last executing test programs: 3.920889623s ago: executing program 1 (id=2): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x20, 0x7, 0x18, {0x18, 0x27, "806b562fd275239f7e5a300ac1ffa3a5ba89db83b04e"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.155077011s ago: executing program 2 (id=3): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) flock(r6, 0x5) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3.099959603s ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0fc5:1227:gc', 0xc) 2.982526605s ago: executing program 2 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005e00)=@vmx={0x9, 0x0, 0x2080, {0xa000, 0x8000000, {}, 0x0, 0x8b}, {"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", "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"}}) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.926089777s ago: executing program 4 (id=7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)) 2.717450622s ago: executing program 4 (id=8): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x12, 0x3, "5443d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.709322323s ago: executing program 0 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="0fc7ffb80a0000000f23c80f21f8350000f0000f23f8f082721000b80e0000000f23d80f21f835400000c00f23f8f26d262e0fc71bb8736f00000f23d80f21f835000000f00f23f80fc7ae2b350000660f3838c20f01fc", 0x57}], 0xaaaaaaaaaaaabc2, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.586867506s ago: executing program 2 (id=9): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0x3e9f5000) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000009c0)={0x10, &(0x7f0000000300)={0x20, 0x13, 0x4, "0d718785"}, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x49) read$char_usb(r1, 0x0, 0x0) 2.242670084s ago: executing program 3 (id=15): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) flock(r6, 0x5) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.241599684s ago: executing program 0 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='-294967295 2000000000 \n', 0x18) 2.200503945s ago: executing program 0 (id=17): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x80) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.087687898s ago: executing program 3 (id=18): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)="000013af49488ef53729", 0xa}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="6c7831733ca886e99a61c5d196e7b454c74823d5131d1232e0b5eaab8262f6b9ae8ea9a7a27fbe7920311d60976d35446c503d822e08b2e68d782c", 0x3b}], 0x1, &(0x7f0000000400)=ANY=[], 0x30}}], 0x2, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 1.864535564s ago: executing program 3 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007051e002f2f6f00040600666c616773000702000000000200000000020000000008", 0x3d) 1.864418224s ago: executing program 3 (id=20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000000, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000300)="b8180000000f01c10f01d9c3", 0xc}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.370419066s ago: executing program 1 (id=21): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e000000100"/31, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002'], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.370325356s ago: executing program 3 (id=22): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000140)) 1.328614257s ago: executing program 3 (id=23): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd063501"], 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(r1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) 1.224414699s ago: executing program 0 (id=24): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc8, 0x202}, {0xd06, 0x5, 0x1, 0x1198, 0x2, 0x101}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1.21015734s ago: executing program 0 (id=25): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1d) 1.18183529s ago: executing program 0 (id=26): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) socket$inet(0x2, 0x2, 0x1) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 330.419842ms ago: executing program 1 (id=27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="0fc7ffb80a0000000f23c80f21f8350000f0000f23f8f082721000b80e0000000f23d80f21f835400000c00f23f8f26d262e0fc71bb8736f00000f23d80f21f835000000f00f23f80fc7ae2b350000660f3838c20f01fc", 0x57}], 0xaaaaaaaaaaaabc2, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 63.581118ms ago: executing program 1 (id=28): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) flock(r6, 0x5) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=30): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000181000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000080000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x103e}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts. [ 43.256225][ T30] audit: type=1400 audit(1787720187.274:64): avc: denied { mounton } for pid=276 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 43.262373][ T276] cgroup: Unknown subsys name 'net' [ 43.308181][ T30] audit: type=1400 audit(1787720187.274:65): avc: denied { mount } for pid=276 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.364129][ T30] audit: type=1400 audit(1787720187.344:66): avc: denied { unmount } for pid=276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.366065][ T276] cgroup: Unknown subsys name 'devices' [ 43.578432][ T276] cgroup: Unknown subsys name 'hugetlb' [ 43.585842][ T276] cgroup: Unknown subsys name 'rlimit' [ 43.747810][ T30] audit: type=1400 audit(1787720187.764:67): avc: denied { setattr } for pid=276 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.797211][ T30] audit: type=1400 audit(1787720187.764:68): avc: denied { mounton } for pid=276 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 43.862259][ T278] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 43.867678][ T30] audit: type=1400 audit(1787720187.764:69): avc: denied { mount } for pid=276 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 43.931625][ T30] audit: type=1400 audit(1787720187.904:70): avc: denied { relabelto } for pid=278 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 43.997428][ T30] audit: type=1400 audit(1787720187.904:71): avc: denied { write } for pid=278 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 44.016527][ T276] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.055820][ T30] audit: type=1400 audit(1787720188.024:72): avc: denied { read } for pid=276 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 44.135751][ T30] audit: type=1400 audit(1787720188.024:73): avc: denied { open } for pid=276 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 45.007224][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.025010][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.044159][ T285] device bridge_slave_0 entered promiscuous mode [ 45.064494][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.077421][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.093787][ T285] device bridge_slave_1 entered promiscuous mode [ 45.188410][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.202455][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.216193][ T284] device bridge_slave_0 entered promiscuous mode [ 45.249205][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.261555][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.281084][ T284] device bridge_slave_1 entered promiscuous mode [ 45.313239][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.326629][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.342147][ T286] device bridge_slave_0 entered promiscuous mode [ 45.361222][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.377038][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.395526][ T286] device bridge_slave_1 entered promiscuous mode [ 45.458842][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.472005][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.485915][ T287] device bridge_slave_0 entered promiscuous mode [ 45.502294][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.520464][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.537575][ T287] device bridge_slave_1 entered promiscuous mode [ 45.599405][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.616607][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.633007][ T288] device bridge_slave_0 entered promiscuous mode [ 45.650737][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.661950][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.682406][ T288] device bridge_slave_1 entered promiscuous mode [ 45.925549][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.940039][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.955984][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.972705][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.018639][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.030248][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.045098][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.063218][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.088084][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.101294][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.111495][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.124363][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.140400][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.158323][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.179045][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.196851][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.215587][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.235250][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.296791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.313095][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.355450][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.377472][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.396244][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.408741][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.436912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.455976][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.474919][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.494920][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.506934][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.523772][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.539665][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.558640][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.612061][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.636556][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.653949][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.669222][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.683150][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.702596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.722599][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.736643][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.751154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.790495][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.807173][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.826556][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.850019][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.871325][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.884254][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.898337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.916184][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.941898][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.955959][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.974007][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.994412][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.016051][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.026200][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.074312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.086351][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.106972][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.131202][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.152512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.169828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.190139][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.208526][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.228173][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.244116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.262616][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.284144][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.303535][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.318501][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.330282][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.355055][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.379025][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.398745][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.414389][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.435309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.457772][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.474357][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.489915][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.506693][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.526279][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.546050][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.564254][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.580429][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.604747][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.623589][ T285] device veth0_vlan entered promiscuous mode [ 47.670298][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.688995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.716534][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.734204][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.748257][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.772150][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.786425][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.807004][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.827299][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.847321][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.875202][ T284] device veth0_vlan entered promiscuous mode [ 47.895291][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.914937][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.936047][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.959854][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.976343][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.994440][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.016046][ T288] device veth0_vlan entered promiscuous mode [ 48.030237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.044396][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.066847][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.081981][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.103725][ T285] device veth1_macvtap entered promiscuous mode [ 48.120899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.138341][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.162716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.198473][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.215427][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.242267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.259636][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.288362][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.306243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.327449][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.346787][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.376815][ T286] device veth0_vlan entered promiscuous mode [ 48.388925][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.406820][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.427749][ T284] device veth1_macvtap entered promiscuous mode [ 48.456285][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.471807][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.486998][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.502752][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.526252][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.567249][ T286] device veth1_macvtap entered promiscuous mode [ 48.585079][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.607957][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.631963][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.651297][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.667098][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.683667][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.706617][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.728955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.748849][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.777540][ T288] device veth1_macvtap entered promiscuous mode [ 48.814309][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 48.814326][ T30] audit: type=1400 audit(1787720192.824:83): avc: denied { mounton } for pid=285 comm="syz-executor" path="/root/syzkaller.kie0lN/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 48.869455][ T287] device veth0_vlan entered promiscuous mode [ 48.897409][ T30] audit: type=1400 audit(1787720192.824:84): avc: denied { mount } for pid=285 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.899990][ T285] request_module fs-gadgetfs succeeded, but still no fs? [ 48.977351][ T30] audit: type=1400 audit(1787720192.824:85): avc: denied { mounton } for pid=285 comm="syz-executor" path="/root/syzkaller.kie0lN/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.057117][ T30] audit: type=1400 audit(1787720192.824:86): avc: denied { mount } for pid=285 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 49.057585][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.111470][ T30] audit: type=1400 audit(1787720192.834:87): avc: denied { mounton } for pid=285 comm="syz-executor" path="/root/syzkaller.kie0lN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.203655][ T30] audit: type=1400 audit(1787720192.834:88): avc: denied { mounton } for pid=285 comm="syz-executor" path="/root/syzkaller.kie0lN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=16448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 49.251407][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.276755][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.287404][ T30] audit: type=1400 audit(1787720192.834:89): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.313441][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.349884][ T30] audit: type=1400 audit(1787720192.914:90): avc: denied { mounton } for pid=285 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 49.409070][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.427602][ T30] audit: type=1400 audit(1787720192.994:91): avc: denied { mount } for pid=285 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.467067][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.501278][ T30] audit: type=1400 audit(1787720192.994:92): avc: denied { mounton } for pid=285 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 49.577346][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.599168][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.624148][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.645931][ T289] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 49.652134][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.696440][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.716645][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.761074][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.776526][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.845052][ T287] device veth1_macvtap entered promiscuous mode [ 49.919184][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.934959][ T318] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 49.959636][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.015240][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.050640][ T289] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 50.079591][ T289] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 50.090973][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.122531][ T289] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.158274][ T289] usb 2-1: config 0 interface 0 has no altsetting 0 [ 50.178008][ T289] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 50.180660][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.196560][ T289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.248571][ T289] usb 2-1: config 0 descriptor?? [ 50.286236][ T309] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 50.585898][ T290] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.665727][ T311] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 50.750786][ T354] tipc: Started in network mode [ 50.758514][ T354] tipc: Node identity 4, cluster identity 4711 [ 50.773570][ T354] tipc: Node number set to 4 [ 50.787935][ T289] zydacron 0003:13EC:0006.0001: unknown main item tag 0xd [ 50.803588][ T289] zydacron 0003:13EC:0006.0001: collection stack underflow [ 50.820136][ T289] zydacron 0003:13EC:0006.0001: item 0 1 0 12 parsing failed [ 50.835086][ T289] zydacron 0003:13EC:0006.0001: parse failed [ 50.847831][ T289] zydacron: probe of 0003:13EC:0006.0001 failed with error -22 [ 50.855881][ T290] usb 5-1: Using ep0 maxpacket: 16 [ 50.915690][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 51.040638][ T358] usb 2-1: USB disconnect, device number 2 [ 51.085853][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 51.185738][ T311] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 51.189508][ T290] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 51.224623][ T290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.227718][ T311] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 51.264095][ T290] usb 5-1: Product: syz [ 51.265572][ T311] usb 3-1: config 14 has no interface number 0 [ 51.271231][ T290] usb 5-1: Manufacturer: syz [ 51.290179][ T311] usb 3-1: config 14 has no interface number 1 [ 51.314246][ T311] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 51.322014][ T290] usb 5-1: SerialNumber: syz [ 51.342712][ T311] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 51.386460][ T311] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 51.396882][ T290] usb 5-1: config 0 descriptor?? [ 51.415587][ T311] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 51.455534][ T311] usb 3-1: config 14 interface 57 has no altsetting 0 [ 51.471792][ T311] usb 3-1: config 14 interface 228 has no altsetting 0 [ 51.647664][ T311] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 51.674802][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.710122][ T311] usb 3-1: Product: syz [ 51.724978][ T311] usb 3-1: Manufacturer: syz [ 51.736236][ T311] usb 3-1: SerialNumber: syz [ 51.926905][ T290] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 52.085764][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 52.316937][ T290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.338956][ T290] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 52.357791][ T290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.377382][ T290] usb 4-1: config 0 descriptor?? [ 52.476502][ T6] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 52.506047][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.524602][ T6] usb 1-1: config 0 descriptor?? [ 52.717971][ T290] usbhid 4-1:0.0: can't add hid device: -71 [ 52.737271][ T290] usbhid: probe of 4-1:0.0 failed with error -71 [ 52.754021][ T290] usb 4-1: USB disconnect, device number 2 [ 52.921911][ T388] tipc: Started in network mode [ 52.937701][ T388] tipc: Node identity 4, cluster identity 4711 [ 52.952996][ T388] tipc: Node number set to 4 [ 53.029242][ T394] ------------[ cut here ]------------ [ 53.044305][ T394] kernel BUG at drivers/android/binder.c:1330! [ 53.064382][ T394] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 53.083999][ T394] CPU: 1 PID: 394 Comm: syz.1.30 Not tainted syzkaller #0 [ 53.097454][ T394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.119702][ T394] RIP: 0010:binder_inc_ref_for_node+0x10b3/0x11c0 [ 53.134832][ T394] Code: ff ff 48 89 df 41 89 f5 41 89 d7 41 89 ce e8 84 04 11 fe 44 89 f1 4c 8b 75 c8 44 89 fa 44 89 ee e9 a3 fe ff ff e8 1d 95 d1 fd <0f> 0b 65 8b 05 ac ee 69 7c 41 89 c5 c1 e8 06 48 8d 3c c5 a8 51 e9 [ 53.184690][ T394] RSP: 0018:ffffc900077e7370 EFLAGS: 00010283 [ 53.196351][ T394] RAX: ffffffff83982293 RBX: 0000000000000000 RCX: 0000000000080000 [ 53.215691][ T394] RDX: ffffc9000176c000 RSI: 0000000000000036 RDI: 0000000000000037 [ 53.239689][ T394] RBP: ffffc900077e7410 R08: ffff88812a5a713f R09: ffff88812a5a7130 [ 53.261994][ T394] R10: dffffc0000000000 R11: ffffed10254b4e28 R12: dffffc0000000000 [ 53.274253][ T394] R13: ffff88812a5a7c28 R14: ffff88812a5a7c10 R15: 0000000000000000 [ 53.296524][ T394] FS: 00007f36cfb3b6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 53.317823][ T394] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.327079][ T394] CR2: 0000000000000000 CR3: 000000012c2ab000 CR4: 00000000003506a0 [ 53.348372][ T394] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 53.365159][ T394] DR3: 00000000c0f00480 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 53.384461][ T394] Call Trace: [ 53.391719][ T394] [ 53.396961][ T394] binder_thread_write+0x1497/0x6fe0 [ 53.404651][ T394] ? binder_ioctl_get_freezer_info+0x470/0x470 [ 53.419275][ T394] ? __schedule+0xbd7/0x14a0 [ 53.427830][ T394] ? release_firmware_map_entry+0x190/0x190 [ 53.446944][ T394] ? __kasan_check_write+0x14/0x20 [ 53.458290][ T394] ? _copy_from_user+0x95/0xd0 [ 53.465516][ T394] binder_ioctl_write_read+0x203/0x6700 [ 53.478365][ T394] ? futex_wait_setup+0x510/0x510 [ 53.492186][ T394] ? futex_wait+0x5b1/0x8f0 [ 53.501917][ T394] ? do_futex+0x27f0/0x27f0 [ 53.513154][ T394] ? binder_has_work_ilocked+0x3e0/0x3e0 [ 53.527916][ T394] ? avc_has_extended_perms+0x869/0xed0 [ 53.541003][ T394] ? memcpy+0x56/0x70 [ 53.549422][ T394] ? avc_has_extended_perms+0x9d5/0xed0 [ 53.561612][ T394] ? __kasan_check_write+0x14/0x20 [ 53.570578][ T394] ? avc_flush+0x2b0/0x2b0 [ 53.578207][ T394] ? do_futex+0xdd3/0x27f0 [ 53.586190][ T394] ? __kasan_check_write+0x14/0x20 [ 53.595179][ T394] ? _raw_spin_lock+0x94/0xf0 [ 53.602518][ T394] ? _raw_spin_trylock_bh+0x150/0x150 [ 53.612599][ T394] ? _raw_spin_unlock+0x4d/0x70 [ 53.621116][ T394] binder_ioctl+0x36c/0x1df0 [ 53.630187][ T394] ? vma_link+0x1a0/0x1f0 [ 53.636551][ T394] ? ioctl_has_perm+0x1b8/0x4f0 [ 53.645376][ T394] ? binder_poll+0x2d0/0x2d0 [ 53.654824][ T394] ? has_cap_mac_admin+0x370/0x370 [ 53.664443][ T394] ? selinux_file_ioctl+0x3ad/0x4c0 [ 53.676981][ T394] ? selinux_file_alloc_security+0x120/0x120 [ 53.690980][ T394] ? __fget_files+0x2e1/0x340 [ 53.700550][ T394] ? security_file_ioctl+0x84/0xa0 [ 53.712403][ T394] ? binder_poll+0x2d0/0x2d0 [ 53.720943][ T394] __se_sys_ioctl+0x121/0x1a0 [ 53.727975][ T394] __x64_sys_ioctl+0x7b/0x90 [ 53.740235][ T394] x64_sys_call+0x2f/0x9a0 [ 53.754283][ T394] do_syscall_64+0x4c/0xa0 [ 53.763021][ T394] ? clear_bhb_loop+0x50/0xa0 [ 53.775016][ T394] ? clear_bhb_loop+0x50/0xa0 [ 53.784058][ T394] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 53.799899][ T394] RIP: 0033:0x7f36d10e20d9 [ 53.814141][ T394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.857560][ T394] RSP: 002b:00007f36cfb3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.876392][ T394] RAX: ffffffffffffffda RBX: 00007f36d1369fa0 RCX: 00007f36d10e20d9 [ 53.891181][ T394] RDX: 00002000000000c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 53.907962][ T394] RBP: 00007f36d1179024 R08: 0000000000000000 R09: 0000000000000000 [ 53.921172][ T394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.941248][ T394] R13: 00007f36d136a038 R14: 00007f36d1369fa0 R15: 00007ffeaca7c658 [ 53.964078][ T394] [ 53.971497][ T394] Modules linked in: [ 53.977451][ T394] ---[ end trace 03afaf5718965b4a ]--- [ 53.988337][ T394] RIP: 0010:binder_inc_ref_for_node+0x10b3/0x11c0 [ 54.000380][ T394] Code: ff ff 48 89 df 41 89 f5 41 89 d7 41 89 ce e8 84 04 11 fe 44 89 f1 4c 8b 75 c8 44 89 fa 44 89 ee e9 a3 fe ff ff e8 1d 95 d1 fd <0f> 0b 65 8b 05 ac ee 69 7c 41 89 c5 c1 e8 06 48 8d 3c c5 a8 51 e9 [ 54.044579][ T394] RSP: 0018:ffffc900077e7370 EFLAGS: 00010283 [ 54.058064][ T394] RAX: ffffffff83982293 RBX: 0000000000000000 RCX: 0000000000080000 [ 54.072901][ T394] RDX: ffffc9000176c000 RSI: 0000000000000036 RDI: 0000000000000037 [ 54.088147][ T394] RBP: ffffc900077e7410 R08: ffff88812a5a713f R09: ffff88812a5a7130 [ 54.106560][ T394] R10: dffffc0000000000 R11: ffffed10254b4e28 R12: dffffc0000000000 [ 54.125238][ T394] R13: ffff88812a5a7c28 R14: ffff88812a5a7c10 R15: 0000000000000000 [ 54.142221][ T394] FS: 00007f36cfb3b6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 54.162721][ T394] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.175333][ T394] CR2: 0000000000000000 CR3: 000000012c2ab000 CR4: 00000000003506a0 [ 54.195295][ T394] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 54.211850][ T394] DR3: 00000000c0f00480 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 54.228814][ T394] Kernel panic - not syncing: Fatal exception [ 54.242340][ T394] Kernel Offset: disabled [ 54.254937][ T394] Rebooting in 86400 seconds..