program: syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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") mknod$loop(0x0, 0x1, 0x1) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x6000, 0x1) (async, rerun: 64) r0 = landlock_create_ruleset(&(0x7f0000000940)={0x840c}, 0x10, 0x0) (rerun: 64) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file5\x00', 0x2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000ff0f0000b87e", @ANYRES32=0x0], 0x50) (async) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) close(0xffffffffffffffff) (async) unshare(0x68040200) [ 74.943747][ T48] Bluetooth: hci0: command tx timeout [ 75.031106][ T5322] loop0: detected capacity change from 0 to 2048 [ 75.059010][ T5322] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 75.072292][ T5324] udevd[5324]: incorrect nilfs2 checksum on /dev/loop0 [ 75.091637][ T5325] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.116377][ T5326] ------------[ cut here ]------------ [ 75.118735][ T5326] WARNING: CPU: 0 PID: 5326 at security/landlock/fs.c:955 current_check_refer_path+0x80f/0xee0 [ 75.122940][ T5326] Modules linked in: [ 75.124573][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted 6.13.0-rc2-syzkaller #0 [ 75.127852][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.131785][ T5326] RIP: 0010:current_check_refer_path+0x80f/0xee0 [ 75.134262][ T5326] Code: 89 44 24 20 eb 2f e8 90 c1 1d fd 66 b8 40 00 89 44 24 20 eb 20 e8 81 c1 1d fd 66 b8 00 10 89 44 24 20 eb 11 e8 72 c1 1d fd 90 <0f> 0b 90 c7 44 24 20 00 00 00 00 8b 44 24 28 84 c0 0f 84 d2 00 00 [ 75.142044][ T5326] RSP: 0018:ffffc9000d147a40 EFLAGS: 00010293 [ 75.144910][ T5326] RAX: ffffffff84819cce RBX: 000000000000000f RCX: ffff888000c84880 [ 75.148393][ T5326] RDX: 0000000000000000 RSI: ffffffff8f024aa0 RDI: 000000000000000f [ 75.151860][ T5326] RBP: ffffc9000d147bb8 R08: 0000000000000005 R09: ffffffff84819b8e [ 75.155445][ T5326] R10: 0000000000000008 R11: ffff888000c84880 R12: ffff888043781608 [ 75.158500][ T5326] R13: ffff888036992a00 R14: 1ffff1100a59077d R15: ffff888052c83be8 [ 75.161354][ T5326] FS: 00007fca3bd366c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 75.164723][ T5326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.166939][ T5326] CR2: 0000000000000000 CR3: 0000000041e08000 CR4: 0000000000352ef0 [ 75.169693][ T5326] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.172626][ T5326] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.175687][ T5326] Call Trace: [ 75.177047][ T5326] [ 75.178180][ T5326] ? __warn+0x165/0x4d0 [ 75.179844][ T5326] ? current_check_refer_path+0x80f/0xee0 [ 75.181904][ T5326] ? report_bug+0x2b3/0x500 [ 75.183617][ T5326] ? current_check_refer_path+0x80f/0xee0 [ 75.185848][ T5326] ? handle_bug+0x60/0x90 [ 75.187276][ T5326] ? exc_invalid_op+0x1a/0x50 [ 75.188957][ T5326] ? asm_exc_invalid_op+0x1a/0x20 [ 75.190778][ T5326] ? current_check_refer_path+0x6ce/0xee0 [ 75.192736][ T5326] ? current_check_refer_path+0x80e/0xee0 [ 75.194964][ T5326] ? current_check_refer_path+0x80f/0xee0 [ 75.197063][ T5326] ? __pfx_lock_release+0x10/0x10 [ 75.198967][ T5326] ? __pfx_current_check_refer_path+0x10/0x10 [ 75.201430][ T5326] ? __d_lookup+0x64/0x7b0 [ 75.203119][ T5326] security_path_rename+0x22a/0x4e0 [ 75.205338][ T5326] do_renameat2+0x94a/0x13f0 [ 75.207018][ T5326] ? __pfx_do_renameat2+0x10/0x10 [ 75.208783][ T5326] ? __virt_addr_valid+0x183/0x530 [ 75.210509][ T5326] ? __virt_addr_valid+0x183/0x530 [ 75.212171][ T5326] ? __check_object_size+0x47a/0x730 [ 75.214023][ T5326] ? getname_flags+0x1e3/0x540 [ 75.215921][ T5326] ? do_syscall_64+0x100/0x230 [ 75.217886][ T5326] __x64_sys_renameat2+0xce/0xe0 [ 75.219884][ T5326] do_syscall_64+0xf3/0x230 [ 75.221678][ T5326] ? clear_bhb_loop+0x35/0x90 [ 75.223479][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.225853][ T5326] RIP: 0033:0x7fca3af7fed9 [ 75.227522][ T5326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.234365][ T5326] RSP: 002b:00007fca3bd36058 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 75.236935][ T5326] RAX: ffffffffffffffda RBX: 00007fca3b146160 RCX: 00007fca3af7fed9 [ 75.239416][ T5326] RDX: ffffffffffffff9c RSI: 0000000020000a00 RDI: ffffffffffffff9c [ 75.242117][ T5326] RBP: 00007fca3aff3cc8 R08: 0000000000000002 R09: 0000000000000000 [ 75.244792][ T5326] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.247491][ T5326] R13: 0000000000000000 R14: 00007fca3b146160 R15: 00007ffd9f081568 [ 75.250328][ T5326] [ 75.251509][ T5326] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.254078][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted 6.13.0-rc2-syzkaller #0 [ 75.257147][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.261276][ T5326] Call Trace: [ 75.262788][ T5326] [ 75.263976][ T5326] dump_stack_lvl+0x241/0x360 [ 75.265710][ T5326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.267541][ T5326] ? __pfx__printk+0x10/0x10 [ 75.269273][ T5326] ? _printk+0xd5/0x120 [ 75.270720][ T5326] ? __init_begin+0x41000/0x41000 [ 75.272329][ T5326] ? vscnprintf+0x5d/0x90 [ 75.273856][ T5326] panic+0x349/0x880 [ 75.275225][ T5326] ? __warn+0x174/0x4d0 [ 75.276787][ T5326] ? __pfx_panic+0x10/0x10 [ 75.278411][ T5326] __warn+0x344/0x4d0 [ 75.280117][ T5326] ? current_check_refer_path+0x80f/0xee0 [ 75.282254][ T5326] report_bug+0x2b3/0x500 [ 75.283816][ T5326] ? current_check_refer_path+0x80f/0xee0 [ 75.285800][ T5326] handle_bug+0x60/0x90 [ 75.287252][ T5326] exc_invalid_op+0x1a/0x50 [ 75.288832][ T5326] asm_exc_invalid_op+0x1a/0x20 [ 75.291707][ T5326] RIP: 0010:current_check_refer_path+0x80f/0xee0 [ 75.294174][ T5326] Code: 89 44 24 20 eb 2f e8 90 c1 1d fd 66 b8 40 00 89 44 24 20 eb 20 e8 81 c1 1d fd 66 b8 00 10 89 44 24 20 eb 11 e8 72 c1 1d fd 90 <0f> 0b 90 c7 44 24 20 00 00 00 00 8b 44 24 28 84 c0 0f 84 d2 00 00 [ 75.301029][ T5326] RSP: 0018:ffffc9000d147a40 EFLAGS: 00010293 [ 75.303249][ T5326] RAX: ffffffff84819cce RBX: 000000000000000f RCX: ffff888000c84880 [ 75.306084][ T5326] RDX: 0000000000000000 RSI: ffffffff8f024aa0 RDI: 000000000000000f [ 75.308713][ T5326] RBP: ffffc9000d147bb8 R08: 0000000000000005 R09: ffffffff84819b8e [ 75.311576][ T5326] R10: 0000000000000008 R11: ffff888000c84880 R12: ffff888043781608 [ 75.314649][ T5326] R13: ffff888036992a00 R14: 1ffff1100a59077d R15: ffff888052c83be8 [ 75.317565][ T5326] ? current_check_refer_path+0x6ce/0xee0 [ 75.319507][ T5326] ? current_check_refer_path+0x80e/0xee0 [ 75.321788][ T5326] ? __pfx_lock_release+0x10/0x10 [ 75.323686][ T5326] ? __pfx_current_check_refer_path+0x10/0x10 [ 75.325938][ T5326] ? __d_lookup+0x64/0x7b0 [ 75.327688][ T5326] security_path_rename+0x22a/0x4e0 [ 75.329636][ T5326] do_renameat2+0x94a/0x13f0 [ 75.331432][ T5326] ? __pfx_do_renameat2+0x10/0x10 [ 75.333472][ T5326] ? __virt_addr_valid+0x183/0x530 [ 75.335453][ T5326] ? __virt_addr_valid+0x183/0x530 [ 75.337468][ T5326] ? __check_object_size+0x47a/0x730 [ 75.339505][ T5326] ? getname_flags+0x1e3/0x540 [ 75.341621][ T5326] ? do_syscall_64+0x100/0x230 [ 75.343536][ T5326] __x64_sys_renameat2+0xce/0xe0 [ 75.345366][ T5326] do_syscall_64+0xf3/0x230 [ 75.347197][ T5326] ? clear_bhb_loop+0x35/0x90 [ 75.348848][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.350760][ T5326] RIP: 0033:0x7fca3af7fed9 [ 75.352162][ T5326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.359411][ T5326] RSP: 002b:00007fca3bd36058 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 75.362611][ T5326] RAX: ffffffffffffffda RBX: 00007fca3b146160 RCX: 00007fca3af7fed9 [ 75.365439][ T5326] RDX: ffffffffffffff9c RSI: 0000000020000a00 RDI: ffffffffffffff9c [ 75.368491][ T5326] RBP: 00007fca3aff3cc8 R08: 0000000000000002 R09: 0000000000000000 [ 75.371630][ T5326] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.374630][ T5326] R13: 0000000000000000 R14: 00007fca3b146160 R15: 00007ffd9f081568 [ 75.377725][ T5326] [ 75.379218][ T5326] Kernel Offset: disabled [ 75.380794][ T5326] Rebooting in 86400 seconds..