last executing test programs: 2.839668859s ago: executing program 0 (id=1): futex(0x0, 0x10d, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000000080000000000000010904000002030002000921be00430122eb00090581f70f00fe00fbe4ad9a4d8d5c6da5e92354cba7793290"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup(r1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000d80)=[@text64={0x40, &(0x7f0000000d00)="c482a9df8d3a000000400f35c46291b6fd410f209ac48145f648e2c7442400f19e2652c7442402224a0000c7442406000000000f011c2466ba4300ed462838410f013fc4c28d8e22", 0x48}], 0x1, 0x10, &(0x7f0000000dc0)=[@dstype0, @efer={0x2, 0x3000}], 0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) rt_sigtimedwait(&(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000f00), 0x8) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r5}, @flat=@weak_handle={0x77682a85, 0x1115}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000880)="4a8e464b3d4657499ea54e5c7d563ff8776074ae642a55558dbfd1df9462b1259816b613ea02f9c5a2a4cc3bf701b7f4fa887e4ce6d2045a432a7b060f115097ae0e0e07f3f3704a688c03fccef3e273"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PTP_EXTTS_REQUEST2(r2, 0x3d13, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), r2) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000cc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000f40)={0x128, r8, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2865}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xad5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x42ed}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37f762f3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x128}}, 0x4020000) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_usb_connect$printer(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x7, 0x1, 0x1, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x10, 0x40, "", [{{0x9, 0x4, 0x0, 0xb, 0xa3, 0x0, 0x0, 0x0, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x81, 0xa, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0xa9}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x8, 0x3, 0x4, 0x20, 0x2}, 0x109, &(0x7f0000000200)={0x5, 0xf, 0x109, 0x3, [@generic={0xf0, 0x10, 0x4, "85f14b769d984abc760ffb270a30df8e6bdfaf8880b33fb02a5e91d90ab85b87f2e53e673eb7b2ade92f571260f1585e0174aff72d086251aa190909a72f8f3c3a83f18f5f47c41c0a9a193cc75392f116ffe34df372cdd899fbc327426509431ff7fa54301a6c3783ac58c64efa7880124eed91245f279d883e2e9b1712ecea83d391844eb73e7a46ac636c701343061351de3aff0d66688df19cc35a8b83ec095d22ba3bda6905dfb307795797b45d02e038c79ecf587e17790c41d7bd6fd27543fc82c1894c2fb0af0467cc3df2b3e9271f0a82cbb9beac1a23ffff096fc85f59e7857001ede68a2d44d6e2"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1, 0x8, 0xd6bf}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x40, 0x9}]}, 0x4, [{0xc5, &(0x7f0000000340)=@string={0xc5, 0x3, "229ad9af21d9a74dcc7e20b76db142285397de6bab0ef412a0eecd9e542fa64a46bb86f647dc27cb34dbde19ede94b9f7ba734548a81f54c6c16349bb5fa3004b61f764c8d6abe8fc14e87db67e56552cda2d996b27aebb5153285fbf99136249b3537f5c95978dbb30cc2e41d01f8aa0572f80a07134e743745ed476a9e5a58004a8ff11402da7ef9300074a641d5049ceccb6c335f75b330f10bd9fa5d54253ed7fa551670118593596b74afcbaf259db4dab1350945bd2c560fa9500c59482487dc"}}, {0xac, &(0x7f0000000440)=@string={0xac, 0x3, "783a4a336539ed00f20924f63e502ede43adcb59cc9fda659c6a67678c13dd37a8e96b710cd28a2791076fa439c3d05b0759a89158b9f2dc69076000289cfcd75eac32de0761b1caad0ab68992e2ce634276aab3df3a3a774e07d3e1db06f189fd15628f869836100ce93732519cd2b44a5a309df19ede34c13d14f2f0cb997c1d569cf5c30694a9b985695f2676ebfb979a7aa90fcd4c24cc908554867fe1d1fd15078be3fc6d402d52"}}, {0x57, &(0x7f0000000500)=@string={0x57, 0x3, "e2638182e29cfe1ea1f287094c361414a22d8a3b8ad7de5e6982a74c7218688b10c502c05f3944949e3b2935b65903f0dfb83c012b6a8ceb494ae64a9dff97de549ead9da54556f7825c347455f255f8e16db22d40"}}, {0xf4, &(0x7f0000000580)=ANY=[@ANYBLOB="f403ea944732ee4438d15ab2d3c6cd1f6e960fbb2de38efc1d0436589b457fb7cf7f122c3b39c0e6a48de9787fa7da44821586aa5291bbd3ea72d4e7ebd319bfd5b61fd65db6a1a766bb994f1e0ca3701c0f123a25782d290b9f206840350eb708ded9e4cd5968398c644e6118221f977bfb96550350f1569445ace554c367390eaf5b2e717341d31254bdcb535e1881ff01000000bb3116c00f7478636ff1009473f472ece3a5e013a3b786e9d89adf66c7ae975d61fc8ae769406e2f3da1c096a3963425f14487db330aee99a170258dd88e6e38c7c2bea6d2499f8750483aa02af9f009cc0e4c0b7ddb940000000000000000"]}]}) syz_usb_control_io$printer(r9, &(0x7f0000000800)={0x14, &(0x7f0000000700)={0x40, 0x2, 0x31, {0x31, 0x23, "5ffa684656a4f81b8703b316faebdfd6230246135053e2d33a7460439baba7f94fc15b93b7664aa71e7a1423a45104"}}, &(0x7f0000000740)={0x0, 0x3, 0x83, @string={0x83, 0x3, "127cd2eb1b8a10313b245e2d42f1dd2f2f0119e33feb509a29366ec77efa7cc42e5a20901bdb9467ada274144af49efa53c0057e45cc03703b8acfa8c121944087c3503f663ac3b3f556d1bc5ce268d703effe95a9ab4970aeb44654ec0335e50d08604f7aa385dd02c881ddf0fb4f6360af72c99a6b51385e7c4b454bf7f11d71"}}}, &(0x7f0000000ac0)={0x34, &(0x7f0000000840)={0x0, 0x18, 0x62, "b11a1209c8fa539b691c2b7d82222e6c5a1227453596332c218147f3a126e83592cee13a01f95807ed4ec5818e2195cced4fd9aad5fa6b23d15e50bf89b30b33ac54d9b234565ea8044a7836aedc80739d96d0912fcffae56d35bd465df73eaf120c"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000940)=ANY=[@ANYBLOB="2000d100000000cfa013cfb992b4340ac45f0aeeef04cd6d2bf564b0221741130c6c65af7951823ad34ae25d41b3f8fc8d3b2e70685d0cb6ccd7760120eeb08972a322db86021068f8d552ef058535144b169c76c48f8e66af7eb8066a2a84e8504a5d48e78d9046553d9ad78699d9ea8c5b579a876014c1ba54bb6bbe02f6e15e1e2d20d4254d0d0b619d85289ff3a60a72a19eb159fc53d6ca023f633cb5f5a16585c8c4ddb4a53248701615027f41ea5b3d1cb54098b9776a4681df4d9b52baa8e852cb96f7f53210191762c629f180210000000000"], &(0x7f0000000a40)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000a80)={0x20, 0x0, 0x1, 0xd}}) sendfile(r2, r2, 0x0, 0xc) 2.77381341s ago: executing program 2 (id=3): syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x582, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x80, 0xb0, 0xe, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x76}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x3, 0x15, 0xde}, [@output_terminal={0xc, 0x24, 0x3, 0xfd, 0x300, 0xa8, 0x4, 0x6, 0x6, 0x22}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x0, {0x8, 0x25, 0x1, 0x1, 0x9, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x4, 0x2, {0x8, 0x25, 0x1, 0x3, 0x3c, 0xa, 0x2}}}}}}}}]}}, 0x0) (async) syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x582, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x80, 0xb0, 0xe, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x76}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x3, 0x15, 0xde}, [@output_terminal={0xc, 0x24, 0x3, 0xfd, 0x300, 0xa8, 0x4, 0x6, 0x6, 0x22}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x0, {0x8, 0x25, 0x1, 0x1, 0x9, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x4, 0x2, {0x8, 0x25, 0x1, 0x3, 0x3c, 0xa, 0x2}}}}}}}}]}}, 0x0) syz_usb_connect$uac1(0xa1e51ed0b4e53348, 0xaa, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x2, 0x20, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x4, 0x56, 0x7}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x3, 0x1, 0x7, 'W', "04"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x49, 0x51, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x9, 0x1, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x43, 0x6, 0xa, {0x7, 0x25, 0x1, 0x8, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x60d9, 0x3, 0x4, 0x1}, @as_header={0x7, 0x24, 0x1, 0x9, 0x9, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x3, 0x8, {0x7, 0x25, 0x1, 0x8, 0x2e, 0x2}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x1, 0x9, 0x6e, 0x40, 0x5}, 0x51, &(0x7f00000001c0)={0x5, 0xf, 0x51, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0xec, 0x4, 0x1, 0xff00, 0x40, [0xff0030, 0x30, 0x3ff0, 0x0]}, @ssp_cap={0x14, 0x10, 0xa, 0xa7, 0x2, 0x9b4, 0xf, 0x39, [0x3f30, 0xf]}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x1, 0x1, 0x4a0f}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0xfb, 0xb, 0x6c7, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0xfd, 0x6}]}, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x827}}]}) 2.728877382s ago: executing program 1 (id=2): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/igmp\x00') r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f900655e00000000ae00002d000000000000ea08000f0001000000", 0x24) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast1, 0x1c}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getitimer(0x1, &(0x7f0000000100)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ad000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0, 0x31}, &(0x7f0000000780)=0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000780)=0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20040001) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 2.615287174s ago: executing program 1 (id=6): ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000040)=0x7) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000002480)=0x3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x30, 0x2) landlock_restrict_self(r0, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(0xffffffffffffffff, 0x80705864, &(0x7f00000001c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) 2.604952545s ago: executing program 1 (id=7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x490, 0x0, 0x4}]}) r3 = socket$pptp(0x18, 0x1, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x4, @empty}}, 0x1e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 2.455008429s ago: executing program 1 (id=8): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="826ff3", 0x3, 0x4890, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000), 0x800000, &(0x7f0000000180)={[{@subsystem='freezer'}]}) 2.454566969s ago: executing program 1 (id=9): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000040)={0xc, 0x32ee36fd, 0x6}) fallocate(r0, 0x61, 0x1, 0x4) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x16c, r2, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa2f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4ee}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6d90}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xde3}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x90}, 0x260048c4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/115}) r4 = getpgid(0x0) ptrace(0x11, r4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000c80)={{0xffffffffffffffff, &(0x7f0000000440)='/dev/uinput\x00', 0x8000, &(0x7f0000000480)={@_ha_fsid={[0xf5fc, 0x64]}, {0x5, 0xa, 0xf, 0x100000001}}, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x78e9}, 0x6, &(0x7f0000000bc0)=[{0x2, 0x61c, &(0x7f0000000540)='!,&\x00', &(0x7f0000000580)="8948466adfc69278c9a68b5d79800010cf9a2c53e84c2caa9e29eb52560e3f91d1315a8059af0b80afd6c836e0dc643426d2f20b05272cf106f8ca6c7f5756d153e6e44c35d49fa47a46ed25c64f86f1f4ddaafbea17561fd7cfd8a5512b063c63a8841e747d341d687d22b3808d574c4b5fccb4d9cafc5e1cfdd15069fdbdceda664330f47840ab2f371a276dda943c467a61c44f91c269d40dba11e8205cc814ea33c995188756117d7cf0b13af09de6fb95f46abb5dcd1073c5148296f6fea9c262c73b38d91f174ad55b2ea739344bbd1f17c7b251c8b6758402a8f29dfd85893053e315dedc54", 0xe9, 0x1a}, {0x1, 0x2, &(0x7f0000000680)='syz0\x00', &(0x7f00000006c0)="e8f0acfac8dc594f0deb223bcf9ed2bbb7d8c0a8cdffd2401d6f6d890b977bcb39623d9cb3a7451e0971a0a8f88984dbcf8f9f1728ae19641c9a2e83f815b755e903b8d521d4024c8615b1de446d0665a52cd5adf71551c76e3b67f663e0cfd38f2620658bf8dea52c84f27e44c88af395d643db9069e4fad6c21fe8de0d3e5bc2e0c66509cc7cd773e026e5b4c0159593e273dbd3dbcca19642e39a9d5f8e6c9e060af609f6b52e9811093dc318f6b7b9361bd856d07bb438b667065b694a9271d5fd65f8db9d8e68383841f075710fac8b6aec2f1c63eb730f77dac898b25178e05d3b7f8ec493227b8a5c22de67d8", 0xf0, 0x21}, {0x1, 0x4, &(0x7f00000007c0)='/dev/ptmx\x00', &(0x7f0000000800)="f3378ca5d81aaca9ed125aba54331c", 0xf, 0x6}, {0x2, 0x8, &(0x7f0000000840)='\x00', &(0x7f0000000880)="aab88c6221e5bfc3bcb60b0950cf47aa01d081b1e56a2b71589e5c6d01983e9f16cdf0bf6a60a2022df64fac100b9b4070dff753cbb5e8f673af6900e30f6d92369607907fdb00bdd69abb4d162ff3e71118bac30ca3fc4c1334114dcde6ee91fbd374a2df607d3c8513fc79e018477a7756128fbb0832208f546b1799f0214d29cd84063d63", 0x86, 0x1799be4358ab0d7b}, {0x0, 0x7, &(0x7f0000000940)='\x00', &(0x7f0000000980)="ec37f55ea7b5a95e26aec76257f89a5fb8a136ffbf50d853dd7fe32dda4b9a059a7c516e04de2cb33d30effee862d14d3463aab9eaf2520c7e815bd0d67b5488cfa3bb4cb72b74feee56d7a8beca904f2375ce83a382dd0e70294b34da6c7ef2a6d7705a2eb17e438506ac3088d3294729576ab9173063127f2f04bd62ff134797af8675c19d2ceb1b761237f48382c741cae9c56c48864c1afc611bf966dadbe2a63040d4e8ae286cb8d99b13b0fd66c155c07f723ee8cc3e7fc215d854a0793027d38a42b2694aed2d58a200753454f1909c120468", 0xd6, 0x8}, {0x2, 0x0, &(0x7f0000000a80)='syz1\x00', &(0x7f0000000ac0)="3fc44ef6b16b13ef63e49237ff7c192bcefa08f8bca7fdcdf3107580b23b02f16e0ebbf6d416039d02778a248bb894de2f6b7b859d55f61455e3bac6b853bef97ce1dce9351ab1fd717d33bd3339e5b316fbe3577126c2afa2ab892757d82b4b8ab40aefd6fe2496499c49fc544fb2464d32c887656644f4b32f69795c586797c5df8d69809f080d7f295fa1c1853bf41bf6a4d185794821efe64f54c7af6e936edf06c7f2cacbee2a9719076567cd547e9275ffce6fc2e019f2735f74b6b64e16b083a4039f9601f856ee", 0xcb}]}) accept4(r5, &(0x7f0000000d00)=@l2, &(0x7f0000000d80)=0x80, 0x1800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000dc0)='/sys/power/resume_offset', 0x218000, 0x2) ioctl$TIOCNXCL(r6, 0x540d) move_mount(0xffffffffffffffff, &(0x7f0000000e00)='./file0\x00', r5, &(0x7f0000000e40)='./file0\x00', 0x47) ioctl$VT_WAITACTIVE(r3, 0x5607) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000e80)={0x3, 0x83fd, 0xd, 0x2, 0x13, "df8162b3371c3946"}) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000ec0)={0x6c, 0x2, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x4, 0x8}}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x5}]}, 0x20) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000f00), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r7, 0x406855c9, &(0x7f0000000f40)={0x1, 0xc, {0x57, 0x3ff, 0xb9, {0x2, 0x5}, {0x7f19, 0x8318}, @rumble={0xfffc, 0x6}}, {0x55, 0x0, 0x4, {0x4, 0x9}, {0x8, 0x101}, @const={0x9, {0x1, 0x1, 0xd6, 0xe33}}}}) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000fc0)={0x7, 0x7, 0x9}) ioctl$BTRFS_IOC_SNAP_CREATE(r6, 0x50009401, &(0x7f0000001000)={{r6}, "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"}) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000002240)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002200)={&(0x7f0000002040)={0x18c, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x71}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf0000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6717}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6de}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe6a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000002280)=0x6) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f00000022c0)={'IDLETIMER\x00'}, &(0x7f0000002300)=0x1e) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000002340)='lazytime\x00', 0x0, 0x0) r8 = open$dir(&(0x7f0000002380)='./file0\x00', 0x400c01, 0x1a0) unlinkat(r8, &(0x7f00000023c0)='./file0\x00', 0x200) 2.454074559s ago: executing program 1 (id=10): flistxattr(0xffffffffffffffff, &(0x7f0000000000)=""/234, 0xea) r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x3, {{0xa, 0x0, 0x1, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x4, {{0xa, 0x4e24, 0xfffffffc, @mcast1, 0x5}}, {{0xa, 0x4e21, 0x8b5f, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe57}}}, 0x108) syz_usb_connect(0x1, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x200, 0x98, 0x13, 0xe8, 0x8, 0x408, 0x4035, 0x17b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfd, 0x80, 0x40, 0x5, "", [{{0x9, 0x4, 0x41, 0x3, 0x0, 0xe, 0x1, 0x1, 0x3}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x310, 0x3, 0xff, 0x2, 0x0, 0x2}, 0x0, 0x0}) 2.440978129s ago: executing program 3 (id=11): syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b0001010000000904"], 0x0) close(0x3) (async) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x9b, 0x10, 0x6, "", [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0xfa53, 0x9, 0x2}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x7, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x68, 0x0, 0x81}}}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f00000001c0)=@string={0x4, 0x3, 'zw'}}]}) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) (async, rerun: 32) syz_clone(0x21000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) 1.602964s ago: executing program 2 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006f7ffffffffffffff24ac14142600e5ffffffffffff0100"], 0x70}, 0x1, 0x7}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x1000, 0x4) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="56ccabd869c203"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) 1.423097784s ago: executing program 2 (id=13): socket(0x10, 0x803, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x3, 0x1000000}], 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setuid(0xee01) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x40000000) (async) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) (async) setsockopt(r1, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e25, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x2}, 0x1c) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x10201, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x2000000038, 0xfff, 0x3fffc, 0x180, 0x2, 0xffffffffffffffff, 0xf5, 0x3, 0x7fffffffffffe, 0x2000000005, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x1c6017}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, r4, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) (async) r9 = syz_ublk_setup_io_uring(0x80020, &(0x7f0000000040)={0x0, 0xdd34, 0x2, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000340)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x470, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x51}}}, 0x0) (async) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRES64=r1], 0xffffff6a) (async) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r8, r13, 0xfffffffffffffc01, 0x0) (async) tee(r8, r13, 0x60000000000, 0x8) 1.326937557s ago: executing program 2 (id=14): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003940)=ANY=[@ANYBLOB="20000000110001000000000002969a0ca400000007"], 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r5) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="3fab00000000000000002f00"], 0x14}}, 0x24001844) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000fedbdf2525000000080001007063690011000200f33930303a300600000000000000000008008c0003000040"], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x80c0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x141) openat(r8, &(0x7f0000000040)='./file0\x00', 0x6000, 0x112) sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd0000fddbdf250a00000024000480090001007379b28643"], 0x70}}, 0x48044) r9 = dup(r2) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') pread64(r10, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="cf2d0d36c2419acea3772c013d98a1f6f62beb4f388e84b47444cdd4d998cffc59e98f6ac2969ac3902d3527b5e9fc0ffcc48891ca02625eb3c75ea4afdb59601cbff3e284d4f820a07a4ab906e9dca9632104b0163fbe332862d8f2e8f9a1eb1a9a9f3b68d2af12fbe90a5458ed640268a2a1c98f6295f5379dbb86819624518e61ffa89f86ad8e73e913f4c7b1af26c97afba22657827993d6fb2d4a68407ec95ad79f4e9e4c139fbde3994317a4b1bda603dd53fac24c509f6913a3c47901c584a7708f26d15f"], 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0], 0x48}}, 0x0) r12 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$x86(r13, &(0x7f0000c00000/0x400000)=nil) r15 = syz_kvm_add_vcpu$x86(r14, &(0x7f00000008c0)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r15, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x484, 0x0, 0x7}]}) r16 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000d40), 0x1, 0x0) read$FUSE(r16, 0x0, 0x0) syz_ublk_setup_queues(r9, r1, &(0x7f0000000180)={0x0, 0x20000, 0x0, 0x1, 0x154, 0x0, r9}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x42, 0x0, 0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB=','], 0x2c}}, 0x40) 156.989806ms ago: executing program 3 (id=15): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x18f983, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, 0x0) setregid(r1, r1) socket$inet(0x2, 0x2, 0x1) 119.816327ms ago: executing program 3 (id=16): socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = open(&(0x7f0000000000)='./file0\x00', 0x85c2, 0x2) sendmsg$inet6(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001240)=ANY=[], 0x1058}, 0x4001) 66.980028ms ago: executing program 3 (id=17): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x53, 0x101, 0x40, {0x7, 0x8000}, {0x4, 0x1}, @cond=[{0xfc00, 0x1, 0xc562, 0x0, 0x4, 0x401}, {0x4, 0x9, 0x5, 0x0, 0xff, 0x4}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xefff, 0xfa64}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x6, 0x2000) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000000100)=""/36) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r9, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '\xde\x1d{\x00'}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '-(\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r10 = dup2(r2, r2) read$usbmon(r10, &(0x7f0000000dc0)=""/18, 0x12) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xaece, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 16.331379ms ago: executing program 3 (id=18): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f00000031c0)={0x2020}, 0x2020) (async) write$uinput_user_dev(r3, &(0x7f0000000440)={'syz0\x00', {0x200, 0x6, 0x97ed, 0x1d5}, 0x1d, [0x5, 0xd193, 0x464000, 0x2, 0xef, 0x90f, 0x4, 0x8, 0x1ff, 0x1, 0x7fffffff, 0xffff8001, 0xca, 0x91, 0x8, 0x3ff, 0xfffffff8, 0x0, 0x1, 0x0, 0xd, 0x1, 0x80000000, 0x4000, 0x9, 0x2, 0x3, 0xd, 0x1ff, 0xfffffbff, 0x80000000, 0x0, 0x5, 0x3, 0x9, 0x7fff, 0x2201, 0x9, 0x4, 0x5, 0x0, 0x8, 0xa, 0x2, 0x400, 0x200, 0x31, 0x55a, 0x0, 0x1, 0xf, 0x10001, 0xdd7f, 0x2000, 0x9, 0x1, 0xfff, 0x400, 0x74ec, 0x2, 0xfffffffb, 0xfffffff7, 0x2, 0xffffffb7], [0x8, 0x74, 0x6c11, 0x0, 0x1ff, 0x2, 0x3, 0x400, 0x10000, 0xd, 0x6, 0x80000001, 0x3, 0x3, 0xfffffff7, 0x10, 0x401, 0x5, 0x4, 0xfff, 0x3, 0xffff, 0xab7d, 0xff, 0xffffffff, 0xefe, 0xfffffff8, 0x1, 0xfff, 0x100, 0x7ff, 0x0, 0x7, 0x5, 0x7, 0x9, 0x81, 0xf, 0x6, 0x80000000, 0x4, 0x8, 0x4a97c06, 0x9, 0x1, 0x9, 0x7ff, 0x43adade3, 0x8, 0xfffffffe, 0x5, 0xeae1, 0x2, 0x2, 0x7fffffff, 0x3, 0x2, 0x4, 0x6, 0x7, 0xc103, 0x2, 0x0, 0x81], [0x0, 0x35, 0x9, 0x8, 0x32f, 0x29, 0x0, 0xffffff80, 0x2, 0x0, 0x3, 0x0, 0x7fff, 0x1, 0x7, 0x8, 0x4, 0x10001, 0x0, 0xa, 0x8, 0x955, 0x7, 0xffffffff, 0x1c00000, 0x6, 0x3, 0xd2, 0xfffffff4, 0x4, 0x84, 0x2, 0x1000, 0x5, 0x1, 0x800, 0x4, 0x3, 0x7, 0xc7fd, 0x3, 0x73, 0x401, 0x5, 0x401, 0x9, 0x7ff, 0x7fff, 0x6, 0x3, 0xc, 0x5, 0x631, 0x9, 0xb, 0xf53d, 0x9, 0x4, 0x80, 0x1ff, 0xffff, 0x0, 0xe, 0x800], [0x10001, 0x2c, 0x1, 0x9, 0xf0, 0x7, 0x40, 0x0, 0x634d2415, 0x80000001, 0x4, 0x6, 0x3ede849a, 0x2bde1aee, 0x0, 0x7, 0xff, 0xcbb6, 0xfff, 0x3, 0x6, 0x10, 0x3800000, 0x8, 0x101, 0x7, 0x7ff, 0xa, 0x1000, 0x9, 0x1200000, 0xa, 0x0, 0x25, 0x7, 0x6, 0x7, 0x4, 0x9, 0x4, 0x7ff, 0x8, 0xce, 0xb, 0x3, 0x9, 0x9, 0x401, 0x2, 0x80000, 0x7630, 0x8, 0x463, 0x9, 0x1000, 0x2, 0x7fffffff, 0x3, 0x6, 0x3, 0x400, 0x7f, 0x2, 0xffffffff]}, 0x45c) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, r0, 0x321, 0x70bd29, 0x2ddfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x404c855}, 0x4) (async) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000bc0)=""/4073, 0xfe9}, {&(0x7f0000000000)=""/10, 0xa}, {&(0x7f0000000400)=""/57, 0x39}], 0x3}, 0x1000008}], 0x1, 0x180, 0x0) 0s ago: executing program 3 (id=19): r0 = socket$inet6(0xa, 0x80000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) copy_file_range(r2, 0x0, r2, 0x0, 0x3, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) syz_usb_connect(0x2, 0xb6, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904500b05a97a37020a24010a0b06020102092403050703020496062404029cfe09050b00400080000007"], 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)={0x73}, 0x8) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r4, &(0x7f0000001300)=[{0x0}, {0x0}, {&(0x7f0000001580)=""/4101, 0x1005}], 0x3, 0x1, 0x3, 0x10) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x3}) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r5, 0x29, 0xcc, &(0x7f00000025c0)=""/4096, &(0x7f00000035c0)=0x1000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000040)={0x4, 0x3, 0x80}) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x0) kernel console output (not intermixed with test programs): ess permissive=1 [ 20.648649][ T36] audit: type=1400 audit(1786364038.959:63): avc: denied { siginh } for pid=275 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts. [ 27.935423][ T36] audit: type=1400 audit(1786364046.259:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.936559][ T287] cgroup: Unknown subsys name 'net' [ 27.958070][ T36] audit: type=1400 audit(1786364046.259:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.985492][ T36] audit: type=1400 audit(1786364046.289:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.985664][ T287] cgroup: Unknown subsys name 'devices' [ 28.093542][ T287] cgroup: Unknown subsys name 'hugetlb' [ 28.099163][ T287] cgroup: Unknown subsys name 'rlimit' [ 28.191341][ T36] audit: type=1400 audit(1786364046.509:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.214465][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.223329][ T36] audit: type=1400 audit(1786364046.509:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.248055][ T36] audit: type=1400 audit(1786364046.519:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.271182][ T36] audit: type=1400 audit(1786364046.539:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.274603][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.296599][ T36] audit: type=1400 audit(1786364046.539:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.330871][ T36] audit: type=1400 audit(1786364046.599:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.356569][ T36] audit: type=1400 audit(1786364046.599:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.105646][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.112755][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.119939][ T294] bridge_slave_0: entered allmulticast mode [ 29.126517][ T294] bridge_slave_0: entered promiscuous mode [ 29.134250][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.141379][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.148518][ T294] bridge_slave_1: entered allmulticast mode [ 29.154832][ T294] bridge_slave_1: entered promiscuous mode [ 29.186971][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.194190][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.201263][ T295] bridge_slave_0: entered allmulticast mode [ 29.207773][ T295] bridge_slave_0: entered promiscuous mode [ 29.217212][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.224314][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.231374][ T295] bridge_slave_1: entered allmulticast mode [ 29.238122][ T295] bridge_slave_1: entered promiscuous mode [ 29.253261][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.260318][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.267636][ T296] bridge_slave_0: entered allmulticast mode [ 29.273978][ T296] bridge_slave_0: entered promiscuous mode [ 29.280405][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.287623][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.294824][ T296] bridge_slave_1: entered allmulticast mode [ 29.300988][ T296] bridge_slave_1: entered promiscuous mode [ 29.393400][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.400459][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.407668][ T297] bridge_slave_0: entered allmulticast mode [ 29.413961][ T297] bridge_slave_0: entered promiscuous mode [ 29.420527][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.427627][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.434771][ T297] bridge_slave_1: entered allmulticast mode [ 29.440976][ T297] bridge_slave_1: entered promiscuous mode [ 29.492567][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.499628][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.550247][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.557340][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.564641][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.571710][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.589276][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.596945][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.604654][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.615494][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.622568][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.635582][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.642665][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.703773][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.710820][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.718597][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.725675][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.740364][ T294] veth0_vlan: entered promiscuous mode [ 29.754400][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.761482][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.769515][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.776592][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.790805][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.797902][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.816216][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.823295][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.833019][ T294] veth1_macvtap: entered promiscuous mode [ 29.869648][ T295] veth0_vlan: entered promiscuous mode [ 29.885323][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.893971][ T297] veth0_vlan: entered promiscuous mode [ 29.911028][ T295] veth1_macvtap: entered promiscuous mode [ 29.936985][ T297] veth1_macvtap: entered promiscuous mode [ 29.947831][ T296] veth0_vlan: entered promiscuous mode [ 29.969596][ T296] veth1_macvtap: entered promiscuous mode [ 30.011860][ T321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.027327][ T321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.052728][ T328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 30.053299][ T330] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.185926][ T338] Zero length message leads to an empty skb [ 30.211866][ T311] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.251542][ T65] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.341925][ T311] usb 1-1: device descriptor read/64, error -71 [ 30.412883][ T65] usb 3-1: New USB device found, idVendor=0582, idProduct=0102, bcdDevice= 0.40 [ 30.422148][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.430169][ T65] usb 3-1: Product: syz [ 30.434813][ T65] usb 3-1: Manufacturer: syz [ 30.439406][ T65] usb 3-1: SerialNumber: syz [ 30.531612][ T10] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 30.581492][ T311] usb 1-1: device descriptor read/64, error -71 [ 30.587822][ T318] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.649120][ T65] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 30.656238][ T65] usb 3-1: unit 4 not found! [ 30.660838][ T65] usb 3-1: unit 6 not found! [ 30.669211][ T65] usb 3-1: USB disconnect, device number 2 [ 30.685350][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.685430][ T10] usb 2-1: config 253 has an invalid interface number: 65 but max is 0 [ 30.709398][ T10] usb 2-1: config 253 has no interface number 0 [ 30.715782][ T10] usb 2-1: config 253 interface 65 has no altsetting 0 [ 30.753029][ T318] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.764794][ T318] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 30.774374][ T318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.782424][ T318] usb 4-1: Product: syz [ 30.786606][ T318] usb 4-1: Manufacturer: syz [ 30.791227][ T318] usb 4-1: SerialNumber: syz [ 30.797908][ T318] hub 4-1:1.0: bad descriptor, ignoring hub [ 30.803990][ T318] hub 4-1:1.0: probe with driver hub failed with error -5 [ 30.821488][ T311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.951534][ T311] usb 1-1: device descriptor read/64, error -71 [ 31.201500][ T311] usb 1-1: device descriptor read/64, error -71 [ 31.216298][ T380] dummy_hcd dummy_hcd.0: remove, state 1 [ 31.222074][ T380] usb usb1: USB disconnect, device number 1 [ 31.261498][ T31] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 31.311625][ T311] usb usb1-port1: attempt power cycle [ 31.319836][ T380] dummy_hcd dummy_hcd.0: stopped [ 31.324928][ T380] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 31.403613][ T391] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14'. [ 31.413620][ T31] usb 4-1: device firmware changed [ 31.419703][ T31] usb 4-1: USB disconnect, device number 2 [ 31.651478][ T65] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.711608][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.781490][ T65] usb 3-1: device descriptor read/64, error -71 [ 31.862564][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.875301][ T31] usb 4-1: string descriptor 0 read error: -22 [ 31.881777][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 31.891279][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.901613][ T31] hub 4-1:1.0: bad descriptor, ignoring hub [ 31.907563][ T31] hub 4-1:1.0: probe with driver hub failed with error -5 [ 32.021511][ T65] usb 3-1: device descriptor read/64, error -71 [ 32.211732][ T31] usb 4-1: USB disconnect, device number 3 [ 32.261500][ T65] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.391479][ T65] usb 3-1: device descriptor read/64, error -71 [ 32.614156][ T393] netlink: 'syz.3.15': attribute type 10 has an invalid length. [ 32.621866][ T393] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15'. [ 32.631262][ T393] veth1: entered promiscuous mode [ 32.636624][ T65] usb 3-1: device descriptor read/64, error -71 [ 32.751754][ T65] usb usb3-port1: attempt power cycle [ 32.932776][ T314] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 32.945401][ T314] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 32.953827][ T314] CPU: 1 UID: 0 PID: 314 Comm: syz.0.1 Not tainted syzkaller #0 c4896d72d1fb51cdc6291d08376a37fd8080d7bb [ 32.965108][ T314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.975165][ T314] RIP: 0010:set_link_state+0x2a/0x1240 [ 32.980667][ T314] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 4d fa cd fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 a8 be 26 fe 4d 8b 75 00 49 8d 95 93 [ 33.000361][ T314] RSP: 0018:ffffc9000b7df718 EFLAGS: 00010046 [ 33.006448][ T314] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88810d301300 [ 33.014440][ T314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.022411][ T314] RBP: ffffc9000b7df7a0 R08: 0000000000000003 R09: 0000000000000004 [ 33.030373][ T314] R10: dffffc0000000000 R11: fffff520016fbee0 R12: 0000000000000000 [ 33.038355][ T314] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888104f74000 [ 33.046330][ T314] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.055267][ T314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.061490][ T345] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 33.061848][ T314] CR2: 00007f21d159bd58 CR3: 00000001222fe000 CR4: 00000000003526b0 [ 33.061871][ T314] Call Trace: [ 33.073243][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 33.073258][ T36] audit: type=1400 audit(1786364051.399:143): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 33.077292][ T314] [ 33.077304][ T314] ? __kasan_check_write+0x18/0x20 [ 33.081233][ T36] audit: type=1400 audit(1786364051.399:144): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.086629][ T314] dummy_pullup+0xd1/0x130 [ 33.086661][ T314] ? __cfi_dummy_pullup+0x10/0x10 [ 33.086684][ T314] usb_gadget_disconnect_locked+0x14e/0x400 [ 33.109176][ T65] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.111305][ T314] gadget_unbind_driver+0xaf/0x3f0 [ 33.111337][ T314] ? __cfi_gadget_unbind_driver+0x10/0x10 [ 33.116662][ T36] audit: type=1400 audit(1786364051.399:145): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.137761][ T314] device_release_driver_internal+0x4ad/0x830 [ 33.137800][ T314] driver_detach+0x1f5/0x2d0 [ 33.137822][ T314] bus_remove_driver+0x254/0x2b0 [ 33.137840][ T314] driver_unregister+0x79/0xb0 [ 33.137857][ T314] usb_gadget_unregister_driver+0x52/0x80 [ 33.143053][ T36] audit: type=1400 audit(1786364051.399:146): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.147263][ T314] raw_release+0xdb/0x280 [ 33.153489][ T36] audit: type=1400 audit(1786364051.399:147): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.160593][ T314] ? __cfi_raw_release+0x10/0x10 [ 33.160627][ T314] __fput+0x208/0xa30 [ 33.166235][ T36] audit: type=1400 audit(1786364051.399:148): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.171420][ T314] ____fput+0x20/0x30 [ 33.171449][ T314] task_work_run+0x1e8/0x260 [ 33.171472][ T314] ? __cfi_task_work_run+0x10/0x10 [ 33.193242][ T36] audit: type=1400 audit(1786364051.399:149): avc: denied { getattr } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.198689][ T314] ? __kasan_check_write+0x18/0x20 [ 33.198724][ T314] do_exit+0xa46/0x2850 [ 33.203579][ T65] usb 3-1: device descriptor read/8, error -71 [ 33.208217][ T314] ? __cfi_do_exit+0x10/0x10 [ 33.208250][ T314] ? __kasan_check_write+0x18/0x20 [ 33.240867][ T36] audit: type=1400 audit(1786364051.559:150): avc: denied { getopt } for pid=403 comm="syz.3.19" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.243470][ T314] ? _raw_spin_lock_irq+0x93/0x120 [ 33.243498][ T314] do_group_exit+0x21f/0x2f0 [ 33.243520][ T314] ? __kasan_check_write+0x18/0x20 [ 33.265605][ T345] usb 4-1: unable to get BOS descriptor or descriptor too short [ 33.268825][ T314] ? recalc_sigpending+0x184/0x1d0 [ 33.268856][ T314] get_signal+0x134c/0x1490 [ 33.274209][ T345] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 33.295636][ T314] arch_do_signal_or_restart+0xbc/0x700 [ 33.295670][ T314] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 33.295687][ T314] ? __se_sys_ioctl+0x198/0x1b0 [ 33.295715][ T314] syscall_exit_to_user_mode+0x57/0xb0 [ 33.295734][ T314] do_syscall_64+0x63/0xf0 [ 33.301319][ T345] usb 4-1: can't read configurations, error -71 [ 33.304307][ T314] ? clear_bhb_loop+0x50/0xa0 [ 33.304342][ T314] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.304364][ T314] RIP: 0033:0x7fbb29b9dd6b [ 33.342541][ T65] usb 3-1: device descriptor read/8, error -71 [ 33.347344][ T314] Code: Unable to access opcode bytes at 0x7fbb29b9dd41. [ 33.347362][ T314] RSP: 002b:00007fbb2aab7f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 33.347383][ T314] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007fbb29b9dd6b [ 33.493428][ T314] RDX: 00007fbb2aab8fd0 RSI: 0000000080085502 RDI: 0000000000000003 [ 33.501411][ T314] RBP: 00007fbb2aab8fd0 R08: 0000000000000040 R09: 00007fbb2aab7fc8 [ 33.509396][ T314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 33.517381][ T314] R13: 0000000800000000 R14: 0000000000000012 R15: 00007fbb29c53882 [ 33.525368][ T314] [ 33.528391][ T314] Modules linked in: [ 33.532285][ T314] ---[ end trace 0000000000000000 ]--- [ 33.537739][ T314] RIP: 0010:set_link_state+0x2a/0x1240 [ 33.543197][ T314] Code: 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 60 49 89 fd 48 bb 00 00 00 00 00 fc ff df e8 4d fa cd fd 4c 89 e8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ef e8 a8 be 26 fe 4d 8b 75 00 49 8d 95 93 [ 33.562808][ T314] RSP: 0018:ffffc9000b7df718 EFLAGS: 00010046 [ 33.568922][ T314] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88810d301300 [ 33.576959][ T314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.584942][ T314] RBP: ffffc9000b7df7a0 R08: 0000000000000003 R09: 0000000000000004 [ 33.591477][ T65] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 33.592922][ T314] R10: dffffc0000000000 R11: fffff520016fbee0 R12: 0000000000000000 [ 33.592940][ T314] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888104f74000 [ 33.612525][ T65] usb 3-1: device descriptor read/8, error -71 [ 33.616328][ T314] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.616352][ T314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.616367][ T314] CR2: 00007f21d159bd58 CR3: 00000001222fe000 CR4: 00000000003526b0 [ 33.645981][ T314] Kernel panic - not syncing: Fatal exception [ 33.652433][ T314] Kernel Offset: disabled [ 33.656753][ T314] Rebooting in 86400 seconds..