./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2185825462 <...> forked to background, child pid 4640 no interfaces have a carrier [ 29.051233][ T4641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.060844][ T4641] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.12' (ECDSA) to the list of known hosts. execve("./syz-executor2185825462", ["./syz-executor2185825462"], 0x7ffcf6c5aa80 /* 10 vars */) = 0 brk(NULL) = 0x555555f64000 brk(0x555555f64c40) = 0x555555f64c40 arch_prctl(ARCH_SET_FS, 0x555555f64300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2185825462", 4096) = 28 brk(0x555555f85c40) = 0x555555f85c40 brk(0x555555f86000) = 0x555555f86000 mprotect(0x7fa81e7bc000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 getpid() = 5061 mkdir("./syzkaller.YaJVqR", 0700) = 0 chmod("./syzkaller.YaJVqR", 0777) = 0 chdir("./syzkaller.YaJVqR") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555f645d0) = 5062 ./strace-static-x86_64: Process 5062 attached [pid 5062] chdir("./0") = 0 [pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] setpgid(0, 0) = 0 [pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] write(3, "1000", 4) = 4 [pid 5062] close(3) = 0 [pid 5062] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] memfd_create("syzkaller", 0) = 3 [pid 5062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa8162e1000 [pid 5062] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5062] munmap(0x7fa8162e1000, 2097152) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5062] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5062] close(3) = 0 [pid 5062] mkdir("./file0", 0777) = 0 syzkaller login: [ 55.753723][ T5062] loop0: detected capacity change from 0 to 4096 [ 55.763178][ T5062] ======================================================= [ 55.763178][ T5062] WARNING: The mand mount option has been deprecated and [ 55.763178][ T5062] and is ignored by this kernel. Remove the mand [ 55.763178][ T5062] option from the mount to silence this warning. [ 55.763178][ T5062] ======================================================= [pid 5062] mount("/dev/loop0", "./file0", "ntfs3", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_MANDLOCK|MS_REC|MS_LAZYTIME, "umask=00000000000000000000005,showmeta,iocharset=cp857,force,nohidden,discard,sparse,sparse,nohidden"...) = 0 [pid 5062] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] chdir("./file0") = 0 [pid 5062] ioctl(4, LOOP_CLR_FD) = 0 [pid 5062] close(4) = 0 [pid 5062] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5062] write(4, "14", 2) = 2 [ 55.799717][ T5062] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 55.823093][ T5062] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 55.843686][ T5062] FAULT_INJECTION: forcing a failure. [ 55.843686][ T5062] name failslab, interval 1, probability 0, space 0, times 1 [ 55.856615][ T5062] CPU: 1 PID: 5062 Comm: syz-executor218 Not tainted 6.2.0-rc4-syzkaller-00467-gf67144022885 #0 [ 55.867033][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 55.877095][ T5062] Call Trace: [ 55.880402][ T5062] [ 55.883381][ T5062] dump_stack_lvl+0xd1/0x138 [ 55.888044][ T5062] should_fail_ex.cold+0x5/0xa [ 55.892845][ T5062] should_failslab+0x9/0x20 [ 55.897365][ T5062] __kmem_cache_alloc_node+0x5b/0x430 [ 55.902757][ T5062] ? tomoyo_init_log+0x18e/0x1ec0 [ 55.907822][ T5062] kmalloc_trace+0x26/0x60 [ 55.912310][ T5062] tomoyo_init_log+0x18e/0x1ec0 [ 55.917214][ T5062] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 55.923130][ T5062] ? vsnprintf+0x4cd/0x16b0 [ 55.927660][ T5062] ? common_lsm_audit+0x1e90/0x1e90 [ 55.932878][ T5062] ? tomoyo_profile+0x46/0x60 [ 55.937569][ T5062] ? tomoyo_domain_quota_is_ok+0x300/0x580 [ 55.943399][ T5062] tomoyo_supervisor+0x354/0xf10 [ 55.948355][ T5062] ? tomoyo_profile+0x60/0x60 [ 55.953044][ T5062] ? lockdep_hardirqs_on+0x7d/0x100 [ 55.958264][ T5062] ? tomoyo_path_matches_pattern+0x114/0x290 [ 55.964282][ T5062] ? tomoyo_check_path_number_acl+0xa9/0x320 [ 55.970277][ T5062] tomoyo_path_number_perm+0x410/0x570 [ 55.975767][ T5062] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 55.981772][ T5062] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 55.987636][ T5062] ? do_raw_spin_unlock+0x175/0x230 [ 55.992848][ T5062] ? _raw_spin_unlock+0x28/0x40 [ 55.997734][ T5062] ? d_splice_alias+0x4e1/0xd40 [ 56.002595][ T5062] ? hook_path_mkdir+0x44d/0x530 [ 56.007579][ T5062] ? d_alloc+0x1c0/0x240 [ 56.011828][ T5062] tomoyo_path_mkdir+0x9c/0xe0 [ 56.016615][ T5062] ? tomoyo_file_ioctl+0x30/0x30 [ 56.021591][ T5062] security_path_mkdir+0xec/0x160 [ 56.026616][ T5062] do_mkdirat+0x14d/0x2f0 [ 56.030945][ T5062] ? __ia32_sys_mknod+0xb0/0xb0 [ 56.035795][ T5062] ? getname_flags.part.0+0x1dd/0x4f0 [ 56.041168][ T5062] __x64_sys_mkdir+0xf6/0x140 [ 56.045862][ T5062] do_syscall_64+0x39/0xb0 [ 56.050398][ T5062] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.056326][ T5062] RIP: 0033:0x7fa81e72ddd7 [ 56.060753][ T5062] Code: 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.080360][ T5062] RSP: 002b:00007fff1108b0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000053 [ 56.088808][ T5062] RAX: ffffffffffffffda RBX: 0000555555f642c0 RCX: 00007fa81e72ddd7 [ 56.096786][ T5062] RDX: 0000000000030800 RSI: 00000000000001ff RDI: 0000000020000100 [pid 5062] mkdir("./bus", 0777) = 0 [pid 5062] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5062] +++ killed by SIGSEGV +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5062, si_uid=0, si_status=SIGSEGV, si_utime=0, si_stime=10 /* 0.10 s */} --- umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555f65620 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./0/binderfs") = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555f6d660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555f6d660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file0") = 0 getdents64(3, 0x555555f65620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555f645d0) = 5064 ./strace-static-x86_64: Process 5064 attached [pid 5064] chdir("./1") = 0 [pid 5064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5064] setpgid(0, 0) = 0 [pid 5064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5064] write(3, "1000", 4) = 4 [pid 5064] close(3) = 0 [pid 5064] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5064] memfd_create("syzkaller", 0) = 3 [pid 5064] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa8162e1000 [ 56.104767][ T5062] RBP: 00000000ffffffff R08: 00000000000000fe R09: 0000000000000000 [ 56.112726][ T5062] R10: 00007fff1108b076 R11: 0000000000000286 R12: 0000000020000100 [ 56.120682][ T5062] R13: 0000000020000040 R14: 0000000000000000 R15: 00007fff1108b190 [ 56.128664][ T5062] [pid 5064] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5064] munmap(0x7fa8162e1000, 2097152) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5064] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5064] close(3) = 0 [pid 5064] mkdir("./file0", 0777) = 0 [pid 5064] mount("/dev/loop0", "./file0", "ntfs3", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_MANDLOCK|MS_REC|MS_LAZYTIME, "umask=00000000000000000000005,showmeta,iocharset=cp857,force,nohidden,discard,sparse,sparse,nohidden"...) = 0 [pid 5064] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5064] chdir("./file0") = 0 [pid 5064] ioctl(4, LOOP_CLR_FD) = 0 [pid 5064] close(4) = 0 [pid 5064] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5064] write(4, "14", 2) = 2 [ 56.206537][ T5064] loop0: detected capacity change from 0 to 4096 [ 56.216234][ T5064] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 56.236692][ T5064] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 56.248241][ T5064] FAULT_INJECTION: forcing a failure. [ 56.248241][ T5064] name failslab, interval 1, probability 0, space 0, times 0 [ 56.261205][ T5064] CPU: 1 PID: 5064 Comm: syz-executor218 Not tainted 6.2.0-rc4-syzkaller-00467-gf67144022885 #0 [ 56.271628][ T5064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 56.281674][ T5064] Call Trace: [ 56.284941][ T5064] [ 56.287859][ T5064] dump_stack_lvl+0xd1/0x138 [ 56.292450][ T5064] should_fail_ex.cold+0x5/0xa [ 56.297217][ T5064] should_failslab+0x9/0x20 [ 56.301717][ T5064] __kmem_cache_alloc_node+0x5b/0x430 [ 56.307079][ T5064] ? tomoyo_init_log+0x1282/0x1ec0 [ 56.312183][ T5064] ? from_kuid+0x89/0xc0 [ 56.316424][ T5064] ? tomoyo_init_log+0x1282/0x1ec0 [ 56.321525][ T5064] __kmalloc+0x4a/0xd0 [ 56.325589][ T5064] tomoyo_init_log+0x1282/0x1ec0 [ 56.330521][ T5064] ? vsnprintf+0x4cd/0x16b0 [ 56.335042][ T5064] ? common_lsm_audit+0x1e90/0x1e90 [ 56.340231][ T5064] ? tomoyo_domain_quota_is_ok+0x300/0x580 [ 56.346052][ T5064] tomoyo_supervisor+0x354/0xf10 [ 56.350988][ T5064] ? tomoyo_profile+0x60/0x60 [ 56.355652][ T5064] ? lockdep_hardirqs_on+0x7d/0x100 [ 56.360852][ T5064] ? tomoyo_path_matches_pattern+0x114/0x290 [ 56.366867][ T5064] ? tomoyo_check_path_number_acl+0xa9/0x320 [ 56.372891][ T5064] tomoyo_path_number_perm+0x410/0x570 [ 56.378349][ T5064] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 56.384325][ T5064] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 56.390156][ T5064] ? do_raw_spin_unlock+0x175/0x230 [ 56.395353][ T5064] ? _raw_spin_unlock+0x28/0x40 [ 56.400219][ T5064] ? d_splice_alias+0x4e1/0xd40 [ 56.405066][ T5064] ? hook_path_mkdir+0x44d/0x530 [ 56.410004][ T5064] ? d_alloc+0x1c0/0x240 [ 56.414251][ T5064] tomoyo_path_mkdir+0x9c/0xe0 [ 56.419016][ T5064] ? tomoyo_file_ioctl+0x30/0x30 [ 56.423961][ T5064] security_path_mkdir+0xec/0x160 [ 56.428986][ T5064] do_mkdirat+0x14d/0x2f0 [ 56.433320][ T5064] ? __ia32_sys_mknod+0xb0/0xb0 [ 56.438173][ T5064] ? getname_flags.part.0+0x1dd/0x4f0 [ 56.443551][ T5064] __x64_sys_mkdir+0xf6/0x140 [ 56.448231][ T5064] do_syscall_64+0x39/0xb0 [ 56.452653][ T5064] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.458544][ T5064] RIP: 0033:0x7fa81e72ddd7 [ 56.462954][ T5064] Code: 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.482568][ T5064] RSP: 002b:00007fff1108b0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000053 [ 56.490979][ T5064] RAX: ffffffffffffffda RBX: 0000555555f642c0 RCX: 00007fa81e72ddd7 [ 56.498942][ T5064] RDX: 0000000000030800 RSI: 00000000000001ff RDI: 0000000020000100 [pid 5064] mkdir("./bus", 0777) = 0 [pid 5064] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5064] +++ killed by SIGSEGV +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5064, si_uid=0, si_status=SIGSEGV, si_utime=0, si_stime=7 /* 0.07 s */} --- umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555f65620 /* 4 entries */, 32768) = 112 umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./1/binderfs") = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555f6d660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555f6d660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/file0") = 0 getdents64(3, 0x555555f65620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555f645d0) = 5065 ./strace-static-x86_64: Process 5065 attached [pid 5065] chdir("./2") = 0 [pid 5065] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5065] setpgid(0, 0) = 0 [pid 5065] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5065] write(3, "1000", 4) = 4 [pid 5065] close(3) = 0 [pid 5065] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5065] memfd_create("syzkaller", 0) = 3 [pid 5065] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa8162e1000 [ 56.506906][ T5064] RBP: 00000000ffffffff R08: 00000000000000fe R09: 0000000000000000 [ 56.514871][ T5064] R10: 00007fff1108b076 R11: 0000000000000286 R12: 0000000020000100 [ 56.522835][ T5064] R13: 0000000020000040 R14: 0000000000000000 R15: 00007fff1108b190 [ 56.530814][ T5064] [pid 5065] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5065] munmap(0x7fa8162e1000, 2097152) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5065] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5065] close(3) = 0 [pid 5065] mkdir("./file0", 0777) = 0 [pid 5065] mount("/dev/loop0", "./file0", "ntfs3", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_MANDLOCK|MS_REC|MS_LAZYTIME, "umask=00000000000000000000005,showmeta,iocharset=cp857,force,nohidden,discard,sparse,sparse,nohidden"...) = 0 [pid 5065] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5065] chdir("./file0") = 0 [pid 5065] ioctl(4, LOOP_CLR_FD) = 0 [pid 5065] close(4) = 0 [ 56.616549][ T5065] loop0: detected capacity change from 0 to 4096 [ 56.626079][ T5065] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 56.648822][ T5065] ntfs3: loop0: Mark volume as dirty due to NTFS errors [pid 5065] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5065] write(4, "14", 2) = 2 [ 56.662359][ T5065] FAULT_INJECTION: forcing a failure. [ 56.662359][ T5065] name failslab, interval 1, probability 0, space 0, times 0 [ 56.675374][ T5065] CPU: 1 PID: 5065 Comm: syz-executor218 Not tainted 6.2.0-rc4-syzkaller-00467-gf67144022885 #0 [ 56.685813][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 56.695876][ T5065] Call Trace: [ 56.699151][ T5065] [ 56.702077][ T5065] dump_stack_lvl+0xd1/0x138 [ 56.706666][ T5065] should_fail_ex.cold+0x5/0xa [ 56.711435][ T5065] should_failslab+0x9/0x20 [ 56.715933][ T5065] __kmem_cache_alloc_node+0x5b/0x430 [ 56.721297][ T5065] ? tomoyo_supervisor+0xcfc/0xf10 [ 56.726404][ T5065] ? common_lsm_audit+0x1e90/0x1e90 [ 56.731607][ T5065] ? tomoyo_supervisor+0xcfc/0xf10 [ 56.736717][ T5065] __kmalloc+0x4a/0xd0 [ 56.740781][ T5065] ? strstr+0x109/0x160 [ 56.744929][ T5065] tomoyo_supervisor+0xcfc/0xf10 [ 56.749892][ T5065] ? tomoyo_profile+0x60/0x60 [ 56.754570][ T5065] ? lockdep_hardirqs_on+0x7d/0x100 [ 56.759776][ T5065] ? tomoyo_path_matches_pattern+0x114/0x290 [ 56.765770][ T5065] ? tomoyo_check_path_number_acl+0xa9/0x320 [ 56.771766][ T5065] tomoyo_path_number_perm+0x410/0x570 [ 56.777227][ T5065] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 56.783205][ T5065] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 56.789025][ T5065] ? do_raw_spin_unlock+0x175/0x230 [ 56.794217][ T5065] ? _raw_spin_unlock+0x28/0x40 [ 56.799060][ T5065] ? d_splice_alias+0x4e1/0xd40 [ 56.803911][ T5065] ? hook_path_mkdir+0x44d/0x530 [ 56.808850][ T5065] ? d_alloc+0x1c0/0x240 [ 56.813105][ T5065] tomoyo_path_mkdir+0x9c/0xe0 [ 56.817871][ T5065] ? tomoyo_file_ioctl+0x30/0x30 [ 56.822820][ T5065] security_path_mkdir+0xec/0x160 [ 56.827847][ T5065] do_mkdirat+0x14d/0x2f0 [ 56.832186][ T5065] ? __ia32_sys_mknod+0xb0/0xb0 [ 56.837038][ T5065] ? getname_flags.part.0+0x1dd/0x4f0 [ 56.842419][ T5065] __x64_sys_mkdir+0xf6/0x140 [ 56.847189][ T5065] do_syscall_64+0x39/0xb0 [ 56.851636][ T5065] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.857527][ T5065] RIP: 0033:0x7fa81e72ddd7 [ 56.861946][ T5065] Code: 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.881560][ T5065] RSP: 002b:00007fff1108b0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000053 [ 56.889967][ T5065] RAX: ffffffffffffffda RBX: 0000555555f642c0 RCX: 00007fa81e72ddd7 [ 56.897939][ T5065] RDX: 0000000000030800 RSI: 00000000000001ff RDI: 0000000020000100 [ 56.905911][ T5065] RBP: 00000000ffffffff R08: 00000000000000fe R09: 0000000000000000 [pid 5065] mkdir("./bus", 0777) = 0 [pid 5065] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5065] +++ killed by SIGSEGV +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5065, si_uid=0, si_status=SIGSEGV, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555f65620 /* 4 entries */, 32768) = 112 umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./2/binderfs") = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555f6d660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555f6d660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/file0") = 0 getdents64(3, 0x555555f65620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555f645d0) = 5066 ./strace-static-x86_64: Process 5066 attached [pid 5066] chdir("./3") = 0 [pid 5066] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] setpgid(0, 0) = 0 [pid 5066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5066] write(3, "1000", 4) = 4 [pid 5066] close(3) = 0 [pid 5066] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5066] memfd_create("syzkaller", 0) = 3 [pid 5066] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa8162e1000 [ 56.913883][ T5065] R10: 00007fff1108b076 R11: 0000000000000286 R12: 0000000020000100 [ 56.921852][ T5065] R13: 0000000020000040 R14: 0000000000000000 R15: 00007fff1108b190 [ 56.929828][ T5065] [pid 5066] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5066] munmap(0x7fa8162e1000, 2097152) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5066] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5066] close(3) = 0 [pid 5066] mkdir("./file0", 0777) = 0 [pid 5066] mount("/dev/loop0", "./file0", "ntfs3", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_MANDLOCK|MS_REC|MS_LAZYTIME, "umask=00000000000000000000005,showmeta,iocharset=cp857,force,nohidden,discard,sparse,sparse,nohidden"...) = 0 [pid 5066] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5066] chdir("./file0") = 0 [pid 5066] ioctl(4, LOOP_CLR_FD) = 0 [pid 5066] close(4) = 0 [pid 5066] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5066] write(4, "14", 2) = 2 [ 57.010536][ T5066] loop0: detected capacity change from 0 to 4096 [ 57.021472][ T5066] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 57.043785][ T5066] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 57.062926][ T5066] FAULT_INJECTION: forcing a failure. [ 57.062926][ T5066] name failslab, interval 1, probability 0, space 0, times 0 [ 57.075925][ T5066] CPU: 1 PID: 5066 Comm: syz-executor218 Not tainted 6.2.0-rc4-syzkaller-00467-gf67144022885 #0 [ 57.086385][ T5066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 57.096466][ T5066] Call Trace: [ 57.099758][ T5066] [ 57.102692][ T5066] dump_stack_lvl+0xd1/0x138 [ 57.107304][ T5066] should_fail_ex.cold+0x5/0xa [ 57.112107][ T5066] ? security_inode_alloc+0x38/0x160 [ 57.117444][ T5066] should_failslab+0x9/0x20 [ 57.121966][ T5066] kmem_cache_alloc+0x5a/0x430 [ 57.126772][ T5066] security_inode_alloc+0x38/0x160 [ 57.131914][ T5066] inode_init_always+0xbfa/0xef0 [ 57.136896][ T5066] alloc_inode+0x82/0x230 [ 57.141290][ T5066] new_inode+0x2b/0x280 [ 57.145503][ T5066] ? rcu_read_lock_sched_held+0x3e/0x70 [ 57.151117][ T5066] ntfs_new_inode+0x3d/0x130 [ 57.155770][ T5066] ntfs_create_inode+0x40b/0x4140 [ 57.160853][ T5066] ? userns_owner+0x40/0x40 [ 57.165384][ T5066] ? inode_write_data+0xb70/0xb70 [ 57.170447][ T5066] ? hook_path_mkdir+0x44d/0x530 [ 57.175412][ T5066] ? d_alloc+0x1c0/0x240 [ 57.179728][ T5066] ? generic_permission+0x28f/0x7a0 [ 57.184981][ T5066] ntfs_mkdir+0x3d/0x90 [ 57.189165][ T5066] vfs_mkdir+0x48d/0x740 [ 57.193716][ T5066] do_mkdirat+0x27b/0x2f0 [ 57.198189][ T5066] ? __ia32_sys_mknod+0xb0/0xb0 [ 57.203066][ T5066] ? getname_flags.part.0+0x1dd/0x4f0 [ 57.208459][ T5066] __x64_sys_mkdir+0xf6/0x140 [ 57.213165][ T5066] do_syscall_64+0x39/0xb0 [ 57.217649][ T5066] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.223671][ T5066] RIP: 0033:0x7fa81e72ddd7 [ 57.228099][ T5066] Code: 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 57.247722][ T5066] RSP: 002b:00007fff1108b0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000053 [ 57.256142][ T5066] RAX: ffffffffffffffda RBX: 0000555555f642c0 RCX: 00007fa81e72ddd7 [pid 5066] mkdir("./bus", 0777) = -1 ENOMEM (Cannot allocate memory) [pid 5066] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5066] +++ killed by SIGSEGV +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5066, si_uid=0, si_status=SIGSEGV, si_utime=0, si_stime=8 /* 0.08 s */} --- umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555f65620 /* 4 entries */, 32768) = 112 umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./3/binderfs") = 0 umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555f6d660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555f6d660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./3/file0") = 0 getdents64(3, 0x555555f65620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./3") = 0 mkdir("./4", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555f645d0) = 5067 ./strace-static-x86_64: Process 5067 attached [pid 5067] chdir("./4") = 0 [pid 5067] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] setpgid(0, 0) = 0 [pid 5067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5067] write(3, "1000", 4) = 4 [pid 5067] close(3) = 0 [pid 5067] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5067] memfd_create("syzkaller", 0) = 3 [pid 5067] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa8162e1000 [ 57.264118][ T5066] RDX: 0000000000030800 RSI: 00000000000001ff RDI: 0000000020000100 [ 57.272111][ T5066] RBP: 00000000ffffffff R08: 00000000000000fe R09: 0000000000000000 [ 57.280124][ T5066] R10: 00007fff1108b076 R11: 0000000000000286 R12: 0000000020000100 [ 57.288114][ T5066] R13: 0000000020000040 R14: 0000000000000000 R15: 00007fff1108b190 [ 57.296113][ T5066] [pid 5067] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5067] munmap(0x7fa8162e1000, 2097152) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5067] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5067] close(3) = 0 [pid 5067] mkdir("./file0", 0777) = 0 [pid 5067] mount("/dev/loop0", "./file0", "ntfs3", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_MANDLOCK|MS_REC|MS_LAZYTIME, "umask=00000000000000000000005,showmeta,iocharset=cp857,force,nohidden,discard,sparse,sparse,nohidden"...) = 0 [pid 5067] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5067] chdir("./file0") = 0 [pid 5067] ioctl(4, LOOP_CLR_FD) = 0 [pid 5067] close(4) = 0 [pid 5067] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [ 57.362218][ T5067] loop0: detected capacity change from 0 to 4096 [ 57.372410][ T5067] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 57.394017][ T5067] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 57.405874][ T5067] FAULT_INJECTION: forcing a failure. [pid 5067] write(4, "14", 2) = 2 [ 57.405874][ T5067] name failslab, interval 1, probability 0, space 0, times 0 [ 57.418851][ T5067] CPU: 1 PID: 5067 Comm: syz-executor218 Not tainted 6.2.0-rc4-syzkaller-00467-gf67144022885 #0 [ 57.429287][ T5067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 57.439349][ T5067] Call Trace: [ 57.442630][ T5067] [ 57.445563][ T5067] dump_stack_lvl+0xd1/0x138 [ 57.450178][ T5067] should_fail_ex.cold+0x5/0xa [ 57.455001][ T5067] ? security_inode_alloc+0x38/0x160 [ 57.460315][ T5067] should_failslab+0x9/0x20 [ 57.464886][ T5067] kmem_cache_alloc+0x5a/0x430 [ 57.469689][ T5067] security_inode_alloc+0x38/0x160 [ 57.474841][ T5067] inode_init_always+0xbfa/0xef0 [ 57.479801][ T5067] alloc_inode+0x82/0x230 [ 57.484146][ T5067] new_inode+0x2b/0x280 [ 57.488320][ T5067] ? rcu_read_lock_sched_held+0x3e/0x70 [ 57.493888][ T5067] ntfs_new_inode+0x3d/0x130 [ 57.498513][ T5067] ntfs_create_inode+0x40b/0x4140 [ 57.503595][ T5067] ? userns_owner+0x40/0x40 [ 57.508164][ T5067] ? inode_write_data+0xb70/0xb70 [ 57.513223][ T5067] ? hook_path_mkdir+0x44d/0x530 [ 57.518181][ T5067] ? d_alloc+0x1c0/0x240 [ 57.522434][ T5067] ? generic_permission+0x28f/0x7a0 [ 57.527650][ T5067] ntfs_mkdir+0x3d/0x90 [ 57.531862][ T5067] vfs_mkdir+0x48d/0x740 [ 57.536151][ T5067] do_mkdirat+0x27b/0x2f0 [ 57.540543][ T5067] ? __ia32_sys_mknod+0xb0/0xb0 [ 57.545399][ T5067] ? getname_flags.part.0+0x1dd/0x4f0 [ 57.550775][ T5067] __x64_sys_mkdir+0xf6/0x140 [ 57.555468][ T5067] do_syscall_64+0x39/0xb0 [ 57.559952][ T5067] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.565881][ T5067] RIP: 0033:0x7fa81e72ddd7 [ 57.570306][ T5067] Code: 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 57.589920][ T5067] RSP: 002b:00007fff1108b0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000053 [ 57.598601][ T5067] RAX: ffffffffffffffda RBX: 0000555555f642c0 RCX: 00007fa81e72ddd7 [pid 5067] mkdir("./bus", 0777) = -1 ENOMEM (Cannot allocate memory) [pid 5067] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5067] +++ killed by SIGSEGV +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5067, si_uid=0, si_status=SIGSEGV, si_utime=0, si_stime=7 /* 0.07 s */} --- umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555f65620 /* 4 entries */, 32768) = 112 umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./4/binderfs") = 0 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555f6d660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555f6d660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./4/file0") = 0 getdents64(3, 0x555555f65620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./4") = 0 mkdir("./5", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555f645d0) = 5068 ./strace-static-x86_64: Process 5068 attached [pid 5068] chdir("./5") = 0 [pid 5068] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5068] setpgid(0, 0) = 0 [pid 5068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5068] write(3, "1000", 4) = 4 [pid 5068] close(3) = 0 [pid 5068] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5068] memfd_create("syzkaller", 0) = 3 [pid 5068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa8162e1000 [ 57.606578][ T5067] RDX: 0000000000030800 RSI: 00000000000001ff RDI: 0000000020000100 [ 57.614565][ T5067] RBP: 00000000ffffffff R08: 00000000000000fe R09: 0000000000000000 [ 57.622630][ T5067] R10: 00007fff1108b076 R11: 0000000000000286 R12: 0000000020000100 [ 57.630640][ T5067] R13: 0000000020000040 R14: 0000000000000000 R15: 00007fff1108b190 [ 57.638635][ T5067] [pid 5068] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5068] munmap(0x7fa8162e1000, 2097152) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5068] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5068] close(3) = 0 [pid 5068] mkdir("./file0", 0777) = 0 [pid 5068] mount("/dev/loop0", "./file0", "ntfs3", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_MANDLOCK|MS_REC|MS_LAZYTIME, "umask=00000000000000000000005,showmeta,iocharset=cp857,force,nohidden,discard,sparse,sparse,nohidden"...) = 0 [pid 5068] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5068] chdir("./file0") = 0 [pid 5068] ioctl(4, LOOP_CLR_FD) = 0 [ 57.703970][ T5068] loop0: detected capacity change from 0 to 4096 [ 57.713549][ T5068] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 57.736799][ T5068] ntfs3: loop0: Mark volume as dirty due to NTFS errors [pid 5068] close(4) = 0 [pid 5068] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5068] write(4, "14", 2) = 2 [ 57.752943][ T5068] FAULT_INJECTION: forcing a failure. [ 57.752943][ T5068] name failslab, interval 1, probability 0, space 0, times 0 [ 57.766000][ T5068] CPU: 1 PID: 5068 Comm: syz-executor218 Not tainted 6.2.0-rc4-syzkaller-00467-gf67144022885 #0 [ 57.776454][ T5068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 57.786563][ T5068] Call Trace: [ 57.789871][ T5068] [ 57.792806][ T5068] dump_stack_lvl+0xd1/0x138 [ 57.797412][ T5068] should_fail_ex.cold+0x5/0xa [ 57.802200][ T5068] ? security_inode_alloc+0x38/0x160 [ 57.807504][ T5068] should_failslab+0x9/0x20 [ 57.812025][ T5068] kmem_cache_alloc+0x5a/0x430 [ 57.816828][ T5068] security_inode_alloc+0x38/0x160 [ 57.821993][ T5068] inode_init_always+0xbfa/0xef0 [ 57.826968][ T5068] alloc_inode+0x82/0x230 [ 57.831369][ T5068] new_inode+0x2b/0x280 [ 57.835579][ T5068] ? rcu_read_lock_sched_held+0x3e/0x70 [ 57.841197][ T5068] ntfs_new_inode+0x3d/0x130 [ 57.845860][ T5068] ntfs_create_inode+0x40b/0x4140 [ 57.850927][ T5068] ? userns_owner+0x40/0x40 [ 57.855460][ T5068] ? inode_write_data+0xb70/0xb70 [ 57.860562][ T5068] ? hook_path_mkdir+0x44d/0x530 [ 57.865534][ T5068] ? d_alloc+0x1c0/0x240 [ 57.869821][ T5068] ? generic_permission+0x28f/0x7a0 [ 57.875059][ T5068] ntfs_mkdir+0x3d/0x90 [ 57.879285][ T5068] vfs_mkdir+0x48d/0x740 [ 57.883600][ T5068] do_mkdirat+0x27b/0x2f0 [ 57.887998][ T5068] ? __ia32_sys_mknod+0xb0/0xb0 [ 57.892876][ T5068] ? getname_flags.part.0+0x1dd/0x4f0 [ 57.898268][ T5068] __x64_sys_mkdir+0xf6/0x140 [ 57.902966][ T5068] do_syscall_64+0x39/0xb0 [ 57.907431][ T5068] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.913374][ T5068] RIP: 0033:0x7fa81e72ddd7 [ 57.917795][ T5068] Code: 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 57.937407][ T5068] RSP: 002b:00007fff1108b0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000053 [ 57.945827][ T5068] RAX: ffffffffffffffda RBX: 0000555555f642c0 RCX: 00007fa81e72ddd7 [pid 5068] mkdir("./bus", 0777) = -1 ENOMEM (Cannot allocate memory) [pid 5068] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5068] +++ killed by SIGSEGV +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5068, si_uid=0, si_status=SIGSEGV, si_utime=0, si_stime=6 /* 0.06 s */} --- umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x555555f65620 /* 4 entries */, 32768) = 112 umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./5/binderfs") = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555555f6d660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555555f6d660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./5/file0") = 0 getdents64(3, 0x555555f65620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./5") = 0 mkdir("./6", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555f645d0) = 5069 ./strace-static-x86_64: Process 5069 attached [pid 5069] chdir("./6") = 0 [ 57.953825][ T5068] RDX: 0000000000030800 RSI: 00000000000001ff RDI: 0000000020000100 [ 57.961830][ T5068] RBP: 00000000ffffffff R08: 00000000000000fe R09: 0000000000000000 [ 57.969809][ T5068] R10: 00007fff1108b076 R11: 0000000000000286 R12: 0000000020000100 [ 57.977789][ T5068] R13: 0000000020000040 R14: 0000000000000000 R15: 00007fff1108b190 [ 57.985802][ T5068] [pid 5069] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5069] setpgid(0, 0) = 0 [pid 5069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5069] write(3, "1000", 4) = 4 [pid 5069] close(3) = 0 [pid 5069] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5069] memfd_create("syzkaller", 0) = 3 [pid 5069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa8162e1000 [pid 5069] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 5069] munmap(0x7fa8162e1000, 2097152) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5069] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5069] close(3) = 0 [pid 5069] mkdir("./file0", 0777) = 0 [pid 5069] mount("/dev/loop0", "./file0", "ntfs3", MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_MANDLOCK|MS_REC|MS_LAZYTIME, "umask=00000000000000000000005,showmeta,iocharset=cp857,force,nohidden,discard,sparse,sparse,nohidden"...) = 0 [pid 5069] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5069] chdir("./file0") = 0 [pid 5069] ioctl(4, LOOP_CLR_FD) = 0 [ 58.075867][ T5069] loop0: detected capacity change from 0 to 4096 [ 58.085893][ T5069] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 58.107330][ T5069] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 58.119157][ T5069] FAULT_INJECTION: forcing a failure. [pid 5069] close(4) = 0 [pid 5069] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 [pid 5069] write(4, "14", 2) = 2 [ 58.119157][ T5069] name failslab, interval 1, probability 0, space 0, times 0 [ 58.132191][ T5069] CPU: 0 PID: 5069 Comm: syz-executor218 Not tainted 6.2.0-rc4-syzkaller-00467-gf67144022885 #0 [ 58.142640][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 58.152701][ T5069] Call Trace: [ 58.155997][ T5069] [ 58.158968][ T5069] dump_stack_lvl+0xd1/0x138 [ 58.163608][ T5069] should_fail_ex.cold+0x5/0xa [ 58.168399][ T5069] should_failslab+0x9/0x20 [ 58.172920][ T5069] __kmem_cache_alloc_node+0x5b/0x430 [ 58.178310][ T5069] ? mi_init+0x90/0x100 [ 58.182481][ T5069] ? new_inode+0x1f1/0x280 [ 58.186921][ T5069] ? mi_init+0x90/0x100 [ 58.191092][ T5069] __kmalloc+0x4a/0xd0 [ 58.195185][ T5069] ? rwlock_bug.part.0+0x90/0x90 [ 58.200165][ T5069] mi_init+0x90/0x100 [ 58.204177][ T5069] mi_format_new+0x8a/0x590 [ 58.208706][ T5069] ntfs_new_inode+0x84/0x130 [ 58.213340][ T5069] ntfs_create_inode+0x40b/0x4140 [ 58.218417][ T5069] ? userns_owner+0x40/0x40 [ 58.222948][ T5069] ? inode_write_data+0xb70/0xb70 [ 58.228046][ T5069] ? hook_path_mkdir+0x44d/0x530 [ 58.233013][ T5069] ? d_alloc+0x1c0/0x240 [ 58.237322][ T5069] ? generic_permission+0x28f/0x7a0 [ 58.242567][ T5069] ntfs_mkdir+0x3d/0x90 [ 58.246745][ T5069] vfs_mkdir+0x48d/0x740 [ 58.251015][ T5069] do_mkdirat+0x27b/0x2f0 [ 58.255382][ T5069] ? __ia32_sys_mknod+0xb0/0xb0 [ 58.260290][ T5069] ? getname_flags.part.0+0x1dd/0x4f0 [ 58.265681][ T5069] __x64_sys_mkdir+0xf6/0x140 [ 58.270379][ T5069] do_syscall_64+0x39/0xb0 [ 58.274817][ T5069] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.280738][ T5069] RIP: 0033:0x7fa81e72ddd7 [ 58.285201][ T5069] Code: 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 58.304816][ T5069] RSP: 002b:00007fff1108b0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000053 [ 58.313250][ T5069] RAX: ffffffffffffffda RBX: 0000555555f642c0 RCX: 00007fa81e72ddd7 [ 58.321321][ T5069] RDX: 0000000000030800 RSI: 00000000000001ff RDI: 0000000020000100 [ 58.329301][ T5069] RBP: 00000000ffffffff R08: 00000000000000fe R09: 0000000000000000 [ 58.337286][ T5069] R10: 00007fff1108b076 R11: 0000000000000286 R12: 0000000020000100 [ 58.345270][ T5069] R13: 0000000020000040 R14: 0000000000000000 R15: 00007fff1108b190 [ 58.353270][ T5069] [ 58.356858][ T5069] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 58.368600][ T5069] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 58.377013][ T5069] CPU: 0 PID: 5069 Comm: syz-executor218 Not tainted 6.2.0-rc4-syzkaller-00467-gf67144022885 #0 [ 58.387425][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 58.397487][ T5069] RIP: 0010:ni_write_inode+0x21d/0x3120 [ 58.403042][ T5069] Code: 48 c1 ea 03 80 3c 02 00 0f 85 22 20 00 00 49 8b 9f d0 fd ff ff 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 16 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 4e [ 58.422660][ T5069] RSP: 0018:ffffc90003dcf8e8 EFLAGS: 00010213 [ 58.428765][ T5069] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 58.436751][ T5069] RDX: 0000000000000002 RSI: ffffffff82b0e81a RDI: 0000000000000016 [ 58.444735][ T5069] RBP: ffff88802b668050 R08: 0000000000000005 R09: 0000000000000000 [ 58.452711][ T5069] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880729f9948 [ 58.460693][ T5069] R13: ffff88802b668000 R14: ffffffff8a826760 R15: ffff8880729f9870 [ 58.468717][ T5069] FS: 0000555555f64300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 58.477650][ T5069] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.484264][ T5069] CR2: 00007fa8164da000 CR3: 0000000029f84000 CR4: 0000000000350ef0 [ 58.492251][ T5069] Call Trace: [ 58.495547][ T5069] [ 58.498500][ T5069] ? truncate_inode_partial_folio+0xb90/0xb90 [ 58.504611][ T5069] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 58.510599][ T5069] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 58.516585][ T5069] ? ni_is_dirty+0x180/0x180 [ 58.521184][ T5069] ? find_held_lock+0x2d/0x110 [ 58.525968][ T5069] ? evict+0x2b7/0x6b0 [ 58.530049][ T5069] ? lock_downgrade+0x6e0/0x6e0 [ 58.534918][ T5069] ? sugov_start+0x580/0x580 [ 58.539516][ T5069] ? rwlock_bug.part.0+0x90/0x90 [ 58.544469][ T5069] ntfs_evict_inode+0x8c/0xa0 [ 58.549147][ T5069] ? ntfs_unlink_inode+0x700/0x700 [ 58.554277][ T5069] evict+0x2ed/0x6b0 [ 58.558207][ T5069] iput.part.0+0x59b/0x880 [ 58.562714][ T5069] iput+0x5c/0x80 [ 58.566340][ T5069] ntfs_new_inode+0xaa/0x130 [ 58.570929][ T5069] ntfs_create_inode+0x40b/0x4140 [ 58.575954][ T5069] ? userns_owner+0x40/0x40 [ 58.580454][ T5069] ? inode_write_data+0xb70/0xb70 [ 58.585471][ T5069] ? hook_path_mkdir+0x44d/0x530 [ 58.590402][ T5069] ? d_alloc+0x1c0/0x240 [ 58.594637][ T5069] ? generic_permission+0x28f/0x7a0 [ 58.599824][ T5069] ntfs_mkdir+0x3d/0x90 [ 58.603983][ T5069] vfs_mkdir+0x48d/0x740 [ 58.608238][ T5069] do_mkdirat+0x27b/0x2f0 [ 58.612560][ T5069] ? __ia32_sys_mknod+0xb0/0xb0 [ 58.617404][ T5069] ? getname_flags.part.0+0x1dd/0x4f0 [ 58.622782][ T5069] __x64_sys_mkdir+0xf6/0x140 [ 58.627493][ T5069] do_syscall_64+0x39/0xb0 [ 58.631905][ T5069] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.637886][ T5069] RIP: 0033:0x7fa81e72ddd7 [ 58.642317][ T5069] Code: 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 58.661911][ T5069] RSP: 002b:00007fff1108b0f8 EFLAGS: 00000286 ORIG_RAX: 0000000000000053 [ 58.670313][ T5069] RAX: ffffffffffffffda RBX: 0000555555f642c0 RCX: 00007fa81e72ddd7 [ 58.678281][ T5069] RDX: 0000000000030800 RSI: 00000000000001ff RDI: 0000000020000100 [ 58.686245][ T5069] RBP: 00000000ffffffff R08: 00000000000000fe R09: 0000000000000000 [ 58.694221][ T5069] R10: 00007fff1108b076 R11: 0000000000000286 R12: 0000000020000100 [ 58.702201][ T5069] R13: 0000000020000040 R14: 0000000000000000 R15: 00007fff1108b190 [ 58.710200][ T5069] [ 58.713246][ T5069] Modules linked in: [ 58.717271][ T5069] ---[ end trace 0000000000000000 ]--- [ 58.722823][ T5069] RIP: 0010:ni_write_inode+0x21d/0x3120 [ 58.728409][ T5069] Code: 48 c1 ea 03 80 3c 02 00 0f 85 22 20 00 00 49 8b 9f d0 fd ff ff 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 16 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 4e [ 58.748195][ T5069] RSP: 0018:ffffc90003dcf8e8 EFLAGS: 00010213 [ 58.754307][ T5069] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 58.762326][ T5069] RDX: 0000000000000002 RSI: ffffffff82b0e81a RDI: 0000000000000016 [ 58.770342][ T5069] RBP: ffff88802b668050 R08: 0000000000000005 R09: 0000000000000000 [ 58.778316][ T5069] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880729f9948 [ 58.786351][ T5069] R13: ffff88802b668000 R14: ffffffff8a826760 R15: ffff8880729f9870 [ 58.794377][ T5069] FS: 0000555555f64300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 58.803349][ T5069] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.809946][ T5069] CR2: 00007fa8164da000 CR3: 0000000029f84000 CR4: 0000000000350ef0 [ 58.817963][ T5069] Kernel panic - not syncing: Fatal exception [ 58.824978][ T5069] Kernel Offset: disabled [ 58.829294][ T5069] Rebooting in 86400 seconds..