./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor170589055
<...>
Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts.
execve("./syz-executor170589055", ["./syz-executor170589055"], 0x7fffcde02130 /* 10 vars */) = 0
brk(NULL) = 0x5555585a6000
brk(0x5555585a6d00) = 0x5555585a6d00
arch_prctl(ARCH_SET_FS, 0x5555585a6380) = 0
set_tid_address(0x5555585a6650) = 5827
set_robust_list(0x5555585a6660, 24) = 0
rseq(0x5555585a6ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor170589055", 4096) = 27
getrandom("\xe9\x3a\xb3\x12\xcc\x9d\x4e\x6c", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5555585a6d00
brk(0x5555585c7d00) = 0x5555585c7d00
brk(0x5555585c8000) = 0x5555585c8000
mprotect(0x7f8fd4c48000, 16384, PROT_READ) = 0
mmap(0x3ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3ffffffff000
mmap(0x400000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400000000000
mmap(0x400001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400001000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5829 attached
, child_tidptr=0x5555585a6650) = 5829
[pid 5829] set_robust_list(0x5555585a6660, 24) = 0
[pid 5829] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5829] setpgid(0, 0) = 0
[pid 5829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5829] write(3, "1000", 4) = 4
[pid 5829] close(3) = 0
executing program
[pid 5829] write(1, "executing program\n", 18) = 18
[pid 5829] memfd_create("syzkaller", 0) = 3
[pid 5829] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8fcc600000
[pid 5829] write(3, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\xbd\x84\x31\x7b\xbe\x84\x31\x7b\xbf\x84\x31\x7b\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xc6\x84\x31\x7b\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536) = 65536
[pid 5829] munmap(0x7f8fcc600000, 138412032) = 0
[pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5829] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5829] close(3) = 0
[pid 5829] close(4) = 0
[pid 5829] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0
[pid 5829] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "sysv", 0, "") = 0
[pid 5829] openat(AT_FDCWD, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", O_RDONLY|O_DIRECTORY) = 3
[pid 5829] chdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f") = 0
[pid 5829] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[ 60.804625][ T5829] loop0: detected capacity change from 0 to 128
[ 60.841889][ T5829] VFS: Found a Xenix FS (block size = 1024) on device loop0
[ 60.854312][ T5829] syz-executor170: attempt to access beyond end of device
[ 60.854312][ T5829] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128
[ 60.868708][ T5829] Buffer I/O error on dev loop0, logical block 3245768, async page read
[ 60.877700][ T5829] ------------[ cut here ]------------
[ 60.883204][ T5829] WARNING: CPU: 0 PID: 5829 at fs/inode.c:464 inc_nlink+0x127/0x150
[ 60.891220][ T5829] Modules linked in:
[ 60.895190][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: syz-executor170 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0
[ 60.906356][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 60.916619][ T5829] RIP: 0010:inc_nlink+0x127/0x150
[ 60.921667][ T5829] Code: ff e9 35 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 47 ff ff ff 4c 89 ef e8 54 bb e6 ff e9 3a ff ff ff e8 3a 07 82 ff 90 <0f> 0b 90 e9 7b ff ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 49
[ 60.941369][ T5829] RSP: 0018:ffffc9000409fd30 EFLAGS: 00010293
[ 60.947496][ T5829] RAX: ffffffff823fb786 RBX: 1ffff1100bfe8010 RCX: ffff88802a8d9e00
[ 60.955533][ T5829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 60.963562][ T5829] RBP: 0000000000000000 R08: ffffffff823fb700 R09: 0000000000000000
[ 60.971542][ T5829] R10: ffffc9000409fca0 R11: ffffffff82e54330 R12: dffffc0000000000
[ 60.979571][ T5829] R13: ffff88805ff40080 R14: ffff88805ff40038 R15: 0000000000000000
[ 60.987575][ T5829] FS: 00005555585a6380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 60.996563][ T5829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 61.003176][ T5829] CR2: 00007fff5c7e3000 CR3: 000000002afae000 CR4: 00000000003526f0
[ 61.011141][ T5829] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 61.019167][ T5829] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 61.027169][ T5829] Call Trace:
[ 61.030434][ T5829]
[ 61.033426][ T5829] ? __warn+0x165/0x4d0
[ 61.037602][ T5829] ? inc_nlink+0x127/0x150
[ 61.042056][ T5829] ? report_bug+0x2b3/0x500
[ 61.046580][ T5829] ? inc_nlink+0x127/0x150
[ 61.050994][ T5829] ? handle_bug+0x60/0x90
[ 61.055391][ T5829] ? exc_invalid_op+0x1a/0x50
[ 61.060085][ T5829] ? asm_exc_invalid_op+0x1a/0x20
[ 61.065173][ T5829] ? __pfx_sysv_mkdir+0x10/0x10
[ 61.070039][ T5829] ? inc_nlink+0xa0/0x150
[ 61.074445][ T5829] ? inc_nlink+0x126/0x150
[ 61.078878][ T5829] ? inc_nlink+0x127/0x150
[ 61.083329][ T5829] sysv_mkdir+0x21/0x130
[ 61.087584][ T5829] vfs_mkdir+0x2f9/0x4f0
[ 61.091886][ T5829] do_mkdirat+0x264/0x3a0
[ 61.096226][ T5829] ? __check_object_size+0x47a/0x730
[ 61.101511][ T5829] ? __pfx_do_mkdirat+0x10/0x10
[ 61.106410][ T5829] ? strncpy_from_user+0x146/0x270
[ 61.111546][ T5829] ? getname_flags+0x1e3/0x540
[ 61.116389][ T5829] __x64_sys_mkdir+0x6c/0x80
[ 61.120999][ T5829] do_syscall_64+0xf3/0x230
[ 61.125559][ T5829] ? clear_bhb_loop+0x35/0x90
[ 61.130249][ T5829] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.136206][ T5829] RIP: 0033:0x7f8fd4bcab17
[ 61.140632][ T5829] Code: ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 61.160444][ T5829] RSP: 002b:00007fff5c7e2598 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 61.168930][ T5829] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fd4bcab17
[ 61.176948][ T5829] RDX: 0000000000020448 RSI: 00000000000001ff RDI: 0000400000000040
[ 61.184992][ T5829] RBP: 0000400000000040 R08: 0000000000000000 R09: 0000000000000000
[ 61.193037][ T5829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 61.201024][ T5829] R13: 00007fff5c7e2630 R14: 0000000000000000 R15: 0000000000000000
[ 61.209066][ T5829]
[ 61.212156][ T5829] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 61.219436][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: syz-executor170 Not tainted 6.14.0-rc4-syzkaller-00278-gece144f151ac #0
[ 61.230538][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 61.240580][ T5829] Call Trace:
[ 61.243852][ T5829]
[ 61.246768][ T5829] dump_stack_lvl+0x241/0x360
[ 61.251435][ T5829] ? __pfx_dump_stack_lvl+0x10/0x10
[ 61.256615][ T5829] ? __pfx__printk+0x10/0x10
[ 61.261200][ T5829] ? vscnprintf+0x5d/0x90
[ 61.265533][ T5829] panic+0x349/0x880
[ 61.269416][ T5829] ? __warn+0x174/0x4d0
[ 61.273583][ T5829] ? __pfx_panic+0x10/0x10
[ 61.277994][ T5829] __warn+0x344/0x4d0
[ 61.281961][ T5829] ? inc_nlink+0x127/0x150
[ 61.286382][ T5829] report_bug+0x2b3/0x500
[ 61.290715][ T5829] ? inc_nlink+0x127/0x150
[ 61.295121][ T5829] handle_bug+0x60/0x90
[ 61.299266][ T5829] exc_invalid_op+0x1a/0x50
[ 61.303753][ T5829] asm_exc_invalid_op+0x1a/0x20
[ 61.308585][ T5829] RIP: 0010:inc_nlink+0x127/0x150
[ 61.313595][ T5829] Code: ff e9 35 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 47 ff ff ff 4c 89 ef e8 54 bb e6 ff e9 3a ff ff ff e8 3a 07 82 ff 90 <0f> 0b 90 e9 7b ff ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 49
[ 61.333189][ T5829] RSP: 0018:ffffc9000409fd30 EFLAGS: 00010293
[ 61.339258][ T5829] RAX: ffffffff823fb786 RBX: 1ffff1100bfe8010 RCX: ffff88802a8d9e00
[ 61.347219][ T5829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 61.355180][ T5829] RBP: 0000000000000000 R08: ffffffff823fb700 R09: 0000000000000000
[ 61.363137][ T5829] R10: ffffc9000409fca0 R11: ffffffff82e54330 R12: dffffc0000000000
[ 61.371095][ T5829] R13: ffff88805ff40080 R14: ffff88805ff40038 R15: 0000000000000000
[ 61.379059][ T5829] ? __pfx_sysv_mkdir+0x10/0x10
[ 61.383908][ T5829] ? inc_nlink+0xa0/0x150
[ 61.388228][ T5829] ? inc_nlink+0x126/0x150
[ 61.392643][ T5829] sysv_mkdir+0x21/0x130
[ 61.396876][ T5829] vfs_mkdir+0x2f9/0x4f0
[ 61.401113][ T5829] do_mkdirat+0x264/0x3a0
[ 61.405432][ T5829] ? __check_object_size+0x47a/0x730
[ 61.410713][ T5829] ? __pfx_do_mkdirat+0x10/0x10
[ 61.415553][ T5829] ? strncpy_from_user+0x146/0x270
[ 61.420661][ T5829] ? getname_flags+0x1e3/0x540
[ 61.425420][ T5829] __x64_sys_mkdir+0x6c/0x80
[ 61.430002][ T5829] do_syscall_64+0xf3/0x230
[ 61.434498][ T5829] ? clear_bhb_loop+0x35/0x90
[ 61.439168][ T5829] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.445052][ T5829] RIP: 0033:0x7f8fd4bcab17
[ 61.449454][ T5829] Code: ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 61.469049][ T5829] RSP: 002b:00007fff5c7e2598 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 61.477457][ T5829] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8fd4bcab17
[ 61.485421][ T5829] RDX: 0000000000020448 RSI: 00000000000001ff RDI: 0000400000000040
[ 61.493388][ T5829] RBP: 0000400000000040 R08: 0000000000000000 R09: 0000000000000000
[ 61.501347][ T5829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 61.509311][ T5829] R13: 00007fff5c7e2630 R14: 0000000000000000 R15: 0000000000000000
[ 61.517281][ T5829]
[ 61.520427][ T5829] Kernel Offset: disabled
[ 61.524765][ T5829] Rebooting in 86400 seconds..