./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor277614168 <...> [ 10.765083][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 12.225237][ T23] kauditd_printk_skb: 60 callbacks suppressed [ 12.225244][ T23] audit: type=1400 audit(1655562261.699:71): avc: denied { transition } for pid=290 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.230786][ T23] audit: type=1400 audit(1655562261.699:72): avc: denied { write } for pid=290 comm="sh" path="pipe:[354]" dev="pipefs" ino=354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 [ 12.465765][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 12.468194][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 13.225674][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 13.345053][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 13.353968][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 14.825136][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! Warning: Permanently added '10.128.0.168' (ECDSA) to the list of known hosts. execve("./syz-executor277614168", ["./syz-executor277614168"], 0x7ffd65b93080 /* 10 vars */) = 0 brk(NULL) = 0x5555556e7000 brk(0x5555556e7c40) = 0x5555556e7c40 arch_prctl(ARCH_SET_FS, 0x5555556e7300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor277614168", 4096) = 27 brk(0x555555708c40) = 0x555555708c40 brk(0x555555709000) = 0x555555709000 mprotect(0x7fc523ff0000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556e75d0) = 372 ./strace-static-x86_64: Process 372 attached [pid 372] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 372] setpgid(0, 0) = 0 [pid 372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 372] write(3, "1000", 4) = 4 [pid 372] close(3) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop-control", O_RDONLY) = 3 [pid 372] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 372] write(4, "71", 2) = 2 [ 20.015064][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 20.030002][ T23] audit: type=1400 audit(1655562269.499:73): avc: denied { execmem } for pid=371 comm="syz-executor277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 372] ioctl(3, LOOP_CTL_ADD, 0) = -1 EEXIST (File exists) [ 20.054958][ T23] audit: type=1400 audit(1655562269.519:74): avc: denied { read } for pid=372 comm="syz-executor277" name="loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 20.079599][ T23] audit: type=1400 audit(1655562269.529:75): avc: denied { open } for pid=372 comm="syz-executor277" path="/dev/loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [pid 372] ioctl(3, LOOP_CTL_REMOVE, 0) = 0 [pid 372] exit_group(0) = ? [pid 372] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=372, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556e75d0) = 374 ./strace-static-x86_64: Process 374 attached [pid 374] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 374] setpgid(0, 0) = 0 [pid 374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 374] write(3, "1000", 4) = 4 [pid 374] close(3) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop-control", O_RDONLY) = 3 [pid 374] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 374] write(4, "71", 2) = 2 [ 20.104659][ T23] audit: type=1400 audit(1655562269.539:76): avc: denied { ioctl } for pid=372 comm="syz-executor277" path="/dev/loop-control" dev="devtmpfs" ino=114 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 20.160237][ T374] FAULT_INJECTION: forcing a failure. [ 20.160237][ T374] name failslab, interval 1, probability 0, space 0, times 1 [ 20.172923][ T374] CPU: 0 PID: 374 Comm: syz-executor277 Not tainted 5.10.117-syzkaller-00814-gfdd06dc6b0f8 #0 [ 20.183130][ T374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 20.193160][ T374] Call Trace: [ 20.196426][ T374] dump_stack_lvl+0x1e2/0x24b [ 20.201072][ T374] ? bfq_pos_tree_add_move+0x43e/0x43e [ 20.206516][ T374] ? vsnprintf+0x1bfd/0x1cd0 [ 20.211193][ T374] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 20.217239][ T374] dump_stack+0x15/0x17 [ 20.221489][ T374] should_fail+0x3c0/0x510 [ 20.225879][ T374] __should_failslab+0x9f/0xe0 [ 20.230611][ T374] should_failslab+0x9/0x20 [ 20.235183][ T374] kmem_cache_alloc+0x3f/0x300 [ 20.239921][ T374] ? __alloc_skb+0x7e/0x580 [ 20.244394][ T374] ? add_uevent_var+0x269/0x440 [ 20.249248][ T374] __alloc_skb+0x7e/0x580 [ 20.253900][ T374] ? mutex_lock+0xa6/0x110 [ 20.258292][ T374] alloc_uevent_skb+0x7f/0x230 [ 20.263029][ T374] kobject_uevent_net_broadcast+0x321/0x5a0 [ 20.268894][ T374] kobject_uevent_env+0x540/0x730 [ 20.273888][ T374] kobject_uevent+0x1f/0x30 [ 20.278361][ T374] device_add+0x79c/0xbd0 [ 20.282663][ T374] device_create+0x258/0x2e0 [ 20.287226][ T374] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 20.293001][ T374] ? root_device_unregister+0x80/0x80 [ 20.298342][ T374] ? number+0xd9b/0x1040 [ 20.302554][ T374] bdi_register_va+0x94/0x600 [ 20.307224][ T374] bdi_register+0xd1/0x120 [ 20.311612][ T374] ? __device_add_disk+0x536/0x11d0 [ 20.316791][ T374] ? bdi_register_va+0x600/0x600 [ 20.321698][ T374] ? vsnprintf+0x1bfd/0x1cd0 [ 20.326265][ T374] ? __kasan_check_read+0x11/0x20 [ 20.331265][ T374] ? blk_alloc_devt+0xd4/0x320 [ 20.335997][ T374] __device_add_disk+0x5cb/0x11d0 [ 20.340990][ T374] ? device_add_disk+0x40/0x40 [ 20.345722][ T374] ? loop_add+0x3f0/0x760 [ 20.350035][ T374] ? vsprintf+0x40/0x40 [ 20.354160][ T374] device_add_disk+0x2a/0x40 [ 20.358719][ T374] loop_add+0x58f/0x760 [ 20.362847][ T374] loop_control_ioctl+0x564/0x740 [ 20.367841][ T374] ? loop_remove+0xb0/0xb0 [ 20.372237][ T374] ? _raw_spin_unlock_irq+0x4e/0x70 [ 20.377404][ T374] ? ptrace_notify+0x248/0x340 [ 20.382136][ T374] ? do_notify_parent+0xa60/0xa60 [ 20.387129][ T374] ? __fpregs_load_activate+0x1e7/0x370 [ 20.392641][ T374] ? security_file_ioctl+0xb1/0xd0 [ 20.397721][ T374] ? loop_remove+0xb0/0xb0 [ 20.402106][ T374] __se_sys_ioctl+0x115/0x190 [ 20.406749][ T374] __x64_sys_ioctl+0x7b/0x90 [ 20.411394][ T374] do_syscall_64+0x34/0x70 [ 20.415777][ T374] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 20.421636][ T374] RIP: 0033:0x7fc523f83069 [ 20.426033][ T374] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 20.445615][ T374] RSP: 002b:00007ffc1a278748 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [pid 374] ioctl(3, LOOP_CTL_ADD, 0) = 0 [pid 374] ioctl(3, LOOP_CTL_REMOVE, 0) = -1 EBUSY (Device or resource busy) [pid 374] exit_group(0) = ? [pid 374] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=374, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556e75d0) = 375 ./strace-static-x86_64: Process 375 attached [pid 375] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 375] setpgid(0, 0) = 0 [pid 375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 375] write(3, "1000", 4) = 4 [pid 375] close(3) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop-control", O_RDONLY) = 3 [pid 375] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 375] write(4, "71", 2) = 2 [pid 375] ioctl(3, LOOP_CTL_ADD, 0) = -1 EEXIST (File exists) [pid 375] ioctl(3, LOOP_CTL_REMOVE, 0) = 0 [pid 375] exit_group(0) = ? [pid 375] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=375, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 376 attached , child_tidptr=0x5555556e75d0) = 376 [pid 376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 376] setpgid(0, 0) = 0 [pid 376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 376] write(3, "1000", 4) = 4 [pid 376] close(3) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop-control", O_RDONLY) = 3 [pid 376] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 376] write(4, "71", 2) = 2 [ 20.454012][ T374] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fc523f83069 [ 20.461969][ T374] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 20.469928][ T374] RBP: 00007ffc1a278760 R08: 0000000000000002 R09: 0000000000000001 [ 20.477878][ T374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 20.485836][ T374] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 20.529917][ T376] FAULT_INJECTION: forcing a failure. [ 20.529917][ T376] name failslab, interval 1, probability 0, space 0, times 0 [ 20.542570][ T376] CPU: 0 PID: 376 Comm: syz-executor277 Not tainted 5.10.117-syzkaller-00814-gfdd06dc6b0f8 #0 [ 20.552868][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 20.562903][ T376] Call Trace: [ 20.566184][ T376] dump_stack_lvl+0x1e2/0x24b [ 20.570856][ T376] ? panic+0x7d7/0x7d7 [ 20.574913][ T376] ? bfq_pos_tree_add_move+0x43e/0x43e [ 20.580357][ T376] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 20.585358][ T376] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 20.590532][ T376] dump_stack+0x15/0x17 [ 20.594663][ T376] should_fail+0x3c0/0x510 [ 20.599056][ T376] ? kobj_map+0x72/0x6f0 [ 20.603285][ T376] __should_failslab+0x9f/0xe0 [ 20.608029][ T376] should_failslab+0x9/0x20 [ 20.612516][ T376] __kmalloc+0x60/0x360 [ 20.616652][ T376] ? __device_add_disk+0x536/0x11d0 [ 20.621829][ T376] kobj_map+0x72/0x6f0 [ 20.625876][ T376] ? exact_match+0x20/0x20 [ 20.630266][ T376] ? bdev_check_media_change+0x4c0/0x4c0 [ 20.635871][ T376] __device_add_disk+0x663/0x11d0 [ 20.640872][ T376] ? device_add_disk+0x40/0x40 [ 20.645615][ T376] ? loop_add+0x3f0/0x760 [ 20.649926][ T376] ? vsprintf+0x40/0x40 [ 20.654060][ T376] device_add_disk+0x2a/0x40 [ 20.658645][ T376] loop_add+0x58f/0x760 [ 20.662774][ T376] loop_control_ioctl+0x564/0x740 [ 20.667925][ T376] ? loop_remove+0xb0/0xb0 [ 20.672318][ T376] ? _raw_spin_unlock_irq+0x4e/0x70 [ 20.677493][ T376] ? ptrace_notify+0x248/0x340 [ 20.682231][ T376] ? do_notify_parent+0xa60/0xa60 [ 20.687225][ T376] ? __fpregs_load_activate+0x1e7/0x370 [ 20.692741][ T376] ? security_file_ioctl+0xb1/0xd0 [ 20.697844][ T376] ? loop_remove+0xb0/0xb0 [ 20.702233][ T376] __se_sys_ioctl+0x115/0x190 [ 20.706968][ T376] __x64_sys_ioctl+0x7b/0x90 [ 20.711556][ T376] do_syscall_64+0x34/0x70 [ 20.715946][ T376] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 20.721822][ T376] RIP: 0033:0x7fc523f83069 [ 20.726218][ T376] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 20.745815][ T376] RSP: 002b:00007ffc1a278748 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 20.754221][ T376] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fc523f83069 [ 20.762252][ T376] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 20.770202][ T376] RBP: 00007ffc1a278760 R08: 0000000000000002 R09: 0000000000000001 [pid 376] ioctl(3, LOOP_CTL_ADD, 0) = 0 [pid 376] ioctl(3, LOOP_CTL_REMOVE, 0) = 0 [pid 376] exit_group(0) = ? [pid 376] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=376, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556e75d0) = 377 ./strace-static-x86_64: Process 377 attached [pid 377] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 377] setpgid(0, 0) = 0 [pid 377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 377] write(3, "1000", 4) = 4 [pid 377] close(3) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop-control", O_RDONLY) = 3 [pid 377] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 377] write(4, "71", 2) = 2 [ 20.778174][ T376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 20.786117][ T376] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 20.830350][ T377] FAULT_INJECTION: forcing a failure. [ 20.830350][ T377] name failslab, interval 1, probability 0, space 0, times 0 [ 20.842968][ T377] CPU: 0 PID: 377 Comm: syz-executor277 Not tainted 5.10.117-syzkaller-00814-gfdd06dc6b0f8 #0 [ 20.853173][ T377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 20.863200][ T377] Call Trace: [ 20.866477][ T377] dump_stack_lvl+0x1e2/0x24b [ 20.871154][ T377] ? panic+0x7d7/0x7d7 [ 20.875221][ T377] ? bfq_pos_tree_add_move+0x43e/0x43e [ 20.880665][ T377] ? __kasan_kmalloc+0x9/0x10 [ 20.885326][ T377] ? kobj_map+0x72/0x6f0 [ 20.889557][ T377] ? __device_add_disk+0x663/0x11d0 [ 20.894727][ T377] ? device_add_disk+0x2a/0x40 [ 20.899462][ T377] ? loop_control_ioctl+0x564/0x740 [ 20.904632][ T377] ? __se_sys_ioctl+0x115/0x190 [ 20.909454][ T377] ? __x64_sys_ioctl+0x7b/0x90 [ 20.914203][ T377] dump_stack+0x15/0x17 [ 20.918333][ T377] should_fail+0x3c0/0x510 [ 20.922723][ T377] ? kvasprintf_const+0x139/0x180 [ 20.927719][ T377] __should_failslab+0x9f/0xe0 [ 20.932453][ T377] should_failslab+0x9/0x20 [ 20.936935][ T377] __kmalloc_track_caller+0x5f/0x350 [ 20.942214][ T377] kstrdup_const+0x55/0x90 [ 20.946606][ T377] kvasprintf_const+0x139/0x180 [ 20.951440][ T377] kobject_set_name_vargs+0x61/0x120 [ 20.956807][ T377] dev_set_name+0xd1/0x120 [ 20.961207][ T377] ? __kmalloc+0x1f7/0x360 [ 20.965619][ T377] ? get_device+0x30/0x30 [ 20.969934][ T377] ? kobj_map+0x6ad/0x6f0 [ 20.974241][ T377] __device_add_disk+0x6e5/0x11d0 [ 20.979242][ T377] ? device_add_disk+0x40/0x40 [ 20.983985][ T377] ? vsprintf+0x40/0x40 [ 20.988244][ T377] device_add_disk+0x2a/0x40 [ 20.992811][ T377] loop_add+0x58f/0x760 [ 20.996951][ T377] loop_control_ioctl+0x564/0x740 [ 21.001963][ T377] ? loop_remove+0xb0/0xb0 [ 21.006354][ T377] ? _raw_spin_unlock_irq+0x4e/0x70 [ 21.011531][ T377] ? ptrace_notify+0x248/0x340 [ 21.016274][ T377] ? do_notify_parent+0xa60/0xa60 [ 21.021279][ T377] ? __fpregs_load_activate+0x1e7/0x370 [ 21.026809][ T377] ? security_file_ioctl+0xb1/0xd0 [ 21.031896][ T377] ? loop_remove+0xb0/0xb0 [ 21.036294][ T377] __se_sys_ioctl+0x115/0x190 [ 21.041037][ T377] __x64_sys_ioctl+0x7b/0x90 [ 21.045602][ T377] do_syscall_64+0x34/0x70 [ 21.049994][ T377] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 21.055877][ T377] RIP: 0033:0x7fc523f83069 [ 21.060273][ T377] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 21.079849][ T377] RSP: 002b:00007ffc1a278748 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 21.088236][ T377] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fc523f83069 [ 21.096197][ T377] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 21.104154][ T377] RBP: 00007ffc1a278760 R08: 0000000000000002 R09: 0000000000000001 [ 21.112109][ T377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 21.120059][ T377] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 21.128302][ T377] kobject_add_internal failed for queue (error: -2 parent: (null)) [ 21.136375][ T377] ------------[ cut here ]------------ [ 21.142340][ T377] WARNING: CPU: 1 PID: 377 at fs/sysfs/file.c:328 sysfs_create_files+0x215/0x4a0 [ 21.151457][ T377] Modules linked in: [ 21.155372][ T377] CPU: 0 PID: 377 Comm: syz-executor277 Not tainted 5.10.117-syzkaller-00814-gfdd06dc6b0f8 #0 [ 21.165625][ T377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 21.175687][ T377] RIP: 0010:sysfs_create_files+0x215/0x4a0 [ 21.181480][ T377] Code: 24 04 48 b9 00 00 00 00 00 fc ff df 48 8b 54 24 08 4c 8b 74 24 20 eb 2b 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 ab f0 9a ff <0f> 0b c7 44 24 04 ea ff ff ff 48 b9 00 00 00 00 00 fc ff df 48 8b [ 21.201170][ T377] RSP: 0018:ffffc9000096fae0 EFLAGS: 00010293 [ 21.207257][ T377] RAX: ffffffff81d1c221 RBX: ffff888101b92098 RCX: ffff8881065b4f00 [ 21.215229][ T377] RDX: 0000000000000000 RSI: ffffffff86539560 RDI: ffff888101b92068 [ 21.223182][ T377] RBP: ffffc9000096fbb0 R08: ffffffff826b9748 R09: ffffed10209f8470 [ 21.231153][ T377] R10: ffffed10209f8470 R11: 1ffff110209f846f R12: 0000000000000000 [ 21.239130][ T377] R13: ffffffff854304a0 R14: ffff888101b92068 R15: ffffffff86539560 [ 21.247108][ T377] FS: 00005555556e7300(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 21.256029][ T377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.262586][ T377] CR2: 00007fc523fb29a0 CR3: 00000001087b5000 CR4: 00000000003506b0 [ 21.270735][ T377] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.278701][ T377] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.286763][ T377] Call Trace: [ 21.290036][ T377] ? sysfs_create_file_ns+0x2a0/0x2a0 [ 21.295435][ T377] ? __kasan_check_write+0x14/0x20 [ 21.300542][ T377] ? kobject_get+0xd2/0x120 [ 21.305056][ T377] __device_add_disk+0x9cb/0x11d0 [ 21.310077][ T377] ? device_add_disk+0x40/0x40 [ 21.314812][ T377] ? vsprintf+0x40/0x40 [ 21.318982][ T377] device_add_disk+0x2a/0x40 [ 21.323567][ T377] loop_add+0x58f/0x760 [ 21.327721][ T377] loop_control_ioctl+0x564/0x740 [ 21.332735][ T377] ? loop_remove+0xb0/0xb0 [ 21.337168][ T377] ? _raw_spin_unlock_irq+0x4e/0x70 [ 21.342360][ T377] ? ptrace_notify+0x248/0x340 [ 21.347122][ T377] ? do_notify_parent+0xa60/0xa60 [ 21.352167][ T377] ? __fpregs_load_activate+0x1e7/0x370 [ 21.357712][ T377] ? security_file_ioctl+0xb1/0xd0 [ 21.362826][ T377] ? loop_remove+0xb0/0xb0 [ 21.367237][ T377] __se_sys_ioctl+0x115/0x190 [ 21.371903][ T377] __x64_sys_ioctl+0x7b/0x90 [ 21.376489][ T377] do_syscall_64+0x34/0x70 [ 21.380911][ T377] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 21.386802][ T377] RIP: 0033:0x7fc523f83069 [ 21.391204][ T377] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 21.410826][ T377] RSP: 002b:00007ffc1a278748 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 21.419340][ T377] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fc523f83069 [ 21.427323][ T377] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 21.435287][ T377] RBP: 00007ffc1a278760 R08: 0000000000000002 R09: 0000000000000001 [ 21.443250][ T377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 21.451232][ T377] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 21.459323][ T377] ---[ end trace 2e1e7d352c52daaa ]--- [ 21.464757][ T377] ------------[ cut here ]------------ [ 21.470928][ T377] kernfs: can not remove 'events', no directory [ 21.477197][ T377] WARNING: CPU: 0 PID: 377 at fs/kernfs/dir.c:1508 kernfs_remove_by_name_ns+0x65/0x90 [ 21.486743][ T377] Modules linked in: [ 21.490748][ T377] CPU: 0 PID: 377 Comm: syz-executor277 Tainted: G W 5.10.117-syzkaller-00814-gfdd06dc6b0f8 #0 [ 21.502385][ T377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 21.512451][ T377] RIP: 0010:kernfs_remove_by_name_ns+0x65/0x90 [ 21.518600][ T377] Code: 48 89 c3 e8 fd 4e 9b ff 48 89 df e8 c5 ee ff ff 31 db eb 29 e8 ec 4e 9b ff 48 c7 c7 c0 0a 2d 85 4c 89 fe 31 c0 e8 3b 89 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 cd 4e 9b ff bb fe ff ff ff 48 c7 c7 [ 21.538310][ T377] RSP: 0018:ffffc9000096fab8 EFLAGS: 00010246 [ 21.544364][ T377] RAX: f2563f49e9720500 RBX: 0000000000000000 RCX: ffff8881065b4f00 [ 21.552506][ T377] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 21.560490][ T377] RBP: ffffc9000096fad0 R08: ffffffff8153a998 R09: ffffed103ee0a5d8 [ 21.568477][ T377] R10: ffffed103ee0a5d8 R11: 1ffff1103ee0a5d7 R12: ffffffff86539560 [ 21.576460][ T377] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff85430480 [ 21.584499][ T377] FS: 00005555556e7300(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 21.593441][ T377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.600151][ T377] CR2: 00007fc523fb29a0 CR3: 00000001087b5000 CR4: 00000000003506b0 [ 21.608122][ T377] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.616093][ T377] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.624138][ T377] Call Trace: [ 21.627585][ T377] sysfs_create_files+0x40a/0x4a0 [ 21.632617][ T377] ? sysfs_create_file_ns+0x2a0/0x2a0 [ 21.637993][ T377] ? __kasan_check_write+0x14/0x20 [ 21.643091][ T377] ? kobject_get+0xd2/0x120 [ 21.647600][ T377] __device_add_disk+0x9cb/0x11d0 [ 21.652616][ T377] ? device_add_disk+0x40/0x40 [ 21.657396][ T377] ? vsprintf+0x40/0x40 [ 21.661548][ T377] device_add_disk+0x2a/0x40 [ 21.666222][ T377] loop_add+0x58f/0x760 [ 21.670368][ T377] loop_control_ioctl+0x564/0x740 [ 21.675399][ T377] ? loop_remove+0xb0/0xb0 [ 21.679802][ T377] ? _raw_spin_unlock_irq+0x4e/0x70 [ 21.684977][ T377] ? ptrace_notify+0x248/0x340 [ 21.689755][ T377] ? do_notify_parent+0xa60/0xa60 [ 21.694844][ T377] ? __fpregs_load_activate+0x1e7/0x370 [ 21.700399][ T377] ? security_file_ioctl+0xb1/0xd0 [ 21.705534][ T377] ? loop_remove+0xb0/0xb0 [ 21.709959][ T377] __se_sys_ioctl+0x115/0x190 [ 21.714625][ T377] __x64_sys_ioctl+0x7b/0x90 [ 21.719242][ T377] do_syscall_64+0x34/0x70 [ 21.723676][ T377] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 21.729571][ T377] RIP: 0033:0x7fc523f83069 [ 21.733980][ T377] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 21.753603][ T377] RSP: 002b:00007ffc1a278748 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 21.762024][ T377] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fc523f83069 [ 21.770012][ T377] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [pid 377] ioctl(3, LOOP_CTL_ADD, 0) = 0 [ 21.777983][ T377] RBP: 00007ffc1a278760 R08: 0000000000000002 R09: 0000000000000001 [ 21.785958][ T377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 21.793917][ T377] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 21.801891][ T377] ---[ end trace 2e1e7d352c52daab ]--- [ 21.807338][ T377] loop0: failed to create sysfs files for events [ 21.814219][ T377] ------------[ cut here ]------------ [ 21.819699][ T377] kernfs: can not remove 'events', no directory [ 21.825978][ T377] WARNING: CPU: 0 PID: 377 at fs/kernfs/dir.c:1508 kernfs_remove_by_name_ns+0x65/0x90 [ 21.835509][ T377] Modules linked in: [ 21.839398][ T377] CPU: 0 PID: 377 Comm: syz-executor277 Tainted: G W 5.10.117-syzkaller-00814-gfdd06dc6b0f8 #0 [ 21.851100][ T377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 21.861157][ T377] RIP: 0010:kernfs_remove_by_name_ns+0x65/0x90 [ 21.867335][ T377] Code: 48 89 c3 e8 fd 4e 9b ff 48 89 df e8 c5 ee ff ff 31 db eb 29 e8 ec 4e 9b ff 48 c7 c7 c0 0a 2d 85 4c 89 fe 31 c0 e8 3b 89 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 cd 4e 9b ff bb fe ff ff ff 48 c7 c7 [ 21.886929][ T377] RSP: 0018:ffffc9000096fbf8 EFLAGS: 00010246 [ 21.892972][ T377] RAX: f2563f49e9720500 RBX: 0000000000000000 RCX: ffff8881065b4f00 [ 21.900949][ T377] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 21.908913][ T377] RBP: ffffc9000096fc10 R08: ffffffff8153a998 R09: ffffed103ee0a5d8 [ 21.916898][ T377] R10: ffffed103ee0a5d8 R11: 1ffff1103ee0a5d7 R12: 0000000000000000 [ 21.924851][ T377] R13: ffffffff86539560 R14: 0000000000000000 R15: ffffffff85430480 [ 21.932818][ T377] FS: 00005555556e7300(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 21.941747][ T377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.948329][ T377] CR2: 00007fc523fb29a0 CR3: 00000001087b5000 CR4: 00000000003506b0 [ 21.956307][ T377] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.964257][ T377] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.972240][ T377] Call Trace: [ 21.975535][ T377] sysfs_remove_files+0xab/0x110 [ 21.980448][ T377] del_gendisk+0x278/0xe20 [ 21.984862][ T377] ? device_add_disk_no_queue_reg+0x30/0x30 [ 21.990767][ T377] ? __radix_tree_delete+0x2ba/0x380 [ 21.996223][ T377] ? radix_tree_delete_item+0x261/0x360 [ 22.001747][ T377] loop_remove+0x46/0xb0 [ 22.005990][ T377] loop_control_ioctl+0x67f/0x740 [ 22.011010][ T377] ? loop_remove+0xb0/0xb0 [ 22.015440][ T377] ? _raw_spin_unlock_irq+0x4e/0x70 [ 22.020633][ T377] ? ptrace_notify+0x248/0x340 [ 22.025423][ T377] ? do_notify_parent+0xa60/0xa60 [ 22.030434][ T377] ? __fpregs_load_activate+0x1e7/0x370 [ 22.035978][ T377] ? security_file_ioctl+0xb1/0xd0 [ 22.041078][ T377] ? loop_remove+0xb0/0xb0 [ 22.045505][ T377] __se_sys_ioctl+0x115/0x190 [ 22.050181][ T377] __x64_sys_ioctl+0x7b/0x90 [ 22.054750][ T377] do_syscall_64+0x34/0x70 [ 22.059167][ T377] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 22.065052][ T377] RIP: 0033:0x7fc523f83069 [ 22.069441][ T377] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 22.089054][ T377] RSP: 002b:00007ffc1a278748 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 22.097469][ T377] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fc523f83069 [ 22.105543][ T377] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 22.113517][ T377] RBP: 00007ffc1a278760 R08: 0000000000000001 R09: 0000000000000001 [ 22.121490][ T377] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000004 [ 22.129459][ T377] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 22.137440][ T377] ---[ end trace 2e1e7d352c52daac ]--- [ 22.142877][ T377] ------------[ cut here ]------------ [ 22.148335][ T377] kernfs: can not remove 'events_async', no directory [ 22.155132][ T377] WARNING: CPU: 0 PID: 377 at fs/kernfs/dir.c:1508 kernfs_remove_by_name_ns+0x65/0x90 [ 22.164641][ T377] Modules linked in: [ 22.168559][ T377] CPU: 0 PID: 377 Comm: syz-executor277 Tainted: G W 5.10.117-syzkaller-00814-gfdd06dc6b0f8 #0 [ 22.180170][ T377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.190240][ T377] RIP: 0010:kernfs_remove_by_name_ns+0x65/0x90 [ 22.196394][ T377] Code: 48 89 c3 e8 fd 4e 9b ff 48 89 df e8 c5 ee ff ff 31 db eb 29 e8 ec 4e 9b ff 48 c7 c7 c0 0a 2d 85 4c 89 fe 31 c0 e8 3b 89 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 cd 4e 9b ff bb fe ff ff ff 48 c7 c7 [ 22.216107][ T377] RSP: 0018:ffffc9000096fbf8 EFLAGS: 00010246 [ 22.222189][ T377] RAX: f2563f49e9720500 RBX: 0000000000000000 RCX: ffff8881065b4f00 [ 22.230234][ T377] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 22.238255][ T377] RBP: ffffc9000096fc10 R08: ffffffff8153a998 R09: ffffed103ee0a5d8 [ 22.246302][ T377] R10: ffffed103ee0a5d8 R11: 1ffff1103ee0a5d7 R12: 0000000000000000 [ 22.254262][ T377] R13: ffffffff86539560 R14: 0000000000000000 R15: ffffffff85430560 [ 22.262308][ T377] FS: 00005555556e7300(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 22.271473][ T377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.278116][ T377] CR2: 00007fc523fb29a0 CR3: 00000001087b5000 CR4: 00000000003506b0 [ 22.286232][ T377] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.294185][ T377] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.302224][ T377] Call Trace: [ 22.305578][ T377] sysfs_remove_files+0xab/0x110 [ 22.310497][ T377] del_gendisk+0x278/0xe20 [ 22.314887][ T377] ? device_add_disk_no_queue_reg+0x30/0x30 [ 22.320862][ T377] ? __radix_tree_delete+0x2ba/0x380 [ 22.326227][ T377] ? radix_tree_delete_item+0x261/0x360 [ 22.331760][ T377] loop_remove+0x46/0xb0 [ 22.336088][ T377] loop_control_ioctl+0x67f/0x740 [ 22.341096][ T377] ? loop_remove+0xb0/0xb0 [ 22.345615][ T377] ? _raw_spin_unlock_irq+0x4e/0x70 [ 22.350796][ T377] ? ptrace_notify+0x248/0x340 [ 22.355622][ T377] ? do_notify_parent+0xa60/0xa60 [ 22.360641][ T377] ? __fpregs_load_activate+0x1e7/0x370 [ 22.366244][ T377] ? security_file_ioctl+0xb1/0xd0 [ 22.371342][ T377] ? loop_remove+0xb0/0xb0 [ 22.375843][ T377] __se_sys_ioctl+0x115/0x190 [ 22.380525][ T377] __x64_sys_ioctl+0x7b/0x90 [ 22.385175][ T377] do_syscall_64+0x34/0x70 [ 22.389571][ T377] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 22.395554][ T377] RIP: 0033:0x7fc523f83069 [ 22.399953][ T377] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 22.419659][ T377] RSP: 002b:00007ffc1a278748 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 22.428127][ T377] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fc523f83069 [ 22.436156][ T377] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 22.444202][ T377] RBP: 00007ffc1a278760 R08: 0000000000000001 R09: 0000000000000001 [ 22.452271][ T377] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000004 [ 22.460458][ T377] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 22.468528][ T377] ---[ end trace 2e1e7d352c52daad ]--- [ 22.473986][ T377] ------------[ cut here ]------------ [ 22.479537][ T377] kernfs: can not remove 'events_poll_msecs', no directory [ 22.486904][ T377] WARNING: CPU: 0 PID: 377 at fs/kernfs/dir.c:1508 kernfs_remove_by_name_ns+0x65/0x90 [ 22.496559][ T377] Modules linked in: [ 22.500470][ T377] CPU: 0 PID: 377 Comm: syz-executor277 Tainted: G W 5.10.117-syzkaller-00814-gfdd06dc6b0f8 #0 [ 22.512184][ T377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.522326][ T377] RIP: 0010:kernfs_remove_by_name_ns+0x65/0x90 [ 22.528623][ T377] Code: 48 89 c3 e8 fd 4e 9b ff 48 89 df e8 c5 ee ff ff 31 db eb 29 e8 ec 4e 9b ff 48 c7 c7 c0 0a 2d 85 4c 89 fe 31 c0 e8 3b 89 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 cd 4e 9b ff bb fe ff ff ff 48 c7 c7 [ 22.548315][ T377] RSP: 0018:ffffc9000096fbf8 EFLAGS: 00010246 [ 22.554366][ T377] RAX: f2563f49e9720500 RBX: 0000000000000000 RCX: ffff8881065b4f00 [ 22.562427][ T377] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 22.570452][ T377] RBP: ffffc9000096fc10 R08: ffffffff8153a998 R09: ffffed103ee0a5d8 [ 22.578502][ T377] R10: ffffed103ee0a5d8 R11: 1ffff1103ee0a5d7 R12: 0000000000000000 [ 22.586615][ T377] R13: ffffffff86539560 R14: 0000000000000000 R15: ffffffff854305c0 [ 22.594571][ T377] FS: 00005555556e7300(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 22.603633][ T377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.610303][ T377] CR2: 00007fc523fb29a0 CR3: 00000001087b5000 CR4: 00000000003506b0 [ 22.618504][ T377] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.626511][ T377] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.634569][ T377] Call Trace: [ 22.637985][ T377] sysfs_remove_files+0xab/0x110 [ 22.642991][ T377] del_gendisk+0x278/0xe20 [ 22.647523][ T377] ? device_add_disk_no_queue_reg+0x30/0x30 [ 22.653651][ T377] ? __radix_tree_delete+0x2ba/0x380 [ 22.659073][ T377] ? radix_tree_delete_item+0x261/0x360 [ 22.664684][ T377] loop_remove+0x46/0xb0 [ 22.669042][ T377] loop_control_ioctl+0x67f/0x740 [ 22.674169][ T377] ? loop_remove+0xb0/0xb0 [ 22.678698][ T377] ? _raw_spin_unlock_irq+0x4e/0x70 [ 22.683978][ T377] ? ptrace_notify+0x248/0x340 [ 22.688861][ T377] ? do_notify_parent+0xa60/0xa60 [ 22.693955][ T377] ? __fpregs_load_activate+0x1e7/0x370 [ 22.699792][ T377] ? security_file_ioctl+0xb1/0xd0 [ 22.705053][ T377] ? loop_remove+0xb0/0xb0 [ 22.709466][ T377] __se_sys_ioctl+0x115/0x190 [ 22.714124][ T377] __x64_sys_ioctl+0x7b/0x90 [ 22.718898][ T377] do_syscall_64+0x34/0x70 [ 22.723315][ T377] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 22.729352][ T377] RIP: 0033:0x7fc523f83069 [ 22.733841][ T377] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 22.753591][ T377] RSP: 002b:00007ffc1a278748 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 22.762151][ T377] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fc523f83069 [ 22.770248][ T377] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 22.778344][ T377] RBP: 00007ffc1a278760 R08: 0000000000000001 R09: 0000000000000001 [ 22.786429][ T377] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000004 [ 22.794597][ T377] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 22.802707][ T377] ---[ end trace 2e1e7d352c52daae ]--- [ 22.808274][ T377] ------------[ cut here ]------------ [ 22.813724][ T377] kernfs: can not remove 'bdi', no directory [ 22.819902][ T377] WARNING: CPU: 0 PID: 377 at fs/kernfs/dir.c:1508 kernfs_remove_by_name_ns+0x65/0x90 [ 22.829449][ T377] Modules linked in: [ 22.833341][ T377] CPU: 0 PID: 377 Comm: syz-executor277 Tainted: G W 5.10.117-syzkaller-00814-gfdd06dc6b0f8 #0 [ 22.845107][ T377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 22.855531][ T377] RIP: 0010:kernfs_remove_by_name_ns+0x65/0x90 [ 22.861674][ T377] Code: 48 89 c3 e8 fd 4e 9b ff 48 89 df e8 c5 ee ff ff 31 db eb 29 e8 ec 4e 9b ff 48 c7 c7 c0 0a 2d 85 4c 89 fe 31 c0 e8 3b 89 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 cd 4e 9b ff bb fe ff ff ff 48 c7 c7 [ 22.881459][ T377] RSP: 0018:ffffc9000096fc18 EFLAGS: 00010246 [ 22.887637][ T377] RAX: f2563f49e9720500 RBX: 0000000000000000 RCX: ffff8881065b4f00 [ 22.895683][ T377] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 22.903631][ T377] RBP: ffffc9000096fc30 R08: ffffffff8153a998 R09: fffff5200012dea9 [ 22.911960][ T377] R10: fffff5200012dea9 R11: 1ffff9200012dea8 R12: 0000000000000240 [ 22.920050][ T377] R13: ffff888101b92030 R14: 0000000000000000 R15: ffffffff8542fe60 [ 22.928107][ T377] FS: 00005555556e7300(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 22.937123][ T377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.943788][ T377] CR2: 00007fc523fb29a0 CR3: 00000001087b5000 CR4: 00000000003506b0 [ 22.951904][ T377] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.959979][ T377] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.967965][ T377] Call Trace: [ 22.971237][ T377] sysfs_remove_link+0x50/0x60 [ 22.976002][ T377] del_gendisk+0x7cd/0xe20 [ 22.980407][ T377] ? device_add_disk_no_queue_reg+0x30/0x30 [ 22.986298][ T377] ? __radix_tree_delete+0x2ba/0x380 [ 22.991573][ T377] ? radix_tree_delete_item+0x261/0x360 [ 22.997122][ T377] loop_remove+0x46/0xb0 [ 23.001350][ T377] loop_control_ioctl+0x67f/0x740 [ 23.006372][ T377] ? loop_remove+0xb0/0xb0 [ 23.010774][ T377] ? _raw_spin_unlock_irq+0x4e/0x70 [ 23.015975][ T377] ? ptrace_notify+0x248/0x340 [ 23.020728][ T377] ? do_notify_parent+0xa60/0xa60 [ 23.025770][ T377] ? __fpregs_load_activate+0x1e7/0x370 [ 23.031302][ T377] ? security_file_ioctl+0xb1/0xd0 [ 23.036431][ T377] ? loop_remove+0xb0/0xb0 [ 23.040827][ T377] __se_sys_ioctl+0x115/0x190 [ 23.045501][ T377] __x64_sys_ioctl+0x7b/0x90 [ 23.050079][ T377] do_syscall_64+0x34/0x70 [ 23.054469][ T377] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 23.060360][ T377] RIP: 0033:0x7fc523f83069 [ 23.064767][ T377] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 23.084390][ T377] RSP: 002b:00007ffc1a278748 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 23.092821][ T377] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fc523f83069 [ 23.100810][ T377] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 23.108781][ T377] RBP: 00007ffc1a278760 R08: 0000000000000001 R09: 0000000000000001 [ 23.116772][ T377] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000004 [ 23.124738][ T377] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 23.132715][ T377] ---[ end trace 2e1e7d352c52daaf ]--- [ 23.138991][ T377] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 23.150701][ T377] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 23.159092][ T377] CPU: 0 PID: 377 Comm: syz-executor277 Tainted: G W 5.10.117-syzkaller-00814-gfdd06dc6b0f8 #0 [ 23.170732][ T377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 23.180775][ T377] RIP: 0010:strlen+0x3a/0x80 [ 23.185338][ T377] Code: c0 ff ff ff ff 49 bf 00 00 00 00 00 fc ff df 48 89 fb 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 49 89 c4 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 12 48 ff c3 49 8d 44 24 01 43 80 7c 26 01 [ 23.204915][ T377] RSP: 0018:ffffc9000096fb68 EFLAGS: 00010246 [ 23.210955][ T377] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8881065b4f00 [ 23.218920][ T377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 23.226865][ T377] RBP: ffffc9000096fb88 R08: ffffffff81d1390c R09: fffff5200012df75 [ 23.234810][ T377] R10: fffff5200012df75 R11: 1ffff9200012df74 R12: ffffffffffffffff [ 23.242758][ T377] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 23.250709][ T377] FS: 00005555556e7300(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 23.259612][ T377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.266168][ T377] CR2: 00007fc523fb29a0 CR3: 00000001087b5000 CR4: 00000000003506b0 [ 23.274116][ T377] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 23.282062][ T377] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.290006][ T377] Call Trace: [ 23.293294][ T377] kernfs_name_hash+0x21/0x240 [ 23.298122][ T377] kernfs_find_ns+0x72/0x280 [ 23.302687][ T377] kernfs_remove_by_name_ns+0x36/0x90 [ 23.308038][ T377] sysfs_remove_link+0x50/0x60 [ 23.312794][ T377] del_gendisk+0xbe0/0xe20 [ 23.317189][ T377] ? device_add_disk_no_queue_reg+0x30/0x30 [ 23.323074][ T377] ? __radix_tree_delete+0x2ba/0x380 [ 23.328355][ T377] ? radix_tree_delete_item+0x261/0x360 [ 23.333877][ T377] loop_remove+0x46/0xb0 [ 23.338129][ T377] loop_control_ioctl+0x67f/0x740 [ 23.343131][ T377] ? loop_remove+0xb0/0xb0 [ 23.347521][ T377] ? _raw_spin_unlock_irq+0x4e/0x70 [ 23.352716][ T377] ? ptrace_notify+0x248/0x340 [ 23.357455][ T377] ? do_notify_parent+0xa60/0xa60 [ 23.362453][ T377] ? __fpregs_load_activate+0x1e7/0x370 [ 23.367972][ T377] ? security_file_ioctl+0xb1/0xd0 [ 23.373144][ T377] ? loop_remove+0xb0/0xb0 [ 23.377535][ T377] __se_sys_ioctl+0x115/0x190 [ 23.382195][ T377] __x64_sys_ioctl+0x7b/0x90 [ 23.386760][ T377] do_syscall_64+0x34/0x70 [ 23.391152][ T377] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 23.397102][ T377] RIP: 0033:0x7fc523f83069 [ 23.401498][ T377] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 23.421078][ T377] RSP: 002b:00007ffc1a278748 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 23.429466][ T377] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fc523f83069 [ 23.437414][ T377] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 23.445446][ T377] RBP: 00007ffc1a278760 R08: 0000000000000001 R09: 0000000000000001 [ 23.453396][ T377] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000004 [ 23.461342][ T377] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 23.469287][ T377] Modules linked in: [ 23.473419][ T377] ---[ end trace 2e1e7d352c52dab0 ]--- [ 23.478978][ T377] RIP: 0010:strlen+0x3a/0x80 [ 23.483563][ T377] Code: c0 ff ff ff ff 49 bf 00 00 00 00 00 fc ff df 48 89 fb 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 49 89 c4 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 12 48 ff c3 49 8d 44 24 01 43 80 7c 26 01 [ 23.503407][ T377] RSP: 0018:ffffc9000096fb68 EFLAGS: 00010246 [ 23.509588][ T377] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8881065b4f00 [ 23.517565][ T377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 23.525545][ T377] RBP: ffffc9000096fb88 R08: ffffffff81d1390c R09: fffff5200012df75 [ 23.533503][ T377] R10: fffff5200012df75 R11: 1ffff9200012df74 R12: ffffffffffffffff [ 23.541474][ T377] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 23.549491][ T377] FS: 00005555556e7300(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 23.558460][ T377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.565055][ T377] CR2: 00007ffc1a278728 CR3: 00000001087b5000 CR4: 00000000003506a0 [ 23.573013][ T377] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 23.581013][ T377] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.589005][ T377] Kernel panic - not syncing: Fatal exception [ 23.595195][ T377] Kernel Offset: disabled [ 23.599507][ T377] Rebooting in 86400 seconds..