./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1819537685

<...>
Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts.
execve("./syz-executor1819537685", ["./syz-executor1819537685"], 0x7ffd5c026e80 /* 10 vars */) = 0
brk(NULL)                               = 0x555584ff0000
brk(0x555584ff0e00)                     = 0x555584ff0e00
arch_prctl(ARCH_SET_FS, 0x555584ff0480) = 0
set_tid_address(0x555584ff0750)         = 5833
set_robust_list(0x555584ff0760, 24)     = 0
rseq(0x555584ff0da0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1819537685", 4096) = 28
getrandom("\xc0\x3b\x41\xeb\x69\xf2\x81\x27", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555584ff0e00
brk(0x555585011e00)                     = 0x555585011e00
brk(0x555585012000)                     = 0x555585012000
mprotect(0x7febf811f000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7febf8072940, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7febf807b6e0}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7febf8072940, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7febf807b6e0}, NULL, 8) = 0
mkdir("./syzkaller.ImQZzS", 0700)       = 0
chmod("./syzkaller.ImQZzS", 0777)       = 0
chdir("./syzkaller.ImQZzS")             = 0
mkdir("./0", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5835 attached
 <unfinished ...>
[pid  5835] set_robust_list(0x555584ff0760, 24 <unfinished ...>
[pid  5833] <... clone resumed>, child_tidptr=0x555584ff0750) = 5835
[pid  5835] <... set_robust_list resumed>) = 0
[pid  5835] chdir("./0")                = 0
[pid  5835] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5835] setpgid(0, 0)               = 0
[pid  5835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5835] write(3, "1000", 4)         = 4
[pid  5835] close(3)                    = 0
[pid  5835] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5835] write(1, "executing program\n", 18) = 18
[pid  5835] memfd_create("syzkaller", 0) = 3
[pid  5835] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7febefc00000
[pid  5835] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152
[pid  5835] munmap(0x7febefc00000, 138412032) = 0
[pid  5835] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5835] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5835] close(3)                    = 0
[pid  5835] close(4)                    = 0
[pid  5835] mkdir("./file1", 0777)      = 0
syzkaller login: [   62.302651][ T5835] loop0: detected capacity change from 0 to 4096
[pid  5835] mount("/dev/loop0", "./file1", "nilfs2", MS_RELATIME, "") = 0
[pid  5835] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid  5835] chdir("./file1")            = 0
[pid  5835] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5835] rename("./file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5835] mkdir("./file0", 0777)      = 0
[pid  5835] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
[pid  5835] mount(NULL, "./file0", "overlay", 0, "lowerdir=./file0:/") = 0
[pid  5835] exit_group(0)               = ?
[pid  5835] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5835, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x555584ff17f0 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/binderfs")                  = 0
umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0755, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0755, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555584ff9830 /* 9 entries */, 32768) = 512
[   62.364946][ T5836] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
umount2("./0/file1/.nilfs", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./0/file1/.nilfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/file1/.nilfs", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./0/file1/.nilfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/file1/.nilfs", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 5
newfstatat(5, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(5, 0x555585001870 /* 2 entries */, 32768) = 48
getdents64(5, 0x555585001870 /* 0 entries */, 32768) = 0
close(5)                                = 0
rmdir("./0/file1/.nilfs")               = 0
umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/file1/file0", {st_mode=S_IFDIR|0700, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/file1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 5
newfstatat(5, "", {st_mode=S_IFDIR|0700, st_size=0, ...}, AT_EMPTY_PATH) = 0
getdents64(5, 0x555585001870, 32768)    = -1 ENOENT (No such file or directory)
close(5)                                = 0
[   62.459777][ T5833] NILFS (loop0): deleting nonexistent file (ino=11), 0
[   62.467009][ T5833] ------------[ cut here ]------------
[   62.472541][ T5833] WARNING: CPU: 1 PID: 5833 at fs/inode.c:407 drop_nlink+0xc4/0x110
[   62.480670][ T5833] Modules linked in:
[   62.484591][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: syz-executor181 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[   62.495424][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[   62.505565][ T5833] RIP: 0010:drop_nlink+0xc4/0x110
[   62.510642][ T5833] Code: bb 70 07 00 00 be 08 00 00 00 e8 07 df e5 ff f0 48 ff 83 70 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc e8 6d f4 7e ff 90 <0f> 0b 90 eb 83 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5c ff ff ff
[   62.530321][ T5833] RSP: 0018:ffffc90003e97c70 EFLAGS: 00010293
[   62.536387][ T5833] RAX: ffffffff8215f523 RBX: 1ffff1100ef7b1cc RCX: ffff888030afbc00
[   62.544396][ T5833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   62.552415][ T5833] RBP: 0000000000000000 R08: ffffffff8215f4a3 R09: 1ffff1100fb87cee
[   62.560436][ T5833] R10: dffffc0000000000 R11: ffffed100fb87cef R12: ffff888077bd8e60
[   62.568425][ T5833] R13: 1ffff1100ef7b030 R14: ffff888077bd8e18 R15: dffffc0000000000
[   62.576443][ T5833] FS:  0000555584ff0480(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[   62.585450][ T5833] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   62.592121][ T5833] CR2: 000000000045bdd0 CR3: 0000000074070000 CR4: 00000000003526f0
[   62.600153][ T5833] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   62.608138][ T5833] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   62.616179][ T5833] Call Trace:
[   62.619533][ T5833]  <TASK>
[   62.622474][ T5833]  ? __warn+0x168/0x4e0
[   62.626628][ T5833]  ? drop_nlink+0xc4/0x110
[   62.631093][ T5833]  ? report_bug+0x2b3/0x500
[   62.635629][ T5833]  ? drop_nlink+0xc4/0x110
[   62.640099][ T5833]  ? handle_bug+0x60/0x90
[   62.644445][ T5833]  ? exc_invalid_op+0x1a/0x50
[   62.649181][ T5833]  ? asm_exc_invalid_op+0x1a/0x20
[   62.654225][ T5833]  ? drop_nlink+0x43/0x110
[   62.658687][ T5833]  ? drop_nlink+0xc3/0x110
[   62.663127][ T5833]  ? drop_nlink+0xc4/0x110
[   62.667540][ T5833]  nilfs_rmdir+0x1b0/0x250
[   62.672053][ T5833]  ? __pfx_nilfs_rmdir+0x10/0x10
[   62.677041][ T5833]  ? down_write+0x18c/0x220
[   62.681602][ T5833]  ? do_raw_spin_unlock+0x13c/0x8b0
[   62.686822][ T5833]  ? bpf_lsm_inode_rmdir+0x9/0x10
[   62.691902][ T5833]  ? security_inode_rmdir+0xd9/0x340
[   62.697225][ T5833]  vfs_rmdir+0x3a3/0x510
[   62.701522][ T5833]  do_rmdir+0x3b5/0x580
[   62.705696][ T5833]  ? __pfx_do_rmdir+0x10/0x10
[   62.710424][ T5833]  ? getname_flags+0x1e3/0x540
[   62.715204][ T5833]  __x64_sys_rmdir+0x47/0x50
[   62.719875][ T5833]  do_syscall_64+0xf3/0x230
[   62.724406][ T5833]  ? clear_bhb_loop+0x35/0x90
[   62.729173][ T5833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.735085][ T5833] RIP: 0033:0x7febf80a8507
[   62.739546][ T5833] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 54 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   62.759234][ T5833] RSP: 002b:00007ffc733beac8 EFLAGS: 00000207 ORIG_RAX: 0000000000000054
[   62.767743][ T5833] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007febf80a8507
[   62.775769][ T5833] RDX: 0000000000008790 RSI: 0000000000000000 RDI: 00007ffc733bfc70
[   62.783815][ T5833] RBP: 0000000000000065 R08: 0000000000000000 R09: 0000000000000000
[   62.791842][ T5833] R10: 0000000000001000 R11: 0000000000000207 R12: 00007ffc733bfc70
[   62.799873][ T5833] R13: 0000555585001840 R14: 431bde82d7b634db R15: 00007ffc733c1df0
[   62.807849][ T5833]  </TASK>
[   62.810928][ T5833] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   62.818253][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: syz-executor181 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0
[   62.829083][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[   62.839129][ T5833] Call Trace:
[   62.842400][ T5833]  <TASK>
[   62.845323][ T5833]  dump_stack_lvl+0x241/0x360
[   62.849995][ T5833]  ? __pfx_dump_stack_lvl+0x10/0x10
[   62.855202][ T5833]  ? __pfx__printk+0x10/0x10
[   62.859776][ T5833]  ? _printk+0xd5/0x120
[   62.863918][ T5833]  ? __init_begin+0x41000/0x41000
[   62.868942][ T5833]  ? vscnprintf+0x5d/0x90
[   62.873279][ T5833]  panic+0x349/0x880
[   62.877168][ T5833]  ? __warn+0x177/0x4e0
[   62.881320][ T5833]  ? __pfx_panic+0x10/0x10
[   62.885731][ T5833]  ? show_trace_log_lvl+0x3b2/0x410
[   62.890940][ T5833]  __warn+0x34b/0x4e0
[   62.894939][ T5833]  ? drop_nlink+0xc4/0x110
[   62.899353][ T5833]  report_bug+0x2b3/0x500
[   62.903679][ T5833]  ? drop_nlink+0xc4/0x110
[   62.908091][ T5833]  handle_bug+0x60/0x90
[   62.912244][ T5833]  exc_invalid_op+0x1a/0x50
[   62.916743][ T5833]  asm_exc_invalid_op+0x1a/0x20
[   62.921588][ T5833] RIP: 0010:drop_nlink+0xc4/0x110
[   62.926608][ T5833] Code: bb 70 07 00 00 be 08 00 00 00 e8 07 df e5 ff f0 48 ff 83 70 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc e8 6d f4 7e ff 90 <0f> 0b 90 eb 83 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5c ff ff ff
[   62.946204][ T5833] RSP: 0018:ffffc90003e97c70 EFLAGS: 00010293
[   62.952270][ T5833] RAX: ffffffff8215f523 RBX: 1ffff1100ef7b1cc RCX: ffff888030afbc00
[   62.960236][ T5833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   62.968197][ T5833] RBP: 0000000000000000 R08: ffffffff8215f4a3 R09: 1ffff1100fb87cee
[   62.976164][ T5833] R10: dffffc0000000000 R11: ffffed100fb87cef R12: ffff888077bd8e60
[   62.984129][ T5833] R13: 1ffff1100ef7b030 R14: ffff888077bd8e18 R15: dffffc0000000000
[   62.992102][ T5833]  ? drop_nlink+0x43/0x110
[   62.996513][ T5833]  ? drop_nlink+0xc3/0x110
[   63.000930][ T5833]  nilfs_rmdir+0x1b0/0x250
[   63.005365][ T5833]  ? __pfx_nilfs_rmdir+0x10/0x10
[   63.010298][ T5833]  ? down_write+0x18c/0x220
[   63.014816][ T5833]  ? do_raw_spin_unlock+0x13c/0x8b0
[   63.020029][ T5833]  ? bpf_lsm_inode_rmdir+0x9/0x10
[   63.025058][ T5833]  ? security_inode_rmdir+0xd9/0x340
[   63.030350][ T5833]  vfs_rmdir+0x3a3/0x510
[   63.034596][ T5833]  do_rmdir+0x3b5/0x580
[   63.038756][ T5833]  ? __pfx_do_rmdir+0x10/0x10
[   63.043435][ T5833]  ? getname_flags+0x1e3/0x540
[   63.048198][ T5833]  __x64_sys_rmdir+0x47/0x50
[   63.052783][ T5833]  do_syscall_64+0xf3/0x230
[   63.057311][ T5833]  ? clear_bhb_loop+0x35/0x90
[   63.062417][ T5833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.068304][ T5833] RIP: 0033:0x7febf80a8507
[   63.072737][ T5833] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 54 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   63.092339][ T5833] RSP: 002b:00007ffc733beac8 EFLAGS: 00000207 ORIG_RAX: 0000000000000054
[   63.100839][ T5833] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007febf80a8507
[   63.108806][ T5833] RDX: 0000000000008790 RSI: 0000000000000000 RDI: 00007ffc733bfc70
[   63.116770][ T5833] RBP: 0000000000000065 R08: 0000000000000000 R09: 0000000000000000
[   63.124734][ T5833] R10: 0000000000001000 R11: 0000000000000207 R12: 00007ffc733bfc70
[   63.132699][ T5833] R13: 0000555585001840 R14: 431bde82d7b634db R15: 00007ffc733c1df0
[   63.140680][ T5833]  </TASK>
[   63.143947][ T5833] Kernel Offset: disabled
[   63.148307][ T5833] Rebooting in 86400 seconds..