last executing test programs: 7.809382189s ago: executing program 1 (id=2): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc714, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150091a60906a101090182008c0508950129309102c0"], 0x0}, 0x0) 7.731055141s ago: executing program 2 (id=3): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x82, 0x602) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac3(0x5, 0x0, 0x0, 0x0) write$hidraw(r1, &(0x7f0000001380)='\x00+', 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.342314951s ago: executing program 3 (id=9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="667d0f38c573ababc76fb4360fc9bb25cc00007666f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x32}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000340)="66b8090000000f23d00f21f86635200000060f23f80f01d166b90f04000066b800a0968466ba000000000f30262e360fc75c046766c7442400f20900006766c7442402000000006766c744240600000000670f0114240f743c360fc73a0fd2036766c7442400f71f00006766c7442402c16400006766c744240600000000670f011424f22666fe886450", 0x8a}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 7.027766398s ago: executing program 3 (id=10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000002240)="66b8a4008ee0b8001000000f23d80f21f835000000d00f23f80f01790f660fc7b1000000000f00e10f20c035200000000f22c066ba200066ed0f0f4209bb65f30f09260fc76ead", 0x47}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.95064217s ago: executing program 3 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1b6) fallocate(r1, 0x0, 0x0, 0x10000) 6.691565346s ago: executing program 3 (id=12): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) 6.15480456s ago: executing program 1 (id=13): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d64ed1040206402"], 0x0) r1 = syz_usb_connect$uac3(0x0, 0x9d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x7, 0x10, 0x1, {0x8, 0xb, 0x0, 0x2, 0x1, 0x0, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x27, 0x80000002}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x307, 0x6, 0x6, 0x4, 0x6, 0x5, 0x5, 0x3}, @mixer_unit={0xa, 0x24, 0x5, 0x6, 0x3, '\x00\x00\x00\x00\x00'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x80, 0xf7, 0x8, {0xa, 0x25, 0x25, 0x0, 0xff, 0x24d8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0x9, 0x3, {0xa, 0x25, 0x25, 0x2, 0x9, 0xfc01}}}}}}}}]}}, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000e80)={0x2c, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000006c0)={0x2c, &(0x7f0000000340)={0x0, 0xa, 0x2, {0x2, 0x22}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000100), 0x9f, 0x200000) write$hidraw(r3, &(0x7f0000000140)="4c627f5cea607bd76f3765c926ec46921a31fdeb38e7ed2b0f2c8c455519122a697cf073fe6814f1380329a649c9bf5f18b7272ccb73d91f684de346743dee59faa2d342628b9ff61abfc2cca88c991f9e8d6eae52f273efdfc91a9286b5d37f348b7ccca90af12fa1a3507de2afa99ccb3cf580b6d50ba0b500701bcff2271ee67fd370a8576caa", 0x88) r4 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000000)=[0x1, 0xf0]) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001002fe70009046b00016a93f000090588ae"], 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000000300)={0x14, &(0x7f0000000200)={0x40, 0x9, 0x28, {0x28, 0x21, "3e0e8087236fdd3d311040f739929849f702950b0404dc2cc5dd7c555cc1416b73d5d93a15c6"}}, &(0x7f0000000240)={0x0, 0x3, 0xa4, @string={0xa4, 0x3, "74bcf700e851efc16046ad7617aa0fc0739d7cf2e0c7d6d2e3af48b9da607480bee39fdeaecebf2a3b5388d8edb66ff08600df7d3057df7377e1492d3b48d7e38814b745fe6814d45dae3eefd12a7a57916e945427dd16f6257bc2b7f8257240e881da86bdfe1c124722ceadb63ecf6b1bd2f903ad2c3657a79e8a7f4ded05036b5b67a1867af2e848caa176663de0fa36d685a777103f574f28a7403dff43d85a4d"}}}, &(0x7f0000000640)={0x34, &(0x7f0000000400)={0x0, 0x12, 0xc8, "e38270eb9327a2ea1b70fbd38e9c3b53ef4e044528bf8a6c6c25612e3ca2f9b82c1c44430dcfd5355799b25337c3624b32b9461343fa83c0c38fa244d8cc5e5ad1198a06b8c9088bf4717b9438c40f75fa14d02e5adc5f1bd04d7144a5ff79417062d61ee290a26f6a758fd0098196bccd4a3bc4e8abb255aa336adecc0f62f81cae0ac6a0ab0fde81653adc9cc5b9b3dc7d78c24d69c3f14b9d4bff6d336f233ace075d242d66eafad8d79ac13c976c201aa53a2367efa0fc8a8c80061cffa3b4c2c105bae33239"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xd0}, 0x0, &(0x7f0000000580)={0xc0, 0xa1, 0x4, 0xd2}, &(0x7f00000005c0)={0x40, 0xa0, 0x4, 0x5c85ceb9}, &(0x7f0000000600)={0xc0, 0xa2, 0x2f, "bba7642918e1230195d403569570615311bd2d7342416f3f98c0096e3729e733665f6e744f82f303eabdceda9ce0d9"}}) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f00000000c0)=[0x80000000, 0x8]) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f0000000380)=""/23) 4.703359795s ago: executing program 2 (id=16): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000200)=@known='trusted.overlay.upper\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.750882219s ago: executing program 2 (id=17): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x1c200) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x502d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xba4e7a40265e5c0b, 0x2c, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_disconnect(r1) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, 0x0, 0x0) syz_usb_disconnect(r2) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ecm(0x3, 0x171, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16, @ANYRESDEC=0x0], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x0, 0x1, 0xb, 0x8, "2af15ef6983d2e9e4cea7f3567bf701fa00d6a39ad4b3eb72544d4c1ba33b030"}) r6 = syz_usb_connect(0x5, 0x12b, &(0x7f0000000140)=ANY=[@ANYBLOB="120100005b4b4f10da0b79f16f5c010203010902190101400000000904140a06ffffff"], 0x0) syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000540)=ANY=[@ANYBLOB="40054b000000c5605c"], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x2) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000180)=""/193) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x80045b10, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0xcabb7aab17d1f79d) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x18d1, 0x5057, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x80, 0x18, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0xa, {0x9, 0x21, 0xf000, 0xf2, 0x1, {0x22, 0xce9}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xa, 0x84, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x2, 0x8}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x0, 0x1, 0x7, 0x20, 0x7}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000340)=@lang_id={0x4}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x1e, &(0x7f0000000400)=@string={0x1e, 0x3, "746e93aeb821a4b602ec5b7736bfe9568ad609255246442a3dbabc09"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x827}}]}) syz_usb_connect$uac3(0x5, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000088205820540000102030109028d00030109200c080b0001010130070904000000010130000a24010129003dc0000013240305010104040103000000cd6c01000c000c240b04010200000007050009040100ffff0230000904010101010230000905015d27"], 0x0) 3.624252831s ago: executing program 0 (id=18): writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000005c0)}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0xa8d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x407, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x137, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x100, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000140)='S', 0x1}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.621308442s ago: executing program 0 (id=19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="667d0f38c573ababc76fb4360fc9bb25cc00007666f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x32}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000340)="66b8090000000f23d00f21f86635200000060f23f80f01d166b90f04000066b800a0968466ba000000000f30262e360fc75c046766c7442400f20900006766c7442402000000006766c744240600000000670f0114240f743c360fc73a0fd2036766c7442400f71f00006766c7442402c16400006766c744240600000000670f011424f22666fe886450", 0x8a}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.362977198s ago: executing program 0 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)="310a0000000000dbfb239d4626adee58fd754d323afc7b2736ee85757271dc7ae4b98aabaf55146547cfc59abe3efec26a7b3f2f2bc29baf7919e5c0646c889b14b3adb8dbd6e3d08ba3fa0f98168f27810f97edb89937bcb0943a0004cb0508e65cb5c49bbaeb3b7d7faa89c8538e3f469d3e86db9e3e785f8a7da23b55abd9d0d4993407125f74a74b320ec0e7cf127fbf9b0000000000", 0xd9) 3.357733748s ago: executing program 3 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = open(&(0x7f0000000d40)='./file0\x00', 0x42c3, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r3, &(0x7f0000000180), 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000005c0)="3078353637380a95349a86b20d25de8024c7d88700da093534e03a932a9ff73cdbd9d33302b451eea5abe67c0548c0060242058f1409ef5c1b749f34788a433eaf24684b181b233d6c66f15a3100bf9fde65e484a31150327e2745a3442cd32d6b7ce88969b79afd77b146a75282b8f8bfc0a73dc83882eaf27d458198cd085af9040e781237af05d8df5939273fc40e5f44c19744249018ad5df4696e890b94f0736b5474aa9dfe6f08348eaa21ef073cd979ce18c4817b2a482e7183492e", 0xbf) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)="310a0000000000dbfb239d4626adee58fd754d323afc7b2736ee85757271dc7ae4b98aabaf55146547cfc59abe3efec26a7b3f2f2bc29baf7919e5c0646c889b14b3adb8dbd6e3d08ba3fa0f98168f27810f97edb89937bcb0943a0004cb0508e65cb5c49bbaeb3b7d7faa89c8538e3f469d3e86db9e3e785f8a7da23b55abd9d0d4993407125f74a74b320ec0e7cf127fbf9b0000000000", 0xd9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) 3.181104723s ago: executing program 0 (id=22): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000500)=[0x46, 0x9]) 3.051868916s ago: executing program 1 (id=23): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3.028966396s ago: executing program 0 (id=24): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x541b, 0x0) 3.005620357s ago: executing program 3 (id=25): syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="f6010102000000102505a8a4400001020301093a6081ea6b2b5e8613618afa021b00010101400609"], 0x0) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006090582020002"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000014c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x2, 0x3f, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) 936.999737ms ago: executing program 1 (id=26): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x82, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0xa8d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x407, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x137, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x100, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000200)=@known='trusted.overlay.upper\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 844.17334ms ago: executing program 1 (id=27): writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000005c0)}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x1, 0xd3, 0xa8d, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x407, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x137, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x100, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000140)='S', 0x1}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 843.91796ms ago: executing program 1 (id=28): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150025ff0904a101959530263b7b49760829309102c0"], 0x0}, 0x0) 0s ago: executing program 0 (id=29): syz_usb_connect$uac2(0x0, 0x8c, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0x5, 0xc0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0xc, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0xff, 0x1a, 0x2}, [@output_terminal={0xc, 0x24, 0x3, 0x3, 0x402, 0x9, 0x6, 0x3, 0x200, 0x7f}, @processing_unit={0x5, 0x24, 0x8, 0x6, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x7d7, 0x3, 0xf7, 0x7, {0x8, 0x25, 0x1, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x81, 0x8, 0x4, {0x8, 0x25, 0x1, 0x0, 0x3c, 0xfe, 0x1}}}}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.186' (ED25519) to the list of known hosts. [ 30.679049][ T36] audit: type=1400 audit(1788362696.920:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.682454][ T287] cgroup: Unknown subsys name 'net' [ 30.701759][ T36] audit: type=1400 audit(1788362696.920:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.729202][ T36] audit: type=1400 audit(1788362696.950:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.729679][ T287] cgroup: Unknown subsys name 'devices' [ 30.849018][ T287] cgroup: Unknown subsys name 'hugetlb' [ 30.854682][ T287] cgroup: Unknown subsys name 'rlimit' [ 30.970029][ T36] audit: type=1400 audit(1788362697.210:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.993247][ T36] audit: type=1400 audit(1788362697.210:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.018030][ T36] audit: type=1400 audit(1788362697.210:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 31.076984][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.085800][ T36] audit: type=1400 audit(1788362697.320:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 31.111379][ T36] audit: type=1400 audit(1788362697.320:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.146781][ T36] audit: type=1400 audit(1788362697.380:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.172442][ T36] audit: type=1400 audit(1788362697.390:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.173019][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.944096][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.966716][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.973895][ T294] bridge_slave_0: entered allmulticast mode [ 31.980602][ T294] bridge_slave_0: entered promiscuous mode [ 31.996146][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.003235][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.010345][ T294] bridge_slave_1: entered allmulticast mode [ 32.016599][ T294] bridge_slave_1: entered promiscuous mode [ 32.128413][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.135501][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.142895][ T300] bridge_slave_0: entered allmulticast mode [ 32.149233][ T300] bridge_slave_0: entered promiscuous mode [ 32.166639][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.173746][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.181029][ T300] bridge_slave_1: entered allmulticast mode [ 32.187315][ T300] bridge_slave_1: entered promiscuous mode [ 32.206173][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.213362][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.220735][ T298] bridge_slave_0: entered allmulticast mode [ 32.227121][ T298] bridge_slave_0: entered promiscuous mode [ 32.236307][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.243438][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.250615][ T298] bridge_slave_1: entered allmulticast mode [ 32.257056][ T298] bridge_slave_1: entered promiscuous mode [ 32.299048][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.306136][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.313480][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.320545][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.344298][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.351416][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.358598][ T299] bridge_slave_0: entered allmulticast mode [ 32.364890][ T299] bridge_slave_0: entered promiscuous mode [ 32.374463][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.381591][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.388813][ T299] bridge_slave_1: entered allmulticast mode [ 32.395076][ T299] bridge_slave_1: entered promiscuous mode [ 32.508214][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.515549][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.535173][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.542272][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.562540][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.569695][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.617367][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.624477][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.632154][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.639218][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.660223][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.667341][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.675106][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.682205][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.693140][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.700295][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.708278][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.715348][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.742398][ T294] veth0_vlan: entered promiscuous mode [ 32.770895][ T294] veth1_macvtap: entered promiscuous mode [ 32.784666][ T299] veth0_vlan: entered promiscuous mode [ 32.808210][ T300] veth0_vlan: entered promiscuous mode [ 32.832242][ T298] veth0_vlan: entered promiscuous mode [ 32.842787][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.846930][ T300] veth1_macvtap: entered promiscuous mode [ 32.865256][ T299] veth1_macvtap: entered promiscuous mode [ 32.892532][ T298] veth1_macvtap: entered promiscuous mode [ 33.056471][ T331] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.146794][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.246969][ T318] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.274811][ T335] ======================================================= [ 33.274811][ T335] WARNING: The mand mount option has been deprecated and [ 33.274811][ T335] and is ignored by this kernel. Remove the mand [ 33.274811][ T335] option from the mount to silence this warning. [ 33.274811][ T335] ======================================================= [ 33.312906][ T335] overlay: Unknown parameter '/' [ 33.336552][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.347264][ T10] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.360933][ T10] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.374131][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 33.381038][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 33.391908][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.402171][ T10] usb 2-1: config 0 descriptor?? [ 33.408768][ T318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.420596][ T318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.430917][ T318] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 33.440214][ T318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.450665][ T318] usb 3-1: config 0 descriptor?? [ 33.816954][ T10] logitech-djreceiver 0003:046D:C714.0001: hidraw0: USB HID v0.00 Keyboard [HID 046d:c714] on usb-dummy_hcd.1-1/input0 [ 33.868939][ T318] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 33.887267][ T318] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 33.894750][ T318] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 33.905366][ T318] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 33.924103][ T318] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 33.932556][ T318] playstation 0003:054C:0DF2.0002: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 34.019279][ T45] usb 2-1: USB disconnect, device number 2 [ 34.068102][ T318] playstation 0003:054C:0DF2.0002: Failed to retrieve feature with reportID 9: -32 [ 34.077656][ T318] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense pairing info: -32 [ 34.086922][ T318] playstation 0003:054C:0DF2.0002: Failed to get MAC address from DualSense [ 34.095683][ T318] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 34.104103][ T318] playstation 0003:054C:0DF2.0002: probe with driver playstation failed with error -32 [ 34.246773][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.408122][ T31] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 34.416873][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.427058][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 34.436050][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.448334][ T31] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 34.457469][ T31] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 34.465507][ T31] usb 4-1: Product: syz [ 34.469775][ T31] usb 4-1: Manufacturer: syz [ 34.476069][ T31] cdc_wdm 4-1:1.0: skipping garbage [ 34.481461][ T31] cdc_wdm 4-1:1.0: skipping garbage [ 34.487427][ T31] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 34.493380][ T31] cdc_wdm 4-1:1.0: Unknown control protocol [ 34.682040][ T31] usb 4-1: USB disconnect, device number 2 [ 34.766827][ T318] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.917200][ T318] usb 2-1: Using ep0 maxpacket: 32 [ 34.923668][ T318] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 34.931878][ T318] usb 2-1: config 0 has no interface number 0 [ 34.939578][ T318] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 34.948903][ T318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.956954][ T318] usb 2-1: Product: syz [ 34.961195][ T318] usb 2-1: Manufacturer: syz [ 34.965810][ T318] usb 2-1: SerialNumber: syz [ 34.971225][ T318] usb 2-1: config 0 descriptor?? [ 35.126781][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.179290][ T356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.187999][ T356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.196399][ T356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.205258][ T356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.213812][ T356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.222506][ T356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.278386][ T31] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 35.287126][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.297310][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 35.306299][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.318531][ T31] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 35.327752][ T31] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 35.335802][ T31] usb 4-1: Product: syz [ 35.340088][ T31] usb 4-1: Manufacturer: syz [ 35.346477][ T31] cdc_wdm 4-1:1.0: skipping garbage [ 35.351874][ T31] cdc_wdm 4-1:1.0: skipping garbage [ 35.357619][ T31] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 35.363619][ T31] cdc_wdm 4-1:1.0: Unknown control protocol [ 35.396773][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.396780][ T339] Bluetooth: hci0: command 0x1003 tx timeout [ 35.582858][ T361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.591516][ T361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.676737][ T31] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 35.827913][ T31] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 35.838959][ T31] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 35.849885][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 35.856516][ T31] usb 1-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 35.865618][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.874537][ T31] usb 1-1: config 0 descriptor?? [ 35.879868][ T360] raw-gadget.6 gadget.0: fail, usb_ep_enable returned -22 [ 35.975508][ T354] usb 3-1: USB disconnect, device number 2 [ 36.305048][ T31] input: HID 20a0:4287 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20A0:4287.0003/input/input4 [ 36.333288][ T31] hid-generic 0003:20A0:4287.0003: input,hidraw0: USB HID v0.8b Joystick [HID 20a0:4287] on usb-dummy_hcd.0-1/input0 [ 36.504705][ T31] usb 1-1: USB disconnect, device number 2 [ 37.176752][ T354] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 37.306838][ T31] usb 4-1: USB disconnect, device number 3 [ 37.337785][ T354] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 37.343004][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 37.343056][ T36] audit: type=1400 audit(1788362703.570:114): avc: denied { create } for pid=379 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.360244][ T354] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.382303][ T36] audit: type=1400 audit(1788362703.570:115): avc: denied { connect } for pid=379 comm="syz.3.21" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.406862][ T36] audit: type=1400 audit(1788362703.570:116): avc: denied { write } for pid=379 comm="syz.3.21" laddr=::1 lport=1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.429013][ T354] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 37.442761][ T36] audit: type=1400 audit(1788362703.640:117): avc: denied { write } for pid=379 comm="syz.3.21" name="usb_gadget" dev="configfs" ino=2251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 37.456928][ T354] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.483825][ T36] audit: type=1400 audit(1788362703.640:118): avc: denied { add_name } for pid=379 comm="syz.3.21" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 37.505132][ T36] audit: type=1400 audit(1788362703.640:119): avc: denied { create } for pid=379 comm="syz.3.21" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 37.524134][ T354] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 37.527113][ T36] audit: type=1400 audit(1788362703.640:120): avc: denied { write } for pid=379 comm="syz.3.21" name="idVendor" dev="configfs" ino=4658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 37.535342][ T354] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 37.557583][ T36] audit: type=1400 audit(1788362703.640:121): avc: denied { open } for pid=379 comm="syz.3.21" path="/7/config/usb_gadget/g1/idVendor" dev="configfs" ino=4658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 37.588972][ T36] audit: type=1400 audit(1788362703.740:122): avc: denied { write } for pid=385 comm="syz.0.22" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 37.606797][ T354] usb 3-1: Product: syz [ 37.616150][ T354] usb 3-1: Manufacturer: syz [ 37.622604][ T354] cdc_wdm 3-1:1.0: skipping garbage [ 37.627918][ T354] cdc_wdm 3-1:1.0: skipping garbage [ 37.633445][ T10] usb 2-1: USB disconnect, device number 3 [ 37.634086][ T354] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 37.645756][ T354] cdc_wdm 3-1:1.0: Unknown control protocol [ 37.683862][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.699407][ T36] audit: type=1400 audit(1788362703.740:123): avc: denied { open } for pid=385 comm="syz.0.22" path="/dev/input/event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 37.826116][ T10] usb 3-1: USB disconnect, device number 3 [ 37.906733][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.946742][ T354] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 38.056780][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 38.063077][ T31] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 38.071271][ T31] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 38.082474][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 38.092656][ T31] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 38.103918][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 38.114053][ T354] usb 4-1: Using ep0 maxpacket: 32 [ 38.119553][ T31] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 38.132964][ T31] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 38.142223][ T354] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 38.150037][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.158935][ T354] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 38.167328][ T354] usb 4-1: config 0 has no interface number 0 [ 38.175809][ T354] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 38.183941][ T354] usb 4-1: config 0 has no interface number 0 [ 38.190852][ T354] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 38.199336][ T354] usb 4-1: config 0 has no interface number 0 [ 38.206184][ T354] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 38.214256][ T354] usb 4-1: config 0 has no interface number 0 [ 38.221109][ T354] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 38.229181][ T354] usb 4-1: config 0 has no interface number 0 [ 38.236287][ T354] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 38.244409][ T354] usb 4-1: config 0 has no interface number 0 [ 38.251377][ T354] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 38.259509][ T354] usb 4-1: config 0 has no interface number 0 [ 38.266374][ T354] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 38.274444][ T354] usb 4-1: config 0 has no interface number 0 [ 38.276798][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 38.283518][ T354] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 38.297187][ T354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.305188][ T354] usb 4-1: Product: syz [ 38.309409][ T354] usb 4-1: Manufacturer: syz [ 38.314056][ T354] usb 4-1: SerialNumber: syz [ 38.319469][ T354] usb 4-1: config 0 descriptor?? [ 38.438387][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 38.447068][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.457213][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 38.466419][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.478419][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 38.487514][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 38.495647][ T10] usb 3-1: Product: syz [ 38.499883][ T10] usb 3-1: Manufacturer: syz [ 38.507215][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 38.512463][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 38.519048][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 38.525009][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 38.707809][ T371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.716427][ T371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.677562][ T397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.686112][ T397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.694662][ T397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.703310][ T397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.711969][ T397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.720631][ T397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.726849][ T339] Bluetooth: hci0: command 0x1003 tx timeout [ 39.730120][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.076737][ T354] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 40.228019][ T354] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.239045][ T354] usb 2-1: config 0 interface 0 has no altsetting 0 [ 40.245737][ T354] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 40.254914][ T354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.263829][ T354] usb 2-1: config 0 descriptor?? [ 40.670962][ T10] usb 1-1: USB disconnect, device number 3 [ 40.674712][ T354] steelseries 0003:1038:1410.0004: unknown main item tag 0x3 [ 40.690172][ T354] steelseries 0003:1038:1410.0004: No inputs registered, leaving [ 40.699075][ T354] steelseries 0003:1038:1410.0004: hidraw0: USB HID v0.00 Joystick [HID 1038:1410] on usb-dummy_hcd.1-1/input0 [ 40.711670][ T354] steelseries 0003:1038:1410.0004: implement() called with too large value 64 (n: 0)! (kworker/1:3) [ 40.873609][ T317] usb 2-1: USB disconnect, device number 4 [ 40.881675][ T317] ------------[ cut here ]------------ [ 40.887165][ T317] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:131:9 [ 40.895429][ T317] index 1500 is out of range for type 'unsigned long[8]' [ 40.902467][ T317] CPU: 0 UID: 0 PID: 317 Comm: kworker/0:3 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 40.902491][ T317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.902503][ T317] Workqueue: usb_hub_wq hub_event [ 40.902547][ T317] Call Trace: [ 40.902553][ T317] [ 40.902561][ T317] __dump_stack+0x21/0x30 [ 40.902587][ T317] dump_stack_lvl+0x140/0x1c0 [ 40.902610][ T317] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.902634][ T317] ? ret_from_fork+0x64/0xa0 [ 40.902660][ T317] dump_stack+0x19/0x20 [ 40.902683][ T317] ubsan_epilogue+0xe/0x40 [ 40.902697][ T317] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 40.902722][ T317] __pv_queued_spin_lock_slowpath+0xbf7/0xe90 [ 40.902742][ T317] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 40.902760][ T317] ? __kasan_check_write+0x18/0x20 [ 40.902797][ T317] ? rwsem_read_trylock+0x275/0x5a0 [ 40.902835][ T317] ? downgrade_write+0x470/0x470 [ 40.902878][ T317] _raw_spin_lock_irqsave+0x153/0x160 [ 40.902903][ T317] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 40.902928][ T317] ? down_write+0xee/0x2b0 [ 40.902948][ T317] ? kernfs_name_hash+0x1c7/0x220 [ 40.902971][ T317] steelseries_remove+0x85/0x180 [ 40.902990][ T317] ? __cfi_steelseries_remove+0x10/0x10 [ 40.903009][ T317] hid_device_remove+0x293/0x400 [ 40.903026][ T317] ? __cfi_hid_device_remove+0x10/0x10 [ 40.903043][ T317] device_release_driver_internal+0x4aa/0x830 [ 40.903070][ T317] device_release_driver+0x1d/0x30 [ 40.903095][ T317] bus_remove_device+0x34f/0x370 [ 40.903116][ T317] device_del+0x583/0xcf0 [ 40.903139][ T317] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 40.903165][ T317] ? __pm_runtime_resume+0xa0/0xa0 [ 40.903184][ T317] ? __cfi_device_del+0x10/0x10 [ 40.903208][ T317] ? __kasan_check_write+0x18/0x20 [ 40.903225][ T317] ? _raw_spin_lock_irq+0x93/0x120 [ 40.903249][ T317] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 40.903274][ T317] hid_destroy_device+0x6e/0x110 [ 40.903291][ T317] usbhid_disconnect+0xa3/0xc0 [ 40.903316][ T317] usb_unbind_interface+0x2ad/0xa40 [ 40.903347][ T317] ? __cfi_usb_unbind_interface+0x10/0x10 [ 40.903371][ T317] device_release_driver_internal+0x522/0x830 [ 40.903398][ T317] device_release_driver+0x1d/0x30 [ 40.903423][ T317] bus_remove_device+0x34f/0x370 [ 40.903444][ T317] device_del+0x583/0xcf0 [ 40.903468][ T317] ? kfree_const+0x3d/0x50 [ 40.903493][ T317] ? __cfi_device_release+0x10/0x10 [ 40.903510][ T317] ? __cfi_device_del+0x10/0x10 [ 40.903534][ T317] ? kobject_put+0x238/0x2a0 [ 40.903558][ T317] ? device_unregister+0x2b/0x40 [ 40.903583][ T317] usb_disable_device+0x3af/0x770 [ 40.903605][ T317] usb_disconnect+0x331/0x950 [ 40.903627][ T317] hub_event+0x1ad5/0x4360 [ 40.903649][ T317] ? hub_event+0x1110/0x4360 [ 40.903678][ T317] ? __cfi_hub_event+0x10/0x10 [ 40.903702][ T317] ? kick_pool+0xb9/0x540 [ 40.903722][ T317] process_scheduled_works+0x7f4/0x1060 [ 40.903743][ T317] worker_thread+0xc99/0x13f0 [ 40.903760][ T317] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 40.903779][ T317] ? __kasan_check_read+0x15/0x20 [ 40.903796][ T317] kthread+0x2c4/0x360 [ 40.903815][ T317] ? __cfi_worker_thread+0x10/0x10 [ 40.903834][ T317] ? __cfi_kthread+0x10/0x10 [ 40.903852][ T317] ret_from_fork+0x64/0xa0 [ 40.903877][ T317] ? __cfi_kthread+0x10/0x10 [ 40.903917][ T317] ret_from_fork_asm+0x1a/0x30 [ 40.903942][ T317] [ 40.903951][ T317] ---[ end trace ]--- [ 41.240019][ T317] Oops: general protection fault, probably for non-canonical address 0xdffffc000000a16c: 0000 [#1] PREEMPT SMP KASAN PTI [ 41.252650][ T317] KASAN: probably user-memory-access in range [0x0000000000050b60-0x0000000000050b67] [ 41.262214][ T317] CPU: 0 UID: 0 PID: 317 Comm: kworker/0:3 Not tainted syzkaller #0 4b6b95ab3aff47ee35cef28a0a3a23749bede870 [ 41.273818][ T317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.283922][ T317] Workqueue: usb_hub_wq hub_event [ 41.289066][ T317] RIP: 0010:__pv_queued_spin_lock_slowpath+0x38c/0xe90 [ 41.295933][ T317] Code: fc ff df 80 3c 10 00 74 17 48 89 df e8 5d 1f 39 fc 48 8b 7c 24 10 48 ba 00 00 00 00 00 fc ff df 4c 03 3b 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 17 4c 89 ff e8 56 20 39 fc 48 8b 7c 24 10 48 ba 00 [ 41.315590][ T317] RSP: 0018:ffffc9000b7bf1a0 EFLAGS: 00010006 [ 41.321683][ T317] RAX: 000000000000a16c RBX: ffffffff871ffa60 RCX: 0000000000100000 [ 41.329685][ T317] RDX: dffffc0000000000 RSI: 000000000005cbb3 RDI: ffff888116ef3278 [ 41.337670][ T317] RBP: ffffc9000b7bf2b0 R08: 0000000000000003 R09: 0000000000000004 [ 41.345659][ T317] R10: dffffc0000000000 R11: fffffbfff1177080 R12: 1ffff1103edca161 [ 41.353735][ T317] R13: 1ffff11022dde64f R14: ffff8881f6e50b00 R15: 0000000000050b60 [ 41.361718][ T317] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 41.370693][ T317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.377291][ T317] CR2: 000000110c33488e CR3: 000000010e33c000 CR4: 00000000003526b0 [ 41.385280][ T317] Call Trace: [ 41.388573][ T317] [ 41.391518][ T317] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 41.398125][ T317] ? __kasan_check_write+0x18/0x20 [ 41.403249][ T317] ? rwsem_read_trylock+0x275/0x5a0 [ 41.408468][ T317] ? downgrade_write+0x470/0x470 [ 41.413428][ T317] _raw_spin_lock_irqsave+0x153/0x160 [ 41.418822][ T317] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 41.424750][ T317] ? down_write+0xee/0x2b0 [ 41.429186][ T317] ? kernfs_name_hash+0x1c7/0x220 [ 41.434275][ T317] steelseries_remove+0x85/0x180 [ 41.439226][ T317] ? __cfi_steelseries_remove+0x10/0x10 [ 41.444815][ T317] hid_device_remove+0x293/0x400 [ 41.449780][ T317] ? __cfi_hid_device_remove+0x10/0x10 [ 41.455283][ T317] device_release_driver_internal+0x4aa/0x830 [ 41.461378][ T317] device_release_driver+0x1d/0x30 [ 41.466523][ T317] bus_remove_device+0x34f/0x370 [ 41.471527][ T317] device_del+0x583/0xcf0 [ 41.475878][ T317] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 41.481441][ T317] ? __pm_runtime_resume+0xa0/0xa0 [ 41.486572][ T317] ? __cfi_device_del+0x10/0x10 [ 41.491453][ T317] ? __kasan_check_write+0x18/0x20 [ 41.496599][ T317] ? _raw_spin_lock_irq+0x93/0x120 [ 41.501756][ T317] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 41.507367][ T317] hid_destroy_device+0x6e/0x110 [ 41.512317][ T317] usbhid_disconnect+0xa3/0xc0 [ 41.517102][ T317] usb_unbind_interface+0x2ad/0xa40 [ 41.522337][ T317] ? __cfi_usb_unbind_interface+0x10/0x10 [ 41.528102][ T317] device_release_driver_internal+0x522/0x830 [ 41.534230][ T317] device_release_driver+0x1d/0x30 [ 41.539401][ T317] bus_remove_device+0x34f/0x370 [ 41.544389][ T317] device_del+0x583/0xcf0 [ 41.547602][ T354] usb 4-1: USB disconnect, device number 4 [ 41.548766][ T317] ? kfree_const+0x3d/0x50 [ 41.559027][ T317] ? __cfi_device_release+0x10/0x10 [ 41.564279][ T317] ? __cfi_device_del+0x10/0x10 [ 41.569193][ T317] ? kobject_put+0x238/0x2a0 [ 41.573871][ T317] ? device_unregister+0x2b/0x40 [ 41.578868][ T317] usb_disable_device+0x3af/0x770 [ 41.583953][ T317] usb_disconnect+0x331/0x950 [ 41.588691][ T317] hub_event+0x1ad5/0x4360 [ 41.593163][ T317] ? hub_event+0x1110/0x4360 [ 41.597812][ T317] ? __cfi_hub_event+0x10/0x10 [ 41.602632][ T317] ? kick_pool+0xb9/0x540 [ 41.607011][ T317] process_scheduled_works+0x7f4/0x1060 [ 41.612614][ T317] worker_thread+0xc99/0x13f0 [ 41.617340][ T317] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 41.623110][ T317] ? __kasan_check_read+0x15/0x20 [ 41.628174][ T317] kthread+0x2c4/0x360 [ 41.632263][ T317] ? __cfi_worker_thread+0x10/0x10 [ 41.637396][ T317] ? __cfi_kthread+0x10/0x10 [ 41.642030][ T317] ret_from_fork+0x64/0xa0 [ 41.646507][ T317] ? __cfi_kthread+0x10/0x10 [ 41.651163][ T317] ret_from_fork_asm+0x1a/0x30 [ 41.655996][ T317] [ 41.659064][ T317] Modules linked in: [ 41.663030][ T317] ---[ end trace 0000000000000000 ]--- [ 41.668711][ T317] RIP: 0010:__pv_queued_spin_lock_slowpath+0x38c/0xe90 [ 41.675727][ T317] Code: fc ff df 80 3c 10 00 74 17 48 89 df e8 5d 1f 39 fc 48 8b 7c 24 10 48 ba 00 00 00 00 00 fc ff df 4c 03 3b 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 17 4c 89 ff e8 56 20 39 fc 48 8b 7c 24 10 48 ba 00 [ 41.695397][ T317] RSP: 0018:ffffc9000b7bf1a0 EFLAGS: 00010006 [ 41.701519][ T317] RAX: 000000000000a16c RBX: ffffffff871ffa60 RCX: 0000000000100000 [ 41.709537][ T317] RDX: dffffc0000000000 RSI: 000000000005cbb3 RDI: ffff888116ef3278 [ 41.717556][ T317] RBP: ffffc9000b7bf2b0 R08: 0000000000000003 R09: 0000000000000004 [ 41.725572][ T317] R10: dffffc0000000000 R11: fffffbfff1177080 R12: 1ffff1103edca161 [ 41.733600][ T317] R13: 1ffff11022dde64f R14: ffff8881f6e50b00 R15: 0000000000050b60 [ 41.741712][ T317] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 41.750661][ T317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.757296][ T317] CR2: 000000110c33488e CR3: 000000010e33c000 CR4: 00000000003526b0 [ 41.765293][ T317] Kernel panic - not syncing: Fatal exception [ 41.771975][ T317] Kernel Offset: disabled [ 41.776314][ T317] Rebooting in 86400 seconds..