./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1835753333

<...>
Warning: Permanently added '10.128.10.28' (ED25519) to the list of known hosts.
execve("./syz-executor1835753333", ["./syz-executor1835753333"], 0x7ffe0a641bd0 /* 10 vars */) = 0
brk(NULL)                               = 0x555579e17000
brk(0x555579e17d00)                     = 0x555579e17d00
arch_prctl(ARCH_SET_FS, 0x555579e17380) = 0
set_tid_address(0x555579e17650)         = 5839
set_robust_list(0x555579e17660, 24)     = 0
rseq(0x555579e17ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1835753333", 4096) = 28
getrandom("\x61\x7f\x69\x4f\x69\xea\xa4\xab", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555579e17d00
brk(0x555579e38d00)                     = 0x555579e38d00
brk(0x555579e39000)                     = 0x555579e39000
mprotect(0x7f879eae3000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
mkdir("./syzkaller.bMix9N", 0700)       = 0
chmod("./syzkaller.bMix9N", 0777)       = 0
chdir("./syzkaller.bMix9N")             = 0
mkdir("./0", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5840 attached
 <unfinished ...>
[pid  5840] set_robust_list(0x555579e17660, 24 <unfinished ...>
[pid  5839] <... clone resumed>, child_tidptr=0x555579e17650) = 5840
[pid  5840] <... set_robust_list resumed>) = 0
[pid  5840] chdir("./0")                = 0
[pid  5840] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5840] setpgid(0, 0)               = 0
[pid  5840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5840] write(3, "1000", 4)         = 4
[pid  5840] close(3)                    = 0
[pid  5840] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5840] write(1, "executing program\n", 18) = 18
[pid  5840] memfd_create("syzkaller", 0) = 3
[pid  5840] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8796600000
[pid  5840] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32768) = 32768
[pid  5840] munmap(0x7f8796600000, 138412032) = 0
[pid  5840] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5840] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5840] close(3)                    = 0
[pid  5840] close(4)                    = 0
[pid  5840] mkdir("./file1", 0777)      = 0
[   80.106152][ T5840] loop0: detected capacity change from 0 to 64
[pid  5840] mount("/dev/loop0", "./file1", "minix", MS_NOSUID|MS_REC|MS_I_VERSION|MS_STRICTATIME, "") = 0
[pid  5840] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid  5840] chdir("./file1")            = 0
[pid  5840] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[   80.153937][ T5840] MINIX-fs: mounting unchecked file system, running fsck is recommended
[pid  5840] rename("./file1", "./file0/file1") = 0
[pid  5840] mount(NULL, "./file0", "cgroup2", 0, NULL) = 0
[pid  5840] mkdir("./file1", 000)       = 0
[pid  5840] mkdir("./bus", 000)         = 0
[pid  5840] exit_group(0)               = ?
[pid  5840] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5840, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[   80.200818][ T5840] minix_free_inode: bit 4 already cleared
getdents64(3, 0x555579e186f0 /* 4 entries */, 32768) = 112
umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0755, st_size=128, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0755, st_size=128, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555579e20730 /* 4 entries */, 32768) = 112
umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/file1/file0", {st_mode=S_IFDIR|0755, st_size=64, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./0/file1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/file1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 5
newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=64, ...}, AT_EMPTY_PATH) = 0
getdents64(5, 0x555579e28770 /* 4 entries */, 32768) = 112
umount2("./0/file1/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/file1/file0/file0", {st_mode=S_IFDIR|000, st_size=32, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./0/file1/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/file1/file0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 6
newfstatat(6, "", {st_mode=S_IFDIR|000, st_size=32, ...}, AT_EMPTY_PATH) = 0
getdents64(6, 0x555579e307b0 /* 2 entries */, 32768) = 48
getdents64(6, 0x555579e307b0 /* 0 entries */, 32768) = 0
close(6)                                = 0
rmdir("./0/file1/file0/file0")          = 0
umount2("./0/file1/file0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/file1/file0/file1", {st_mode=S_IFREG|0755, st_size=10, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/file1/file0/file1")         = 0
getdents64(5, 0x555579e28770 /* 0 entries */, 32768) = 0
close(5)                                = 0
[   80.521610][ T5839] minix_free_inode: bit 5 already cleared
[   80.550727][ T5839] ------------[ cut here ]------------
[   80.556446][ T5839] WARNING: CPU: 0 PID: 5839 at fs/inode.c:417 drop_nlink+0xc5/0x110
[   80.564556][ T5839] Modules linked in:
[   80.568567][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz-executor183 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) 
[   80.581011][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   80.591242][ T5839] RIP: 0010:drop_nlink+0xc5/0x110
[   80.596339][ T5839] Code: 78 07 00 00 be 08 00 00 00 e8 27 32 e8 ff f0 48 ff 83 78 07 00 00 5b 41 5c 41 5e 41 5f 5d e9 92 85 31 09 cc e8 2c 48 88 ff 90 <0f> 0b 90 eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5b ff ff ff
[   80.616029][ T5839] RSP: 0018:ffffc9000400fd50 EFLAGS: 00010293
[   80.622118][ T5839] RAX: ffffffff8237dd94 RBX: ffff8880115fc040 RCX: ffff88802a9d1e00
[   80.630534][ T5839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   80.638683][ T5839] RBP: 0000000000000000 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e
[   80.648409][ T5839] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: 1ffff110022bf811
[   80.657683][ T5839] R13: ffff8880115a8040 R14: ffff8880115fc088 R15: dffffc0000000000
[   80.665689][ T5839] FS:  0000555579e17380(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000
[   80.674634][ T5839] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   80.681302][ T5839] CR2: 0000200000001980 CR3: 000000007349e000 CR4: 00000000003526f0
[   80.689322][ T5839] Call Trace:
[   80.692609][ T5839]  <TASK>
[   80.695583][ T5839]  minix_rmdir+0xa8/0xd0
[   80.699842][ T5839]  vfs_rmdir+0x3b7/0x520
[   80.704097][ T5839]  do_rmdir+0x2ac/0x630
[   80.708308][ T5839]  ? __pfx_do_rmdir+0x10/0x10
[   80.713039][ T5839]  ? getname_flags+0x1e5/0x540
[   80.717870][ T5839]  __x64_sys_rmdir+0x47/0x50
[   80.722464][ T5839]  do_syscall_64+0xfa/0x3b0
[   80.727065][ T5839]  ? lockdep_hardirqs_on+0x9c/0x150
[   80.732276][ T5839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.738424][ T5839]  ? clear_bhb_loop+0x60/0xb0
[   80.743131][ T5839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.749525][ T5839] RIP: 0033:0x7f879ea6ed07
[   80.753968][ T5839] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 54 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   80.773633][ T5839] RSP: 002b:00007ffe26a73248 EFLAGS: 00000207 ORIG_RAX: 0000000000000054
[   80.782079][ T5839] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f879ea6ed07
[   80.790136][ T5839] RDX: 0000000000008890 RSI: 0000000000000000 RDI: 00007ffe26a743f0
[   80.798162][ T5839] RBP: 0000000000000065 R08: 0000000000000000 R09: 0000000000000000
[   80.806162][ T5839] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffe26a743f0
[   80.814137][ T5839] R13: 0000555579e28740 R14: 431bde82d7b634db R15: 00007ffe26a76570
[   80.822143][ T5839]  </TASK>
[   80.825189][ T5839] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   80.832460][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz-executor183 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) 
[   80.845107][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   80.855152][ T5839] Call Trace:
[   80.858445][ T5839]  <TASK>
[   80.861379][ T5839]  dump_stack_lvl+0x99/0x250
[   80.865977][ T5839]  ? __asan_memcpy+0x40/0x70
[   80.870574][ T5839]  ? __pfx_dump_stack_lvl+0x10/0x10
[   80.875774][ T5839]  ? __pfx__printk+0x10/0x10
[   80.880379][ T5839]  panic+0x2db/0x790
[   80.884288][ T5839]  ? __pfx_panic+0x10/0x10
[   80.888726][ T5839]  __warn+0x31b/0x4b0
[   80.892708][ T5839]  ? drop_nlink+0xc5/0x110
[   80.897125][ T5839]  ? drop_nlink+0xc5/0x110
[   80.901539][ T5839]  report_bug+0x2be/0x4f0
[   80.905865][ T5839]  ? drop_nlink+0xc5/0x110
[   80.910278][ T5839]  ? drop_nlink+0xc5/0x110
[   80.914692][ T5839]  ? drop_nlink+0xc7/0x110
[   80.919120][ T5839]  handle_bug+0x84/0x160
[   80.923383][ T5839]  exc_invalid_op+0x1a/0x50
[   80.927899][ T5839]  asm_exc_invalid_op+0x1a/0x20
[   80.932749][ T5839] RIP: 0010:drop_nlink+0xc5/0x110
[   80.937770][ T5839] Code: 78 07 00 00 be 08 00 00 00 e8 27 32 e8 ff f0 48 ff 83 78 07 00 00 5b 41 5c 41 5e 41 5f 5d e9 92 85 31 09 cc e8 2c 48 88 ff 90 <0f> 0b 90 eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5b ff ff ff
[   80.957377][ T5839] RSP: 0018:ffffc9000400fd50 EFLAGS: 00010293
[   80.963445][ T5839] RAX: ffffffff8237dd94 RBX: ffff8880115fc040 RCX: ffff88802a9d1e00
[   80.971419][ T5839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   80.979385][ T5839] RBP: 0000000000000000 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e
[   80.987356][ T5839] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: 1ffff110022bf811
[   80.995328][ T5839] R13: ffff8880115a8040 R14: ffff8880115fc088 R15: dffffc0000000000
[   81.003326][ T5839]  ? drop_nlink+0xc4/0x110
[   81.007771][ T5839]  minix_rmdir+0xa8/0xd0
[   81.012024][ T5839]  vfs_rmdir+0x3b7/0x520
[   81.016285][ T5839]  do_rmdir+0x2ac/0x630
[   81.020436][ T5839]  ? __pfx_do_rmdir+0x10/0x10
[   81.025115][ T5839]  ? getname_flags+0x1e5/0x540
[   81.029886][ T5839]  __x64_sys_rmdir+0x47/0x50
[   81.034470][ T5839]  do_syscall_64+0xfa/0x3b0
[   81.038975][ T5839]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.044185][ T5839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.050270][ T5839]  ? clear_bhb_loop+0x60/0xb0
[   81.054956][ T5839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.060854][ T5839] RIP: 0033:0x7f879ea6ed07
[   81.065270][ T5839] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 54 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   81.084877][ T5839] RSP: 002b:00007ffe26a73248 EFLAGS: 00000207 ORIG_RAX: 0000000000000054
[   81.093300][ T5839] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f879ea6ed07
[   81.101267][ T5839] RDX: 0000000000008890 RSI: 0000000000000000 RDI: 00007ffe26a743f0
[   81.109251][ T5839] RBP: 0000000000000065 R08: 0000000000000000 R09: 0000000000000000
[   81.117231][ T5839] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffe26a743f0
[   81.125205][ T5839] R13: 0000555579e28740 R14: 431bde82d7b634db R15: 00007ffe26a76570
[   81.133192][ T5839]  </TASK>
[   81.136532][ T5839] Kernel Offset: disabled
[   81.140869][ T5839] Rebooting in 86400 seconds..