0 fs/jfs/namei.c:287 vfs_mkdir+0x411/0x660 fs/namei.c:5428 ovl_do_mkdir fs/overlayfs/overlayfs.h:261 [inline] ovl_workdir_create+0x4b8/0x970 fs/overlayfs/super.c:366 ovl_make_workdir fs/overlayfs/super.c:718 [inline] ovl_get_workdir+0x339/0x1980 fs/overlayfs/super.c:876 ovl_fill_super_creds fs/overlayfs/super.c:1489 [inline] ovl_fill_super+0x1767/0x4570 fs/overlayfs/super.c:1601 get_tree_super fs/super.c:1360 [inline] get_tree_nodev+0xbe/0x150 fs/super.c:1380 vfs_get_tree+0x92/0x2a0 fs/super.c:1881 fc_mount fs/namespace.c:1282 [inline] do_new_mount_fc fs/namespace.c:3910 [inline] do_new_mount+0x325/0xb00 fs/namespace.c:3986 do_mount fs/namespace.c:4350 [inline] __do_sys_mount fs/namespace.c:4565 [inline] __se_sys_mount+0x31d/0x420 fs/namespace.c:4542 do_syscall_x64 arch/x86/entry/syscall_64.c:61 [inline] do_syscall_64+0x166/0x520 arch/x86/entry/syscall_64.c:84 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f28df79fb19 Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f28e06b0fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f28dfa26090 RCX: 00007f28df79fb19 RDX: 0000200000007bc0 RSI: 0000200000007b80 RDI: 0000000000000000 RBP: 00007f28df837b70 R08: 0000200000007c00 R09: 0000000000000000 R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 R13: 00007f28dfa26128 R14: 00007f28dfa26090 R15: 00007ffc10537df8