./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor375601845
<...>
Warning: Permanently added '10.128.0.14' (ED25519) to the list of known hosts.
execve("./syz-executor375601845", ["./syz-executor375601845"], 0x7fff2e4dea60 /* 10 vars */) = 0
brk(NULL) = 0x555555f73000
brk(0x555555f73e00) = 0x555555f73e00
arch_prctl(ARCH_SET_FS, 0x555555f73480) = 0
set_tid_address(0x555555f73750) = 5826
set_robust_list(0x555555f73760, 24) = 0
rseq(0x555555f73da0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor375601845", 4096) = 27
getrandom("\xad\xc6\x80\x32\x99\x43\x4c\x82", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555555f73e00
brk(0x555555f94e00) = 0x555555f94e00
brk(0x555555f95000) = 0x555555f95000
mprotect(0x7f58ba6f2000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7f58ba643940, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f58ba64c950}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7f58ba643940, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f58ba64c950}, NULL, 8) = 0
mkdir("./syzkaller.26MtSi", 0700) = 0
chmod("./syzkaller.26MtSi", 0777) = 0
chdir("./syzkaller.26MtSi") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555f73750) = 5828
./strace-static-x86_64: Process 5828 attached
[pid 5828] set_robust_list(0x555555f73760, 24) = 0
[pid 5828] chdir("./0") = 0
[pid 5828] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5828] setpgid(0, 0) = 0
[pid 5828] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5828] write(3, "1000", 4) = 4
[pid 5828] close(3) = 0
[pid 5828] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid 5828] write(1, "executing program\n", 18) = 18
[pid 5828] memfd_create("syzkaller", 0) = 3
[pid 5828] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f58b2200000
[pid 5828] write(3, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216) = 16777216
[pid 5828] munmap(0x7f58b2200000, 138412032) = 0
[pid 5828] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5828] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5828] close(3) = 0
[pid 5828] close(4) = 0
[pid 5828] mkdir("./file1", 0777) = 0
syzkaller login: [ 89.658482][ T5828] loop0: detected capacity change from 0 to 32768
[ 89.715287][ T5828] =======================================================
[ 89.715287][ T5828] WARNING: The mand mount option has been deprecated and
[ 89.715287][ T5828] and is ignored by this kernel. Remove the mand
[ 89.715287][ T5828] option from the mount to silence this warning.
[ 89.715287][ T5828] =======================================================
[pid 5828] mount("/dev/loop0", "./file1", "ocfs2", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME, "acl,heartbeat=none,nouser_xattr,errors=remount-ro,data=writeback,localalloc=00000000000000000001,acl"...) = 0
[pid 5828] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid 5828] chdir("./file1") = 0
[pid 5828] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5828] mkdir("./file0", 0777) = 0
[pid 5828] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
[pid 5828] mount(".", "./file0", NULL, MS_RDONLY|MS_SYNCHRONOUS|MS_DIRSYNC|MS_BIND|MS_SHARED, NULL) = 0
[pid 5828] exit_group(0) = ?
[pid 5828] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5828, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=17 /* 0.17 s */} ---
[ 89.771394][ T5828] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x555555f747f0 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/binderfs") = 0
umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0755, st_size=312, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0755, st_size=312, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555555f7c830 /* 4 entries */, 32768) = 112
umount2("./0/file1/lost+found", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/file1/lost+found", {st_mode=000, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
[ 90.031184][ T5826] (syz-executor375,5826,0):ocfs2_query_inode_wipe:937 ERROR: Inode 17057 (on-disk 17057) not orphaned! Disk flags 0x1, inode flags 0x0
[ 90.045660][ T5826] (syz-executor375,5826,0):ocfs2_delete_inode:1068 ERROR: status = -17
[ 90.057106][ T5826] (syz-executor375,5826,1):ocfs2_query_inode_wipe:937 ERROR: Inode 17057 (on-disk 17057) not orphaned! Disk flags 0x1, inode flags 0x0
[ 90.071396][ T5826] (syz-executor375,5826,1):ocfs2_delete_inode:1068 ERROR: status = -17
[ 90.082577][ T5826] ------------[ cut here ]------------
[ 90.088780][ T5826] WARNING: CPU: 1 PID: 5826 at fs/inode.c:407 drop_nlink+0xc4/0x110
[ 90.097006][ T5826] Modules linked in:
[ 90.100942][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: syz-executor375 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0
[ 90.112286][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 90.122462][ T5826] RIP: 0010:drop_nlink+0xc4/0x110
[ 90.127696][ T5826] Code: bb 70 07 00 00 be 08 00 00 00 e8 c7 35 e7 ff f0 48 ff 83 70 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc e8 1d 54 83 ff 90 <0f> 0b 90 eb 83 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5c ff ff ff
[ 90.147583][ T5826] RSP: 0018:ffffc90003ecf8f0 EFLAGS: 00010293
[ 90.153676][ T5826] RAX: ffffffff821c1e03 RBX: 1ffff1100eb30a00 RCX: ffff888021359e00
[ 90.161823][ T5826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 90.170016][ T5826] RBP: 0000000000000000 R08: ffffffff821c1d83 R09: 1ffff1100eb00fbf
[ 90.178108][ T5826] R10: dffffc0000000000 R11: ffffed100eb00fc0 R12: ffff888075985000
[ 90.186145][ T5826] R13: 1ffff920007d9f34 R14: ffff888075984fb8 R15: dffffc0000000000
[ 90.194430][ T5826] FS: 0000555555f73480(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[ 90.203674][ T5826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 90.210453][ T5826] CR2: 0000555555f7c7f8 CR3: 0000000075102000 CR4: 00000000003526f0
[ 90.218567][ T5826] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 90.226614][ T5826] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 90.234715][ T5826] Call Trace:
[ 90.238078][ T5826]
[ 90.241044][ T5826] ? __warn+0x165/0x4d0
[ 90.245237][ T5826] ? drop_nlink+0xc4/0x110
[ 90.249813][ T5826] ? report_bug+0x2b3/0x500
[ 90.254379][ T5826] ? drop_nlink+0xc4/0x110
[ 90.258920][ T5826] ? handle_bug+0x60/0x90
[ 90.263310][ T5826] ? exc_invalid_op+0x1a/0x50
[ 90.268094][ T5826] ? asm_exc_invalid_op+0x1a/0x20
[ 90.273179][ T5826] ? drop_nlink+0x43/0x110
[ 90.277713][ T5826] ? drop_nlink+0xc3/0x110
[ 90.282214][ T5826] ? drop_nlink+0xc4/0x110
[ 90.286819][ T5826] ocfs2_unlink+0xf62/0x1c80
[ 90.291606][ T5826] ? __pfx_ocfs2_unlink+0x10/0x10
[ 90.296796][ T5826] ? __pfx_lock_acquire+0x10/0x10
[ 90.301902][ T5826] ? __lock_acquire+0x1397/0x2100
[ 90.307007][ T5826] ? smack_log+0x123/0x540
[ 90.311504][ T5826] ? smk_access+0x4ab/0x4e0
[ 90.316072][ T5826] ? smk_tskacc+0x300/0x370
[ 90.320714][ T5826] ? smack_inode_unlink+0x2f3/0x3b0
[ 90.325986][ T5826] ? __pfx_smack_inode_unlink+0x10/0x10
[ 90.331704][ T5826] ? HAS_UNMAPPED_ID+0xf9/0x150
[ 90.336858][ T5826] ? down_write+0x18c/0x220
[ 90.341520][ T5826] ? __pfx_down_write+0x10/0x10
[ 90.346410][ T5826] ? bpf_lsm_inode_unlink+0x9/0x10
[ 90.351729][ T5826] ? security_inode_unlink+0xd9/0x340
[ 90.357256][ T5826] vfs_unlink+0x365/0x650
[ 90.361621][ T5826] do_unlinkat+0x4ae/0x830
[ 90.366061][ T5826] ? __pfx_do_unlinkat+0x10/0x10
[ 90.371093][ T5826] ? __check_object_size+0x47a/0x730
[ 90.376446][ T5826] ? __might_fault+0xc6/0x120
[ 90.381220][ T5826] ? strncpy_from_user+0x152/0x270
[ 90.386392][ T5826] ? getname_flags+0x1e3/0x540
[ 90.391304][ T5826] __x64_sys_unlink+0x47/0x50
[ 90.396039][ T5826] do_syscall_64+0xf3/0x230
[ 90.400635][ T5826] ? clear_bhb_loop+0x35/0x90
[ 90.405385][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.411396][ T5826] RIP: 0033:0x7f58ba679757
[ 90.415908][ T5826] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 90.435745][ T5826] RSP: 002b:00007ffed1f30d58 EFLAGS: 00000287 ORIG_RAX: 0000000000000057
[ 90.444329][ T5826] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f58ba679757
[ 90.452436][ T5826] RDX: 00007ffed1f30d80 RSI: 00007ffed1f30e10 RDI: 00007ffed1f30e10
[ 90.460508][ T5826] RBP: 00007ffed1f30e10 R08: 0000000000000000 R09: 0000000000000000
[ 90.468551][ T5826] R10: 0000000000000100 R11: 0000000000000287 R12: 00007ffed1f31f00
[ 90.476561][ T5826] R13: 0000555555f7c800 R14: 431bde82d7b634db R15: 00007ffed1f32f90
[ 90.484656][ T5826]
[ 90.487854][ T5826] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 90.495161][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: syz-executor375 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0
[ 90.506278][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 90.516476][ T5826] Call Trace:
[ 90.519772][ T5826]
[ 90.522733][ T5826] dump_stack_lvl+0x241/0x360
[ 90.527432][ T5826] ? __pfx_dump_stack_lvl+0x10/0x10
[ 90.532661][ T5826] ? __pfx__printk+0x10/0x10
[ 90.537348][ T5826] ? vscnprintf+0x5d/0x90
[ 90.541721][ T5826] panic+0x349/0x880
[ 90.545637][ T5826] ? __warn+0x174/0x4d0
[ 90.549841][ T5826] ? __pfx_panic+0x10/0x10
[ 90.554284][ T5826] __warn+0x344/0x4d0
[ 90.558276][ T5826] ? drop_nlink+0xc4/0x110
[ 90.562713][ T5826] report_bug+0x2b3/0x500
[ 90.567057][ T5826] ? drop_nlink+0xc4/0x110
[ 90.571490][ T5826] handle_bug+0x60/0x90
[ 90.575651][ T5826] exc_invalid_op+0x1a/0x50
[ 90.580169][ T5826] asm_exc_invalid_op+0x1a/0x20
[ 90.585034][ T5826] RIP: 0010:drop_nlink+0xc4/0x110
[ 90.590096][ T5826] Code: bb 70 07 00 00 be 08 00 00 00 e8 c7 35 e7 ff f0 48 ff 83 70 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc e8 1d 54 83 ff 90 <0f> 0b 90 eb 83 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5c ff ff ff
[ 90.609816][ T5826] RSP: 0018:ffffc90003ecf8f0 EFLAGS: 00010293
[ 90.615908][ T5826] RAX: ffffffff821c1e03 RBX: 1ffff1100eb30a00 RCX: ffff888021359e00
[ 90.623929][ T5826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 90.631934][ T5826] RBP: 0000000000000000 R08: ffffffff821c1d83 R09: 1ffff1100eb00fbf
[ 90.639920][ T5826] R10: dffffc0000000000 R11: ffffed100eb00fc0 R12: ffff888075985000
[ 90.647909][ T5826] R13: 1ffff920007d9f34 R14: ffff888075984fb8 R15: dffffc0000000000
[ 90.655906][ T5826] ? drop_nlink+0x43/0x110
[ 90.660352][ T5826] ? drop_nlink+0xc3/0x110
[ 90.664805][ T5826] ocfs2_unlink+0xf62/0x1c80
[ 90.669423][ T5826] ? __pfx_ocfs2_unlink+0x10/0x10
[ 90.674555][ T5826] ? __pfx_lock_acquire+0x10/0x10
[ 90.679626][ T5826] ? __lock_acquire+0x1397/0x2100
[ 90.684796][ T5826] ? smack_log+0x123/0x540
[ 90.689290][ T5826] ? smk_access+0x4ab/0x4e0
[ 90.693881][ T5826] ? smk_tskacc+0x300/0x370
[ 90.698551][ T5826] ? smack_inode_unlink+0x2f3/0x3b0
[ 90.703792][ T5826] ? __pfx_smack_inode_unlink+0x10/0x10
[ 90.709362][ T5826] ? HAS_UNMAPPED_ID+0xf9/0x150
[ 90.714237][ T5826] ? down_write+0x18c/0x220
[ 90.718755][ T5826] ? __pfx_down_write+0x10/0x10
[ 90.723635][ T5826] ? bpf_lsm_inode_unlink+0x9/0x10
[ 90.728765][ T5826] ? security_inode_unlink+0xd9/0x340
[ 90.734166][ T5826] vfs_unlink+0x365/0x650
[ 90.738530][ T5826] do_unlinkat+0x4ae/0x830
[ 90.742976][ T5826] ? __pfx_do_unlinkat+0x10/0x10
[ 90.747942][ T5826] ? __check_object_size+0x47a/0x730
[ 90.753252][ T5826] ? __might_fault+0xc6/0x120
[ 90.757959][ T5826] ? strncpy_from_user+0x152/0x270
[ 90.763106][ T5826] ? getname_flags+0x1e3/0x540
[ 90.767976][ T5826] __x64_sys_unlink+0x47/0x50
[ 90.772898][ T5826] do_syscall_64+0xf3/0x230
[ 90.777414][ T5826] ? clear_bhb_loop+0x35/0x90
[ 90.782106][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.788025][ T5826] RIP: 0033:0x7f58ba679757
[ 90.792454][ T5826] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 90.812179][ T5826] RSP: 002b:00007ffed1f30d58 EFLAGS: 00000287 ORIG_RAX: 0000000000000057
[ 90.820629][ T5826] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f58ba679757
[ 90.828704][ T5826] RDX: 00007ffed1f30d80 RSI: 00007ffed1f30e10 RDI: 00007ffed1f30e10
[ 90.836692][ T5826] RBP: 00007ffed1f30e10 R08: 0000000000000000 R09: 0000000000000000
[ 90.844677][ T5826] R10: 0000000000000100 R11: 0000000000000287 R12: 00007ffed1f31f00
[ 90.852667][ T5826] R13: 0000555555f7c800 R14: 431bde82d7b634db R15: 00007ffed1f32f90
[ 90.860673][ T5826]
[ 90.864035][ T5826] Kernel Offset: disabled
[ 90.868432][ T5826] Rebooting in 86400 seconds..