./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1006307709 <...> Warning: Permanently added '10.128.0.37' (ECDSA) to the list of known hosts. execve("./syz-executor1006307709", ["./syz-executor1006307709"], 0x7fff1980f550 /* 10 vars */) = 0 brk(NULL) = 0x55555701b000 brk(0x55555701bc40) = 0x55555701bc40 arch_prctl(ARCH_SET_FS, 0x55555701b300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1006307709", 4096) = 28 brk(0x55555703cc40) = 0x55555703cc40 brk(0x55555703d000) = 0x55555703d000 mprotect(0x7faac32ce000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 getpid() = 4999 mkdir("./syzkaller.E7t7Kb", 0700) = 0 chmod("./syzkaller.E7t7Kb", 0777) = 0 chdir("./syzkaller.E7t7Kb") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555701b5d0) = 5001 ./strace-static-x86_64: Process 5001 attached [pid 5001] chdir("./0") = 0 [pid 5001] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5001] setpgid(0, 0) = 0 [pid 5001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5001] write(3, "1000", 4) = 4 [pid 5001] close(3) = 0 [pid 5001] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5001] memfd_create("syzkaller", 0) = 3 [pid 5001] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faabae0d000 [ 43.230553][ T5001] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5001 'syz-executor100' [pid 5001] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5001] munmap(0x7faabae0d000, 16777216) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5001] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5001] close(3) = 0 [pid 5001] mkdir("./file0", 0777) = 0 [ 43.335670][ T5001] loop0: detected capacity change from 0 to 32768 [ 43.345777][ T5001] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor100 (5001) [ 43.363444][ T5001] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 43.372261][ T5001] BTRFS info (device loop0): using free space tree [pid 5001] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5001] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5001] chdir("./file0") = 0 [pid 5001] ioctl(4, LOOP_CLR_FD) = 0 [pid 5001] close(4) = 0 [pid 5001] openat(AT_FDCWD, ".pending_reads", O_RDWR|O_CREAT|O_DSYNC, 000) = 4 [pid 5001] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 5001] ioctl(5, BTRFS_IOC_QUOTA_CTL, {cmd=BTRFS_QUOTA_CTL_ENABLE}) = 0 [pid 5001] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [ 43.390278][ T5001] BTRFS info (device loop0): enabling ssd optimizations [ 43.397224][ T5001] BTRFS info (device loop0): auto enabling async discard [pid 5001] write(6, "15", 2) = 2 [ 43.453985][ T5001] FAULT_INJECTION: forcing a failure. [ 43.453985][ T5001] name failslab, interval 1, probability 0, space 0, times 1 [ 43.470322][ T2853] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 43.479816][ T5001] CPU: 0 PID: 5001 Comm: syz-executor100 Not tainted 6.4.0-rc7-syzkaller-00072-gdad9774deaf1 #0 [ 43.490240][ T5001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 43.500303][ T5001] Call Trace: [ 43.503585][ T5001] [ 43.506527][ T5001] dump_stack_lvl+0x136/0x150 [ 43.511234][ T5001] should_fail_ex+0x4a3/0x5b0 [ 43.515932][ T5001] should_failslab+0x9/0x20 [ 43.520448][ T5001] kmem_cache_alloc+0x63/0x3b0 [ 43.525227][ T5001] btrfs_get_extent+0x2c8/0x19c0 [ 43.530154][ T5001] ? _raw_spin_unlock_irq+0x23/0x50 [ 43.535339][ T5001] ? btrfs_rename2+0x130/0x130 [ 43.540081][ T5001] ? _raw_spin_unlock_irq+0x2e/0x50 [ 43.545393][ T5001] ? btrfs_lookup_first_ordered_range+0x403/0x5f0 [ 43.551790][ T5001] ? try_lock_extent+0x140/0x140 [ 43.556717][ T5001] ? btrfs_assert_inode_range_clean+0x53/0x240 [ 43.562855][ T5001] btrfs_fallocate+0x871/0x27f0 [ 43.567695][ T5001] ? btrfs_replace_file_extents+0x1aa0/0x1aa0 [ 43.573745][ T5001] ? debug_check_no_obj_freed+0x210/0x420 [ 43.579448][ T5001] ? lock_downgrade+0x690/0x690 [ 43.584289][ T5001] ? aa_path_link+0x2f0/0x2f0 [ 43.588957][ T5001] ? lock_sync+0x190/0x190 [ 43.593360][ T5001] ? btrfs_replace_file_extents+0x1aa0/0x1aa0 [ 43.599431][ T5001] vfs_fallocate+0x48b/0xe40 [ 43.604022][ T5001] ioctl_preallocate+0x18e/0x200 [ 43.608951][ T5001] ? fiemap_prep+0x220/0x220 [ 43.613533][ T5001] do_vfs_ioctl+0x12e9/0x1670 [ 43.618201][ T5001] ? vfs_fileattr_set+0xc40/0xc40 [ 43.623240][ T5001] ? find_held_lock+0x2d/0x110 [ 43.628029][ T5001] ? name_to_dev_t+0x262/0x9e0 [ 43.632818][ T5001] ? lock_downgrade+0x690/0x690 [ 43.637659][ T5001] ? bpf_lsm_file_ioctl+0x9/0x10 [ 43.642589][ T5001] __x64_sys_ioctl+0x10c/0x210 [ 43.647343][ T5001] do_syscall_64+0x39/0xb0 [ 43.651746][ T5001] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 43.657624][ T5001] RIP: 0033:0x7faac325aab9 [ 43.662021][ T5001] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 43.681616][ T5001] RSP: 002b:00007ffeb6874018 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 43.690011][ T5001] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007faac325aab9 [pid 5001] ioctl(4, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x20000080) = -1 ENOMEM (Cannot allocate memory) [pid 5001] exit_group(0) = ? [pid 5001] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5001, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555701c620 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./0/binderfs") = 0 [ 43.697968][ T5001] RDX: 0000000020000080 RSI: 0000000040305828 RDI: 0000000000000004 [ 43.705937][ T5001] RBP: 00007ffeb6874040 R08: 0000000000000002 R09: 00007ffeb6874050 [ 43.713911][ T5001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 43.721884][ T5001] R13: 00007ffeb6874080 R14: 00007ffeb6874060 R15: 0000000000000000 [ 43.729843][ T5001] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557024660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557024660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file0") = 0 getdents64(3, 0x55555701c620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5021 attached , child_tidptr=0x55555701b5d0) = 5021 [pid 5021] chdir("./1") = 0 [pid 5021] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5021] setpgid(0, 0) = 0 [pid 5021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5021] write(3, "1000", 4) = 4 [pid 5021] close(3) = 0 [pid 5021] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5021] memfd_create("syzkaller", 0) = 3 [pid 5021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faabae0d000 [pid 5021] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5021] munmap(0x7faabae0d000, 16777216) = 0 [pid 5021] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5021] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5021] close(3) = 0 [pid 5021] mkdir("./file0", 0777) = 0 [ 43.940922][ T5021] loop0: detected capacity change from 0 to 32768 [ 43.950403][ T5021] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor100 (5021) [ 43.965219][ T5021] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 43.973958][ T5021] BTRFS info (device loop0): using free space tree [pid 5021] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5021] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5021] chdir("./file0") = 0 [pid 5021] ioctl(4, LOOP_CLR_FD) = 0 [pid 5021] close(4) = 0 [pid 5021] openat(AT_FDCWD, ".pending_reads", O_RDWR|O_CREAT|O_DSYNC, 000) = 4 [pid 5021] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 5021] ioctl(5, BTRFS_IOC_QUOTA_CTL, {cmd=BTRFS_QUOTA_CTL_ENABLE}) = 0 [pid 5021] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5021] write(6, "15", 2) = 2 [ 43.988905][ T5021] BTRFS info (device loop0): enabling ssd optimizations [ 43.995873][ T5021] BTRFS info (device loop0): auto enabling async discard [ 44.034203][ T5021] FAULT_INJECTION: forcing a failure. [ 44.034203][ T5021] name failslab, interval 1, probability 0, space 0, times 0 [ 44.050411][ T2853] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 44.060007][ T5021] CPU: 1 PID: 5021 Comm: syz-executor100 Not tainted 6.4.0-rc7-syzkaller-00072-gdad9774deaf1 #0 [ 44.070430][ T5021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 44.080488][ T5021] Call Trace: [ 44.083771][ T5021] [ 44.086707][ T5021] dump_stack_lvl+0x136/0x150 [ 44.091396][ T5021] should_fail_ex+0x4a3/0x5b0 [ 44.096102][ T5021] should_failslab+0x9/0x20 [ 44.100643][ T5021] kmem_cache_alloc+0x63/0x3b0 [ 44.105430][ T5021] alloc_extent_map+0x1e/0x150 [ 44.110200][ T5021] btrfs_get_extent+0x20e/0x19c0 [ 44.115127][ T5021] ? _raw_spin_unlock_irq+0x23/0x50 [ 44.120407][ T5021] ? btrfs_rename2+0x130/0x130 [ 44.125269][ T5021] ? _raw_spin_unlock_irq+0x2e/0x50 [ 44.130493][ T5021] ? btrfs_lookup_first_ordered_range+0x403/0x5f0 [ 44.136899][ T5021] ? try_lock_extent+0x140/0x140 [ 44.142029][ T5021] ? btrfs_assert_inode_range_clean+0x53/0x240 [ 44.148185][ T5021] btrfs_fallocate+0x871/0x27f0 [ 44.153059][ T5021] ? btrfs_replace_file_extents+0x1aa0/0x1aa0 [ 44.159125][ T5021] ? debug_check_no_obj_freed+0x210/0x420 [ 44.164840][ T5021] ? lock_downgrade+0x690/0x690 [ 44.169688][ T5021] ? aa_path_link+0x2f0/0x2f0 [ 44.174369][ T5021] ? lock_sync+0x190/0x190 [ 44.178787][ T5021] ? btrfs_replace_file_extents+0x1aa0/0x1aa0 [ 44.184846][ T5021] vfs_fallocate+0x48b/0xe40 [ 44.189453][ T5021] ioctl_preallocate+0x18e/0x200 [ 44.194393][ T5021] ? fiemap_prep+0x220/0x220 [ 44.198985][ T5021] do_vfs_ioctl+0x12e9/0x1670 [ 44.203658][ T5021] ? vfs_fileattr_set+0xc40/0xc40 [ 44.208710][ T5021] ? find_held_lock+0x2d/0x110 [ 44.213468][ T5021] ? name_to_dev_t+0x262/0x9e0 [ 44.218314][ T5021] ? lock_downgrade+0x690/0x690 [ 44.223169][ T5021] ? bpf_lsm_file_ioctl+0x9/0x10 [ 44.228104][ T5021] __x64_sys_ioctl+0x10c/0x210 [ 44.232955][ T5021] do_syscall_64+0x39/0xb0 [ 44.237377][ T5021] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 44.243267][ T5021] RIP: 0033:0x7faac325aab9 [ 44.247671][ T5021] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 44.267270][ T5021] RSP: 002b:00007ffeb6874018 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.275686][ T5021] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007faac325aab9 [pid 5021] ioctl(4, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x20000080) = -1 ENOMEM (Cannot allocate memory) [pid 5021] exit_group(0) = ? [pid 5021] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5021, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555701c620 /* 4 entries */, 32768) = 112 umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./1/binderfs") = 0 [ 44.283661][ T5021] RDX: 0000000020000080 RSI: 0000000040305828 RDI: 0000000000000004 [ 44.291690][ T5021] RBP: 00007ffeb6874040 R08: 0000000000000002 R09: 00007ffeb6874050 [ 44.299656][ T5021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 44.307619][ T5021] R13: 00007ffeb6874080 R14: 00007ffeb6874060 R15: 0000000000000001 [ 44.315591][ T5021] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557024660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557024660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/file0") = 0 getdents64(3, 0x55555701c620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555701b5d0) = 5040 ./strace-static-x86_64: Process 5040 attached [pid 5040] chdir("./2") = 0 [pid 5040] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5040] setpgid(0, 0) = 0 [pid 5040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5040] write(3, "1000", 4) = 4 [pid 5040] close(3) = 0 [pid 5040] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5040] memfd_create("syzkaller", 0) = 3 [pid 5040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faabae0d000 [pid 5040] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5040] munmap(0x7faabae0d000, 16777216) = 0 [pid 5040] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5040] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5040] close(3) = 0 [pid 5040] mkdir("./file0", 0777) = 0 [ 44.507266][ T5040] loop0: detected capacity change from 0 to 32768 [ 44.516324][ T5040] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor100 (5040) [ 44.530946][ T5040] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 44.539742][ T5040] BTRFS info (device loop0): using free space tree [pid 5040] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5040] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5040] chdir("./file0") = 0 [pid 5040] ioctl(4, LOOP_CLR_FD) = 0 [pid 5040] close(4) = 0 [pid 5040] openat(AT_FDCWD, ".pending_reads", O_RDWR|O_CREAT|O_DSYNC, 000) = 4 [pid 5040] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 5040] ioctl(5, BTRFS_IOC_QUOTA_CTL, {cmd=BTRFS_QUOTA_CTL_ENABLE}) = 0 [pid 5040] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5040] write(6, "15", 2) = 2 [ 44.554771][ T5040] BTRFS info (device loop0): enabling ssd optimizations [ 44.561877][ T5040] BTRFS info (device loop0): auto enabling async discard [ 44.597196][ T5040] FAULT_INJECTION: forcing a failure. [ 44.597196][ T5040] name failslab, interval 1, probability 0, space 0, times 0 [ 44.609980][ T5040] CPU: 1 PID: 5040 Comm: syz-executor100 Not tainted 6.4.0-rc7-syzkaller-00072-gdad9774deaf1 #0 [ 44.620372][ T5040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 44.630425][ T5040] Call Trace: [ 44.633684][ T5040] [ 44.636594][ T5040] dump_stack_lvl+0x136/0x150 [ 44.641253][ T5040] should_fail_ex+0x4a3/0x5b0 [ 44.645946][ T5040] ? kasan_quarantine_put+0xf9/0x220 [ 44.651238][ T5040] should_failslab+0x9/0x20 [ 44.655720][ T5040] __kmem_cache_alloc_node+0x5b/0x320 [ 44.661085][ T5040] ? ulist_add_merge.part.0+0x85/0x4b0 [ 44.666529][ T5040] kmalloc_trace+0x26/0xe0 [ 44.670953][ T5040] ulist_add_merge.part.0+0x85/0x4b0 [ 44.676227][ T5040] ulist_add+0x106/0x160 [ 44.680473][ T5040] qgroup_reserve+0x4c2/0x9a0 [ 44.685136][ T5040] ? __qgroup_excl_accounting+0x15d0/0x15d0 [ 44.691015][ T5040] ? set_record_extent_bits+0x5c/0x90 [ 44.696376][ T5040] qgroup_reserve_data+0x2f2/0xa80 [ 44.701470][ T5040] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 44.707082][ T5040] ? btrfs_fallocate+0x6d4/0x27f0 [ 44.712090][ T5040] btrfs_qgroup_reserve_data+0x2f/0xd0 [ 44.717533][ T5040] btrfs_fallocate+0x801/0x27f0 [ 44.722370][ T5040] ? btrfs_replace_file_extents+0x1aa0/0x1aa0 [ 44.728421][ T5040] ? debug_check_no_obj_freed+0x210/0x420 [ 44.734133][ T5040] ? lock_downgrade+0x690/0x690 [ 44.738966][ T5040] ? aa_path_link+0x2f0/0x2f0 [ 44.743627][ T5040] ? lock_sync+0x190/0x190 [ 44.748032][ T5040] ? btrfs_replace_file_extents+0x1aa0/0x1aa0 [ 44.754175][ T5040] vfs_fallocate+0x48b/0xe40 [ 44.759270][ T5040] ioctl_preallocate+0x18e/0x200 [ 44.764211][ T5040] ? fiemap_prep+0x220/0x220 [ 44.768787][ T5040] do_vfs_ioctl+0x12e9/0x1670 [ 44.773445][ T5040] ? vfs_fileattr_set+0xc40/0xc40 [ 44.778461][ T5040] ? find_held_lock+0x2d/0x110 [ 44.783212][ T5040] ? name_to_dev_t+0x262/0x9e0 [ 44.787969][ T5040] ? lock_downgrade+0x690/0x690 [ 44.792822][ T5040] ? bpf_lsm_file_ioctl+0x9/0x10 [ 44.797740][ T5040] __x64_sys_ioctl+0x10c/0x210 [ 44.802486][ T5040] do_syscall_64+0x39/0xb0 [ 44.806882][ T5040] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 44.812759][ T5040] RIP: 0033:0x7faac325aab9 [ 44.817153][ T5040] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 44.837176][ T5040] RSP: 002b:00007ffeb6874018 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.845571][ T5040] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007faac325aab9 [pid 5040] ioctl(4, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x20000080) = -1 ENOMEM (Cannot allocate memory) [ 44.853528][ T5040] RDX: 0000000020000080 RSI: 0000000040305828 RDI: 0000000000000004 [ 44.861480][ T5040] RBP: 00007ffeb6874040 R08: 0000000000000002 R09: 00007ffeb6874050 [ 44.869519][ T5040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 44.877470][ T5040] R13: 00007ffeb6874080 R14: 00007ffeb6874060 R15: 0000000000000002 [ 44.885429][ T5040] [pid 5040] exit_group(0) = ? [pid 5040] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5040, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55555701c620 /* 4 entries */, 32768) = 112 umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./2/binderfs") = 0 [ 44.901751][ T12] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x555557024660 /* 2 entries */, 32768) = 48 getdents64(4, 0x555557024660 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/file0") = 0 getdents64(3, 0x55555701c620 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555701b5d0) = 5062 ./strace-static-x86_64: Process 5062 attached [pid 5062] chdir("./3") = 0 [pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] setpgid(0, 0) = 0 [pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] write(3, "1000", 4) = 4 [pid 5062] close(3) = 0 [pid 5062] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] memfd_create("syzkaller", 0) = 3 [pid 5062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faabae0d000 [pid 5062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5062] munmap(0x7faabae0d000, 16777216) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5062] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5062] close(3) = 0 [pid 5062] mkdir("./file0", 0777) = 0 [ 45.114179][ T5062] loop0: detected capacity change from 0 to 32768 [ 45.124171][ T5062] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor100 (5062) [ 45.139098][ T5062] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 45.147820][ T5062] BTRFS info (device loop0): using free space tree [pid 5062] mount("/dev/loop0", "./file0", "btrfs", 0, "") = 0 [pid 5062] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] chdir("./file0") = 0 [pid 5062] ioctl(4, LOOP_CLR_FD) = 0 [pid 5062] close(4) = 0 [pid 5062] openat(AT_FDCWD, ".pending_reads", O_RDWR|O_CREAT|O_DSYNC, 000) = 4 [pid 5062] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 5062] ioctl(5, BTRFS_IOC_QUOTA_CTL, {cmd=BTRFS_QUOTA_CTL_ENABLE}) = 0 [pid 5062] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5062] write(6, "15", 2) = 2 [ 45.163704][ T5062] BTRFS info (device loop0): enabling ssd optimizations [ 45.170696][ T5062] BTRFS info (device loop0): auto enabling async discard [ 45.195779][ T5062] FAULT_INJECTION: forcing a failure. [ 45.195779][ T5062] name failslab, interval 1, probability 0, space 0, times 0 [ 45.205549][ T2853] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 45.208569][ T5062] CPU: 0 PID: 5062 Comm: syz-executor100 Not tainted 6.4.0-rc7-syzkaller-00072-gdad9774deaf1 #0 [ 45.227981][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 45.238038][ T5062] Call Trace: [ 45.241319][ T5062] [ 45.244256][ T5062] dump_stack_lvl+0x136/0x150 [ 45.248944][ T5062] should_fail_ex+0x4a3/0x5b0 [ 45.253639][ T5062] ? find_held_lock+0x2d/0x110 [ 45.258414][ T5062] should_failslab+0x9/0x20 [ 45.262923][ T5062] __kmem_cache_alloc_node+0x5b/0x320 [ 45.268310][ T5062] ? ulist_add_merge.part.0+0x85/0x4b0 [ 45.273791][ T5062] kmalloc_trace+0x26/0xe0 [ 45.278232][ T5062] ulist_add_merge.part.0+0x85/0x4b0 [ 45.283538][ T5062] ulist_add+0x106/0x160 [ 45.287799][ T5062] set_state_bits.isra.0+0x11f/0x1c0 [ 45.293107][ T5062] __set_extent_bit+0xb81/0x15f0 [ 45.298103][ T5062] set_record_extent_bits+0x5c/0x90 [ 45.303321][ T5062] qgroup_reserve_data+0x233/0xa80 [ 45.308466][ T5062] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 45.314129][ T5062] ? btrfs_fallocate+0x6d4/0x27f0 [ 45.319178][ T5062] btrfs_qgroup_reserve_data+0x2f/0xd0 [ 45.324655][ T5062] btrfs_fallocate+0x801/0x27f0 [ 45.329503][ T5062] ? btrfs_replace_file_extents+0x1aa0/0x1aa0 [ 45.335559][ T5062] ? debug_check_no_obj_freed+0x210/0x420 [ 45.341270][ T5062] ? lock_downgrade+0x690/0x690 [ 45.346199][ T5062] ? aa_path_link+0x2f0/0x2f0 [ 45.350886][ T5062] ? lock_sync+0x190/0x190 [ 45.355321][ T5062] ? btrfs_replace_file_extents+0x1aa0/0x1aa0 [ 45.361410][ T5062] vfs_fallocate+0x48b/0xe40 [ 45.365997][ T5062] ioctl_preallocate+0x18e/0x200 [ 45.370930][ T5062] ? fiemap_prep+0x220/0x220 [ 45.375518][ T5062] do_vfs_ioctl+0x12e9/0x1670 [ 45.380188][ T5062] ? vfs_fileattr_set+0xc40/0xc40 [ 45.385207][ T5062] ? find_held_lock+0x2d/0x110 [ 45.389962][ T5062] ? name_to_dev_t+0x262/0x9e0 [ 45.394728][ T5062] ? lock_downgrade+0x690/0x690 [ 45.399627][ T5062] ? bpf_lsm_file_ioctl+0x9/0x10 [ 45.404556][ T5062] __x64_sys_ioctl+0x10c/0x210 [ 45.409309][ T5062] do_syscall_64+0x39/0xb0 [ 45.413712][ T5062] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 45.419621][ T5062] RIP: 0033:0x7faac325aab9 [ 45.424026][ T5062] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 45.443648][ T5062] RSP: 002b:00007ffeb6874018 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.452064][ T5062] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007faac325aab9 [ 45.460042][ T5062] RDX: 0000000020000080 RSI: 0000000040305828 RDI: 0000000000000004 [ 45.468009][ T5062] RBP: 00007ffeb6874040 R08: 0000000000000002 R09: 00007ffeb6874050 [ 45.475988][ T5062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 45.483959][ T5062] R13: 00007ffeb6874080 R14: 00007ffeb6874060 R15: 0000000000000003 [ 45.491925][ T5062] [ 45.495344][ T5062] ------------[ cut here ]------------ [ 45.500831][ T5062] kernel BUG at fs/btrfs/extent-io-tree.c:379! [ 45.507009][ T5062] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 45.513055][ T5062] CPU: 0 PID: 5062 Comm: syz-executor100 Not tainted 6.4.0-rc7-syzkaller-00072-gdad9774deaf1 #0 [ 45.523442][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 45.533476][ T5062] RIP: 0010:set_state_bits.isra.0+0x17b/0x1c0 [ 45.539555][ T5062] Code: 38 d0 7c 04 84 d2 75 31 44 8b 73 7c e8 0e 68 f7 fd 44 89 e0 44 09 f0 89 43 7c 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 f5 67 f7 fd <0f> 0b 4c 89 ef e8 0b 33 4a fe e9 e6 fe ff ff 4c 89 ef e8 fe 32 4a [ 45.559143][ T5062] RSP: 0018:ffffc90003baf7c8 EFLAGS: 00010293 [ 45.565195][ T5062] RAX: 0000000000000000 RBX: ffff888071c89000 RCX: 0000000000000000 [ 45.573152][ T5062] RDX: ffff88807a6a9dc0 RSI: ffffffff838cdf1b RDI: 0000000000000005 [ 45.581105][ T5062] RBP: 00000000fffffff4 R08: 0000000000000005 R09: 0000000000000000 [ 45.589144][ T5062] R10: 00000000fffffff4 R11: 0000000000000001 R12: 0000000000000800 [ 45.597105][ T5062] R13: ffff888071c8907c R14: 0000000000000fff R15: 0000000000000000 [ 45.605076][ T5062] FS: 000055555701b300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 45.613987][ T5062] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.620560][ T5062] CR2: 00007faac32d2140 CR3: 00000000291b5000 CR4: 0000000000350ef0 [ 45.628529][ T5062] Call Trace: [ 45.631792][ T5062] [ 45.634714][ T5062] ? die+0x32/0x90 [ 45.638445][ T5062] ? do_trap+0x1b2/0x3f0 [ 45.642670][ T5062] ? set_state_bits.isra.0+0x17b/0x1c0 [ 45.648116][ T5062] ? set_state_bits.isra.0+0x17b/0x1c0 [ 45.653560][ T5062] ? do_error_trap+0xb1/0x170 [ 45.658232][ T5062] ? set_state_bits.isra.0+0x17b/0x1c0 [ 45.663706][ T5062] ? handle_invalid_op+0x2c/0x30 [ 45.668628][ T5062] ? set_state_bits.isra.0+0x17b/0x1c0 [ 45.674160][ T5062] ? exc_invalid_op+0x2f/0x50 [ 45.678816][ T5062] ? asm_exc_invalid_op+0x1a/0x20 [ 45.683828][ T5062] ? set_state_bits.isra.0+0x17b/0x1c0 [ 45.689272][ T5062] ? set_state_bits.isra.0+0x17b/0x1c0 [ 45.694716][ T5062] ? set_state_bits.isra.0+0x17b/0x1c0 [ 45.700160][ T5062] __set_extent_bit+0xb81/0x15f0 [ 45.705114][ T5062] set_record_extent_bits+0x5c/0x90 [ 45.710318][ T5062] qgroup_reserve_data+0x233/0xa80 [ 45.715416][ T5062] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 45.721050][ T5062] ? btrfs_fallocate+0x6d4/0x27f0 [ 45.726059][ T5062] btrfs_qgroup_reserve_data+0x2f/0xd0 [ 45.731506][ T5062] btrfs_fallocate+0x801/0x27f0 [ 45.736343][ T5062] ? btrfs_replace_file_extents+0x1aa0/0x1aa0 [ 45.742414][ T5062] ? debug_check_no_obj_freed+0x210/0x420 [ 45.748119][ T5062] ? lock_downgrade+0x690/0x690 [ 45.753046][ T5062] ? aa_path_link+0x2f0/0x2f0 [ 45.757708][ T5062] ? lock_sync+0x190/0x190 [ 45.762110][ T5062] ? btrfs_replace_file_extents+0x1aa0/0x1aa0 [ 45.768161][ T5062] vfs_fallocate+0x48b/0xe40 [ 45.772739][ T5062] ioctl_preallocate+0x18e/0x200 [ 45.777663][ T5062] ? fiemap_prep+0x220/0x220 [ 45.782237][ T5062] do_vfs_ioctl+0x12e9/0x1670 [ 45.786898][ T5062] ? vfs_fileattr_set+0xc40/0xc40 [ 45.791993][ T5062] ? find_held_lock+0x2d/0x110 [ 45.796740][ T5062] ? name_to_dev_t+0x262/0x9e0 [ 45.801505][ T5062] ? lock_downgrade+0x690/0x690 [ 45.806353][ T5062] ? bpf_lsm_file_ioctl+0x9/0x10 [ 45.811298][ T5062] __x64_sys_ioctl+0x10c/0x210 [ 45.816052][ T5062] do_syscall_64+0x39/0xb0 [ 45.820460][ T5062] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 45.826373][ T5062] RIP: 0033:0x7faac325aab9 [ 45.830784][ T5062] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 45.850370][ T5062] RSP: 002b:00007ffeb6874018 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.858780][ T5062] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007faac325aab9 [ 45.866733][ T5062] RDX: 0000000020000080 RSI: 0000000040305828 RDI: 0000000000000004 [ 45.874796][ T5062] RBP: 00007ffeb6874040 R08: 0000000000000002 R09: 00007ffeb6874050 [ 45.882755][ T5062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 45.890738][ T5062] R13: 00007ffeb6874080 R14: 00007ffeb6874060 R15: 0000000000000003 [ 45.898705][ T5062] [ 45.901718][ T5062] Modules linked in: [ 45.905649][ T5062] ---[ end trace 0000000000000000 ]--- [ 45.911114][ T5062] RIP: 0010:set_state_bits.isra.0+0x17b/0x1c0 [ 45.917171][ T5062] Code: 38 d0 7c 04 84 d2 75 31 44 8b 73 7c e8 0e 68 f7 fd 44 89 e0 44 09 f0 89 43 7c 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 f5 67 f7 fd <0f> 0b 4c 89 ef e8 0b 33 4a fe e9 e6 fe ff ff 4c 89 ef e8 fe 32 4a [ 45.936797][ T5062] RSP: 0018:ffffc90003baf7c8 EFLAGS: 00010293 [ 45.942887][ T5062] RAX: 0000000000000000 RBX: ffff888071c89000 RCX: 0000000000000000 [ 45.950977][ T5062] RDX: ffff88807a6a9dc0 RSI: ffffffff838cdf1b RDI: 0000000000000005 [ 45.958998][ T5062] RBP: 00000000fffffff4 R08: 0000000000000005 R09: 0000000000000000 [ 45.967041][ T5062] R10: 00000000fffffff4 R11: 0000000000000001 R12: 0000000000000800 [ 45.975029][ T5062] R13: ffff888071c8907c R14: 0000000000000fff R15: 0000000000000000 [ 45.983025][ T5062] FS: 000055555701b300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 45.991973][ T5062] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.998575][ T5062] CR2: 00007faac32d2140 CR3: 00000000291b5000 CR4: 0000000000350ef0 [ 46.006544][ T5062] Kernel panic - not syncing: Fatal exception [ 46.013329][ T5062] Kernel Offset: disabled [ 46.017662][ T5062] Rebooting in 86400 seconds..