last executing test programs: 11.699199191s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000001800), &(0x7f0000001840)={'fscrypt:', @desc1}, &(0x7f0000001880)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1", 0x14}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x6, r2, 0xffffffffffffffff, 0x4) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x20000000000005, 0x1004}) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1cd042, 0x224) io_setup(0x20fe, &(0x7f00000001c0)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./trace\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)=""/250, 0xfa}, {&(0x7f0000000640)=""/79, 0x4f}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001700)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90}, 0x40000000) mount(0x0, &(0x7f0000000440)='./trace\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r6, 0x0, 0xff0f) io_submit(r4, 0x3, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000280)='p', 0x8200, 0x8800000}]) lsetxattr(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@random={'os2.', '/}#-@]-*//\'/${.&{${\x00'}, &(0x7f0000000340)='}#$\x00', 0x4, 0x1) 10.690406365s ago: executing program 2 (id=6): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0xa, 0x4000, 0x0, 0x1}, 'syz1\x00', 0x26}) ioctl$UI_DEV_CREATE(r0, 0x5501) 10.569225488s ago: executing program 2 (id=7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"568139cb5050a7a31ebfc4330c2bf68f86101d9a301cbe14b15f4f23031ceb319db01a783479d6b9a1201fb1cc7235f57f425131b1d59b14c7588e103ad23d61fc6b05b60536a1611da4d3a6a06d308650343e59d307e34d8c2ec3ef05629a47f994dd2e9f8b9ce05b338ae7db5267bc4082bd43ca93b78947a7c79e82df466d4fee2b222f1ebde976d2272a4f52329796330ee917cc4f5b3ec45ac1ecdaaf3dffe03c40b7c209e44cfeb08aad00e1b48da4289228d7d82d4f6a661942ace64f115d3cc6ac80f74420c390d89e7ab2133567aa41047d775e333184cc0b468ec5eb9bc3cb0fa00516e5452bf32a9e760f07efd5a5e5eb37eaff28ef92bb59498369808bdd310a4a95a5414a8ff450411ff67d3167eec8372455a19c0c5a608adfebded6974660fd85308a07860e16f62963da37448d6e1218f2092fb3d1662804623b63a07f3e5e881df9a5ac27ce3f1519003118aa6170ff423eb292dc70147bde37963f72d0642660e7107753167886fc10e108631a9ea4d6752145b8646187ba7e152b6bcbcedd6b83fb9435d5c8e8d5d25a3f173745eab94a4a296572d459a50d622c8769dc57a7cdf7efe9f259dc36f538d1836362f1bcb2c4ebceae7e3655d5e98ba481906f284bd03710005994eca8cbf8302dc8e2c21736b697b5f868e8af96fa8bbb1ae56571616a70ce05970d1e4142f303f7586fd2fc6f0ee3dce1db6524dd6aa28faab046e074df38430a49e8a6dde71028f16539744b7867e19c856e670e8b799d52da435bb07beea683a52e4d13602e7d4675a798a12c898ad5b00caa34313ff8fb6c3407cf815eca9795cffd9a24959653cc816851048ebf0772bebdd3ff9b8cfbd2c65c30e41586b00a14943e4815361789158139d440c4f627edb8ed59e1ca0bb0c60106e09635fa9335677337c554db885f75b8f9fffffff1ea9796f8258de36636346ab768856bbdfc51843a53701423d75c1f43be24469aa03d366bbfb81218b31e5c0ad716efea52175c2fa78317cafb16ee173eb5e9428509ca4c8f9bf798adc7da1758a9c0334e44200c0578495ff805fce84456205caa70f0976a8603f84cb542d0df1416602321c587556785af525ddf5548b4f51113c52a7a17042faf6c8c02d8d1835e0f67f60ab392c20fc12188db029e45bb77cfccc423671d52ec5a92d08c2bb27a676b66f3b89ac084d99e3f516426a015268a1f3fb91b13c8baba49a0765a305c13cd1f47b3ea7a6393182759b614a08d36192a8b68abef6e5c16849452c74af3a9f854e1f2bc1c2eac2f055f8ffd8fdaa6bb04a68850c585f433c0e6b8dba1401fce5aab11d75d2323d8079891175096e31013ca0a3763511c86f2fbc31a33458c52059ebe253dcd3e837fed39765a11842028df450479dd56e1325cd8d088ff12a8f7dd23f200"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x9ce, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x89}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x4, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000005c0)={0x1, 0x0, [{0x89a, 0x0, 0x7}]}) 9.630800465s ago: executing program 32 (id=7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x9ce, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x89}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x4, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000005c0)={0x1, 0x0, [{0x89a, 0x0, 0x7}]}) 7.485998836s ago: executing program 1 (id=22): r0 = syz_usb_connect(0x2, 0x5e, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x14200, 0x190) write(r1, &(0x7f00000001c0)='offline', 0x7) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)={0x40, 0x2, 0x19, {0x19, 0x10, "d8e87b110b521209c027f37b3d47770dd6cb674ca9f7a6"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}, &(0x7f0000000300)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xe, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x8}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x27, 0x18, 0x4, 0x9, "c7b4abd9", "862eabd0"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x60, 0xf4, 0x4f, 0xe, 0x4, 0x9}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000400)={0x0, 0x30, 0x88, "268c6d992b8015a8217dd2e9504812e8200d8448bd92927587209f12fa84b8a214343fad0006830366d41cf18703d3db9b2bb6fdf76cd6ea82f7a4a7c42341fd4c834f63d855f7bb7251c1713f2718464fa2e350f430edacdef565471d7bb4467980d3b6895c6bf23f6bfdf65df45cc9d4e37ca29c6c18413c8e2ae688a2e985600b48eb98d5e85a"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xb3}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x100, 0x8, [0xf0]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000640)={0x40, 0xb, 0x2, "1bbc"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @random="ad6248a6a2f5"}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "49e1"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0xff64}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0xa3}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x81}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x8) r2 = getpid() mknod$loop(&(0x7f0000000c40)='./sys\x00', 0x6000, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000b40)=0x5) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000bc0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000c40), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000c80), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000cc0)={0x20000014}) epoll_wait(r3, &(0x7f0000000d00)=[{}], 0x1, 0x400) 5.934018247s ago: executing program 0 (id=30): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') read$FUSE(r0, &(0x7f0000006e00)={0x2020}, 0x2020) ioctl$TCSBRK(r0, 0x5409, 0x2) 5.746540037s ago: executing program 0 (id=32): syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x0) 3.87383532s ago: executing program 1 (id=46): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1101, 0x2000000004}) poll(&(0x7f0000000000)=[{r0}, {r0, 0x17}], 0x2, 0x1ff) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) io_setup(0x66, &(0x7f00000001c0)=0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r2, 0x20000080, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xe, r3, &(0x7f0000000300)='-5', 0x12, 0x0, 0x0, 0x4}]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1101, 0x2000000004}) (async) poll(&(0x7f0000000000)=[{r0}, {r0, 0x17}], 0x2, 0x1ff) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) io_setup(0x66, &(0x7f00000001c0)) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) io_submit(r2, 0x20000080, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xe, r3, &(0x7f0000000300)='-5', 0x12, 0x0, 0x0, 0x4}]) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) (async) 3.149496055s ago: executing program 1 (id=48): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x0) r0 = inotify_init1(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000002c0)=0x2, 0x4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x200fbff) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000180)) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0xa4000061) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101801, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000001c0), &(0x7f0000000200)={'U-', 0x2}, 0x16, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xc100092e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 3.132809786s ago: executing program 1 (id=49): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="fc0000001900010000000000000000000000000000000000000000000000000000000000000000000000ffffe000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000050000000000000000000000000000009bffffff7f000000000000000000000000020000000000000000000000000000000000000000000000feffffffffffffffffffffffffffffff000000000000000000000000fffff000000000000001000103"], 0xfc}}, 0x0) 3.107767519s ago: executing program 1 (id=50): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, &(0x7f0000000040)={0x1, 0x7fff}) syz_usb_connect$cdc_ecm(0x2, 0x80, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x1, 0x1, 0x81, 0x90, 0x4, "", [{{0x9, 0x4, 0x0, 0x6, 0xff, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x53c}, {0xd, 0x24, 0xf, 0x1, 0xfde3, 0x5af, 0x2, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @mdlm={0x15, 0x24, 0x12, 0xfc01}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x10, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0x2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x6, 0x2}}}}}]}}]}}, 0x0) 2.621312119s ago: executing program 0 (id=51): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = timerfd_create(0x1, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/179, 0xb3}], 0x1) timerfd_settime(r3, 0x0, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0xffffffffffffffff) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/38, 0x26}, {0x0}, {0x0}], 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, r5, 0x200, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004000) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032dbd7000fbdbdf252700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900010000000a00000006003600fb5400000a00340002020202020200000af5b84ce723440d7d50000004005f000600360000010000"], 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x14, r6, 0x421, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40805}, 0x400d4) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) 2.459543006s ago: executing program 0 (id=52): socket(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x8c, 0x53, 0x3e, 0x8, 0x403, 0xd738, 0x174, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7, 0x8, 0x40, 0x7f, "", [{{0x9, 0x4, 0x57, 0x9, 0x2, 0x6c, 0x59, 0xb2, 0x3, [], [{{0x9, 0x5, 0x6, 0xc, 0x3ff, 0x0, 0x55}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x2, 0x38, 0x6}}]}}]}}]}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c5, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000003280)={0x0, 0xfffffffe, 0x800, 0xfffffffe, 0x2f6, 0x0, r2}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x40, 0x3, 0x3aa, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6c, 0x0, 0x40000003, 0xd5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x1, 0x19f}}], 0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x8c, 0x53, 0x3e, 0x8, 0x403, 0xd738, 0x174, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7, 0x8, 0x40, 0x7f, "", [{{0x9, 0x4, 0x57, 0x9, 0x2, 0x6c, 0x59, 0xb2, 0x3, [], [{{0x9, 0x5, 0x6, 0xc, 0x3ff, 0x0, 0x55}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x2, 0x38, 0x6}}]}}]}}]}}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c5, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r5) (async) syz_ublk_setup_queues(r6, r4, &(0x7f0000003280)={0x0, 0xfffffffe, 0x800, 0xfffffffe, 0x2f6, 0x0, r2}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x40, 0x3, 0x3aa, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6c, 0x0, 0x40000003, 0xd5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1, 0x1, 0x19f}}], 0x1, 0x0, 0x0) (async) 2.290756054s ago: executing program 4 (id=55): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000140)={0x8, 0x0, 0x4, 0x718, 0xffff, 0x0, 0x6}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a0400"], 0x1c}}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000014c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff0000/0x10000)=nil, 0x10000, &(0x7f00000001c0)=""/255) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000001500)=0x1, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x0, @private}}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{&(0x7f0000001580)={0x2, 0x4e23, @empty}, 0x19, &(0x7f00000015c0)=[{&(0x7f0000001600)="97e8e909ef8ed7010fc2bb245f4d2d6ae7f1d45ec6efbf1eb9edeaf6abb1fe177388794aae5e9796", 0xffe3}], 0x1}}], 0x1, 0x4000800) 2.145818509s ago: executing program 4 (id=56): mkdir(&(0x7f0000000040)='./bus\x00', 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000140)={0x200000, 0x200000, 0x5, 0xff, 0x0, 0x8}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) 2.080632535s ago: executing program 4 (id=57): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000000), 0x10) listen(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000340)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r1, 0x6, &(0x7f0000000380)={0x0, 0x0, 0x1b9, 0x1fd}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1', 0x1) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000040), 0x10) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)="fb", 0x1}], 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x6000, 0x0) r4 = open(&(0x7f0000000100)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x127f, 0x3) ioctl$XFS_IOC_FSGROWFSLOG(r2, 0x4008586f, &(0x7f00000003c0)={0x3, 0x4}) 2.078450005s ago: executing program 4 (id=59): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="500f02"], 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000740)={0x20, 0x17, 0x2, "0453"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000740)={0x20, 0x17, 0x2, "0453"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.877720476s ago: executing program 1 (id=64): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)={0x0, 0x5, 0x6d, {0x6d, 0x9, "7a431dd5d990ec2d0338ac6f7567f3c69146d3457cd4594324fc03ff5c0cd639b9405c1dc333c82b8752866c149ebd6734fd7766b21851fadfb7933468395370aaba893a77f05858427a3d0f8d39b62ad9dacdf0c808ae06bace09a62cf40dc4f26fa4d42ff5c970940db2"}}, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x2, 0x8, 0x2, "815f4e90", "9bbd4796"}}, 0x0}, 0x0) 1.809295903s ago: executing program 3 (id=65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000001c0)={'syz1\x00', {0x0, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbc0, 0x3, 0xfffffff9, 0xa, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0xb1, 0x2, 0x4, 0x3, 0x8, 0x5, 0x401, 0x1, 0x20408, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b399, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0x3, 0x5, 0x3ff, 0x200, 0xffffffff, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x1, 0x5], [0xe8, 0xfffffffe, 0x6, 0x50, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800001, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0x4e985a6c, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xfffc, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000006c0)={0x0, &(0x7f0000000700)=[@wrmsr={0x65, 0x20, {0x188, 0x3f}}], 0x20}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)={@multicast2, @local}, 0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='fdinfo/3\x00') ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000800)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000900)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x23e3c3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000a00)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a40)=[@text32={0x20, &(0x7f0000000a80)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000ac0)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, 0x0, &(0x7f0000000000)) ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000040)) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000180)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x6, 0x5, 0x0, 0x3, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1.107637346s ago: executing program 0 (id=66): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x30, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1007}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40c}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4041}, 0x93806d6c40d63a3e) r2 = add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f00000000c0)="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", 0x559, r0) keyctl$clear(0x7, r2) 1.085333218s ago: executing program 0 (id=67): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000001c0)={0x3, 0x0, [{0xa72, 0x0, 0x7ffffffffffffffe}, {0x2d4, 0x0, 0x80000000002e2}, {0x878, 0x0, 0x8}]}) (async) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000001c0)={0x3, 0x0, [{0xa72, 0x0, 0x7ffffffffffffffe}, {0x2d4, 0x0, 0x80000000002e2}, {0x878, 0x0, 0x8}]}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = getpgid(0x0) capset(&(0x7f0000000140)={0x19980330, r4}, &(0x7f0000000180)={0x9, 0x0, 0x5, 0x1, 0x1, 0x7f}) (async) capset(&(0x7f0000000140)={0x19980330, r4}, &(0x7f0000000180)={0x9, 0x0, 0x5, 0x1, 0x1, 0x7f}) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x28, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0xc, 0x1b, 0x0, 0x1, [@typed={0x11, 0x0, 0x0, 0x0, @str='}\x00'}]}]}, 0x28}], 0x1}, 0x0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f00000007c0)=ANY=[@ANYBLOB="120110030000004035120782400001020301090269000301053009080b0001010c208c0904000000010120"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 849.315372ms ago: executing program 3 (id=68): r0 = syz_create_resource$binfmt(&(0x7f0000000140)='./file1\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f00000000c0)=@md={'/dev/md', @named={'_syz', 0x0, '0'}}, 0xee01, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(r1, 0x6, 0x8, 0x0, &(0x7f0000000180)) recvmsg(r1, &(0x7f0000001a80)={&(0x7f0000001780)=@caif=@util, 0x80, &(0x7f0000001980)=[{&(0x7f0000001800)=""/171, 0xab}, {&(0x7f00000018c0)=""/146, 0x92}], 0x2, &(0x7f00000019c0)=""/167, 0xa7}, 0x2100) sendmsg$inet(r1, &(0x7f0000001740)={&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="cc4975109b99672229e6ff1ac289a145df50e03e597c3cb2a604d10048b6d4e1ec6f1aee9e7878a59a22cf04d20572d98c0311e873b3a34f7a009c91", 0x3c}, {&(0x7f0000001340)="b3f4215971bccd2bbcf075e9a63c7e2b30163698b6cc313b5ba9c2c7f268000cc0d513213dc4f89bfe73433ca79888d386a4877cf3d1f90378265f945f8a6bd0f60d686d580f5253df6dfb3d7fcfe7aa301ea3568492538bfab01f136af91e630487a2178ddf3a6fbafd232b31da55068f069c29f1db5cd1292831b3fcd31c494d635c837685eddd3c7c712aab52f1a27e2f09ae1e7acf23e8e98909dca05187ac1d7da578e0b3058b499abe309eaaa61e4f72a5baee177d65", 0xb9}, {&(0x7f0000001400)="8951679c248e7e060f908b0692caea793c922183b0c81619e9760d53a639e11a229bd25164f533062df3b21000d211183089b148bc888bd3f3978358a2377ab2942ecf19238bb3d767e45667807c0f124662827c6a859773231f58338654687dd0b80d7f4466f29b8ed40c9d8a70f76ce5c363bf579dbaf36ae02b39ed571d56f5f2863281ab884901d7cf4b75a2436a45ab7091de80b16f3fd45d3d385a41c2288dfa45bdcc09fa5fead5140bec3b5ef618992ad82ca485cad1ba0e2e4147a949eb73eb053048d22ba4cbc57074c315e15f71b0f158", 0xd6}, {&(0x7f0000001500)="93941117a8b999bf7cf5ec1cd236654151e2b53577eda59ac47e10798128f2879f9512722eb4b4f8a49fd5bb4bea79f00c2378e155045d0f65c697c41367a9043e5d", 0x42}, {&(0x7f0000001580)="757733ca361b074a4ab7425f4aaa358b7e708de465defca6e12723c1a7ae1845376741abe053fc63044265876f2c16b2eba60c50866251239abd14f284b297f93002843f1abf48b3fba70ebd867b5c6d53823f5959525e954730f40b11bf448e42f8b49b9844abc6b8a991e259d1d40f262129fa6460be85bd70bcb47a1fc5753ed44ced65238500da222b0dff192dad44e7fea7b92a5bf465bfc6912531becdb32dc6f6255a00eb4ee149c26db981", 0xaf}], 0x6, &(0x7f00000016c0)=ANY=[@ANYBLOB="14000000000000000000000001000000090000000000000058000000000000000000000007000000442cb591ac1414aa000000080a0101000000004ff9140600000000fffff4657f00000100000006fffffffffffffff9c90513080001890fb5ac1e0001ac1414bbe000000194040100"], 0x70}, 0x20000821) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file1', [{0x20, '\xe1\xd6\x0e<5\xf1\xc7\x10\x1e=\x9f\xb1\xac\x98\xe8\xacm\xd0g\xa6er\aA\xb3F\xec\xa3\x06\x18\ao\xac1\x9a\xf3\x90\xb0?h\xa9\xbc~\x9d\x1ax\xe5\xb7l\x80\xa0\xbe\xe9J\x1a\xa0\x99\xaeQq^j\xdas\xbe\x19\x0fX\xf0\x9b@\xbd!\xb4\xcc\xdb*{\x9ej\xc3Z\x89\xa1\xfeo\xe6[Rp%\xac\x12\xd1`\n\x0e[\x9b\xd6\xdb\x80\x10\x9eXf\x86\x8d\x87\xc4\xb2\x96\x06T\x82]j-\x1c\xd7\x8b8%Km\xfb\xca\x88\xab\x92?\xefh\x7f\xd3s\r\xa7\x87L=\xd8\x15\x9cb\xd1SV\xb0$0.(\xe8G\xa7\xa9\xa1|\xdc[\tV\x86\xb4by\xae\xec\x16\x1b\xf4\xc2\xfb\xc4\x03\xf2\xe8\x04\x1a\x95\xea\x05\x11\xacZ\x9avK\xa4\xa9\x1c\x83\xf1\x00\x00\x00'}, {}, {0x20, '\x00\x00\x00\x9b\xd7\xb9\xb43U\xc9\xacv\v2o}\xa7n\xe2\x06\x0f\xa93\xb5\'\x9fr\xedwM\xdb, x\x03\x87\x8f\xce\x9f}\xee 7\xeb`\x12\xedn\xad\x92.\xa6\x89\xcd\xfb\xe5\xdd2\xda\x12\x1a\x9d\x02\xa7\xf5'}, {0x20, '{,#^'}]}, 0x119) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 847.873402ms ago: executing program 3 (id=69): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="fc0000001900010000000000000000000000000000000000000000000000000000000000000000000000ffffe000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000050000000000000000000000000000009bffffff7f000000000000000000000000020000000000000000000000000000000000000000000000feffffffffffffffffffffffffffffff00000000000000000000000000000002000000000001000103"], 0xfc}}, 0x0) 843.309253ms ago: executing program 3 (id=70): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffc222a5fe422d88a84a008100400008004519001b0067000007b39078ac1e0001ac1414aa0ffdeec2bd7539"], 0x31) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newpolicy={0xc4, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x40}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1}, {}, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x350759, 0xd2}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0x12, 0x0, &(0x7f0000000140)) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 787.668259ms ago: executing program 3 (id=71): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60a42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x6002}) (async) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000180)) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x8400}, {r0, 0x12b}, {r0, 0x6}, {r0, 0x81cc}, {r1}, {r0, 0x152}, {r0, 0x40}, {}, {r0, 0x4430}], 0x9, &(0x7f0000000100), &(0x7f0000000140)={[0x37]}, 0x8) pwritev2(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)="69640b5f251511e28d78", 0xfffffe15}, {&(0x7f0000000340)="18232bbefa55", 0x6}], 0x2, 0xe, 0xff, 0x4) 709.489777ms ago: executing program 3 (id=72): r0 = syz_usb_connect(0x0, 0x17d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000fa5c531046084010c9d00102030109026b0101000000000904620202436f1f0009050802100000fa00cd08dfa9a5fd67f84bd21113acd7fc0e3b35824deb14c9ec5d483d62169d56171de8bc4bc98d302e503f95cf970fcea2490ec47e33f438ea21d7203978d5e2904b6966f7096cf08bba8ddb7691bcbc9ce2c576"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 15.796678ms ago: executing program 4 (id=73): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000080)={0x0, 0x4f, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r2, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000080060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r4, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000440)={0xa, 0xe22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x28}, 0x1c) 0s ago: executing program 4 (id=74): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1, 0x3c, 0x2) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) fadvise64(r3, 0x7, 0x5, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) futimesat(r0, &(0x7f0000002240)='./sys_mnt\x00', &(0x7f0000002280)={{}, {0x0, 0x2710}}) stat(&(0x7f00000020c0)='./sys_mnt\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe0000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x3b, 0x0, 0xc000000000000000}]}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.28' (ED25519) to the list of known hosts. [ 27.772721][ T36] audit: type=1400 audit(1793135597.430:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.776285][ T286] cgroup: Unknown subsys name 'net' [ 27.795755][ T36] audit: type=1400 audit(1793135597.430:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.823107][ T36] audit: type=1400 audit(1793135597.460:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.823635][ T286] cgroup: Unknown subsys name 'devices' [ 27.946646][ T286] cgroup: Unknown subsys name 'hugetlb' [ 27.952297][ T286] cgroup: Unknown subsys name 'rlimit' [ 28.068575][ T36] audit: type=1400 audit(1793135597.730:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.091953][ T36] audit: type=1400 audit(1793135597.730:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.117347][ T36] audit: type=1400 audit(1793135597.730:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.148316][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.157219][ T36] audit: type=1400 audit(1793135597.820:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.182687][ T36] audit: type=1400 audit(1793135597.820:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.208536][ T36] audit: type=1400 audit(1793135597.860:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.234401][ T36] audit: type=1400 audit(1793135597.870:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.235133][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.066171][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.073310][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.089957][ T293] bridge_slave_0: entered allmulticast mode [ 29.096621][ T293] bridge_slave_0: entered promiscuous mode [ 29.113999][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.121157][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.128302][ T293] bridge_slave_1: entered allmulticast mode [ 29.134819][ T293] bridge_slave_1: entered promiscuous mode [ 29.261654][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.268812][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.276129][ T297] bridge_slave_0: entered allmulticast mode [ 29.282460][ T297] bridge_slave_0: entered promiscuous mode [ 29.290450][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.297748][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.304907][ T297] bridge_slave_1: entered allmulticast mode [ 29.311199][ T297] bridge_slave_1: entered promiscuous mode [ 29.347610][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.354725][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.362422][ T299] bridge_slave_0: entered allmulticast mode [ 29.368856][ T299] bridge_slave_0: entered promiscuous mode [ 29.375714][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.382782][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.389954][ T299] bridge_slave_1: entered allmulticast mode [ 29.396354][ T299] bridge_slave_1: entered promiscuous mode [ 29.418212][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.425398][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.432479][ T298] bridge_slave_0: entered allmulticast mode [ 29.438880][ T298] bridge_slave_0: entered promiscuous mode [ 29.445619][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.452698][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.459843][ T298] bridge_slave_1: entered allmulticast mode [ 29.466273][ T298] bridge_slave_1: entered promiscuous mode [ 29.513459][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.520587][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.528047][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.535820][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.623187][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.630318][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.637781][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.644878][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.677723][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.684817][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.692104][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.699177][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.708276][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.715666][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.723344][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.730873][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.738462][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.745908][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.765218][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.772299][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.779965][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.787032][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.808875][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.816017][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.829034][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.836145][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.872238][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.879368][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.896965][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.904066][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.925008][ T293] veth0_vlan: entered promiscuous mode [ 29.939319][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.946438][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.958057][ T297] veth0_vlan: entered promiscuous mode [ 29.966139][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.973220][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.999734][ T293] veth1_macvtap: entered promiscuous mode [ 30.013509][ T297] veth1_macvtap: entered promiscuous mode [ 30.039283][ T299] veth0_vlan: entered promiscuous mode [ 30.048624][ T298] veth0_vlan: entered promiscuous mode [ 30.070746][ T299] veth1_macvtap: entered promiscuous mode [ 30.093780][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.109376][ T298] veth1_macvtap: entered promiscuous mode [ 30.186832][ T323] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.273198][ T324] loop7: detected capacity change from 0 to 7 [ 30.384415][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.394479][ T312] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 30.534378][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 30.541205][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.551577][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.561666][ T312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.572716][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.582224][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.590525][ T31] usb 1-1: Product: syz [ 30.595414][ T31] usb 1-1: Manufacturer: syz [ 30.600151][ T312] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 30.609372][ T31] usb 1-1: SerialNumber: syz [ 30.614344][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.622701][ T312] usb 2-1: Product: syz [ 30.627274][ T312] usb 2-1: Manufacturer: syz [ 30.632200][ T312] usb 2-1: SerialNumber: syz [ 30.638981][ T312] usb 2-1: config 0 descriptor?? [ 30.645668][ T312] plusb 2-1:0.0: probe with driver plusb failed with error -22 [ 30.839149][ T31] usb 1-1: 0:2 : does not exist [ 30.846795][ T31] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 30.859138][ T31] usb 1-1: USB disconnect, device number 2 [ 30.877039][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.165089][ T331] kvm: kvm [329]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 31.249700][ T13] bridge_slave_1: left allmulticast mode [ 31.263539][ T13] bridge_slave_1: left promiscuous mode [ 31.271656][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.295238][ T13] bridge_slave_0: left allmulticast mode [ 31.301365][ T13] bridge_slave_0: left promiscuous mode [ 31.308295][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.389440][ T13] veth1_macvtap: left promiscuous mode [ 32.410522][ T13] veth0_vlan: left promiscuous mode [ 32.639676][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.646892][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.648040][ T64] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.654277][ T346] bridge_slave_0: entered allmulticast mode [ 32.668178][ T346] bridge_slave_0: entered promiscuous mode [ 32.674777][ T351] netlink: 'syz.3.11': attribute type 27 has an invalid length. [ 32.691977][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.699249][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.727530][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.734835][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.742708][ T346] bridge_slave_1: entered allmulticast mode [ 32.749536][ T346] bridge_slave_1: entered promiscuous mode [ 32.754100][ T351] overlay: ./file0 is not a directory [ 32.762473][ T354] overlay: ./file0 is not a directory [ 32.770943][ T353] netlink: 'syz.3.11': attribute type 27 has an invalid length. [ 32.804366][ T64] usb 1-1: Using ep0 maxpacket: 16 [ 32.815435][ T64] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 32.823731][ T64] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.834136][ T64] usb 1-1: config 0 has no interface number 0 [ 32.840570][ T64] usb 1-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 32.850655][ T64] usb 1-1: config 0 interface 98 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.866866][ T64] usb 1-1: config 0 interface 98 has no altsetting 0 [ 32.873971][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.881087][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.888456][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.895570][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.903987][ T64] usb 1-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 32.917108][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.925507][ T64] usb 1-1: Product: syz [ 32.929725][ T64] usb 1-1: Manufacturer: syz [ 32.935082][ T64] usb 1-1: SerialNumber: syz [ 32.943480][ T64] usb 1-1: config 0 descriptor?? [ 32.950537][ T341] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 32.958626][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.963211][ T64] asix 1-1:0.98: probe with driver asix failed with error -22 [ 32.973617][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.983525][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.990659][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.000165][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.007264][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.034137][ T346] veth0_vlan: entered promiscuous mode [ 33.044941][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.048288][ T346] veth1_macvtap: entered promiscuous mode [ 33.205645][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.216708][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.226545][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 33.239544][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 33.248711][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.257539][ T31] usb 4-1: config 0 descriptor?? [ 33.344383][ T312] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 33.515495][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.526568][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.537006][ T312] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 33.550273][ T312] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 33.573295][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.597918][ T312] usb 5-1: config 0 descriptor?? [ 33.606194][ T45] usb 2-1: USB disconnect, device number 2 [ 33.669655][ T31] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 33.685855][ T31] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 33.766189][ T36] kauditd_printk_skb: 55 callbacks suppressed [ 33.766237][ T36] audit: type=1400 audit(1793135603.430:129): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 33.795828][ T366] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13'. [ 33.836763][ T368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.847494][ T368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.856442][ T36] audit: type=1400 audit(1793135603.520:130): avc: denied { read write } for pid=369 comm="syz.1.14" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 33.864524][ T372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.892105][ T372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.900075][ T36] audit: type=1400 audit(1793135603.520:131): avc: denied { open } for pid=369 comm="syz.1.14" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 33.925266][ T45] usb 4-1: USB disconnect, device number 2 [ 33.935374][ T36] audit: type=1400 audit(1793135603.550:132): avc: denied { ioctl } for pid=369 comm="syz.1.14" path="socket:[3918]" dev="sockfs" ino=3918 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.962506][ T36] audit: type=1400 audit(1793135603.550:133): avc: denied { getopt } for pid=369 comm="syz.1.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.983609][ T36] audit: type=1400 audit(1793135603.580:134): avc: denied { create } for pid=357 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.039663][ T377] mmap: syz.1.16 (377) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.086634][ T312] usbhid 5-1:0.0: can't add hid device: -71 [ 34.104380][ T312] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 34.106690][ T36] audit: type=1400 audit(1793135603.770:135): avc: denied { ioctl } for pid=376 comm="syz.1.16" path="socket:[3931]" dev="sockfs" ino=3931 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.116393][ T312] usb 5-1: USB disconnect, device number 2 [ 34.154377][ T36] audit: type=1400 audit(1793135603.810:136): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.185729][ T36] audit: type=1400 audit(1793135603.850:137): avc: denied { write } for pid=381 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 34.230355][ T388] netlink: 37 bytes leftover after parsing attributes in process `syz.1.20'. [ 34.240244][ T36] audit: type=1400 audit(1793135603.900:138): avc: denied { map } for pid=387 comm="syz.1.20" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.342555][ T392] ======================================================= [ 34.342555][ T392] WARNING: The mand mount option has been deprecated and [ 34.342555][ T392] and is ignored by this kernel. Remove the mand [ 34.342555][ T392] option from the mount to silence this warning. [ 34.342555][ T392] ======================================================= [ 34.644393][ T312] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 34.805752][ T312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.817661][ T312] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 34.824638][ T64] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.827960][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.842499][ T312] usb 2-1: Product: syz [ 34.846739][ T312] usb 2-1: Manufacturer: syz [ 34.851357][ T312] usb 2-1: SerialNumber: syz [ 34.856960][ T312] usb 2-1: config 0 descriptor?? [ 34.862893][ T312] plusb 2-1:0.0: probe with driver plusb failed with error -22 [ 34.871488][ T45] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 34.986666][ T64] usb 4-1: unable to get BOS descriptor or descriptor too short [ 34.995783][ T64] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.006123][ T64] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 35.015192][ T64] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 35.026143][ T64] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 35.036223][ T45] usb 5-1: too many endpoints for config 0 interface 0 altsetting 12: 254, using maximum allowed: 30 [ 35.039477][ T64] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 35.051556][ T45] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 35.061510][ T64] usb 4-1: config 1 interface 1 has no altsetting 0 [ 35.080289][ T45] usb 5-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 35.082628][ T64] usb 4-1: string descriptor 0 read error: -22 [ 35.094020][ T45] usb 5-1: config 0 interface 0 has no altsetting 0 [ 35.100831][ T64] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 35.107048][ T45] usb 5-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00 [ 35.116951][ T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.125095][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.143084][ T45] usb 5-1: config 0 descriptor?? [ 35.148506][ T411] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 35.362463][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 35.368641][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 35.377743][ T45] usb 5-1: USB disconnect, device number 3 [ 35.411222][ T315] usb 1-1: USB disconnect, device number 3 [ 35.671006][ T420] input: syz1 as /devices/virtual/input/input4 [ 36.369775][ T64] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 36.437124][ T64] usb 4-1: USB disconnect, device number 3 [ 36.455947][ T412] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 36.634432][ T412] usb 1-1: device descriptor read/64, error -71 [ 36.884447][ T412] usb 1-1: device descriptor read/64, error -71 [ 36.978230][ T439] capability: warning: `syz.4.35' uses deprecated v2 capabilities in a way that may be insecure [ 37.007799][ T443] netlink: 68 bytes leftover after parsing attributes in process `syz.4.37'. [ 37.134452][ T412] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 37.169285][ T455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=455 comm=syz.3.43 [ 37.264398][ T412] usb 1-1: device descriptor read/64, error -71 [ 37.304483][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 37.444502][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 37.454387][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 37.461097][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.472249][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.482435][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 37.496696][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 37.505815][ T412] usb 1-1: device descriptor read/64, error -71 [ 37.512161][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.521435][ T10] usb 5-1: config 0 descriptor?? [ 37.595793][ T45] usb 4-1: unable to get BOS descriptor or descriptor too short [ 37.604922][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.615168][ T45] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 37.624214][ T45] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 37.625046][ T412] usb usb1-port1: attempt power cycle [ 37.636601][ T45] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 37.654794][ T45] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 37.667251][ T45] usb 4-1: config 1 interface 1 has no altsetting 0 [ 37.677463][ T45] usb 4-1: string descriptor 0 read error: -22 [ 37.683749][ T45] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 37.692888][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.934034][ T10] hid (null): unknown global tag 0xd [ 37.939711][ T10] hid (null): unknown global tag 0xfc [ 37.954999][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0002/input/input5 [ 37.974774][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0002/input/input6 [ 37.988032][ T412] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 38.006357][ T10] kye 0003:0458:5011.0002: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 38.039051][ T9] usb 2-1: USB disconnect, device number 3 [ 38.051357][ T412] usb 1-1: device descriptor read/8, error -71 [ 38.083612][ T468] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.132506][ T312] usb 5-1: USB disconnect, device number 4 [ 38.185611][ T412] usb 1-1: device descriptor read/8, error -71 [ 38.424435][ T412] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 38.445826][ T412] usb 1-1: device descriptor read/8, error -71 [ 38.575517][ T412] usb 1-1: device descriptor read/8, error -71 [ 38.601118][ T312] rust_binder: 463: undelivered transaction 3, process died [ 38.609336][ T312] rust_binder: 463: undelivered transaction 2, process died [ 38.616953][ T312] rust_binder: 463: undelivered TRANSACTION_COMPLETE [ 38.623734][ T312] rust_binder: 463: undelivered TRANSACTION_COMPLETE [ 38.684500][ T412] usb usb1-port1: unable to enumerate USB device [ 38.749260][ T480] netlink: 68 bytes leftover after parsing attributes in process `syz.1.49'. [ 38.912029][ T45] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 38.925725][ T45] usb 4-1: USB disconnect, device number 4 [ 39.015479][ T412] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 39.166088][ T412] usb 2-1: too many endpoints for config 1 interface 0 altsetting 6: 255, using maximum allowed: 30 [ 39.177294][ T412] usb 2-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 39.190643][ T412] usb 2-1: config 1 interface 0 has no altsetting 0 [ 39.199077][ T412] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.209490][ T412] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.219191][ T412] usb 2-1: Product: syz [ 39.223483][ T412] usb 2-1: Manufacturer: syz [ 39.228567][ T412] usb 2-1: SerialNumber: syz [ 39.427676][ T490] WARNING! power/level is deprecated; use power/control instead [ 39.444805][ T412] usb 2-1: bad CDC descriptors [ 39.451796][ T412] usb 2-1: USB disconnect, device number 4 [ 39.468270][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 39.468288][ T36] audit: type=1400 audit(1793135609.130:195): avc: denied { create } for pid=489 comm="syz.3.53" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.499824][ T36] audit: type=1400 audit(1793135609.130:196): avc: denied { ioctl } for pid=489 comm="syz.3.53" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5139 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.526242][ T36] audit: type=1400 audit(1793135609.160:197): avc: denied { create } for pid=489 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.545390][ T499] EXT4-fs warning (device sda1): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled. [ 39.553051][ T36] audit: type=1400 audit(1793135609.160:198): avc: denied { setopt } for pid=489 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.580585][ T36] audit: type=1400 audit(1793135609.160:199): avc: denied { unlink } for pid=346 comm="syz-executor" name="file0" dev="tmpfs" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 39.604503][ T36] audit: type=1400 audit(1793135609.190:200): avc: denied { mount } for pid=498 comm="syz.4.54" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.626136][ T36] audit: type=1400 audit(1793135609.240:201): avc: denied { unmount } for pid=346 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.647430][ T36] audit: type=1400 audit(1793135609.270:202): avc: denied { unmount } for pid=346 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 39.670188][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 39.678769][ T36] audit: type=1400 audit(1793135609.290:203): avc: denied { create } for pid=500 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 39.699621][ T36] audit: type=1400 audit(1793135609.310:204): avc: denied { ioctl } for pid=500 comm="syz.4.55" path="socket:[4799]" dev="sockfs" ino=4799 ioctlcmd=0x583a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 39.735672][ T503] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 39.776231][ T507] netlink: 68 bytes leftover after parsing attributes in process `syz.3.58'. [ 39.844401][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 39.850762][ T9] usb 1-1: config 7 has an invalid interface number: 87 but max is 0 [ 39.859351][ T9] usb 1-1: config 7 has no interface number 0 [ 39.865797][ T9] usb 1-1: config 7 interface 87 altsetting 9 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 39.877095][ T9] usb 1-1: config 7 interface 87 altsetting 9 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 39.888426][ T9] usb 1-1: config 7 interface 87 has no altsetting 0 [ 39.897204][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=d738, bcdDevice= 1.74 [ 39.906526][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.909743][ T515] overlayfs: failed to verify upper (18/file1, ino=115, err=-116) [ 39.915281][ T9] usb 1-1: Product: syz [ 39.923166][ T515] overlayfs: failed to verify index dir 'upper' xattr [ 39.927634][ T9] usb 1-1: Manufacturer: syz [ 39.934224][ T515] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 39.939178][ T9] usb 1-1: SerialNumber: syz [ 40.024386][ T312] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 40.108721][ T525] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 40.118358][ T525] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 40.174349][ T312] usb 5-1: Using ep0 maxpacket: 16 [ 40.191170][ T312] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 40.199989][ T312] usb 5-1: config 0 has no interface number 0 [ 40.210892][ T312] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 40.228871][ T312] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 40.241245][ T312] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 40.246975][ T9] ftdi_sio 1-1:7.87: FTDI USB Serial Device converter detected [ 40.258989][ T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.266809][ T412] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.268178][ T312] usb 5-1: Product: syz [ 40.279415][ T312] usb 5-1: Manufacturer: syz [ 40.280899][ T9] usb 1-1: Detected SIO [ 40.284410][ T312] usb 5-1: SerialNumber: syz [ 40.298333][ T312] usb 5-1: config 0 descriptor?? [ 40.306140][ T509] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 40.307167][ T9] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 40.313379][ T509] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 40.340559][ T9] usb 1-1: USB disconnect, device number 8 [ 40.357106][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 40.375607][ T9] ftdi_sio 1-1:7.87: device disconnected [ 40.434378][ T412] usb 2-1: device descriptor read/64, error -71 [ 40.529695][ T509] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 40.537376][ T509] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 40.684362][ T412] usb 2-1: device descriptor read/64, error -71 [ 40.745548][ T312] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 40.802425][ T537] capability: warning: `syz.0.67' uses 32-bit capabilities (legacy support in use) [ 40.812614][ T538] netlink: 'syz.0.67': attribute type 27 has an invalid length. [ 40.925347][ T412] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 40.990231][ T541] process 'syz.3.68' launched './file1' with NULL argv: empty string added [ 41.013745][ T543] netlink: 68 bytes leftover after parsing attributes in process `syz.3.69'. [ 41.064401][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 41.072057][ T412] usb 2-1: device descriptor read/64, error -71 [ 41.226409][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 41.235417][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.245904][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.257326][ T9] usb 1-1: New USB device found, idVendor=1235, idProduct=8207, bcdDevice= 0.40 [ 41.266808][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.274885][ T9] usb 1-1: Product: syz [ 41.279081][ T9] usb 1-1: Manufacturer: syz [ 41.283704][ T9] usb 1-1: SerialNumber: syz [ 41.314389][ T412] usb 2-1: device descriptor read/64, error -71 [ 41.347942][ T312] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 41.358508][ T312] asix 5-1:0.34: probe with driver asix failed with error -71 [ 41.366796][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 41.375510][ T312] usb 5-1: USB disconnect, device number 5 [ 41.434518][ T412] usb usb2-port1: attempt power cycle [ 41.494116][ T9] usb 1-1: Focusrite Clarett USB Mixer Driver enabled (pid=0x8207); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 41.509456][ T9] usb 1-1: Error initialising Clarett USB Mixer Driver: -22 [ 41.518914][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 41.524573][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 41.531544][ T9] usb 1-1: USB disconnect, device number 9 [ 41.540161][ T45] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 41.548963][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.559570][ T45] usb 4-1: config 0 has no interface number 0 [ 41.564131][ T465] udevd[465]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.567454][ T45] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 41.592596][ T45] usb 4-1: config 0 interface 98 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.605782][ T45] usb 4-1: config 0 interface 98 has no altsetting 0 [ 41.614088][ T45] usb 4-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 41.623378][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.631515][ T45] usb 4-1: Product: syz [ 41.635858][ T45] usb 4-1: Manufacturer: syz [ 41.640499][ T45] usb 4-1: SerialNumber: syz [ 41.646373][ T45] usb 4-1: config 0 descriptor?? [ 41.651746][ T551] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 41.659927][ T45] asix 4-1:0.98: probe with driver asix failed with error -22 [ 41.774400][ T412] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 41.795628][ T412] usb 2-1: device descriptor read/8, error -71 [ 41.892914][ T556] ------------[ cut here ]------------ [ 41.898601][ T556] WARNING: CPU: 1 PID: 556 at mm/page_alloc.c:5286 __alloc_pages_noprof+0x109/0x7e0 [ 41.908113][ T556] Modules linked in: [ 41.912111][ T556] CPU: 1 UID: 0 PID: 556 Comm: syz.4.74 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 41.923495][ T556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 41.933948][ T556] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 41.936187][ T412] usb 2-1: device descriptor read/8, error -71 [ 41.940109][ T556] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d fa 02 8a 06 00 0f 85 c2 00 00 00 c6 05 ed 02 8a 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 41.965868][ T556] RSP: 0018:ffffc900107b7560 EFLAGS: 00010246 [ 41.971960][ T556] RAX: 0000000000000000 RBX: 0000000000000012 RCX: 0000000000000000 [ 41.980115][ T556] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900107b7618 [ 41.988227][ T556] RBP: ffffc900107b76a0 R08: ffffc900107b7617 R09: 0000000000000000 [ 41.996277][ T556] R10: ffffc900107b7600 R11: fffff520020f6ec3 R12: ffffc900107b75a0 [ 42.004343][ T556] R13: dffffc0000000000 R14: 1ffff920020f6eb0 R15: 0000000000000000 [ 42.012344][ T556] FS: 00007f43395e36c0(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 42.021350][ T556] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.028028][ T556] CR2: 0000200000019000 CR3: 0000000119234000 CR4: 00000000003526b0 [ 42.036095][ T556] Call Trace: [ 42.039407][ T556] [ 42.042383][ T556] ? vfs_write+0x3c4/0xfd0 [ 42.046896][ T556] ? ksys_write+0x145/0x260 [ 42.051475][ T556] ? x64_sys_call+0x271c/0x2ee0 [ 42.056418][ T556] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 42.062366][ T556] ? hashtab_init+0xd6/0x1f0 [ 42.067069][ T556] ___kmalloc_large_node+0x81/0x220 [ 42.072350][ T556] ? hashtab_init+0xd6/0x1f0 [ 42.077050][ T556] __kmalloc_large_node_noprof+0x1e/0xd0 [ 42.082748][ T556] ? hashtab_init+0xd6/0x1f0 [ 42.087524][ T556] __kmalloc_noprof+0x326/0x510 [ 42.092525][ T556] ? kasan_save_alloc_info+0x3a/0x50 [ 42.097930][ T556] hashtab_init+0xd6/0x1f0 [ 42.099464][ T558] mmap: syz.0.75 (558): VmData 29073408 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 42.102661][ T556] ? common_read+0x175/0x490 [ 42.102695][ T556] symtab_init+0x44/0x70 [ 42.123824][ T556] common_read+0x1e7/0x490 [ 42.128342][ T556] ? hashtab_init+0xd6/0x1f0 [ 42.132986][ T556] ? __cfi_common_read+0x10/0x10 [ 42.138261][ T556] ? hashtab_init+0x100/0x1f0 [ 42.142991][ T556] policydb_read+0xa86/0x2860 [ 42.147753][ T556] ? __kasan_kmalloc+0x96/0xb0 [ 42.152568][ T556] ? __cfi_policydb_read+0x10/0x10 [ 42.158375][ T556] ? security_load_policy+0x130/0x12d0 [ 42.165261][ T556] security_load_policy+0x16a/0x12d0 [ 42.170850][ T556] ? irqentry_exit+0x4a/0x60 [ 42.175541][ T556] ? __kasan_check_write+0x18/0x20 [ 42.180827][ T556] ? mutex_lock+0x97/0x1d0 [ 42.185340][ T556] ? __cfi_security_load_policy+0x10/0x10 [ 42.191121][ T556] ? rep_movs_alternative+0x4a/0xa0 [ 42.194505][ T412] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 42.196474][ T556] sel_write_load+0x258/0x600 [ 42.208773][ T556] ? __cfi_sel_write_load+0x10/0x10 [ 42.214004][ T556] ? bpf_lsm_file_permission+0xd/0x20 [ 42.219457][ T556] ? __cfi_sel_write_load+0x10/0x10 [ 42.224742][ T556] vfs_write+0x3c4/0xfd0 [ 42.226505][ T412] usb 2-1: device descriptor read/8, error -71 [ 42.229035][ T556] ? __cfi_vfs_write+0x10/0x10 [ 42.240062][ T556] ? __kasan_check_write+0x18/0x20 [ 42.245314][ T556] ? mutex_lock+0x97/0x1d0 [ 42.249779][ T556] ? __cfi_mutex_lock+0x10/0x10 [ 42.254715][ T556] ksys_write+0x145/0x260 [ 42.259132][ T556] ? __cfi_ksys_write+0x10/0x10 [ 42.264139][ T556] ? __kasan_check_write+0x18/0x20 [ 42.269364][ T556] ? fpregs_restore_userregs+0x11c/0x260 [ 42.275167][ T556] __x64_sys_write+0x7f/0x90 [ 42.279873][ T556] x64_sys_call+0x271c/0x2ee0 [ 42.284853][ T556] do_syscall_64+0x57/0xf0 [ 42.289357][ T556] ? clear_bhb_loop+0x50/0xa0 [ 42.294087][ T556] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.300263][ T556] RIP: 0033:0x7f433ab9f559 [ 42.304785][ T556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.324474][ T556] RSP: 002b:00007f43395e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 42.333405][ T556] RAX: ffffffffffffffda RBX: 00007f433ae25fa0 RCX: 00007f433ab9f559 [ 42.341897][ T556] RDX: 00000000000190ec RSI: 0000200000000000 RDI: 0000000000000003 [ 42.350187][ T556] RBP: 00007f433ac36b20 R08: 0000000000000000 R09: 0000000000000000 [ 42.358265][ T556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.366540][ T556] R13: 00007f433ae26038 R14: 00007f433ae25fa0 R15: 00007fff761bfeb8 [ 42.374619][ T556] [ 42.376685][ T412] usb 2-1: device descriptor read/8, error -71 [ 42.377672][ T556] ---[ end trace 0000000000000000 ]--- [ 42.385903][ T556] SELinux: failed to load policy [ 42.494512][ T412] usb usb2-port1: unable to enumerate USB device [ 44.136776][ T45] usb 4-1: USB disconnect, device number 5