last executing test programs: 2.547888815s ago: executing program 2 (id=3): r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="380000006d00190c00"/20, @ANYRES32=0x0, @ANYBLOB="0000fdffffff0000040034"], 0x38}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x0, 0x8d, &(0x7f00000000c0)='cgroup\x00\x8e9\x91\x9fNR(Ta-|\xd4\x1b\a\x00\x00\x00\x00\x00\x00\x00\xc7\xf8a\xd3u\x99h\x87\xbdn\aW\x95/\xb0v\x05\xce{c(\xf4m\xb6.\t\x83\xc5\x97\xd8\x85\xc0;\x91\xd7#\x02\xc9`\b\x19\xda\x00\x00\x00\xdah\x94_\xa9#q\xe5\xe6}G\xdaZ\x8a%S\x97\xdb#\xc2\x92\x0e\xcd\x17\x04#t\xcd\xbf\xac{\x00\xd4;\x18\xe0\xb7i\x1d\x86r3\xef.\x93\xfc\xe0\x95\xa4~XFmOU\xb38a\xfd9\xe8\xd0\x90\a\x97}]\xa3'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800003f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0x700, 0x12) 2.470473582s ago: executing program 3 (id=4): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000819e0ee1d6e6d4287e9ed0defc7a58d7e8aa2c649a95543f8ce8e8631430c7299f028d28a6aae179659813382afcfbea72d57e96c10393ad22b2dd79f68c2d11aa4dbf121d0b35e4bbcd18f737eaa49921574a638597318bfd715eb1584e1016c7fd37381a62d2b7a3dc05a34d50dbb6018f784d5a666bd23185f30c938c38888df431ad048318dac1a951abc213db3697cbca43b23732"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x0, 0x2}) 1.981450035s ago: executing program 4 (id=5): r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="380000006d00190c00"/20, @ANYRES32=0x0, @ANYBLOB="0000fdffffff00000400348014000300"], 0x38}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x0, 0x8d, &(0x7f00000000c0)='cgroup\x00\x8e9\x91\x9fNR(Ta-|\xd4\x1b\a\x00\x00\x00\x00\x00\x00\x00\xc7\xf8a\xd3u\x99h\x87\xbdn\aW\x95/\xb0v\x05\xce{c(\xf4m\xb6.\t\x83\xc5\x97\xd8\x85\xc0;\x91\xd7#\x02\xc9`\b\x19\xda\x00\x00\x00\xdah\x94_\xa9#q\xe5\xe6}G\xdaZ\x8a%S\x97\xdb#\xc2\x92\x0e\xcd\x17\x04#t\xcd\xbf\xac{\x00\xd4;\x18\xe0\xb7i\x1d\x86r3\xef.\x93\xfc\xe0\x95\xa4~XFmOU\xb38a\xfd9\xe8\xd0\x90\a\x97}]\xa3'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800003f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0x700, 0x12) 1.872603975s ago: executing program 0 (id=1): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02000000100000000000000000000000030000000000000002000000e000000200000000000000000300000000000000020000007f000001000000000000000908001200000000000000000000005d80e7e92ad9febf00000000000000000000fe880000000000000000008e646302b1"], 0x80}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r4}, 0x38) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f00000007c0)={[{@noauto_da_alloc}, {@acl}, {@test_dummy_encryption}, {@resgid}, {@jqfmt_vfsv0}, {@mblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x46f, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) setxattr$incfs_metadata(&(0x7f0000001780)='./file1\x00', &(0x7f00000017c0), &(0x7f0000001800)="6fc7612750e2de413ceff05162fdf37cc15289e0b292308c85c7d2accbe401c5217332030662263a62a97ca3291e32491ada5fd3237be307cf", 0xfffe, 0x0) chdir(&(0x7f0000000380)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="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", 0xa94}], 0x1}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.785515392s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000f78500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000d1088500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r6, 0x9, &(0x7f00000007c0)={0x0, 0x0, 0xffffffc0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r8, &(0x7f0000000240)={r7, 0xffffffffffffffff, 0x401}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x2, r6}) write$uinput_user_dev(r5, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63c2f731], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200]}, 0x45c) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)=0x400) ioctl$UI_DEV_CREATE(r5, 0x5501) r9 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$EVIOCGRAB(r9, 0x40044590, &(0x7f0000000040)) 1.647700144s ago: executing program 2 (id=6): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) fstat(r2, &(0x7f0000000a40)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$mouse(0x0, 0xffff, 0x608200) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x0, 0x0) fchown(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 829.55µs ago: executing program 3 (id=7): r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="380000006d00190c00"/20, @ANYBLOB="0000fdffffff000004003480140003007665746831"], 0x38}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x0, 0x8d, &(0x7f00000000c0)='cgroup\x00\x8e9\x91\x9fNR(Ta-|\xd4\x1b\a\x00\x00\x00\x00\x00\x00\x00\xc7\xf8a\xd3u\x99h\x87\xbdn\aW\x95/\xb0v\x05\xce{c(\xf4m\xb6.\t\x83\xc5\x97\xd8\x85\xc0;\x91\xd7#\x02\xc9`\b\x19\xda\x00\x00\x00\xdah\x94_\xa9#q\xe5\xe6}G\xdaZ\x8a%S\x97\xdb#\xc2\x92\x0e\xcd\x17\x04#t\xcd\xbf\xac{\x00\xd4;\x18\xe0\xb7i\x1d\x86r3\xef.\x93\xfc\xe0\x95\xa4~XFmOU\xb38a\xfd9\xe8\xd0\x90\a\x97}]\xa3'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800003f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0x700, 0x12) 0s ago: executing program 4 (id=8): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000005c0)}, 0x1a) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r3}, 0xc) r4 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r4, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. [ 26.229217][ T28] audit: type=1400 audit(1726219230.974:66): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.230187][ T287] cgroup: Unknown subsys name 'net' [ 26.232312][ T28] audit: type=1400 audit(1726219230.974:67): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.235971][ T28] audit: type=1400 audit(1726219230.974:68): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.236136][ T287] cgroup: Unknown subsys name 'devices' [ 26.358085][ T287] cgroup: Unknown subsys name 'hugetlb' [ 26.363483][ T287] cgroup: Unknown subsys name 'rlimit' [ 26.492128][ T28] audit: type=1400 audit(1726219231.234:69): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.506695][ T290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.515139][ T28] audit: type=1400 audit(1726219231.234:70): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.547979][ T28] audit: type=1400 audit(1726219231.234:71): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.570905][ T28] audit: type=1400 audit(1726219231.264:72): avc: denied { relabelto } for pid=290 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.589524][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.596073][ T28] audit: type=1400 audit(1726219231.264:73): avc: denied { write } for pid=290 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.629939][ T28] audit: type=1400 audit(1726219231.334:74): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.655221][ T28] audit: type=1400 audit(1726219231.334:75): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.908763][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.915624][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.923071][ T297] device bridge_slave_0 entered promiscuous mode [ 27.929591][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.936435][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.943674][ T300] device bridge_slave_0 entered promiscuous mode [ 27.951403][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.958251][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.965484][ T300] device bridge_slave_1 entered promiscuous mode [ 27.977071][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.983995][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.991261][ T297] device bridge_slave_1 entered promiscuous mode [ 28.017139][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.023986][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.031311][ T298] device bridge_slave_0 entered promiscuous mode [ 28.047948][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.054789][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.062051][ T298] device bridge_slave_1 entered promiscuous mode [ 28.087972][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.094818][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.102073][ T299] device bridge_slave_0 entered promiscuous mode [ 28.108693][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.115529][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.122826][ T299] device bridge_slave_1 entered promiscuous mode [ 28.203799][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.210849][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.217998][ T301] device bridge_slave_0 entered promiscuous mode [ 28.235989][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.242950][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.250068][ T301] device bridge_slave_1 entered promiscuous mode [ 28.383538][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.390405][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.397500][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.404278][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.413546][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.420414][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.427508][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.434275][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.444261][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.451120][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.458207][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.464987][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.473746][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.480618][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.487705][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.494470][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.506488][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.513334][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.520470][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.527239][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.589063][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.597176][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.604203][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.611591][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.618711][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.625691][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.632783][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.639841][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.646912][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.654270][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.661341][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.669588][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.676905][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.702048][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.709719][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.718008][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.725956][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.732834][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.740173][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.747871][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.755046][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.763078][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.769922][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.777123][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.785031][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.791782][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.799041][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.807072][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.813901][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.821119][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.829093][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.835911][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.868998][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.877188][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.884018][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.891620][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.899627][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.906468][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.913830][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.921838][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.928666][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.935838][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.943816][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.950651][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.958317][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.966111][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.973899][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.981914][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.989777][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.997574][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.005325][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.013159][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.021241][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.029222][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.036046][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.043271][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.051120][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.069083][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.077099][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.084917][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.092888][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.106733][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.114644][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.123055][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.131004][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.138810][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.146991][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.162675][ T301] device veth0_vlan entered promiscuous mode [ 29.171254][ T297] device veth0_vlan entered promiscuous mode [ 29.178069][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.185905][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.193363][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.200638][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.208730][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.216881][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.224476][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.232311][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.239616][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.256364][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.264294][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.271998][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.279656][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.287760][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.302959][ T300] device veth0_vlan entered promiscuous mode [ 29.314094][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.322387][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.330634][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.338333][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.345995][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.354322][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.362655][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.372149][ T301] device veth1_macvtap entered promiscuous mode [ 29.383427][ T299] device veth0_vlan entered promiscuous mode [ 29.389774][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.397101][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.404258][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.417327][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.425437][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.433990][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.441998][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.454434][ T298] device veth0_vlan entered promiscuous mode [ 29.462954][ T300] device veth1_macvtap entered promiscuous mode [ 29.469954][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.477305][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.484475][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.492621][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.500887][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.508954][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.516952][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.532410][ T299] device veth1_macvtap entered promiscuous mode [ 29.541281][ T297] device veth1_macvtap entered promiscuous mode [ 29.550251][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.567661][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.575695][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.583937][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.592381][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.607026][ T298] device veth1_macvtap entered promiscuous mode [ 29.662496][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.670768][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.708304][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.716668][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.724958][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.733143][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.741154][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.749336][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.757352][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.998877][ T328] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 30.251284][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.256829][ T338] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.263439][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.283193][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.291334][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.353550][ T338] loop0: detected capacity change from 0 to 512 [ 30.380413][ T338] ======================================================= [ 30.380413][ T338] WARNING: The mand mount option has been deprecated and [ 30.380413][ T338] and is ignored by this kernel. Remove the mand [ 30.380413][ T338] option from the mount to silence this warning. [ 30.380413][ T338] ======================================================= [ 30.446083][ T338] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.453063][ T338] EXT4-fs (loop0): Test dummy encryption mode enabled [ 30.473856][ T338] EXT4-fs error (device loop0): __ext4_iget:5046: inode #11: block 1: comm syz.0.1: invalid block [ 31.221737][ T350] input: syz0 as /devices/virtual/input/input4 [ 32.082747][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 32.082956][ T28] audit: type=1400 audit(1726219235.944:109): avc: denied { prog_run } for pid=340 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.092381][ T356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 32.118613][ T338] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1: couldn't read orphan inode 11 (err -117) [ 32.128935][ T353] loop2: detected capacity change from 0 to 512 [ 32.173776][ T338] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 32.182188][ T338] general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] PREEMPT SMP KASAN [ 32.193727][ T338] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 32.201966][ T338] CPU: 0 PID: 338 Comm: syz.0.1 Not tainted 6.1.93-syzkaller-00007-g6e5b92a6a151 #0 [ 32.211166][ T338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 32.221059][ T338] RIP: 0010:__ext4_journal_get_write_access+0xb0/0x690 [ 32.222576][ T353] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 32.227739][ T338] Code: 88 ff 49 8d 5e 30 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 ce 0b d0 ff 48 8b 1b 48 83 c3 38 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 b1 0b d0 ff 4c 8b 23 4d 85 e4 4c [ 32.227761][ T338] RSP: 0018:ffffc9000b3af6e0 EFLAGS: 00010202 [ 32.227778][ T338] RAX: 0000000000000007 RBX: 0000000000000038 RCX: 0000000000040000 [ 32.227791][ T338] RDX: ffffc9000131a000 RSI: 0000000000008b60 RDI: 0000000000008b61 [ 32.227802][ T338] RBP: ffffc9000b3af7b0 R08: ffff88811d04cb28 R09: 0000000000000001 [ 32.227815][ T338] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 32.227825][ T338] R13: dffffc0000000000 R14: ffff88811d04cb28 R15: 0000000000000001 [ 32.227836][ T338] FS: 00007f15751036c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.227849][ T338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.227860][ T338] CR2: 00007f020b5932a9 CR3: 000000012eaf9000 CR4: 00000000003526b0 [ 32.227875][ T338] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.227886][ T338] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.227902][ T338] Call Trace: [ 32.227907][ T338] [ 32.227914][ T338] ? __die_body+0x62/0xb0 [ 32.227938][ T338] ? die_addr+0x9f/0xd0 [ 32.227957][ T338] ? exc_general_protection+0x317/0x4c0 [ 32.237004][ T353] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 32.256052][ T338] ? asm_exc_general_protection+0x27/0x30 [ 32.256082][ T338] ? __ext4_journal_get_write_access+0xb0/0x690 [ 32.256108][ T338] ? __ext4_journal_ensure_credits+0x470/0x470 [ 32.293290][ T28] audit: type=1400 audit(1726219235.944:110): avc: denied { read write } for pid=340 comm="syz.1.2" name="uinput" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.293367][ T338] ? __kasan_check_read+0x11/0x20 [ 32.301690][ T28] audit: type=1400 audit(1726219235.944:111): avc: denied { open } for pid=340 comm="syz.1.2" path="/dev/uinput" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.309946][ T338] ext4_update_superblocks_fn+0x2dc/0x1300 [ 32.309980][ T338] ? ext4_update_superblocks_fn+0x1300/0x1300 [ 32.310002][ T338] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 32.310020][ T338] ? ext4_update_overhead+0x170/0x170 [ 32.310042][ T338] ? ext4_superblock_csum_set+0x162/0x3f0 [ 32.310063][ T338] ext4_update_overhead+0x143/0x170 [ 32.310088][ T338] ext4_fill_super+0x309b/0x8460 [ 32.310116][ T338] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 32.310140][ T338] ? snprintf+0xd6/0x120 [ 32.317272][ T28] audit: type=1400 audit(1726219235.964:112): avc: denied { ioctl } for pid=340 comm="syz.1.2" path="/dev/uinput" dev="devtmpfs" ino=170 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.324412][ T338] ? set_blocksize+0x1cb/0x360 [ 32.332459][ T28] audit: type=1400 audit(1726219236.004:113): avc: denied { read } for pid=340 comm="syz.1.2" name="event3" dev="devtmpfs" ino=372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.340039][ T338] ? sb_set_blocksize+0xa8/0xf0 [ 32.340062][ T338] get_tree_bdev+0x440/0x680 [ 32.340083][ T338] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 32.343595][ T28] audit: type=1400 audit(1726219236.004:114): avc: denied { open } for pid=340 comm="syz.1.2" path="/dev/input/event3" dev="devtmpfs" ino=372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.345935][ T338] ext4_get_tree+0x1c/0x20 [ 32.418432][ T28] audit: type=1400 audit(1726219236.034:115): avc: denied { ioctl } for pid=340 comm="syz.1.2" path="/dev/input/event3" dev="devtmpfs" ino=372 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.437777][ T338] vfs_get_tree+0x88/0x290 [ 32.437806][ T338] do_new_mount+0x2ba/0xb30 [ 32.437823][ T338] ? path_mount+0x196/0x1070 [ 32.437839][ T338] ? do_move_mount_old+0x160/0x160 [ 32.437856][ T338] ? security_capable+0x87/0xb0 [ 32.444097][ T28] audit: type=1400 audit(1726219236.834:116): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 32.449318][ T338] ? ns_capable+0x89/0xe0 [ 32.449347][ T338] path_mount+0x671/0x1070 [ 32.455183][ T28] audit: type=1400 audit(1726219236.834:117): avc: denied { write } for pid=354 comm="syz.4.8" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.460165][ T338] ? user_path_at_empty+0x14e/0x1a0 [ 32.460189][ T338] __se_sys_mount+0x2c4/0x3b0 [ 32.460207][ T338] ? __x64_sys_mount+0xd0/0xd0 [ 32.466118][ T28] audit: type=1400 audit(1726219236.884:118): avc: denied { mounton } for pid=344 comm="syz.2.6" path="/1/file0" dev="tmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.470755][ T338] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 32.470780][ T338] __x64_sys_mount+0xbf/0xd0 [ 32.470798][ T338] x64_sys_call+0x49d/0x9a0 [ 32.470818][ T338] do_syscall_64+0x3b/0xb0 [ 32.470832][ T338] ? clear_bhb_loop+0x55/0xb0 [ 32.470852][ T338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.470871][ T338] RIP: 0033:0x7f157437f69a [ 32.470900][ T338] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.470914][ T338] RSP: 002b:00007f1575102e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 32.775598][ T338] RAX: ffffffffffffffda RBX: 00007f1575102ef0 RCX: 00007f157437f69a [ 32.783496][ T338] RDX: 0000000020000ac0 RSI: 0000000020000180 RDI: 00007f1575102eb0 [ 32.791394][ T338] RBP: 0000000020000ac0 R08: 00007f1575102ef0 R09: 0000000003810744 [ 32.799205][ T338] R10: 0000000003810744 R11: 0000000000000246 R12: 0000000020000180 [ 32.807018][ T338] R13: 00007f1575102eb0 R14: 000000000000046f R15: 00000000200007c0 [ 32.814835][ T338] [ 32.817703][ T338] Modules linked in: [ 32.884966][ T332] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 32.897660][ T338] ---[ end trace 0000000000000000 ]--- [ 32.902973][ T338] RIP: 0010:__ext4_journal_get_write_access+0xb0/0x690 [ 32.911057][ T338] Code: 88 ff 49 8d 5e 30 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 ce 0b d0 ff 48 8b 1b 48 83 c3 38 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 b1 0b d0 ff 4c 8b 23 4d 85 e4 4c [ 33.032435][ T338] RSP: 0018:ffffc9000b3af6e0 EFLAGS: 00010202 [ 33.039332][ T338] RAX: 0000000000000007 RBX: 0000000000000038 RCX: 0000000000040000 [ 33.048759][ T338] RDX: ffffc9000131a000 RSI: 0000000000008b60 RDI: 0000000000008b61 [ 33.071876][ T368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 33.178844][ T364] syz.2.6 (364) used greatest stack depth: 20352 bytes left [ 33.189316][ T338] RBP: ffffc9000b3af7b0 R08: ffff88811d04cb28 R09: 0000000000000001 [ 33.197281][ T338] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 33.226534][ T338] R13: dffffc0000000000 R14: ffff88811d04cb28 R15: 0000000000000001 [ 33.236797][ T338] FS: 00007f15751036c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 33.245661][ T338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.252311][ T338] CR2: 00007f0369d08178 CR3: 000000012eaf9000 CR4: 00000000003526b0 [ 33.270589][ T338] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.281977][ T338] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.291262][ T338] Kernel panic - not syncing: Fatal exception [ 33.297320][ T338] Kernel Offset: disabled [ 33.301444][ T338] Rebooting in 86400 seconds..