./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3152740325
<...>
Warning: Permanently added '10.128.0.14' (ECDSA) to the list of known hosts.
execve("./syz-executor3152740325", ["./syz-executor3152740325"], 0x7ffc9fe95900 /* 10 vars */) = 0
brk(NULL) = 0x555555a85000
brk(0x555555a85c40) = 0x555555a85c40
arch_prctl(ARCH_SET_FS, 0x555555a85300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3152740325", 4096) = 28
brk(0x555555aa6c40) = 0x555555aa6c40
brk(0x555555aa7000) = 0x555555aa7000
mprotect(0x7f8a9d880000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
getpid() = 5013
mkdir("./syzkaller.ce2fSf", 0700) = 0
chmod("./syzkaller.ce2fSf", 0777) = 0
chdir("./syzkaller.ce2fSf") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a855d0) = 5014
./strace-static-x86_64: Process 5014 attached
[pid 5014] chdir("./0") = 0
[pid 5014] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5014] setpgid(0, 0) = 0
[pid 5014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5014] write(3, "1000", 4) = 4
[pid 5014] close(3) = 0
[pid 5014] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5014] memfd_create("syzkaller", 0) = 3
[pid 5014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8a953bf000
syzkaller login: [ 56.319698][ T5014] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5014 'syz-executor315'
[pid 5014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5014] munmap(0x7f8a953bf000, 16777216) = 0
[pid 5014] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5014] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5014] close(3) = 0
[pid 5014] mkdir("./bus", 0777) = 0
[ 56.493507][ T5014] loop0: detected capacity change from 0 to 32768
[ 56.508078][ T5014] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor315 (5014)
[ 56.528096][ T5014] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 56.537096][ T5014] BTRFS info (device loop0): doing ref verification
[ 56.543856][ T5014] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[ 56.554855][ T5014] BTRFS info (device loop0): force zlib compression, level 3
[ 56.562325][ T5014] BTRFS info (device loop0): allowing degraded mounts
[ 56.569096][ T5014] BTRFS info (device loop0): using free space tree
[pid 5014] mount("/dev/loop0", "./bus", "btrfs", MS_DIRSYNC, "ref_verify,nossd,inode_cache,compress-force,space_cache=v2,degraded,noacl,") = 0
[pid 5014] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid 5014] chdir("./bus") = 0
[pid 5014] ioctl(4, LOOP_CLR_FD) = 0
[pid 5014] close(4) = 0
[pid 5014] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|FASYNC|0x3c, 000) = 4
[ 56.591796][ T5014] BTRFS info (device loop0): auto enabling async discard
[pid 5014] fallocate(4, 0, 0, 1048820) = 0
[pid 5014] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 5
[pid 5014] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6
[pid 5014] write(6, "12", 2) = 2
[pid 5014] pwritev2(5, [{iov_base="\x85\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x72\x65\x66\x5f\x76\x65\x72\x69\x66\x79\x2c\x6e\x6f\x73\x73\x64\x2c\x69\x6e\x6f\x64\x65\x5f\x63\x61\x63\x68\x65\x2c\x63\x6f\x6d\x70\x72\x65\x73"..., iov_len=475136}, {iov_base=NULL, iov_len=0}], 2, 16384, RWF_NOWAIT) = -1 EAGAIN (Resource temporarily unavailable)
[pid 5014] exit_group(0) = ?
[pid 5014] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5014, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=22 /* 0.22 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555a86620 /* 4 entries */, 32768) = 104
umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555a8e660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555a8e660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./0/bus") = 0
umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./0/binderfs") = 0
getdents64(3, 0x555555a86620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./0") = 0
mkdir("./1", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a855d0) = 5042
./strace-static-x86_64: Process 5042 attached
[pid 5042] chdir("./1") = 0
[pid 5042] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5042] setpgid(0, 0) = 0
[pid 5042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5042] write(3, "1000", 4) = 4
[pid 5042] close(3) = 0
[pid 5042] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5042] memfd_create("syzkaller", 0) = 3
[pid 5042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8a953bf000
[pid 5042] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5042] munmap(0x7f8a953bf000, 16777216) = 0
[pid 5042] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5042] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5042] close(3) = 0
[pid 5042] mkdir("./bus", 0777) = 0
[ 57.018726][ T5042] loop0: detected capacity change from 0 to 32768
[ 57.031728][ T5042] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor315 (5042)
[ 57.048439][ T5042] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 57.057570][ T5042] BTRFS info (device loop0): doing ref verification
[pid 5042] mount("/dev/loop0", "./bus", "btrfs", MS_DIRSYNC, "ref_verify,nossd,inode_cache,compress-force,space_cache=v2,degraded,noacl,") = 0
[pid 5042] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid 5042] chdir("./bus") = 0
[pid 5042] ioctl(4, LOOP_CLR_FD) = 0
[pid 5042] close(4) = 0
[pid 5042] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|FASYNC|0x3c, 000) = 4
[pid 5042] fallocate(4, 0, 0, 1048820) = 0
[pid 5042] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 5
[pid 5042] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6
[pid 5042] write(6, "12", 2) = 2
[pid 5042] pwritev2(5, [{iov_base="\x85\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x72\x65\x66\x5f\x76\x65\x72\x69\x66\x79\x2c\x6e\x6f\x73\x73\x64\x2c\x69\x6e\x6f\x64\x65\x5f\x63\x61\x63\x68\x65\x2c\x63\x6f\x6d\x70\x72\x65\x73"..., iov_len=475136}, {iov_base=NULL, iov_len=0}], 2, 16384, RWF_NOWAIT) = -1 EAGAIN (Resource temporarily unavailable)
[pid 5042] exit_group(0) = ?
[pid 5042] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5042, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555a86620 /* 4 entries */, 32768) = 104
[ 57.064372][ T5042] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[ 57.075184][ T5042] BTRFS info (device loop0): force zlib compression, level 3
[ 57.082629][ T5042] BTRFS info (device loop0): allowing degraded mounts
[ 57.089576][ T5042] BTRFS info (device loop0): using free space tree
[ 57.106193][ T5042] BTRFS info (device loop0): auto enabling async discard
umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./1/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555a8e660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555a8e660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./1/bus") = 0
umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./1/binderfs") = 0
getdents64(3, 0x555555a86620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./1") = 0
mkdir("./2", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a855d0) = 5062
./strace-static-x86_64: Process 5062 attached
[pid 5062] chdir("./2") = 0
[pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5062] setpgid(0, 0) = 0
[pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5062] write(3, "1000", 4) = 4
[pid 5062] close(3) = 0
[pid 5062] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5062] memfd_create("syzkaller", 0) = 3
[pid 5062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8a953bf000
[pid 5062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5062] munmap(0x7f8a953bf000, 16777216) = 0
[pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5062] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5062] close(3) = 0
[pid 5062] mkdir("./bus", 0777) = 0
[ 57.477009][ T5062] loop0: detected capacity change from 0 to 32768
[ 57.488249][ T5062] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor315 (5062)
[ 57.504756][ T5062] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 57.513651][ T5062] BTRFS info (device loop0): doing ref verification
[pid 5062] mount("/dev/loop0", "./bus", "btrfs", MS_DIRSYNC, "ref_verify,nossd,inode_cache,compress-force,space_cache=v2,degraded,noacl,") = 0
[pid 5062] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid 5062] chdir("./bus") = 0
[pid 5062] ioctl(4, LOOP_CLR_FD) = 0
[pid 5062] close(4) = 0
[pid 5062] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|FASYNC|0x3c, 000) = 4
[pid 5062] fallocate(4, 0, 0, 1048820) = 0
[pid 5062] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 5
[pid 5062] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6
[pid 5062] write(6, "12", 2) = 2
[ 57.520256][ T5062] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[ 57.531434][ T5062] BTRFS info (device loop0): force zlib compression, level 3
[ 57.538839][ T5062] BTRFS info (device loop0): allowing degraded mounts
[ 57.545676][ T5062] BTRFS info (device loop0): using free space tree
[ 57.564025][ T5062] BTRFS info (device loop0): auto enabling async discard
[pid 5062] pwritev2(5, [{iov_base="\x85\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x72\x65\x66\x5f\x76\x65\x72\x69\x66\x79\x2c\x6e\x6f\x73\x73\x64\x2c\x69\x6e\x6f\x64\x65\x5f\x63\x61\x63\x68\x65\x2c\x63\x6f\x6d\x70\x72\x65\x73"..., iov_len=475136}, {iov_base=NULL, iov_len=0}], 2, 16384, RWF_NOWAIT) = 475136
[pid 5062] exit_group(0) = ?
[pid 5062] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5062, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=23 /* 0.23 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555a86620 /* 4 entries */, 32768) = 104
umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./2/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./2/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555a8e660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555a8e660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./2/bus") = 0
umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./2/binderfs") = 0
getdents64(3, 0x555555a86620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./2") = 0
mkdir("./3", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a855d0) = 5079
./strace-static-x86_64: Process 5079 attached
[pid 5079] chdir("./3") = 0
[pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5079] setpgid(0, 0) = 0
[pid 5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5079] write(3, "1000", 4) = 4
[pid 5079] close(3) = 0
[pid 5079] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5079] memfd_create("syzkaller", 0) = 3
[pid 5079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8a953bf000
[pid 5079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5079] munmap(0x7f8a953bf000, 16777216) = 0
[pid 5079] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5079] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5079] close(3) = 0
[pid 5079] mkdir("./bus", 0777) = 0
[ 57.956071][ T5079] loop0: detected capacity change from 0 to 32768
[ 57.977229][ T5079] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor315 (5079)
[ 57.994436][ T5079] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 58.003543][ T5079] BTRFS info (device loop0): doing ref verification
[ 58.010354][ T5079] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[ 58.021642][ T5079] BTRFS info (device loop0): force zlib compression, level 3
[ 58.029054][ T5079] BTRFS info (device loop0): allowing degraded mounts
[ 58.035976][ T5079] BTRFS info (device loop0): using free space tree
[pid 5079] mount("/dev/loop0", "./bus", "btrfs", MS_DIRSYNC, "ref_verify,nossd,inode_cache,compress-force,space_cache=v2,degraded,noacl,") = 0
[pid 5079] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid 5079] chdir("./bus") = 0
[pid 5079] ioctl(4, LOOP_CLR_FD) = 0
[pid 5079] close(4) = 0
[pid 5079] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|FASYNC|0x3c, 000) = 4
[pid 5079] fallocate(4, 0, 0, 1048820) = 0
[pid 5079] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 5
[pid 5079] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6
[pid 5079] write(6, "12", 2) = 2
[pid 5079] pwritev2(5, [{iov_base="\x85\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x72\x65\x66\x5f\x76\x65\x72\x69\x66\x79\x2c\x6e\x6f\x73\x73\x64\x2c\x69\x6e\x6f\x64\x65\x5f\x63\x61\x63\x68\x65\x2c\x63\x6f\x6d\x70\x72\x65\x73"..., iov_len=475136}, {iov_base=NULL, iov_len=0}], 2, 16384, RWF_NOWAIT) = 475136
[pid 5079] exit_group(0) = ?
[pid 5079] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5079, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=21 /* 0.21 s */} ---
[ 58.053644][ T5079] BTRFS info (device loop0): auto enabling async discard
umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555a86620 /* 4 entries */, 32768) = 104
umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./3/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./3/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555a8e660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555a8e660 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./3/bus") = 0
umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./3/binderfs") = 0
getdents64(3, 0x555555a86620 /* 0 entries */, 32768) = 0
close(3) = 0
rmdir("./3") = 0
mkdir("./4", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = 0
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a855d0) = 5096
./strace-static-x86_64: Process 5096 attached
[pid 5096] chdir("./4") = 0
[pid 5096] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5096] setpgid(0, 0) = 0
[pid 5096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5096] write(3, "1000", 4) = 4
[pid 5096] close(3) = 0
[pid 5096] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5096] memfd_create("syzkaller", 0) = 3
[pid 5096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8a953bf000
[pid 5096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5096] munmap(0x7f8a953bf000, 16777216) = 0
[pid 5096] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5096] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5096] close(3) = 0
[pid 5096] mkdir("./bus", 0777) = 0
[ 58.438624][ T5096] loop0: detected capacity change from 0 to 32768
[ 58.449006][ T5096] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor315 (5096)
[ 58.466322][ T5096] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 58.475447][ T5096] BTRFS info (device loop0): doing ref verification
[pid 5096] mount("/dev/loop0", "./bus", "btrfs", MS_DIRSYNC, "ref_verify,nossd,inode_cache,compress-force,space_cache=v2,degraded,noacl,") = 0
[pid 5096] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid 5096] chdir("./bus") = 0
[pid 5096] ioctl(4, LOOP_CLR_FD) = 0
[pid 5096] close(4) = 0
[pid 5096] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|FASYNC|0x3c, 000) = 4
[pid 5096] fallocate(4, 0, 0, 1048820) = 0
[pid 5096] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000) = 5
[pid 5096] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6
[pid 5096] write(6, "12", 2) = 2
[ 58.482313][ T5096] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11
[ 58.493307][ T5096] BTRFS info (device loop0): force zlib compression, level 3
[ 58.501083][ T5096] BTRFS info (device loop0): allowing degraded mounts
[ 58.507866][ T5096] BTRFS info (device loop0): using free space tree
[ 58.525600][ T5096] BTRFS info (device loop0): auto enabling async discard
[ 58.570511][ T5096] FAULT_INJECTION: forcing a failure.
[ 58.570511][ T5096] name failslab, interval 1, probability 0, space 0, times 0
[ 58.583532][ T5096] CPU: 1 PID: 5096 Comm: syz-executor315 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0
[ 58.593975][ T5096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
[ 58.604229][ T5096] Call Trace:
[ 58.607524][ T5096]
[ 58.610474][ T5096] dump_stack_lvl+0x1e7/0x2d0
[ 58.615219][ T5096] ? nf_tcp_handle_invalid+0x650/0x650
[ 58.620719][ T5096] ? panic+0x770/0x770
[ 58.624995][ T5096] ? __might_sleep+0xc0/0xc0
[ 58.629620][ T5096] should_fail_ex+0x3aa/0x4e0
[ 58.634328][ T5096] should_failslab+0x9/0x20
[ 58.638869][ T5096] slab_pre_alloc_hook+0x59/0x2b0
[ 58.643930][ T5096] kmem_cache_alloc+0x52/0x300
[ 58.648727][ T5096] ? split_extent_map+0x63/0xc40
[ 58.653783][ T5096] split_extent_map+0x63/0xc40
[ 58.658671][ T5096] ? btrfs_dio_submit_io+0x680/0x680
[ 58.663980][ T5096] ? btrfs_dio_submit_io+0x680/0x680
[ 58.669304][ T5096] btrfs_dio_submit_io+0x498/0x680
[ 58.674446][ T5096] ? btrfs_create_dio_extent+0x180/0x180
[ 58.680116][ T5096] iomap_dio_bio_iter+0xe15/0x1430
[ 58.685298][ T5096] __iomap_dio_rw+0x11fa/0x2250
[ 58.690223][ T5096] ? iomap_dio_complete_work+0x70/0x70
[ 58.695737][ T5096] ? __file_remove_privs+0x387/0x650
[ 58.701079][ T5096] ? inode_maybe_inc_iversion+0x1a3/0x1f0
[ 58.706833][ T5096] btrfs_dio_write+0xb6/0x100
[ 58.711539][ T5096] ? btrfs_dio_read+0x100/0x100
[ 58.716427][ T5096] ? btrfs_write_check+0x461/0x4f0
[ 58.721561][ T5096] btrfs_do_write_iter+0x61c/0x1020
[ 58.726767][ T5096] ? btrfs_check_nocow_unlock+0x40/0x40
[ 58.732316][ T5096] do_iter_write+0x84f/0xde0
[ 58.736914][ T5096] ? vfs_iter_write+0xa0/0xa0
[ 58.741594][ T5096] ? rcu_read_lock_any_held+0xb7/0x160
[ 58.747082][ T5096] do_pwritev+0x21a/0x360
[ 58.751458][ T5096] ? do_preadv+0x350/0x350
[ 58.755905][ T5096] ? do_notify_parent+0xf50/0xf50
[ 58.760924][ T5096] ? print_irqtrace_events+0x220/0x220
[ 58.766828][ T5096] ? syscall_enter_from_user_mode+0x32/0x230
[ 58.772824][ T5096] ? __x64_sys_pwritev2+0xbd/0x100
[ 58.777954][ T5096] do_syscall_64+0x41/0xc0
[ 58.782408][ T5096] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 58.788480][ T5096] RIP: 0033:0x7f8a9d80cb29
[ 58.792893][ T5096] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 58.812758][ T5096] RSP: 002b:00007ffef40699a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 58.821182][ T5096] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f8a9d80cb29
[ 58.829154][ T5096] RDX: 0000000000000002 RSI: 0000000020000240 RDI: 0000000000000005
[ 58.837129][ T5096] RBP: 00007ffef40699e0 R08: 0000000000000000 R09: 0000000000000008
[ 58.845114][ T5096] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000006
[ 58.853207][ T5096] R13: 00007ffef4069a20 R14: 00007ffef4069a00 R15: 0000000000000004
[ 58.861218][ T5096]
[ 58.864410][ T5096] BTRFS warning (device loop0): direct IO failed ino 263 op 0x8801 offset 0x4000 len 4096 err no 9
[ 58.877885][ T5096] general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] PREEMPT SMP KASAN
[ 58.889614][ T5096] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067]
[ 58.898056][ T5096] CPU: 1 PID: 5096 Comm: syz-executor315 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0
[ 58.908452][ T5096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
[ 58.918930][ T5096] RIP: 0010:btrfs_finish_ordered_extent+0x43/0x3c0
[ 58.925425][ T5096] Code: 4c 24 10 48 89 54 24 08 48 89 74 24 18 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 b8 4e f9 fd 49 8d 6e 60 49 89 ec 49 c1 ec 03 <41> 80 3c 1c 00 74 08 48 89 ef e8 7e 04 52 fe 4c 8b 7d 00 49 8d 9f
[ 58.945029][ T5096] RSP: 0018:ffffc90003dcf438 EFLAGS: 00010206
[ 58.951169][ T5096] RAX: ffffffff8392b4f8 RBX: dffffc0000000000 RCX: ffff888020f01dc0
[ 58.959224][ T5096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 58.967193][ T5096] RBP: 0000000000000060 R08: 0000000000000000 R09: ffffffff838ef2c7
[ 58.975161][ T5096] R10: 0000000000000003 R11: ffff888020f01dc0 R12: 000000000000000c
[ 58.983125][ T5096] R13: 0000000000001000 R14: 0000000000000000 R15: ffff88814c43c300
[ 58.991174][ T5096] FS: 0000555555a85300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 59.000093][ T5096] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 59.006668][ T5096] CR2: 00007f8a9d884140 CR3: 0000000079cdb000 CR4: 00000000003506e0
[ 59.014628][ T5096] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 59.022601][ T5096] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 59.030557][ T5096] Call Trace:
[ 59.033828][ T5096]
[ 59.036749][ T5096] ? __die_body+0x5e/0xa0
[ 59.041093][ T5096] ? die_addr+0x99/0xc0
[ 59.045249][ T5096] ? exc_general_protection+0x3c2/0x5b0
[ 59.050787][ T5096] ? asm_exc_general_protection+0x26/0x30
[ 59.056501][ T5096] ? btrfs_dio_end_io+0xb7/0x470
[ 59.061511][ T5096] ? btrfs_finish_ordered_extent+0x38/0x3c0
[ 59.067475][ T5096] ? btrfs_finish_ordered_extent+0x43/0x3c0
[ 59.073443][ T5096] ? btrfs_finish_ordered_extent+0x38/0x3c0
[ 59.079322][ T5096] btrfs_dio_end_io+0x171/0x470
[ 59.084164][ T5096] ? btrfs_create_dio_extent+0x180/0x180
[ 59.089788][ T5096] iomap_dio_bio_iter+0xe15/0x1430
[ 59.094932][ T5096] __iomap_dio_rw+0x11fa/0x2250
[ 59.099821][ T5096] ? iomap_dio_complete_work+0x70/0x70
[ 59.105287][ T5096] ? __file_remove_privs+0x387/0x650
[ 59.110654][ T5096] ? inode_maybe_inc_iversion+0x1a3/0x1f0
[ 59.116360][ T5096] btrfs_dio_write+0xb6/0x100
[ 59.121023][ T5096] ? btrfs_dio_read+0x100/0x100
[ 59.125870][ T5096] ? btrfs_write_check+0x461/0x4f0
[ 59.130972][ T5096] btrfs_do_write_iter+0x61c/0x1020
[ 59.136176][ T5096] ? btrfs_check_nocow_unlock+0x40/0x40
[ 59.141714][ T5096] do_iter_write+0x84f/0xde0
[ 59.146302][ T5096] ? vfs_iter_write+0xa0/0xa0
[ 59.150983][ T5096] ? rcu_read_lock_any_held+0xb7/0x160
[ 59.156553][ T5096] do_pwritev+0x21a/0x360
[ 59.160914][ T5096] ? do_preadv+0x350/0x350
[ 59.165342][ T5096] ? do_notify_parent+0xf50/0xf50
[ 59.170374][ T5096] ? print_irqtrace_events+0x220/0x220
[ 59.175837][ T5096] ? syscall_enter_from_user_mode+0x32/0x230
[ 59.181826][ T5096] ? __x64_sys_pwritev2+0xbd/0x100
[ 59.187024][ T5096] do_syscall_64+0x41/0xc0
[ 59.191456][ T5096] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 59.197346][ T5096] RIP: 0033:0x7f8a9d80cb29
[ 59.201950][ T5096] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 59.221906][ T5096] RSP: 002b:00007ffef40699a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 59.230383][ T5096] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f8a9d80cb29
[ 59.238433][ T5096] RDX: 0000000000000002 RSI: 0000000020000240 RDI: 0000000000000005
[ 59.246565][ T5096] RBP: 00007ffef40699e0 R08: 0000000000000000 R09: 0000000000000008
[ 59.254543][ T5096] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000006
[ 59.262512][ T5096] R13: 00007ffef4069a20 R14: 00007ffef4069a00 R15: 0000000000000004
[ 59.270480][ T5096]
[ 59.273488][ T5096] Modules linked in:
[ 59.278066][ T5096] ---[ end trace 0000000000000000 ]---
[ 59.285175][ T5096] RIP: 0010:btrfs_finish_ordered_extent+0x43/0x3c0
[ 59.293053][ T5096] Code: 4c 24 10 48 89 54 24 08 48 89 74 24 18 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 b8 4e f9 fd 49 8d 6e 60 49 89 ec 49 c1 ec 03 <41> 80 3c 1c 00 74 08 48 89 ef e8 7e 04 52 fe 4c 8b 7d 00 49 8d 9f
[ 59.313494][ T5096] RSP: 0018:ffffc90003dcf438 EFLAGS: 00010206
[ 59.319575][ T5096] RAX: ffffffff8392b4f8 RBX: dffffc0000000000 RCX: ffff888020f01dc0
[ 59.327722][ T5096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 59.335833][ T5096] RBP: 0000000000000060 R08: 0000000000000000 R09: ffffffff838ef2c7
[ 59.343974][ T5096] R10: 0000000000000003 R11: ffff888020f01dc0 R12: 000000000000000c
[ 59.352064][ T5096] R13: 0000000000001000 R14: 0000000000000000 R15: ffff88814c43c300
[ 59.360037][ T5096] FS: 0000555555a85300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 59.369285][ T5096] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 59.376011][ T5096] CR2: 00005609e4054978 CR3: 0000000079cdb000 CR4: 00000000003506f0
[ 59.384334][ T5096] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 59.392606][ T5096] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 59.400819][ T5096] Kernel panic - not syncing: Fatal exception
[ 59.407078][ T5096] Kernel Offset: disabled
[ 59.411412][ T5096] Rebooting in 86400 seconds..