./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3855926283
<...>
Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts.
execve("./syz-executor3855926283", ["./syz-executor3855926283"], 0x7fff69060ac0 /* 10 vars */) = 0
brk(NULL) = 0x5555696a5000
brk(0x5555696a5d00) = 0x5555696a5d00
arch_prctl(ARCH_SET_FS, 0x5555696a5380) = 0
set_tid_address(0x5555696a5650) = 5828
set_robust_list(0x5555696a5660, 24) = 0
rseq(0x5555696a5ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3855926283", 4096) = 28
getrandom("\x50\x11\xbf\xb1\x27\x5e\xee\x7a", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5555696a5d00
brk(0x5555696c6d00) = 0x5555696c6d00
brk(0x5555696c7000) = 0x5555696c7000
mprotect(0x7fd6ca16b000, 16384, PROT_READ) = 0
mmap(0x3ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3ffffffff000
mmap(0x400000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400000000000
mmap(0x400001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400001000000
mkdir("./syzkaller.kl3Ezy", 0700) = 0
chmod("./syzkaller.kl3Ezy", 0777) = 0
chdir("./syzkaller.kl3Ezy") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5830 attached
, child_tidptr=0x5555696a5650) = 5830
[pid 5830] set_robust_list(0x5555696a5660, 24) = 0
[pid 5830] chdir("./0") = 0
[pid 5830] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5830] setpgid(0, 0) = 0
[pid 5830] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5830] write(3, "1000", 4) = 4
[pid 5830] close(3) = 0
[pid 5830] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5830] write(1, "executing program\n", 18executing program
) = 18
[pid 5830] memfd_create("syzkaller", 0) = 3
[pid 5830] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd6c1c00000
[pid 5830] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid 5830] munmap(0x7fd6c1c00000, 138412032) = 0
[pid 5830] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5830] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5830] close(3) = 0
[pid 5830] close(4) = 0
[pid 5830] mkdir("./file0", 0777) = 0
[ 91.404918][ T5830] loop0: detected capacity change from 0 to 512
[ 91.446002][ T5830] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[ 91.455977][ T5830] EXT4-fs error (device loop0): ext4_clear_blocks:874: inode #13: comm syz-executor385: attempt to clear invalid blocks 2 len 1
[ 91.470937][ T5830] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[pid 5830] mount("/dev/loop0", "./file0", "ext4", 0, "dax=never,dioread_nolock,barrier,delalloc,jqfmt=vfsv0,usrjquota=..,errors=continue") = 0
[pid 5830] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5830] chdir("./file0") = 0
[pid 5830] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5830] mount(NULL, "./file0", "proc", 0, NULL) = 0
[ 91.487064][ T5830] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #13: comm syz-executor385: invalid indirect mapped block 1819239214 (level 0)
[ 91.502492][ T5830] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #13: comm syz-executor385: invalid indirect mapped block 1819239214 (level 1)
[ 91.519544][ T5830] EXT4-fs (loop0): 1 truncate cleaned up
[ 91.526525][ T5830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[pid 5830] exit_group(0) = ?
[pid 5830] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5830, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x5555696a66f0 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/binderfs") = 0
umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0755, st_size=1024, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0755, st_size=1024, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x5555696ae730 /* 7 entries */, 32768) = 208
umount2("./0/file0/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/file0/lost+found", {st_mode=S_IFDIR|0700, st_size=11264, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./0/file0/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/file0/lost+found", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 5
[ 91.760474][ T5828] EXT4-fs error (device loop0): htree_dirblock_to_tree:1109: inode #2: block 13: comm syz-executor385: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
newfstatat(5, "", {st_mode=S_IFDIR|0700, st_size=11264, ...}, AT_EMPTY_PATH) = 0
getdents64(5, 0x5555696b6770 /* 2 entries */, 32768) = 48
getdents64(5, 0x5555696b6770 /* 0 entries */, 32768) = 0
close(5) = 0
rmdir("./0/file0/lost+found") = 0
umount2("./0/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./0/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/file0/file0", {st_mode=S_IFDIR|0755, st_size=60, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./0/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/file0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 5
newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=60, ...}, AT_EMPTY_PATH) = 0
getdents64(5, 0x5555696b6770 /* 4 entries */, 32768) = 112
umount2("./0/file0/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/file0/file0/file0", {st_mode=S_IFREG|0755, st_size=1050, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/file0/file0/file0") = 0
[ 91.939878][ T5828] ------------[ cut here ]------------
[ 91.945533][ T5828] bad length passed for symlink [/tmp/syz-imagegen2884317625/] (got 39, expected 29)
[ 91.945991][ T5828] WARNING: CPU: 0 PID: 5828 at ./include/linux/fs.h:802 __ext4_iget+0x3aa2/0x4310
[ 91.964904][ T5828] Modules linked in:
[ 91.968807][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz-executor385 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0
[ 91.980093][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 91.990237][ T5828] RIP: 0010:__ext4_iget+0x3aa2/0x4310
[ 91.995718][ T5828] Code: e8 63 19 49 ff c6 05 e9 1a da 0d 01 90 8b 95 10 ff ff ff 44 89 e1 48 c7 c7 40 4b 85 8b 48 8b b5 f8 fe ff ff e8 8f 57 09 ff 90 <0f> 0b 90 90 e9 2d fd ff ff e8 30 57 ab ff e9 f6 e6 ff ff e8 06 56
[ 92.015532][ T5828] RSP: 0018:ffffc90003ca7810 EFLAGS: 00010286
[ 92.021703][ T5828] RAX: 0000000000000000 RBX: ffff888077bd8ca4 RCX: ffffffff817a1159
[ 92.029701][ T5828] RDX: ffff888034e01e00 RSI: ffffffff817a1166 RDI: 0000000000000001
[ 92.037761][ T5828] RBP: ffffc90003ca7960 R08: 0000000000000001 R09: 0000000000000000
[ 92.045803][ T5828] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000001d
[ 92.053849][ T5828] R13: 0000000000000000 R14: 0000000000002000 R15: ffff888077bd8c98
[ 92.061878][ T5828] FS: 00005555696a5380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 92.070818][ T5828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 92.077505][ T5828] CR2: 00005555696be778 CR3: 00000000743ae000 CR4: 0000000000350ef0
[ 92.085548][ T5828] Call Trace:
[ 92.088829][ T5828]
[ 92.091833][ T5828] ? __warn+0xea/0x3c0
[ 92.095948][ T5828] ? __ext4_iget+0x3aa2/0x4310
[ 92.100732][ T5828] ? report_bug+0x3c0/0x580
[ 92.105337][ T5828] ? handle_bug+0x54/0xa0
[ 92.109718][ T5828] ? exc_invalid_op+0x17/0x50
[ 92.114483][ T5828] ? asm_exc_invalid_op+0x1a/0x20
[ 92.119590][ T5828] ? __warn_printk+0x199/0x350
[ 92.124449][ T5828] ? __warn_printk+0x1a6/0x350
[ 92.129261][ T5828] ? __ext4_iget+0x3aa2/0x4310
[ 92.134118][ T5828] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 92.139570][ T5828] ? __pfx___ext4_iget+0x10/0x10
[ 92.144601][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 92.150313][ T5828] ? kfree+0x260/0x4d0
[ 92.154515][ T5828] ext4_lookup+0x37e/0x730
[ 92.159000][ T5828] ? __pfx_ext4_lookup+0x10/0x10
[ 92.164053][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 92.169752][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 92.175508][ T5828] __lookup_slow+0x252/0x470
[ 92.180160][ T5828] ? __pfx___lookup_slow+0x10/0x10
[ 92.185349][ T5828] ? walk_component+0x342/0x5b0
[ 92.190259][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 92.196008][ T5828] ? lookup_fast+0x153/0x5f0
[ 92.200651][ T5828] walk_component+0x350/0x5b0
[ 92.205404][ T5828] path_lookupat+0x17f/0x770
[ 92.210075][ T5828] filename_lookup+0x221/0x5f0
[ 92.214931][ T5828] ? __pfx_filename_lookup+0x10/0x10
[ 92.220270][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 92.226029][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 92.231790][ T5828] ? getname_flags.part.0+0x1c5/0x550
[ 92.237196][ T5828] ? ptrace_notify+0xf1/0x130
[ 92.241956][ T5828] user_path_at+0x3a/0x60
[ 92.246513][ T5828] __x64_sys_umount+0x10b/0x1a0
[ 92.251463][ T5828] ? __pfx___x64_sys_umount+0x10/0x10
[ 92.256891][ T5828] ? lockdep_hardirqs_on+0x7c/0x110
[ 92.262190][ T5828] ? _raw_spin_unlock_irq+0x2e/0x50
[ 92.267432][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 92.273211][ T5828] ? ptrace_notify+0xf1/0x130
[ 92.277968][ T5828] do_syscall_64+0xcd/0x250
[ 92.282617][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.288584][ T5828] RIP: 0033:0x7fd6ca0f8487
[ 92.293111][ T5828] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[ 92.312909][ T5828] RSP: 002b:00007ffd3ce25b68 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[ 92.321445][ T5828] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd6ca0f8487
[ 92.329469][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3ce25c20
[ 92.337559][ T5828] RBP: 00007ffd3ce25c20 R08: 0000000000000000 R09: 0000000000000000
[ 92.345607][ T5828] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffd3ce26d10
[ 92.353689][ T5828] R13: 00005555696b6740 R14: 0000000000000001 R15: 431bde82d7b634db
[ 92.361738][ T5828]
[ 92.364766][ T5828] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 92.372053][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz-executor385 Not tainted 6.14.0-rc1-syzkaller-00181-g7ee983c850b4 #0
[ 92.383176][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 92.393238][ T5828] Call Trace:
[ 92.396516][ T5828]
[ 92.399447][ T5828] dump_stack_lvl+0x3d/0x1f0
[ 92.404064][ T5828] panic+0x71d/0x800
[ 92.407977][ T5828] ? __pfx_panic+0x10/0x10
[ 92.412409][ T5828] ? show_trace_log_lvl+0x29d/0x3d0
[ 92.417640][ T5828] ? check_panic_on_warn+0x1f/0xb0
[ 92.422780][ T5828] ? __ext4_iget+0x3aa2/0x4310
[ 92.427579][ T5828] check_panic_on_warn+0xab/0xb0
[ 92.432551][ T5828] __warn+0xf6/0x3c0
[ 92.436475][ T5828] ? __ext4_iget+0x3aa2/0x4310
[ 92.441273][ T5828] report_bug+0x3c0/0x580
[ 92.445634][ T5828] handle_bug+0x54/0xa0
[ 92.449825][ T5828] exc_invalid_op+0x17/0x50
[ 92.454368][ T5828] asm_exc_invalid_op+0x1a/0x20
[ 92.459261][ T5828] RIP: 0010:__ext4_iget+0x3aa2/0x4310
[ 92.464669][ T5828] Code: e8 63 19 49 ff c6 05 e9 1a da 0d 01 90 8b 95 10 ff ff ff 44 89 e1 48 c7 c7 40 4b 85 8b 48 8b b5 f8 fe ff ff e8 8f 57 09 ff 90 <0f> 0b 90 90 e9 2d fd ff ff e8 30 57 ab ff e9 f6 e6 ff ff e8 06 56
[ 92.484332][ T5828] RSP: 0018:ffffc90003ca7810 EFLAGS: 00010286
[ 92.490438][ T5828] RAX: 0000000000000000 RBX: ffff888077bd8ca4 RCX: ffffffff817a1159
[ 92.498439][ T5828] RDX: ffff888034e01e00 RSI: ffffffff817a1166 RDI: 0000000000000001
[ 92.506433][ T5828] RBP: ffffc90003ca7960 R08: 0000000000000001 R09: 0000000000000000
[ 92.514423][ T5828] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000001d
[ 92.522412][ T5828] R13: 0000000000000000 R14: 0000000000002000 R15: ffff888077bd8c98
[ 92.530412][ T5828] ? __warn_printk+0x199/0x350
[ 92.535211][ T5828] ? __warn_printk+0x1a6/0x350
[ 92.540010][ T5828] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 92.545443][ T5828] ? __pfx___ext4_iget+0x10/0x10
[ 92.550421][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 92.556108][ T5828] ? kfree+0x260/0x4d0
[ 92.560225][ T5828] ext4_lookup+0x37e/0x730
[ 92.564690][ T5828] ? __pfx_ext4_lookup+0x10/0x10
[ 92.569683][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 92.575374][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 92.581104][ T5828] __lookup_slow+0x252/0x470
[ 92.585815][ T5828] ? __pfx___lookup_slow+0x10/0x10
[ 92.590973][ T5828] ? walk_component+0x342/0x5b0
[ 92.595879][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 92.601559][ T5828] ? lookup_fast+0x153/0x5f0
[ 92.606195][ T5828] walk_component+0x350/0x5b0
[ 92.610913][ T5828] path_lookupat+0x17f/0x770
[ 92.615552][ T5828] filename_lookup+0x221/0x5f0
[ 92.620360][ T5828] ? __pfx_filename_lookup+0x10/0x10
[ 92.625686][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 92.631402][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 92.637083][ T5828] ? getname_flags.part.0+0x1c5/0x550
[ 92.642509][ T5828] ? ptrace_notify+0xf1/0x130
[ 92.647235][ T5828] user_path_at+0x3a/0x60
[ 92.651615][ T5828] __x64_sys_umount+0x10b/0x1a0
[ 92.656511][ T5828] ? __pfx___x64_sys_umount+0x10/0x10
[ 92.661924][ T5828] ? lockdep_hardirqs_on+0x7c/0x110
[ 92.667151][ T5828] ? _raw_spin_unlock_irq+0x2e/0x50
[ 92.672372][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 92.678054][ T5828] ? ptrace_notify+0xf1/0x130
[ 92.682784][ T5828] do_syscall_64+0xcd/0x250
[ 92.687327][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 92.693269][ T5828] RIP: 0033:0x7fd6ca0f8487
[ 92.697706][ T5828] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[ 92.717432][ T5828] RSP: 002b:00007ffd3ce25b68 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[ 92.725973][ T5828] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd6ca0f8487
[ 92.734147][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3ce25c20
[ 92.742148][ T5828] RBP: 00007ffd3ce25c20 R08: 0000000000000000 R09: 0000000000000000
[ 92.750147][ T5828] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffd3ce26d10
[ 92.758155][ T5828] R13: 00005555696b6740 R14: 0000000000000001 R15: 431bde82d7b634db
[ 92.766362][ T5828]
[ 92.769621][ T5828] Kernel Offset: disabled
[ 92.774082][ T5828] Rebooting in 86400 seconds..