last executing test programs: 544.095748ms ago: executing program 0 (id=1): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x1, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') symlink(&(0x7f00000007c0)='mnt/encrypted_dir\x00', &(0x7f0000000040)='./file0\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) lstat(&(0x7f0000002340)='./file0\x00', &(0x7f0000002380)) 372.541012ms ago: executing program 2 (id=3): syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) syz_emit_ethernet(0x5eb, &(0x7f0000000780)={@local, @remote, @void, {@ipv6={0x86dd, @esp={0x8, 0x6, "b5b945", 0x5b5, 0x32, 0xff, @dev={0xfe, 0x80, '\x00', 0xc}, @dev={0xfe, 0x80, '\x00', 0x13}, {[], {0x4d4, 0x2, @basic={0x0, 0x0, 0x0, [@ipv6=@tipc_packet={0x3, 0x6, "4f0bcc", 0x351, 0x6, 0x1, @remote, @mcast2, {[@routing={0x0, 0x6, 0x0, 0x2, 0x0, [@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}, @dstopts={0x3a, 0x7, '\x00', [@ra={0x5, 0x2, 0x8}, @generic={0x2, 0x33, "480e70bef9b1bc612091475e0ed9b8a6f75955ebc6320e538060733fce55a0cf021be4d5466dd8b63f23fbed69012acbae0225"}]}, @routing={0x2, 0x6, 0x1, 0x5, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private2, @dev={0xfe, 0x80, '\x00', 0x2d}]}, @fragment={0x21, 0x0, 0x9, 0x0, 0x0, 0x7, 0x64}, @hopopts={0x6c, 0xe, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x80, 0x3, [0xfffffffffffffffc, 0x400]}}, @ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x38, {0x0, 0xc, 0x1, 0xfffa, [0x6, 0x6, 0x7, 0x5, 0x5, 0x6]}}, @calipso={0x7, 0x18, {0x1, 0x4, 0x36, 0x3, [0x9, 0x1ff]}}]}, @hopopts={0x5e, 0x18, '\x00', [@ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x10, {0x1, 0x2, 0xb8, 0xfff5, [0x80]}}, @generic={0x7, 0x91, "69266268ed4b65197a88892119ad3161359e6b6383e866cd32c15fe86014f36cd08e331c9044bd8a1b635165c37c482611295f6860850341bb2625be024b16eee06b9f38263a08495225a17febc83355e3710fdb7b60de09c9947af9ba6a39bd3d486b91a13bd787d1581879c6183cdc92e912cf88bb97015c8917653643fd6f85591596c9c9a289afc25c04243f47fc40"}, @jumbo={0xc2, 0x4, 0x6d}]}, @fragment={0x1d, 0x0, 0xf, 0x1, 0x0, 0x12, 0x65}, @srh={0x3c, 0xc, 0x4, 0x6, 0x2, 0x30, 0x8, [@dev={0xfe, 0x80, '\x00', 0x24}, @remote, @dev={0xfe, 0x80, '\x00', 0xd}, @private2, @dev={0xfe, 0x80, '\x00', 0xc}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}]}, @routing={0x33, 0xa, 0x1, 0x6, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x19}, @empty, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x21, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x60}, @calipso={0x7, 0x30, {0x3, 0xa, 0x3, 0x6, [0x101, 0xd5, 0xffffffffffff7948, 0x1, 0x80000001]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}], @payload_conn={{{0x21, 0x0, 0x1, 0x1, 0x1, 0x6, 0x1, 0x2, 0xeb, 0x0, 0x3, 0x2, 0x3, 0x0, 0xf, 0x1, 0x3, 0x4e22, 0x4e24}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}, @ipv4=@udp={{0x5, 0x4, 0x2, 0x3, 0x1f8, 0x66, 0x0, 0xd9, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @loopback}, {0x4e22, 0x4e20, 0x1e4, 0x0, @gue={{0x1, 0x0, 0x2, 0xff, 0x0, @void}, "9c51dede3a6de2f4287c1e9ef9baa15c9a6618e11705f070f8bf2a491fc2f04ab805d123574e6eac519143e81e1ee9f1c65abf68a02a4896bfaf58d1ba2869b00227ccdd71aa21d08cb645a4daefbd50bf71090950c516f2f77aa83ff58dc05f39cf47534a7148032cd309e3650c3a95001348a43d65a8e2bb4c453d75a3075c9a4e9194977d30bd618e808727fd7872826e00e786d0ef64e6e9016cbed8b64579d41d483156134cb6206239bc490c545e894ded3c4393ea2559444f0e551b4c7867ef4ca099ea4dcf971e4a9e74cc4c74aa03f537f96739c9791a8406ea4108820ded90f2fd56fa0a7e0c895719bc5390686ab7cf277603e78e623ec670e0ba4be4aed47b97d57e14ab6fd94ebdbe961da856476f25fa70e68d6a1246358c4aabc89b84e4a681bfa1e162a1aad0ce378377f57c73f9aaa57df236b14dbdd36474947a72edf6eff0cbaa915f31730358b8f15c451cd46a768cc2c2b5df1d0f9be07f6e61c85e8937b1dc1582c9721303d174c681cf8af34c13f962e30fccb8320403f0f6a4ad122edb25a6e9a3e4ea0803babdf19f79297b63cd42363c2e69c4da0cd4feca23e3f8fd4a632e4e1349f112d463245877459fea09e4339ccb78c68489009959426cf61d92462cbf6993e0c6a7c9297fee751e"}}}, @ipv6=@esp={0x1, 0x6, "e58da8", 0xe, 0x32, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x16}, {[], {0x4d5, 0x400, @basic={0x0, 0x0, 0x3}}}}]}}}}}}}, 0x0) 355.300802ms ago: executing program 3 (id=4): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 295.910823ms ago: executing program 1 (id=2): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newrule={0x28, 0x20, 0x301, 0x70bd27, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x3}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x28}}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='1', 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x40, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @private=0xa010102}, {0x4e20, 0x4e20, 0x8}}}}}, 0x0) 248.950555ms ago: executing program 2 (id=6): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x71}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 236.375125ms ago: executing program 0 (id=7): mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) unshare(0x44040000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 186.243596ms ago: executing program 2 (id=8): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80), 0xfe, 0x55d, &(0x7f0000000bc0)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 93.784099ms ago: executing program 3 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060108000000000000000005000005050005000a00000005000100070000000500040000007a4a0900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 84.600328ms ago: executing program 1 (id=10): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x4a) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='udp 2', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r2, {0xe, 0x5}}}, 0x24}}, 0x4) 78.911768ms ago: executing program 4 (id=5): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000080)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x1000000, 0x0}) 184.06µs ago: executing program 3 (id=11): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x2}, @broadcast}, {0x100, 0x4e20, 0x10, 0x0, @gue={{0x1, 0x1, 0x0, 0xc0, 0x100, @void}, "1228fefb"}}}}}}, 0x0) 0s ago: executing program 4 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0) write$cgroup_pid(r0, &(0x7f0000000300), 0x12) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 15.014574][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 15.014592][ T30] audit: type=1400 audit(1788870852.784:59): avc: denied { transition } for pid=223 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.026678][ T30] audit: type=1400 audit(1788870852.784:60): avc: denied { noatsecure } for pid=223 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.034045][ T30] audit: type=1400 audit(1788870852.794:61): avc: denied { write } for pid=223 comm="sh" path="pipe:[14457]" dev="pipefs" ino=14457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.055632][ T30] audit: type=1400 audit(1788870852.794:62): avc: denied { rlimitinh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.081237][ T30] audit: type=1400 audit(1788870852.794:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. [ 22.691517][ T30] audit: type=1400 audit(1788870860.454:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.695402][ T277] cgroup: Unknown subsys name 'net' [ 22.714292][ T30] audit: type=1400 audit(1788870860.464:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.741667][ T30] audit: type=1400 audit(1788870860.484:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.742359][ T277] cgroup: Unknown subsys name 'devices' [ 22.884076][ T277] cgroup: Unknown subsys name 'hugetlb' [ 22.889765][ T277] cgroup: Unknown subsys name 'rlimit' [ 23.091181][ T30] audit: type=1400 audit(1788870860.854:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.114816][ T30] audit: type=1400 audit(1788870860.854:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.143670][ T30] audit: type=1400 audit(1788870860.864:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.166310][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.175708][ T30] audit: type=1400 audit(1788870860.944:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.201308][ T30] audit: type=1400 audit(1788870860.944:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.224188][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.227630][ T30] audit: type=1400 audit(1788870860.994:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.264910][ T30] audit: type=1400 audit(1788870860.994:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.867168][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.874514][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.882241][ T287] device bridge_slave_0 entered promiscuous mode [ 23.899132][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.906332][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.914245][ T286] device bridge_slave_0 entered promiscuous mode [ 23.924041][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.931093][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.938654][ T286] device bridge_slave_1 entered promiscuous mode [ 23.945483][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.952699][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.960185][ T287] device bridge_slave_1 entered promiscuous mode [ 23.986059][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.993167][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.000758][ T289] device bridge_slave_0 entered promiscuous mode [ 24.010997][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.018179][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.026861][ T289] device bridge_slave_1 entered promiscuous mode [ 24.083611][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.090793][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.098375][ T288] device bridge_slave_0 entered promiscuous mode [ 24.108196][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.115334][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.122804][ T288] device bridge_slave_1 entered promiscuous mode [ 24.178233][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.185715][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.193884][ T285] device bridge_slave_0 entered promiscuous mode [ 24.232120][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.239208][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.246720][ T285] device bridge_slave_1 entered promiscuous mode [ 24.329284][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.337048][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.344405][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.351446][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.360505][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.367717][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.375043][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.382104][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.414543][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.421624][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.429003][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.436069][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.456103][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.463221][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.470511][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.477597][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.495163][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.502270][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.509559][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.516643][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.555153][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.563582][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.571356][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.579026][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.586431][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.593809][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.600973][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.608346][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.615752][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.623148][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.630800][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.662205][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.671659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.679510][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.688430][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.695633][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.703555][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.711829][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.718876][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.726348][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.734481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.742586][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.750330][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.757905][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.766197][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.773372][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.780753][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.789035][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.796167][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.803619][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.811950][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.819172][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.848686][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.856981][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.864151][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.871698][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.880555][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.887623][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.895064][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.903420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.911526][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.919819][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.926886][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.934828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.942454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.959200][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.967512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.975662][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.984478][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.992658][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.001051][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.022139][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.030150][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.038485][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.047058][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.055502][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.063577][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.077917][ T287] device veth0_vlan entered promiscuous mode [ 25.084627][ T289] device veth0_vlan entered promiscuous mode [ 25.099770][ T286] device veth0_vlan entered promiscuous mode [ 25.106620][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.115317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.123741][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.133033][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.141370][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.148555][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.156181][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.164745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.173023][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.180184][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.187882][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.196320][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.204625][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.213216][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.221523][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.229768][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.240222][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.247817][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.255471][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.263147][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.272524][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.280756][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.297271][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.305747][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.313967][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.321421][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.330821][ T287] device veth1_macvtap entered promiscuous mode [ 25.338446][ T285] device veth0_vlan entered promiscuous mode [ 25.345886][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.353748][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.362309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.380554][ T289] device veth1_macvtap entered promiscuous mode [ 25.392186][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.400309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.408448][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.416986][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.425869][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.434314][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.442879][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.455886][ T286] device veth1_macvtap entered promiscuous mode [ 25.467246][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.475310][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 25.476370][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.492280][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.500144][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.512380][ T285] device veth1_macvtap entered promiscuous mode [ 25.522639][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.531111][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.540595][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.549028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.580702][ T288] device veth0_vlan entered promiscuous mode [ 25.593995][ T308] loop0: detected capacity change from 0 to 128 [ 25.606330][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.614866][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.623585][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.632531][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.641618][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.651175][ T308] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 25.662617][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.670729][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.679238][ T308] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 25.684469][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.699661][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.708253][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.716889][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.731073][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.742271][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.768006][ T308] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 25.784775][ T288] device veth1_macvtap entered promiscuous mode [ 25.792097][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.811626][ T308] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 25.841534][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.848924][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.897912][ T328] loop2: detected capacity change from 0 to 1024 [ 25.922177][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.930569][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.941101][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.949778][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.982592][ T317] syz.3.4 (317) used greatest stack depth: 21160 bytes left [ 25.987603][ T328] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 26.049531][ T340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 26.081413][ T343] Mass Storage Function, version: 2009/09/11 [ 26.099661][ T343] LUN: removable file: (no medium) [ 26.108990][ T343] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 26.120761][ T343] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 26.129231][ T343] CPU: 1 PID: 343 Comm: syz.4.12 Not tainted syzkaller #0 [ 26.136477][ T343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.146644][ T343] RIP: 0010:fsg_common_set_num_buffers+0x65/0x2b0 [ 26.153120][ T343] Code: 89 c6 49 bd 00 00 00 00 00 fc ff df bf 00 40 00 00 be c0 0c 00 00 ba 02 00 00 00 e8 95 28 6e fe 48 89 c3 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 1c 1d 7c fe 49 89 1e 48 85 db 0f [ 26.172830][ T343] RSP: 0018:ffffc90007877b08 EFLAGS: 00010202 [ 26.178917][ T343] RAX: 0000000000000002 RBX: ffff88812a144000 RCX: 0000000000000002 [ 26.187053][ T343] RDX: 0000000000000000 RSI: ffffffff832d118b RDI: ffffed1025429000 [ 26.195247][ T343] RBP: ffffc90007877b50 R08: 0000000000004000 R09: ffffed1025429000 [ 26.203253][ T343] R10: dffffc0000000000 R11: fffff94000950a33 R12: ffff88810fb04800 [ 26.211534][ T343] R13: dffffc0000000000 R14: 0000000000000010 R15: 0000000000000000 [ 26.219625][ T343] FS: 00007fec3bd176c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 26.228576][ T343] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.235182][ T343] CR2: 000000110c2f1cd0 CR3: 000000012a307000 CR4: 00000000003506a0 [ 26.243587][ T343] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.251586][ T343] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.259760][ T343] Call Trace: [ 26.263064][ T343] [ 26.266010][ T343] ? kstrtou8+0xac/0x130 [ 26.270278][ T343] fsg_opts_num_buffers_store+0x138/0x1c0 [ 26.276019][ T343] ? fsg_opts_num_buffers_show+0xb0/0xb0 [ 26.281754][ T343] ? avc_policy_seqno+0x1b/0x70 [ 26.286727][ T343] ? selinux_file_permission+0x2aa/0x510 [ 26.292372][ T343] configfs_write_iter+0x312/0x400 [ 26.297516][ T343] ? fsg_opts_num_buffers_show+0xb0/0xb0 [ 26.303168][ T343] vfs_write+0x831/0xfd0 [ 26.307424][ T343] ? file_end_write+0x1b0/0x1b0 [ 26.312283][ T343] ? wait_for_completion_killable_timeout+0x10/0x10 [ 26.318897][ T343] ? __fget_files+0x2e1/0x340 [ 26.323585][ T343] ? __fdget_pos+0x2d2/0x380 [ 26.328187][ T343] ? ksys_write+0x70/0x260 [ 26.332623][ T343] ksys_write+0x14a/0x260 [ 26.336977][ T343] ? __ia32_sys_read+0x90/0x90 [ 26.341758][ T343] ? __kasan_check_write+0x14/0x20 [ 26.346889][ T343] ? switch_fpu_return+0x15d/0x2c0 [ 26.352014][ T343] __x64_sys_write+0x7b/0x90 [ 26.356629][ T343] x64_sys_call+0x8ef/0x9a0 [ 26.361142][ T343] do_syscall_64+0x4c/0xa0 [ 26.365677][ T343] ? clear_bhb_loop+0x50/0xa0 [ 26.372371][ T343] ? clear_bhb_loop+0x50/0xa0 [ 26.377090][ T343] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 26.383659][ T343] RIP: 0033:0x7fec3d2be159 [ 26.388108][ T343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.408248][ T343] RSP: 002b:00007fec3bd17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 26.416685][ T343] RAX: ffffffffffffffda RBX: 00007fec3d545fa0 RCX: 00007fec3d2be159 [ 26.425117][ T343] RDX: 0000000000000012 RSI: 0000200000000300 RDI: 0000000000000003 [ 26.433121][ T343] RBP: 00007fec3d355024 R08: 0000000000000000 R09: 0000000000000000 [ 26.441110][ T343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to send rpc fd=3 want=248 sent=0 n=-1 (errno 32: Broken pipe) [ 26.449188][ T343] R13: 00007fec3d546038 R14: 00007fec3d545fa0 R15: 00007ffcfd08f318 [ 26.457274][ T343] [ 26.460408][ T343] Modules linked in: [ 26.531226][ T343] ---[ end trace c2de1d0c3d4d6225 ]--- [ 26.546381][ T343] RIP: 0010:fsg_common_set_num_buffers+0x65/0x2b0 [ 26.559341][ T343] Code: 89 c6 49 bd 00 00 00 00 00 fc ff df bf 00 40 00 00 be c0 0c 00 00 ba 02 00 00 00 e8 95 28 6e fe 48 89 c3 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 1c 1d 7c fe 49 89 1e 48 85 db 0f [ 26.587135][ T343] RSP: 0018:ffffc90007877b08 EFLAGS: 00010202 [ 26.595018][ T343] RAX: 0000000000000002 RBX: ffff88812a144000 RCX: 0000000000000002 [ 26.603718][ T343] RDX: 0000000000000000 RSI: ffffffff832d118b RDI: ffffed1025429000 [ 26.623452][ T343] RBP: ffffc90007877b50 R08: 0000000000004000 R09: ffffed1025429000 [ 26.639941][ T343] R10: dffffc0000000000 R11: fffff94000950a33 R12: ffff88810fb04800 [ 26.648143][ T343] R13: dffffc0000000000 R14: 0000000000000010 R15: 0000000000000000 [ 26.656496][ T343] FS: 00007fec3bd176c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 26.666542][ T343] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.673304][ T343] CR2: 00007fec3d30b840 CR3: 000000012a307000 CR4: 00000000003506b0 [ 26.681442][ T343] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.684609][ T324] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 26.690720][ T343] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.705273][ T343] Kernel panic - not syncing: Fatal exception [ 26.711439][ T343] Kernel Offset: disabled [ 26.715815][ T343] Rebooting in 86400 seconds..