program: syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x8010, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x2, 0x197, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'}) (async) r5 = syz_open_procfs$userns(r4, &(0x7f0000000100)) (async) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) syz_emit_ethernet(0x46, &(0x7f0000002600)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @empty, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @random="bfa97064c505", @local, @broadcast, @private1}}}}, &(0x7f0000002680)={0x0, 0x3, [0xd0b, 0x7, 0x9c, 0x70c]}) mkdirat(0xffffffffffffff9c, &(0x7f00000024c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002500)='./sys\x00', &(0x7f0000002540)='sysfs\x00', 0x0, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) write(r7, &(0x7f00000025c0)="ee1c980b27ac7d9930315b88cd0299937abe0a29", 0x14) (async) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r6, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_FAMILY={0x5, 0xd, 0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0d0) rmdir(&(0x7f0000000040)='./file0\x00') [ 92.699148][ T4646] Bluetooth: hci0: command tx timeout [ 92.718727][ T110] cfg80211: failed to load regulatory.db [ 92.892652][ T5317] loop0: detected capacity change from 0 to 64 [ 93.014313][ T5319] ------------[ cut here ]------------ [ 93.014327][ T5319] inode->i_nlink == 0 [ 93.014333][ T5319] WARNING: fs/inode.c:408 at drop_nlink+0xc5/0x110, CPU#0: syz.0.0/5319 [ 93.022752][ T5319] Modules linked in: [ 93.024399][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.028242][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.032386][ T5319] RIP: 0010:drop_nlink+0xc5/0x110 [ 93.034543][ T5319] Code: a8 07 00 00 be 08 00 00 00 e8 f7 68 e4 ff f0 48 ff 83 a8 07 00 00 5b 41 5c 41 5e 41 5f 5d e9 52 90 97 09 cc e8 0c e7 71 ff 90 <0f> 0b 90 eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5b ff ff ff [ 93.042652][ T5319] RSP: 0018:ffffc9000eea7d10 EFLAGS: 00010293 [ 93.045616][ T5319] RAX: ffffffff82563a14 RBX: ffff8880146830b0 RCX: ffff888036f54b00 [ 93.049317][ T5319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.052827][ T5319] RBP: 0000000000000000 R08: ffffffff917a977f R09: 1ffffffff22f52ef [ 93.056146][ T5319] R10: dffffc0000000000 R11: fffffbfff22f52f0 R12: 1ffff110028d061f [ 93.059580][ T5319] R13: dffffc0000000000 R14: ffff8880146830f8 R15: dffffc0000000000 [ 93.062997][ T5319] FS: 00007ff1576d36c0(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000 [ 93.066658][ T5319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.069311][ T5319] CR2: 00007f529c9909c0 CR3: 0000000013bfb000 CR4: 0000000000352ef0 [ 93.072445][ T5319] Call Trace: [ 93.073830][ T5319] [ 93.075060][ T5319] minix_rmdir+0xfc/0x140 [ 93.076911][ T5319] vfs_rmdir+0x3e6/0x6a0 [ 93.078858][ T5319] ? bpf_lsm_path_rmdir+0x9/0x20 [ 93.080997][ T5319] filename_rmdir+0x292/0x520 [ 93.082883][ T5319] ? __pfx_filename_rmdir+0x10/0x10 [ 93.085019][ T5319] ? do_getname+0x151/0x250 [ 93.086913][ T5319] __se_sys_rmdir+0x2e/0x140 [ 93.088850][ T5319] do_syscall_64+0x166/0x520 [ 93.090856][ T5319] ? trace_irq_disable+0x3b/0x140 [ 93.092861][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.095339][ T5319] ? clear_bhb_loop+0x70/0xc0 [ 93.097319][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.099847][ T5319] RIP: 0033:0x7ff15679e1d9 [ 93.101768][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.109809][ T5319] RSP: 002b:00007ff1576d2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 93.113425][ T5319] RAX: ffffffffffffffda RBX: 00007ff156a26180 RCX: 00007ff15679e1d9 [ 93.117193][ T5319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 93.121075][ T5319] RBP: 00007ff156835888 R08: 0000000000000000 R09: 0000000000000000 [ 93.124409][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.127564][ T5319] R13: 00007ff156a26218 R14: 00007ff156a26180 R15: 00007ffe2d9962a8 [ 93.131041][ T5319] [ 93.132544][ T5319] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.135659][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 93.139387][ T5319] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.143581][ T5319] Call Trace: [ 93.145006][ T5319] [ 93.146156][ T5319] vpanic+0x56d/0xa60 [ 93.155689][ T5319] ? __pfx__printk+0x10/0x10 [ 93.163597][ T5319] ? __pfx_vpanic+0x10/0x10 [ 93.165532][ T5319] ? is_bpf_text_address+0x292/0x2b0 [ 93.167846][ T5319] ? is_bpf_text_address+0x26/0x2b0 [ 93.170013][ T5319] panic+0xc5/0xd0 [ 93.171643][ T5319] ? __pfx_panic+0x10/0x10 [ 93.173561][ T5319] __warn+0x315/0x4c0 [ 93.175272][ T5319] ? drop_nlink+0xc5/0x110 [ 93.177161][ T5319] ? drop_nlink+0xc5/0x110 [ 93.179013][ T5319] __report_bug+0x276/0x570 [ 93.181027][ T5319] ? drop_nlink+0xc5/0x110 [ 93.182972][ T5319] ? __pfx___report_bug+0x10/0x10 [ 93.185109][ T5319] ? reacquire_held_locks+0x117/0x1a0 [ 93.187459][ T5319] ? __mark_inode_dirty+0x705/0x13b0 [ 93.189751][ T5319] ? do_raw_spin_lock+0x12b/0x2f0 [ 93.191925][ T5319] ? drop_nlink+0xc5/0x110 [ 93.193860][ T5319] report_bug+0x16b/0x220 [ 93.195736][ T5319] ? drop_nlink+0xc5/0x110 [ 93.197740][ T5319] ? drop_nlink+0xc7/0x110 [ 93.199657][ T5319] handle_bug+0x9c/0x200 [ 93.201596][ T5319] exc_invalid_op+0x1a/0x50 [ 93.203532][ T5319] asm_exc_invalid_op+0x1a/0x20 [ 93.205597][ T5319] RIP: 0010:drop_nlink+0xc5/0x110 [ 93.207745][ T5319] Code: a8 07 00 00 be 08 00 00 00 e8 f7 68 e4 ff f0 48 ff 83 a8 07 00 00 5b 41 5c 41 5e 41 5f 5d e9 52 90 97 09 cc e8 0c e7 71 ff 90 <0f> 0b 90 eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5b ff ff ff [ 93.215711][ T5319] RSP: 0018:ffffc9000eea7d10 EFLAGS: 00010293 [ 93.218355][ T5319] RAX: ffffffff82563a14 RBX: ffff8880146830b0 RCX: ffff888036f54b00 [ 93.221808][ T5319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.224972][ T5319] RBP: 0000000000000000 R08: ffffffff917a977f R09: 1ffffffff22f52ef [ 93.228218][ T5319] R10: dffffc0000000000 R11: fffffbfff22f52f0 R12: 1ffff110028d061f [ 93.231382][ T5319] R13: dffffc0000000000 R14: ffff8880146830f8 R15: dffffc0000000000 [ 93.234551][ T5319] ? drop_nlink+0xc4/0x110 [ 93.236422][ T5319] minix_rmdir+0xfc/0x140 [ 93.238353][ T5319] vfs_rmdir+0x3e6/0x6a0 [ 93.240291][ T5319] ? bpf_lsm_path_rmdir+0x9/0x20 [ 93.242478][ T5319] filename_rmdir+0x292/0x520 [ 93.244598][ T5319] ? __pfx_filename_rmdir+0x10/0x10 [ 93.246939][ T5319] ? do_getname+0x151/0x250 [ 93.249006][ T5319] __se_sys_rmdir+0x2e/0x140 [ 93.251148][ T5319] do_syscall_64+0x166/0x520 [ 93.253147][ T5319] ? trace_irq_disable+0x3b/0x140 [ 93.255442][ T5319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.258217][ T5319] ? clear_bhb_loop+0x70/0xc0 [ 93.260298][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.262906][ T5319] RIP: 0033:0x7ff15679e1d9 [ 93.264983][ T5319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.273429][ T5319] RSP: 002b:00007ff1576d2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 93.277113][ T5319] RAX: ffffffffffffffda RBX: 00007ff156a26180 RCX: 00007ff15679e1d9 [ 93.280774][ T5319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 93.284402][ T5319] RBP: 00007ff156835888 R08: 0000000000000000 R09: 0000000000000000 [ 93.288011][ T5319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.291524][ T5319] R13: 00007ff156a26218 R14: 00007ff156a26180 R15: 00007ffe2d9962a8 [ 93.295024][ T5319] [ 93.296997][ T5319] Kernel Offset: disabled [ 93.298884][ T5319] Rebooting in 86400 seconds..