syzkaller syzkaller login: [ 16.152988][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 16.153004][ T28] audit: type=1400 audit(1780804844.002:59): avc: denied { transition } for pid=224 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.157775][ T28] audit: type=1400 audit(1780804844.002:60): avc: denied { noatsecure } for pid=224 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.161687][ T28] audit: type=1400 audit(1780804844.012:61): avc: denied { write } for pid=224 comm="sh" path="pipe:[14660]" dev="pipefs" ino=14660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 16.165246][ T28] audit: type=1400 audit(1780804844.012:62): avc: denied { rlimitinh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.168307][ T28] audit: type=1400 audit(1780804844.012:63): avc: denied { siginh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.211969][ T232] scp (232) used greatest stack depth: 22016 bytes left Warning: Permanently added '10.128.0.183' (ED25519) to the list of known hosts. 2026/06/07 04:00:54 parsed 1 programs [ 26.197033][ T28] audit: type=1400 audit(1780804854.042:64): avc: denied { node_bind } for pid=294 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 26.217842][ T28] audit: type=1400 audit(1780804854.042:65): avc: denied { module_request } for pid=294 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 27.352998][ T28] audit: type=1400 audit(1780804855.202:66): avc: denied { mounton } for pid=302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.356431][ T302] cgroup: Unknown subsys name 'net' [ 27.375681][ T28] audit: type=1400 audit(1780804855.202:67): avc: denied { mount } for pid=302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.403105][ T28] audit: type=1400 audit(1780804855.232:68): avc: denied { unmount } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.403624][ T302] cgroup: Unknown subsys name 'devices' [ 27.542400][ T302] cgroup: Unknown subsys name 'hugetlb' [ 27.548137][ T302] cgroup: Unknown subsys name 'rlimit' [ 27.661498][ T28] audit: type=1400 audit(1780804855.512:69): avc: denied { setattr } for pid=302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.684809][ T28] audit: type=1400 audit(1780804855.512:70): avc: denied { create } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.705246][ T28] audit: type=1400 audit(1780804855.512:71): avc: denied { write } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.725710][ T28] audit: type=1400 audit(1780804855.512:72): avc: denied { read } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.746115][ T28] audit: type=1400 audit(1780804855.512:73): avc: denied { mounton } for pid=302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.754982][ T305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.811218][ T302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.494296][ T307] request_module fs-gadgetfs succeeded, but still no fs? [ 28.692495][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.699561][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.707213][ T321] device bridge_slave_0 entered promiscuous mode [ 28.714398][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.721886][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.729417][ T321] device bridge_slave_1 entered promiscuous mode [ 28.777595][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.784676][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.792004][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.799052][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.819050][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.826392][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.835262][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.842779][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.852673][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.861011][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.868074][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.876815][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.885356][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.892451][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.905995][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.915288][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.929702][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.942123][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.950689][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.958138][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.966886][ T321] device veth0_vlan entered promiscuous mode [ 28.978140][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.987440][ T321] device veth1_macvtap entered promiscuous mode [ 28.997086][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.007177][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.038969][ T321] syz-executor (321) used greatest stack depth: 21440 bytes left [ 29.791059][ T8] device bridge_slave_1 left promiscuous mode [ 29.797339][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.805290][ T8] device bridge_slave_0 left promiscuous mode [ 29.811659][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.819998][ T8] device veth1_macvtap left promiscuous mode [ 29.826396][ T8] device veth0_vlan left promiscuous mode 2026/06/07 04:00:57 executed programs: 0 [ 29.976844][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.983955][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.991968][ T370] device bridge_slave_0 entered promiscuous mode [ 29.999179][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.006368][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.014126][ T370] device bridge_slave_1 entered promiscuous mode [ 30.060343][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.067411][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.074733][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.081794][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.103070][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.111056][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.118292][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.127551][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.136897][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.143991][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.152766][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.161099][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.168131][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.190024][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.198077][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.207719][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.220198][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.228307][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.236020][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.244552][ T370] device veth0_vlan entered promiscuous mode [ 30.256508][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.265839][ T370] device veth1_macvtap entered promiscuous mode [ 30.275601][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.285856][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.312076][ T370] ------------[ cut here ]------------ [ 30.317604][ T370] WARNING: CPU: 1 PID: 370 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 30.325705][ T370] Modules linked in: [ 30.329658][ T370] CPU: 1 PID: 370 Comm: syz-executor Not tainted syzkaller #0 [ 30.337228][ T370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.347339][ T370] RIP: 0010:drop_nlink+0xc5/0x110 [ 30.352435][ T370] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 d3 a6 f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 eb fe aa ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 30.372111][ T370] RSP: 0018:ffffc90000ea7c38 EFLAGS: 00010293 [ 30.378183][ T370] RAX: ffffffff81c67c95 RBX: ffff8881235f2288 RCX: ffff888113cca880 [ 30.386208][ T370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.394281][ T370] RBP: ffffc90000ea7c60 R08: 0000000000000003 R09: 0000000000000004 [ 30.402322][ T370] R10: dffffc0000000000 R11: fffff520001d4f78 R12: dffffc0000000000 [ 30.410339][ T370] R13: 1ffff110246be45a R14: ffff8881235f22d0 R15: 0000000000000000 [ 30.418337][ T370] FS: 000055555f43d500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.427327][ T370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.433956][ T370] CR2: 00007ffd1581ddd0 CR3: 000000010968a000 CR4: 00000000003506a0 [ 30.442016][ T370] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.450011][ T370] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.458220][ T370] Call Trace: [ 30.461587][ T370] [ 30.464541][ T370] shmem_rmdir+0x5b/0x90 [ 30.468795][ T370] vfs_rmdir+0x393/0x500 [ 30.473118][ T370] incfs_kill_sb+0x105/0x220 [ 30.477773][ T370] deactivate_locked_super+0xb5/0x120 [ 30.483210][ T370] deactivate_super+0xaf/0xe0 [ 30.487913][ T370] cleanup_mnt+0x474/0x500 [ 30.492372][ T370] __cleanup_mnt+0x19/0x20 [ 30.496833][ T370] task_work_run+0x1e1/0x250 [ 30.501479][ T370] ? __cfi_task_work_run+0x10/0x10 [ 30.506616][ T370] ? __x64_sys_umount+0x12d/0x170 [ 30.511693][ T370] ? __cfi___x64_sys_umount+0x10/0x10 [ 30.517093][ T370] exit_to_user_mode_loop+0x9b/0xb0 [ 30.522348][ T370] exit_to_user_mode_prepare+0x87/0xd0 [ 30.527832][ T370] syscall_exit_to_user_mode+0x1a/0x30 [ 30.533336][ T370] do_syscall_64+0x58/0xa0 [ 30.537773][ T370] ? clear_bhb_loop+0x30/0x80 [ 30.542499][ T370] ? clear_bhb_loop+0x30/0x80 [ 30.547202][ T370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.553157][ T370] RIP: 0033:0x7f9caad9e097 [ 30.557618][ T370] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 30.577312][ T370] RSP: 002b:00007ffd1581ddb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 30.585778][ T370] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9caad9e097 [ 30.593791][ T370] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1581de70 [ 30.601794][ T370] RBP: 00007ffd1581de70 R08: 00007ffd1581ee70 R09: 00000000ffffffff [ 30.609765][ T370] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1581ef00 [ 30.617792][ T370] R13: 00007f9caae321ca R14: 0000000000007631 R15: 00007ffd1581ef40 [ 30.625799][ T370] [ 30.628818][ T370] ---[ end trace 0000000000000000 ]--- [ 30.634480][ T370] ================================================================== [ 30.642565][ T370] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 30.648815][ T370] Write of size 4 at addr 0000000000000170 by task syz-executor/370 [ 30.656790][ T370] [ 30.659137][ T370] CPU: 0 PID: 370 Comm: syz-executor Tainted: G W syzkaller #0 [ 30.668501][ T370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.678556][ T370] Call Trace: [ 30.681840][ T370] [ 30.684772][ T370] __dump_stack+0x21/0x24 [ 30.689112][ T370] dump_stack_lvl+0x110/0x170 [ 30.693842][ T370] ? __cfi_dump_stack_lvl+0x8/0x8 [ 30.698879][ T370] ? __cfi_call_rcu+0x10/0x10 [ 30.703566][ T370] ? ihold+0x20/0x60 [ 30.707467][ T370] ? ihold+0x20/0x60 [ 30.711359][ T370] print_report+0x3d/0x60 [ 30.715694][ T370] kasan_report+0x122/0x150 [ 30.720259][ T370] ? ihold+0x20/0x60 [ 30.724194][ T370] kasan_check_range+0x249/0x2a0 [ 30.729161][ T370] __kasan_check_write+0x14/0x20 [ 30.734113][ T370] ihold+0x20/0x60 [ 30.737847][ T370] vfs_rmdir+0x25f/0x500 [ 30.742096][ T370] incfs_kill_sb+0x105/0x220 [ 30.746724][ T370] deactivate_locked_super+0xb5/0x120 [ 30.752110][ T370] deactivate_super+0xaf/0xe0 [ 30.756806][ T370] cleanup_mnt+0x474/0x500 [ 30.761255][ T370] __cleanup_mnt+0x19/0x20 [ 30.765676][ T370] task_work_run+0x1e1/0x250 [ 30.770280][ T370] ? __cfi_task_work_run+0x10/0x10 [ 30.775397][ T370] ? __x64_sys_umount+0x12d/0x170 [ 30.780445][ T370] ? __cfi___x64_sys_umount+0x10/0x10 [ 30.785856][ T370] exit_to_user_mode_loop+0x9b/0xb0 [ 30.791073][ T370] exit_to_user_mode_prepare+0x87/0xd0 [ 30.796567][ T370] syscall_exit_to_user_mode+0x1a/0x30 [ 30.802032][ T370] do_syscall_64+0x58/0xa0 [ 30.806487][ T370] ? clear_bhb_loop+0x30/0x80 [ 30.811190][ T370] ? clear_bhb_loop+0x30/0x80 [ 30.815870][ T370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.821770][ T370] RIP: 0033:0x7f9caad9e097 [ 30.826185][ T370] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 30.845790][ T370] RSP: 002b:00007ffd1581ddb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 30.854225][ T370] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9caad9e097 [ 30.862218][ T370] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1581de70 [ 30.870188][ T370] RBP: 00007ffd1581de70 R08: 00007ffd1581ee70 R09: 00000000ffffffff [ 30.878177][ T370] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1581ef00 [ 30.886169][ T370] R13: 00007f9caae321ca R14: 0000000000007631 R15: 00007ffd1581ef40 [ 30.894242][ T370] [ 30.897259][ T370] ================================================================== [ 30.907863][ T370] Disabling lock debugging due to kernel taint [ 30.914140][ T370] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 30.921953][ T370] #PF: supervisor write access in kernel mode [ 30.928013][ T370] #PF: error_code(0x0002) - not-present page [ 30.933985][ T370] PGD 12d222067 P4D 12d222067 PUD 0 [ 30.939278][ T370] Oops: 0002 [#1] PREEMPT SMP KASAN [ 30.944468][ T370] CPU: 0 PID: 370 Comm: syz-executor Tainted: G B W syzkaller #0 [ 30.953399][ T370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 30.963451][ T370] RIP: 0010:ihold+0x26/0x60 [ 30.967957][ T370] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 51 f6 aa ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 10 9e f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 41 [ 30.987559][ T370] RSP: 0018:ffffc90000ea7c78 EFLAGS: 00010246 [ 30.993632][ T370] RAX: ffff888113cca800 RBX: 0000000000000000 RCX: ffff888113cca880 [ 31.001601][ T370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.009596][ T370] RBP: ffffc90000ea7c88 R08: ffffffff87b767e7 R09: 1ffffffff0f6ecfc [ 31.017581][ T370] R10: dffffc0000000000 R11: fffffbfff0f6ecfd R12: ffff8881235f2294 [ 31.025557][ T370] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 31.033531][ T370] FS: 000055555f43d500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 31.042459][ T370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.049046][ T370] CR2: 0000000000000170 CR3: 000000010968a000 CR4: 00000000003506b0 [ 31.057017][ T370] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.064985][ T370] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.073037][ T370] Call Trace: [ 31.076315][ T370] [ 31.079242][ T370] vfs_rmdir+0x25f/0x500 [ 31.083496][ T370] incfs_kill_sb+0x105/0x220 [ 31.088088][ T370] deactivate_locked_super+0xb5/0x120 [ 31.093462][ T370] deactivate_super+0xaf/0xe0 [ 31.098161][ T370] cleanup_mnt+0x474/0x500 [ 31.102576][ T370] __cleanup_mnt+0x19/0x20 [ 31.106992][ T370] task_work_run+0x1e1/0x250 [ 31.111585][ T370] ? __cfi_task_work_run+0x10/0x10 [ 31.116700][ T370] ? __x64_sys_umount+0x12d/0x170 [ 31.121728][ T370] ? __cfi___x64_sys_umount+0x10/0x10 [ 31.127105][ T370] exit_to_user_mode_loop+0x9b/0xb0 [ 31.132300][ T370] exit_to_user_mode_prepare+0x87/0xd0 [ 31.137757][ T370] syscall_exit_to_user_mode+0x1a/0x30 [ 31.143232][ T370] do_syscall_64+0x58/0xa0 [ 31.147648][ T370] ? clear_bhb_loop+0x30/0x80 [ 31.152319][ T370] ? clear_bhb_loop+0x30/0x80 [ 31.156988][ T370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.162885][ T370] RIP: 0033:0x7f9caad9e097 [ 31.167298][ T370] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 31.186923][ T370] RSP: 002b:00007ffd1581ddb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 31.195341][ T370] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9caad9e097 [ 31.203308][ T370] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1581de70 [ 31.211275][ T370] RBP: 00007ffd1581de70 R08: 00007ffd1581ee70 R09: 00000000ffffffff [ 31.219240][ T370] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1581ef00 [ 31.227211][ T370] R13: 00007f9caae321ca R14: 0000000000007631 R15: 00007ffd1581ef40 [ 31.235272][ T370] [ 31.238285][ T370] Modules linked in: [ 31.242209][ T370] CR2: 0000000000000170 [ 31.246354][ T370] ---[ end trace 0000000000000000 ]--- [ 31.251799][ T370] RIP: 0010:ihold+0x26/0x60 [ 31.256314][ T370] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 51 f6 aa ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 10 9e f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 41 [ 31.275919][ T370] RSP: 0018:ffffc90000ea7c78 EFLAGS: 00010246 [ 31.281987][ T370] RAX: ffff888113cca800 RBX: 0000000000000000 RCX: ffff888113cca880 [ 31.289974][ T370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.297940][ T370] RBP: ffffc90000ea7c88 R08: ffffffff87b767e7 R09: 1ffffffff0f6ecfc [ 31.305908][ T370] R10: dffffc0000000000 R11: fffffbfff0f6ecfd R12: ffff8881235f2294 [ 31.313915][ T370] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 31.321887][ T370] FS: 000055555f43d500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 31.330900][ T370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.337485][ T370] CR2: 0000000000000170 CR3: 000000010968a000 CR4: 00000000003506b0 [ 31.345479][ T370] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.353445][ T370] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.361432][ T370] Kernel panic - not syncing: Fatal exception [ 31.367726][ T370] Kernel Offset: disabled [ 31.372044][ T370] Rebooting in 86400 seconds..