./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1701298157 <...> Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. execve("./syz-executor1701298157", ["./syz-executor1701298157"], 0x7ffe50e26eb0 /* 10 vars */) = 0 brk(NULL) = 0x555556f51000 brk(0x555556f51e00) = 0x555556f51e00 arch_prctl(ARCH_SET_FS, 0x555556f51480) = 0 set_tid_address(0x555556f51750) = 287 set_robust_list(0x555556f51760, 24) = 0 rseq(0x555556f51da0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1701298157", 4096) = 28 getrandom("\x8c\xdb\x88\x80\x5c\x54\xa0\x40", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556f51e00 brk(0x555556f72e00) = 0x555556f72e00 brk(0x555556f73000) = 0x555556f73000 mprotect(0x7fd51d6db000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7fd51d632860, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fd51d63a670}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7fd51d632860, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fd51d63a670}, NULL, 8) = 0 mkdir("./syzkaller.ZQd0Uy", 0700) = 0 chmod("./syzkaller.ZQd0Uy", 0777) = 0 chdir("./syzkaller.ZQd0Uy") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f51750) = 289 ./strace-static-x86_64: Process 289 attached [pid 289] set_robust_list(0x555556f51760, 24) = 0 [pid 289] chdir("./0") = 0 [pid 289] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 289] setpgid(0, 0) = 0 [pid 289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 289] write(3, "1000", 4) = 4 [pid 289] close(3) = 0 [pid 289] symlink("/dev/binderfs", "./binderfs") = 0 [pid 289] mkdir("./file0", 000) = 0 [pid 289] mount(NULL, "./file0", "tmpfs", 0, NULL) = 0 [pid 289] chdir("./file0") = 0 [pid 289] mkdir("./file0", 0777) = 0 [pid 289] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 289] mount(".", "./file0/../file0", NULL, MS_RDONLY|MS_SYNCHRONOUS|MS_DIRSYNC|MS_BIND|MS_SHARED, NULL) = 0 [ 21.921589][ T24] audit: type=1400 audit(1712812124.630:66): avc: denied { execmem } for pid=287 comm="syz-executor170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.927906][ T24] audit: type=1400 audit(1712812124.630:67): avc: denied { read write } for pid=287 comm="syz-executor170" name="loop0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 21.935636][ T24] audit: type=1400 audit(1712812124.630:68): avc: denied { open } for pid=287 comm="syz-executor170" path="/dev/loop0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 289] mount("./file0", "./file0", "incremental-fs", 0, NULL) = 0 [pid 289] exit_group(0) = ? [pid 289] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=289, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- restart_syscall(<... resuming interrupted clone ...>) = 0 umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 getdents64(3, 0x555556f527f0 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=100, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 newfstatat(4, "", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=100, ...}, AT_EMPTY_PATH) = 0 getdents64(4, 0x555556f5a830 /* 5 entries */, 32768) = 144 umount2("./0/file0/.incomplete", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/file0/.incomplete", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./0/file0/.incomplete", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file0/.incomplete", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 5 newfstatat(5, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 getdents64(5, 0x555556f62870 /* 2 entries */, 32768) = 48 getdents64(5, 0x555556f62870 /* 0 entries */, 32768) = 0 close(5) = 0 rmdir("./0/file0/.incomplete") = 0 umount2("./0/file0/.index", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/file0/.index", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./0/file0/.index", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file0/.index", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 5 newfstatat(5, "", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_EMPTY_PATH) = 0 getdents64(5, 0x555556f62870 /* 2 entries */, 32768) = 48 getdents64(5, 0x555556f62870 /* 0 entries */, 32768) = 0 close(5) = 0 rmdir("./0/file0/.index") = 0 [ 21.947945][ T24] audit: type=1400 audit(1712812124.630:69): avc: denied { ioctl } for pid=287 comm="syz-executor170" path="/dev/loop0" dev="devtmpfs" ino=111 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 21.952167][ T289] incfs: ino conflict with backing FS 1 [ 21.973808][ T24] audit: type=1400 audit(1712812124.660:70): avc: denied { mounton } for pid=289 comm="syz-executor170" path="/root/syzkaller.ZQd0Uy/0/file0" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 21.973832][ T24] audit: type=1400 audit(1712812124.660:71): avc: denied { mount } for pid=289 comm="syz-executor170" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 22.025410][ T24] audit: type=1400 audit(1712812124.660:72): avc: denied { mounton } for pid=289 comm="syz-executor170" path="/root/syzkaller.ZQd0Uy/0/file0/file0" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 22.025647][ T287] ------------[ cut here ]------------ [ 22.050184][ T24] audit: type=1400 audit(1712812124.690:73): avc: denied { mount } for pid=289 comm="syz-executor170" name="/" dev="incremental-fs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 22.055787][ T287] WARNING: CPU: 1 PID: 287 at fs/inode.c:304 drop_nlink+0xc1/0x110 [ 22.078625][ T24] audit: type=1400 audit(1712812124.690:74): avc: denied { unmount } for pid=287 comm="syz-executor170" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 22.086309][ T287] Modules linked in: [ 22.106768][ T24] audit: type=1400 audit(1712812124.690:75): avc: denied { unmount } for pid=287 comm="syz-executor170" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 22.109948][ T287] CPU: 1 PID: 287 Comm: syz-executor170 Not tainted 5.10.209-syzkaller-00002-g4e1bc8d8e8ae #0 [ 22.139829][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 22.149854][ T287] RIP: 0010:drop_nlink+0xc1/0x110 [ 22.154900][ T287] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 17 dc f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9f 5e b3 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 22.174512][ T287] RSP: 0018:ffffc90000af7be8 EFLAGS: 00010293 [ 22.180428][ T287] RAX: ffffffff81b74951 RBX: 0000000000000000 RCX: ffff88811e6362c0 [ 22.188262][ T287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 22.196017][ T287] RBP: ffffc90000af7c10 R08: ffffffff81b748d4 R09: 0000000000000003 [ 22.203873][ T287] R10: fffff5200015ef6c R11: dffffc0000000001 R12: dffffc0000000000 [ 22.211662][ T287] R13: 1ffff11023d22bb5 R14: ffff88811e915d60 R15: ffff88811e915da8 [ 22.219480][ T287] FS: 0000555556f51480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 22.228235][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.234634][ T287] CR2: 0000555556f6a878 CR3: 000000011e81e000 CR4: 00000000003506a0 [ 22.242497][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.250269][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.258192][ T287] Call Trace: [ 22.261291][ T287] ? show_regs+0x58/0x60 [ 22.265375][ T287] ? __warn+0x160/0x2f0 [ 22.269384][ T287] ? drop_nlink+0xc1/0x110 [ 22.273637][ T287] ? report_bug+0x3d9/0x5b0 [ 22.278005][ T287] ? drop_nlink+0xc1/0x110 [ 22.282219][ T287] ? handle_bug+0x41/0x70 [ 22.286364][ T287] ? exc_invalid_op+0x1b/0x50 [ 22.290924][ T287] ? asm_exc_invalid_op+0x12/0x20 [ 22.295743][ T287] ? drop_nlink+0x44/0x110 [ 22.300022][ T287] ? drop_nlink+0xc1/0x110 [ 22.304249][ T287] ? drop_nlink+0xc1/0x110 [ 22.308530][ T287] ? drop_nlink+0xc1/0x110 [ 22.312758][ T287] shmem_rmdir+0x59/0x90 [ 22.316832][ T287] vfs_rmdir+0x2b7/0x3f0 [ 22.320969][ T287] incfs_kill_sb+0x108/0x220 [ 22.325340][ T287] deactivate_locked_super+0xad/0x110 [ 22.330578][ T287] deactivate_super+0xbe/0xf0 [ 22.335148][ T287] cleanup_mnt+0x45c/0x510 [ 22.339432][ T287] __cleanup_mnt+0x19/0x20 [ 22.343651][ T287] task_work_run+0x129/0x190 [ 22.348109][ T287] ptrace_notify+0x29e/0x350 [ 22.352506][ T287] ? do_notify_parent+0xa10/0xa10 [ 22.357362][ T287] ? user_path_at_empty+0x40/0x50 [ 22.362255][ T287] ? __x64_sys_umount+0x122/0x170 [ 22.367172][ T287] ? path_umount+0xea0/0xea0 [ 22.371671][ T287] syscall_exit_to_user_mode+0x120/0x1d0 [ 22.377139][ T287] do_syscall_64+0x40/0x70 [ 22.381365][ T287] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 22.387046][ T287] RIP: 0033:0x7fd51d668d07 [ 22.391686][ T287] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 22.411116][ T287] RSP: 002b:00007fff6f144fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 22.419354][ T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd51d668d07 [ 22.427417][ T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff6f145080 [ 22.435281][ T287] RBP: 00007fff6f145080 R08: 0000000000000000 R09: 0000000000000000 [ 22.443066][ T287] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007fff6f146170 [ 22.450867][ T287] R13: 0000555556f5a800 R14: 431bde82d7b634db R15: 00007fff6f147200 [ 22.458675][ T287] ---[ end trace b57c4085c9099394 ]--- [ 22.464086][ T287] ================================================================== [ 22.471964][ T287] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 22.478161][ T287] Write of size 4 at addr 0000000000000170 by task syz-executor170/287 [ 22.486346][ T287] [ 22.488517][ T287] CPU: 1 PID: 287 Comm: syz-executor170 Tainted: G W 5.10.209-syzkaller-00002-g4e1bc8d8e8ae #0 [ 22.499976][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 22.509863][ T287] Call Trace: [ 22.513004][ T287] dump_stack_lvl+0x1e2/0x24b [ 22.517506][ T287] ? panic+0x80b/0x80b [ 22.521410][ T287] ? _raw_spin_lock+0xa4/0x1b0 [ 22.526018][ T287] ? bfq_pos_tree_add_move+0x43b/0x43b [ 22.531305][ T287] kasan_report+0x167/0x1c0 [ 22.535672][ T287] ? __dentry_kill+0x505/0x650 [ 22.540392][ T287] ? ihold+0x20/0x60 [ 22.544369][ T287] ? ihold+0x20/0x60 [ 22.548087][ T287] kasan_check_range+0x293/0x2a0 [ 22.552869][ T287] __kasan_check_write+0x14/0x20 [ 22.557763][ T287] ihold+0x20/0x60 [ 22.561338][ T287] vfs_rmdir+0x200/0x3f0 [ 22.565405][ T287] incfs_kill_sb+0x108/0x220 [ 22.569828][ T287] deactivate_locked_super+0xad/0x110 [ 22.575032][ T287] deactivate_super+0xbe/0xf0 [ 22.579549][ T287] cleanup_mnt+0x45c/0x510 [ 22.583911][ T287] __cleanup_mnt+0x19/0x20 [ 22.588156][ T287] task_work_run+0x129/0x190 [ 22.592583][ T287] ptrace_notify+0x29e/0x350 [ 22.597029][ T287] ? do_notify_parent+0xa10/0xa10 [ 22.601875][ T287] ? user_path_at_empty+0x40/0x50 [ 22.606731][ T287] ? __x64_sys_umount+0x122/0x170 [ 22.611593][ T287] ? path_umount+0xea0/0xea0 [ 22.616022][ T287] syscall_exit_to_user_mode+0x120/0x1d0 [ 22.621506][ T287] do_syscall_64+0x40/0x70 [ 22.625750][ T287] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 22.631474][ T287] RIP: 0033:0x7fd51d668d07 [ 22.635733][ T287] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 22.655577][ T287] RSP: 002b:00007fff6f144fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 22.663803][ T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd51d668d07 [ 22.671683][ T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff6f145080 [ 22.679419][ T287] RBP: 00007fff6f145080 R08: 0000000000000000 R09: 0000000000000000 [ 22.687228][ T287] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007fff6f146170 [ 22.695238][ T287] R13: 0000555556f5a800 R14: 431bde82d7b634db R15: 00007fff6f147200 [ 22.703051][ T287] ================================================================== [ 22.710942][ T287] Disabling lock debugging due to kernel taint [ 22.717067][ T287] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 22.724724][ T287] #PF: supervisor write access in kernel mode [ 22.730627][ T287] #PF: error_code(0x0002) - not-present page [ 22.736440][ T287] PGD 0 P4D 0 [ 22.739657][ T287] Oops: 0002 [#1] PREEMPT SMP KASAN [ 22.744692][ T287] CPU: 1 PID: 287 Comm: syz-executor170 Tainted: G B W 5.10.209-syzkaller-00002-g4e1bc8d8e8ae #0 [ 22.756328][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 22.766245][ T287] RIP: 0010:ihold+0x25/0x60 [ 22.770564][ T287] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 b1 56 b3 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 00 d4 f0 ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 34 5a b3 [ 22.790441][ T287] RSP: 0018:ffffc90000af7c28 EFLAGS: 00010246 [ 22.796359][ T287] RAX: ffff88811e636200 RBX: 0000000000000001 RCX: ffff88811e6362c0 [ 22.804157][ T287] RDX: 0000000000000000 RSI: 0000000000000282 RDI: 00000000ffffffff [ 22.811968][ T287] RBP: ffffc90000af7c38 R08: ffffffff813e2edb R09: 0000000000000003 [ 22.820060][ T287] R10: fffffbfff0e10248 R11: dffffc0000000001 R12: dffffc0000000000 [ 22.827972][ T287] R13: ffff88811c0d6aa0 R14: 0000000000000000 R15: 0000000000000000 [ 22.835855][ T287] FS: 0000555556f51480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 22.844792][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.851215][ T287] CR2: 0000000000000170 CR3: 000000011e81e000 CR4: 00000000003506a0 [ 22.859818][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.867615][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.875509][ T287] Call Trace: [ 22.878647][ T287] ? __die_body+0x62/0xb0 [ 22.882842][ T287] ? __die+0x7e/0x90 [ 22.886539][ T287] ? no_context+0xbc8/0xf20 [ 22.890883][ T287] ? is_prefetch+0x5c0/0x5c0 [ 22.895304][ T287] ? preempt_schedule+0xd9/0xe0 [ 22.899991][ T287] ? __kasan_check_read+0x11/0x20 [ 22.904864][ T287] ? preempt_schedule_common+0xbe/0xf0 [ 22.910233][ T287] ? preempt_schedule+0xd9/0xe0 [ 22.915068][ T287] ? schedule_preempt_disabled+0x20/0x20 [ 22.920500][ T287] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 22.926141][ T287] ? __bad_area_nosemaphore+0xcd/0x440 [ 22.931437][ T287] ? bad_area_nosemaphore+0x2d/0x40 [ 22.936469][ T287] ? exc_page_fault+0x3ea/0x5b0 [ 22.941286][ T287] ? asm_exc_page_fault+0x1e/0x30 [ 22.946102][ T287] ? check_panic_on_warn+0x5b/0xb0 [ 22.951143][ T287] ? ihold+0x25/0x60 [ 22.954876][ T287] ? ihold+0x20/0x60 [ 22.958610][ T287] vfs_rmdir+0x200/0x3f0 [ 22.962687][ T287] incfs_kill_sb+0x108/0x220 [ 22.967114][ T287] deactivate_locked_super+0xad/0x110 [ 22.972321][ T287] deactivate_super+0xbe/0xf0 [ 22.976834][ T287] cleanup_mnt+0x45c/0x510 [ 22.981088][ T287] __cleanup_mnt+0x19/0x20 [ 22.985357][ T287] task_work_run+0x129/0x190 [ 22.989774][ T287] ptrace_notify+0x29e/0x350 [ 22.994203][ T287] ? do_notify_parent+0xa10/0xa10 [ 22.999059][ T287] ? user_path_at_empty+0x40/0x50 [ 23.003922][ T287] ? __x64_sys_umount+0x122/0x170 [ 23.008775][ T287] ? path_umount+0xea0/0xea0 [ 23.013201][ T287] syscall_exit_to_user_mode+0x120/0x1d0 [ 23.018672][ T287] do_syscall_64+0x40/0x70 [ 23.022925][ T287] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 23.028681][ T287] RIP: 0033:0x7fd51d668d07 [ 23.032906][ T287] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 23.052514][ T287] RSP: 002b:00007fff6f144fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 23.061453][ T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd51d668d07 [ 23.069369][ T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff6f145080 [ 23.077263][ T287] RBP: 00007fff6f145080 R08: 0000000000000000 R09: 0000000000000000 [ 23.085064][ T287] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007fff6f146170 [ 23.092874][ T287] R13: 0000555556f5a800 R14: 431bde82d7b634db R15: 00007fff6f147200 [ 23.100682][ T287] Modules linked in: [ 23.104416][ T287] CR2: 0000000000000170 [ 23.108408][ T287] ---[ end trace b57c4085c9099395 ]--- [ 23.113815][ T287] RIP: 0010:ihold+0x25/0x60 [ 23.118286][ T287] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 b1 56 b3 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 00 d4 f0 ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 34 5a b3 [ 23.137891][ T287] RSP: 0018:ffffc90000af7c28 EFLAGS: 00010246 [ 23.143786][ T287] RAX: ffff88811e636200 RBX: 0000000000000001 RCX: ffff88811e6362c0 [ 23.151602][ T287] RDX: 0000000000000000 RSI: 0000000000000282 RDI: 00000000ffffffff [ 23.159409][ T287] RBP: ffffc90000af7c38 R08: ffffffff813e2edb R09: 0000000000000003 [ 23.167342][ T287] R10: fffffbfff0e10248 R11: dffffc0000000001 R12: dffffc0000000000 [ 23.175118][ T287] R13: ffff88811c0d6aa0 R14: 0000000000000000 R15: 0000000000000000 [ 23.182934][ T287] FS: 0000555556f51480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 23.191697][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.198120][ T287] CR2: 0000000000000170 CR3: 000000011e81e000 CR4: 00000000003506a0 [ 23.205932][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 23.213751][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.221550][ T287] Kernel panic - not syncing: Fatal exception [ 23.227639][ T287] Kernel Offset: disabled [ 23.231806][ T287] Rebooting in 86400 seconds..