./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2239574324

<...>
Warning: Permanently added '10.128.10.17' (ED25519) to the list of known hosts.
execve("./syz-executor2239574324", ["./syz-executor2239574324"], 0x7ffc88d17220 /* 10 vars */) = 0
brk(NULL)                               = 0x555589dd3000
brk(0x555589dd3d00)                     = 0x555589dd3d00
arch_prctl(ARCH_SET_FS, 0x555589dd3380) = 0
set_tid_address(0x555589dd3650)         = 5826
set_robust_list(0x555589dd3660, 24)     = 0
rseq(0x555589dd3ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2239574324", 4096) = 28
getrandom("\xfd\xa9\x78\x85\x74\x17\xe9\xff", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555589dd3d00
brk(0x555589df4d00)                     = 0x555589df4d00
brk(0x555589df5000)                     = 0x555589df5000
mprotect(0x7f42d0c71000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5827 attached
 <unfinished ...>
[pid  5827] set_robust_list(0x555589dd3660, 24) = 0
[pid  5827] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5826] <... clone resumed>, child_tidptr=0x555589dd3650) = 5827
[pid  5827] <... prctl resumed>)        = 0
[pid  5827] setpgid(0, 0)               = 0
[pid  5827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5827] write(3, "1000", 4)         = 4
[pid  5827] close(3)                    = 0
[pid  5827] write(1, "executing program\n", 18executing program
) = 18
[pid  5827] memfd_create("syzkaller", 0) = 3
[pid  5827] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f42c8600000
[pid  5827] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x02\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x0f\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\xff\x03\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\x8f\x24\x2d\x5f\x49\x6d\x50\x0b\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152
[pid  5827] munmap(0x7f42c8600000, 138412032) = 0
[pid  5827] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5827] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5827] close(3)                    = 0
[pid  5827] close(4)                    = 0
[pid  5827] mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0
syzkaller login: [   92.307167][ T5827] loop0: detected capacity change from 0 to 4096
[   92.344804][ T5827] =======================================================
[   92.344804][ T5827] WARNING: The mand mount option has been deprecated and
[   92.344804][ T5827]          and is ignored by this kernel. Remove the mand
[   92.344804][ T5827]          option from the mount to silence this warning.
[   92.344804][ T5827] =======================================================
[   92.424230][ T5827] ntfs3(loop0): ino=3, Correct links count -> 2.
[pid  5827] mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "ntfs3", MS_MANDLOCK|MS_REC|MS_SILENT|MS_STRICTATIME, "fmask=00000000000000000000007,uid=0x0000000000000000,discard,iocharset=macceltic,fmask=0000000000000"...) = 0
[pid  5827] openat(AT_FDCWD, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", O_RDONLY|O_DIRECTORY) = 3
[pid  5827] chdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f") = 0
[pid  5827] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5827] openat(AT_FDCWD, "./file1", O_WRONLY|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 4
[pid  5827] openat(AT_FDCWD, "cpu.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  5827] openat(AT_FDCWD, "blkio.bfq.avg_queue_size", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6
[   92.502672][ T5827] ntfs3(loop0): ino=1a, mi_enum_attr
[   92.508373][ T5827] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[pid  5827] open("./file0/file0", O_RDONLY|O_DIRECT) = 7
[pid  5827] rename("./file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = -1 ENOENT (No such file or directory)
[pid  5827] link("./file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[   92.566040][   T30] audit: type=1800 audit(1750147588.782:2): pid=5827 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor223" name="file0" dev="loop0" ino=28 res=0 errno=0
[   92.585852][ T5827] ntfs3(loop0): ino=1b, "file0" ntfs_rename
[   92.605949][ T5827] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[   92.617901][ T5827] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[   92.626345][ T5827] CPU: 0 UID: 0 PID: 5827 Comm: syz-executor223 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) 
[   92.638778][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   92.648867][ T5827] RIP: 0010:pick_link+0x4f1/0xe80
[   92.653959][ T5827] Code: 4c 89 f7 e8 d1 fe ea ff 4d 8b 36 4d 85 f6 0f 84 9b 00 00 00 e8 60 ab 89 ff 49 bf 00 00 00 00 00 fc ff df 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 b9 06 00 00 41 0f b6 2e bf 2f 00 00 00
[   92.673955][ T5827] RSP: 0018:ffffc900040af7e8 EFLAGS: 00010246
[   92.680132][ T5827] RAX: 0000000000000000 RBX: ffffc900040af908 RCX: ffff888048c68000
[   92.688126][ T5827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   92.696144][ T5827] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff823b0d98
[   92.704169][ T5827] R10: 000000003b9aca00 R11: ffffffff823a80a0 R12: 1ffff92000815f8b
[   92.712163][ T5827] R13: ffffc900040afc20 R14: 0000000000000002 R15: dffffc0000000000
[   92.720156][ T5827] FS:  0000555589dd3380(0000) GS:ffff888125c85000(0000) knlGS:0000000000000000
[   92.729179][ T5827] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   92.735772][ T5827] CR2: 000055e46c64ecb8 CR3: 0000000076250000 CR4: 00000000003526f0
[   92.743760][ T5827] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   92.751743][ T5827] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   92.759720][ T5827] Call Trace:
[   92.763017][ T5827]  <TASK>
[   92.765969][ T5827]  step_into+0xc5d/0xf30
[   92.770252][ T5827]  ? __d_lookup+0x6df/0x780
[   92.774782][ T5827]  ? __d_lookup+0x66/0x780
[   92.779205][ T5827]  ? __pfx_step_into+0x10/0x10
[   92.783993][ T5827]  path_openat+0x1bc6/0x3830
[   92.788592][ T5827]  ? arch_stack_walk+0xfc/0x150
[   92.793475][ T5827]  ? __pfx_path_openat+0x10/0x10
[   92.798421][ T5827]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.804766][ T5827]  do_filp_open+0x1fa/0x410
[   92.809276][ T5827]  ? __lock_acquire+0xab9/0xd20
[   92.814150][ T5827]  ? __pfx_do_filp_open+0x10/0x10
[   92.819195][ T5827]  ? _raw_spin_unlock+0x28/0x50
[   92.824102][ T5827]  ? alloc_fd+0x64c/0x6c0
[   92.828538][ T5827]  do_sys_openat2+0x121/0x1c0
[   92.833296][ T5827]  ? __pfx_do_sys_openat2+0x10/0x10
[   92.838533][ T5827]  ? rcu_is_watching+0x15/0xb0
[   92.843316][ T5827]  __x64_sys_open+0x11e/0x150
[   92.848011][ T5827]  do_syscall_64+0xfa/0x3b0
[   92.852623][ T5827]  ? lockdep_hardirqs_on+0x9c/0x150
[   92.857891][ T5827]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.863977][ T5827]  ? clear_bhb_loop+0x60/0xb0
[   92.868695][ T5827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.874603][ T5827] RIP: 0033:0x7f42d0bdded9
[   92.879037][ T5827] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   92.898665][ T5827] RSP: 002b:00007fffa2aec458 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   92.907098][ T5827] RAX: ffffffffffffffda RBX: 00007f42d0c46ac0 RCX: 00007f42d0bdded9
[   92.915180][ T5827] RDX: 0000000000000000 RSI: 0000000000048500 RDI: 0000200000000a80
[   92.923618][ T5827] RBP: 0000200000001240 R08: 0000555589dd44c0 R09: 0000555589dd44c0
[   92.931621][ T5827] R10: 0000555589dd44c0 R11: 0000000000000246 R12: 0000000000000000
[   92.939724][ T5827] R13: 00007fffa2aec6a8 R14: 431bde82d7b634db R15: 00007f42d0c2703b
[   92.947725][ T5827]  </TASK>
[   92.950764][ T5827] Modules linked in:
[   92.955325][ T5827] ---[ end trace 0000000000000000 ]---
[   92.960934][ T5827] RIP: 0010:pick_link+0x4f1/0xe80
[   92.966354][ T5827] Code: 4c 89 f7 e8 d1 fe ea ff 4d 8b 36 4d 85 f6 0f 84 9b 00 00 00 e8 60 ab 89 ff 49 bf 00 00 00 00 00 fc ff df 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 b9 06 00 00 41 0f b6 2e bf 2f 00 00 00
[   92.986481][ T5827] RSP: 0018:ffffc900040af7e8 EFLAGS: 00010246
[   92.992693][ T5827] RAX: 0000000000000000 RBX: ffffc900040af908 RCX: ffff888048c68000
[   93.000757][ T5827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   93.008745][ T5827] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff823b0d98
[   93.016873][ T5827] R10: 000000003b9aca00 R11: ffffffff823a80a0 R12: 1ffff92000815f8b
[   93.025035][ T5827] R13: ffffc900040afc20 R14: 0000000000000002 R15: dffffc0000000000
[   93.033179][ T5827] FS:  0000555589dd3380(0000) GS:ffff888125c85000(0000) knlGS:0000000000000000
[   93.042332][ T5827] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   93.048951][ T5827] CR2: 000055e46c64ecb8 CR3: 0000000076250000 CR4: 00000000003526f0
[   93.057037][ T5827] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   93.065100][ T5827] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   93.073426][ T5827] Kernel panic - not syncing: Fatal exception
[   93.080159][ T5827] Kernel Offset: disabled
[   93.084522][ T5827] Rebooting in 86400 seconds..