last executing test programs: 2.665340465s ago: executing program 1 (id=2): syz_mount_image$jfs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x40, 0x62f8, &(0x7f0000019f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.637249935s ago: executing program 0 (id=1): syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x800401, &(0x7f0000000480)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp1250ffff88805e4bd000(4096) [ 71.573480][ T4281] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 71.585822][ T4295] cramfs: Error -3 while decompressing! [ 71.594644][ T4295] cramfs: ffffffff96443028(27)->ffff88805e4bd000(4096) [ 71.612881][ T4281] BTRFS info (device loop2): use zstd compression, level 3 [ 71.633510][ T26] audit: type=1800 audit(1791119404.345:2): pid=4295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 71.656962][ T4281] BTRFS info (device loop2): using free space tree [ 71.707095][ T4281] BTRFS info (device loop2): has skinny extents [ 71.761301][ T4287] loop3: detected capacity change from 0 to 32768 [ 71.823618][ T4289] loop1: detected capacity change from 0 to 32768 [ 71.825832][ T4287] ======================================================= [ 71.825832][ T4287] WARNING: The mand mount option has been deprecated and [ 71.825832][ T4287] and is ignored by this kernel. Remove the mand [ 71.825832][ T4287] option from the mount to silence this warning. [ 71.825832][ T4287] ======================================================= [ 72.014364][ T4281] BTRFS info (device loop2): enabling ssd optimizations [ 72.080146][ T4289] XFS (loop1): Mounting V5 Filesystem [ 72.104398][ T4287] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 72.197917][ T4314] loop0: detected capacity change from 0 to 32768 [ 72.250230][ T4314] [ 72.250230][ T4314] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 72.250230][ T4314] [ 72.288613][ T26] audit: type=1800 audit(1791119404.995:3): pid=4281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 72.304905][ T4289] XFS (loop1): Starting recovery (logdev: internal) [ 72.348371][ T4314] ERROR: (device loop0): diWrite: ixpxd invalid [ 72.348371][ T4314] [ 72.376702][ T4314] ERROR: (device loop0): remounting filesystem as read-only [ 72.424178][ T4314] ERROR: (device loop0): txCommit: [ 72.424178][ T4314] [ 72.523041][ T4289] XFS (loop1): Ending recovery (logdev: internal) [ 72.524077][ T4291] XFS (loop4): Mounting V5 Filesystem [ 72.554890][ T4314] BUG: Bad page state in process syz.0.11 pfn:73ace [ 72.563278][ T4314] page:ffffea0001ceb380 refcount:0 mapcount:0 mapping:0000000000000000 index:0x43 pfn:0x73ace [ 72.567202][ T4287] syz.3.4 (4287) used greatest stack depth: 18240 bytes left [ 72.573759][ T4314] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 72.591933][ T4314] raw: 00fff00000002006 ffffea0001ceb4c8 ffffc9000339f9a0 0000000000000000 [ 72.601539][ T4314] raw: 0000000000000043 ffff88801fa0b4d8 00000000ffffffff 0000000000000000 [ 72.610807][ T4314] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 72.618601][ T4314] page_owner tracks the page as allocated [ 72.625873][ T4314] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4314, ts 72346547178, free_ts 72129920595 [ 72.734121][ T4194] ocfs2: Unmounting device (7,3) on (node local) [ 72.747941][ T4291] XFS (loop4): Ending clean mount [ 72.757044][ T4314] get_page_from_freelist+0x24f6/0x2670 [ 72.807342][ T4314] __alloc_pages+0x1ee/0x480 [ 72.836360][ T4314] __page_cache_alloc+0xce/0x440 [ 72.885903][ T4314] pagecache_get_page+0x9b8/0xf20 [ 72.891018][ T4314] __get_metapage+0x282/0x1060 [ 72.916248][ T4314] diNewExt+0x9ff/0x2e20 [ 72.920573][ T4314] diAllocAG+0xe27/0x1c30 [ 72.969147][ T4314] diAlloc+0x1c8/0x1930 [ 73.028425][ T4314] ialloc+0x89/0x920 [ 73.032610][ T4314] jfs_mkdir+0x1e1/0xb00 [ 73.044003][ T4314] vfs_mkdir+0x386/0x570 [ 73.064278][ T4291] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 73.069063][ T4314] do_mkdirat+0x1dd/0x5c0 [ 73.131927][ T4291] CIFS: Attempting to mount \\127.0.0.1\test [ 73.149892][ T4314] __x64_sys_mkdirat+0x85/0x90 [ 73.151573][ T4193] XFS (loop1): Unmounting Filesystem [ 73.156316][ T4314] do_syscall_64+0x4c/0xa0 [ 73.165240][ T4314] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.170805][ T4343] XFS (loop4): User initiated shutdown received. [ 73.175110][ T4314] page last free stack trace: [ 73.188248][ T4314] free_unref_page_prepare+0x637/0x6c0 [ 73.193989][ T4314] free_unref_page+0x8f/0x2a0 [ 73.203481][ T4314] __unfreeze_partials+0x188/0x1e0 [ 73.209587][ T4314] put_cpu_partial+0x12d/0x190 [ 73.214564][ T4314] qlist_free_all+0x35/0x90 [ 73.230758][ T4314] kasan_quarantine_reduce+0x150/0x160 [ 73.236348][ T4314] __kasan_slab_alloc+0x2f/0xc0 [ 73.241355][ T4314] slab_post_alloc_hook+0x4c/0x380 [ 73.249858][ T4291] CIFS: VFS: Error connecting to socket. Aborting operation. [ 73.259087][ T4314] kmem_cache_alloc_trace+0x165/0x290 [ 73.268435][ T4343] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 73.283037][ T4314] kthread+0x10a/0x520 [ 73.287545][ T4314] ret_from_fork+0x1f/0x30 [ 73.292133][ T4314] Modules linked in: [ 73.300509][ T4314] CPU: 0 PID: 4314 Comm: syz.0.11 Not tainted syzkaller #0 [ 73.307979][ T4314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 73.318259][ T4314] Call Trace: [ 73.321677][ T4314] [ 73.324738][ T4314] dump_stack_lvl+0x188/0x250 [ 73.329556][ T4314] ? show_regs_print_info+0x20/0x20 [ 73.334889][ T4314] ? clockevents_increase_min_delta+0x130/0x130 [ 73.341481][ T4314] bad_page+0x14b/0x170 [ 73.345846][ T4314] free_unref_page_prepare+0x383/0x6c0 [ 73.351435][ T4314] free_unref_page_list+0x119/0x830 [ 73.356857][ T4314] ? uncharge_page+0x490/0x490 [ 73.361653][ T4314] ? free_unref_page_commit+0x4c0/0x4c0 [ 73.367359][ T4314] release_pages+0x185f/0x1bd0 [ 73.372162][ T4314] ? lru_cache_disable+0x30/0x30 [ 73.377149][ T4314] __pagevec_release+0x6d/0xe0 [ 73.382048][ T4314] truncate_inode_pages_range+0x335/0xf90 [ 73.388348][ T4314] ? invalidate_inode_page+0x360/0x360 [ 73.393861][ T4314] ? jfs_fill_super+0xb10/0xb10 [ 73.398916][ T4314] ? shrink_dentry_list+0x66a/0x680 [ 73.404696][ T4314] ? sync_filesystem+0x103/0x220 [ 73.409685][ T4314] jfs_remount+0x348/0x5c0 [ 73.414261][ T4314] ? jfs_statfs+0x550/0x550 [ 73.414585][ T4343] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 73.418811][ T4314] ? hook_sb_remount+0x19/0xc0 [ 73.418843][ T4314] reconfigure_super+0x224/0x8d0 [ 73.418874][ T4314] path_mount+0xc5a/0xfe0 [ 73.418898][ T4314] ? user_path_at_empty+0x13e/0x190 [ 73.418923][ T4314] __se_sys_mount+0x2e3/0x3d0 [ 73.418950][ T4314] ? __x64_sys_mount+0xc0/0xc0 [ 73.418973][ T4314] ? lockdep_hardirqs_on+0x94/0x140 [ 73.439288][ T4291] CIFS: VFS: cifs_mount failed w/return code = -111 [ 73.442067][ T4314] ? __x64_sys_mount+0x1c/0xc0 [ 73.442103][ T4314] do_syscall_64+0x4c/0xa0 [ 73.478170][ T4314] ? clear_bhb_loop+0x30/0x80 [ 73.483046][ T4314] ? clear_bhb_loop+0x30/0x80 [ 73.487936][ T4314] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.494504][ T4314] RIP: 0033:0x7f77a71ac3ca [ 73.498932][ T4314] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.518935][ T4314] RSP: 002b:00007f77a5402e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.527984][ T4314] RAX: ffffffffffffffda RBX: 00007f77a5402ee0 RCX: 00007f77a71ac3ca [ 73.536432][ T4314] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 73.544733][ T4314] RBP: 0000200000000f40 R08: 00007f77a5402ee0 R09: 0000000001a6a038 [ 73.552880][ T4314] R10: 0000000001a6a038 R11: 0000000000000246 R12: 0000200000000f00 [ 73.561253][ T4314] R13: 00007f77a5402ea0 R14: 0000000000000000 R15: 0000200000002cc0 [ 73.569589][ T4314] [ 73.580204][ T4314] Disabling lock debugging due to kernel taint [ 73.588235][ T4187] XFS (loop4): Unmounting Filesystem [ 73.588433][ T4314] BUG: Bad page state in process syz.0.11 pfn:73ad3 [ 73.600522][ T4314] page:ffffea0001ceb4c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x42 pfn:0x73ad3 [ 73.612829][ T4314] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 73.623244][ T4314] raw: 00fff00000002006 ffffea00007c6f08 ffffc9000339f9a0 0000000000000000 [ 73.633687][ T4314] raw: 0000000000000042 ffff88801fa0b3e0 00000000ffffffff 0000000000000000 [ 73.642724][ T4314] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 73.652210][ T4314] page_owner tracks the page as allocated [ 73.658290][ T4314] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4314, ts 72346435021, free_ts 72129928552 [ 73.705481][ T4314] get_page_from_freelist+0x24f6/0x2670 [ 73.711327][ T4314] __alloc_pages+0x1ee/0x480 [ 73.724210][ T4314] __page_cache_alloc+0xce/0x440 [ 73.736999][ T4314] pagecache_get_page+0x9b8/0xf20 [ 73.742090][ T4314] __get_metapage+0x282/0x1060 [ 73.747233][ T4314] diNewExt+0x9ff/0x2e20 [ 73.751761][ T4314] diAllocAG+0xe27/0x1c30 [ 73.776579][ T4314] diAlloc+0x1c8/0x1930 [ 73.780819][ T4314] ialloc+0x89/0x920 [ 73.784753][ T4314] jfs_mkdir+0x1e1/0xb00 [ 73.790959][ T4314] vfs_mkdir+0x386/0x570 [ 73.797328][ T4314] do_mkdirat+0x1dd/0x5c0 [ 73.801842][ T4314] __x64_sys_mkdirat+0x85/0x90 [ 73.809090][ T4314] do_syscall_64+0x4c/0xa0 [ 73.813601][ T4314] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.819937][ T4314] page last free stack trace: [ 73.824646][ T4314] free_unref_page_prepare+0x637/0x6c0 [ 73.830326][ T4314] free_unref_page+0x8f/0x2a0 [ 73.835238][ T4314] __unfreeze_partials+0x188/0x1e0 [ 73.840856][ T4314] put_cpu_partial+0x12d/0x190 [ 73.846140][ T4314] qlist_free_all+0x35/0x90 [ 73.850728][ T4314] kasan_quarantine_reduce+0x150/0x160 [ 73.857156][ T4314] __kasan_slab_alloc+0x2f/0xc0 [ 73.862043][ T4314] slab_post_alloc_hook+0x4c/0x380 [ 73.867711][ T4314] kmem_cache_alloc_trace+0x165/0x290 [ 73.873644][ T4314] kthread+0x10a/0x520 [ 73.878142][ T4314] ret_from_fork+0x1f/0x30 [ 73.882828][ T4314] Modules linked in: [ 73.886893][ T4314] CPU: 0 PID: 4314 Comm: syz.0.11 Tainted: G B syzkaller #0 [ 73.895528][ T4314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 73.905874][ T4314] Call Trace: [ 73.909280][ T4314] [ 73.912214][ T4314] dump_stack_lvl+0x188/0x250 [ 73.916918][ T4314] ? show_regs_print_info+0x20/0x20 [ 73.922149][ T4314] ? clockevents_increase_min_delta+0x130/0x130 [ 73.928403][ T4314] bad_page+0x14b/0x170 [ 73.932570][ T4314] free_unref_page_prepare+0x383/0x6c0 [ 73.938055][ T4314] free_unref_page_list+0x119/0x830 [ 73.943545][ T4314] ? uncharge_page+0x490/0x490 [ 73.948323][ T4314] ? free_unref_page_commit+0x4c0/0x4c0 [ 73.953899][ T4314] release_pages+0x185f/0x1bd0 [ 73.958665][ T4314] ? lru_cache_disable+0x30/0x30 [ 73.963608][ T4314] __pagevec_release+0x6d/0xe0 [ 73.968468][ T4314] truncate_inode_pages_range+0x335/0xf90 [ 73.974218][ T4314] ? invalidate_inode_page+0x360/0x360 [ 73.979699][ T4314] ? jfs_fill_super+0xb10/0xb10 [ 73.984686][ T4314] ? shrink_dentry_list+0x66a/0x680 [ 73.989903][ T4314] ? sync_filesystem+0x103/0x220 [ 73.995032][ T4314] jfs_remount+0x348/0x5c0 [ 73.999568][ T4314] ? jfs_statfs+0x550/0x550 [ 74.004081][ T4314] ? hook_sb_remount+0x19/0xc0 [ 74.008839][ T4314] reconfigure_super+0x224/0x8d0 [ 74.013781][ T4314] path_mount+0xc5a/0xfe0 [ 74.018130][ T4314] ? user_path_at_empty+0x13e/0x190 [ 74.023349][ T4314] __se_sys_mount+0x2e3/0x3d0 [ 74.028067][ T4314] ? __x64_sys_mount+0xc0/0xc0 [ 74.032859][ T4314] ? lockdep_hardirqs_on+0x94/0x140 [ 74.038175][ T4314] ? __x64_sys_mount+0x1c/0xc0 [ 74.042973][ T4314] do_syscall_64+0x4c/0xa0 [ 74.047581][ T4314] ? clear_bhb_loop+0x30/0x80 [ 74.052275][ T4314] ? clear_bhb_loop+0x30/0x80 [ 74.057225][ T4314] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.063218][ T4314] RIP: 0033:0x7f77a71ac3ca [ 74.067727][ T4314] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.087651][ T4314] RSP: 002b:00007f77a5402e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 74.096177][ T4314] RAX: ffffffffffffffda RBX: 00007f77a5402ee0 RCX: 00007f77a71ac3ca [ 74.104452][ T4314] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 74.112427][ T4314] RBP: 0000200000000f40 R08: 00007f77a5402ee0 R09: 0000000001a6a038 [ 74.120410][ T4314] R10: 0000000001a6a038 R11: 0000000000000246 R12: 0000200000000f00 [ 74.128479][ T4314] R13: 00007f77a5402ea0 R14: 0000000000000000 R15: 0000200000002cc0 [ 74.136473][ T4314] [ 74.143693][ T4314] BUG: Bad page state in process syz.0.11 pfn:1f1bc [ 74.150835][ T4314] page:ffffea00007c6f00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x41 pfn:0x1f1bc [ 74.161652][ T4314] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 74.171570][ T4314] raw: 00fff00000002006 ffffea0000a0fe08 ffffc9000339f9a0 0000000000000000 [ 74.180912][ T4314] raw: 0000000000000041 ffff88801fa0b2e8 00000000ffffffff 0000000000000000 [ 74.190242][ T4314] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 74.199102][ T4314] page_owner tracks the page as allocated [ 74.205012][ T4314] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4314, ts 72346385276, free_ts 72324387867 [ 74.220446][ T4314] get_page_from_freelist+0x24f6/0x2670 [ 74.226320][ T4314] __alloc_pages+0x1ee/0x480 [ 74.230949][ T4314] __page_cache_alloc+0xce/0x440 [ 74.236059][ T4314] pagecache_get_page+0x9b8/0xf20 [ 74.241490][ T4314] __get_metapage+0x282/0x1060 [ 74.246302][ T4314] diNewExt+0x9ff/0x2e20 [ 74.250571][ T4314] diAllocAG+0xe27/0x1c30 [ 74.254936][ T4314] diAlloc+0x1c8/0x1930 [ 74.259571][ T4314] ialloc+0x89/0x920 [ 74.263611][ T4314] jfs_mkdir+0x1e1/0xb00 [ 74.267960][ T4314] vfs_mkdir+0x386/0x570 [ 74.272233][ T4314] do_mkdirat+0x1dd/0x5c0 [ 74.276629][ T4314] __x64_sys_mkdirat+0x85/0x90 [ 74.281751][ T4314] do_syscall_64+0x4c/0xa0 [ 74.286374][ T4314] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.292293][ T4314] page last free stack trace: [ 74.297088][ T4314] free_unref_page_prepare+0x637/0x6c0 [ 74.302648][ T4314] free_unref_page+0x8f/0x2a0 [ 74.307526][ T4314] qlist_free_all+0x35/0x90 [ 74.312179][ T4314] kasan_quarantine_reduce+0x150/0x160 [ 74.317959][ T4314] __kasan_slab_alloc+0x2f/0xc0 [ 74.322990][ T4314] slab_post_alloc_hook+0x4c/0x380 [ 74.328583][ T4314] __kmalloc_node+0x1ae/0x3a0 [ 74.333296][ T4314] kvmalloc_node+0x84/0x130 [ 74.338053][ T4314] seq_read_iter+0x1de/0xc50 [ 74.342676][ T4314] vfs_read+0x75e/0xd50 [ 74.346929][ T4314] ksys_read+0x153/0x260 [ 74.351207][ T4314] do_syscall_64+0x4c/0xa0 [ 74.355834][ T4314] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.361871][ T4314] Modules linked in: [ 74.365835][ T4314] CPU: 1 PID: 4314 Comm: syz.0.11 Tainted: G B syzkaller #0 [ 74.374544][ T4314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.384789][ T4314] Call Trace: [ 74.388098][ T4314] [ 74.391026][ T4314] dump_stack_lvl+0x188/0x250 [ 74.395707][ T4314] ? show_regs_print_info+0x20/0x20 [ 74.400992][ T4314] ? clockevents_increase_min_delta+0x130/0x130 [ 74.407482][ T4314] bad_page+0x14b/0x170 [ 74.411665][ T4314] free_unref_page_prepare+0x383/0x6c0 [ 74.417342][ T4314] free_unref_page_list+0x119/0x830 [ 74.422554][ T4314] ? uncharge_page+0x490/0x490 [ 74.427427][ T4314] ? free_unref_page_commit+0x4c0/0x4c0 [ 74.433286][ T4314] release_pages+0x185f/0x1bd0 [ 74.438056][ T4314] ? lru_cache_disable+0x30/0x30 [ 74.443106][ T4314] __pagevec_release+0x6d/0xe0 [ 74.447949][ T4314] truncate_inode_pages_range+0x335/0xf90 [ 74.453760][ T4314] ? invalidate_inode_page+0x360/0x360 [ 74.459860][ T4314] ? jfs_fill_super+0xb10/0xb10 [ 74.464720][ T4314] ? shrink_dentry_list+0x66a/0x680 [ 74.469960][ T4314] ? sync_filesystem+0x103/0x220 [ 74.475159][ T4314] jfs_remount+0x348/0x5c0 [ 74.479614][ T4314] ? jfs_statfs+0x550/0x550 [ 74.484222][ T4314] ? hook_sb_remount+0x19/0xc0 [ 74.489131][ T4314] reconfigure_super+0x224/0x8d0 [ 74.494454][ T4314] path_mount+0xc5a/0xfe0 [ 74.498814][ T4314] ? user_path_at_empty+0x13e/0x190 [ 74.504017][ T4314] __se_sys_mount+0x2e3/0x3d0 [ 74.508705][ T4314] ? __x64_sys_mount+0xc0/0xc0 [ 74.513459][ T4314] ? lockdep_hardirqs_on+0x94/0x140 [ 74.519063][ T4314] ? __x64_sys_mount+0x1c/0xc0 [ 74.523836][ T4314] do_syscall_64+0x4c/0xa0 [ 74.528250][ T4314] ? clear_bhb_loop+0x30/0x80 [ 74.532939][ T4314] ? clear_bhb_loop+0x30/0x80 [ 74.537710][ T4314] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.543773][ T4314] RIP: 0033:0x7f77a71ac3ca [ 74.548197][ T4314] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.568170][ T4314] RSP: 002b:00007f77a5402e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 74.576581][ T4314] RAX: ffffffffffffffda RBX: 00007f77a5402ee0 RCX: 00007f77a71ac3ca [ 74.584650][ T4314] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 74.592626][ T4314] RBP: 0000200000000f40 R08: 00007f77a5402ee0 R09: 0000000001a6a038 [ 74.600606][ T4314] R10: 0000000001a6a038 R11: 0000000000000246 R12: 0000200000000f00 [ 74.608854][ T4314] R13: 00007f77a5402ea0 R14: 0000000000000000 R15: 0000200000002cc0 [ 74.616837][ T4314] [ 74.634649][ T4188] [ 74.634649][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 74.634649][ T4188] [ 74.645851][ T4188] [ 74.645851][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 74.645851][ T4188]