./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2154423173
<...>
Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts.
execve("./syz-executor2154423173", ["./syz-executor2154423173"], 0x7ffdcc815560 /* 10 vars */) = 0
brk(NULL) = 0x55556eeaf000
brk(0x55556eeafd00) = 0x55556eeafd00
arch_prctl(ARCH_SET_FS, 0x55556eeaf380) = 0
set_tid_address(0x55556eeaf650) = 5819
set_robust_list(0x55556eeaf660, 24) = 0
rseq(0x55556eeafca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2154423173", 4096) = 28
getrandom("\xbe\xcb\xe8\x79\x6c\x14\xfd\x34", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55556eeafd00
brk(0x55556eed0d00) = 0x55556eed0d00
brk(0x55556eed1000) = 0x55556eed1000
mprotect(0x7f86d3abf000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
mkdir("./syzkaller.LIrPOJ", 0700) = 0
chmod("./syzkaller.LIrPOJ", 0777) = 0
chdir("./syzkaller.LIrPOJ") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556eeaf650) = 5820
./strace-static-x86_64: Process 5820 attached
[pid 5820] set_robust_list(0x55556eeaf660, 24) = 0
[pid 5820] chdir("./0") = 0
[pid 5820] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5820] setpgid(0, 0) = 0
[pid 5820] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5820] write(3, "1000", 4) = 4
[pid 5820] close(3) = 0
[pid 5820] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5820] write(1, "executing program\n", 18executing program
) = 18
[pid 5820] memfd_create("syzkaller", 0) = 3
[pid 5820] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f86cb600000
[pid 5820] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5820] munmap(0x7f86cb600000, 138412032) = 0
[pid 5820] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5820] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5820] close(3) = 0
[pid 5820] close(4) = 0
[pid 5820] mkdir("./file1", 0777) = 0
[ 61.383692][ T5820] loop0: detected capacity change from 0 to 32768
[ 61.402053][ T5820] =======================================================
[ 61.402053][ T5820] WARNING: The mand mount option has been deprecated and
[ 61.402053][ T5820] and is ignored by this kernel. Remove the mand
[ 61.402053][ T5820] option from the mount to silence this warning.
[ 61.402053][ T5820] =======================================================
[pid 5820] mount("/dev/loop0", "./file1", "ocfs2", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME, "acl,heartbeat=none,nouser_xattr,errors=remount-ro,data=writeback,localalloc=00000000000000000001,acl"...) = 0
[pid 5820] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid 5820] chdir("./file1") = 0
[pid 5820] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5820] mkdir("./file0", 000) = 0
[pid 5820] mount(NULL, "./file0", "proc", 0, NULL) = 0
[pid 5820] exit_group(0) = ?
[pid 5820] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5820, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x55556eeb06f0 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/binderfs") = 0
umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0755, st_size=312, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0755, st_size=312, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x55556eeb8730 /* 4 entries */, 32768) = 112
umount2("./0/file1/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[ 61.471824][ T5820] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
newfstatat(AT_FDCWD, "./0/file1/lost+found", {st_mode=000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
[ 61.529285][ T5819] (syz-executor215,5819,0):ocfs2_query_inode_wipe:937 ERROR: Inode 17057 (on-disk 17057) not orphaned! Disk flags 0x1, inode flags 0x0
[ 61.543767][ T5819] (syz-executor215,5819,0):ocfs2_delete_inode:1068 ERROR: status = -17
[ 61.554471][ T5819] (syz-executor215,5819,0):ocfs2_query_inode_wipe:937 ERROR: Inode 17057 (on-disk 17057) not orphaned! Disk flags 0x1, inode flags 0x0
[ 61.568754][ T5819] (syz-executor215,5819,0):ocfs2_delete_inode:1068 ERROR: status = -17
[ 61.579155][ T5819] ------------[ cut here ]------------
[ 61.584790][ T5819] WARNING: CPU: 0 PID: 5819 at fs/inode.c:407 drop_nlink+0xc4/0x110
[ 61.592853][ T5819] Modules linked in:
[ 61.596756][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: syz-executor215 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[ 61.607943][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 61.618052][ T5819] RIP: 0010:drop_nlink+0xc4/0x110
[ 61.623160][ T5819] Code: bb 70 07 00 00 be 08 00 00 00 e8 97 37 e7 ff f0 48 ff 83 70 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc e8 3d 5c 83 ff 90 <0f> 0b 90 eb 83 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5c ff ff ff
[ 61.642820][ T5819] RSP: 0018:ffffc90003e5f8f0 EFLAGS: 00010293
[ 61.648913][ T5819] RAX: ffffffff821c1793 RBX: 1ffff1100e5084a8 RCX: ffff888031619e00
[ 61.656973][ T5819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 61.664983][ T5819] RBP: 0000000000000000 R08: ffffffff821c1713 R09: 1ffff1100e515246
[ 61.672981][ T5819] R10: dffffc0000000000 R11: ffffed100e515247 R12: ffff888072842540
[ 61.681046][ T5819] R13: 1ffff920007cbf34 R14: ffff8880728424f8 R15: dffffc0000000000
[ 61.689044][ T5819] FS: 000055556eeaf380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 61.697999][ T5819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 61.704621][ T5819] CR2: 000055556eec0738 CR3: 00000000126d8000 CR4: 00000000003526f0
[ 61.712623][ T5819] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 61.720582][ T5819] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 61.728600][ T5819] Call Trace:
[ 61.731887][ T5819]
[ 61.734847][ T5819] ? __warn+0x165/0x4d0
[ 61.739018][ T5819] ? drop_nlink+0xc4/0x110
[ 61.743471][ T5819] ? report_bug+0x2b3/0x500
[ 61.748004][ T5819] ? drop_nlink+0xc4/0x110
[ 61.752465][ T5819] ? handle_bug+0x60/0x90
[ 61.756822][ T5819] ? exc_invalid_op+0x1a/0x50
[ 61.761508][ T5819] ? asm_exc_invalid_op+0x1a/0x20
[ 61.766610][ T5819] ? drop_nlink+0x43/0x110
[ 61.771036][ T5819] ? drop_nlink+0xc3/0x110
[ 61.775499][ T5819] ? drop_nlink+0xc4/0x110
[ 61.779931][ T5819] ocfs2_unlink+0xf62/0x1c80
[ 61.784589][ T5819] ? __pfx_ocfs2_unlink+0x10/0x10
[ 61.789629][ T5819] ? __pfx_lock_acquire+0x10/0x10
[ 61.794683][ T5819] ? __lock_acquire+0x1397/0x2100
[ 61.799716][ T5819] ? smack_log+0x123/0x540
[ 61.804178][ T5819] ? smk_access+0x4ab/0x4e0
[ 61.808696][ T5819] ? smk_tskacc+0x300/0x370
[ 61.813232][ T5819] ? smack_inode_unlink+0x2f3/0x3b0
[ 61.818445][ T5819] ? __pfx_smack_inode_unlink+0x10/0x10
[ 61.824032][ T5819] ? HAS_UNMAPPED_ID+0xf9/0x150
[ 61.828894][ T5819] ? down_write+0x18c/0x220
[ 61.833427][ T5819] ? __pfx_down_write+0x10/0x10
[ 61.838290][ T5819] ? bpf_lsm_inode_unlink+0x9/0x10
[ 61.843435][ T5819] ? security_inode_unlink+0xd9/0x340
[ 61.848823][ T5819] vfs_unlink+0x365/0x650
[ 61.853192][ T5819] do_unlinkat+0x4ae/0x830
[ 61.857626][ T5819] ? __pfx_do_unlinkat+0x10/0x10
[ 61.862601][ T5819] ? __check_object_size+0x47a/0x730
[ 61.867899][ T5819] ? __might_fault+0xc6/0x120
[ 61.872634][ T5819] ? strncpy_from_user+0x152/0x270
[ 61.877772][ T5819] ? getname_flags+0x1e3/0x540
[ 61.882618][ T5819] __x64_sys_unlink+0x47/0x50
[ 61.887307][ T5819] do_syscall_64+0xf3/0x230
[ 61.891802][ T5819] ? clear_bhb_loop+0x35/0x90
[ 61.896515][ T5819] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.902460][ T5819] RIP: 0033:0x7f86d3a46cd7
[ 61.906890][ T5819] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 61.926524][ T5819] RSP: 002b:00007ffd3b46a8f8 EFLAGS: 00000287 ORIG_RAX: 0000000000000057
[ 61.934976][ T5819] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f86d3a46cd7
[ 61.943073][ T5819] RDX: 00007ffd3b46a920 RSI: 00007ffd3b46a9b0 RDI: 00007ffd3b46a9b0
[ 61.951054][ T5819] RBP: 00007ffd3b46a9b0 R08: 0000000000000000 R09: 0000000000000000
[ 61.959062][ T5819] R10: 0000000000000100 R11: 0000000000000287 R12: 00007ffd3b46baa0
[ 61.967078][ T5819] R13: 000055556eeb8700 R14: 431bde82d7b634db R15: 00007ffd3b46cb30
[ 61.975084][ T5819]
[ 61.978097][ T5819] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 61.985380][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: syz-executor215 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[ 61.996470][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 62.006517][ T5819] Call Trace:
[ 62.009788][ T5819]
[ 62.012711][ T5819] dump_stack_lvl+0x241/0x360
[ 62.017387][ T5819] ? __pfx_dump_stack_lvl+0x10/0x10
[ 62.022583][ T5819] ? __pfx__printk+0x10/0x10
[ 62.027170][ T5819] ? vscnprintf+0x5d/0x90
[ 62.031494][ T5819] panic+0x349/0x880
[ 62.035388][ T5819] ? __warn+0x174/0x4d0
[ 62.039535][ T5819] ? __pfx_panic+0x10/0x10
[ 62.043960][ T5819] __warn+0x344/0x4d0
[ 62.047933][ T5819] ? drop_nlink+0xc4/0x110
[ 62.052344][ T5819] report_bug+0x2b3/0x500
[ 62.056672][ T5819] ? drop_nlink+0xc4/0x110
[ 62.061087][ T5819] handle_bug+0x60/0x90
[ 62.065231][ T5819] exc_invalid_op+0x1a/0x50
[ 62.069727][ T5819] asm_exc_invalid_op+0x1a/0x20
[ 62.074576][ T5819] RIP: 0010:drop_nlink+0xc4/0x110
[ 62.079595][ T5819] Code: bb 70 07 00 00 be 08 00 00 00 e8 97 37 e7 ff f0 48 ff 83 70 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc e8 3d 5c 83 ff 90 <0f> 0b 90 eb 83 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5c ff ff ff
[ 62.099188][ T5819] RSP: 0018:ffffc90003e5f8f0 EFLAGS: 00010293
[ 62.105250][ T5819] RAX: ffffffff821c1793 RBX: 1ffff1100e5084a8 RCX: ffff888031619e00
[ 62.113210][ T5819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 62.121170][ T5819] RBP: 0000000000000000 R08: ffffffff821c1713 R09: 1ffff1100e515246
[ 62.129133][ T5819] R10: dffffc0000000000 R11: ffffed100e515247 R12: ffff888072842540
[ 62.137095][ T5819] R13: 1ffff920007cbf34 R14: ffff8880728424f8 R15: dffffc0000000000
[ 62.145064][ T5819] ? drop_nlink+0x43/0x110
[ 62.149475][ T5819] ? drop_nlink+0xc3/0x110
[ 62.153894][ T5819] ocfs2_unlink+0xf62/0x1c80
[ 62.158483][ T5819] ? __pfx_ocfs2_unlink+0x10/0x10
[ 62.163499][ T5819] ? __pfx_lock_acquire+0x10/0x10
[ 62.168537][ T5819] ? __lock_acquire+0x1397/0x2100
[ 62.173566][ T5819] ? smack_log+0x123/0x540
[ 62.177993][ T5819] ? smk_access+0x4ab/0x4e0
[ 62.182497][ T5819] ? smk_tskacc+0x300/0x370
[ 62.186996][ T5819] ? smack_inode_unlink+0x2f3/0x3b0
[ 62.192192][ T5819] ? __pfx_smack_inode_unlink+0x10/0x10
[ 62.197730][ T5819] ? HAS_UNMAPPED_ID+0xf9/0x150
[ 62.202578][ T5819] ? down_write+0x18c/0x220
[ 62.207069][ T5819] ? __pfx_down_write+0x10/0x10
[ 62.211911][ T5819] ? bpf_lsm_inode_unlink+0x9/0x10
[ 62.217015][ T5819] ? security_inode_unlink+0xd9/0x340
[ 62.222391][ T5819] vfs_unlink+0x365/0x650
[ 62.226721][ T5819] do_unlinkat+0x4ae/0x830
[ 62.231140][ T5819] ? __pfx_do_unlinkat+0x10/0x10
[ 62.236068][ T5819] ? __check_object_size+0x47a/0x730
[ 62.241345][ T5819] ? __might_fault+0xc6/0x120
[ 62.246017][ T5819] ? strncpy_from_user+0x152/0x270
[ 62.251124][ T5819] ? getname_flags+0x1e3/0x540
[ 62.255881][ T5819] __x64_sys_unlink+0x47/0x50
[ 62.260553][ T5819] do_syscall_64+0xf3/0x230
[ 62.265049][ T5819] ? clear_bhb_loop+0x35/0x90
[ 62.269722][ T5819] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 62.275607][ T5819] RIP: 0033:0x7f86d3a46cd7
[ 62.280011][ T5819] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 62.299604][ T5819] RSP: 002b:00007ffd3b46a8f8 EFLAGS: 00000287 ORIG_RAX: 0000000000000057
[ 62.308012][ T5819] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f86d3a46cd7
[ 62.315972][ T5819] RDX: 00007ffd3b46a920 RSI: 00007ffd3b46a9b0 RDI: 00007ffd3b46a9b0
[ 62.323934][ T5819] RBP: 00007ffd3b46a9b0 R08: 0000000000000000 R09: 0000000000000000
[ 62.331893][ T5819] R10: 0000000000000100 R11: 0000000000000287 R12: 00007ffd3b46baa0
[ 62.339851][ T5819] R13: 000055556eeb8700 R14: 431bde82d7b634db R15: 00007ffd3b46cb30
[ 62.347843][ T5819]
[ 62.351110][ T5819] Kernel Offset: disabled
[ 62.355472][ T5819] Rebooting in 86400 seconds..