last executing test programs: 582.136864ms ago: executing program 1 (id=2): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="120000001a0035", 0x7) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='z', 0x10a63, 0x800, 0x0, 0x4b6ae4f95a5de35b) 553.491496ms ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xd}, {0x0, 0xe}}}, 0x24}}, 0x0) 456.710924ms ago: executing program 0 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'veth1_to_team\x00', &(0x7f0000000300)=@ethtool_rx_ntuple={0x35, {0x0, @sctp_ip4_spec={@local, @private=0xa010102, 0x4e24, 0x4e22}, @esp_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x4, 0x20}, 0x6, 0x0, 0x4, 0x0, 0xfffffffffffffffe}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x0}, 0x90) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, r3) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000440)=0x7f, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x24, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x3, &(0x7f0000000140)={{r5}, &(0x7f0000000000), 0x0}, 0x20) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000040)={0x0}) 455.044304ms ago: executing program 2 (id=3): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 385.545979ms ago: executing program 1 (id=7): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000040)) 106.199522ms ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) prlimit64(r0, 0xc, &(0x7f0000000280)={0x7, 0x7}, &(0x7f0000000400)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x3}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) poll(&(0x7f00000004c0)=[{0xffffffffffffffff, 0xa}], 0x1, 0x0) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) 44.707137ms ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x1, 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000340), 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file1\x00') 0s ago: executing program 4 (id=8): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TOS={0x5}]}}}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts. [ 22.181985][ T23] audit: type=1400 audit(1719982874.990:66): avc: denied { mounton } for pid=343 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.183480][ T343] cgroup1: Unknown subsys name 'net' [ 22.204511][ T23] audit: type=1400 audit(1719982874.990:67): avc: denied { mount } for pid=343 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.209900][ T343] cgroup1: Unknown subsys name 'net_prio' [ 22.231995][ T23] audit: type=1400 audit(1719982875.050:68): avc: denied { read } for pid=144 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 22.237117][ T343] cgroup1: Unknown subsys name 'devices' [ 22.264672][ T23] audit: type=1400 audit(1719982875.070:69): avc: denied { unmount } for pid=343 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.430114][ T343] cgroup1: Unknown subsys name 'hugetlb' [ 22.435722][ T343] cgroup1: Unknown subsys name 'rlimit' [ 22.658755][ T23] audit: type=1400 audit(1719982875.470:70): avc: denied { setattr } for pid=343 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=9879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.681862][ T23] audit: type=1400 audit(1719982875.470:71): avc: denied { mounton } for pid=343 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.687302][ T346] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.706621][ T23] audit: type=1400 audit(1719982875.470:72): avc: denied { mount } for pid=343 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.737682][ T23] audit: type=1400 audit(1719982875.530:73): avc: denied { relabelto } for pid=346 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.762922][ T23] audit: type=1400 audit(1719982875.530:74): avc: denied { write } for pid=346 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.791720][ T23] audit: type=1400 audit(1719982875.600:75): avc: denied { read } for pid=343 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.817725][ T343] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.025466][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.032495][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.039844][ T353] device bridge_slave_0 entered promiscuous mode [ 23.059967][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.066808][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.074289][ T353] device bridge_slave_1 entered promiscuous mode [ 23.222865][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.229716][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.236905][ T355] device bridge_slave_0 entered promiscuous mode [ 23.243873][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.250800][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.258109][ T355] device bridge_slave_1 entered promiscuous mode [ 23.272820][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.279717][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.287008][ T354] device bridge_slave_0 entered promiscuous mode [ 23.293479][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.300338][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.307483][ T357] device bridge_slave_0 entered promiscuous mode [ 23.328599][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.335581][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.342835][ T354] device bridge_slave_1 entered promiscuous mode [ 23.349174][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.355986][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.363292][ T357] device bridge_slave_1 entered promiscuous mode [ 23.390663][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.397491][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.404913][ T356] device bridge_slave_0 entered promiscuous mode [ 23.439061][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.445887][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.453332][ T356] device bridge_slave_1 entered promiscuous mode [ 23.598450][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.605286][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.612448][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.619191][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.646758][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.653610][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.660747][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.667478][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.685367][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.692205][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.699325][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.706083][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.716723][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.723570][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.730684][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.737437][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.760170][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.767003][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.774145][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.780903][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.800835][ T107] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.808059][ T107] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.815454][ T107] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.822553][ T107] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.830002][ T107] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.836926][ T107] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.843944][ T107] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.850977][ T107] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.858142][ T107] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.865124][ T107] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.872664][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.879890][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.897701][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.927803][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.935473][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.943854][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.950695][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.958638][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.966576][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.973417][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.991996][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.000082][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.008182][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.014994][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.023305][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.031530][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.038365][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.045562][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.053590][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.060410][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.067584][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.075492][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.082225][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.103361][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.111592][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.119614][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.126423][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.134816][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.142961][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.151040][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.157952][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.190660][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.199199][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.206877][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.214755][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.223007][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.231623][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.239420][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.247182][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.254982][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.262936][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.270751][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.278480][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.297584][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.305510][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.313397][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.321482][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.329807][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.337621][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.358538][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.366677][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.375245][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.382726][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.390170][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.398297][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.406203][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.412943][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.420296][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.428010][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.435642][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.443798][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.451757][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.458581][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.488596][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.496686][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.505354][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.513851][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.522026][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.530245][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.538209][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.546054][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.553925][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.561640][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.569539][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.593919][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.601622][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.609811][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.619660][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.628032][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.636090][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.644193][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.667815][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.698380][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.706575][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.731375][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.739935][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.748472][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.756459][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.774978][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.783836][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.799616][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.816751][ T378] netlink: 41466 bytes leftover after parsing attributes in process `syz.1.2'. [ 24.834959][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.849499][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.090980][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.099650][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.111522][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.119974][ T392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.140095][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.148480][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.166369][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.168073][ T107] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.174669][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.190159][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.198425][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.247047][ T356] ------------[ cut here ]------------ [ 25.252337][ T356] WARNING: CPU: 1 PID: 356 at fs/inode.c:302 drop_nlink+0xbb/0x100 [ 25.252482][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.260037][ T356] Modules linked in: [ 25.260051][ T356] CPU: 1 PID: 356 Comm: syz-executor Not tainted 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 25.260055][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 25.260076][ T356] RIP: 0010:drop_nlink+0xbb/0x100 [ 25.260089][ T356] Code: 49 8b 1e 48 8d bb d0 04 00 00 be 08 00 00 00 e8 7b 9a f2 ff f0 48 ff 83 d0 04 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 d5 e1 c2 ff <0f> 0b eb 89 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 25.314981][ T356] RSP: 0018:ffff8881dc8dfc68 EFLAGS: 00010293 [ 25.320879][ T356] RAX: ffffffff81a1572b RBX: 1ffff1103b1d5962 RCX: ffff8881dff0ee40 [ 25.328696][ T356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.336497][ T356] RBP: 0000000000000000 R08: ffffffff81a156af R09: 0000000000000003 [ 25.344310][ T356] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881d8eacb10 [ 25.352124][ T356] R13: dffffc0000000000 R14: ffff8881d8eacac8 R15: dffffc0000000000 [ 25.359935][ T356] FS: 0000555556f26500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 25.368699][ T356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.375121][ T356] CR2: 0000555556f494e8 CR3: 00000001dc8bf000 CR4: 00000000003406a0 [ 25.382936][ T356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.390745][ T356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.398553][ T356] Call Trace: [ 25.401687][ T356] ? __warn+0x162/0x250 [ 25.405762][ T356] ? report_bug+0x3a1/0x4e0 [ 25.410103][ T356] ? drop_nlink+0xbb/0x100 [ 25.414353][ T356] ? drop_nlink+0xbb/0x100 [ 25.418610][ T356] ? do_invalid_op+0x6e/0x110 [ 25.423119][ T356] ? invalid_op+0x1e/0x30 [ 25.427284][ T356] ? drop_nlink+0x3f/0x100 [ 25.431537][ T356] ? drop_nlink+0xbb/0x100 [ 25.435789][ T356] ? drop_nlink+0xbb/0x100 [ 25.440046][ T356] ? drop_nlink+0xbb/0x100 [ 25.444296][ T356] shmem_rmdir+0x54/0x80 [ 25.448382][ T356] vfs_rmdir+0x285/0x3c0 [ 25.452458][ T356] incfs_kill_sb+0x105/0x200 [ 25.456883][ T356] deactivate_locked_super+0xa8/0x110 [ 25.462103][ T356] deactivate_super+0x1e2/0x2a0 [ 25.466776][ T356] ? vfs_submount+0xb0/0xb0 [ 25.467615][ T107] usb 3-1: Using ep0 maxpacket: 32 [ 25.471126][ T356] ? deactivate_locked_super+0x110/0x110 [ 25.481537][ T356] ? fast_dput+0x7a/0x280 [ 25.485697][ T356] cleanup_mnt+0x44e/0x500 [ 25.489955][ T356] task_work_run+0x140/0x170 [ 25.494377][ T356] exit_to_usermode_loop+0x190/0x1a0 [ 25.499495][ T356] prepare_exit_to_usermode+0x199/0x200 [ 25.504877][ T356] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 25.510613][ T356] RIP: 0033:0x7feb70048ec7 [ 25.514878][ T356] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 25.534300][ T356] RSP: 002b:00007ffce196adb8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 25.542548][ T356] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007feb70048ec7 [ 25.550356][ T356] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce196ae70 [ 25.558165][ T356] RBP: 00007ffce196ae70 R08: 0000000000000000 R09: 0000000000000000 [ 25.565975][ T356] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffce196bf40 [ 25.573788][ T356] R13: 00007feb700b5515 R14: 0000000000006278 R15: 0000000000000000 [ 25.581601][ T356] ---[ end trace b161d44a21dde679 ]--- [ 25.588016][ T356] ================================================================== [ 25.595965][ T356] BUG: KASAN: null-ptr-deref in ihold+0x1b/0x50 [ 25.602037][ T356] Write of size 4 at addr 0000000000000160 by task syz-executor/356 [ 25.609841][ T356] [ 25.612029][ T356] CPU: 0 PID: 356 Comm: syz-executor Tainted: G W 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 25.623123][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 25.633017][ T356] Call Trace: [ 25.636151][ T356] dump_stack+0x1d8/0x241 [ 25.640312][ T356] ? panic+0x89d/0x89d [ 25.644217][ T356] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 25.649862][ T356] ? _raw_spin_trylock_bh+0x190/0x190 [ 25.655065][ T356] ? shmem_destroy_inode+0x5/0x10 [ 25.659925][ T356] ? ihold+0x1b/0x50 [ 25.663660][ T356] __kasan_report+0xe9/0x120 [ 25.668083][ T356] ? ihold+0x1b/0x50 [ 25.671816][ T356] kasan_report+0x30/0x60 [ 25.675983][ T356] check_memory_region+0x272/0x280 [ 25.680929][ T356] ihold+0x1b/0x50 [ 25.684578][ T356] vfs_rmdir+0x1e0/0x3c0 [ 25.688660][ T356] incfs_kill_sb+0x105/0x200 [ 25.693082][ T356] deactivate_locked_super+0xa8/0x110 [ 25.698288][ T356] deactivate_super+0x1e2/0x2a0 [ 25.702972][ T356] ? vfs_submount+0xb0/0xb0 [ 25.707316][ T356] ? deactivate_locked_super+0x110/0x110 [ 25.712785][ T356] ? fast_dput+0x7a/0x280 [ 25.716949][ T356] cleanup_mnt+0x44e/0x500 [ 25.721202][ T356] task_work_run+0x140/0x170 [ 25.725628][ T356] exit_to_usermode_loop+0x190/0x1a0 [ 25.730748][ T356] prepare_exit_to_usermode+0x199/0x200 [ 25.736130][ T356] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 25.741858][ T356] RIP: 0033:0x7feb70048ec7 [ 25.746113][ T356] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 25.765548][ T356] RSP: 002b:00007ffce196adb8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 25.773793][ T356] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007feb70048ec7 [ 25.781606][ T356] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce196ae70 [ 25.789419][ T356] RBP: 00007ffce196ae70 R08: 0000000000000000 R09: 0000000000000000 [ 25.797227][ T356] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffce196bf40 [ 25.805038][ T356] R13: 00007feb700b5515 R14: 0000000000006278 R15: 0000000000000000 [ 25.812861][ T356] ================================================================== [ 25.820751][ T356] Disabling lock debugging due to kernel taint [ 25.850699][ T356] BUG: kernel NULL pointer dereference, address: 0000000000000160 [ 25.858314][ T356] #PF: supervisor write access in kernel mode [ 25.861687][ T107] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.864210][ T356] #PF: error_code(0x0002) - not-present page [ 25.864215][ T356] PGD 1d8f11067 P4D 1d8f11067 PUD 0 [ 25.864227][ T356] Oops: 0002 [#1] PREEMPT SMP KASAN [ 25.864237][ T356] CPU: 1 PID: 356 Comm: syz-executor Tainted: G B W 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 25.864248][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 25.874955][ T107] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.880717][ T356] RIP: 0010:ihold+0x20/0x50 [ 25.880726][ T356] Code: 0f 1f 84 00 00 00 00 00 66 90 55 53 48 89 fb e8 36 da c2 ff 48 8d bb 60 01 00 00 be 04 00 00 00 e8 b5 92 f2 ff bd 01 00 00 00 0f c1 ab 60 01 00 00 ff c5 bf 02 00 00 00 89 ee e8 fa dc c2 ff [ 25.880731][ T356] RSP: 0018:ffff8881dc8dfca0 EFLAGS: 00010246 [ 25.880737][ T356] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8881dff0ee40 [ 25.880742][ T356] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 25.880746][ T356] RBP: 0000000000000001 R08: ffffffff813ae585 R09: 0000000000000003 [ 25.880758][ T356] R10: ffffffffffffffff R11: dffffc0000000001 R12: 0000000000000000 [ 25.982336][ T356] R13: dffffc0000000000 R14: ffff8881d8eae310 R15: 0000000000000000 [ 25.990145][ T356] FS: 0000555556f26500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 25.998912][ T356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.005334][ T356] CR2: 0000000000000160 CR3: 00000001dc8bf000 CR4: 00000000003406a0 [ 26.013147][ T356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.020954][ T356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.028764][ T356] Call Trace: [ 26.031904][ T356] ? __die+0xb4/0x100 [ 26.035712][ T356] ? no_context+0xbda/0xe50 [ 26.040057][ T356] ? schedule_preempt_disabled+0x20/0x20 [ 26.045529][ T356] ? is_prefetch+0x4b0/0x4b0 [ 26.049948][ T356] ? ihold+0x1b/0x50 [ 26.053678][ T356] ? __do_page_fault+0xa7d/0xbb0 [ 26.058454][ T356] ? __bad_area_nosemaphore+0xc0/0x460 [ 26.063747][ T356] ? page_fault+0x2f/0x40 [ 26.067943][ T356] ? check_panic_on_warn+0x55/0xa0 [ 26.072873][ T356] ? ihold+0x20/0x50 [ 26.076594][ T356] vfs_rmdir+0x1e0/0x3c0 [ 26.080673][ T356] incfs_kill_sb+0x105/0x200 [ 26.085100][ T356] deactivate_locked_super+0xa8/0x110 [ 26.090304][ T356] deactivate_super+0x1e2/0x2a0 [ 26.095041][ T356] ? vfs_submount+0xb0/0xb0 [ 26.099347][ T356] ? deactivate_locked_super+0x110/0x110 [ 26.104802][ T356] ? fast_dput+0x7a/0x280 [ 26.108968][ T356] cleanup_mnt+0x44e/0x500 [ 26.113219][ T356] task_work_run+0x140/0x170 [ 26.117660][ T356] exit_to_usermode_loop+0x190/0x1a0 [ 26.122775][ T356] prepare_exit_to_usermode+0x199/0x200 [ 26.128155][ T356] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 26.133986][ T356] RIP: 0033:0x7feb70048ec7 [ 26.138235][ T356] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 26.157674][ T356] RSP: 002b:00007ffce196adb8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 26.165917][ T356] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007feb70048ec7 [ 26.173738][ T356] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce196ae70 [ 26.181546][ T356] RBP: 00007ffce196ae70 R08: 0000000000000000 R09: 0000000000000000 [ 26.189352][ T356] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffce196bf40 [ 26.197259][ T356] R13: 00007feb700b5515 R14: 0000000000006278 R15: 0000000000000000 [ 26.205067][ T356] Modules linked in: [ 26.208808][ T356] CR2: 0000000000000160 [ 26.212797][ T356] ---[ end trace b161d44a21dde67a ]--- [ 26.218090][ T356] RIP: 0010:ihold+0x20/0x50 [ 26.222423][ T356] Code: 0f 1f 84 00 00 00 00 00 66 90 55 53 48 89 fb e8 36 da c2 ff 48 8d bb 60 01 00 00 be 04 00 00 00 e8 b5 92 f2 ff bd 01 00 00 00 0f c1 ab 60 01 00 00 ff c5 bf 02 00 00 00 89 ee e8 fa dc c2 ff [ 26.241860][ T356] RSP: 0018:ffff8881dc8dfca0 EFLAGS: 00010246 [ 26.247762][ T356] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8881dff0ee40 [ 26.255574][ T356] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 26.263385][ T356] RBP: 0000000000000001 R08: ffffffff813ae585 R09: 0000000000000003 [ 26.271198][ T356] R10: ffffffffffffffff R11: dffffc0000000001 R12: 0000000000000000 [ 26.279007][ T356] R13: dffffc0000000000 R14: ffff8881d8eae310 R15: 0000000000000000 [ 26.286820][ T356] FS: 0000555556f26500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 26.295586][ T356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.302009][ T356] CR2: 0000000000000160 CR3: 00000001dc8bf000 CR4: 00000000003406a0 [ 26.309821][ T356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.317631][ T356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.325441][ T356] Kernel panic - not syncing: Fatal exception [ 26.331530][ T356] Kernel Offset: disabled [ 26.335647][ T356] Rebooting in 86400 seconds..