./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor277814117

<...>
[   91.141630][   T43] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts.
execve("./syz-executor277814117", ["./syz-executor277814117"], 0x7ffc97466540 /* 10 vars */) = 0
brk(NULL)                               = 0x55558c654000
brk(0x55558c654d40)                     = 0x55558c654d40
arch_prctl(ARCH_SET_FS, 0x55558c6543c0) = 0
set_tid_address(0x55558c654690)         = 5852
set_robust_list(0x55558c6546a0, 24)     = 0
rseq(0x55558c654ce0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor277814117", 4096) = 27
getrandom("\x58\x29\xbc\xfc\x77\xf8\xc2\xf0", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55558c654d40
brk(0x55558c675d40)                     = 0x55558c675d40
brk(0x55558c676000)                     = 0x55558c676000
mprotect(0x7f2a6faef000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5853 attached
, child_tidptr=0x55558c654690) = 5853
[pid  5853] set_robust_list(0x55558c6546a0, 24) = 0
[pid  5853] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5853] setpgid(0, 0)               = 0
[pid  5853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5853] write(3, "1000", 4)         = 4
[pid  5853] close(3)                    = 0
[pid  5853] write(1, "executing program\n", 18executing program
) = 18
[pid  5853] futex(0x7f2a6faf53ec, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5853] rt_sigaction(SIGRT_1, {sa_handler=0x7f2a6fa8eb20, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2a6fa801a0}, NULL, 8) = 0
[pid  5853] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5853] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2a6fa01000
[pid  5853] mprotect(0x7f2a6fa02000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5853] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5853] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2a6fa21990, parent_tid=0x7f2a6fa21990, exit_signal=0, stack=0x7f2a6fa01000, stack_size=0x20300, tls=0x7f2a6fa216c0}./strace-static-x86_64: Process 5854 attached
 => {parent_tid=[5854]}, 88) = 5854
[pid  5854] rseq(0x7f2a6fa21fe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid  5853] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5854] <... rseq resumed>)         = 0
[pid  5853] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5854] set_robust_list(0x7f2a6fa219a0, 24 <unfinished ...>
[pid  5853] futex(0x7f2a6faf53e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5854] <... set_robust_list resumed>) = 0
[pid  5854] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5853] <... futex resumed>)        = 0
[pid  5854] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5853] futex(0x7f2a6faf53ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5854] mkdirat(AT_FDCWD, "./file0", 000) = 0
[pid  5854] futex(0x7f2a6faf53ec, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5854] futex(0x7f2a6faf53e8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5853] <... futex resumed>)        = 0
[pid  5853] futex(0x7f2a6faf53e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5854] <... futex resumed>)        = 0
[pid  5853] <... futex resumed>)        = 1
[pid  5854] openat(AT_FDCWD, "/dev/fuse", O_RDWR <unfinished ...>
[pid  5853] futex(0x7f2a6faf53ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5854] <... openat resumed>)       = 3
[pid  5854] futex(0x7f2a6faf53ec, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5853] <... futex resumed>)        = 0
[pid  5854] mount(NULL, "./file0", "fuse", 0, "fd=0x0000000000000003,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=0000000"... <unfinished ...>
[pid  5853] futex(0x7f2a6faf53e8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5854] <... mount resumed>)        = 0
[pid  5853] futex(0x7f2a6faf53ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5854] futex(0x7f2a6faf53ec, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5853] <... futex resumed>)        = 0
[pid  5854] <... futex resumed>)        = 1
[pid  5853] futex(0x7f2a6faf53e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5854] read(3,  <unfinished ...>
[pid  5853] <... futex resumed>)        = 0
[pid  5854] <... read resumed>"\x68\x00\x00\x00\x1a\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x2c\x00\x00\x00\x00\x00\x02\x00\xfb\xff\xff\x73\xdf\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8224) = 104
[pid  5853] futex(0x7f2a6faf53ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5854] futex(0x7f2a6faf53ec, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5853] <... futex resumed>)        = 0
[pid  5854] <... futex resumed>)        = 1
[pid  5853] futex(0x7f2a6faf53e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5854] read(3,  <unfinished ...>
[pid  5853] <... futex resumed>)        = 0
[pid  5853] futex(0x7f2a6faf53ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[pid  5853] futex(0x7f2a6faf53fc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5853] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2a6f9e0000
[pid  5853] mprotect(0x7f2a6f9e1000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5853] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5853] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2a6fa00990, parent_tid=0x7f2a6fa00990, exit_signal=0, stack=0x7f2a6f9e0000, stack_size=0x20300, tls=0x7f2a6fa006c0}./strace-static-x86_64: Process 5855 attached
 => {parent_tid=[5855]}, 88) = 5855
[pid  5855] rseq(0x7f2a6fa00fe0, 0x20, 0, 0x53053053) = 0
[pid  5853] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5855] set_robust_list(0x7f2a6fa009a0, 24 <unfinished ...>
[pid  5853] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5855] <... set_robust_list resumed>) = 0
[pid  5855] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5853] futex(0x7f2a6faf53f8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5855] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5853] <... futex resumed>)        = 0
[pid  5855] write(3, "\x50\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x29\x00\x00\x00\x00\x00\x00\x00\x48\x03\x4c\x01\x00\x00\x02\x00\xfd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 80 <unfinished ...>
[pid  5853] futex(0x7f2a6faf53fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5855] <... write resumed>)        = 80
[pid  5855] futex(0x7f2a6faf53fc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5855] futex(0x7f2a6faf53f8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5853] <... futex resumed>)        = 0
[pid  5853] futex(0x7f2a6faf53f8, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5853] futex(0x7f2a6faf53fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5855] <... futex resumed>)        = 0
[pid  5855] openat(AT_FDCWD, "./file0/file0", O_RDONLY <unfinished ...>
[pid  5854] <... read resumed>"\x2e\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\x16\x00\x00\x00\x00\x00\x00\x66\x69\x6c\x65\x30\x00", 8192) = 46
[pid  5854] write(3, "\x90\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xff\x02\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 144) = 144
[pid  5854] futex(0x7f2a6faf53ec, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5855] <... openat resumed>)       = 4
[pid  5854] futex(0x7f2a6faf53e8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5855] futex(0x7f2a6faf53fc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5853] <... futex resumed>)        = 0
[pid  5855] futex(0x7f2a6faf53f8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5853] futex(0x7f2a6faf53e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5854] <... futex resumed>)        = 0
[pid  5853] <... futex resumed>)        = 1
[pid  5854] ioctl(4, ADD_NEW_DISK <unfinished ...>
[   92.888721][ T5855] block device autoloading is deprecated and will be removed.
[pid  5853] futex(0x7f2a6faf53ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5854] <... ioctl resumed>, 0x7)   = -1 EFAULT (Bad address)
[pid  5854] futex(0x7f2a6faf53ec, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5853] <... futex resumed>)        = 0
[pid  5854] futex(0x7f2a6faf53e8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5853] exit_group(0 <unfinished ...>
[pid  5855] <... futex resumed>)        = ?
[pid  5855] +++ exited with 0 +++
[pid  5854] <... futex resumed>)        = ?
[pid  5853] <... exit_group resumed>)   = ?
[pid  5854] +++ exited with 0 +++
[pid  5853] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5853, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5857 attached
, child_tidptr=0x55558c654690) = 5857
[pid  5857] set_robust_list(0x55558c6546a0, 24) = 0
[pid  5857] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5857] setpgid(0, 0)               = 0
[pid  5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5857] write(3, "1000", 4)         = 4
[pid  5857] close(3)                    = 0
[pid  5857] write(1, "executing program\n", 18executing program
) = 18
[pid  5857] futex(0x7f2a6faf53ec, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5857] rt_sigaction(SIGRT_1, {sa_handler=0x7f2a6fa8eb20, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2a6fa801a0}, NULL, 8) = 0
[pid  5857] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5857] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2a6fa01000
[pid  5857] mprotect(0x7f2a6fa02000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5857] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5857] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2a6fa21990, parent_tid=0x7f2a6fa21990, exit_signal=0, stack=0x7f2a6fa01000, stack_size=0x20300, tls=0x7f2a6fa216c0}./strace-static-x86_64: Process 5858 attached
 <unfinished ...>
[pid  5858] rseq(0x7f2a6fa21fe0, 0x20, 0, 0x53053053) = 0
[pid  5857] <... clone3 resumed> => {parent_tid=[5858]}, 88) = 5858
[pid  5858] set_robust_list(0x7f2a6fa219a0, 24 <unfinished ...>
[pid  5857] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5858] <... set_robust_list resumed>) = 0
[pid  5857] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5858] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5857] futex(0x7f2a6faf53e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5858] mkdirat(AT_FDCWD, "./file0", 000 <unfinished ...>
[pid  5857] <... futex resumed>)        = 0
[pid  5857] futex(0x7f2a6faf53ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5858] <... mkdirat resumed>)      = -1 EEXIST (File exists)
[pid  5858] futex(0x7f2a6faf53ec, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5858] futex(0x7f2a6faf53e8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5857] <... futex resumed>)        = 0
[pid  5857] futex(0x7f2a6faf53e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5858] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5857] <... futex resumed>)        = 0
[pid  5858] openat(AT_FDCWD, "/dev/fuse", O_RDWR <unfinished ...>
[pid  5857] futex(0x7f2a6faf53ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5858] <... openat resumed>)       = 3
[pid  5858] futex(0x7f2a6faf53ec, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5858] futex(0x7f2a6faf53e8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5857] <... futex resumed>)        = 0
[pid  5857] futex(0x7f2a6faf53e8, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5858] <... futex resumed>)        = 0
[pid  5857] futex(0x7f2a6faf53ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5858] mount(NULL, "./file0", "fuse", 0, "fd=0x0000000000000003,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=0000000"...) = 0
[pid  5858] futex(0x7f2a6faf53ec, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5857] <... futex resumed>)        = 0
[pid  5858] futex(0x7f2a6faf53e8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5857] futex(0x7f2a6faf53e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5858] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5857] <... futex resumed>)        = 0
[pid  5858] read(3,  <unfinished ...>
[pid  5857] futex(0x7f2a6faf53ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5858] <... read resumed>"\x68\x00\x00\x00\x1a\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x2c\x00\x00\x00\x00\x00\x02\x00\xfb\xff\xff\x73\xdf\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8224) = 104
[pid  5858] futex(0x7f2a6faf53ec, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5857] <... futex resumed>)        = 0
[pid  5858] <... futex resumed>)        = 1
[pid  5857] futex(0x7f2a6faf53e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5858] read(3,  <unfinished ...>
[pid  5857] <... futex resumed>)        = 0
[pid  5857] futex(0x7f2a6faf53ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[pid  5857] futex(0x7f2a6faf53fc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5857] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2a6f9e0000
[pid  5857] mprotect(0x7f2a6f9e1000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5857] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5857] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2a6fa00990, parent_tid=0x7f2a6fa00990, exit_signal=0, stack=0x7f2a6f9e0000, stack_size=0x20300, tls=0x7f2a6fa006c0}./strace-static-x86_64: Process 5859 attached
 => {parent_tid=[5859]}, 88) = 5859
[pid  5859] rseq(0x7f2a6fa00fe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid  5857] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5859] <... rseq resumed>)         = 0
[pid  5857] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5859] set_robust_list(0x7f2a6fa009a0, 24 <unfinished ...>
[pid  5857] futex(0x7f2a6faf53f8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5859] <... set_robust_list resumed>) = 0
[pid  5857] <... futex resumed>)        = 0
[pid  5859] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5857] futex(0x7f2a6faf53fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5859] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5859] write(3, "\x50\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x29\x00\x00\x00\x00\x00\x00\x00\x48\x03\x4c\x01\x00\x00\x02\x00\xfd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 80) = 80
[pid  5859] futex(0x7f2a6faf53fc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5857] <... futex resumed>)        = 0
[pid  5859] openat(AT_FDCWD, "./file0/file0", O_RDONLY <unfinished ...>
[pid  5857] futex(0x7f2a6faf53f8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5857] futex(0x7f2a6faf53fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5858] <... read resumed>"\x2e\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe3\x16\x00\x00\x00\x00\x00\x00\x66\x69\x6c\x65\x30\x00", 8192) = 46
[pid  5858] write(3, "\x90\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xff\x02\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 144) = 144
[pid  5859] <... openat resumed>)       = 4
[pid  5858] futex(0x7f2a6faf53ec, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5859] futex(0x7f2a6faf53fc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5858] <... futex resumed>)        = 0
[pid  5859] <... futex resumed>)        = 1
[pid  5858] futex(0x7f2a6faf53e8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5857] <... futex resumed>)        = 0
[pid  5859] futex(0x7f2a6faf53f8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5857] futex(0x7f2a6faf53e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5858] <... futex resumed>)        = 0
[pid  5858] ioctl(4, ADD_NEW_DISK <unfinished ...>
[pid  5857] <... futex resumed>)        = 1
[pid  5857] futex(0x7f2a6faf53ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5858] <... ioctl resumed>, 0x7)   = -1 EFAULT (Bad address)
[pid  5858] futex(0x7f2a6faf53ec, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5857] <... futex resumed>)        = 0
[pid  5858] futex(0x7f2a6faf53e8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5857] exit_group(0 <unfinished ...>
[pid  5859] <... futex resumed>)        = ?
[pid  5858] <... futex resumed>)        = ?
[pid  5859] +++ exited with 0 +++
[pid  5858] +++ exited with 0 +++
[pid  5857] <... exit_group resumed>)   = ?
[pid  5857] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5857, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} ---
[   93.303873][    T9] ------------[ cut here ]------------
[   93.309420][    T9] refcount_t: underflow; use-after-free.
[   93.315987][    T9] WARNING: CPU: 0 PID: 9 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0
[   93.325183][    T9] Modules linked in:
[   93.329148][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) 
[   93.340646][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5860 attached
 <unfinished ...>
[pid  5860] set_robust_list(0x55558c6546a0, 24) = 0
[pid  5860] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5860] setpgid(0, 0)               = 0
[pid  5860] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5852] <... clone resumed>, child_tidptr=0x55558c654690) = 5860
[pid  5860] <... openat resumed>)       = 3
[pid  5860] write(3, "1000", 4)         = 4
[pid  5860] close(3)                    = 0
executing program
[pid  5860] write(1, "executing program\n", 18) = 18
[pid  5860] futex(0x7f2a6faf53ec, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5860] rt_sigaction(SIGRT_1, {sa_handler=0x7f2a6fa8eb20, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f2a6fa801a0}, NULL, 8) = 0
[pid  5860] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5860] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2a6fa01000
[pid  5860] mprotect(0x7f2a6fa02000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5860] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5860] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2a6fa21990, parent_tid=0x7f2a6fa21990, exit_signal=0, stack=0x7f2a6fa01000, stack_size=0x20300, tls=0x7f2a6fa216c0}./strace-static-x86_64: Process 5861 attached
 => {parent_tid=[5861]}, 88) = 5861
[pid  5861] rseq(0x7f2a6fa21fe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid  5860] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5861] <... rseq resumed>)         = 0
[pid  5860] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5861] set_robust_list(0x7f2a6fa219a0, 24 <unfinished ...>
[pid  5860] futex(0x7f2a6faf53e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5861] <... set_robust_list resumed>) = 0
[pid  5860] <... futex resumed>)        = 0
[pid  5861] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5860] futex(0x7f2a6faf53ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5861] <... rt_sigprocmask resumed>NULL, 8) = 0
[   93.350750][    T9] Workqueue: md_misc mddev_delayed_delete
[   93.356500][    T9] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0
[   93.363273][    T9] Code: 00 83 e2 8b e8 b7 5b bf fc 90 0f 0b 90 90 eb d7 e8 bb 6d fb fc c6 05 09 32 c7 0a 01 90 48 c7 c7 60 83 e2 8b e8 97 5b bf fc 90 <0f> 0b 90 90 eb b7 e8 9b 6d fb fc c6 05 e6 31 c7 0a 01 90 48 c7 c7
[   93.383511][    T9] RSP: 0018:ffffc900000e7a68 EFLAGS: 00010246
[   93.390984][    T9] RAX: 0d9994fd442d4d00 RBX: 0000000000000003 RCX: ffff88801cac8000
[pid  5861] mkdirat(AT_FDCWD, "./file0", 000) = -1 EEXIST (File exists)
[pid  5861] futex(0x7f2a6faf53ec, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5860] <... futex resumed>)        = 0
[pid  5861] futex(0x7f2a6faf53e8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5860] futex(0x7f2a6faf53e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5861] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5860] <... futex resumed>)        = 0
[pid  5861] openat(AT_FDCWD, "/dev/fuse", O_RDWR <unfinished ...>
[pid  5860] futex(0x7f2a6faf53ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5861] <... openat resumed>)       = 3
[pid  5861] futex(0x7f2a6faf53ec, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5860] <... futex resumed>)        = 0
[pid  5860] futex(0x7f2a6faf53e8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5860] futex(0x7f2a6faf53ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5861] mount(NULL, "./file0", "fuse", 0, "fd=0x0000000000000003,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=0000000"...) = 0
[pid  5861] futex(0x7f2a6faf53ec, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5860] <... futex resumed>)        = 0
[pid  5861] read(3,  <unfinished ...>
[pid  5860] futex(0x7f2a6faf53e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5861] <... read resumed>"\x68\x00\x00\x00\x1a\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x2c\x00\x00\x00\x00\x00\x02\x00\xfb\xff\xff\x73\xdf\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8224) = 104
[pid  5860] <... futex resumed>)        = 0
[pid  5861] futex(0x7f2a6faf53ec, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5860] futex(0x7f2a6faf53ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5861] <... futex resumed>)        = 0
[pid  5860] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5861] futex(0x7f2a6faf53e8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5860] futex(0x7f2a6faf53e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5861] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid  5860] <... futex resumed>)        = 0
[pid  5861] read(3,  <unfinished ...>
[   93.399389][    T9] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[   93.407433][    T9] RBP: ffffc900000e7c70 R08: ffffc900000e7787 R09: 1ffff9200001cef0
[   93.415977][    T9] R10: dffffc0000000000 R11: fffff5200001cef1 R12: ffff8880b8639700
[   93.424021][    T9] R13: ffff88801ce81418 R14: ffff88803275a130 R15: 0000000000000000
[   93.432723][    T9] FS:  0000000000000000(0000) GS:ffff888125c07000(0000) knlGS:0000000000000000
[   93.441745][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[pid  5860] futex(0x7f2a6faf53ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[pid  5860] futex(0x7f2a6faf53fc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5860] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f2a6f9e0000
[   93.448355][    T9] CR2: 00007f2a6fabf278 CR3: 000000000df38000 CR4: 0000000000350ef0
[   93.457267][    T9] Call Trace:
[   93.460600][    T9]  <TASK>
[   93.463535][    T9]  ? process_scheduled_works+0x9ef/0x17b0
[   93.469251][    T9]  process_scheduled_works+0xae1/0x17b0
[   93.474871][    T9]  ? __pfx_process_scheduled_works+0x10/0x10
[   93.480913][    T9]  ? srso_alias_return_thunk+0x5/0xfbef5
[   93.486564][    T9]  worker_thread+0x8a0/0xda0
[   93.491233][    T9]  kthread+0x711/0x8a0
[   93.495327][    T9]  ? __pfx_worker_thread+0x10/0x10
[pid  5860] mprotect(0x7f2a6f9e1000, 131072, PROT_READ|PROT_WRITE) = 0
[pid  5860] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5860] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f2a6fa00990, parent_tid=0x7f2a6fa00990, exit_signal=0, stack=0x7f2a6f9e0000, stack_size=0x20300, tls=0x7f2a6fa006c0}./strace-static-x86_64: Process 5862 attached
 => {parent_tid=[5862]}, 88) = 5862
[pid  5862] rseq(0x7f2a6fa00fe0, 0x20, 0, 0x53053053 <unfinished ...>
[pid  5860] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5862] <... rseq resumed>)         = 0
[pid  5860] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5862] set_robust_list(0x7f2a6fa009a0, 24 <unfinished ...>
[pid  5860] futex(0x7f2a6faf53f8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5862] <... set_robust_list resumed>) = 0
[pid  5862] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid  5860] <... futex resumed>)        = 0
[pid  5862] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid  5862] write(3, "\x50\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x29\x00\x00\x00\x00\x00\x00\x00\x48\x03\x4c\x01\x00\x00\x02\x00\xfd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 80 <unfinished ...>
[pid  5860] futex(0x7f2a6faf53fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5862] <... write resumed>)        = 80
[pid  5862] futex(0x7f2a6faf53fc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5860] <... futex resumed>)        = 0
[pid  5862] openat(AT_FDCWD, "./file0/file0", O_RDONLY <unfinished ...>
[pid  5860] futex(0x7f2a6faf53f8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5861] <... read resumed>"\x2e\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6\x16\x00\x00\x00\x00\x00\x00\x66\x69\x6c\x65\x30\x00", 8192) = 46
[pid  5860] <... futex resumed>)        = 0
[pid  5861] write(3, "\x90\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xff\x02\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 144 <unfinished ...>
[pid  5862] <... openat resumed>)       = 4
[pid  5861] <... write resumed>)        = 144
[pid  5860] futex(0x7f2a6faf53fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid  5861] futex(0x7f2a6faf53ec, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid  5861] futex(0x7f2a6faf53e8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5862] futex(0x7f2a6faf53fc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid  5860] <... futex resumed>)        = 0
[pid  5860] futex(0x7f2a6faf53e8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid  5861] <... futex resumed>)        = 0
[pid  5860] <... futex resumed>)        = 1
[pid  5862] futex(0x7f2a6faf53f8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid  5861] ioctl(4, ADD_NEW_DISK <unfinished ...>
[   93.500529][    T9]  ? __pfx_kthread+0x10/0x10
[   93.505141][    T9]  ? srso_alias_return_thunk+0x5/0xfbef5
[   93.510992][    T9]  ? _raw_spin_unlock_irq+0x23/0x50
[   93.516943][    T9]  ? srso_alias_return_thunk+0x5/0xfbef5
[   93.522633][    T9]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.528332][    T9]  ? __pfx_kthread+0x10/0x10
[   93.533472][    T9]  ret_from_fork+0x3fc/0x770
[   93.538152][    T9]  ? __pfx_ret_from_fork+0x10/0x10
[   93.543320][    T9]  ? __switch_to_asm+0x39/0x70
[   93.548101][    T9]  ? __switch_to_asm+0x33/0x70
[   93.552923][    T9]  ? __pfx_kthread+0x10/0x10
[   93.557544][    T9]  ret_from_fork_asm+0x1a/0x30
[   93.562420][    T9]  </TASK>
[   93.565452][    T9] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   93.572736][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-syzkaller-00857-gced1b9e0392d #0 PREEMPT(full) 
[   93.584186][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   93.594238][    T9] Workqueue: md_misc mddev_delayed_delete
[   93.599975][    T9] Call Trace:
[   93.603248][    T9]  <TASK>
[   93.606172][    T9]  dump_stack_lvl+0x99/0x250
[   93.610767][    T9]  ? __asan_memcpy+0x40/0x70
[   93.615381][    T9]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.620582][    T9]  ? __pfx__printk+0x10/0x10
[   93.625185][    T9]  ? srso_alias_return_thunk+0x5/0xfbef5
[   93.630831][    T9]  panic+0x2db/0x790
[   93.634736][    T9]  ? __pfx_panic+0x10/0x10
[   93.639155][    T9]  ? show_trace_log_lvl+0x4fb/0x550
[   93.644366][    T9]  ? ret_from_fork_asm+0x1a/0x30
[   93.649311][    T9]  __warn+0x31b/0x4b0
[   93.653290][    T9]  ? refcount_warn_saturate+0x11a/0x1d0
[   93.658837][    T9]  ? refcount_warn_saturate+0x11a/0x1d0
[   93.664381][    T9]  report_bug+0x2be/0x4f0
[   93.668723][    T9]  ? refcount_warn_saturate+0x11a/0x1d0
[   93.674272][    T9]  ? refcount_warn_saturate+0x11a/0x1d0
[   93.679823][    T9]  ? refcount_warn_saturate+0x11c/0x1d0
[   93.685373][    T9]  handle_bug+0x84/0x160
[   93.689615][    T9]  exc_invalid_op+0x1a/0x50
[   93.694118][    T9]  asm_exc_invalid_op+0x1a/0x20
[   93.698971][    T9] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0
[   93.705133][    T9] Code: 00 83 e2 8b e8 b7 5b bf fc 90 0f 0b 90 90 eb d7 e8 bb 6d fb fc c6 05 09 32 c7 0a 01 90 48 c7 c7 60 83 e2 8b e8 97 5b bf fc 90 <0f> 0b 90 90 eb b7 e8 9b 6d fb fc c6 05 e6 31 c7 0a 01 90 48 c7 c7
[   93.724751][    T9] RSP: 0018:ffffc900000e7a68 EFLAGS: 00010246
[   93.730839][    T9] RAX: 0d9994fd442d4d00 RBX: 0000000000000003 RCX: ffff88801cac8000
[   93.738813][    T9] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[   93.746778][    T9] RBP: ffffc900000e7c70 R08: ffffc900000e7787 R09: 1ffff9200001cef0
[   93.754748][    T9] R10: dffffc0000000000 R11: fffff5200001cef1 R12: ffff8880b8639700
[   93.762720][    T9] R13: ffff88801ce81418 R14: ffff88803275a130 R15: 0000000000000000
[   93.770716][    T9]  ? refcount_warn_saturate+0x119/0x1d0
[   93.776271][    T9]  ? process_scheduled_works+0x9ef/0x17b0
[   93.781991][    T9]  process_scheduled_works+0xae1/0x17b0
[   93.787563][    T9]  ? __pfx_process_scheduled_works+0x10/0x10
[   93.793575][    T9]  ? srso_alias_return_thunk+0x5/0xfbef5
[   93.799224][    T9]  worker_thread+0x8a0/0xda0
[   93.803848][    T9]  kthread+0x711/0x8a0
[   93.807934][    T9]  ? __pfx_worker_thread+0x10/0x10
[   93.813046][    T9]  ? __pfx_kthread+0x10/0x10
[   93.817638][    T9]  ? srso_alias_return_thunk+0x5/0xfbef5
[   93.823279][    T9]  ? _raw_spin_unlock_irq+0x23/0x50
[   93.828481][    T9]  ? srso_alias_return_thunk+0x5/0xfbef5
[   93.834113][    T9]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.839339][    T9]  ? __pfx_kthread+0x10/0x10
[   93.843944][    T9]  ret_from_fork+0x3fc/0x770
[   93.848537][    T9]  ? __pfx_ret_from_fork+0x10/0x10
[   93.853657][    T9]  ? __switch_to_asm+0x39/0x70
[   93.858425][    T9]  ? __switch_to_asm+0x33/0x70
[   93.863191][    T9]  ? __pfx_kthread+0x10/0x10
[   93.867789][    T9]  ret_from_fork_asm+0x1a/0x30
[   93.872576][    T9]  </TASK>
[   93.875811][    T9] Kernel Offset: disabled
[   93.880132][    T9] Rebooting in 86400 seconds..