./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1500770866 <...> Warning: Permanently added '10.128.0.64' (ECDSA) to the list of known hosts. execve("./syz-executor1500770866", ["./syz-executor1500770866"], 0x7fff13ef74f0 /* 10 vars */) = 0 brk(NULL) = 0x555556150000 brk(0x555556150c40) = 0x555556150c40 arch_prctl(ARCH_SET_FS, 0x555556150300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1500770866", 4096) = 28 brk(0x555556171c40) = 0x555556171c40 brk(0x555556172000) = 0x555556172000 mprotect(0x7fc254d90000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 getpid() = 3631 mkdir("./syzkaller.4TAk0I", 0700) = 0 chmod("./syzkaller.4TAk0I", 0777) = 0 chdir("./syzkaller.4TAk0I") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561505d0) = 3632 ./strace-static-x86_64: Process 3632 attached [pid 3632] chdir("./0") = 0 [pid 3632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3632] setpgid(0, 0) = 0 [pid 3632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3632] write(3, "1000", 4) = 4 [pid 3632] close(3) = 0 [pid 3632] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3632] memfd_create("syzkaller", 0) = 3 [pid 3632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc24c800000 [pid 3632] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216) = 16777216 [pid 3632] munmap(0x7fc24c800000, 16777216) = 0 [pid 3632] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 3632] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 3632] close(3) = 0 [pid 3632] mkdir("./file0", 0777) = 0 syzkaller login: [ 50.746764][ T3632] loop0: detected capacity change from 0 to 32768 [ 50.757791][ T3632] XFS: ikeep mount option is deprecated. [ 50.769239][ T3632] XFS (loop0): Mounting V5 Filesystem [pid 3632] mount("/dev/loop0", "./file0", "xfs", MS_SYNCHRONOUS|MS_SILENT, "gqnoenforce,pqnoenforce,ikeep,,nouuid") = 0 [pid 3632] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 3632] chdir("./file0") = 0 [pid 3632] ioctl(4, LOOP_CLR_FD) = 0 [pid 3632] close(4) = 0 [pid 3632] open("./file0", O_RDONLY) = 4 [pid 3632] dup2(4, 4) = 4 [pid 3632] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5 [pid 3632] write(5, "7", 1) = 1 [ 50.793590][ T3632] XFS (loop0): Ending clean mount [ 50.802398][ T3632] XFS (loop0): Quotacheck needed: Please wait. [ 50.824109][ T3632] XFS (loop0): Quotacheck: Done. [ 50.843115][ T3632] FAULT_INJECTION: forcing a failure. [ 50.843115][ T3632] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.857580][ T3632] CPU: 1 PID: 3632 Comm: syz-executor150 Not tainted 6.1.0-rc6-syzkaller-00375-gcf562a45a0d5 #0 [ 50.868025][ T3632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 50.878161][ T3632] Call Trace: [ 50.881429][ T3632] [ 50.884525][ T3632] dump_stack_lvl+0x1b1/0x28e [ 50.889212][ T3632] ? nf_tcp_handle_invalid+0x62e/0x62e [ 50.894655][ T3632] ? panic+0x710/0x710 [ 50.898713][ T3632] ? __lock_acquire+0x1f60/0x1f60 [ 50.903742][ T3632] ? rcu_read_lock_sched_held+0x87/0x110 [ 50.909447][ T3632] should_fail_ex+0x395/0x4c0 [ 50.914280][ T3632] _copy_from_user+0x2b/0x160 [ 50.918971][ T3632] do_vfs_ioctl+0xa88/0x29a0 [ 50.923565][ T3632] ? __x64_compat_sys_ioctl+0x80/0x80 [ 50.929022][ T3632] ? __lock_acquire+0x1f60/0x1f60 [ 50.934040][ T3632] ? slab_free_freelist_hook+0x12e/0x1a0 [ 50.939750][ T3632] ? tomoyo_path_number_perm+0x59e/0x760 [ 50.945383][ T3632] ? __kmem_cache_free+0x71/0x110 [ 50.950401][ T3632] ? tomoyo_path_number_perm+0x607/0x760 [ 50.956044][ T3632] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 50.961515][ T3632] ? _raw_spin_lock_irqsave+0x100/0x100 [ 50.967084][ T3632] ? do_notify_parent+0xe00/0xe00 [ 50.972117][ T3632] ? bpf_lsm_file_ioctl+0x5/0x10 [ 50.977050][ T3632] ? security_file_ioctl+0x9d/0xb0 [ 50.982162][ T3632] __se_sys_ioctl+0x83/0x170 [ 50.986759][ T3632] do_syscall_64+0x3d/0xb0 [ 50.991183][ T3632] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.997070][ T3632] RIP: 0033:0x7fc254d18a59 [ 51.001568][ T3632] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.021279][ T3632] RSP: 002b:00007ffc3c72d968 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.029690][ T3632] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fc254d18a59 [ 51.037674][ T3632] RDX: 0000000020000140 RSI: 00000000401c5820 RDI: 0000000000000004 [pid 3632] ioctl(4, FS_IOC_FSSETXATTR, {fsx_xflags=0, fsx_extsize=0, fsx_projid=0xfffffffe, fsx_cowextsize=0}) = -1 EFAULT (Bad address) [pid 3632] exit_group(0) = ? [pid 3632] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3632, si_uid=0, si_status=0, si_utime=4, si_stime=20} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555556151620 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./0/binderfs") = 0 [ 51.045651][ T3632] RBP: 00007ffc3c72d990 R08: 0000000000000001 R09: 00007ffc3c72d9a0 [ 51.053805][ T3632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 51.061874][ T3632] R13: 00007ffc3c72d9d0 R14: 00007ffc3c72d9b0 R15: 0000000000000000 [ 51.070134][ T3632] [ 51.085859][ T3631] XFS (loop0): Unmounting Filesystem umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556159660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556159660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file0") = 0 getdents64(3, 0x555556151620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561505d0) = 3642 ./strace-static-x86_64: Process 3642 attached [pid 3642] chdir("./1") = 0 [pid 3642] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3642] setpgid(0, 0) = 0 [pid 3642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3642] write(3, "1000", 4) = 4 [pid 3642] close(3) = 0 [pid 3642] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3642] memfd_create("syzkaller", 0) = 3 [pid 3642] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc24c800000 [pid 3642] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216) = 16777216 [pid 3642] munmap(0x7fc24c800000, 16777216) = 0 [pid 3642] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 3642] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 3642] close(3) = 0 [pid 3642] mkdir("./file0", 0777) = 0 [ 51.357514][ T3642] loop0: detected capacity change from 0 to 32768 [ 51.368196][ T3642] XFS: ikeep mount option is deprecated. [ 51.377263][ T3642] XFS (loop0): Mounting V5 Filesystem [pid 3642] mount("/dev/loop0", "./file0", "xfs", MS_SYNCHRONOUS|MS_SILENT, "gqnoenforce,pqnoenforce,ikeep,,nouuid") = 0 [pid 3642] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 3642] chdir("./file0") = 0 [pid 3642] ioctl(4, LOOP_CLR_FD) = 0 [pid 3642] close(4) = 0 [pid 3642] open("./file0", O_RDONLY) = 4 [pid 3642] dup2(4, 4) = 4 [pid 3642] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5 [pid 3642] write(5, "7", 1) = 1 [ 51.399999][ T3642] XFS (loop0): Ending clean mount [ 51.407382][ T3642] XFS (loop0): Quotacheck needed: Please wait. [ 51.427544][ T3642] XFS (loop0): Quotacheck: Done. [ 51.455259][ T3642] FAULT_INJECTION: forcing a failure. [ 51.455259][ T3642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.469688][ T3642] CPU: 0 PID: 3642 Comm: syz-executor150 Not tainted 6.1.0-rc6-syzkaller-00375-gcf562a45a0d5 #0 [ 51.480130][ T3642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 51.490171][ T3642] Call Trace: [ 51.493871][ T3642] [ 51.496879][ T3642] dump_stack_lvl+0x1b1/0x28e [ 51.501553][ T3642] ? nf_tcp_handle_invalid+0x62e/0x62e [ 51.506993][ T3642] ? panic+0x710/0x710 [ 51.511047][ T3642] ? __lock_acquire+0x1f60/0x1f60 [ 51.516055][ T3642] ? rcu_read_lock_sched_held+0x87/0x110 [ 51.521696][ T3642] should_fail_ex+0x395/0x4c0 [ 51.526376][ T3642] _copy_from_user+0x2b/0x160 [ 51.531037][ T3642] do_vfs_ioctl+0xa88/0x29a0 [ 51.535710][ T3642] ? __x64_compat_sys_ioctl+0x80/0x80 [ 51.541156][ T3642] ? __lock_acquire+0x1f60/0x1f60 [ 51.546165][ T3642] ? slab_free_freelist_hook+0x12e/0x1a0 [ 51.551797][ T3642] ? tomoyo_path_number_perm+0x59e/0x760 [ 51.557725][ T3642] ? __kmem_cache_free+0x71/0x110 [ 51.562766][ T3642] ? tomoyo_path_number_perm+0x607/0x760 [ 51.568400][ T3642] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 51.573863][ T3642] ? _raw_spin_lock_irqsave+0x100/0x100 [ 51.579442][ T3642] ? do_notify_parent+0xe00/0xe00 [ 51.584473][ T3642] ? bpf_lsm_file_ioctl+0x5/0x10 [ 51.589410][ T3642] ? security_file_ioctl+0x9d/0xb0 [ 51.594568][ T3642] __se_sys_ioctl+0x83/0x170 [ 51.599251][ T3642] do_syscall_64+0x3d/0xb0 [ 51.603664][ T3642] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.609643][ T3642] RIP: 0033:0x7fc254d18a59 [ 51.614055][ T3642] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.633763][ T3642] RSP: 002b:00007ffc3c72d968 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.642172][ T3642] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fc254d18a59 [pid 3642] ioctl(4, FS_IOC_FSSETXATTR, {fsx_xflags=0, fsx_extsize=0, fsx_projid=0xfffffffe, fsx_cowextsize=0}) = -1 EFAULT (Bad address) [pid 3642] exit_group(0) = ? [pid 3642] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3642, si_uid=0, si_status=0, si_utime=3, si_stime=21} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555556151620 /* 4 entries */, 32768) = 112 umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./1/binderfs") = 0 [ 51.650138][ T3642] RDX: 0000000020000140 RSI: 00000000401c5820 RDI: 0000000000000004 [ 51.658106][ T3642] RBP: 00007ffc3c72d990 R08: 0000000000000001 R09: 00007ffc3c72d9a0 [ 51.666073][ T3642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 51.674037][ T3642] R13: 00007ffc3c72d9d0 R14: 00007ffc3c72d9b0 R15: 0000000000000001 [ 51.682103][ T3642] [ 51.698295][ T3631] XFS (loop0): Unmounting Filesystem umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556159660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556159660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/file0") = 0 getdents64(3, 0x555556151620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561505d0) = 3651 ./strace-static-x86_64: Process 3651 attached [pid 3651] chdir("./2") = 0 [pid 3651] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3651] setpgid(0, 0) = 0 [pid 3651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3651] write(3, "1000", 4) = 4 [pid 3651] close(3) = 0 [pid 3651] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3651] memfd_create("syzkaller", 0) = 3 [pid 3651] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc24c800000 [pid 3651] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216) = 16777216 [pid 3651] munmap(0x7fc24c800000, 16777216) = 0 [pid 3651] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 3651] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 3651] close(3) = 0 [pid 3651] mkdir("./file0", 0777) = 0 [ 51.966234][ T3651] loop0: detected capacity change from 0 to 32768 [ 51.977428][ T3651] XFS: ikeep mount option is deprecated. [ 51.986358][ T3651] XFS (loop0): Mounting V5 Filesystem [ 52.005944][ T3651] XFS (loop0): Ending clean mount [pid 3651] mount("/dev/loop0", "./file0", "xfs", MS_SYNCHRONOUS|MS_SILENT, "gqnoenforce,pqnoenforce,ikeep,,nouuid") = 0 [pid 3651] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 3651] chdir("./file0") = 0 [pid 3651] ioctl(4, LOOP_CLR_FD) = 0 [pid 3651] close(4) = 0 [pid 3651] open("./file0", O_RDONLY) = 4 [pid 3651] dup2(4, 4) = 4 [pid 3651] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5 [pid 3651] write(5, "7", 1) = 1 [pid 3651] ioctl(4, FS_IOC_FSSETXATTR, {fsx_xflags=0, fsx_extsize=0, fsx_projid=0xfffffffe, fsx_cowextsize=0}) = 0 [pid 3651] exit_group(0) = ? [pid 3651] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3651, si_uid=0, si_status=0, si_utime=1, si_stime=19} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555556151620 /* 4 entries */, 32768) = 112 umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./2/binderfs") = 0 [ 52.012883][ T3651] XFS (loop0): Quotacheck needed: Please wait. [ 52.027550][ T3651] XFS (loop0): Quotacheck: Done. [ 52.070233][ T3631] XFS (loop0): Unmounting Filesystem umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555556159660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555556159660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/file0") = 0 getdents64(3, 0x555556151620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561505d0) = 3660 ./strace-static-x86_64: Process 3660 attached [pid 3660] chdir("./3") = 0 [pid 3660] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3660] setpgid(0, 0) = 0 [pid 3660] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3660] write(3, "1000", 4) = 4 [pid 3660] close(3) = 0 [pid 3660] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3660] memfd_create("syzkaller", 0) = 3 [pid 3660] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc24c800000 [pid 3660] write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4\x96\xe0\x5e\x54\x0d\x4c\x72\xb5\x91\x04\xd7\x9d\x8b\x4e\xeb\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x11\x40\x00\x00\x00\x00\x00\x00\x11\x41\x00\x00\x00\x00\x00\x00\x11\x42\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x04\x3e"..., 16777216) = 16777216 [pid 3660] munmap(0x7fc24c800000, 16777216) = 0 [pid 3660] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 3660] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 3660] close(3) = 0 [pid 3660] mkdir("./file0", 0777) = 0 [ 52.337998][ T3660] loop0: detected capacity change from 0 to 32768 [ 52.347856][ T3660] XFS: ikeep mount option is deprecated. [ 52.356338][ T3660] XFS (loop0): Mounting V5 Filesystem [ 52.376376][ T3660] XFS (loop0): Ending clean mount [pid 3660] mount("/dev/loop0", "./file0", "xfs", MS_SYNCHRONOUS|MS_SILENT, "gqnoenforce,pqnoenforce,ikeep,,nouuid") = 0 [pid 3660] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 3660] chdir("./file0") = 0 [pid 3660] ioctl(4, LOOP_CLR_FD) = 0 [pid 3660] close(4) = 0 [pid 3660] open("./file0", O_RDONLY) = 4 [pid 3660] dup2(4, 4) = 4 [pid 3660] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5 [pid 3660] write(5, "7", 1) = 1 [ 52.383039][ T3660] XFS (loop0): Quotacheck needed: Please wait. [ 52.400755][ T3660] XFS (loop0): Quotacheck: Done. [ 52.423108][ T3660] FAULT_INJECTION: forcing a failure. [ 52.423108][ T3660] name failslab, interval 1, probability 0, space 0, times 0 [ 52.436510][ T3660] CPU: 0 PID: 3660 Comm: syz-executor150 Not tainted 6.1.0-rc6-syzkaller-00375-gcf562a45a0d5 #0 [ 52.447033][ T3660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 52.457084][ T3660] Call Trace: [ 52.460366][ T3660] [ 52.463396][ T3660] dump_stack_lvl+0x1b1/0x28e [ 52.468095][ T3660] ? nf_tcp_handle_invalid+0x62e/0x62e [ 52.473542][ T3660] ? panic+0x710/0x710 [ 52.477869][ T3660] ? __might_sleep+0xc0/0xc0 [ 52.482452][ T3660] ? rcu_read_lock_sched_held+0x87/0x110 [ 52.488080][ T3660] should_fail_ex+0x395/0x4c0 [ 52.492755][ T3660] ? radix_tree_node_alloc+0x8b/0x3b0 [ 52.498118][ T3660] should_failslab+0x5/0x20 [ 52.502614][ T3660] kmem_cache_alloc+0x68/0x300 [ 52.507387][ T3660] ? __mutex_lock_common+0x45f/0x26e0 [ 52.512773][ T3660] radix_tree_node_alloc+0x8b/0x3b0 [ 52.517986][ T3660] ? _atomic_dec_and_lock+0x85/0x110 [ 52.523358][ T3660] radix_tree_extend+0x15c/0x5d0 [ 52.528314][ T3660] radix_tree_insert+0x158/0x680 [ 52.533267][ T3660] xfs_qm_dqget_cache_insert+0x37/0x110 [ 52.538831][ T3660] xfs_qm_dqget+0x2bd/0x4f0 [ 52.543335][ T3660] ? xfs_dquot_to_disk+0x5f0/0x5f0 [ 52.548443][ T3660] ? trace_xfs_iunlock+0x103/0x300 [ 52.553724][ T3660] xfs_qm_vop_dqalloc+0xa02/0xca0 [ 52.558869][ T3660] ? xfs_qm_quotacheck+0x640/0x640 [ 52.564006][ T3660] ? rcu_read_lock_sched_held+0x87/0x110 [ 52.569644][ T3660] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 52.575631][ T3660] ? xfs_iunlock+0x14e/0x160 [ 52.580303][ T3660] xfs_fileattr_set+0x33a/0x1520 [ 52.585264][ T3660] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 52.591252][ T3660] ? up_read+0x20/0x20 [ 52.595306][ T3660] ? make_kprojid+0x20d/0x730 [ 52.599973][ T3660] ? xfs_fill_fsxattr+0x690/0x690 [ 52.604987][ T3660] ? from_kgid_munged+0x720/0x720 [ 52.610012][ T3660] ? trace_xfs_iunlock+0x103/0x300 [ 52.615132][ T3660] ? fscrypt_prepare_setflags+0x5c/0x220 [ 52.620778][ T3660] vfs_fileattr_set+0x8be/0xd20 [ 52.625628][ T3660] ? copy_fsxattr_to_user+0x390/0x390 [ 52.630999][ T3660] do_vfs_ioctl+0x168d/0x29a0 [ 52.635675][ T3660] ? __x64_compat_sys_ioctl+0x80/0x80 [ 52.641041][ T3660] ? __lock_acquire+0x1f60/0x1f60 [ 52.646064][ T3660] ? slab_free_freelist_hook+0x12e/0x1a0 [ 52.651969][ T3660] ? tomoyo_path_number_perm+0x59e/0x760 [ 52.657591][ T3660] ? __kmem_cache_free+0x71/0x110 [ 52.662619][ T3660] ? tomoyo_path_number_perm+0x607/0x760 [ 52.668260][ T3660] ? _raw_spin_lock_irqsave+0x100/0x100 [ 52.673818][ T3660] ? do_notify_parent+0xe00/0xe00 [ 52.678860][ T3660] ? bpf_lsm_file_ioctl+0x5/0x10 [ 52.683805][ T3660] ? security_file_ioctl+0x9d/0xb0 [ 52.688916][ T3660] __se_sys_ioctl+0x83/0x170 [ 52.693499][ T3660] do_syscall_64+0x3d/0xb0 [ 52.697908][ T3660] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.703794][ T3660] RIP: 0033:0x7fc254d18a59 [ 52.708211][ T3660] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.727812][ T3660] RSP: 002b:00007ffc3c72d968 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.736226][ T3660] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fc254d18a59 [ 52.744193][ T3660] RDX: 0000000020000140 RSI: 00000000401c5820 RDI: 0000000000000004 [ 52.752159][ T3660] RBP: 00007ffc3c72d990 R08: 0000000000000001 R09: 00007ffc3c72d9a0 [ 52.760319][ T3660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 52.768282][ T3660] R13: 00007ffc3c72d9d0 R14: 00007ffc3c72d9b0 R15: 0000000000000003 [ 52.776264][ T3660] [ 52.780183][ T3660] ------------[ cut here ]------------ [ 52.786079][ T3660] WARNING: CPU: 0 PID: 3660 at fs/xfs/xfs_dquot.c:801 xfs_qm_dqget_cache_insert+0xff/0x110 [ 52.796199][ T3660] Modules linked in: [ 52.800102][ T3660] CPU: 0 PID: 3660 Comm: syz-executor150 Not tainted 6.1.0-rc6-syzkaller-00375-gcf562a45a0d5 #0 [ 52.810677][ T3660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 52.820804][ T3660] RIP: 0010:xfs_qm_dqget_cache_insert+0xff/0x110 [ 52.827197][ T3660] Code: 38 c1 7c a3 48 89 ef e8 cf 0b a5 fe eb 99 44 89 e1 80 e1 07 80 c1 03 38 c1 7c a8 4c 89 e7 e8 48 0b a5 fe eb 9e e8 91 f1 50 fe <0f> 0b eb b8 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 41 57 41 56 [ 52.846872][ T3660] RSP: 0018:ffffc90003e8f5b0 EFLAGS: 00010293 [ 52.852987][ T3660] RAX: ffffffff8339a65f RBX: 00000000fffffffe RCX: ffff88807da78000 [ 52.861026][ T3660] RDX: 0000000000000000 RSI: ffffffff8d57c320 RDI: 00000000fffffff4 [ 52.869080][ T3660] RBP: ffff88807578c680 R08: 0000000000000005 R09: ffffffff8339a5a8 [ 52.877109][ T3660] R10: 0000000000000002 R11: ffff88807da78000 R12: ffff88802069b000 [ 52.885171][ T3660] R13: ffff88807578c680 R14: ffff88802069b0f0 R15: 00000000fffffff4 [ 52.893542][ T3660] FS: 0000555556150300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 52.902580][ T3660] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.909196][ T3660] CR2: 00007fc254cf04a0 CR3: 0000000021188000 CR4: 00000000003506f0 [ 52.917860][ T3660] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.926009][ T3660] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.934229][ T3660] Call Trace: [ 52.937520][ T3660] [ 52.940447][ T3660] xfs_qm_dqget+0x2bd/0x4f0 [ 52.945072][ T3660] ? xfs_dquot_to_disk+0x5f0/0x5f0 [ 52.950292][ T3660] ? trace_xfs_iunlock+0x103/0x300 [ 52.955564][ T3660] xfs_qm_vop_dqalloc+0xa02/0xca0 [ 52.960619][ T3660] ? xfs_qm_quotacheck+0x640/0x640 [ 52.965816][ T3660] ? rcu_read_lock_sched_held+0x87/0x110 [ 52.971515][ T3660] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 52.977555][ T3660] ? xfs_iunlock+0x14e/0x160 [ 52.982489][ T3660] xfs_fileattr_set+0x33a/0x1520 [ 52.987438][ T3660] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 52.993598][ T3660] ? up_read+0x20/0x20 [ 52.997675][ T3660] ? make_kprojid+0x20d/0x730 [ 53.002452][ T3660] ? xfs_fill_fsxattr+0x690/0x690 [ 53.007673][ T3660] ? from_kgid_munged+0x720/0x720 [ 53.012749][ T3660] ? trace_xfs_iunlock+0x103/0x300 [ 53.017889][ T3660] ? fscrypt_prepare_setflags+0x5c/0x220 [ 53.023739][ T3660] vfs_fileattr_set+0x8be/0xd20 [ 53.028631][ T3660] ? copy_fsxattr_to_user+0x390/0x390 [ 53.034301][ T3660] do_vfs_ioctl+0x168d/0x29a0 [ 53.039001][ T3660] ? __x64_compat_sys_ioctl+0x80/0x80 [ 53.044450][ T3660] ? __lock_acquire+0x1f60/0x1f60 [ 53.049487][ T3660] ? slab_free_freelist_hook+0x12e/0x1a0 [ 53.055163][ T3660] ? tomoyo_path_number_perm+0x59e/0x760 [ 53.060814][ T3660] ? __kmem_cache_free+0x71/0x110 [ 53.065903][ T3660] ? tomoyo_path_number_perm+0x607/0x760 [ 53.071697][ T3660] ? _raw_spin_lock_irqsave+0x100/0x100 [ 53.077434][ T3660] ? do_notify_parent+0xe00/0xe00 [ 53.082584][ T3660] ? bpf_lsm_file_ioctl+0x5/0x10 [ 53.087661][ T3660] ? security_file_ioctl+0x9d/0xb0 [ 53.092836][ T3660] __se_sys_ioctl+0x83/0x170 [ 53.097455][ T3660] do_syscall_64+0x3d/0xb0 [ 53.101985][ T3660] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.107890][ T3660] RIP: 0033:0x7fc254d18a59 [ 53.112344][ T3660] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 53.132007][ T3660] RSP: 002b:00007ffc3c72d968 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.140429][ T3660] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fc254d18a59 [ 53.148534][ T3660] RDX: 0000000020000140 RSI: 00000000401c5820 RDI: 0000000000000004 [ 53.156631][ T3660] RBP: 00007ffc3c72d990 R08: 0000000000000001 R09: 00007ffc3c72d9a0 [ 53.164776][ T3660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 53.172842][ T3660] R13: 00007ffc3c72d9d0 R14: 00007ffc3c72d9b0 R15: 0000000000000003 [ 53.180850][ T3660] [ 53.183971][ T3660] Kernel panic - not syncing: panic_on_warn set ... [ 53.190567][ T3660] CPU: 0 PID: 3660 Comm: syz-executor150 Not tainted 6.1.0-rc6-syzkaller-00375-gcf562a45a0d5 #0 [ 53.200974][ T3660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 53.211025][ T3660] Call Trace: [ 53.214314][ T3660] [ 53.217249][ T3660] dump_stack_lvl+0x1b1/0x28e [ 53.221977][ T3660] ? nf_tcp_handle_invalid+0x62e/0x62e [ 53.227439][ T3660] ? panic+0x710/0x710 [ 53.231535][ T3660] ? vscnprintf+0x59/0x80 [ 53.235890][ T3660] ? xfs_qm_dqget_cache_insert+0xa0/0x110 [ 53.241988][ T3660] panic+0x2d6/0x710 [ 53.245890][ T3660] ? __warn+0x131/0x220 [ 53.250066][ T3660] ? memcpy_page_flushcache+0xfc/0xfc [ 53.255456][ T3660] ? xfs_qm_dqget_cache_insert+0xff/0x110 [ 53.261263][ T3660] __warn+0x1fa/0x220 [ 53.265269][ T3660] ? xfs_qm_dqget_cache_insert+0xff/0x110 [ 53.270980][ T3660] report_bug+0x1b3/0x2d0 [ 53.275304][ T3660] handle_bug+0x3d/0x70 [ 53.279444][ T3660] exc_invalid_op+0x16/0x40 [ 53.283944][ T3660] asm_exc_invalid_op+0x16/0x20 [ 53.288799][ T3660] RIP: 0010:xfs_qm_dqget_cache_insert+0xff/0x110 [ 53.295124][ T3660] Code: 38 c1 7c a3 48 89 ef e8 cf 0b a5 fe eb 99 44 89 e1 80 e1 07 80 c1 03 38 c1 7c a8 4c 89 e7 e8 48 0b a5 fe eb 9e e8 91 f1 50 fe <0f> 0b eb b8 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 41 57 41 56 [ 53.314725][ T3660] RSP: 0018:ffffc90003e8f5b0 EFLAGS: 00010293 [ 53.320789][ T3660] RAX: ffffffff8339a65f RBX: 00000000fffffffe RCX: ffff88807da78000 [ 53.328771][ T3660] RDX: 0000000000000000 RSI: ffffffff8d57c320 RDI: 00000000fffffff4 [ 53.336746][ T3660] RBP: ffff88807578c680 R08: 0000000000000005 R09: ffffffff8339a5a8 [ 53.344732][ T3660] R10: 0000000000000002 R11: ffff88807da78000 R12: ffff88802069b000 [ 53.352711][ T3660] R13: ffff88807578c680 R14: ffff88802069b0f0 R15: 00000000fffffff4 [ 53.360696][ T3660] ? xfs_qm_dqget_cache_insert+0x48/0x110 [ 53.366422][ T3660] ? xfs_qm_dqget_cache_insert+0xff/0x110 [ 53.372153][ T3660] xfs_qm_dqget+0x2bd/0x4f0 [ 53.376661][ T3660] ? xfs_dquot_to_disk+0x5f0/0x5f0 [ 53.381771][ T3660] ? trace_xfs_iunlock+0x103/0x300 [ 53.386881][ T3660] xfs_qm_vop_dqalloc+0xa02/0xca0 [ 53.391917][ T3660] ? xfs_qm_quotacheck+0x640/0x640 [ 53.397031][ T3660] ? rcu_read_lock_sched_held+0x87/0x110 [ 53.402657][ T3660] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 53.408716][ T3660] ? xfs_iunlock+0x14e/0x160 [ 53.413311][ T3660] xfs_fileattr_set+0x33a/0x1520 [ 53.418247][ T3660] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 53.424393][ T3660] ? up_read+0x20/0x20 [ 53.428455][ T3660] ? make_kprojid+0x20d/0x730 [ 53.433129][ T3660] ? xfs_fill_fsxattr+0x690/0x690 [ 53.438147][ T3660] ? from_kgid_munged+0x720/0x720 [ 53.443166][ T3660] ? trace_xfs_iunlock+0x103/0x300 [ 53.448274][ T3660] ? fscrypt_prepare_setflags+0x5c/0x220 [ 53.453922][ T3660] vfs_fileattr_set+0x8be/0xd20 [ 53.458789][ T3660] ? copy_fsxattr_to_user+0x390/0x390 [ 53.464179][ T3660] do_vfs_ioctl+0x168d/0x29a0 [ 53.468877][ T3660] ? __x64_compat_sys_ioctl+0x80/0x80 [ 53.474253][ T3660] ? __lock_acquire+0x1f60/0x1f60 [ 53.479289][ T3660] ? slab_free_freelist_hook+0x12e/0x1a0 [ 53.484929][ T3660] ? tomoyo_path_number_perm+0x59e/0x760 [ 53.490648][ T3660] ? __kmem_cache_free+0x71/0x110 [ 53.495689][ T3660] ? tomoyo_path_number_perm+0x607/0x760 [ 53.501350][ T3660] ? _raw_spin_lock_irqsave+0x100/0x100 [ 53.506932][ T3660] ? do_notify_parent+0xe00/0xe00 [ 53.511962][ T3660] ? bpf_lsm_file_ioctl+0x5/0x10 [ 53.516905][ T3660] ? security_file_ioctl+0x9d/0xb0 [ 53.522019][ T3660] __se_sys_ioctl+0x83/0x170 [ 53.526616][ T3660] do_syscall_64+0x3d/0xb0 [ 53.531027][ T3660] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.536914][ T3660] RIP: 0033:0x7fc254d18a59 [ 53.541326][ T3660] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 53.560926][ T3660] RSP: 002b:00007ffc3c72d968 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.569332][ T3660] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fc254d18a59 [ 53.577295][ T3660] RDX: 0000000020000140 RSI: 00000000401c5820 RDI: 0000000000000004 [ 53.585262][ T3660] RBP: 00007ffc3c72d990 R08: 0000000000000001 R09: 00007ffc3c72d9a0 [ 53.593225][ T3660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 53.601190][ T3660] R13: 00007ffc3c72d9d0 R14: 00007ffc3c72d9b0 R15: 0000000000000003 [ 53.609170][ T3660] [ 53.612330][ T3660] Kernel Offset: disabled [ 53.616717][ T3660] Rebooting in 86400 seconds..