./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor755918416
<...>
Warning: Permanently added '10.128.0.195' (ECDSA) to the list of known hosts.
execve("./syz-executor755918416", ["./syz-executor755918416"], 0x7ffc00e021c0 /* 10 vars */) = 0
brk(NULL) = 0x555556d45000
brk(0x555556d45c40) = 0x555556d45c40
arch_prctl(ARCH_SET_FS, 0x555556d45300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor755918416", 4096) = 27
brk(0x555556d66c40) = 0x555556d66c40
brk(0x555556d67000) = 0x555556d67000
mprotect(0x7ffadff4f000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d455d0) = 3611
./strace-static-x86_64: Process 3611 attached
[pid 3611] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3611] setpgid(0, 0) = 0
[pid 3611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3611] write(3, "1000", 4) = 4
[pid 3611] close(3) = 0
[pid 3611] io_uring_setup(11470, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3
[pid 3611] mmap(0x20ee7000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20ee7000
[pid 3611] mmap(0x206d4000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x206d4000
[pid 3611] io_uring_enter(3, 5903, 0, 0, NULL, 0) = 1
[pid 3611] exit_group(0) = ?
[pid 3611] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3611, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d455d0) = 3613
./strace-static-x86_64: Process 3613 attached
[pid 3613] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3613] setpgid(0, 0) = 0
[pid 3613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3613] write(3, "1000", 4) = 4
[pid 3613] close(3) = 0
[pid 3613] io_uring_setup(11470, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3
[pid 3613] mmap(0x20ee7000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20ee7000
[pid 3613] mmap(0x206d4000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x206d4000
[pid 3613] io_uring_enter(3, 5903, 0, 0, NULL, 0) = 1
[pid 3613] exit_group(0) = ?
[pid 3613] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3613, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d455d0) = 3615
./strace-static-x86_64: Process 3615 attached
[pid 3615] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3615] setpgid(0, 0) = 0
[pid 3615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3615] write(3, "1000", 4) = 4
[pid 3615] close(3) = 0
[pid 3615] io_uring_setup(11470, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3
[pid 3615] mmap(0x20ee7000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20ee7000
[pid 3615] mmap(0x206d4000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x206d4000
[pid 3615] io_uring_enter(3, 5903, 0, 0, NULL, 0) = 1
[pid 3615] exit_group(0) = ?
[pid 3615] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3615, si_uid=0, si_status=0, si_utime=0, si_stime=1} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d455d0) = 3617
./strace-static-x86_64: Process 3617 attached
[pid 3617] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[ 50.216983][ T28] audit: type=1400 audit(1655817877.005:75): avc: denied { execmem } for pid=3610 comm="syz-executor755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 50.244017][ T28] audit: type=1400 audit(1655817877.015:76): avc: denied { create } for pid=3611 comm="syz-executor755" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[pid 3617] setpgid(0, 0) = 0
[pid 3617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3617] write(3, "1000", 4) = 4
[pid 3617] close(3) = 0
[pid 3617] io_uring_setup(11470, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3
[pid 3617] mmap(0x20ee7000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20ee7000
[pid 3617] mmap(0x206d4000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x206d4000
[pid 3617] io_uring_enter(3, 5903, 0, 0, NULL, 0) = 1
[pid 3617] exit_group(0) = ?
[pid 3617] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3617, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d455d0) = 3619
./strace-static-x86_64: Process 3619 attached
[pid 3619] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3619] setpgid(0, 0) = 0
[pid 3619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3619] write(3, "1000", 4) = 4
[pid 3619] close(3) = 0
[pid 3619] io_uring_setup(11470, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3
[pid 3619] mmap(0x20ee7000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20ee7000
[pid 3619] mmap(0x206d4000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x206d4000
[pid 3619] io_uring_enter(3, 5903, 0, 0, NULL, 0) = 1
[pid 3619] exit_group(0) = ?
[pid 3619] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3619, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d455d0) = 3621
./strace-static-x86_64: Process 3621 attached
[pid 3621] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3621] setpgid(0, 0) = 0
[pid 3621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3621] write(3, "1000", 4) = 4
[pid 3621] close(3) = 0
[pid 3621] io_uring_setup(11470, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3
[pid 3621] mmap(0x20ee7000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20ee7000
[pid 3621] mmap(0x206d4000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x206d4000
[pid 3621] io_uring_enter(3, 5903, 0, 0, NULL, 0) = 1
[pid 3621] exit_group(0) = ?
[pid 3621] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3621, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3623 attached
, child_tidptr=0x555556d455d0) = 3623
[pid 3623] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3623] setpgid(0, 0) = 0
[pid 3623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3623] write(3, "1000", 4) = 4
[pid 3623] close(3) = 0
[pid 3623] io_uring_setup(11470, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3
[pid 3623] mmap(0x20ee7000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20ee7000
[pid 3623] mmap(0x206d4000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x206d4000
[pid 3623] io_uring_enter(3, 5903, 0, 0, NULL, 0) = 1
[pid 3623] exit_group(0) = ?
[pid 3623] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3623, si_uid=0, si_status=0, si_utime=0, si_stime=1} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d455d0) = 3625
./strace-static-x86_64: Process 3625 attached
[pid 3625] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3625] setpgid(0, 0) = 0
[pid 3625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3625] write(3, "1000", 4) = 4
[pid 3625] close(3) = 0
[pid 3625] io_uring_setup(11470, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=524608}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3
[pid 3625] mmap(0x20ee7000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20ee7000
[pid 3625] mmap(0x206d4000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x206d4000
[pid 3625] io_uring_enter(3, 5903, 0, 0, NULL, 0) = 1
[ 50.244059][ T28] audit: type=1400 audit(1655817877.015:77): avc: denied { map } for pid=3611 comm="syz-executor755" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 50.244090][ T28] audit: type=1400 audit(1655817877.015:78): avc: denied { read write } for pid=3611 comm="syz-executor755" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[pid 3625] exit_group(0) = ?
[ 50.348868][ T3626] ==================================================================
[ 50.348879][ T3626] BUG: KASAN: null-ptr-deref in io_file_get_normal+0x351/0x3b0
[ 50.348907][ T3626] Write of size 4 at addr 0000000000000118 by task iou-wrk-3625/3626
[ 50.348924][ T3626]
[ 50.348928][ T3626] CPU: 1 PID: 3626 Comm: iou-wrk-3625 Not tainted 5.19.0-rc3-syzkaller-00027-g78ca55889a54 #0
[ 50.348950][ T3626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 50.348961][ T3626] Call Trace:
[ 50.348967][ T3626]
[ 50.348974][ T3626] dump_stack_lvl+0xcd/0x134
[ 50.349011][ T3626] kasan_report.cold+0x61/0x1c6
[ 50.349034][ T3626] ? io_file_get_normal+0x351/0x3b0
[ 50.349056][ T3626] kasan_check_range+0x13d/0x180
[ 50.349081][ T3626] io_file_get_normal+0x351/0x3b0
[ 50.349102][ T3626] io_issue_sqe+0x1a1a/0x91f0
[ 50.349123][ T3626] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 50.349148][ T3626] ? finish_task_switch.isra.0+0x2af/0xbb0
[ 50.349172][ T3626] ? __io_close_fixed.isra.0+0x4d0/0x4d0
[ 50.349194][ T3626] ? find_held_lock+0x2d/0x110
[ 50.349215][ T3626] ? io_worker_handle_work+0x53d/0x1ab0
[ 50.349237][ T3626] ? lock_downgrade+0x6e0/0x6e0
[ 50.349258][ T3626] ? do_raw_spin_lock+0x120/0x2a0
[ 50.349276][ T3626] io_wq_submit_work+0x287/0x740
[ 50.349297][ T3626] io_worker_handle_work+0xb1c/0x1ab0
[ 50.349321][ T3626] io_wqe_worker+0x637/0xdb0
[ 50.349348][ T3626] ? io_wqe_dec_running+0x240/0x240
[ 50.349369][ T3626] ? ret_from_fork+0x8/0x30
[ 50.349394][ T3626] ? lock_downgrade+0x6e0/0x6e0
[ 50.349415][ T3626] ? do_raw_spin_lock+0x120/0x2a0
[ 50.349432][ T3626] ? rwlock_bug.part.0+0x90/0x90
[ 50.349449][ T3626] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.349469][ T3626] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.349490][ T3626] ? io_wqe_dec_running+0x240/0x240
[ 50.349516][ T3626] ret_from_fork+0x1f/0x30
[ 50.349537][ T3626]
[ 50.349543][ T3626] ==================================================================
[ 50.349835][ T3626] Kernel panic - not syncing: panic_on_warn set ...
[ 50.545903][ T3626] CPU: 1 PID: 3626 Comm: iou-wrk-3625 Not tainted 5.19.0-rc3-syzkaller-00027-g78ca55889a54 #0
[ 50.556132][ T3626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 50.566188][ T3626] Call Trace:
[ 50.569470][ T3626]
[ 50.572396][ T3626] dump_stack_lvl+0xcd/0x134
[ 50.576981][ T3626] panic+0x2d7/0x64a
[ 50.580863][ T3626] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 50.586833][ T3626] ? preempt_schedule_common+0x59/0xc0
[ 50.592280][ T3626] ? io_file_get_normal+0x351/0x3b0
[ 50.597465][ T3626] ? preempt_schedule_thunk+0x16/0x18
[ 50.602849][ T3626] ? io_file_get_normal+0x351/0x3b0
[ 50.608054][ T3626] end_report.part.0+0x3f/0x7c
[ 50.612818][ T3626] kasan_report.cold+0x93/0x1c6
[ 50.617672][ T3626] ? io_file_get_normal+0x351/0x3b0
[ 50.622875][ T3626] kasan_check_range+0x13d/0x180
[ 50.627813][ T3626] io_file_get_normal+0x351/0x3b0
[ 50.632849][ T3626] io_issue_sqe+0x1a1a/0x91f0
[ 50.637534][ T3626] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 50.643528][ T3626] ? finish_task_switch.isra.0+0x2af/0xbb0
[ 50.649324][ T3626] ? __io_close_fixed.isra.0+0x4d0/0x4d0
[ 50.654945][ T3626] ? find_held_lock+0x2d/0x110
[ 50.659726][ T3626] ? io_worker_handle_work+0x53d/0x1ab0
[ 50.665306][ T3626] ? lock_downgrade+0x6e0/0x6e0
[ 50.670166][ T3626] ? do_raw_spin_lock+0x120/0x2a0
[ 50.675184][ T3626] io_wq_submit_work+0x287/0x740
[ 50.680150][ T3626] io_worker_handle_work+0xb1c/0x1ab0
[ 50.685544][ T3626] io_wqe_worker+0x637/0xdb0
[ 50.690129][ T3626] ? io_wqe_dec_running+0x240/0x240
[ 50.695318][ T3626] ? ret_from_fork+0x8/0x30
[ 50.699826][ T3626] ? lock_downgrade+0x6e0/0x6e0
[ 50.704678][ T3626] ? do_raw_spin_lock+0x120/0x2a0
[ 50.709705][ T3626] ? rwlock_bug.part.0+0x90/0x90
[ 50.714635][ T3626] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.719854][ T3626] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.725076][ T3626] ? io_wqe_dec_running+0x240/0x240
[ 50.730266][ T3626] ret_from_fork+0x1f/0x30
[ 50.734675][ T3626]
[ 50.737870][ T3626] Kernel Offset: disabled
[ 50.742190][ T3626] Rebooting in 86400 seconds..