last executing test programs:
15.926777223s ago: executing program 2 (id=3):
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@uexit={0x0, 0x18, 0xface}], 0x18})
ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000300))
15.925007653s ago: executing program 1 (id=6):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
mkdir(&(0x7f0000001000)='./mysys\x00', 0x1ff)
mount(&(0x7f0000001100)=@filename='sysfs\x00', &(0x7f0000001200)='./mysys\x00', &(0x7f0000001300)='sysfs\x00', 0x0, 0x0)
15.795516517s ago: executing program 2 (id=9):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='2049\n', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='1\n', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./rpc_pipefs\x00', 0x1ff)
mount(&(0x7f0000000900)=@filename='none\x00', &(0x7f0000000a00)='./rpc_pipefs\x00', &(0x7f0000000b00)='rpc_pipefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0)
write(r2, &(0x7f0000000d00)="010000000000000001000000040000007465737400000000", 0x18)
15.780566227s ago: executing program 2 (id=10):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x835, 0x0, 0x400}]})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000300)={[{0x1, 0x1}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
2.655801255s ago: executing program 1 (id=11):
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffff0040da0b528100000000000109022700010100a0320904000003ff000000070581020002000705020200020007058303400008"], 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00013900000012010002ffff0040da0b528100000000000109022700010100a0320904000003ff000000070581020002000705020200020007058303400008"]}, &(0x7f0000000140)={0x84, &(0x7f0000000200)={0x40, 0x5, 0x8, "0000004c00e04c68"}})
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="00013900000012010002ffff0040da0b528100000000000109022700010100a0320904000003ff000000070581020002000705020200020007058303400008"]}, &(0x7f0000000340)={0x84, &(0x7f0000000400)={0x40, 0x5, 0x8, "0000004c00e04c68"}})
2.655576755s ago: executing program 3 (id=12):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$packet(r0, &(0x7f0000000000)="33330000000100112233445586dd6000000000240001fe800000000000000000000000000001ff0200000000000000000000000000013a0005020000010082000000000000000000000000000000000000000000000002000000", 0x5a, 0x0, &(0x7f0000000100)={0x11, 0x300, 0x1, 0x1, 0x0, 0x6, @random="333300000001"}, 0x14)
recvfrom$inet6(r1, &(0x7f0000000200)=""/100, 0x64, 0x40, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0)
2.638830006s ago: executing program 3 (id=13):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
getdents64(r0, &(0x7f0000000080), 0x400)
2.631939856s ago: executing program 2 (id=14):
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408680630b0000000000010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64)
nanosleep(&(0x7f0000000500)={0x1}, 0x0)
2.47391262s ago: executing program 0 (id=16):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ed)
mount(&(0x7f0000000140)=@filename='sysfs\x00', &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/module/dvb_as102/parameters/fw_upload\x00', 0x1, 0x0)
write(r0, &(0x7f0000000380)='0\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vidtv/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='vidtv.0\x00', 0x7)
2.47379751s ago: executing program 0 (id=17):
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@code={0x1, 0x18, {"48b80000c0fe00000000488b18f4"}}]})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
2.434408971s ago: executing program 0 (id=18):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000440)='./config\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1/bmAttributes\x00', 0x1, 0x0)
write(r0, &(0x7f0000000640)='0x80', 0x4)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/MaxPower\x00', 0x1, 0x0)
write(r1, &(0x7f00000006c0)='500', 0x3)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000740)='dummy_udc.0', 0xb)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f00000007c0)='./proc\x00', &(0x7f0000000800)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./dev\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000880)='./dev\x00', &(0x7f00000008c0)='devtmpfs\x00', 0x0, 0x0)
nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0)
nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0)
nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0)
nanosleep(&(0x7f0000000200)={0x0, 0xbebc200}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/devices\x00', 0x0, 0x0)
read(r3, &(0x7f0000000000)=""/1024, 0x400)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/bus/usb/005/002\x00', 0x2, 0x0)
ioctl(r4, 0x80045505, &(0x7f0000000300)="01000000")
close(r4)
2.062174899s ago: executing program 0 (id=19):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000040405e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000200)={0x1}, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x101301)
1.413939225s ago: executing program 3 (id=20):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/dbc\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='enable\x00', 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/xhci_hcd/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='0000:00:03.0\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='0000:00:03.0\x00', 0xd)
1.413621515s ago: executing program 3 (id=21):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x5000, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000000)=0x218, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x5000, @loopback}, 0x10)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000001000)='\x00'/65536, 0x10000}], 0x1)
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001000)='\x00'/65536, 0x10000}, {&(0x7f0000002000)='\x00'/65536, 0x10000}], 0x2}, 0x0)
1.379754476s ago: executing program 3 (id=22):
mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0xf)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0xf)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0xf)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0xf)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0xf)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x17)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x17)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x40000000, 0x17)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0x17)
madvise(&(0x7f0000000000/0x1000000)=nil, 0x10000000, 0x17)
madvise(&(0x7f0000000000/0x400000)=nil, 0x4000000, 0x4)
mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0xf)
madvise(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x17)
madvise(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0xe)
madvise(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x19)
782.936691ms ago: executing program 1 (id=23):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/events/kvm/kvm_inj_exception/enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='1', 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x2625a0)
ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000500)={0x3b9aca00})
r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@code={0xa, 0x12, {"90"}}], 0x12})
ioctl$KVM_SET_TSC_KHZ_cpu(r4, 0xaea2, 0x2625a0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000300)=@x86={0x1, 0x6})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
633.915244ms ago: executing program 1 (id=24):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test_delay\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0\n', 0x2)
close(r0)
633.747544ms ago: executing program 1 (id=25):
mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000600), 0x1000)
626.772885ms ago: executing program 1 (id=26):
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000400404020200010000000109022700010100c0320904000003ff000000070581024000000705020240000007058303400001"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
537.554877ms ago: executing program 0 (id=27):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
r0 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0x9710, 0x7810, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, [], [{{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}}, {{0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x0, &(0x7f0000000900)={0x40, 0xd, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x0, &(0x7f0000000900)={0x40, 0xd, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x0, &(0x7f0000000900)={0x40, 0xd, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x0, &(0x7f0000000900)={0x40, 0xd, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x0, &(0x7f0000000900)={0x40, 0xd, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x0, &(0x7f0000000900)={0x40, 0xd, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
97.885217ms ago: executing program 3 (id=28):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB')
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022d000100000000090400000903000000092100000001222200090581030800000000090502030800000000"], 0x0)
syz_usb_ep_read(r1, 0x81, 0x1f, &(0x7f0000000080)=""/31)
syz_usb_ep_write(r1, 0x2, 0x24, &(0x7f00000000c0)="000005021f00000053595a20202020204449534b202020202020202020202020312e3020")
syz_usb_ep_write(r1, 0x2, 0xd, &(0x7f0000000100)="55534253010000000000000000")
0s ago: executing program 0 (id=29):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/dummy_udc.0/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='reg-fixed-voltage\x00', 0x12)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='dummy_udc.0\x00', 0xb)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/drivers/reg-fixed-voltage/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='dummy_udc.0\x00', 0xb)
close(r2)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts.
[ 29.769516][ T36] audit: type=1400 audit(1786957656.990:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 29.772897][ T287] cgroup: Unknown subsys name 'net'
[ 29.792202][ T36] audit: type=1400 audit(1786957656.990:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 29.819595][ T36] audit: type=1400 audit(1786957657.030:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 29.820122][ T287] cgroup: Unknown subsys name 'devices'
[ 29.946541][ T287] cgroup: Unknown subsys name 'hugetlb'
[ 29.952199][ T287] cgroup: Unknown subsys name 'rlimit'
[ 30.057680][ T36] audit: type=1400 audit(1786957657.280:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 30.080881][ T36] audit: type=1400 audit(1786957657.280:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 30.105678][ T36] audit: type=1400 audit(1786957657.280:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 30.136093][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 30.144990][ T36] audit: type=1400 audit(1786957657.370:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 30.170463][ T36] audit: type=1400 audit(1786957657.370:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 30.204185][ T36] audit: type=1400 audit(1786957657.420:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 30.205607][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 30.229765][ T36] audit: type=1400 audit(1786957657.420:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 31.126864][ T294] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.133944][ T294] bridge0: port 1(bridge_slave_0) entered disabled state
[ 31.141194][ T294] bridge_slave_0: entered allmulticast mode
[ 31.147800][ T294] bridge_slave_0: entered promiscuous mode
[ 31.157284][ T294] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.164468][ T294] bridge0: port 2(bridge_slave_1) entered disabled state
[ 31.171552][ T294] bridge_slave_1: entered allmulticast mode
[ 31.177973][ T294] bridge_slave_1: entered promiscuous mode
[ 31.235936][ T296] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.243028][ T296] bridge0: port 1(bridge_slave_0) entered disabled state
[ 31.250174][ T296] bridge_slave_0: entered allmulticast mode
[ 31.256497][ T296] bridge_slave_0: entered promiscuous mode
[ 31.262726][ T297] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.269878][ T297] bridge0: port 1(bridge_slave_0) entered disabled state
[ 31.277017][ T297] bridge_slave_0: entered allmulticast mode
[ 31.283274][ T297] bridge_slave_0: entered promiscuous mode
[ 31.292718][ T297] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.299900][ T297] bridge0: port 2(bridge_slave_1) entered disabled state
[ 31.307023][ T297] bridge_slave_1: entered allmulticast mode
[ 31.313371][ T297] bridge_slave_1: entered promiscuous mode
[ 31.319477][ T295] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.326594][ T295] bridge0: port 1(bridge_slave_0) entered disabled state
[ 31.333680][ T295] bridge_slave_0: entered allmulticast mode
[ 31.340066][ T295] bridge_slave_0: entered promiscuous mode
[ 31.346443][ T296] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.353506][ T296] bridge0: port 2(bridge_slave_1) entered disabled state
[ 31.360664][ T296] bridge_slave_1: entered allmulticast mode
[ 31.366998][ T296] bridge_slave_1: entered promiscuous mode
[ 31.382266][ T295] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.389423][ T295] bridge0: port 2(bridge_slave_1) entered disabled state
[ 31.396586][ T295] bridge_slave_1: entered allmulticast mode
[ 31.402838][ T295] bridge_slave_1: entered promiscuous mode
[ 31.547484][ T294] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.554581][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 31.562372][ T294] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.569455][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 31.581064][ T297] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.588158][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 31.595469][ T297] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.602505][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 31.620202][ T296] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.627307][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 31.634647][ T296] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.641688][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 31.678396][ T295] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.685502][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 31.692800][ T295] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.699877][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 31.723776][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 31.731948][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 31.739414][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 31.747510][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 31.754869][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 31.762246][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 31.769769][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 31.777059][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 31.795271][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.802355][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 31.810309][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.817406][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 31.825256][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.832291][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 31.856389][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.863442][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 31.871108][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.878196][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 31.887121][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.894185][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 31.947339][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.954446][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 31.971818][ T294] veth0_vlan: entered promiscuous mode
[ 31.979793][ T297] veth0_vlan: entered promiscuous mode
[ 31.986438][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.993489][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 32.010868][ T296] veth0_vlan: entered promiscuous mode
[ 32.028322][ T297] veth1_macvtap: entered promiscuous mode
[ 32.038953][ T294] veth1_macvtap: entered promiscuous mode
[ 32.056963][ T296] veth1_macvtap: entered promiscuous mode
[ 32.096330][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 32.133085][ T295] veth0_vlan: entered promiscuous mode
[ 32.178835][ T10] smpboot: CPU 1 is now offline
[ 32.197781][ T295] veth1_macvtap: entered promiscuous mode
[ 32.214956][ T316] PM: suspend entry (deep)
[ 32.245267][ T314] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 32.314749][ T326] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[ 32.530148][ T46] Filesystems sync: 0.291 seconds
[ 32.594986][ T316] Freezing user space processes
[ 32.601142][ T316] Freezing user space processes completed (elapsed 0.001 seconds)
[ 32.609248][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 32.616856][ T316] OOM killer disabled.
[ 32.620941][ T316] Freezing remaining freezable tasks
[ 32.626480][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 37.824280][ T10] usb 2-1: device descriptor read/64, error -110
[ 37.830735][ T9] usb 4-1: device descriptor read/64, error -110
[ 38.074327][ T9] usb 4-1: device descriptor read/64, error -32
[ 38.080739][ T10] usb 2-1: device descriptor read/64, error -32
[ 38.324308][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 38.331827][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 38.464321][ T9] usb 4-1: device descriptor read/64, error -32
[ 38.470691][ T10] usb 2-1: device descriptor read/64, error -32
[ 38.704273][ T9] usb 4-1: device descriptor read/64, error -32
[ 38.714293][ T10] usb 2-1: device descriptor read/64, error -32
[ 38.814331][ T9] usb usb4-port1: attempt power cycle
[ 38.824345][ T10] usb usb2-port1: attempt power cycle
[ 38.884393][ T9] raw-gadget.1 gadget.3: failed to queue reset event
[ 38.894371][ T10] raw-gadget.0 gadget.1: failed to queue reset event
[ 39.094390][ T9] raw-gadget.1 gadget.3: failed to queue resume event
[ 39.104306][ T10] raw-gadget.0 gadget.1: failed to queue resume event
[ 39.154389][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 39.164285][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 39.174446][ C0] raw-gadget.1 gadget.3: ignoring, device is not running
[ 39.181708][ C0] raw-gadget.1 gadget.3: ignoring, device is not running
[ 39.189025][ C0] raw-gadget.0 gadget.1: ignoring, device is not running
[ 39.196119][ C0] raw-gadget.1 gadget.3: ignoring, device is not running
[ 39.203287][ T9] usb 4-1: device descriptor read/8, error -32
[ 39.209473][ C0] raw-gadget.0 gadget.1: ignoring, device is not running
[ 39.216772][ C0] raw-gadget.0 gadget.1: ignoring, device is not running
[ 39.223833][ T10] usb 2-1: device descriptor read/8, error -32
[ 39.344462][ C0] raw-gadget.1 gadget.3: ignoring, device is not running
[ 39.351725][ C0] raw-gadget.1 gadget.3: ignoring, device is not running
[ 39.359054][ C0] raw-gadget.0 gadget.1: ignoring, device is not running
[ 39.366158][ C0] raw-gadget.1 gadget.3: ignoring, device is not running
[ 39.373597][ T9] usb 4-1: device descriptor read/8, error -32
[ 39.379802][ C0] raw-gadget.0 gadget.1: ignoring, device is not running
[ 39.387131][ C0] raw-gadget.0 gadget.1: ignoring, device is not running
[ 39.394311][ T10] usb 2-1: device descriptor read/8, error -32
[ 39.494324][ T9] raw-gadget.1 gadget.3: failed to queue suspend event
[ 39.501405][ T9] raw-gadget.1 gadget.3: failed to queue reset event
[ 39.508323][ T10] raw-gadget.0 gadget.1: failed to queue suspend event
[ 39.515392][ T10] raw-gadget.0 gadget.1: failed to queue reset event
[ 39.584303][ T9] raw-gadget.1 gadget.3: failed to queue resume event
[ 39.591134][ T10] raw-gadget.0 gadget.1: failed to queue resume event
[ 39.654342][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 39.661990][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 39.684478][ C0] raw-gadget.1 gadget.3: ignoring, device is not running
[ 39.691588][ C0] raw-gadget.0 gadget.1: ignoring, device is not running
[ 39.698966][ C0] raw-gadget.1 gadget.3: ignoring, device is not running
[ 39.706071][ C0] raw-gadget.0 gadget.1: ignoring, device is not running
[ 39.713293][ C0] raw-gadget.0 gadget.1: ignoring, device is not running
[ 39.720450][ C0] raw-gadget.1 gadget.3: ignoring, device is not running
[ 39.727577][ T9] usb 4-1: device descriptor read/8, error -32
[ 39.733798][ T10] usb 2-1: device descriptor read/8, error -32
[ 39.854454][ C0] raw-gadget.1 gadget.3: ignoring, device is not running
[ 39.861711][ C0] raw-gadget.1 gadget.3: ignoring, device is not running
[ 39.869061][ C0] raw-gadget.0 gadget.1: ignoring, device is not running
[ 39.876158][ C0] raw-gadget.1 gadget.3: ignoring, device is not running
[ 39.883312][ T9] usb 4-1: device descriptor read/8, error -32
[ 39.889494][ C0] raw-gadget.0 gadget.1: ignoring, device is not running
[ 39.896773][ C0] raw-gadget.0 gadget.1: ignoring, device is not running
[ 39.903825][ T10] usb 2-1: device descriptor read/8, error -32
[ 40.004385][ T9] raw-gadget.1 gadget.3: failed to queue suspend event
[ 40.011336][ T9] usb usb4-port1: unable to enumerate USB device
[ 40.017887][ T10] raw-gadget.0 gadget.1: failed to queue suspend event
[ 40.025211][ T10] usb usb2-port1: unable to enumerate USB device
[ 40.033271][ T316] Freezing remaining freezable tasks completed (elapsed 7.399 seconds)
[ 40.041661][ T316] printk: Suspending console(s) (use no_console_suspend to debug)
[ 40.074451][ T13] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[ 40.281600][ T316] ACPI: PM: Preparing to enter system sleep state S3
[ 40.281783][ T316] ACPI: PM: Saving platform NVS memory
[ 40.281873][ T316] Disabling non-boot CPUs ...
[ 40.285508][ T316] smpboot: CPU 1 is now offline
[ 40.287842][ T316] PM: suspend debug: Waiting for 5 second(s).
[ 45.302114][ T316] Enabling non-boot CPUs ...
[ 45.302303][ T316] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 45.305057][ T316] CPU1 is up
[ 45.305278][ T316] ACPI: PM: Waking up from system sleep state S3
[ 45.324526][ T12] virtio_scsi virtio0: 1/0/0 default/read/poll queues
[ 45.501305][ T316] OOM killer enabled.
[ 45.501969][ T316] Restarting tasks ... done.
[ 45.522314][ T316] random: crng reseeded on system resumption
[ 45.530037][ T316] Resume cause unknown
[ 45.530794][ T316] PM: suspend exit
[ 45.531488][ T328] raw-gadget.0 gadget.1: failed to queue disconnect event
[ 45.533148][ T332] raw-gadget.1 gadget.3: failed to queue disconnect event
[ 45.566606][ T36] kauditd_printk_skb: 35 callbacks suppressed
[ 45.566625][ T36] audit: type=1400 audit(1786957672.292:109): avc: denied { create } for pid=364 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 45.579079][ T36] audit: type=1400 audit(1786957672.302:110): avc: denied { write } for pid=364 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 45.649684][ T36] audit: type=1400 audit(1786957672.372:111): avc: denied { mount } for pid=372 comm="syz.0.15" name="/" dev="configfs" ino=2476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[ 45.654426][ T36] audit: type=1400 audit(1786957672.382:112): avc: denied { search } for pid=372 comm="syz.0.15" name="/" dev="configfs" ino=2476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 45.656226][ T373] Config c/1 of g1 needs at least one function.
[ 45.657907][ T36] audit: type=1400 audit(1786957672.382:113): avc: denied { write } for pid=372 comm="syz.0.15" name="usb_gadget" dev="configfs" ino=2477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 45.659172][ T373] udc dummy_udc.0: failed to start g1: -22
[ 45.663346][ T36] audit: type=1400 audit(1786957672.382:114): avc: denied { add_name } for pid=372 comm="syz.0.15" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 45.663508][ T373] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[ 45.666442][ T36] audit: type=1400 audit(1786957672.382:115): avc: denied { create } for pid=372 comm="syz.0.15" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[ 45.669931][ T373] UDC core: g1: couldn't find an available UDC or it's busy
[ 45.673825][ T373] Config c/1 of g1 needs at least one function.
[ 45.675060][ T36] audit: type=1400 audit(1786957672.382:116): avc: denied { create } for pid=372 comm="syz.0.15" name="midi2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1
[ 45.675074][ T373] udc dummy_udc.0: failed to start g1: -22
[ 45.675098][ T373] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[ 45.678398][ T36] audit: type=1400 audit(1786957672.382:117): avc: denied { write } for pid=372 comm="syz.0.15" name="UDC" dev="configfs" ino=3706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[ 45.680769][ T373] UDC core: g1: couldn't find an available UDC or it's busy
[ 45.682709][ T373] Config c/1 of g1 needs at least one function.
[ 45.686321][ T373] udc dummy_udc.0: failed to start g1: -22
[ 45.687293][ T373] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[ 45.687382][ T36] audit: type=1400 audit(1786957672.382:118): avc: denied { open } for pid=372 comm="syz.0.15" path="/1/config/usb_gadget/g1/UDC" dev="configfs" ino=3706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[ 45.690126][ T373] UDC core: g1: couldn't find an available UDC or it's busy
[ 45.694028][ T373] Config c/1 of g1 needs at least one function.
[ 45.695042][ T373] udc dummy_udc.0: failed to start g1: -22
[ 45.695970][ T373] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[ 45.697756][ T373] UDC core: g1: couldn't find an available UDC or it's busy
[ 45.699294][ T373] Config c/1 of g1 needs at least one function.
[ 45.700534][ T373] udc dummy_udc.0: failed to start g1: -22
[ 45.701465][ T373] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[ 45.703129][ T373] UDC core: g1: couldn't find an available UDC or it's busy
[ 45.704792][ T373] Config c/1 of g1 needs at least one function.
[ 45.705806][ T373] udc dummy_udc.0: failed to start g1: -22
[ 45.706680][ T373] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[ 45.708295][ T373] UDC core: g1: couldn't find an available UDC or it's busy
[ 45.709883][ T373] Config c/1 of g1 needs at least one function.
[ 45.711203][ T373] udc dummy_udc.0: failed to start g1: -22
[ 45.712159][ T373] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[ 45.713922][ T373] UDC core: g1: couldn't find an available UDC or it's busy
[ 45.850099][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 45.880091][ T66] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 45.910060][ T333] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 46.001380][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00
[ 46.002740][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 46.031188][ T66] usb 2-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice= 0.00
[ 46.032616][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 46.035890][ T66] r8152-cfgselector 2-1: Unknown version 0x0000
[ 46.050048][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 46.060072][ T333] usb 4-1: Using ep0 maxpacket: 8
[ 46.061982][ T333] usb 4-1: config 0 has an invalid interface number: 143 but max is 0
[ 46.063319][ T333] usb 4-1: config 0 has no interface number 0
[ 46.064410][ T333] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[ 46.065897][ T333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 46.068072][ T333] usb 4-1: config 0 descriptor??
[ 46.183483][ T385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 46.185021][ T385] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 46.187681][ T385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 46.189237][ T385] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 46.201693][ T9] usb 1-1: Dual-Role OTG device on HNP port
[ 46.202783][ T9] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.12
[ 46.204069][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 46.211994][ T9] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[ 46.271001][ T9] usb 4-1: USB disconnect, device number 6
[ 46.370354][ T66] r8152-cfgselector 2-1: reset high-speed USB device number 6 using dummy_hcd
[ 47.712064][ T407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 47.713540][ T407] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 47.721323][ T407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 47.722945][ T407] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 47.980041][ T66] r8152-cfgselector 2-1: device descriptor read/64, error -71
[ 48.243990][ T66] r8152-cfgselector 2-1: device firmware changed
[ 48.246609][ T66] r8152 2-1:1.0 (unnamed net_device) (uninitialized): Get ether addr fail
[ 48.254750][ T66] r8152 2-1:1.0 eth1: v1.12.13
[ 48.258374][ T10] usb 1-1: USB disconnect, device number 2
[ 48.263192][ T66] r8152-cfgselector 2-1: USB disconnect, device number 6
[ 48.265892][ T411] ==================================================================
[ 48.267207][ T411] BUG: KASAN: slab-out-of-bounds in reg_fixed_voltage_probe+0xb62/0xd90
[ 48.268570][ T411] Read of size 4 at addr ffff88810bae0f14 by task syz.0.29/411
[ 48.269809][ T411]
[ 48.270357][ T411] CPU: 0 UID: 0 PID: 411 Comm: syz.0.29 Tainted: G S syzkaller #0 119f1c0cd44458c2ddc7f806e6d4d2dd11ae7dae
[ 48.270398][ T411] Tainted: [S]=CPU_OUT_OF_SPEC
[ 48.270407][ T411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 48.270432][ T411] Call Trace:
[ 48.270440][ T411]
[ 48.270450][ T411] __dump_stack+0x21/0x30
[ 48.270489][ T411] dump_stack_lvl+0x140/0x1c0
[ 48.270523][ T411] ? __cfi_dump_stack_lvl+0x10/0x10
[ 48.270557][ T411] ? __cfi__printk+0x10/0x10
[ 48.270589][ T411] print_address_description+0x71/0x210
[ 48.270626][ T411] print_report+0x4a/0x70
[ 48.270657][ T411] kasan_report+0x162/0x1a0
[ 48.270687][ T411] ? reg_fixed_voltage_probe+0xb62/0xd90
[ 48.270721][ T411] ? reg_fixed_voltage_probe+0xb62/0xd90
[ 48.270752][ T411] __asan_report_load4_noabort+0x18/0x20
[ 48.270775][ T411] reg_fixed_voltage_probe+0xb62/0xd90
[ 48.270808][ T411] ? __cfi_reg_fixed_voltage_probe+0x10/0x10
[ 48.270839][ T411] ? kernfs_put+0x314/0x360
[ 48.270870][ T411] ? is_acpi_device_node+0x2a/0x70
[ 48.270903][ T411] ? acpi_dev_pm_attach+0xff/0x2e0
[ 48.270933][ T411] platform_probe+0x17a/0x200
[ 48.270964][ T411] ? __cfi_platform_probe+0x10/0x10
[ 48.271006][ T411] really_probe+0x2e1/0x8b0
[ 48.271043][ T411] __driver_probe_device+0x193/0x280
[ 48.271080][ T411] device_driver_attach+0xdb/0x1f0
[ 48.271116][ T411] bind_store+0x1dc/0x230
[ 48.271146][ T411] ? __cfi_bind_store+0x10/0x10
[ 48.271177][ T411] drv_attr_store+0x91/0xb0
[ 48.271209][ T411] ? __cfi_drv_attr_store+0x10/0x10
[ 48.271248][ T411] sysfs_kf_write+0x13e/0x160
[ 48.271274][ T411] ? __cfi_sysfs_kf_write+0x10/0x10
[ 48.271297][ T411] kernfs_fop_write_iter+0x319/0x510
[ 48.271333][ T411] vfs_write+0x75f/0xfd0
[ 48.271359][ T411] ? __cfi_vfs_write+0x10/0x10
[ 48.271383][ T411] ? __cfi_mutex_lock+0x10/0x10
[ 48.271422][ T411] ksys_write+0x145/0x260
[ 48.271447][ T411] ? xfd_validate_state+0x68/0x140
[ 48.271483][ T411] ? __cfi_ksys_write+0x10/0x10
[ 48.271508][ T411] ? __kasan_check_write+0x18/0x20
[ 48.271532][ T411] ? fpregs_restore_userregs+0x11c/0x260
[ 48.271563][ T411] __x64_sys_write+0x7f/0x90
[ 48.271588][ T411] x64_sys_call+0x271c/0x2ee0
[ 48.271613][ T411] do_syscall_64+0x57/0xf0
[ 48.271641][ T411] ? clear_bhb_loop+0x50/0xa0
[ 48.271678][ T411] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 48.271712][ T411] RIP: 0033:0x7f7e0719e0d9
[ 48.271733][ T411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 48.271753][ T411] RSP: 002b:00007f7e07fb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 48.271780][ T411] RAX: ffffffffffffffda RBX: 00007f7e07425fa0 RCX: 00007f7e0719e0d9
[ 48.271797][ T411] RDX: 000000000000000b RSI: 0000200000000700 RDI: 0000000000000003
[ 48.271811][ T411] RBP: 00007f7e07235024 R08: 0000000000000000 R09: 0000000000000000
[ 48.271826][ T411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 48.271840][ T411] R13: 00007f7e07426038 R14: 00007f7e07425fa0 R15: 00007ffd17d0f5b8
[ 48.271861][ T411]
[ 48.271869][ T411]
[ 48.323346][ T411] Allocated by task 1:
[ 48.323978][ T411] kasan_save_track+0x3e/0x80
[ 48.324766][ T411] kasan_save_alloc_info+0x3a/0x50
[ 48.325618][ T411] __kasan_kmalloc+0x96/0xb0
[ 48.327345][ T411] __kmalloc_node_track_caller_noprof+0x24e/0x4f0
[ 48.328428][ T411] kmemdup_noprof+0x31/0x80
[ 48.329312][ T411] platform_device_add_data+0x49/0x130
[ 48.330217][ T411] dummy_hcd_init+0x779/0x1230
[ 48.330980][ T411] do_one_initcall+0x1e8/0x6a0
[ 48.331831][ T411] do_initcall_level+0x174/0x2e5
[ 48.332688][ T411] do_initcalls+0x7e/0x160
[ 48.333541][ T411] do_basic_setup+0x95/0xb0
[ 48.334375][ T411] kernel_init_freeable+0x2b1/0x400
[ 48.335317][ T411] kernel_init+0x21/0x1e0
[ 48.336046][ T411] ret_from_fork+0x67/0xa0
[ 48.336785][ T411] ret_from_fork_asm+0x1a/0x30
[ 48.337585][ T411]
[ 48.337978][ T411] The buggy address belongs to the object at ffff88810bae0f00
[ 48.337978][ T411] which belongs to the cache kmalloc-8 of size 8
[ 48.340039][ T411] The buggy address is located 12 bytes to the right of
[ 48.340039][ T411] allocated 8-byte region [ffff88810bae0f00, ffff88810bae0f08)
[ 48.342195][ T411]
[ 48.342602][ T411] The buggy address belongs to the physical page:
[ 48.343623][ T411] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810bae0960 pfn:0x10bae0
[ 48.345222][ T411] anon flags: 0x4000000000000000(zone=1)
[ 48.346244][ T411] page_type: f5(slab)
[ 48.346892][ T411] raw: 4000000000000000 ffff888100041500 0000000000000000 dead000000000001
[ 48.348334][ T411] raw: ffff88810bae0960 0000000000800076 00000001f5000000 0000000000000000
[ 48.349729][ T411] page dumped because: kasan: bad access detected
[ 48.350751][ T411] page_owner tracks the page as allocated
[ 48.351635][ T411] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 3083206929, free_ts 0
[ 48.354432][ T411] post_alloc_hook+0x37d/0x3b0
[ 48.355227][ T411] prep_new_page+0x2d/0x180
[ 48.355994][ T411] get_page_from_freelist+0x4aea/0x4ba0
[ 48.356850][ T411] __alloc_pages_noprof+0x35a/0x7e0
[ 48.357748][ T411] alloc_slab_page+0x6b/0x1e0
[ 48.358538][ T411] allocate_slab+0x69/0x430
[ 48.359266][ T411] ___slab_alloc+0x591/0x8c0
[ 48.360070][ T411] __kmalloc_node_track_caller_noprof+0x2e3/0x4f0
[ 48.361121][ T411] kstrdup+0x4d/0x130
[ 48.361757][ T411] kstrdup_const+0x45/0x60
[ 48.362523][ T411] __kernfs_new_node+0xaa/0x740
[ 48.363395][ T411] kernfs_new_node+0x154/0x280
[ 48.364124][ T411] kernfs_create_dir_ns+0x4b/0x130
[ 48.364999][ T411] sysfs_create_dir_ns+0x127/0x210
[ 48.365789][ T411] kobject_add_internal+0x71f/0xc20
[ 48.366682][ T411] kobject_init_and_add+0x12c/0x1a0
[ 48.367581][ T411] page_owner free stack trace missing
[ 48.368561][ T411]
[ 48.369075][ T411] Memory state around the buggy address:
[ 48.370071][ T411] ffff88810bae0e00: 05 fc fc fc 05 fc fc fc 05 fc fc fc 00 fc fc fc
[ 48.371380][ T411] ffff88810bae0e80: 06 fc fc fc 00 fc fc fc 00 fc fc fc 00 fc fc fc
[ 48.372727][ T411] >ffff88810bae0f00: 00 fc fc fc 05 fc fc fc 00 fc fc fc 00 fc fc fc
[ 48.373988][ T411] ^
[ 48.374762][ T411] ffff88810bae0f80: 05 fc fc fc 00 fc fc fc 05 fc fc fc 00 fc fc fc
[ 48.376052][ T411] ffff88810bae1000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 48.377331][ T411] ==================================================================
[ 48.390620][ T411] Disabling lock debugging due to kernel taint
[ 48.391979][ T411] Oops: general protection fault, probably for non-canonical address 0xdffffc000605af0e: 0000 [#1] PREEMPT SMP KASAN PTI
[ 48.393931][ T411] KASAN: probably user-memory-access in range [0x00000000302d7870-0x00000000302d7877]
[ 48.395454][ T411] CPU: 0 UID: 0 PID: 411 Comm: syz.0.29 Tainted: G S B syzkaller #0 119f1c0cd44458c2ddc7f806e6d4d2dd11ae7dae
[ 48.397474][ T411] Tainted: [S]=CPU_OUT_OF_SPEC, [B]=BAD_PAGE
[ 48.398436][ T411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 48.400086][ T411] RIP: 0010:regulator_register+0x929/0x19e0
[ 48.401109][ T411] Code: a0 04 00 00 48 c7 c6 c0 aa 55 81 ba 00 00 20 00 31 c9 45 31 c0 e8 d7 ee 5c fe 4c 8b 7d b8 4d 85 ff 74 24 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 09 cd c6 fe 4d 8b 3f 4d 85 ff 74 0e
[ 48.404142][ T411] RSP: 0018:ffffc9000da57858 EFLAGS: 00010203
[ 48.405142][ T411] RAX: 000000000605af0e RBX: dffffc0000000000 RCX: 0000000000080000
[ 48.406326][ T411] RDX: ffffc90001671000 RSI: 000000000002e9c7 RDI: 000000000002e9c8
[ 48.407637][ T411] RBP: ffffc9000da57900 R08: 0000000000000000 R09: 0000000000000000
[ 48.408874][ T411] R10: ffff8881155b0080 R11: ffffed1022ab6012 R12: ffffc9000da57900
[ 48.410192][ T411] R13: ffff8881155b00e8 R14: ffff8881155b0000 R15: 00000000302d7874
[ 48.411410][ T411] FS: 00007f7e07fb26c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 48.412796][ T411] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 48.413861][ T411] CR2: 00007f7e071eb7c0 CR3: 0000000114c0e000 CR4: 00000000003526b0
[ 48.415120][ T411] Call Trace:
[ 48.415691][ T411]
[ 48.416246][ T411] devm_regulator_register+0x55/0xc0
[ 48.417160][ T411] reg_fixed_voltage_probe+0x8f1/0xd90
[ 48.418014][ T411] ? __cfi_reg_fixed_voltage_probe+0x10/0x10
[ 48.418990][ T411] ? kernfs_put+0x314/0x360
[ 48.419743][ T411] ? is_acpi_device_node+0x2a/0x70
[ 48.420633][ T411] ? acpi_dev_pm_attach+0xff/0x2e0
[ 48.421524][ T411] platform_probe+0x17a/0x200
[ 48.422314][ T411] ? __cfi_platform_probe+0x10/0x10
[ 48.423258][ T411] really_probe+0x2e1/0x8b0
[ 48.424027][ T411] __driver_probe_device+0x193/0x280
[ 48.424923][ T411] device_driver_attach+0xdb/0x1f0
[ 48.425736][ T411] bind_store+0x1dc/0x230
[ 48.426445][ T411] ? __cfi_bind_store+0x10/0x10
[ 48.427274][ T411] drv_attr_store+0x91/0xb0
[ 48.428008][ T411] ? __cfi_drv_attr_store+0x10/0x10
[ 48.428862][ T411] sysfs_kf_write+0x13e/0x160
[ 48.429611][ T411] ? __cfi_sysfs_kf_write+0x10/0x10
[ 48.430498][ T411] kernfs_fop_write_iter+0x319/0x510
[ 48.431348][ T411] vfs_write+0x75f/0xfd0
[ 48.432050][ T411] ? __cfi_vfs_write+0x10/0x10
[ 48.432844][ T411] ? __cfi_mutex_lock+0x10/0x10
[ 48.433681][ T411] ksys_write+0x145/0x260
[ 48.434405][ T411] ? xfd_validate_state+0x68/0x140
[ 48.435277][ T411] ? __cfi_ksys_write+0x10/0x10
[ 48.436091][ T411] ? __kasan_check_write+0x18/0x20
[ 48.436982][ T411] ? fpregs_restore_userregs+0x11c/0x260
[ 48.437999][ T411] __x64_sys_write+0x7f/0x90
[ 48.438797][ T411] x64_sys_call+0x271c/0x2ee0
[ 48.439571][ T411] do_syscall_64+0x57/0xf0
[ 48.440329][ T411] ? clear_bhb_loop+0x50/0xa0
[ 48.441074][ T411] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 48.442055][ T411] RIP: 0033:0x7f7e0719e0d9
[ 48.442782][ T411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 48.445720][ T411] RSP: 002b:00007f7e07fb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 48.447048][ T411] RAX: ffffffffffffffda RBX: 00007f7e07425fa0 RCX: 00007f7e0719e0d9
[ 48.448327][ T411] RDX: 000000000000000b RSI: 0000200000000700 RDI: 0000000000000003
[ 48.449768][ T411] RBP: 00007f7e07235024 R08: 0000000000000000 R09: 0000000000000000
[ 48.451118][ T411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 48.452361][ T411] R13: 00007f7e07426038 R14: 00007f7e07425fa0 R15: 00007ffd17d0f5b8
[ 48.453568][ T411]
[ 48.454145][ T411] Modules linked in:
[ 48.454889][ T411] ---[ end trace 0000000000000000 ]---
[ 48.455847][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 48.461670][ T411] RIP: 0010:regulator_register+0x929/0x19e0
[ 48.462727][ T411] Code: a0 04 00 00 48 c7 c6 c0 aa 55 81 ba 00 00 20 00 31 c9 45 31 c0 e8 d7 ee 5c fe 4c 8b 7d b8 4d 85 ff 74 24 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 09 cd c6 fe 4d 8b 3f 4d 85 ff 74 0e
[ 48.467197][ T411] RSP: 0018:ffffc9000da57858 EFLAGS: 00010203
[ 48.468283][ T411] RAX: 000000000605af0e RBX: dffffc0000000000 RCX: 0000000000080000
[ 48.469578][ T411] RDX: ffffc90001671000 RSI: 000000000002e9c7 RDI: 000000000002e9c8
[ 48.471257][ T411] RBP: ffffc9000da57900 R08: 0000000000000000 R09: 0000000000000000
[ 48.472617][ T411] R10: ffff8881155b0080 R11: ffffed1022ab6012 R12: ffffc9000da57900
[ 48.474064][ T411] R13: ffff8881155b00e8 R14: ffff8881155b0000 R15: 00000000302d7874
[ 48.475353][ T411] FS: 00007f7e07fb26c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 48.476842][ T411] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 48.478039][ T411] CR2: 00007f7e071eb7c0 CR3: 0000000114c0e000 CR4: 00000000003526b0
[ 48.479452][ T411] Kernel panic - not syncing: Fatal exception
[ 48.481133][ T411] Kernel Offset: disabled
[ 48.481784][ T411] Rebooting in 86400 seconds..