syzkaller syzkaller login: [ 14.824673][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 14.824688][ T28] audit: type=1400 audit(1763965461.367:59): avc: denied { transition } for pid=225 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.829798][ T28] audit: type=1400 audit(1763965461.367:60): avc: denied { noatsecure } for pid=225 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.833090][ T28] audit: type=1400 audit(1763965461.367:61): avc: denied { write } for pid=225 comm="sh" path="pipe:[14655]" dev="pipefs" ino=14655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.836690][ T28] audit: type=1400 audit(1763965461.367:62): avc: denied { rlimitinh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.840479][ T28] audit: type=1400 audit(1763965461.367:63): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.251477][ T229] sftp-server (229) used greatest stack depth: 20608 bytes left Warning: Permanently added '10.128.0.199' (ED25519) to the list of known hosts. 2025/11/24 06:24:30 parsed 1 programs [ 24.114340][ T28] audit: type=1400 audit(1763965470.657:64): avc: denied { node_bind } for pid=283 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.135102][ T28] audit: type=1400 audit(1763965470.657:65): avc: denied { module_request } for pid=283 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 24.931112][ T28] audit: type=1400 audit(1763965471.467:66): avc: denied { mounton } for pid=292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.932076][ T292] cgroup: Unknown subsys name 'net' [ 24.953817][ T28] audit: type=1400 audit(1763965471.467:67): avc: denied { mount } for pid=292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.981889][ T28] audit: type=1400 audit(1763965471.497:68): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.982028][ T292] cgroup: Unknown subsys name 'devices' [ 25.094602][ T292] cgroup: Unknown subsys name 'hugetlb' [ 25.100262][ T292] cgroup: Unknown subsys name 'rlimit' [ 25.208107][ T28] audit: type=1400 audit(1763965471.747:69): avc: denied { setattr } for pid=292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.231415][ T28] audit: type=1400 audit(1763965471.747:70): avc: denied { create } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.238992][ T294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.252246][ T28] audit: type=1400 audit(1763965471.747:71): avc: denied { write } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.280971][ T28] audit: type=1400 audit(1763965471.747:72): avc: denied { read } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.301334][ T28] audit: type=1400 audit(1763965471.747:73): avc: denied { mounton } for pid=292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.325181][ T292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.113686][ T296] request_module fs-gadgetfs succeeded, but still no fs? [ 26.347316][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.354940][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.362934][ T317] device bridge_slave_0 entered promiscuous mode [ 26.370203][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.377722][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.385072][ T317] device bridge_slave_1 entered promiscuous mode [ 26.425801][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.433047][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.440318][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.447379][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.466662][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.474341][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.481524][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.490948][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.499165][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.506301][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.516384][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.524851][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.531883][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.543677][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.554155][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.567734][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.579626][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.587675][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.595210][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.604239][ T317] device veth0_vlan entered promiscuous mode [ 26.613963][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.622985][ T317] device veth1_macvtap entered promiscuous mode [ 26.631964][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.641850][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/11/24 06:24:33 executed programs: 0 [ 27.250836][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.258419][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.266359][ T364] device bridge_slave_0 entered promiscuous mode [ 27.274408][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.281610][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.289087][ T364] device bridge_slave_1 entered promiscuous mode [ 27.345859][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.353802][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.366309][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.375084][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.383621][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.390684][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.398305][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.410492][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.418957][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.427381][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.434566][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.450329][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.458418][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.467386][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.475527][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.491892][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.500516][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.511772][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.519825][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.528537][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.536185][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.544723][ T8] device bridge_slave_1 left promiscuous mode [ 27.550818][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.558267][ T8] device bridge_slave_0 left promiscuous mode [ 27.564432][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.572112][ T8] device veth1_macvtap left promiscuous mode [ 27.578576][ T8] device veth0_vlan left promiscuous mode [ 27.648134][ T364] device veth0_vlan entered promiscuous mode [ 27.657835][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.666450][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.675574][ T364] device veth1_macvtap entered promiscuous mode [ 27.686273][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.694679][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.703228][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.712438][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.720725][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.745391][ T364] ------------[ cut here ]------------ [ 27.751068][ T364] WARNING: CPU: 1 PID: 364 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 27.759138][ T364] Modules linked in: [ 27.763337][ T364] CPU: 1 PID: 364 Comm: syz-executor Not tainted syzkaller #0 [ 27.770976][ T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 27.781336][ T364] RIP: 0010:drop_nlink+0xc5/0x110 [ 27.786414][ T364] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 ea f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 3b 72 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 27.806168][ T364] RSP: 0018:ffffc9000378fc38 EFLAGS: 00010293 [ 27.812244][ T364] RAX: ffffffff81c3b135 RBX: ffff88811302b570 RCX: ffff88811317d100 [ 27.820274][ T364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.828488][ T364] RBP: ffffc9000378fc60 R08: 0000000000000004 R09: 0000000000000003 [ 27.836757][ T364] R10: fffff520006f1f78 R11: 1ffff920006f1f78 R12: dffffc0000000000 [ 27.844901][ T364] R13: 1ffff110226056b7 R14: ffff88811302b5b8 R15: 0000000000000000 [ 27.852914][ T364] FS: 000055557ee13500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 27.862162][ T364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.868870][ T364] CR2: 000055557ee364e8 CR3: 000000011276c000 CR4: 00000000003506a0 [ 27.877135][ T364] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.885238][ T364] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.893426][ T364] Call Trace: [ 27.896698][ T364] [ 27.899620][ T364] shmem_rmdir+0x5b/0x90 [ 27.903888][ T364] vfs_rmdir+0x393/0x500 [ 27.908172][ T364] incfs_kill_sb+0x105/0x220 [ 27.912810][ T364] deactivate_locked_super+0xb5/0x120 [ 27.918196][ T364] deactivate_super+0xaf/0xe0 [ 27.922994][ T364] cleanup_mnt+0x45f/0x4e0 [ 27.927417][ T364] __cleanup_mnt+0x19/0x20 [ 27.931833][ T364] task_work_run+0x1db/0x240 [ 27.936446][ T364] ? __cfi_task_work_run+0x10/0x10 [ 27.941570][ T364] ? __x64_sys_umount+0x125/0x160 [ 27.946785][ T364] ? __cfi___x64_sys_umount+0x10/0x10 [ 27.952171][ T364] exit_to_user_mode_loop+0x9b/0xb0 [ 27.957647][ T364] exit_to_user_mode_prepare+0x87/0xd0 [ 27.963229][ T364] syscall_exit_to_user_mode+0x1a/0x30 [ 27.968769][ T364] do_syscall_64+0x58/0xa0 [ 27.973232][ T364] ? clear_bhb_loop+0x30/0x80 [ 27.977939][ T364] ? clear_bhb_loop+0x30/0x80 [ 27.982647][ T364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 27.988641][ T364] RIP: 0033:0x7f9ba9790a77 [ 27.993103][ T364] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 28.012859][ T364] RSP: 002b:00007ffc7f8cd988 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 28.021563][ T364] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9ba9790a77 [ 28.029610][ T364] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7f8cda40 [ 28.037612][ T364] RBP: 00007ffc7f8cda40 R08: 0000000000000000 R09: 0000000000000000 [ 28.045723][ T364] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc7f8cead0 [ 28.053740][ T364] R13: 00007f9ba9813d7d R14: 0000000000006c46 R15: 00007ffc7f8ceb10 [ 28.061778][ T364] [ 28.064877][ T364] ---[ end trace 0000000000000000 ]--- [ 28.070450][ T364] ================================================================== [ 28.078528][ T364] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 28.084766][ T364] Write of size 4 at addr 0000000000000170 by task syz-executor/364 [ 28.092730][ T364] [ 28.095042][ T364] CPU: 0 PID: 364 Comm: syz-executor Tainted: G W syzkaller #0 [ 28.103957][ T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 28.114027][ T364] Call Trace: [ 28.117387][ T364] [ 28.120416][ T364] __dump_stack+0x21/0x24 [ 28.124742][ T364] dump_stack_lvl+0xee/0x150 [ 28.129421][ T364] ? __cfi_dump_stack_lvl+0x8/0x8 [ 28.134438][ T364] ? ihold+0x20/0x60 [ 28.138340][ T364] ? ihold+0x20/0x60 [ 28.142312][ T364] print_report+0x3d/0x60 [ 28.146662][ T364] kasan_report+0x122/0x150 [ 28.151157][ T364] ? ihold+0x20/0x60 [ 28.155045][ T364] kasan_check_range+0x280/0x290 [ 28.159999][ T364] __kasan_check_write+0x14/0x20 [ 28.165008][ T364] ihold+0x20/0x60 [ 28.168753][ T364] vfs_rmdir+0x25f/0x500 [ 28.172995][ T364] incfs_kill_sb+0x105/0x220 [ 28.177593][ T364] deactivate_locked_super+0xb5/0x120 [ 28.183025][ T364] deactivate_super+0xaf/0xe0 [ 28.187735][ T364] cleanup_mnt+0x45f/0x4e0 [ 28.192264][ T364] __cleanup_mnt+0x19/0x20 [ 28.196670][ T364] task_work_run+0x1db/0x240 [ 28.201267][ T364] ? __cfi_task_work_run+0x10/0x10 [ 28.206970][ T364] ? __x64_sys_umount+0x125/0x160 [ 28.212005][ T364] ? __cfi___x64_sys_umount+0x10/0x10 [ 28.217460][ T364] exit_to_user_mode_loop+0x9b/0xb0 [ 28.222766][ T364] exit_to_user_mode_prepare+0x87/0xd0 [ 28.228223][ T364] syscall_exit_to_user_mode+0x1a/0x30 [ 28.233690][ T364] do_syscall_64+0x58/0xa0 [ 28.238211][ T364] ? clear_bhb_loop+0x30/0x80 [ 28.242911][ T364] ? clear_bhb_loop+0x30/0x80 [ 28.247599][ T364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 28.253577][ T364] RIP: 0033:0x7f9ba9790a77 [ 28.257992][ T364] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 28.277670][ T364] RSP: 002b:00007ffc7f8cd988 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 28.286073][ T364] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9ba9790a77 [ 28.294239][ T364] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7f8cda40 [ 28.302230][ T364] RBP: 00007ffc7f8cda40 R08: 0000000000000000 R09: 0000000000000000 [ 28.310237][ T364] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc7f8cead0 [ 28.318324][ T364] R13: 00007f9ba9813d7d R14: 0000000000006c46 R15: 00007ffc7f8ceb10 [ 28.326379][ T364] [ 28.329384][ T364] ================================================================== [ 28.339093][ T364] Disabling lock debugging due to kernel taint [ 28.346108][ T364] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 28.353930][ T364] #PF: supervisor write access in kernel mode [ 28.360007][ T364] #PF: error_code(0x0002) - not-present page [ 28.366001][ T364] PGD 120ac9067 P4D 120ac9067 PUD 0 [ 28.371544][ T364] Oops: 0002 [#1] PREEMPT SMP KASAN [ 28.377020][ T364] CPU: 0 PID: 364 Comm: syz-executor Tainted: G B W syzkaller #0 [ 28.386030][ T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 28.396070][ T364] RIP: 0010:ihold+0x26/0x60 [ 28.400649][ T364] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 a1 69 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 91 [ 28.420509][ T364] RSP: 0018:ffffc9000378fc78 EFLAGS: 00010246 [ 28.426574][ T364] RAX: ffff88811317d100 RBX: 0000000000000000 RCX: ffff88811317d100 [ 28.434620][ T364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.442579][ T364] RBP: ffffc9000378fc88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 28.450537][ T364] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff88811302b57c [ 28.458667][ T364] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 28.466714][ T364] FS: 000055557ee13500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 28.475803][ T364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.482374][ T364] CR2: 0000000000000170 CR3: 000000011276c000 CR4: 00000000003506b0 [ 28.490356][ T364] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.498401][ T364] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.506466][ T364] Call Trace: [ 28.509734][ T364] [ 28.512866][ T364] vfs_rmdir+0x25f/0x500 [ 28.517123][ T364] incfs_kill_sb+0x105/0x220 [ 28.521702][ T364] deactivate_locked_super+0xb5/0x120 [ 28.527103][ T364] deactivate_super+0xaf/0xe0 [ 28.531780][ T364] cleanup_mnt+0x45f/0x4e0 [ 28.536183][ T364] __cleanup_mnt+0x19/0x20 [ 28.540586][ T364] task_work_run+0x1db/0x240 [ 28.545162][ T364] ? __cfi_task_work_run+0x10/0x10 [ 28.550261][ T364] ? __x64_sys_umount+0x125/0x160 [ 28.555280][ T364] ? __cfi___x64_sys_umount+0x10/0x10 [ 28.560762][ T364] exit_to_user_mode_loop+0x9b/0xb0 [ 28.566084][ T364] exit_to_user_mode_prepare+0x87/0xd0 [ 28.571529][ T364] syscall_exit_to_user_mode+0x1a/0x30 [ 28.576983][ T364] do_syscall_64+0x58/0xa0 [ 28.581388][ T364] ? clear_bhb_loop+0x30/0x80 [ 28.586147][ T364] ? clear_bhb_loop+0x30/0x80 [ 28.590816][ T364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 28.596715][ T364] RIP: 0033:0x7f9ba9790a77 [ 28.601217][ T364] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 28.620808][ T364] RSP: 002b:00007ffc7f8cd988 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 28.629211][ T364] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9ba9790a77 [ 28.637171][ T364] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7f8cda40 [ 28.645239][ T364] RBP: 00007ffc7f8cda40 R08: 0000000000000000 R09: 0000000000000000 [ 28.653314][ T364] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc7f8cead0 [ 28.661638][ T364] R13: 00007f9ba9813d7d R14: 0000000000006c46 R15: 00007ffc7f8ceb10 [ 28.669618][ T364] [ 28.672723][ T364] Modules linked in: [ 28.676604][ T364] CR2: 0000000000000170 [ 28.680780][ T364] ---[ end trace 0000000000000000 ]--- [ 28.686317][ T364] RIP: 0010:ihold+0x26/0x60 [ 28.690815][ T364] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 a1 69 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 91 [ 28.710591][ T364] RSP: 0018:ffffc9000378fc78 EFLAGS: 00010246 [ 28.716651][ T364] RAX: ffff88811317d100 RBX: 0000000000000000 RCX: ffff88811317d100 [ 28.724700][ T364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.732658][ T364] RBP: ffffc9000378fc88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 28.740707][ T364] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff88811302b57c [ 28.748751][ T364] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 28.756798][ T364] FS: 000055557ee13500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 28.765731][ T364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.772313][ T364] CR2: 0000000000000170 CR3: 000000011276c000 CR4: 00000000003506b0 [ 28.780288][ T364] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.788366][ T364] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.796418][ T364] Kernel panic - not syncing: Fatal exception [ 28.802746][ T364] Kernel Offset: disabled [ 28.807251][ T364] Rebooting in 86400 seconds..