last executing test programs: 102.605832ms ago: executing program 2 (id=3): lsm_set_self_attr(0x66, &(0x7f0000000440)={0x65, 0x5, 0x23, 0x3, "cfa7ae"}, 0x23, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) 82.649334ms ago: executing program 0 (id=1): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000400), 0x8) listen(r0, 0xf) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) 56.161816ms ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000140)="360f060f38f10b2e656392080082ceda8d6d0c26a70f784400baf80c66b878e9798b66efbafc0cb01eee0f01df0f78955faa", 0x32}], 0xaaaaaaaaaaaabea, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32.707727ms ago: executing program 0 (id=5): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64], 0x7a) 3.99013ms ago: executing program 3 (id=4): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@binder={0x73622a85, 0x100, 0xfffffffffffffffc}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e0b7dfd6c9276f53e0667dd48f28b11c6b3c7ee46fd0943891c35a7ab3218af5c438fbfe1deef085e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001fc0)={0x14, 0x0, &(0x7f0000000240)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{0x100000, 0xeeef0000, 0x3, 0xad, 0x3, 0xd2, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0x6000, 0x3, 0x0, 0x3c, 0x9, 0x7f, 0x1, 0x5, 0x0, 0x3}, {0x2, 0x1000, 0x8, 0x5, 0x1, 0x2, 0x0, 0x9, 0x0, 0xa7, 0xb, 0x81}, {0xdddd1000, 0xeeef0000, 0xc, 0xe7, 0x3, 0x2, 0x1, 0x4, 0x8, 0x7, 0xe, 0xf1}, {0xdddd0000, 0x10000, 0xd, 0xf7, 0x5, 0x86, 0xa, 0x7f, 0xfe, 0x0, 0xf5, 0x43}, {0xeeee0000, 0xdddd1000, 0x3, 0x83, 0xb1, 0x8, 0x4, 0xac, 0x80, 0xc, 0x5, 0x3}, {0x1000, 0x11d004, 0xc, 0x7, 0x7, 0x5, 0x1, 0x3, 0x1, 0x80, 0x3, 0x4}, {0x100000, 0x3000, 0xb, 0x5, 0x5, 0x7, 0x22, 0x37, 0x2, 0x7, 0xf0, 0xa}, {0xeeef0000, 0x70}, {0xdddd0000, 0x7}, 0x80000037, 0x0, 0xeeee0000, 0x2004, 0x11, 0x0, 0x3000, [0x3, 0xfffffffffffffffc, 0x3, 0x2]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.101' (ED25519) to the list of known hosts. [ 24.738077][ T36] audit: type=1400 audit(1756487192.670:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.739550][ T281] cgroup: Unknown subsys name 'net' [ 24.760821][ T36] audit: type=1400 audit(1756487192.670:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.788129][ T36] audit: type=1400 audit(1756487192.700:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.788410][ T281] cgroup: Unknown subsys name 'devices' [ 24.973704][ T281] cgroup: Unknown subsys name 'hugetlb' [ 24.979376][ T281] cgroup: Unknown subsys name 'rlimit' [ 25.135243][ T36] audit: type=1400 audit(1756487193.070:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.158753][ T36] audit: type=1400 audit(1756487193.070:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.183532][ T36] audit: type=1400 audit(1756487193.070:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.213933][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.223043][ T36] audit: type=1400 audit(1756487193.160:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.248668][ T36] audit: type=1400 audit(1756487193.160:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.265479][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.274453][ T36] audit: type=1400 audit(1756487193.190:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.309383][ T36] audit: type=1400 audit(1756487193.190:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.155313][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.162734][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.169829][ T290] bridge_slave_0: entered allmulticast mode [ 26.176380][ T290] bridge_slave_0: entered promiscuous mode [ 26.184361][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.191989][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.199206][ T290] bridge_slave_1: entered allmulticast mode [ 26.206042][ T290] bridge_slave_1: entered promiscuous mode [ 26.212299][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.219346][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.226680][ T291] bridge_slave_0: entered allmulticast mode [ 26.233167][ T291] bridge_slave_0: entered promiscuous mode [ 26.240498][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.247760][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.254943][ T291] bridge_slave_1: entered allmulticast mode [ 26.261421][ T291] bridge_slave_1: entered promiscuous mode [ 26.330212][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.337656][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.345018][ T288] bridge_slave_0: entered allmulticast mode [ 26.351445][ T288] bridge_slave_0: entered promiscuous mode [ 26.362714][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.369864][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.377241][ T288] bridge_slave_1: entered allmulticast mode [ 26.383604][ T288] bridge_slave_1: entered promiscuous mode [ 26.397409][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.404726][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.412087][ T289] bridge_slave_0: entered allmulticast mode [ 26.418388][ T289] bridge_slave_0: entered promiscuous mode [ 26.434407][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.441630][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.448712][ T289] bridge_slave_1: entered allmulticast mode [ 26.455196][ T289] bridge_slave_1: entered promiscuous mode [ 26.586636][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.593756][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.601135][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.608180][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.621802][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.628964][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.636342][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.643525][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.669411][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.676603][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.683965][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.691056][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.712773][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.719849][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.727289][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.734355][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.768951][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.776417][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.784789][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.792229][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.799426][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.807030][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.814272][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.821986][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.841272][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.848611][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.858342][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.865454][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.877284][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.884384][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.899041][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.906131][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.929145][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.936310][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.944275][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.951336][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.959535][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.966722][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.974968][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.982058][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.017565][ T289] veth0_vlan: entered promiscuous mode [ 27.046141][ T290] veth0_vlan: entered promiscuous mode [ 27.066121][ T289] veth1_macvtap: entered promiscuous mode [ 27.074227][ T288] veth0_vlan: entered promiscuous mode [ 27.086177][ T290] veth1_macvtap: entered promiscuous mode [ 27.124638][ T291] veth0_vlan: entered promiscuous mode [ 27.144945][ T288] veth1_macvtap: entered promiscuous mode [ 27.155216][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.163483][ T291] veth1_macvtap: entered promiscuous mode [ 27.196021][ T332] SELinux: Context 줨 is not valid (left unmapped). [ 27.258299][ T338] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.285343][ T290] ------------[ cut here ]------------ [ 27.290958][ T290] WARNING: CPU: 1 PID: 290 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 27.300313][ T290] Modules linked in: [ 27.304316][ T290] CPU: 1 UID: 0 PID: 290 Comm: syz-executor Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 27.316109][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 27.326265][ T290] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 27.332008][ T290] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ee 55 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 92 4b 03 cc e8 a6 2b 43 ff <0f> 0b e9 3e ff ff ff e8 9a 2b 43 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 27.352044][ T290] RSP: 0018:ffffc9000b66fb68 EFLAGS: 00010293 [ 27.358165][ T290] RAX: ffffffff8242b89a RBX: 0000000000000000 RCX: ffff88812dc3a600 [ 27.366239][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.374409][ T290] RBP: ffffc9000b66fb90 R08: ffff8881110dec3f R09: 1ffff1102221bd87 [ 27.382543][ T290] R10: dffffc0000000000 R11: ffffed102221bd88 R12: 0000000000000000 [ 27.390563][ T290] R13: dffffc0000000000 R14: ffff8881110deba0 R15: ffff888111143660 [ 27.398608][ T290] FS: 0000555558edc500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 27.407676][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.414351][ T290] CR2: 00007fbd355f0000 CR3: 00000001066a2000 CR4: 00000000003526b0 [ 27.422374][ T290] Call Trace: [ 27.425684][ T290] [ 27.428743][ T290] ovl_do_remove+0x7b8/0xcf0 [ 27.433497][ T290] ? ovl_set_redirect+0x780/0x780 [ 27.438561][ T290] ? down_write+0xe9/0x2a0 [ 27.443023][ T290] ? __cfi_down_write+0x10/0x10 [ 27.447941][ T290] ovl_rmdir+0x1e/0x30 [ 27.452094][ T290] vfs_rmdir+0x3dd/0x560 [ 27.456382][ T290] incfs_kill_sb+0x109/0x230 [ 27.461060][ T290] deactivate_locked_super+0xd8/0x2a0 [ 27.466464][ T290] deactivate_super+0xb8/0xe0 [ 27.471291][ T290] cleanup_mnt+0x3f1/0x480 [ 27.475832][ T290] __cleanup_mnt+0x1d/0x40 [ 27.480282][ T290] task_work_run+0x1e3/0x250 [ 27.484941][ T290] ? __cfi_task_work_run+0x10/0x10 [ 27.490175][ T290] ? __x64_sys_umount+0x126/0x170 [ 27.495286][ T290] ? __cfi___x64_sys_umount+0x10/0x10 [ 27.500701][ T290] ? __kasan_check_read+0x15/0x20 [ 27.505816][ T290] resume_user_mode_work+0x36/0x50 [ 27.511004][ T290] syscall_exit_to_user_mode+0x64/0xb0 [ 27.516476][ T290] do_syscall_64+0x64/0xf0 [ 27.520993][ T290] ? clear_bhb_loop+0x50/0xa0 [ 27.525707][ T290] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.531650][ T290] RIP: 0033:0x7f415c38ff17 [ 27.536134][ T290] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 27.555822][ T290] RSP: 002b:00007fff86f1a328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 27.564300][ T290] RAX: 0000000000000000 RBX: 00007f415c411c05 RCX: 00007f415c38ff17 [ 27.572436][ T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff86f1a3e0 [ 27.580437][ T290] RBP: 00007fff86f1a3e0 R08: 0000000000000000 R09: 0000000000000000 [ 27.588453][ T290] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff86f1b470 [ 27.596523][ T290] R13: 00007f415c411c05 R14: 0000000000006a6e R15: 00007fff86f1b4b0 [ 27.604643][ T290] [ 27.607691][ T290] ---[ end trace 0000000000000000 ]--- [ 27.613741][ T290] ------------[ cut here ]------------ [ 27.619300][ T290] WARNING: CPU: 0 PID: 290 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 27.628825][ T290] Modules linked in: [ 27.632794][ T290] CPU: 0 UID: 0 PID: 290 Comm: syz-executor Tainted: G W syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 27.646022][ T290] Tainted: [W]=WARN [ 27.649862][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 27.659997][ T290] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 27.665725][ T290] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ee 55 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 92 4b 03 cc e8 a6 2b 43 ff <0f> 0b e9 3e ff ff ff e8 9a 2b 43 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 27.685483][ T290] RSP: 0018:ffffc9000b66fb68 EFLAGS: 00010293 [ 27.691699][ T290] RAX: ffffffff8242b89a RBX: 0000000000000000 RCX: ffff88812dc3a600 [ 27.699775][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.708031][ T290] RBP: ffffc9000b66fb90 R08: ffff8881110dec3f R09: 1ffff1102221bd87 [ 27.716110][ T290] R10: dffffc0000000000 R11: ffffed102221bd88 R12: 0000000000000000 [ 27.724152][ T290] R13: dffffc0000000000 R14: ffff8881110deba0 R15: ffff888111143660 [ 27.732209][ T290] FS: 0000555558edc500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 27.741221][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.747981][ T290] CR2: 0000001b2ef13ff8 CR3: 00000001066a2000 CR4: 00000000003526b0 [ 27.756173][ T290] Call Trace: [ 27.759485][ T290] [ 27.762566][ T290] ovl_do_remove+0x7b8/0xcf0 [ 27.767345][ T290] ? ovl_set_redirect+0x780/0x780 [ 27.772480][ T290] ? down_write+0xe9/0x2a0 [ 27.776976][ T290] ? __cfi_down_write+0x10/0x10 [ 27.781917][ T290] ovl_rmdir+0x1e/0x30 [ 27.786026][ T290] vfs_rmdir+0x3dd/0x560 [ 27.790298][ T290] incfs_kill_sb+0x1a0/0x230 [ 27.795044][ T290] deactivate_locked_super+0xd8/0x2a0 [ 27.800457][ T290] deactivate_super+0xb8/0xe0 [ 27.805184][ T290] cleanup_mnt+0x3f1/0x480 [ 27.809647][ T290] __cleanup_mnt+0x1d/0x40 [ 27.814164][ T290] task_work_run+0x1e3/0x250 [ 27.818791][ T290] ? __cfi_task_work_run+0x10/0x10 [ 27.824005][ T290] ? __x64_sys_umount+0x126/0x170 [ 27.829068][ T290] ? __cfi___x64_sys_umount+0x10/0x10 [ 27.834569][ T290] ? __kasan_check_read+0x15/0x20 [ 27.839761][ T290] resume_user_mode_work+0x36/0x50 [ 27.845079][ T290] syscall_exit_to_user_mode+0x64/0xb0 [ 27.850576][ T290] do_syscall_64+0x64/0xf0 [ 27.855158][ T290] ? clear_bhb_loop+0x50/0xa0 [ 27.860070][ T290] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.866121][ T290] RIP: 0033:0x7f415c38ff17 [ 27.870569][ T290] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 27.890723][ T290] RSP: 002b:00007fff86f1a328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 27.899207][ T290] RAX: 0000000000000000 RBX: 00007f415c411c05 RCX: 00007f415c38ff17 [ 27.907253][ T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff86f1a3e0 [ 27.915284][ T290] RBP: 00007fff86f1a3e0 R08: 0000000000000000 R09: 0000000000000000 [ 27.923480][ T290] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff86f1b470 [ 27.931575][ T290] R13: 00007f415c411c05 R14: 0000000000006a6e R15: 00007fff86f1b4b0 [ 27.939596][ T290] [ 27.942729][ T290] ---[ end trace 0000000000000000 ]---