./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor461338130
<...>
Warning: Permanently added '10.128.1.7' (ED25519) to the list of known hosts.
execve("./syz-executor461338130", ["./syz-executor461338130"], 0x7ffd555fa280 /* 10 vars */) = 0
brk(NULL) = 0x55558f349000
brk(0x55558f349d00) = 0x55558f349d00
arch_prctl(ARCH_SET_FS, 0x55558f349380) = 0
set_tid_address(0x55558f349650) = 5839
set_robust_list(0x55558f349660, 24) = 0
rseq(0x55558f349ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor461338130", 4096) = 27
getrandom("\xef\xa4\x2d\x65\xcc\x51\x98\x17", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55558f349d00
brk(0x55558f36ad00) = 0x55558f36ad00
brk(0x55558f36b000) = 0x55558f36b000
mprotect(0x7f4887854000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
write(1, "executing program\n", 18executing program
) = 18
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f487f200000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
munmap(0x7f487f200000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
close(4) = 0
mkdir("./bus", 0777) = 0
[ 88.843036][ T5839] loop0: detected capacity change from 0 to 2048
[ 88.880788][ T5839] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
mount("/dev/loop0", "./bus", "nilfs2", MS_SYNCHRONOUS, "") = 0
openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
chdir("./bus") = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
landlock_create_ruleset({handled_access_fs=LANDLOCK_ACCESS_FS_EXECUTE|LANDLOCK_ACCESS_FS_WRITE_FILE|LANDLOCK_ACCESS_FS_READ_FILE|LANDLOCK_ACCESS_FS_READ_DIR|LANDLOCK_ACCESS_FS_REMOVE_DIR|LANDLOCK_ACCESS_FS_REMOVE_FILE|LANDLOCK_ACCESS_FS_MAKE_CHAR|LANDLOCK_ACCESS_FS_MAKE_DIR|LANDLOCK_ACCESS_FS_MAKE_REG|LANDLOCK_ACCESS_FS_MAKE_SOCK|LANDLOCK_ACCESS_FS_MAKE_FIFO|LANDLOCK_ACCESS_FS_MAKE_BLOCK|LANDLOCK_ACCESS_FS_MAKE_SYM, ...}, 16, 0) = 4
landlock_restrict_self(4, 0) = 0
[ 88.896596][ T5840] udevd[5840]: incorrect nilfs2 checksum on /dev/loop0
[ 88.900655][ T5841] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 88.940419][ T5839] ------------[ cut here ]------------
[ 88.945993][ T5839] WARNING: CPU: 0 PID: 5839 at security/landlock/fs.c:971 get_mode_access+0xae/0xc0
[ 88.955525][ T5839] Modules linked in:
[ 88.959552][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz-executor461 Not tainted 6.12.0-rc7-syzkaller #0
[ 88.969020][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 88.979144][ T5839] RIP: 0010:get_mode_access+0xae/0xc0
[ 88.984626][ T5839] Code: c2 66 81 fb 00 10 75 1c bd 00 04 00 00 eb b4 66 81 fb 00 80 75 0e bd 00 01 00 00 eb a6 bd 00 08 00 00 eb 9f e8 a3 0e 3c fd 90 <0f> 0b 90 31 ed eb 92 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90
[ 89.004380][ T5839] RSP: 0018:ffffc900040d7b58 EFLAGS: 00010293
[ 89.010601][ T5839] RAX: 0000000000000000 RBX: 000000000000f000 RCX: ffffffff84516b24
[ 89.018790][ T5839] RDX: ffff888034d40000 RSI: ffffffff84516bad RDI: 0000000000000003
[ 89.026839][ T5839] RBP: 0000000000001000 R08: 0000000000000003 R09: 000000000000c000
[ 89.034929][ T5839] R10: 000000000000f000 R11: 0000000000000000 R12: 0000000000000001
[ 89.043013][ T5839] R13: ffff888075ce1478 R14: 0000000000400000 R15: ffff888079c0d608
[ 89.051102][ T5839] FS: 000055558f349380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 89.060103][ T5839] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 89.066721][ T5839] CR2: 000000000066c7e0 CR3: 0000000031b8c000 CR4: 0000000000350ef0
[ 89.074791][ T5839] Call Trace:
[ 89.078091][ T5839]
[ 89.081115][ T5839] ? __warn+0xea/0x3d0
[ 89.085265][ T5839] ? get_mode_access+0xae/0xc0
[ 89.090160][ T5839] ? report_bug+0x3c0/0x580
[ 89.094811][ T5839] ? handle_bug+0x54/0xa0
[ 89.099160][ T5839] ? exc_invalid_op+0x17/0x50
[ 89.103938][ T5839] ? asm_exc_invalid_op+0x1a/0x20
[ 89.109010][ T5839] ? get_mode_access+0x24/0xc0
[ 89.113857][ T5839] ? get_mode_access+0xad/0xc0
[ 89.118704][ T5839] ? get_mode_access+0xae/0xc0
[ 89.123601][ T5839] ? get_mode_access+0xad/0xc0
[ 89.128427][ T5839] current_check_refer_path+0x253/0x710
[ 89.134076][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5
[ 89.139816][ T5839] ? __pfx_current_check_refer_path+0x10/0x10
[ 89.145930][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5
[ 89.151718][ T5839] ? nilfs_lookup+0xbd/0x1e0
[ 89.156367][ T5839] ? lock_acquire+0x2f/0xb0
[ 89.160973][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5
[ 89.166654][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5
[ 89.172359][ T5839] ? _raw_spin_unlock+0x28/0x50
[ 89.177270][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5
[ 89.182979][ T5839] security_path_rename+0x160/0x3c0
[ 89.188224][ T5839] do_renameat2+0x7a0/0xdd0
[ 89.193163][ T5839] ? __pfx_do_renameat2+0x10/0x10
[ 89.198249][ T5839] ? trace_lock_acquire+0x14a/0x1d0
[ 89.203535][ T5839] ? lock_acquire+0x2f/0xb0
[ 89.208074][ T5839] ? __might_fault+0xe3/0x190
[ 89.212850][ T5839] ? __might_fault+0xe3/0x190
[ 89.217598][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5
[ 89.223349][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5
[ 89.229043][ T5839] ? getname_flags.part.0+0x1c5/0x550
[ 89.234546][ T5839] __x64_sys_renameat2+0xe7/0x130
[ 89.239615][ T5839] do_syscall_64+0xcd/0x250
[ 89.244207][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.250198][ T5839] RIP: 0033:0x7f48877e0679
[ 89.254625][ T5839] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 89.274314][ T5839] RSP: 002b:00007ffcbfbffbf8 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[ 89.282817][ T5839] RAX: ffffffffffffffda RBX: 00007ffcbfbffdc8 RCX: 00007f48877e0679
[ 89.290846][ T5839] RDX: 00000000ffffff9c RSI: 0000000020000780 RDI: 00000000ffffff9c
[ 89.298846][ T5839] RBP: 00007f4887854610 R08: 0000000000000002 R09: 00007ffcbfbffdc8
[ 89.306885][ T5839] R10: 00000000200007c0 R11: 0000000000000246 R12: 0000000000000001
[ 89.314915][ T5839] R13: 00007ffcbfbffdb8 R14: 0000000000000001 R15: 0000000000000001
[ 89.322967][ T5839]
[ 89.326015][ T5839] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 89.333295][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz-executor461 Not tainted 6.12.0-rc7-syzkaller #0
[ 89.342674][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 89.352740][ T5839] Call Trace:
[ 89.356040][ T5839]
[ 89.358975][ T5839] dump_stack_lvl+0x3d/0x1f0
[ 89.363585][ T5839] panic+0x71d/0x800
[ 89.367524][ T5839] ? __pfx_panic+0x10/0x10
[ 89.371967][ T5839] ? show_trace_log_lvl+0x29d/0x3d0
[ 89.377184][ T5839] ? check_panic_on_warn+0x1f/0xb0
[ 89.382336][ T5839] ? get_mode_access+0xae/0xc0
[ 89.387145][ T5839] check_panic_on_warn+0xab/0xb0
[ 89.392125][ T5839] __warn+0xf6/0x3d0
[ 89.396060][ T5839] ? get_mode_access+0xae/0xc0
[ 89.400893][ T5839] report_bug+0x3c0/0x580
[ 89.405256][ T5839] handle_bug+0x54/0xa0
[ 89.409452][ T5839] exc_invalid_op+0x17/0x50
[ 89.413988][ T5839] asm_exc_invalid_op+0x1a/0x20
[ 89.418862][ T5839] RIP: 0010:get_mode_access+0xae/0xc0
[ 89.424275][ T5839] Code: c2 66 81 fb 00 10 75 1c bd 00 04 00 00 eb b4 66 81 fb 00 80 75 0e bd 00 01 00 00 eb a6 bd 00 08 00 00 eb 9f e8 a3 0e 3c fd 90 <0f> 0b 90 31 ed eb 92 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90
[ 89.443906][ T5839] RSP: 0018:ffffc900040d7b58 EFLAGS: 00010293
[ 89.450001][ T5839] RAX: 0000000000000000 RBX: 000000000000f000 RCX: ffffffff84516b24
[ 89.457988][ T5839] RDX: ffff888034d40000 RSI: ffffffff84516bad RDI: 0000000000000003
[ 89.465981][ T5839] RBP: 0000000000001000 R08: 0000000000000003 R09: 000000000000c000
[ 89.474047][ T5839] R10: 000000000000f000 R11: 0000000000000000 R12: 0000000000000001
[ 89.482038][ T5839] R13: ffff888075ce1478 R14: 0000000000400000 R15: ffff888079c0d608
[ 89.490041][ T5839] ? get_mode_access+0x24/0xc0
[ 89.494850][ T5839] ? get_mode_access+0xad/0xc0
[ 89.499658][ T5839] ? get_mode_access+0xad/0xc0
[ 89.504568][ T5839] current_check_refer_path+0x253/0x710
[ 89.510173][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5
[ 89.515852][ T5839] ? __pfx_current_check_refer_path+0x10/0x10
[ 89.521950][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5
[ 89.527611][ T5839] ? nilfs_lookup+0xbd/0x1e0
[ 89.532235][ T5839] ? lock_acquire+0x2f/0xb0
[ 89.536812][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5
[ 89.542496][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5
[ 89.548161][ T5839] ? _raw_spin_unlock+0x28/0x50
[ 89.553055][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5
[ 89.558722][ T5839] security_path_rename+0x160/0x3c0
[ 89.563958][ T5839] do_renameat2+0x7a0/0xdd0
[ 89.568499][ T5839] ? __pfx_do_renameat2+0x10/0x10
[ 89.573550][ T5839] ? trace_lock_acquire+0x14a/0x1d0
[ 89.578798][ T5839] ? lock_acquire+0x2f/0xb0
[ 89.583332][ T5839] ? __might_fault+0xe3/0x190
[ 89.588096][ T5839] ? __might_fault+0xe3/0x190
[ 89.592828][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5
[ 89.598680][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5
[ 89.604344][ T5839] ? getname_flags.part.0+0x1c5/0x550
[ 89.609931][ T5839] __x64_sys_renameat2+0xe7/0x130
[ 89.614984][ T5839] do_syscall_64+0xcd/0x250
[ 89.619520][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 89.625549][ T5839] RIP: 0033:0x7f48877e0679
[ 89.629986][ T5839] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 89.649619][ T5839] RSP: 002b:00007ffcbfbffbf8 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[ 89.658063][ T5839] RAX: ffffffffffffffda RBX: 00007ffcbfbffdc8 RCX: 00007f48877e0679
[ 89.666117][ T5839] RDX: 00000000ffffff9c RSI: 0000000020000780 RDI: 00000000ffffff9c
[ 89.674117][ T5839] RBP: 00007f4887854610 R08: 0000000000000002 R09: 00007ffcbfbffdc8
[ 89.682311][ T5839] R10: 00000000200007c0 R11: 0000000000000246 R12: 0000000000000001
[ 89.690304][ T5839] R13: 00007ffcbfbffdb8 R14: 0000000000000001 R15: 0000000000000001
[ 89.698313][ T5839]
[ 89.701636][ T5839] Kernel Offset: disabled
[ 89.706018][ T5839] Rebooting in 86400 seconds..