last executing test programs: 191.028732ms ago: executing program 0 (id=1): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000001c0)="e37af84322d42e8e9913b7e624dae30f65d161fe185f5768852480d860f8fd184b099be3ff1f5a3a2237e378bd10005ed2199a8c43bc68a1758ada59726151a8db725c0816d97249853d931983a053a673e77e5d9b2b4406341c164a14341ed9ec36f9df4884eea5dc1fc91885dc893b3c3d4eb39c369e4cd0d938e971d725ba8697", 0x82}], 0x1}}], 0x2, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[]) 189.617952ms ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 157.809043ms ago: executing program 2 (id=3): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c12020", 0x44000004, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 126.577704ms ago: executing program 0 (id=5): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x400000000001]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1, 0x91, 0x5) 122.762924ms ago: executing program 1 (id=2): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 82.803056ms ago: executing program 2 (id=6): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, 0x0, 0x0, 0x0, 0x0, 0x8010}, 0x0) 82.360886ms ago: executing program 2 (id=7): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000780), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 65.812357ms ago: executing program 0 (id=8): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mknod(0x0, 0xc000, 0x3) 65.369577ms ago: executing program 2 (id=9): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 37.322439ms ago: executing program 0 (id=10): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, 0x0, 0x0) 36.839759ms ago: executing program 2 (id=11): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[], 0x118) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 7.65555ms ago: executing program 2 (id=12): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000280)="a6", 0x1, 0x24000041, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) 6.7988ms ago: executing program 0 (id=13): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000001c0)="e37af84322d42e8e9913b7e624dae30f65d161fe185f5768852480d860f8fd184b099be3ff1f5a3a2237e378bd10005ed2199a8c43bc68a1758ada59726151a8db725c0816d97249853d931983a053a673e77e5d9b2b4406341c164a14341ed9ec36f9df4884eea5dc1fc91885dc893b3c3d4eb39c369e4cd0d938e971d725ba8697", 0x82}], 0x1}}], 0x2, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[]) 0s ago: executing program 3 (id=14): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c12020", 0x44000004, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. [ 22.442468][ T36] audit: type=1400 audit(1763532004.520:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.443789][ T282] cgroup: Unknown subsys name 'net' [ 22.465092][ T36] audit: type=1400 audit(1763532004.520:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.492457][ T36] audit: type=1400 audit(1763532004.540:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.492612][ T282] cgroup: Unknown subsys name 'devices' [ 22.672793][ T282] cgroup: Unknown subsys name 'hugetlb' [ 22.678387][ T282] cgroup: Unknown subsys name 'rlimit' [ 22.772079][ T36] audit: type=1400 audit(1763532004.850:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.795239][ T36] audit: type=1400 audit(1763532004.850:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.820003][ T36] audit: type=1400 audit(1763532004.850:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.829962][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.851840][ T36] audit: type=1400 audit(1763532004.930:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.877258][ T36] audit: type=1400 audit(1763532004.930:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.913317][ T36] audit: type=1400 audit(1763532004.990:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.938851][ T36] audit: type=1400 audit(1763532004.990:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.939151][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.207086][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.214157][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.221305][ T290] bridge_slave_0: entered allmulticast mode [ 25.227528][ T290] bridge_slave_0: entered promiscuous mode [ 25.234979][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.242032][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.249082][ T290] bridge_slave_1: entered allmulticast mode [ 25.255345][ T290] bridge_slave_1: entered promiscuous mode [ 25.302775][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.309812][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.316986][ T292] bridge_slave_0: entered allmulticast mode [ 25.323303][ T292] bridge_slave_0: entered promiscuous mode [ 25.331027][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.338067][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.345128][ T292] bridge_slave_1: entered allmulticast mode [ 25.351460][ T292] bridge_slave_1: entered promiscuous mode [ 25.357453][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.364505][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.371596][ T291] bridge_slave_0: entered allmulticast mode [ 25.377764][ T291] bridge_slave_0: entered promiscuous mode [ 25.393753][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.400810][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.407910][ T291] bridge_slave_1: entered allmulticast mode [ 25.414068][ T291] bridge_slave_1: entered promiscuous mode [ 25.447134][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.454182][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.461246][ T289] bridge_slave_0: entered allmulticast mode [ 25.467446][ T289] bridge_slave_0: entered promiscuous mode [ 25.477441][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.484685][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.491780][ T289] bridge_slave_1: entered allmulticast mode [ 25.497954][ T289] bridge_slave_1: entered promiscuous mode [ 25.622956][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.630001][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.637271][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.644305][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.655263][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.662397][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.669676][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.676718][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.696658][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.703723][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.711019][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.718052][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.728467][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.735515][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.742791][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.749829][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.787262][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.795009][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.802408][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.809574][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.817274][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.824433][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.831890][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.839091][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.860284][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.867323][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.874958][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.882011][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.889461][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.896490][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.922667][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.929698][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.937582][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.944610][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.952732][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.959772][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.975139][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.982263][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.995685][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.002727][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.023822][ T290] veth0_vlan: entered promiscuous mode [ 26.051135][ T292] veth0_vlan: entered promiscuous mode [ 26.067268][ T290] veth1_macvtap: entered promiscuous mode [ 26.074332][ T291] veth0_vlan: entered promiscuous mode [ 26.085827][ T292] veth1_macvtap: entered promiscuous mode [ 26.093498][ T289] veth0_vlan: entered promiscuous mode [ 26.130131][ T291] veth1_macvtap: entered promiscuous mode [ 26.137934][ T289] veth1_macvtap: entered promiscuous mode [ 26.146070][ T292] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.186948][ T334] binder: Unknown parameter '†—' [ 26.211296][ T336] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.326205][ T353] Zero length message leads to an empty skb [ 26.351851][ T291] ------------[ cut here ]------------ [ 26.357506][ T291] WARNING: CPU: 0 PID: 291 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 26.365486][ T291] Modules linked in: [ 26.369481][ T291] CPU: 0 UID: 0 PID: 291 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 26.381179][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 26.391439][ T291] RIP: 0010:drop_nlink+0xce/0x110 [ 26.396495][ T291] Code: 04 00 00 be 08 00 00 00 e8 cf 54 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 e4 97 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 26.416148][ T291] RSP: 0018:ffffc9000b61fc60 EFLAGS: 00010293 [ 26.422272][ T291] RAX: ffffffff81ee1a7e RBX: ffff8881130b70c8 RCX: ffff88810724cc00 [ 26.430250][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.438270][ T291] RBP: ffffc9000b61fc88 R08: 0000000000000003 R09: 0000000000000004 [ 26.446316][ T291] R10: dffffc0000000000 R11: fffff520016c3f7c R12: dffffc0000000000 [ 26.454355][ T291] R13: 1ffff11022616e22 R14: ffff8881130b7110 R15: 0000000000000000 [ 26.462372][ T291] FS: 00005555595d3500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 26.464069][ T358] binder: Unknown parameter '†—' [ 26.471329][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.471351][ T291] CR2: 00007fec707fe000 CR3: 0000000129022000 CR4: 00000000003526b0 [ 26.471373][ T291] Call Trace: [ 26.494249][ T291] [ 26.497200][ T291] shmem_rmdir+0x5f/0x90 [ 26.501515][ T291] vfs_rmdir+0x3dd/0x560 [ 26.505800][ T291] incfs_kill_sb+0x109/0x230 [ 26.510430][ T291] deactivate_locked_super+0xd5/0x2a0 [ 26.515865][ T291] deactivate_super+0xb8/0xe0 [ 26.520694][ T291] cleanup_mnt+0x3f1/0x480 [ 26.525133][ T291] __cleanup_mnt+0x1d/0x40 [ 26.529561][ T291] task_work_run+0x1e0/0x250 [ 26.534219][ T291] ? __cfi_task_work_run+0x10/0x10 [ 26.539348][ T291] ? __x64_sys_umount+0x126/0x170 [ 26.544431][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 26.549818][ T291] ? __kasan_check_read+0x15/0x20 [ 26.554906][ T291] resume_user_mode_work+0x36/0x50 [ 26.560047][ T291] syscall_exit_to_user_mode+0x64/0xb0 [ 26.565587][ T291] do_syscall_64+0x64/0xf0 [ 26.570021][ T291] ? clear_bhb_loop+0x50/0xa0 [ 26.574773][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.580721][ T291] RIP: 0033:0x7f55347909f7 [ 26.585164][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 26.604852][ T291] RSP: 002b:00007fff843b5a98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 26.613294][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f55347909f7 [ 26.621367][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff843b5b50 [ 26.629360][ T291] RBP: 00007fff843b5b50 R08: 0000000000000000 R09: 0000000000000000 [ 26.637369][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff843b6be0 [ 26.645410][ T291] R13: 00007f5534811d7d R14: 00000000000066d0 R15: 00007fff843b6c20 [ 26.653425][ T291] [ 26.656452][ T291] ---[ end trace 0000000000000000 ]--- [ 26.663504][ T291] ================================================================== [ 26.671595][ T291] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 26.677850][ T291] Write of size 4 at addr 0000000000000168 by task syz-executor/291 [ 26.685839][ T291] [ 26.688171][ T291] CPU: 0 UID: 0 PID: 291 Comm: syz-executor Tainted: G W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 26.688203][ T291] Tainted: [W]=WARN [ 26.688209][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 26.688264][ T291] Call Trace: [ 26.688272][ T291] [ 26.688280][ T291] __dump_stack+0x21/0x30 [ 26.688310][ T291] dump_stack_lvl+0x10c/0x190 [ 26.688335][ T291] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.688361][ T291] print_report+0x3d/0x70 [ 26.688379][ T291] kasan_report+0x163/0x1a0 [ 26.688401][ T291] ? ihold+0x24/0x70 [ 26.688421][ T291] ? _raw_spin_unlock+0x45/0x60 [ 26.688445][ T291] ? ihold+0x24/0x70 [ 26.688464][ T291] kasan_check_range+0x299/0x2a0 [ 26.688487][ T291] __kasan_check_write+0x18/0x20 [ 26.688515][ T291] ihold+0x24/0x70 [ 26.688534][ T291] vfs_rmdir+0x26a/0x560 [ 26.688559][ T291] incfs_kill_sb+0x109/0x230 [ 26.688587][ T291] deactivate_locked_super+0xd5/0x2a0 [ 26.688613][ T291] deactivate_super+0xb8/0xe0 [ 26.688636][ T291] cleanup_mnt+0x3f1/0x480 [ 26.688657][ T291] __cleanup_mnt+0x1d/0x40 [ 26.688676][ T291] task_work_run+0x1e0/0x250 [ 26.688699][ T291] ? __cfi_task_work_run+0x10/0x10 [ 26.688720][ T291] ? __x64_sys_umount+0x126/0x170 [ 26.688746][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 26.688772][ T291] ? __kasan_check_read+0x15/0x20 [ 26.688800][ T291] resume_user_mode_work+0x36/0x50 [ 26.688823][ T291] syscall_exit_to_user_mode+0x64/0xb0 [ 26.688843][ T291] do_syscall_64+0x64/0xf0 [ 26.688867][ T291] ? clear_bhb_loop+0x50/0xa0 [ 26.688887][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.688907][ T291] RIP: 0033:0x7f55347909f7 [ 26.688923][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 26.688938][ T291] RSP: 002b:00007fff843b5a98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 26.688958][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f55347909f7 [ 26.688970][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff843b5b50 [ 26.688982][ T291] RBP: 00007fff843b5b50 R08: 0000000000000000 R09: 0000000000000000 [ 26.688994][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff843b6be0 [ 26.689007][ T291] R13: 00007f5534811d7d R14: 00000000000066d0 R15: 00007fff843b6c20 [ 26.689023][ T291] [ 26.689030][ T291] ================================================================== [ 26.935082][ T291] Disabling lock debugging due to kernel taint [ 26.944077][ T291] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 26.951892][ T291] #PF: supervisor write access in kernel mode [ 26.957962][ T291] #PF: error_code(0x0002) - not-present page [ 26.963958][ T291] PGD 8000000131898067 P4D 8000000131898067 PUD 0 [ 26.970494][ T291] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 26.976575][ T291] CPU: 0 UID: 0 PID: 291 Comm: syz-executor Tainted: G B W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 26.989692][ T291] Tainted: [B]=BAD_PAGE, [W]=WARN [ 26.994711][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 27.004777][ T291] RIP: 0010:ihold+0x2a/0x70 [ 27.009300][ T291] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 27.028906][ T291] RSP: 0018:ffffc9000b61fca0 EFLAGS: 00010246 [ 27.034996][ T291] RAX: ffff88810724cc00 RBX: 0000000000000000 RCX: ffff88810724cc00 [ 27.042978][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.050963][ T291] RBP: ffffc9000b61fcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 27.058948][ T291] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff8881130b70d4 [ 27.066932][ T291] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 27.074910][ T291] FS: 00005555595d3500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 27.083850][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.090443][ T291] CR2: 0000000000000168 CR3: 0000000129022000 CR4: 00000000003526b0 [ 27.098450][ T291] Call Trace: [ 27.101727][ T291] [ 27.104650][ T291] vfs_rmdir+0x26a/0x560 [ 27.108887][ T291] incfs_kill_sb+0x109/0x230 [ 27.113473][ T291] deactivate_locked_super+0xd5/0x2a0 [ 27.118838][ T291] deactivate_super+0xb8/0xe0 [ 27.123508][ T291] cleanup_mnt+0x3f1/0x480 [ 27.127916][ T291] __cleanup_mnt+0x1d/0x40 [ 27.132318][ T291] task_work_run+0x1e0/0x250 [ 27.136903][ T291] ? __cfi_task_work_run+0x10/0x10 [ 27.142033][ T291] ? __x64_sys_umount+0x126/0x170 [ 27.147052][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 27.152417][ T291] ? __kasan_check_read+0x15/0x20 [ 27.157437][ T291] resume_user_mode_work+0x36/0x50 [ 27.162546][ T291] syscall_exit_to_user_mode+0x64/0xb0 [ 27.168014][ T291] do_syscall_64+0x64/0xf0 [ 27.172423][ T291] ? clear_bhb_loop+0x50/0xa0 [ 27.177107][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.182999][ T291] RIP: 0033:0x7f55347909f7 [ 27.187398][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 27.206988][ T291] RSP: 002b:00007fff843b5a98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 27.215388][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f55347909f7 [ 27.223345][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff843b5b50 [ 27.231304][ T291] RBP: 00007fff843b5b50 R08: 0000000000000000 R09: 0000000000000000 [ 27.239268][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff843b6be0 [ 27.247245][ T291] R13: 00007f5534811d7d R14: 00000000000066d0 R15: 00007fff843b6c20 [ 27.255211][ T291] [ 27.258218][ T291] Modules linked in: [ 27.262094][ T291] CR2: 0000000000000168 [ 27.266231][ T291] ---[ end trace 0000000000000000 ]--- [ 27.271676][ T291] RIP: 0010:ihold+0x2a/0x70 [ 27.276168][ T291] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 27.295763][ T291] RSP: 0018:ffffc9000b61fca0 EFLAGS: 00010246 [ 27.301823][ T291] RAX: ffff88810724cc00 RBX: 0000000000000000 RCX: ffff88810724cc00 [ 27.309785][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.317740][ T291] RBP: ffffc9000b61fcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 27.325701][ T291] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff8881130b70d4 [ 27.333660][ T291] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 27.341631][ T291] FS: 00005555595d3500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 27.350552][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.357137][ T291] CR2: 0000000000000168 CR3: 0000000129022000 CR4: 00000000003526b0 [ 27.365104][ T291] Kernel panic - not syncing: Fatal exception [ 27.371377][ T291] Kernel Offset: disabled [ 27.375695][ T291] Rebooting in 86400 seconds..