ci2 starts bisection 2023-08-22 14:41:28.140969253 +0000 UTC m=+6897.458843430 bisecting cause commit starting from c2611a04b92f0e6a38f718c50605300a325b7c7b building syzkaller on d216d8a03b50bef82eac746d227230835f061640 ensuring issue is reproducible on original commit c2611a04b92f0e6a38f718c50605300a325b7c7b testing commit c2611a04b92f0e6a38f718c50605300a325b7c7b gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 550dfd79cf1c663e79652fc5932fdbe510350b803c2025c866e428d29e41a6a0 all runs: crashed: KASAN: null-ptr-deref Write in backing_data_changed representative crash: KASAN: null-ptr-deref Write in backing_data_changed, types: [KASAN] check whether we can drop unnecessary instrumentation disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed testing commit c2611a04b92f0e6a38f718c50605300a325b7c7b gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d108dee4e87dafc27acd4145b2bd67ac3079848dc7591cefc93f97a32d667a7b all runs: crashed: KASAN: null-ptr-deref Write in backing_data_changed representative crash: KASAN: null-ptr-deref Write in backing_data_changed, types: [KASAN] the bug reproduces without the instrumentation disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG LOCKDEP], they are not needed kconfig minimization: base=5179 full=6487 leaves diff=250 split chunks (needed=false): <250> split chunk #0 of len 250 into 5 parts testing without sub-chunk 1/5 disabling configs for [HANG LEAK UBSAN BUG LOCKDEP ATOMIC_SLEEP], they are not needed testing commit c2611a04b92f0e6a38f718c50605300a325b7c7b gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a1cb3a1ca69b41b1e3e88ae3668447904579860414a9bb782dc9f417aa6f5b17 all runs: crashed: KASAN: null-ptr-deref Write in backing_data_changed representative crash: KASAN: null-ptr-deref Write in backing_data_changed, types: [KASAN] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [BUG LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit c2611a04b92f0e6a38f718c50605300a325b7c7b gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 1b3a272cfe5750470b1ec8ab2536ba2003f2e2f0d7501fcf8352b7a77e4f5e77 all runs: crashed: KASAN: null-ptr-deref Write in backing_data_changed representative crash: KASAN: null-ptr-deref Write in backing_data_changed, types: [KASAN] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [HANG LEAK UBSAN BUG LOCKDEP ATOMIC_SLEEP], they are not needed testing commit c2611a04b92f0e6a38f718c50605300a325b7c7b gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 29ea3961a3cc93f6b7e41cf37e8c5fb4e03df794d61518f7e5e1ef653a66bcc2 all runs: crashed: KASAN: null-ptr-deref Write in backing_data_changed representative crash: KASAN: null-ptr-deref Write in backing_data_changed, types: [KASAN] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [ATOMIC_SLEEP HANG LEAK UBSAN BUG LOCKDEP], they are not needed testing commit c2611a04b92f0e6a38f718c50605300a325b7c7b gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ef0c475a8299ed93581671969527b7e7ceea66b9d1d28d4e4e14f8c28a39aaa5 all runs: crashed: KASAN: null-ptr-deref Write in backing_data_changed representative crash: KASAN: null-ptr-deref Write in backing_data_changed, types: [KASAN] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [HANG LEAK UBSAN BUG LOCKDEP ATOMIC_SLEEP], they are not needed testing commit c2611a04b92f0e6a38f718c50605300a325b7c7b gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 failed building c2611a04b92f0e6a38f718c50605300a325b7c7b: net/socket.c:1225: undefined reference to `wext_handle_ioctl' net/socket.c:3420: undefined reference to `compat_wext_handle_ioctl' net/core/net-procfs.c:329: undefined reference to `wext_proc_init' net/core/net-procfs.c:345: undefined reference to `wext_proc_exit' minimized to 50 configs; suspects: [HID_ZEROPLUS USB_NET_CDC_MBIM USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_DM9601 USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_PURELIFI WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_SILABS WLAN_VENDOR_ZYDAS X86_X32_ABI ZEROPLUS_FF] disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN BUG], they are not needed testing release v6.1.25 testing commit f17b0ab65d17988d5e6d6fe22f708ef3721080bf gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8fb7136f114956b775dbbfa5aea3c1190958bbee663777ba6a230520a201c452 all runs: OK false negative chance: 0.000 # git bisect start c2611a04b92f0e6a38f718c50605300a325b7c7b f17b0ab65d17988d5e6d6fe22f708ef3721080bf Bisecting: 3107 revisions left to test after this (roughly 12 steps) [01566e583b4a596c7a6c4158e7a298f8cefcdf73] ANDROID: usb: gadget: f_accessory: Mitgate handling of non-existent USB request testing commit 01566e583b4a596c7a6c4158e7a298f8cefcdf73 gcc compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: dc587aa6e85d4736f6d14bd830969239e4af57494fbb1e322b3e74082abee3c1 all runs: OK false negative chance: 0.000 # git bisect good 01566e583b4a596c7a6c4158e7a298f8cefcdf73 Bisecting: 1554 revisions left to test after this (roughly 11 steps) [186b73e3d2bda53da79d9a8d4501aa020a8d8fcf] FROMGIT: scsi: ufs: ufs-mediatek: Remove unnecessary return code testing commit 186b73e3d2bda53da79d9a8d4501aa020a8d8fcf gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 474d608a4db532fb4d6ef5720725b41caa97bce549b9624e5d1335b6437fd29a all runs: OK false negative chance: 0.000 # git bisect good 186b73e3d2bda53da79d9a8d4501aa020a8d8fcf Bisecting: 777 revisions left to test after this (roughly 10 steps) [794e18b1af4a359b188a2a807032f33e6069358a] Merge "Merge 55fba69fbfd0 ("rust: kernel: Mark rust_fmt_argument as extern "C"") into android14-6.1" into android14-6.1 testing commit 794e18b1af4a359b188a2a807032f33e6069358a gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 9d6c735512ddcf8246120e592332421197fbdd79e4edd3882be291e1bdf195c5 all runs: OK false negative chance: 0.000 # git bisect good 794e18b1af4a359b188a2a807032f33e6069358a Bisecting: 388 revisions left to test after this (roughly 9 steps) [672eca4c069302d354f04c3179ddd7cd088b4d0a] ANDROID: add vendor fields to swap_slots_cache to support multiple swap devices testing commit 672eca4c069302d354f04c3179ddd7cd088b4d0a gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 787c2cbd70474471599d2e44a750434d2d52310a0d2bad647fdc74e4854e2aaa all runs: crashed: KASAN: null-ptr-deref Write in backing_data_changed representative crash: KASAN: null-ptr-deref Write in backing_data_changed, types: [KASAN] # git bisect bad 672eca4c069302d354f04c3179ddd7cd088b4d0a Bisecting: 194 revisions left to test after this (roughly 8 steps) [d469524df8ed0c15a2aeab9911b37a0857cdd7a8] ANDROID: virt: gunyah: Add KABI reservations testing commit d469524df8ed0c15a2aeab9911b37a0857cdd7a8 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 8d7658cfdb21893c1193c74f7932892d0204a4200bd8503714caea6a9400ffa7 all runs: OK false negative chance: 0.000 # git bisect good d469524df8ed0c15a2aeab9911b37a0857cdd7a8 Bisecting: 97 revisions left to test after this (roughly 7 steps) [508ca06639a6179f061acc7023fb3c56d1a8cbac] ANDROID: vendor_hooks:vendor hook for control memory dirty rate testing commit 508ca06639a6179f061acc7023fb3c56d1a8cbac gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: d5d12f85579ae787f40ed268b7d547157d179bda11dfdc43c0021f5bfc256db2 all runs: crashed: KASAN: null-ptr-deref Write in backing_data_changed representative crash: KASAN: null-ptr-deref Write in backing_data_changed, types: [KASAN] # git bisect bad 508ca06639a6179f061acc7023fb3c56d1a8cbac Bisecting: 48 revisions left to test after this (roughly 6 steps) [3be7d118e72655ddb69152978ab5781970889b3a] ANDROID: Add vendor hook to the effective_cpu_util testing commit 3be7d118e72655ddb69152978ab5781970889b3a gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: bb1598b861bf627656bb476d3d1c3c7557175d1a4ba69d369d668bbc1a8ea270 all runs: crashed: KASAN: null-ptr-deref Write in backing_data_changed representative crash: KASAN: null-ptr-deref Write in backing_data_changed, types: [KASAN] # git bisect bad 3be7d118e72655ddb69152978ab5781970889b3a Bisecting: 23 revisions left to test after this (roughly 5 steps) [44397506418a6333a29613de6c786d983c827f95] ANDROID: ABI: update symbol list for exynos testing commit 44397506418a6333a29613de6c786d983c827f95 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: a9a200f45632255081aece67ebd2068185a404eca63c9dc2454a259d8360b22a all runs: OK false negative chance: 0.000 # git bisect good 44397506418a6333a29613de6c786d983c827f95 Bisecting: 11 revisions left to test after this (roughly 4 steps) [e03c7f09c63a807487ec19f783109bb23da4a403] ANDROID: ABI: Update oplus symbol list testing commit e03c7f09c63a807487ec19f783109bb23da4a403 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 165f218b1aac175595f632e209f60233760f5c084a5e6670b00c73db462418d1 all runs: crashed: KASAN: null-ptr-deref Write in backing_data_changed representative crash: KASAN: null-ptr-deref Write in backing_data_changed, types: [KASAN] # git bisect bad e03c7f09c63a807487ec19f783109bb23da4a403 Bisecting: 5 revisions left to test after this (roughly 3 steps) [12132bd611e4ed8d71cedc56ba8c1cc2100fcf05] UPSTREAM: mm/userfaultfd: fix uffd-wp handling for THP migration entries testing commit 12132bd611e4ed8d71cedc56ba8c1cc2100fcf05 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: bfe2ca25b5e7e75aa4150b6ce8c27052f1d6c718b057801271c4b7e273e0caff all runs: crashed: KASAN: null-ptr-deref Write in backing_data_changed representative crash: KASAN: null-ptr-deref Write in backing_data_changed, types: [KASAN] # git bisect bad 12132bd611e4ed8d71cedc56ba8c1cc2100fcf05 Bisecting: 2 revisions left to test after this (roughly 2 steps) [1464eaee1bba05562b3120d687c88fcb636a216c] ANDROID: GKI: update xiaomi symbol list testing commit 1464eaee1bba05562b3120d687c88fcb636a216c gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 6935217602928cccce7045398662a7b7449bf83221933d1d9f1734dff5a9a221 all runs: OK false negative chance: 0.000 # git bisect good 1464eaee1bba05562b3120d687c88fcb636a216c Bisecting: 0 revisions left to test after this (roughly 1 step) [ab721b09b10d3be086a94472241f7804f089ea65] UPSTREAM: mm/khugepaged: check again on anon uffd-wp during isolation testing commit ab721b09b10d3be086a94472241f7804f089ea65 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 395aa7bc771b2469bda0c4e3bd4d23557f0f403f272c451b00ddf46bf979b913 all runs: crashed: KASAN: null-ptr-deref Write in backing_data_changed representative crash: KASAN: null-ptr-deref Write in backing_data_changed, types: [KASAN] # git bisect bad ab721b09b10d3be086a94472241f7804f089ea65 Bisecting: 0 revisions left to test after this (roughly 0 steps) [c0f5b9920fddb8e08b9a906ed8d4fb9c46cc19d1] UPSTREAM: fuse: always revalidate rename target dentry testing commit c0f5b9920fddb8e08b9a906ed8d4fb9c46cc19d1 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 97263fb2e90eab22d01a3b7cbfa351874f0534b31e6ff642682aafcd19338693 all runs: crashed: KASAN: null-ptr-deref Write in backing_data_changed representative crash: KASAN: null-ptr-deref Write in backing_data_changed, types: [KASAN] # git bisect bad c0f5b9920fddb8e08b9a906ed8d4fb9c46cc19d1 c0f5b9920fddb8e08b9a906ed8d4fb9c46cc19d1 is the first bad commit commit c0f5b9920fddb8e08b9a906ed8d4fb9c46cc19d1 Author: Jiachen Zhang Date: Wed Sep 28 20:19:34 2022 +0800 UPSTREAM: fuse: always revalidate rename target dentry commit ccc031e26afe60d2a5a3d93dabd9c978210825fb upstream. The previous commit df8629af2934 ("fuse: always revalidate if exclusive create") ensures that the dentries are revalidated on O_EXCL creates. This commit complements it by also performing revalidation for rename target dentries. Otherwise, a rename target file that only exists in kernel dentry cache but not in the filesystem will result in EEXIST if RENAME_NOREPLACE flag is used. Change-Id: I3500c168b37469e0fcf5664a3deb4d54e45b926d Signed-off-by: Jiachen Zhang Signed-off-by: Zhang Tianci Signed-off-by: Miklos Szeredi Signed-off-by: Yang Bo Signed-off-by: Greg Kroah-Hartman (cherry picked from commit 7ca973d830c0050ed8def693f7a8b2ef588b6142) Signed-off-by: Greg Kroah-Hartman fs/fuse/dir.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) accumulated error probability: 0.00 culprit signature: 97263fb2e90eab22d01a3b7cbfa351874f0534b31e6ff642682aafcd19338693 parent signature: 6935217602928cccce7045398662a7b7449bf83221933d1d9f1734dff5a9a221 revisions tested: 20, total time: 8h50m33.175583275s (build: 6h30m11.828080416s, test: 1h50m23.024408641s) first bad commit: c0f5b9920fddb8e08b9a906ed8d4fb9c46cc19d1 UPSTREAM: fuse: always revalidate rename target dentry recipients (to): ["gregkh@google.com" "gregkh@linuxfoundation.org" "mszeredi@redhat.com" "yb203166@antfin.com" "zhangjiachen.jaycee@bytedance.com" "zhangtianci.1997@bytedance.com"] recipients (cc): [] crash: KASAN: null-ptr-deref Write in backing_data_changed ================================================================== BUG: KASAN: null-ptr-deref in instrument_atomic_read_write include/linux/instrumented.h:102 [inline] BUG: KASAN: null-ptr-deref in atomic_inc_return include/linux/atomic/atomic-instrumented.h:198 [inline] BUG: KASAN: null-ptr-deref in ihold+0x19/0x30 fs/inode.c:450 Write of size 4 at addr 0000000000000160 by task syz-executor.0/356 CPU: 0 PID: 356 Comm: syz-executor.0 Not tainted 6.1.25-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x105/0x148 lib/dump_stack.c:106 print_report+0xe1/0x4e0 mm/kasan/report.c:398 kasan_report+0x13c/0x170 mm/kasan/report.c:495 kasan_check_range+0x294/0x2a0 mm/kasan/generic.c:189 __kasan_check_write+0x14/0x20 mm/kasan/shadow.c:37 instrument_atomic_read_write include/linux/instrumented.h:102 [inline] atomic_inc_return include/linux/atomic/atomic-instrumented.h:198 [inline] ihold+0x19/0x30 fs/inode.c:450 backing_data_changed+0x1ce/0x4b0 fs/fuse/dir.c:202 fuse_dentry_revalidate+0x76e/0xbd0 fs/fuse/dir.c:312 d_revalidate fs/namei.c:856 [inline] lookup_dcache fs/namei.c:1565 [inline] __lookup_hash+0x98/0x1f0 fs/namei.c:1586 do_renameat2+0x564/0x10d0 fs/namei.c:4881 __do_sys_rename fs/namei.c:4976 [inline] __se_sys_rename fs/namei.c:4974 [inline] __x64_sys_rename+0x81/0x90 fs/namei.c:4974 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f1a36a7cae9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f1a3783e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 RAX: ffffffffffffffda RBX: 00007f1a36b9c050 RCX: 00007f1a36a7cae9 RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000020000100 RBP: 00007f1a36ac847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f1a36b9c050 R15: 00007ffd3c93dde8 ================================================================== BUG: kernel NULL pointer dereference, address: 0000000000000160 #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD 1249ad067 P4D 1249ad067 PUD 1249b1067 PMD 0 Oops: 0002 [#1] PREEMPT SMP KASAN CPU: 1 PID: 356 Comm: syz-executor.0 Tainted: G B 6.1.25-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 RIP: 0010:arch_atomic_inc_return include/linux/atomic/atomic-arch-fallback.h:440 [inline] RIP: 0010:atomic_inc_return include/linux/atomic/atomic-instrumented.h:199 [inline] RIP: 0010:ihold+0x1e/0x30 fs/inode.c:450 Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 53 48 89 fb 48 81 c7 60 01 00 00 be 04 00 00 00 e8 07 aa f2 ff b8 01 00 00 00 0f c1 83 60 01 00 00 5b 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 RSP: 0018:ffffc90000e277e8 EFLAGS: 00010246 RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff813b3220 RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff85c8c7a0 RBP: ffffc90000e277f0 R08: dffffc0000000000 R09: fffffbfff0b918f5 R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 R13: ffffc90000e278a0 R14: 1ffff920001c4f0c R15: ffff88810b769600 FS: 00007f1a3783e6c0(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000160 CR3: 000000012499e000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: backing_data_changed+0x1ce/0x4b0 fs/fuse/dir.c:202 fuse_dentry_revalidate+0x76e/0xbd0 fs/fuse/dir.c:312 d_revalidate fs/namei.c:856 [inline] lookup_dcache fs/namei.c:1565 [inline] __lookup_hash+0x98/0x1f0 fs/namei.c:1586 do_renameat2+0x564/0x10d0 fs/namei.c:4881 __do_sys_rename fs/namei.c:4976 [inline] __se_sys_rename fs/namei.c:4974 [inline] __x64_sys_rename+0x81/0x90 fs/namei.c:4974 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f1a36a7cae9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f1a3783e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 RAX: ffffffffffffffda RBX: 00007f1a36b9c050 RCX: 00007f1a36a7cae9 RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000020000100 RBP: 00007f1a36ac847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f1a36b9c050 R15: 00007ffd3c93dde8 Modules linked in: CR2: 0000000000000160 ---[ end trace 0000000000000000 ]--- RIP: 0010:arch_atomic_inc_return include/linux/atomic/atomic-arch-fallback.h:440 [inline] RIP: 0010:atomic_inc_return include/linux/atomic/atomic-instrumented.h:199 [inline] RIP: 0010:ihold+0x1e/0x30 fs/inode.c:450 Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 53 48 89 fb 48 81 c7 60 01 00 00 be 04 00 00 00 e8 07 aa f2 ff b8 01 00 00 00 0f c1 83 60 01 00 00 5b 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5 RSP: 0018:ffffc90000e277e8 EFLAGS: 00010246 RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff813b3220 RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff85c8c7a0 RBP: ffffc90000e277f0 R08: dffffc0000000000 R09: fffffbfff0b918f5 R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 R13: ffffc90000e278a0 R14: 1ffff920001c4f0c R15: ffff88810b769600 FS: 00007f1a3783e6c0(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000160 CR3: 000000012499e000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 2e 0f 1f 84 00 00 00 cs nopl 0x0(%rax,%rax,1) 7: 00 00 9: 0f 1f 00 nopl (%rax) c: 55 push %rbp d: 48 89 e5 mov %rsp,%rbp 10: 53 push %rbx 11: 48 89 fb mov %rdi,%rbx 14: 48 81 c7 60 01 00 00 add $0x160,%rdi 1b: be 04 00 00 00 mov $0x4,%esi 20: e8 07 aa f2 ff call 0xfff2aa2c 25: b8 01 00 00 00 mov $0x1,%eax * 2a: f0 0f c1 83 60 01 00 lock xadd %eax,0x160(%rbx) <-- trapping instruction 31: 00 32: 5b pop %rbx 33: 5d pop %rbp 34: c3 ret 35: 0f 1f 80 00 00 00 00 nopl 0x0(%rax) 3c: 55 push %rbp 3d: 48 89 e5 mov %rsp,%rbp