./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2658477730 <...> Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. execve("./syz-executor2658477730", ["./syz-executor2658477730"], 0x7fff5112fdd0 /* 10 vars */) = 0 brk(NULL) = 0x55555d702000 brk(0x55555d702d00) = 0x55555d702d00 arch_prctl(ARCH_SET_FS, 0x55555d702380) = 0 set_tid_address(0x55555d702650) = 5069 set_robust_list(0x55555d702660, 24) = 0 rseq(0x55555d702ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2658477730", 4096) = 28 getrandom("\x0b\xb4\x24\x9e\x29\x71\x39\x38", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555d702d00 brk(0x55555d723d00) = 0x55555d723d00 brk(0x55555d724000) = 0x55555d724000 mprotect(0x7f06b37f5000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f06ab200000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7f06ab200000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file1", 0777) = 0 [ 59.333877][ T5069] loop0: detected capacity change from 0 to 1024 mount("/dev/loop0", "./file1", "hfsplus", MS_SYNCHRONOUS|MS_NODIRATIME|MS_REC, "") = 0 openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 chdir("./file1") = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) openat(AT_FDCWD, "cpu.stat", O_WRONLY|O_CREAT|O_EXCL|O_TRUNC|O_APPEND|FASYNC|0x20, 000) = 4 symlinkat("./file2", AT_FDCWD, "./file6") = 0 openat(AT_FDCWD, "blkio.throttle.io_service_bytes_recursive", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 open("./file7", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|FASYNC, 000) = 6 openat(AT_FDCWD, "blkio.bfq.io_wait_time", O_WRONLY|O_CREAT|O_EXCL|O_TRUNC|O_APPEND|FASYNC|0x20, 000) = 7 renameat2(AT_FDCWD, "./file6", AT_FDCWD, "./file7", 0) = -1 ENOENT (No such file or directory) [ 59.440598][ T28] audit: type=1800 audit(1713676882.034:2): pid=5069 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor265" name="file7" dev="loop0" ino=29 res=0 errno=0 [ 59.472129][ T5069] ------------[ cut here ]------------ [ 59.477801][ T5069] WARNING: CPU: 0 PID: 5069 at fs/inode.c:332 drop_nlink+0xc4/0x110 [ 59.485899][ T5069] Modules linked in: [ 59.489811][ T5069] CPU: 0 PID: 5069 Comm: syz-executor265 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 59.500358][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 59.510507][ T5069] RIP: 0010:drop_nlink+0xc4/0x110 [ 59.515560][ T5069] Code: bb 70 07 00 00 be 08 00 00 00 e8 a7 ac e7 ff f0 48 ff 83 70 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc e8 8d 98 86 ff 90 <0f> 0b 90 eb 83 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5c ff ff ff [ 59.535341][ T5069] RSP: 0018:ffffc9000349f8f0 EFLAGS: 00010293 [ 59.541568][ T5069] RAX: ffffffff820f67e3 RBX: 1ffff1100f19554f RCX: ffff888023e2da00 [ 59.549628][ T5069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.557744][ T5069] RBP: 0000000000000000 R08: ffffffff820f6763 R09: 1ffff92000693e80 [ 59.566431][ T5069] R10: dffffc0000000000 R11: fffff52000693e81 R12: ffff888078caaa78 [ 59.574521][ T5069] R13: ffff88807a111ac8 R14: ffff888078caaa30 R15: dffffc0000000000 [ 59.582566][ T5069] FS: 000055555d702380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 59.593866][ T5069] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.600566][ T5069] CR2: 000055b3a6d5ae28 CR3: 0000000075610000 CR4: 00000000003506f0 [ 59.608626][ T5069] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.616659][ T5069] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.624662][ T5069] Call Trace: [ 59.628160][ T5069] [ 59.631227][ T5069] ? __warn+0x163/0x4e0 [ 59.635408][ T5069] ? drop_nlink+0xc4/0x110 [ 59.639934][ T5069] ? report_bug+0x2b3/0x500 [ 59.644486][ T5069] ? drop_nlink+0xc4/0x110 [ 59.649011][ T5069] ? handle_bug+0x3e/0x70 [ 59.653391][ T5069] ? exc_invalid_op+0x1a/0x50 [ 59.658190][ T5069] ? asm_exc_invalid_op+0x1a/0x20 [ 59.663269][ T5069] ? drop_nlink+0x43/0x110 [ 59.667810][ T5069] ? drop_nlink+0xc3/0x110 [ 59.672295][ T5069] ? drop_nlink+0xc4/0x110 [ 59.676779][ T5069] hfsplus_unlink+0x3fe/0x790 [ 59.681478][ T5069] ? __pfx_hfsplus_unlink+0x10/0x10 [ 59.686793][ T5069] ? __pfx___down_write_common+0x10/0x10 [ 59.692545][ T5069] ? __pfx___down_write_common+0x10/0x10 [ 59.698256][ T5069] hfsplus_rename+0xc8/0x1c0 [ 59.702948][ T5069] ? __pfx_hfsplus_rename+0x10/0x10 [ 59.708236][ T5069] vfs_rename+0xbdb/0xf00 [ 59.712613][ T5069] ? __pfx_vfs_rename+0x10/0x10 [ 59.717587][ T5069] ? security_path_rename+0x18b/0x220 [ 59.723034][ T5069] do_renameat2+0xd94/0x13f0 [ 59.727760][ T5069] ? __virt_addr_valid+0x183/0x520 [ 59.732910][ T5069] ? __pfx_do_renameat2+0x10/0x10 [ 59.738029][ T5069] ? __virt_addr_valid+0x183/0x520 [ 59.743172][ T5069] ? __virt_addr_valid+0x44e/0x520 [ 59.748387][ T5069] ? __check_object_size+0x4bc/0xa00 [ 59.753736][ T5069] ? getname_flags+0x1fe/0x4f0 [ 59.758769][ T5069] __x64_sys_renameat2+0xd2/0xf0 [ 59.763822][ T5069] do_syscall_64+0xf5/0x240 [ 59.768478][ T5069] ? clear_bhb_loop+0x35/0x90 [ 59.773196][ T5069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.779180][ T5069] RIP: 0033:0x7f06b3781779 [ 59.783626][ T5069] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 59.803344][ T5069] RSP: 002b:00007ffc9f3828a8 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 59.811825][ T5069] RAX: ffffffffffffffda RBX: 0037656c69662f2e RCX: 00007f06b3781779 [ 59.820004][ T5069] RDX: 00000000ffffff9c RSI: 0000000020000b80 RDI: 00000000ffffff9c [ 59.828027][ T5069] RBP: 0036656c69662f2e R08: 0000000000000000 R09: 0000000000000000 [ 59.836107][ T5069] R10: 0000000020000bc0 R11: 0000000000000246 R12: 0000000000000001 [ 59.844168][ T5069] R13: 00007ffc9f382a88 R14: 0000000000000001 R15: 0000000000000001 [ 59.852373][ T5069] [ 59.855410][ T5069] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 59.862698][ T5069] CPU: 0 PID: 5069 Comm: syz-executor265 Not tainted 6.9.0-rc4-syzkaller-00266-g977b1ef51866 #0 [ 59.873118][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 59.883249][ T5069] Call Trace: [ 59.886518][ T5069] [ 59.889448][ T5069] dump_stack_lvl+0x241/0x360 [ 59.895186][ T5069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.900403][ T5069] ? __pfx__printk+0x10/0x10 [ 59.905054][ T5069] ? _printk+0xd5/0x120 [ 59.909244][ T5069] ? vscnprintf+0x5d/0x90 [ 59.913615][ T5069] panic+0x349/0x860 [ 59.917519][ T5069] ? __warn+0x172/0x4e0 [ 59.921675][ T5069] ? __pfx_panic+0x10/0x10 [ 59.926080][ T5069] ? show_trace_log_lvl+0x4e6/0x520 [ 59.931303][ T5069] __warn+0x346/0x4e0 [ 59.935305][ T5069] ? drop_nlink+0xc4/0x110 [ 59.939713][ T5069] report_bug+0x2b3/0x500 [ 59.944028][ T5069] ? drop_nlink+0xc4/0x110 [ 59.948438][ T5069] handle_bug+0x3e/0x70 [ 59.952614][ T5069] exc_invalid_op+0x1a/0x50 [ 59.957117][ T5069] asm_exc_invalid_op+0x1a/0x20 [ 59.961973][ T5069] RIP: 0010:drop_nlink+0xc4/0x110 [ 59.967028][ T5069] Code: bb 70 07 00 00 be 08 00 00 00 e8 a7 ac e7 ff f0 48 ff 83 70 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc e8 8d 98 86 ff 90 <0f> 0b 90 eb 83 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5c ff ff ff [ 59.986725][ T5069] RSP: 0018:ffffc9000349f8f0 EFLAGS: 00010293 [ 59.992879][ T5069] RAX: ffffffff820f67e3 RBX: 1ffff1100f19554f RCX: ffff888023e2da00 [ 60.000859][ T5069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.008900][ T5069] RBP: 0000000000000000 R08: ffffffff820f6763 R09: 1ffff92000693e80 [ 60.016851][ T5069] R10: dffffc0000000000 R11: fffff52000693e81 R12: ffff888078caaa78 [ 60.024805][ T5069] R13: ffff88807a111ac8 R14: ffff888078caaa30 R15: dffffc0000000000 [ 60.032764][ T5069] ? drop_nlink+0x43/0x110 [ 60.037165][ T5069] ? drop_nlink+0xc3/0x110 [ 60.041594][ T5069] hfsplus_unlink+0x3fe/0x790 [ 60.046292][ T5069] ? __pfx_hfsplus_unlink+0x10/0x10 [ 60.051536][ T5069] ? __pfx___down_write_common+0x10/0x10 [ 60.057462][ T5069] ? __pfx___down_write_common+0x10/0x10 [ 60.063094][ T5069] hfsplus_rename+0xc8/0x1c0 [ 60.067763][ T5069] ? __pfx_hfsplus_rename+0x10/0x10 [ 60.072943][ T5069] vfs_rename+0xbdb/0xf00 [ 60.077268][ T5069] ? __pfx_vfs_rename+0x10/0x10 [ 60.082130][ T5069] ? security_path_rename+0x18b/0x220 [ 60.087496][ T5069] do_renameat2+0xd94/0x13f0 [ 60.092430][ T5069] ? __virt_addr_valid+0x183/0x520 [ 60.097568][ T5069] ? __pfx_do_renameat2+0x10/0x10 [ 60.102607][ T5069] ? __virt_addr_valid+0x183/0x520 [ 60.107724][ T5069] ? __virt_addr_valid+0x44e/0x520 [ 60.112820][ T5069] ? __check_object_size+0x4bc/0xa00 [ 60.118219][ T5069] ? getname_flags+0x1fe/0x4f0 [ 60.123090][ T5069] __x64_sys_renameat2+0xd2/0xf0 [ 60.128055][ T5069] do_syscall_64+0xf5/0x240 [ 60.132593][ T5069] ? clear_bhb_loop+0x35/0x90 [ 60.137505][ T5069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.143596][ T5069] RIP: 0033:0x7f06b3781779 [ 60.148235][ T5069] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 60.167947][ T5069] RSP: 002b:00007ffc9f3828a8 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 60.176448][ T5069] RAX: ffffffffffffffda RBX: 0037656c69662f2e RCX: 00007f06b3781779 [ 60.184518][ T5069] RDX: 00000000ffffff9c RSI: 0000000020000b80 RDI: 00000000ffffff9c [ 60.192518][ T5069] RBP: 0036656c69662f2e R08: 0000000000000000 R09: 0000000000000000 [ 60.200508][ T5069] R10: 0000000020000bc0 R11: 0000000000000246 R12: 0000000000000001 [ 60.208472][ T5069] R13: 00007ffc9f382a88 R14: 0000000000000001 R15: 0000000000000001 [ 60.216609][ T5069] [ 60.219933][ T5069] Kernel Offset: disabled [ 60.224413][ T5069] Rebooting in 86400 seconds..