./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor274773385
<...>
Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts.
execve("./syz-executor274773385", ["./syz-executor274773385"], 0x7ffcd79cf480 /* 10 vars */) = 0
brk(NULL) = 0x5555743ec000
brk(0x5555743ecd00) = 0x5555743ecd00
arch_prctl(ARCH_SET_FS, 0x5555743ec380) = 0
set_tid_address(0x5555743ec650) = 5827
set_robust_list(0x5555743ec660, 24) = 0
rseq(0x5555743ecca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor274773385", 4096) = 27
getrandom("\x80\x6c\xd8\x04\x05\x1c\x58\x51", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5555743ecd00
brk(0x55557440dd00) = 0x55557440dd00
brk(0x55557440e000) = 0x55557440e000
mprotect(0x7fb7fa98b000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5828 attached
, child_tidptr=0x5555743ec650) = 5828
[pid 5828] set_robust_list(0x5555743ec660, 24) = 0
[pid 5828] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5828] setpgid(0, 0) = 0
[pid 5828] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5828] write(3, "1000", 4) = 4
[pid 5828] close(3) = 0
executing program
[pid 5828] write(1, "executing program\n", 18) = 18
[pid 5828] memfd_create("syzkaller", 0) = 3
[pid 5828] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb7f2400000
[pid 5828] write(3, "\xce\xfa\xad\x1b\x00\x0e\x00\x00\xff\x0f\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\x73\x79\x7a\x6b\x61\x6c\x73\x79\x7a\x6b\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768
[pid 5828] munmap(0x7fb7f2400000, 138412032) = 0
[pid 5828] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5828] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5828] close(3) = 0
[pid 5828] close(4) = 0
[pid 5828] mkdir("./file0", 0777) = 0
[pid 5828] mount("/dev/loop0", "./file0", "bfs", 0, "\x53\x27\xef\x48\x82\x14\xa8\x3a\x03\x98\x1f\xab\x17\xb0\x16\x4c\xc2\x0b\xa7\xb1\x82\x93\x8b\x88\x49\x8d\x71\xa7\xa9\xe8\x73\x30\x1e\x02\xdd\xaf\x6c\x24\x74\xaa\x63\x68\xc9\x3d\x04\xed\xfc\xe2\xc9\xd1\xae\x54\xfd\x76\x71\x62\x0b") = 0
[pid 5828] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5828] chdir("./file0") = 0
[pid 5828] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5828] mknodat(AT_FDCWD, "./file1", 000) = 0
[ 72.743154][ T5828] loop0: detected capacity change from 0 to 64
[pid 5828] creat("./file0", 000) = 4
[pid 5828] rename("./file1", "./file0") = 0
[pid 5828] mknodat(AT_FDCWD, "./file1", 000) = 0
[pid 5828] mkdir(".", 0777) = -1 EEXIST (File exists)
[pid 5828] mount(NULL, ".", 0x200000000180, MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\x14\x27\x0e\x2d\x25\xcc\xcf\xf0\x78\xb9\x14\x0e\x8a\x1e\x19\xf3\xb4\xc3\xbd\x09\x96\x8d\xd1\x91\x1a\xce\xf2\x43\x01\xd7\x64\xd9\xe1\x17\xda\x79\x06\x3a\x62\xe3\xa5\x92\xfb\x42\xf7\xd9\xdd\xb2\x68\x2b\x4c\x2f\xf5\x80\xe2\x5f\xa8\xef\xfb\xd5\x3a\xcf\xb0\xf8\x70\xbc\x1e\x49\xd0\x1a\x5b\x7f\xf5\x51\x50\xd2\xbf\x3b\x04\x28\x58\xc5\x32\x5c\x2b\x56\x9b\x32\x0c\xd4\x4e\x49\xe2\x46\xcc\x1e\x41\xf0\x4d\x2e"...) = 0
[pid 5828] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 5
[pid 5828] chdir(".") = 0
[ 72.826497][ T5828] ------------[ cut here ]------------
[ 72.832199][ T5828] WARNING: CPU: 1 PID: 5828 at fs/inode.c:417 drop_nlink+0xc4/0x110
[ 72.840250][ T5828] Modules linked in:
[ 72.844278][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor274 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full)
[ 72.856439][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 72.866598][ T5828] RIP: 0010:drop_nlink+0xc4/0x110
[ 72.871692][ T5828] Code: bb 70 07 00 00 be 08 00 00 00 e8 c7 79 e6 ff f0 48 ff 83 70 07 00 00 5b 41 5c 41 5e 41 5f 5d e9 0d 15 cb fe e8 8d 4a 7e ff 90 <0f> 0b 90 eb 83 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5c ff ff ff
[ 72.891411][ T5828] RSP: 0018:ffffc90003df7970 EFLAGS: 00010293
[ 72.897527][ T5828] RAX: ffffffff82452c03 RBX: 1ffff1100ee8e154 RCX: ffff8880340abc00
[ 72.905619][ T5828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 72.913689][ T5828] RBP: 0000000000000000 R08: ffffffff82452b83 R09: 1ffffffff2079d4e
[ 72.921768][ T5828] R10: dffffc0000000000 R11: fffffbfff2079d4f R12: ffff888077470aa0
[ 72.929773][ T5828] R13: ffffffff933fc020 R14: ffff888077470a58 R15: dffffc0000000000
[ 72.937851][ T5828] FS: 00005555743ec380(0000) GS:ffff888125324000(0000) knlGS:0000000000000000
[ 72.946858][ T5828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 72.953536][ T5828] CR2: 00007ffeb3cc6d28 CR3: 00000000768bc000 CR4: 0000000000350ef0
[ 72.961626][ T5828] Call Trace:
[ 72.964965][ T5828]
[ 72.967921][ T5828] ? __warn+0x165/0x4d0
[ 72.972238][ T5828] ? drop_nlink+0xc4/0x110
[ 72.976713][ T5828] ? report_bug+0x2b3/0x500
[ 72.981303][ T5828] ? drop_nlink+0xc4/0x110
[ 72.985756][ T5828] ? drop_nlink+0xc4/0x110
[ 72.990201][ T5828] ? drop_nlink+0xc6/0x110
[ 72.994711][ T5828] ? handle_bug+0x89/0x170
[ 72.999194][ T5828] ? exc_invalid_op+0x1a/0x50
[ 73.003939][ T5828] ? asm_exc_invalid_op+0x1a/0x20
[ 73.009009][ T5828] ? drop_nlink+0x43/0x110
[ 73.013534][ T5828] ? drop_nlink+0xc3/0x110
[ 73.017979][ T5828] ? drop_nlink+0xc4/0x110
[ 73.022466][ T5828] bfs_rename+0x481/0x570
[ 73.026862][ T5828] ? __pfx_bfs_rename+0x10/0x10
[ 73.031784][ T5828] ? down_write_nested+0x195/0x220
[ 73.036928][ T5828] ? __pfx_down_write_nested+0x10/0x10
[ 73.042449][ T5828] ? do_raw_spin_unlock+0x13c/0x8b0
[ 73.047674][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 73.053395][ T5828] ? __pfx_bfs_rename+0x10/0x10
[ 73.058287][ T5828] vfs_rename+0xbd0/0xf10
[ 73.062704][ T5828] ? __pfx_vfs_rename+0x10/0x10
[ 73.067588][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 73.073289][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 73.078947][ T5828] do_renameat2+0xc8d/0x1290
[ 73.083631][ T5828] ? __pfx_do_renameat2+0x10/0x10
[ 73.088698][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 73.094425][ T5828] ? __virt_addr_valid+0x45f/0x530
[ 73.099565][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 73.105257][ T5828] ? __phys_addr_symbol+0x2f/0x70
[ 73.110305][ T5828] ? strncpy_from_user+0x150/0x280
[ 73.115481][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 73.121159][ T5828] ? getname_flags+0x1e2/0x530
[ 73.125929][ T5828] __x64_sys_rename+0x82/0x90
[ 73.130608][ T5828] do_syscall_64+0xf3/0x230
[ 73.135194][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 73.141136][ T5828] RIP: 0033:0x7fb7fa916fd9
[ 73.145543][ T5828] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 73.165205][ T5828] RSP: 002b:00007ffd2c24acc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[ 73.173666][ T5828] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007fb7fa916fd9
[ 73.181701][ T5828] RDX: 00007fb7fa9162b7 RSI: 0000200000000180 RDI: 0000200000000140
[ 73.189682][ T5828] RBP: 0000200000000000 R08: 0000200000000000 R09: 00005555743ed4c0
[ 73.197722][ T5828] R10: 00007ffd2c24ab90 R11: 0000000000000246 R12: 0000200000000140
[ 73.205778][ T5828] R13: 0030656c69662f2e R14: 0031656c69662f2e R15: 00007fb7fa960095
[ 73.213854][ T5828]
[ 73.216887][ T5828] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 73.224171][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor274 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full)
[ 73.236311][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 73.246370][ T5828] Call Trace:
[ 73.249658][ T5828]
[ 73.252590][ T5828] dump_stack_lvl+0x241/0x360
[ 73.257289][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10
[ 73.262511][ T5828] ? __pfx__printk+0x10/0x10
[ 73.267140][ T5828] ? _printk+0xd5/0x120
[ 73.271341][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 73.276988][ T5828] ? vscnprintf+0x5d/0x90
[ 73.281329][ T5828] panic+0x349/0x880
[ 73.285234][ T5828] ? __warn+0x174/0x4d0
[ 73.289401][ T5828] ? __pfx_panic+0x10/0x10
[ 73.293881][ T5828] __warn+0x344/0x4d0
[ 73.297875][ T5828] ? drop_nlink+0xc4/0x110
[ 73.302335][ T5828] report_bug+0x2b3/0x500
[ 73.306695][ T5828] ? drop_nlink+0xc4/0x110
[ 73.311128][ T5828] ? drop_nlink+0xc4/0x110
[ 73.315555][ T5828] ? drop_nlink+0xc6/0x110
[ 73.319978][ T5828] handle_bug+0x89/0x170
[ 73.324227][ T5828] exc_invalid_op+0x1a/0x50
[ 73.328756][ T5828] asm_exc_invalid_op+0x1a/0x20
[ 73.333608][ T5828] RIP: 0010:drop_nlink+0xc4/0x110
[ 73.338644][ T5828] Code: bb 70 07 00 00 be 08 00 00 00 e8 c7 79 e6 ff f0 48 ff 83 70 07 00 00 5b 41 5c 41 5e 41 5f 5d e9 0d 15 cb fe e8 8d 4a 7e ff 90 <0f> 0b 90 eb 83 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5c ff ff ff
[ 73.358341][ T5828] RSP: 0018:ffffc90003df7970 EFLAGS: 00010293
[ 73.364424][ T5828] RAX: ffffffff82452c03 RBX: 1ffff1100ee8e154 RCX: ffff8880340abc00
[ 73.372402][ T5828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 73.380400][ T5828] RBP: 0000000000000000 R08: ffffffff82452b83 R09: 1ffffffff2079d4e
[ 73.388382][ T5828] R10: dffffc0000000000 R11: fffffbfff2079d4f R12: ffff888077470aa0
[ 73.396359][ T5828] R13: ffffffff933fc020 R14: ffff888077470a58 R15: dffffc0000000000
[ 73.404370][ T5828] ? drop_nlink+0x43/0x110
[ 73.408812][ T5828] ? drop_nlink+0xc3/0x110
[ 73.413257][ T5828] bfs_rename+0x481/0x570
[ 73.417617][ T5828] ? __pfx_bfs_rename+0x10/0x10
[ 73.422523][ T5828] ? down_write_nested+0x195/0x220
[ 73.427647][ T5828] ? __pfx_down_write_nested+0x10/0x10
[ 73.433117][ T5828] ? do_raw_spin_unlock+0x13c/0x8b0
[ 73.438327][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 73.443969][ T5828] ? __pfx_bfs_rename+0x10/0x10
[ 73.448838][ T5828] vfs_rename+0xbd0/0xf10
[ 73.453192][ T5828] ? __pfx_vfs_rename+0x10/0x10
[ 73.458057][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 73.463698][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 73.469343][ T5828] do_renameat2+0xc8d/0x1290
[ 73.473967][ T5828] ? __pfx_do_renameat2+0x10/0x10
[ 73.479011][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 73.484648][ T5828] ? __virt_addr_valid+0x45f/0x530
[ 73.489767][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 73.495406][ T5828] ? __phys_addr_symbol+0x2f/0x70
[ 73.500452][ T5828] ? strncpy_from_user+0x150/0x280
[ 73.505581][ T5828] ? srso_alias_return_thunk+0x5/0xfbef5
[ 73.511221][ T5828] ? getname_flags+0x1e2/0x530
[ 73.516004][ T5828] __x64_sys_rename+0x82/0x90
[ 73.520689][ T5828] do_syscall_64+0xf3/0x230
[ 73.525214][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 73.531107][ T5828] RIP: 0033:0x7fb7fa916fd9
[ 73.535523][ T5828] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 73.555147][ T5828] RSP: 002b:00007ffd2c24acc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[ 73.563580][ T5828] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007fb7fa916fd9
[ 73.571561][ T5828] RDX: 00007fb7fa9162b7 RSI: 0000200000000180 RDI: 0000200000000140
[ 73.579534][ T5828] RBP: 0000200000000000 R08: 0000200000000000 R09: 00005555743ed4c0
[ 73.587539][ T5828] R10: 00007ffd2c24ab90 R11: 0000000000000246 R12: 0000200000000140
[ 73.595515][ T5828] R13: 0030656c69662f2e R14: 0031656c69662f2e R15: 00007fb7fa960095
[ 73.603505][ T5828]
[ 73.606886][ T5828] Kernel Offset: disabled
[ 73.611281][ T5828] Rebooting in 86400 seconds..