last executing test programs:
192.387641ms ago: executing program 2 (id=3):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
fcntl$lock(r0, 0x26, 0x0)
179.352751ms ago: executing program 1 (id=2):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e)
141.651613ms ago: executing program 3 (id=4):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x16b042, 0x0)
ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffff3)
128.596393ms ago: executing program 2 (id=5):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
write(r0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8004)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
120.121864ms ago: executing program 1 (id=6):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x50501, 0x0)
99.033235ms ago: executing program 3 (id=7):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x16b042, 0x0)
97.801175ms ago: executing program 2 (id=8):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
89.639185ms ago: executing program 0 (id=1):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
58.345847ms ago: executing program 0 (id=9):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x0)
write(r2, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x1, 0x1)
fchdir(r7)
open(&(0x7f0000000180)='.\x00', 0x44080, 0x1a8)
39.511028ms ago: executing program 1 (id=10):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
write(r4, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
pidfd_getfd(r1, r3, 0x0)
39.274968ms ago: executing program 3 (id=11):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
24.210909ms ago: executing program 0 (id=12):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r3, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
io_setup(0x2278, &(0x7f0000000180))
0s ago: executing program 3 (id=13):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
write(r3, 0x0, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e)
kernel console output (not intermixed with test programs):
syzkaller
syzkaller login: [ 27.593132][ T36] kauditd_printk_skb: 48 callbacks suppressed
[ 27.593147][ T36] audit: type=1400 audit(1763533894.939:59): avc: denied { transition } for pid=274 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 27.597265][ T36] audit: type=1400 audit(1763533894.939:60): avc: denied { noatsecure } for pid=274 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 27.599942][ T36] audit: type=1400 audit(1763533894.939:61): avc: denied { write } for pid=274 comm="sh" path="pipe:[1702]" dev="pipefs" ino=1702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 27.603386][ T36] audit: type=1400 audit(1763533894.939:62): avc: denied { rlimitinh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 27.605941][ T36] audit: type=1400 audit(1763533894.939:63): avc: denied { siginh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts.
[ 34.882709][ T36] audit: type=1400 audit(1763533902.229:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 34.883797][ T282] cgroup: Unknown subsys name 'net'
[ 34.905355][ T36] audit: type=1400 audit(1763533902.229:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 34.932632][ T36] audit: type=1400 audit(1763533902.249:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 34.932927][ T282] cgroup: Unknown subsys name 'devices'
[ 35.112665][ T282] cgroup: Unknown subsys name 'hugetlb'
[ 35.118266][ T282] cgroup: Unknown subsys name 'rlimit'
[ 35.270642][ T36] audit: type=1400 audit(1763533902.609:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 35.293834][ T36] audit: type=1400 audit(1763533902.619:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 35.305399][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 35.318699][ T36] audit: type=1400 audit(1763533902.619:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 35.350227][ T36] audit: type=1400 audit(1763533902.669:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 35.364680][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 35.375605][ T36] audit: type=1400 audit(1763533902.669:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 35.409936][ T36] audit: type=1400 audit(1763533902.709:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 35.435450][ T36] audit: type=1400 audit(1763533902.709:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 37.721891][ T292] bridge0: port 1(bridge_slave_0) entered blocking state
[ 37.728953][ T292] bridge0: port 1(bridge_slave_0) entered disabled state
[ 37.736655][ T292] bridge_slave_0: entered allmulticast mode
[ 37.742882][ T292] bridge_slave_0: entered promiscuous mode
[ 37.749240][ T292] bridge0: port 2(bridge_slave_1) entered blocking state
[ 37.756295][ T292] bridge0: port 2(bridge_slave_1) entered disabled state
[ 37.763447][ T292] bridge_slave_1: entered allmulticast mode
[ 37.769600][ T292] bridge_slave_1: entered promiscuous mode
[ 37.812261][ T290] bridge0: port 1(bridge_slave_0) entered blocking state
[ 37.819312][ T290] bridge0: port 1(bridge_slave_0) entered disabled state
[ 37.826403][ T290] bridge_slave_0: entered allmulticast mode
[ 37.832641][ T290] bridge_slave_0: entered promiscuous mode
[ 37.844788][ T290] bridge0: port 2(bridge_slave_1) entered blocking state
[ 37.851833][ T290] bridge0: port 2(bridge_slave_1) entered disabled state
[ 37.859008][ T290] bridge_slave_1: entered allmulticast mode
[ 37.865236][ T290] bridge_slave_1: entered promiscuous mode
[ 37.916207][ T289] bridge0: port 1(bridge_slave_0) entered blocking state
[ 37.923286][ T289] bridge0: port 1(bridge_slave_0) entered disabled state
[ 37.930349][ T289] bridge_slave_0: entered allmulticast mode
[ 37.936691][ T289] bridge_slave_0: entered promiscuous mode
[ 37.948664][ T289] bridge0: port 2(bridge_slave_1) entered blocking state
[ 37.955943][ T289] bridge0: port 2(bridge_slave_1) entered disabled state
[ 37.963152][ T289] bridge_slave_1: entered allmulticast mode
[ 37.969282][ T289] bridge_slave_1: entered promiscuous mode
[ 37.978472][ T291] bridge0: port 1(bridge_slave_0) entered blocking state
[ 37.985559][ T291] bridge0: port 1(bridge_slave_0) entered disabled state
[ 37.992701][ T291] bridge_slave_0: entered allmulticast mode
[ 37.998909][ T291] bridge_slave_0: entered promiscuous mode
[ 38.017256][ T291] bridge0: port 2(bridge_slave_1) entered blocking state
[ 38.024330][ T291] bridge0: port 2(bridge_slave_1) entered disabled state
[ 38.031456][ T291] bridge_slave_1: entered allmulticast mode
[ 38.037622][ T291] bridge_slave_1: entered promiscuous mode
[ 38.135138][ T292] bridge0: port 2(bridge_slave_1) entered blocking state
[ 38.142200][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 38.149471][ T292] bridge0: port 1(bridge_slave_0) entered blocking state
[ 38.156520][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 38.190668][ T290] bridge0: port 2(bridge_slave_1) entered blocking state
[ 38.197734][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 38.205022][ T290] bridge0: port 1(bridge_slave_0) entered blocking state
[ 38.212058][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 38.232472][ T291] bridge0: port 2(bridge_slave_1) entered blocking state
[ 38.239523][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 38.246804][ T291] bridge0: port 1(bridge_slave_0) entered blocking state
[ 38.253843][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 38.271997][ T289] bridge0: port 2(bridge_slave_1) entered blocking state
[ 38.279052][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 38.286333][ T289] bridge0: port 1(bridge_slave_0) entered blocking state
[ 38.293381][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 38.302718][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 38.310002][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 38.317342][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 38.324851][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 38.332248][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 38.339425][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 38.346795][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 38.354036][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 38.374543][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 38.381703][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 38.389271][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 38.396300][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 38.421277][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 38.428338][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 38.435989][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 38.443042][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 38.463603][ T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 38.470671][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 38.478269][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 38.485353][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 38.525762][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 38.532834][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 38.543792][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 38.550973][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 38.559512][ T292] veth0_vlan: entered promiscuous mode
[ 38.565741][ T290] veth0_vlan: entered promiscuous mode
[ 38.588777][ T290] veth1_macvtap: entered promiscuous mode
[ 38.595560][ T292] veth1_macvtap: entered promiscuous mode
[ 38.605309][ T291] veth0_vlan: entered promiscuous mode
[ 38.638582][ T291] veth1_macvtap: entered promiscuous mode
[ 38.655675][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 38.683332][ T289] veth0_vlan: entered promiscuous mode
[ 38.704539][ T334] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 38.708234][ T289] veth1_macvtap: entered promiscuous mode
[ 38.870540][ T291] ------------[ cut here ]------------
[ 38.876157][ T291] WARNING: CPU: 1 PID: 291 at fs/inode.c:340 drop_nlink+0xce/0x110
[ 38.884173][ T291] Modules linked in:
[ 38.888113][ T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[ 38.899829][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 38.909979][ T291] RIP: 0010:drop_nlink+0xce/0x110
[ 38.915099][ T291] Code: 04 00 00 be 08 00 00 00 e8 cf 54 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 e4 97 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c
[ 38.934820][ T291] RSP: 0018:ffffc9000b65fc60 EFLAGS: 00010293
[ 38.940949][ T291] RAX: ffffffff81ee1a7e RBX: ffff88811031b838 RCX: ffff88810c6a2600
[ 38.948930][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 38.956969][ T291] RBP: ffffc9000b65fc88 R08: 0000000000000003 R09: 0000000000000004
[ 38.964991][ T291] R10: dffffc0000000000 R11: fffff520016cbf7c R12: dffffc0000000000
[ 38.973037][ T291] R13: 1ffff11022063710 R14: ffff88811031b880 R15: 0000000000000000
[ 38.981064][ T291] FS: 0000555560c9e500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 38.990225][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.996941][ T291] CR2: 00007ffc8c50bfc0 CR3: 0000000121afa000 CR4: 00000000003526b0
[ 39.005157][ T291] Call Trace:
[ 39.008452][ T291]
[ 39.011468][ T291] shmem_rmdir+0x5f/0x90
[ 39.015722][ T291] vfs_rmdir+0x3dd/0x560
[ 39.019995][ T291] incfs_kill_sb+0x109/0x230
[ 39.024685][ T291] deactivate_locked_super+0xd5/0x2a0
[ 39.030168][ T291] deactivate_super+0xb8/0xe0
[ 39.034941][ T291] cleanup_mnt+0x3f1/0x480
[ 39.039540][ T291] __cleanup_mnt+0x1d/0x40
[ 39.044032][ T291] task_work_run+0x1e0/0x250
[ 39.048633][ T291] ? __cfi_task_work_run+0x10/0x10
[ 39.053815][ T291] ? __x64_sys_umount+0x126/0x170
[ 39.058852][ T291] ? __cfi___x64_sys_umount+0x10/0x10
[ 39.064316][ T291] ? __kasan_check_read+0x15/0x20
[ 39.069395][ T291] resume_user_mode_work+0x36/0x50
[ 39.074570][ T291] syscall_exit_to_user_mode+0x64/0xb0
[ 39.080045][ T291] do_syscall_64+0x64/0xf0
[ 39.084572][ T291] ? clear_bhb_loop+0x50/0xa0
[ 39.089262][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 39.095270][ T291] RIP: 0033:0x7f18bc1909f7
[ 39.099700][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 39.119391][ T291] RSP: 002b:00007ffd59c2c848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 39.127894][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f18bc1909f7
[ 39.135945][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd59c2c900
[ 39.143976][ T291] RBP: 00007ffd59c2c900 R08: 0000000000000000 R09: 0000000000000000
[ 39.152027][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd59c2d990
[ 39.160007][ T291] R13: 00007f18bc211d7d R14: 00000000000097b9 R15: 00007ffd59c2d9d0
[ 39.168035][ T291]
[ 39.171073][ T291] ---[ end trace 0000000000000000 ]---
[ 39.179234][ T291] ==================================================================
[ 39.187326][ T291] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70
[ 39.193607][ T291] Write of size 4 at addr 0000000000000168 by task syz-executor/291
[ 39.201586][ T291]
[ 39.203919][ T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Tainted: G W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[ 39.203950][ T291] Tainted: [W]=WARN
[ 39.203957][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 39.203967][ T291] Call Trace:
[ 39.203974][ T291]
[ 39.203981][ T291] __dump_stack+0x21/0x30
[ 39.204009][ T291] dump_stack_lvl+0x10c/0x190
[ 39.204032][ T291] ? __cfi_dump_stack_lvl+0x10/0x10
[ 39.204056][ T291] print_report+0x3d/0x70
[ 39.204075][ T291] kasan_report+0x163/0x1a0
[ 39.204096][ T291] ? ihold+0x24/0x70
[ 39.204115][ T291] ? _raw_spin_unlock+0x45/0x60
[ 39.204138][ T291] ? ihold+0x24/0x70
[ 39.204156][ T291] kasan_check_range+0x299/0x2a0
[ 39.204176][ T291] __kasan_check_write+0x18/0x20
[ 39.204200][ T291] ihold+0x24/0x70
[ 39.204218][ T291] vfs_rmdir+0x26a/0x560
[ 39.204240][ T291] incfs_kill_sb+0x109/0x230
[ 39.204266][ T291] deactivate_locked_super+0xd5/0x2a0
[ 39.204290][ T291] deactivate_super+0xb8/0xe0
[ 39.204311][ T291] cleanup_mnt+0x3f1/0x480
[ 39.204331][ T291] __cleanup_mnt+0x1d/0x40
[ 39.204350][ T291] task_work_run+0x1e0/0x250
[ 39.204376][ T291] ? __cfi_task_work_run+0x10/0x10
[ 39.204395][ T291] ? __x64_sys_umount+0x126/0x170
[ 39.204418][ T291] ? __cfi___x64_sys_umount+0x10/0x10
[ 39.204441][ T291] ? __kasan_check_read+0x15/0x20
[ 39.204466][ T291] resume_user_mode_work+0x36/0x50
[ 39.204488][ T291] syscall_exit_to_user_mode+0x64/0xb0
[ 39.204508][ T291] do_syscall_64+0x64/0xf0
[ 39.204530][ T291] ? clear_bhb_loop+0x50/0xa0
[ 39.204550][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 39.204568][ T291] RIP: 0033:0x7f18bc1909f7
[ 39.204584][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 39.204599][ T291] RSP: 002b:00007ffd59c2c848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 39.204619][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f18bc1909f7
[ 39.204631][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd59c2c900
[ 39.204643][ T291] RBP: 00007ffd59c2c900 R08: 0000000000000000 R09: 0000000000000000
[ 39.204655][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd59c2d990
[ 39.204667][ T291] R13: 00007f18bc211d7d R14: 00000000000097b9 R15: 00007ffd59c2d9d0
[ 39.204682][ T291]
[ 39.204689][ T291] ==================================================================
[ 39.450623][ T291] Disabling lock debugging due to kernel taint
[ 39.456813][ T291] BUG: kernel NULL pointer dereference, address: 0000000000000168
[ 39.464592][ T291] #PF: supervisor write access in kernel mode
[ 39.470635][ T291] #PF: error_code(0x0002) - not-present page
[ 39.476594][ T291] PGD 800000010dbe7067 P4D 800000010dbe7067 PUD 0
[ 39.483089][ T291] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
[ 39.489133][ T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Tainted: G B W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[ 39.502226][ T291] Tainted: [B]=BAD_PAGE, [W]=WARN
[ 39.507228][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 39.517265][ T291] RIP: 0010:ihold+0x2a/0x70
[ 39.521754][ T291] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d
[ 39.541343][ T291] RSP: 0018:ffffc9000b65fca0 EFLAGS: 00010246
[ 39.547393][ T291] RAX: ffff88810c6a2600 RBX: 0000000000000000 RCX: ffff88810c6a2600
[ 39.555398][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 39.563353][ T291] RBP: ffffc9000b65fcb0 R08: ffffffff88972947 R09: 1ffffffff112e528
[ 39.571310][ T291] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff88811031b844
[ 39.579283][ T291] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[ 39.587238][ T291] FS: 0000555560c9e500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 39.596150][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 39.602718][ T291] CR2: 0000000000000168 CR3: 0000000121afa000 CR4: 00000000003526b0
[ 39.610673][ T291] Call Trace:
[ 39.613934][ T291]
[ 39.616846][ T291] vfs_rmdir+0x26a/0x560
[ 39.621072][ T291] incfs_kill_sb+0x109/0x230
[ 39.625654][ T291] deactivate_locked_super+0xd5/0x2a0
[ 39.631008][ T291] deactivate_super+0xb8/0xe0
[ 39.635670][ T291] cleanup_mnt+0x3f1/0x480
[ 39.640070][ T291] __cleanup_mnt+0x1d/0x40
[ 39.644465][ T291] task_work_run+0x1e0/0x250
[ 39.649037][ T291] ? __cfi_task_work_run+0x10/0x10
[ 39.654132][ T291] ? __x64_sys_umount+0x126/0x170
[ 39.659146][ T291] ? __cfi___x64_sys_umount+0x10/0x10
[ 39.664707][ T291] ? __kasan_check_read+0x15/0x20
[ 39.669714][ T291] resume_user_mode_work+0x36/0x50
[ 39.674809][ T291] syscall_exit_to_user_mode+0x64/0xb0
[ 39.680251][ T291] do_syscall_64+0x64/0xf0
[ 39.684657][ T291] ? clear_bhb_loop+0x50/0xa0
[ 39.689322][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 39.695195][ T291] RIP: 0033:0x7f18bc1909f7
[ 39.699593][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 39.719191][ T291] RSP: 002b:00007ffd59c2c848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 39.727592][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f18bc1909f7
[ 39.735605][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd59c2c900
[ 39.743576][ T291] RBP: 00007ffd59c2c900 R08: 0000000000000000 R09: 0000000000000000
[ 39.751531][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd59c2d990
[ 39.759487][ T291] R13: 00007f18bc211d7d R14: 00000000000097b9 R15: 00007ffd59c2d9d0
[ 39.767444][ T291]
[ 39.770450][ T291] Modules linked in:
[ 39.774331][ T291] CR2: 0000000000000168
[ 39.778475][ T291] ---[ end trace 0000000000000000 ]---
[ 39.784016][ T291] RIP: 0010:ihold+0x2a/0x70
[ 39.788753][ T291] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d
[ 39.808349][ T291] RSP: 0018:ffffc9000b65fca0 EFLAGS: 00010246
[ 39.814407][ T291] RAX: ffff88810c6a2600 RBX: 0000000000000000 RCX: ffff88810c6a2600
[ 39.822366][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 39.830322][ T291] RBP: ffffc9000b65fcb0 R08: ffffffff88972947 R09: 1ffffffff112e528
[ 39.838280][ T291] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff88811031b844
[ 39.846233][ T291] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[ 39.854184][ T291] FS: 0000555560c9e500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 39.863094][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 39.869658][ T291] CR2: 0000000000000168 CR3: 0000000121afa000 CR4: 00000000003526b0
[ 39.877615][ T291] Kernel panic - not syncing: Fatal exception
[ 39.883924][ T291] Kernel Offset: disabled
[ 39.888232][ T291] Rebooting in 86400 seconds..