./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3035155842
<...>
Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts.
execve("./syz-executor3035155842", ["./syz-executor3035155842"], 0x7ffe247a35a0 /* 10 vars */) = 0
brk(NULL) = 0x5555720d2000
brk(0x5555720d2d00) = 0x5555720d2d00
arch_prctl(ARCH_SET_FS, 0x5555720d2380) = 0
set_tid_address(0x5555720d2650) = 5821
set_robust_list(0x5555720d2660, 24) = 0
rseq(0x5555720d2ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3035155842", 4096) = 28
getrandom("\x0a\x73\x74\x06\x73\x70\x24\x0a", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5555720d2d00
brk(0x5555720f3d00) = 0x5555720f3d00
brk(0x5555720f4000) = 0x5555720f4000
mprotect(0x7fbe98f6f000, 16384, PROT_READ) = 0
mmap(0x3ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3ffffffff000
mmap(0x400000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400000000000
mmap(0x400001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400001000000
executing program
write(1, "executing program\n", 18) = 18
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbe90a00000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 67108864) = 67108864
munmap(0x7fbe90a00000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
close(4) = 0
mkdir("./file2", 0777) = 0
syzkaller login: [ 64.904686][ T5821] loop0: detected capacity change from 0 to 131072
[ 64.949895][ T5821] F2FS-fs (loop0): invalid crc value
[ 64.962291][ T5821] F2FS-fs (loop0): Found nat_bits in checkpoint
mount("/dev/loop0", "./file2", "f2fs", MS_DIRSYNC|MS_RELATIME, "") = 0
openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3
chdir("./file2") = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[ 65.003037][ T5821] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[ 65.017766][ T5821] ------------[ cut here ]------------
[ 65.023423][ T5821] WARNING: CPU: 0 PID: 5821 at fs/inode.c:407 drop_nlink+0xc4/0x110
[ 65.031564][ T5821] Modules linked in:
[ 65.035485][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: syz-executor303 Not tainted 6.14.0-rc2-syzkaller #0
[ 65.045356][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 65.055494][ T5821] RIP: 0010:drop_nlink+0xc4/0x110
[ 65.060562][ T5821] Code: bb 70 07 00 00 be 08 00 00 00 e8 e7 12 e7 ff f0 48 ff 83 70 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc e8 4d fe 82 ff 90 <0f> 0b 90 eb 83 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5c ff ff ff
[ 65.080323][ T5821] RSP: 0018:ffffc900040e7bb8 EFLAGS: 00010293
[ 65.086381][ T5821] RAX: ffffffff823c50f3 RBX: 1ffff1100e581354 RCX: ffff88802e315a00
[ 65.094439][ T5821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 65.102506][ T5821] RBP: 0000000000000000 R08: ffffffff823c5073 R09: 1ffffffff203466e
[ 65.110602][ T5821] R10: dffffc0000000000 R11: fffffbfff203466f R12: ffff888072c09aa0
[ 65.118592][ T5821] R13: dffffc0000000000 R14: ffff888072c09a58 R15: dffffc0000000000
[ 65.126681][ T5821] FS: 00005555720d2380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 65.135884][ T5821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 65.142627][ T5821] CR2: 00007ffd975f3000 CR3: 0000000021fb2000 CR4: 00000000003526f0
[ 65.150673][ T5821] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 65.158695][ T5821] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 65.166818][ T5821] Call Trace:
[ 65.170150][ T5821]
[ 65.173074][ T5821] ? __warn+0x165/0x4d0
[ 65.177254][ T5821] ? drop_nlink+0xc4/0x110
[ 65.181718][ T5821] ? report_bug+0x2b3/0x500
[ 65.186257][ T5821] ? drop_nlink+0xc4/0x110
[ 65.190728][ T5821] ? handle_bug+0x60/0x90
[ 65.195074][ T5821] ? exc_invalid_op+0x1a/0x50
[ 65.199854][ T5821] ? asm_exc_invalid_op+0x1a/0x20
[ 65.204895][ T5821] ? drop_nlink+0x43/0x110
[ 65.209359][ T5821] ? drop_nlink+0xc3/0x110
[ 65.213792][ T5821] ? drop_nlink+0xc4/0x110
[ 65.218199][ T5821] ? drop_nlink+0xc3/0x110
[ 65.222667][ T5821] f2fs_drop_nlink+0xd6/0x380
[ 65.227394][ T5821] f2fs_unlink+0x47f/0x960
[ 65.231867][ T5821] ? __pfx_f2fs_unlink+0x10/0x10
[ 65.236826][ T5821] ? bpf_lsm_inode_unlink+0x9/0x10
[ 65.241982][ T5821] ? security_inode_unlink+0xd9/0x340
[ 65.247373][ T5821] vfs_unlink+0x365/0x650
[ 65.251784][ T5821] do_unlinkat+0x4ae/0x830
[ 65.256222][ T5821] ? __pfx_do_unlinkat+0x10/0x10
[ 65.261285][ T5821] ? __check_object_size+0x47a/0x730
[ 65.266587][ T5821] ? __might_fault+0xc6/0x120
[ 65.271346][ T5821] ? strncpy_from_user+0x146/0x270
[ 65.276483][ T5821] ? getname_flags+0x1e3/0x540
[ 65.281310][ T5821] __x64_sys_unlink+0x47/0x50
[ 65.286021][ T5821] do_syscall_64+0xf3/0x230
[ 65.290671][ T5821] ? clear_bhb_loop+0x35/0x90
[ 65.295366][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 65.301308][ T5821] RIP: 0033:0x7fbe98eec639
[ 65.305798][ T5821] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 65.325546][ T5821] RSP: 002b:00007ffd975f2598 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[ 65.334049][ T5821] RAX: ffffffffffffffda RBX: 00007ffd975f2778 RCX: 00007fbe98eec639
[ 65.342194][ T5821] RDX: 00007fbe98eeb6d1 RSI: 0000000000000000 RDI: 0000400000000100
[ 65.350313][ T5821] RBP: 00007fbe98f6f610 R08: 00000000000105b7 R09: 0000000000000000
[ 65.358295][ T5821] R10: 00007ffd975f2460 R11: 0000000000000246 R12: 0000000000000001
[ 65.366306][ T5821] R13: 00007ffd975f2768 R14: 0000000000000001 R15: 0000000000000001
[ 65.374330][ T5821]
[ 65.377357][ T5821] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 65.384628][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: syz-executor303 Not tainted 6.14.0-rc2-syzkaller #0
[ 65.393978][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 65.404014][ T5821] Call Trace:
[ 65.407274][ T5821]
[ 65.410196][ T5821] dump_stack_lvl+0x241/0x360
[ 65.414863][ T5821] ? __pfx_dump_stack_lvl+0x10/0x10
[ 65.420049][ T5821] ? __pfx__printk+0x10/0x10
[ 65.424720][ T5821] ? vscnprintf+0x5d/0x90
[ 65.429033][ T5821] panic+0x349/0x880
[ 65.432938][ T5821] ? __warn+0x174/0x4d0
[ 65.437091][ T5821] ? __pfx_panic+0x10/0x10
[ 65.441516][ T5821] __warn+0x344/0x4d0
[ 65.445489][ T5821] ? drop_nlink+0xc4/0x110
[ 65.449900][ T5821] report_bug+0x2b3/0x500
[ 65.454223][ T5821] ? drop_nlink+0xc4/0x110
[ 65.458638][ T5821] handle_bug+0x60/0x90
[ 65.462790][ T5821] exc_invalid_op+0x1a/0x50
[ 65.467289][ T5821] asm_exc_invalid_op+0x1a/0x20
[ 65.472137][ T5821] RIP: 0010:drop_nlink+0xc4/0x110
[ 65.477152][ T5821] Code: bb 70 07 00 00 be 08 00 00 00 e8 e7 12 e7 ff f0 48 ff 83 70 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc e8 4d fe 82 ff 90 <0f> 0b 90 eb 83 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5c ff ff ff
[ 65.496747][ T5821] RSP: 0018:ffffc900040e7bb8 EFLAGS: 00010293
[ 65.502807][ T5821] RAX: ffffffff823c50f3 RBX: 1ffff1100e581354 RCX: ffff88802e315a00
[ 65.510768][ T5821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 65.518750][ T5821] RBP: 0000000000000000 R08: ffffffff823c5073 R09: 1ffffffff203466e
[ 65.526710][ T5821] R10: dffffc0000000000 R11: fffffbfff203466f R12: ffff888072c09aa0
[ 65.534673][ T5821] R13: dffffc0000000000 R14: ffff888072c09a58 R15: dffffc0000000000
[ 65.542645][ T5821] ? drop_nlink+0x43/0x110
[ 65.547101][ T5821] ? drop_nlink+0xc3/0x110
[ 65.551513][ T5821] ? drop_nlink+0xc3/0x110
[ 65.555920][ T5821] f2fs_drop_nlink+0xd6/0x380
[ 65.560597][ T5821] f2fs_unlink+0x47f/0x960
[ 65.565014][ T5821] ? __pfx_f2fs_unlink+0x10/0x10
[ 65.569960][ T5821] ? bpf_lsm_inode_unlink+0x9/0x10
[ 65.575071][ T5821] ? security_inode_unlink+0xd9/0x340
[ 65.580442][ T5821] vfs_unlink+0x365/0x650
[ 65.584874][ T5821] do_unlinkat+0x4ae/0x830
[ 65.589304][ T5821] ? __pfx_do_unlinkat+0x10/0x10
[ 65.594308][ T5821] ? __check_object_size+0x47a/0x730
[ 65.599590][ T5821] ? __might_fault+0xc6/0x120
[ 65.604264][ T5821] ? strncpy_from_user+0x146/0x270
[ 65.609372][ T5821] ? getname_flags+0x1e3/0x540
[ 65.614134][ T5821] __x64_sys_unlink+0x47/0x50
[ 65.618807][ T5821] do_syscall_64+0xf3/0x230
[ 65.623314][ T5821] ? clear_bhb_loop+0x35/0x90
[ 65.627991][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 65.633895][ T5821] RIP: 0033:0x7fbe98eec639
[ 65.638304][ T5821] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 65.657901][ T5821] RSP: 002b:00007ffd975f2598 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[ 65.666347][ T5821] RAX: ffffffffffffffda RBX: 00007ffd975f2778 RCX: 00007fbe98eec639
[ 65.674313][ T5821] RDX: 00007fbe98eeb6d1 RSI: 0000000000000000 RDI: 0000400000000100
[ 65.682283][ T5821] RBP: 00007fbe98f6f610 R08: 00000000000105b7 R09: 0000000000000000
[ 65.690245][ T5821] R10: 00007ffd975f2460 R11: 0000000000000246 R12: 0000000000000001
[ 65.698208][ T5821] R13: 00007ffd975f2768 R14: 0000000000000001 R15: 0000000000000001
[ 65.706184][ T5821]
[ 65.709488][ T5821] Kernel Offset: disabled
[ 65.713849][ T5821] Rebooting in 86400 seconds..