------------[ cut here ]------------
WARNING: CPU: 1 PID: 20970 at fs/inode.c:340 drop_nlink+0xce/0x110 fs/inode.c:340
Modules linked in:
CPU: 1 UID: 0 PID: 20970 Comm: syz.8.28134 Not tainted syzkaller #0 68071847e78a8b5e73ab1b858b320f4e6b4f981b
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
RIP: 0010:drop_nlink+0xce/0x110 fs/inode.c:340
Code: 04 00 00 be 08 00 00 00 e8 ff 51 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 66 a1 03 cc e8 22 fb 97 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c
RSP: 0018:ffffc90002c07558 EFLAGS: 00010287
RAX: ffffffff81ee04de RBX: ffff888137ad23c0 RCX: 0000000000080000
RDX: ffffc90005a62000 RSI: 0000000000027cc8 RDI: 0000000000027cc9
RBP: ffffc90002c07580 R08: 0000000000000000 R09: 0000000000000000
R10: ffffc90002c07500 R11: fffff52000580ea2 R12: dffffc0000000000
R13: 1ffff11026f5a481 R14: ffff888137ad2408 R15: 0000000000000000
FS: 00007f9e668186c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000001dc0 CR3: 0000000118b3a000 CR4: 00000000003526b0
DR0: 000000000000a7d0 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
simple_unlink fs/libfs.c:770 [inline]
simple_rename+0x28c/0x500 fs/libfs.c:850
vfs_rename+0xbd1/0x10f0 fs/namei.c:5013
dir_rename fs/incfs/vfs.c:1427 [inline]
dir_rename_wrap+0x433/0x6b0 fs/incfs/vfs.c:91
vfs_rename+0xbd1/0x10f0 fs/namei.c:5013
dir_rename fs/incfs/vfs.c:1427 [inline]
dir_rename_wrap+0x433/0x6b0 fs/incfs/vfs.c:91
vfs_rename+0xbd1/0x10f0 fs/namei.c:5013
do_renameat2+0x7d1/0xc80 fs/namei.c:5170
__do_sys_rename fs/namei.c:5217 [inline]
__se_sys_rename fs/namei.c:5215 [inline]
__x64_sys_rename+0x86/0xa0 fs/namei.c:5215
x64_sys_call+0x150b/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:83
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f9e6598eec9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f9e66818038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
RAX: ffffffffffffffda RBX: 00007f9e65be5fa0 RCX: 00007f9e6598eec9
RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000580
RBP: 00007f9e65a11f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f9e65be6038 R14: 00007f9e65be5fa0 R15: 00007ffeafeb5c98
</TASK>
---[ end trace 0000000000000000 ]---
------------[ cut here ]------------
WARNING: CPU: 0 PID: 20970 at fs/dcache.c:774 fast_dput fs/dcache.c:774 [inline]
WARNING: CPU: 0 PID: 20970 at fs/dcache.c:774 dput+0x3cd/0x510 fs/dcache.c:851
Modules linked in:
CPU: 0 UID: 0 PID: 20970 Comm: syz.8.28134 Tainted: G W syzkaller #0 68071847e78a8b5e73ab1b858b320f4e6b4f981b
Tainted: [W]=WARN
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
RIP: 0010:fast_dput fs/dcache.c:774 [inline]
RIP: 0010:dput+0x3cd/0x510 fs/dcache.c:851
Code: f8 98 ff 48 b8 00 00 00 00 00 fc ff df 48 8b 4d d0 0f b6 04 01 84 c0 0f 85 21 01 00 00 80 0b 40 e9 a8 fe ff ff e8 83 f8 98 ff <0f> 0b e9 9c fe ff ff e8 77 f8 98 ff 48 89 df e8 2f 01 00 00 84 c0
RSP: 0018:ffffc90002c07b10 EFLAGS: 00010246
RAX: ffffffff81ed077d RBX: ffff888112f7b660 RCX: 0000000000080000
RDX: ffffc90005a62000 RSI: 000000000007ffff RDI: 0000000000080000
RBP: ffffc90002c07b40 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffff52000580f54 R12: 00000000ffffff80
R13: ffff888112f7b6e4 R14: ffff888112f7b6e0 R15: 1ffff110225ef6dc
FS: 00007f9e668186c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f9e667b4f98 CR3: 0000000118b3a000 CR4: 00000000003526b0
DR0: ffffffffffffffff DR1: 0000000000000000 DR2: 0000000004000007
DR3: fffffdfffffffffe DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
<TASK>
path_put+0x3d/0x70 fs/namei.c:568
dentry_release+0x53/0xb0 fs/incfs/vfs.c:1587
__dentry_kill+0x22e/0x5f0 fs/dcache.c:620
dput+0x3f2/0x510 fs/dcache.c:857
path_put+0x3d/0x70 fs/namei.c:568
dentry_release+0x53/0xb0 fs/incfs/vfs.c:1587
__dentry_kill+0x22e/0x5f0 fs/dcache.c:620
dput+0x3f2/0x510 fs/dcache.c:857
do_renameat2+0x8a7/0xc80 fs/namei.c:5172
__do_sys_rename fs/namei.c:5217 [inline]
__se_sys_rename fs/namei.c:5215 [inline]
__x64_sys_rename+0x86/0xa0 fs/namei.c:5215
x64_sys_call+0x150b/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:83
do_syscall_x64 arch/x86/entry/common.c:52 [inline]
do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83
entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f9e6598eec9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f9e66818038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
RAX: ffffffffffffffda RBX: 00007f9e65be5fa0 RCX: 00007f9e6598eec9
RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000580
RBP: 00007f9e65a11f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f9e65be6038 R14: 00007f9e65be5fa0 R15: 00007ffeafeb5c98
</TASK>
---[ end trace 0000000000000000 ]---