last executing test programs: 3.284164597s ago: executing program 0 (id=37): r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c46800c040001000000010000000200030001000000dd000000380000004503000008000001050020000100050009000000000000000300000004000400050000000600000080000000060000000200000000000100"], 0x58) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) recvmmsg$unix(r1, 0x0, 0x0, 0x1, &(0x7f0000003c80)={0x0, 0x989680}) 2.442729346s ago: executing program 3 (id=39): syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d00010000000009040000026bb22b000904fffffd0000000009"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = epoll_create1(0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0x3, [0x1a5, 0x9, 0x5, 0x10000, 0x80, 0x1acb]}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x1, 0x5, 0x1d, 0xfd, 0x14, "3ba0ce7cb942b4b2caa81bfd51882c1648bc43"}) (async) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) (async) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x96, 0x0, 0x100, 0x10000, 0x1, '\x00', 0x1}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000004}) (async) poll(&(0x7f00000000c0)=[{r1, 0x1009}], 0x1, 0x8000007) 2.172223052s ago: executing program 2 (id=42): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$addseals(r0, 0x409, 0x0) (async) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000000c0)={&(0x7f0000000040)='/dev/uhid\x00', &(0x7f0000000080)='\x00', 0x3df}) (async) r1 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000100)={0x1, 0x8, [{r0, 0x0, 0x2000, 0xfffefffffeffe000}, {0xffffffffffffffff, 0x0, 0x1000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x0, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0xfffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x0, 0x10000}]}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000200)) (async) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x7f, 0x9, 0x7, 0x4, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x20, 0x1, 0x6}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x1ac, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0xc000) r10 = socket(0x1a, 0x2, 0x3) ioctl$XFS_IOC_FSGEOMETRY_V1(r2, 0x80705864, &(0x7f0000000800)) (async) syz_ublk_setup_io_uring(0x7e1f, &(0x7f0000000880)={0x0, 0x6578, 0x20000, 0x0, 0x12}, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000a00)={'bond0\x00', &(0x7f00000009c0)=@ethtool_rxfh={0x47, 0x7, 0xb1bc, 0x4, 0x9, "bf6e63", 0x8}}) (async) getpeername$inet(r10, &(0x7f0000000a40)={0x2, 0x0, @initdev}, &(0x7f0000000a80)=0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000002140)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002100)={&(0x7f0000000b40)={0x15b4, r11, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x544, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xd}, @broadcast, @device_a, @random="7ea46ff00079", {0x7, 0xff2}, "", @void, @value=@ver_80211n={0x0, 0x9, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @device_a, 0x27, "0ae5366a1ba0fb8be37ae28e4be4c94a374527517c17a4176b7039376aa52fe6c8c5bc84e835b2"}, {@broadcast, @device_a, 0xd4, "b23a7d3c784a2fbd30bd8d7e8e921a29377d0b0d7bacdc843a3fcdbca83414019156e9a2d9270b1fe7cb451a130ad40b9e8738862ebc1aaa5ed5f9ac80203ca9044f142f79c5cdaa983840458f8a1d3c0fbe825478a97b80212e299bf1a552085381edd64716cec494471355e447fba948a6bf2eaa5546b2bcac5faee08b979686fe45d41680f050c0eb8415eee0deb8f6515d032a0e86738f8e0d4cbf0050afe7736a5333852a0bb405684d333c809cf36a40656b6491769b1b75dfd5d8009cf9251be032b3630bf0889b3c7b53ae680a87b926"}, {@device_a, @device_b, 0xd5, "e2fd447a63785ffa5b763ee8bf2e37574b0d60224dec3024d1af5d89fef734dd7c2438e1e2f186bb75d5ad265dec1716bf704ffeba749241d9545a1b2fc2dfe140371d5db1dd8c1b96710529b0af375dd7b1cc8f7d085df35ce3ce67a29191be20c24bf1bf2624acf4367d412e427a7b4bec6d0fdf885df075c73851ebfda0ffbb096998876c2659b2826499af756ae7d8831a961ed6c61ceb03405b394dc30dcf35079468ac561113cdbb22acab305a81c85ee6f66bfdc987fce9bdebf3c314e6b3f87a3f912f3ff54a31f5473ae5ddca77d5ebb3"}, {@broadcast, @device_b, 0x98, "51b905171fbf67b92208a943f8b768d381888001c6a7ef9b7041c84971c36e0bfcd5dbd25cd06ddb0c450d22425cb674004d33a2629a9a4152fc2e770203c9cadefb50b27be98ee19b4c357e5e9ae98e8b2fdfc1a33e74cf35cf63042dd92da5807c5706ebd39564e040fe348da37007c540b04fdc4790edf0535169f53bde87990f0ee61a52fdd33cb00a6096a9d8262d05adc9e20ed5c5"}, {@device_b, @device_a, 0xf8, "5d8f52241d4506ebc763b1fd471bd1715c0f2bf203b09b1abad0bc4887f72aa1955ed7bd90df468bfaa426a63fc2ca33d85773d4a51a83456dabd915501b9f3db7f4984b54eadfc6558e307a75de07321402189c2c6383b99d5b4c27f988045dce3ffd789eaa9ec3ba070bf412c690061fe069c46f98d0d4dcb4077a0f074fa4ed405d27022bddc6b482544f4950cd60e0f8c1b4df1255cc221cbcf2f1fb25ecdb39ad14782b5bb915f129a88d12fc7f26e976331d12817bbd2feff72fcf89b51a510529f3f69471373e5aeaae0aa764a026ff4886b32fba12dc5c30a05c93ad9d972b2a2e26ff2325be45d46853ccb16450b21c6f583e46"}, {@device_b, @broadcast, 0xf5, "8a9d3b84685935af2cfce2a65f320ea6bda8e8b4d364ff4a7a321d0187d400fc028f63b23663860d32737bfcfb08daa639d4b7bd2cd0dce6408f7de8d155f336bdca2827343b413c48ab14038d6e25070f41c4e9ab2b158c832c5a42a07b9d89546765228ac950ed176024b85865b6bf80f42bb680c161114e1f08ab938a268b319d57220be4aa20a8e694e2ace90f0f78b3a6b5000e194aaed60e21354bb2363fbccb2968f5ab71cb0519e009d0b56c318c552bd084de09c0654197e069fe9341298a66fe82c7ec2329a03b24e91100d812826d832486b174f85a1827d9ca2c775419270f31fc1d62858b8b7fb76876ae7ed60954"}, {@device_b, @device_b, 0x61, "c862bec00097d196cbceb42d1a9118c00bb930cd47fbaa2b09fbd66ef6e4648feda0211b2f68dd0ac1d5c2e179e57ba1811ef197ebb541fb361c06233e28c6be824fc28ce8f92ef7a2caf29bb369ebf527a9cfe6a492a3401d61d1ff5b6847ea11"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x1036, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x95c}, @device_a, @device_a, @broadcast, {0x8}, @device_b, @void, @value=@ver_80211n={0x0, 0x2, 0x3, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0x1000, "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"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6001}, @NL80211_ATTR_MAC={0xa}]}, 0x15b4}, 0x1, 0x0, 0x0, 0x4000400}, 0x4000) (async) sendmsg$NL80211_CMD_GET_INTERFACE(r10, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x14, r11, 0x502, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8043}, 0x20040001) (async) getpeername$packet(r10, &(0x7f0000002280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000022c0)=0x14) (async) sendmsg$nl_generic(r10, &(0x7f00000023c0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x18, 0x3c, 0x100, 0x70bd29, 0x25dfdbfe, {0xe}, [@generic="41dbe8"]}, 0x18}, 0x1, 0x0, 0x0, 0x4040000}, 0x50) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002440), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r12, &(0x7f00000025c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002580)={&(0x7f0000002480)={0xcc, r13, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x69}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8d}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) (async) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000002940)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002900)={&(0x7f0000002640)={0x2b8, r11, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x63}, @void, @val={0xc, 0x99, {0x0, 0x14}}}}, [@NL80211_ATTR_VENDOR_DATA={0xa5, 0xc5, "9fb9b89f1a17b70c0fbe4738788cea9721628939d1cf14966557750cc40555306257b6ca057d0045ef7eb7857a6cd172e18ad9343ec600e5e2402984bd8d2ee1002cf100aa39d524194b2bd6ddd49475a9f0202a710cb74e22f8b5c35b082e04b4afb4aead874d4fee201cbc3e975a5641cd93ca0bf84a6d5fd5b676043a8eca4a986dd99affcba956ac48d904cd78bfab2b073ab5f288f965ba0c948d38cb779e"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_DATA={0xe3, 0xc5, "682f1f6a06fad52c7da106e65ed5475bebb77042583b88e52ae24cb5b4b4ace4e053930ac0104c148f4b300cb50ed5fade274f8b878baf68dcda4765f08cfc211796096496920bc7b80461c09d4bd56eb305d7016310cac22839ff0f771e5602851e7c79cefad2ef267398fb133d8717cc6d1bc762551bfa5728d8d8a2157d9330868c7a8aa1e77f36f2e0c10ca9f380812e46e4f40755595c7bb5bd1bc3abc3cafc639618b9c6fd92f5f5900fac2d5ff99d4261c601b72854f00776cdb6a8e52b8844a9c67e630351ed30a3bdb5ec9635fd0b2781a63f170464c4ce80e796"}, @NL80211_ATTR_VENDOR_DATA={0xfb, 0xc5, "a9c149cc5e1cca7abc39d179273d14a2b89a7b3ea24e788eafdf808c75fe9bc16606784925d2d9c390bb3bcf4e8019b1ef2d71e645caf4a86b9add92f9b401b5ca1af3cf1eddc00313c3331eb44139d2797efe143fa674acb2d6b739b417e21b44476253999064df4345fc8bd2aaa1c69014bdc95d864ff2ed1e6b783b39503b3b56476697babcf870d780d4820f6743c37bbc8624c15d2eac3590c6bef11028504656463b7e18d556b93bb1f6226e6b34686113ee52c0e0262e7f221351e2e32d4e8c06be52c11f46b84c6384b402b02f70d30c513d2e089c96c5815c267c3296164d8eab65143ad30cd947823e0faf447ea9f2cfa5b6"}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x2c000}, 0x4008000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 2.120117803s ago: executing program 2 (id=43): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_socket_connect_nvme_tcp() setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x2008, 0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000040)={0x4}) syz_usb_connect$uac1(0x5, 0x84, &(0x7f0000001a80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x2, 0x20, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1c}, [@feature_unit={0x9, 0x24, 0x6, 0x5, 0x4, 0x1, [0x4], 0xff}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x307, 0x5, 0x5, 0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xba, 0x4, 0x4a, {0x7, 0x25, 0x1, 0x8, 0xce, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x4, 0x97, {0x7, 0x25, 0x1, 0x0, 0x9, 0x4}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x800, 0x101000) ioctl$HIDIOCGREPORTINFO(r6, 0xc00c4809, &(0x7f0000000100)={0x2, 0x100, 0x7}) 1.82301924s ago: executing program 0 (id=48): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0x1, 0xfffc, 0x8002}, 0x20) (fail_nth: 2) 1.714079042s ago: executing program 0 (id=49): r0 = landlock_create_ruleset(&(0x7f0000000040)={0xc036, 0x3}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000240)={0x3, 0x3}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000000)={0xd, 0x7}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000080)={0x8, 0x2}, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.713830782s ago: executing program 0 (id=50): mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1) socket(0x10, 0x3, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x48}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(0xffffffffffffffff, 0x4, 0x1ff, 0x1) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="38010000100033060000000000000000fe80000000000000000000000000002aac1e000100000000000000000000000000004000000080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14143f0000000000000000000000000000000032000000fc0200000000000000000000000000002703000000000000090000000000000000000000000000000400000000000000000000000000200000000000000000000100000000000000070000000000000000000000000000000000000000000000020000000000000000000000000000008f000000000000000800000029bd70000235000002000100000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="0500"], 0x80}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) recvmmsg(r3, &(0x7f0000007ec0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000c00)=""/169, 0xa9}, {&(0x7f0000000cc0)=""/232, 0xe8}, {&(0x7f0000000e00)=""/88, 0x58}, {&(0x7f00000002c0)=""/245, 0xf5}, {&(0x7f0000001040)=""/57, 0x39}, {&(0x7f0000003140)=""/4096, 0x1000}], 0x6}, 0xe}, {{0x0, 0x0, 0x0}, 0x8000}], 0x3, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}, 0x1, 0x0, 0x0, 0x24000890}, 0x4000) 1.575807645s ago: executing program 1 (id=51): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x762482) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x0, 0x3, 0x80, 0x1, 0xdfde}}) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0xc, &(0x7f0000000100)=0x13e60, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x2001, 0x0) write$binfmt_script(r3, &(0x7f00000004c0)={'#! ', './file0', [{0x20, '}$%'}, {0x20, 'rootmode'}, {0x20, '%)\xbc'}, {}, {0x20, 'fuseblk\x00'}, {0x20, '/dev/loop0\x00'}], 0xa, "227b82a098bf97506f82f01e40ab8b8410d495e99e51ed947ac9fd51967c4f8fc99b1b8038a61efc7e908862da27e36fccde2871a35c997c516f786bc0ea7b1855049314bc8e305bee0de1ece99aead6759deb7e845428"}, 0x89) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}}) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x28, 0x0) sendmsg$netlink(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="240000001e002907000000040007430000000c00"], 0x24}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.545520406s ago: executing program 1 (id=52): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async) syz_clone(0x1010000, &(0x7f0000000000)="9e3f2a9585a61da1d91ebb18e0f9f9c629bd948e89e26d09d13ed3a94fa0ee20da075348409449f496087fab98abfb8e713c75ded6f349eb3dc0ac19cedd806b1981f4b91be6368aeec5d4dfe45fb7bad5e5dce32171c64a133e62538ffa5c9b502c933959435c462844328ca84ca69cb0f8bdaf1efbdf4b8c38682228154dc3d75ca4e234882e228ddec8dcfe6ec8e5fe5faa95f23b0e6124cb100382fc34a1fcafea94aee6e40e748d8f485a18015bd67d0290ae60b528d984934b7e530e", 0xbf, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)="ba9282e13c80746befdc8209797b3889770c4c24a20597f1a1f4c453365f39ba6e76b3cff9cf7c45") 1.3682494s ago: executing program 1 (id=53): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="dd187d5bd579"}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a0088a80180c2000003cd1008a2dc5886dd61fdeb4a00d000d0fe8000000000001200000000000000aa00000000000000000000ffffac1e00013219000000000013070800000001009bb9"], 0x10a) 1.36783689s ago: executing program 3 (id=54): r0 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x41) r1 = fsopen(&(0x7f00000002c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r3, 0x0) mlock2(&(0x7f000052d000/0x2000)=nil, 0x2000, 0x1) munlockall() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) munlockall() r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000180)={0x0, 0x3}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x100, 0x0, 0xfffffffffffffffc, 0x4002004c4, 0x1000, 0x6, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2011d3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) pipe2(&(0x7f0000000000), 0x100) ioctl$KVM_RUN(r6, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r7, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r7, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.34346101s ago: executing program 1 (id=55): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r2, 0x11a, 0x1, 0x0, &(0x7f00000004c0)) r3 = dup(r1) syz_ublk_setup_queues(r3, r0, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x255}, 0x0, 0x1, 0x0, 0x0) 1.316738581s ago: executing program 1 (id=56): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x20600, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000093}]}) 1.220109423s ago: executing program 1 (id=57): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4c}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) 1.215672273s ago: executing program 3 (id=58): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0xa000000}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/config\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) 1.203522254s ago: executing program 3 (id=59): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0x1, 0xfffc, 0x8002}, 0x20) (fail_nth: 3) 1.136139875s ago: executing program 3 (id=60): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000180)={0x3, 0x1}) (async) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r2, 0x400455c8, 0x0) memfd_create(0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000a38000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/241, 0xf1, 0x1, &(0x7f0000000240)=""/233, 0xe9}, &(0x7f0000000380)=0x40) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000000)=0x2) 855.447141ms ago: executing program 0 (id=61): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$uac1(0x3, 0xbc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902aa0003010520060904000000010100000a240108002f000201020c24020306020408070080fc072408e100080509240605020108000309240301ff010506fb0904010000010200000904010101010200000a2402028000b10c07fa0724010306011009050109ff0343060d0225"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="2e66440fc46b070eda5b64b915090000b8ffffffffbaffffffff0f3066b83c010f00d026f0468102000000000f015e00b806e5568aef66b83c018ed066b8005866ef41c065000066baf80cb8b89b378cef66bafc0cedb900090000b801000000ba000000000f30450018", 0x6a}], 0x1, 0x7, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000500)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x10000c, 0x4, 0x5, 0xd, 0x8, 0x7, 0x4, 0xd0, 0x101, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2402, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_usb_connect$uac1(0x3, 0xbc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902aa0003010520060904000000010100000a240108002f000201020c24020306020408070080fc072408e100080509240605020108000309240301ff010506fb0904010000010200000904010101010200000a2402028000b10c07fa0724010306011009050109ff0343060d0225"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="2e66440fc46b070eda5b64b915090000b8ffffffffbaffffffff0f3066b83c010f00d026f0468102000000000f015e00b806e5568aef66b83c018ed066b8005866ef41c065000066baf80cb8b89b378cef66bafc0cedb900090000b801000000ba000000000f30450018", 0x6a}], 0x1, 0x7, 0x0, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000500)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x10000c, 0x4, 0x5, 0xd, 0x8, 0x7, 0x4, 0xd0, 0x101, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) (async) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 737.560394ms ago: executing program 3 (id=62): r0 = syz_usb_connect(0x0, 0x62, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 140.209017ms ago: executing program 2 (id=63): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="dd187d5bd579"}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a0088a80180c2000003cd1008a2dc5886dd61fdeb4a00d000d0fe8000000000002c00000000000000aa00000000000000000000ffffac1e00013219000000000013070800000001009bb9"], 0x10a) 125.022888ms ago: executing program 2 (id=64): prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x1, 0x0) (async, rerun: 64) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) (async) sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) (async, rerun: 32) recvmmsg(r0, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}, 0x70}], 0x1, 0x40004023, 0x0) (rerun: 32) 54.247489ms ago: executing program 2 (id=65): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x20600, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000093}]}) 264.861µs ago: executing program 2 (id=66): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{}, 0x16, 0x0, 0xffffffff}, 0x18) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f00000001c0)={0x0, 0xb, 0x303, 0xff7f, 0x0, 0x7, 0x0}) syz_open_pts(r0, 0x38800) syz_usb_connect$uac2(0x0, 0x98, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001000000083512028040000102030109028600030180e007080b0101010a204f0904000000010120000924010200032600c511240806060001020002000200feff03000c2403fd0004a80206f9ff0a090401000001022000090401010101022000090501094000050400082501810909020009040200000102"], 0x0) 0s ago: executing program 0 (id=67): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) shutdown(r2, 0x1) recvfrom$inet(r2, 0x0, 0x0, 0x720, 0x0, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000001c0)={0x0, 0x2710}, 0xffffff72) getsockopt$sock_timeval(r1, 0x1, 0x15, 0x0, &(0x7f0000000440)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ptrace(0x10, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x181000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x190ec) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000001140), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x485, 0x0, 0xd}]}) kernel console output (not intermixed with test programs): cess permissive=1 [ 13.387904][ T36] audit: type=1400 audit(1784866068.360:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. [ 20.916005][ T36] audit: type=1400 audit(1784866075.900:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.917210][ T286] cgroup: Unknown subsys name 'net' [ 20.939027][ T36] audit: type=1400 audit(1784866075.900:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.966720][ T36] audit: type=1400 audit(1784866075.930:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.967093][ T286] cgroup: Unknown subsys name 'devices' [ 21.093425][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.099082][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.191319][ T36] audit: type=1400 audit(1784866076.170:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.214692][ T36] audit: type=1400 audit(1784866076.180:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.239503][ T36] audit: type=1400 audit(1784866076.180:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.248532][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.271732][ T36] audit: type=1400 audit(1784866076.260:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.297933][ T36] audit: type=1400 audit(1784866076.260:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.328117][ T36] audit: type=1400 audit(1784866076.310:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.354059][ T36] audit: type=1400 audit(1784866076.310:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.354427][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.054133][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.071274][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.078548][ T293] bridge_slave_0: entered allmulticast mode [ 22.088420][ T293] bridge_slave_0: entered promiscuous mode [ 22.111584][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.118737][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.125877][ T293] bridge_slave_1: entered allmulticast mode [ 22.132368][ T293] bridge_slave_1: entered promiscuous mode [ 22.241413][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.248576][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.255798][ T299] bridge_slave_0: entered allmulticast mode [ 22.262104][ T299] bridge_slave_0: entered promiscuous mode [ 22.268815][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.276093][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.283471][ T299] bridge_slave_1: entered allmulticast mode [ 22.289785][ T299] bridge_slave_1: entered promiscuous mode [ 22.302838][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.310074][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.317234][ T297] bridge_slave_0: entered allmulticast mode [ 22.323553][ T297] bridge_slave_0: entered promiscuous mode [ 22.332447][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.339579][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.346788][ T297] bridge_slave_1: entered allmulticast mode [ 22.353145][ T297] bridge_slave_1: entered promiscuous mode [ 22.393041][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.400213][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.407546][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.414874][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.437331][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.444568][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.451982][ T298] bridge_slave_0: entered allmulticast mode [ 22.458211][ T298] bridge_slave_0: entered promiscuous mode [ 22.464895][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.472294][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.479728][ T298] bridge_slave_1: entered allmulticast mode [ 22.486082][ T298] bridge_slave_1: entered promiscuous mode [ 22.579363][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.586772][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.599750][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.606864][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.619774][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.626883][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.691385][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.698680][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.711546][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.718728][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.743976][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.751131][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.759033][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.766091][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.774545][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.781816][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.789478][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.796552][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.812574][ T293] veth0_vlan: entered promiscuous mode [ 22.835113][ T293] veth1_macvtap: entered promiscuous mode [ 22.864808][ T299] veth0_vlan: entered promiscuous mode [ 22.881883][ T297] veth0_vlan: entered promiscuous mode [ 22.892795][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.916616][ T297] veth1_macvtap: entered promiscuous mode [ 22.928104][ T298] veth0_vlan: entered promiscuous mode [ 22.952807][ T299] veth1_macvtap: entered promiscuous mode [ 22.967291][ T298] veth1_macvtap: entered promiscuous mode [ 23.040371][ T323] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.067055][ T325] loop7: detected capacity change from 0 to 7 [ 23.074229][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 23.083508][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 23.092417][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 23.101625][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 23.109681][ T320] loop7: unable to read partition table [ 23.129541][ T328] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4'. [ 23.135219][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 23.147808][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 23.156884][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 23.166254][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 23.174146][ T325] loop7: unable to read partition table [ 23.180368][ T325] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 23.184967][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 23.203101][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 23.212438][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 23.221650][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 23.231874][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 23.241087][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 23.249434][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 23.258796][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 23.261688][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.274410][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 23.283569][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 23.441342][ T310] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.450453][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 23.459557][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 23.472348][ T45] usb 2-1: string descriptor 0 read error: -22 [ 23.478593][ T45] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 23.488138][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.511245][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.613553][ T327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 23.622276][ T327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 23.637096][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 23.645684][ T310] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 23.653389][ T310] usb 1-1: can't read configurations, error -71 [ 23.661754][ T9] usb 3-1: too many configurations: 86, using maximum allowed: 8 [ 23.670377][ T9] usb 3-1: config index 0 descriptor too short (expected 65134, got 31) [ 23.678880][ T9] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 23.689520][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 23.703834][ T9] usb 3-1: config index 1 descriptor too short (expected 65134, got 31) [ 23.712462][ T9] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 23.723355][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 23.737630][ T9] usb 3-1: config index 2 descriptor too short (expected 65134, got 31) [ 23.746089][ T9] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 23.757191][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 23.770777][ T9] usb 3-1: config index 3 descriptor too short (expected 65134, got 31) [ 23.779783][ T9] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 23.789967][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 23.804603][ T9] usb 3-1: config index 4 descriptor too short (expected 65134, got 31) [ 23.813831][ T9] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 23.824983][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 23.826681][ T349] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11'. [ 23.846541][ T9] usb 3-1: config index 5 descriptor too short (expected 65134, got 31) [ 23.855728][ T9] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 23.866445][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 23.880402][ T9] usb 3-1: config index 6 descriptor too short (expected 65134, got 31) [ 23.888993][ T9] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 23.900014][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 23.913456][ T349] team_slave_1: entered promiscuous mode [ 23.919215][ T349] team_slave_1: entered allmulticast mode [ 23.921482][ T9] usb 3-1: config index 7 descriptor too short (expected 65134, got 31) [ 23.934145][ T9] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 23.944544][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 23.966902][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 23.976261][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.984498][ T9] usb 3-1: Product: syz [ 23.988866][ T9] usb 3-1: Manufacturer: syz [ 23.993707][ T9] usb 3-1: SerialNumber: syz [ 24.002269][ T9] rtl8150 3-1:1.0: couldn't find required endpoints [ 24.009364][ T9] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 24.107524][ T45] usb 2-1: current rate 1792 is different from the runtime rate 48000 [ 24.237064][ T323] 9pnet_fd: p9_fd_create_unix (323): problem connecting socket: ./cgroup/file0: -2 [ 24.248480][ T323] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3'. [ 24.258520][ T323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 24.279392][ T323] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3'. [ 24.289615][ T9] usb 3-1: USB disconnect, device number 2 [ 24.318733][ T45] usb 2-1: USB disconnect, device number 2 [ 24.522057][ T392] 9pnet_fd: Insufficient options for proto=fd [ 24.701335][ T310] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 24.837069][ T398] input: syz0 as /devices/virtual/input/input4 [ 24.860037][ T310] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 24.876853][ T310] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.886189][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 24.897276][ T310] usb 1-1: SerialNumber: syz [ 24.922010][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.091535][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 25.098264][ T45] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 25.106802][ T45] usb 4-1: can't read configurations, error -22 [ 25.111441][ T341] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 25.161246][ T31] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 25.241310][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 25.272299][ T341] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 25.283446][ T341] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1015, setting to 64 [ 25.294553][ T341] usb 2-1: config 0 interface 0 has no altsetting 0 [ 25.301174][ T341] usb 2-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.00 [ 25.310270][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.321584][ T31] usb 3-1: Invalid ep0 maxpacket: 64 [ 25.325085][ T310] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 25.336111][ T341] usb 2-1: config 0 descriptor?? [ 25.342168][ T310] usb 1-1: USB disconnect, device number 3 [ 25.349259][ T402] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 25.401315][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 25.408315][ T45] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 25.416694][ T45] usb 4-1: can't read configurations, error -22 [ 25.423121][ T45] usb usb4-port1: attempt power cycle [ 25.451271][ T31] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 25.558083][ T402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'. [ 25.560873][ T341] wacom 0003:056A:0343.0001: unknown main item tag 0x0 [ 25.574028][ T341] wacom 0003:056A:0343.0001: unknown main item tag 0x6 [ 25.580900][ T341] wacom 0003:056A:0343.0001: unknown main item tag 0x3 [ 25.587881][ T341] wacom 0003:056A:0343.0001: item fetching failed at offset 39/40 [ 25.596025][ T341] wacom 0003:056A:0343.0001: parse failed [ 25.602219][ T341] wacom 0003:056A:0343.0001: probe with driver wacom failed with error -22 [ 25.612599][ T31] usb 3-1: Invalid ep0 maxpacket: 64 [ 25.618151][ T31] usb usb3-port1: attempt power cycle [ 25.731508][ T310] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 25.761286][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 25.769208][ T321] usb 2-1: USB disconnect, device number 3 [ 25.791632][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 25.798177][ T45] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 25.806141][ T45] usb 4-1: can't read configurations, error -22 [ 25.883621][ T310] usb 1-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 25.892910][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.900897][ T310] usb 1-1: Product: syz [ 25.905433][ T310] usb 1-1: Manufacturer: syz [ 25.910039][ T310] usb 1-1: SerialNumber: syz [ 25.941301][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 25.961320][ T31] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 25.969000][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 25.975962][ T45] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 25.983964][ T45] usb 4-1: can't read configurations, error -22 [ 25.990480][ T31] usb 3-1: Invalid ep0 maxpacket: 64 [ 25.995821][ T45] usb usb4-port1: unable to enumerate USB device [ 26.131437][ T31] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 26.151594][ T31] usb 3-1: Invalid ep0 maxpacket: 64 [ 26.157046][ T31] usb usb3-port1: unable to enumerate USB device [ 26.283835][ T36] kauditd_printk_skb: 94 callbacks suppressed [ 26.283852][ T36] audit: type=1400 audit(1784866081.270:168): avc: denied { read write } for pid=420 comm="syz.1.23" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 26.314158][ T36] audit: type=1400 audit(1784866081.270:169): avc: denied { open } for pid=420 comm="syz.1.23" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 26.338621][ T36] audit: type=1400 audit(1784866081.270:170): avc: denied { ioctl } for pid=420 comm="syz.1.23" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 26.364449][ T36] audit: type=1400 audit(1784866081.270:171): avc: denied { create } for pid=420 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.384087][ T36] audit: type=1400 audit(1784866081.270:172): avc: denied { connect } for pid=420 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.404216][ T36] audit: type=1400 audit(1784866081.320:173): avc: denied { setopt } for pid=420 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.702206][ T36] audit: type=1400 audit(1784866082.690:174): avc: denied { ioctl } for pid=425 comm="syz.3.25" path="socket:[5164]" dev="sockfs" ino=5164 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.702466][ T426] batadv_slave_1: entered promiscuous mode [ 27.726727][ T36] audit: type=1400 audit(1784866082.690:175): avc: denied { setopt } for pid=425 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.742212][ T425] batadv_slave_1: left promiscuous mode [ 27.955593][ T36] audit: type=1400 audit(1784866082.940:176): avc: denied { read } for pid=431 comm="syz.2.28" dev="nsfs" ino=4026532487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.977162][ T36] audit: type=1400 audit(1784866082.940:177): avc: denied { open } for pid=431 comm="syz.2.28" path="net:[4026532487]" dev="nsfs" ino=4026532487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.071288][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 28.222739][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 28.231395][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.243647][ T31] usb 4-1: string descriptor 0 read error: -22 [ 28.249888][ T31] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 28.259098][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.470211][ T428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.478937][ T428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.519537][ T451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 28.528450][ T451] bridge_slave_1: left allmulticast mode [ 28.534522][ T451] bridge_slave_1: left promiscuous mode [ 28.540368][ T451] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.548554][ T451] bridge_slave_0: left allmulticast mode [ 28.555607][ T451] bridge_slave_0: left promiscuous mode [ 28.561567][ T451] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.771266][ T45] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 28.889455][ T31] usb 4-1: failed to read current rate; disabling the check [ 28.898875][ T310] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 28.907439][ T310] usb 1-1: 1:1 : sample bitwidth 9 in over sample bytes 1 [ 28.915012][ T310] usb 1-1: found format II with max.bitrate = 44931, frame size=8 [ 28.922729][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 28.923032][ T310] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 28.931941][ T45] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 4 [ 28.941343][ T310] usb 1-1: USB disconnect, device number 4 [ 28.959429][ T45] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 28.967096][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 28.969952][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.993549][ T45] usb 3-1: Product: syz [ 28.997739][ T45] usb 3-1: Manufacturer: syz [ 29.002471][ T45] usb 3-1: SerialNumber: syz [ 29.051246][ T407] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 29.091345][ T9] usb 4-1: USB disconnect, device number 6 [ 29.202362][ T407] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.212552][ T407] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 29.221717][ T407] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 29.239314][ T407] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 29.248673][ T407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.256995][ T407] usb 2-1: Product: syz [ 29.261258][ T407] usb 2-1: Manufacturer: syz [ 29.264595][ T449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.266005][ T407] usb 2-1: SerialNumber: syz [ 29.275635][ T449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.284510][ T407] usb 2-1: config 0 descriptor?? [ 29.301270][ T310] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 29.314156][ T45] usb 3-1: selecting invalid altsetting 1 [ 29.320178][ T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 29.329796][ T45] usb 3-1: selecting invalid altsetting 1 [ 29.335819][ T45] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 29.345439][ T45] usb 3-1: selecting invalid altsetting 1 [ 29.352934][ T45] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 29.362892][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.363975][ T45] usb 3-1: USB disconnect, device number 7 [ 29.452436][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.463467][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.473334][ T310] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 29.482601][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.491829][ T310] usb 1-1: config 0 descriptor?? [ 29.499890][ T460] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.514256][ T9] usb 2-1: USB disconnect, device number 4 [ 29.706384][ T310] usbhid 1-1:0.0: can't add hid device: -71 [ 29.712510][ T310] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 29.722111][ T310] usb 1-1: USB disconnect, device number 5 [ 29.849492][ T469] capability: warning: `syz.2.41' uses 32-bit capabilities (legacy support in use) [ 29.851278][ T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 30.012387][ T45] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 30.025013][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.035231][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 30.048277][ T45] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 30.057776][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.066969][ T45] usb 4-1: config 0 descriptor?? [ 30.074729][ T45] usb-storage 4-1:0.0: USB Mass Storage device detected [ 30.084629][ T45] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 30.121304][ T310] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 30.225754][ T492] FAULT_INJECTION: forcing a failure. [ 30.225754][ T492] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 30.239069][ T492] CPU: 1 UID: 0 PID: 492 Comm: syz.0.48 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 30.239101][ T492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 30.239119][ T492] Call Trace: [ 30.239126][ T492] [ 30.239133][ T492] __dump_stack+0x21/0x30 [ 30.239169][ T492] dump_stack_lvl+0x140/0x1c0 [ 30.239193][ T492] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.239217][ T492] ? avc_has_perm_noaudit+0x289/0x360 [ 30.239240][ T492] dump_stack+0x19/0x20 [ 30.239262][ T492] should_fail_ex+0x3c2/0x510 [ 30.239283][ T492] should_fail+0xf/0x20 [ 30.239302][ T492] should_fail_usercopy+0x1e/0x30 [ 30.239322][ T492] _copy_from_user+0x20/0xa0 [ 30.239346][ T492] ipv6_flowlabel_opt+0x151/0x25e0 [ 30.239366][ T492] ? selinux_file_open+0x46c/0x630 [ 30.239384][ T492] ? __cfi_selinux_file_open+0x10/0x10 [ 30.239403][ T492] ? __cfi_ipv6_flowlabel_opt+0x10/0x10 [ 30.239422][ T492] ? __kasan_check_write+0x18/0x20 [ 30.239440][ T492] ? _raw_spin_lock_bh+0x96/0x130 [ 30.239461][ T492] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 30.239481][ T492] ? _raw_spin_unlock_bh+0x54/0x60 [ 30.239500][ T492] ? lock_sock_nested+0x216/0x2a0 [ 30.239522][ T492] ? __cfi_lock_sock_nested+0x10/0x10 [ 30.239542][ T492] ? is_bpf_text_address+0x17b/0x1a0 [ 30.239573][ T492] do_ipv6_setsockopt+0xea0/0x3350 [ 30.239602][ T492] ? __cfi_do_ipv6_setsockopt+0x10/0x10 [ 30.239629][ T492] ? avc_has_perm_noaudit+0x26b/0x360 [ 30.239650][ T492] ? __asan_memcpy+0x5a/0x80 [ 30.239668][ T492] ? avc_has_perm_noaudit+0x289/0x360 [ 30.239690][ T492] ? avc_has_perm+0x155/0x240 [ 30.239711][ T492] ? __cfi_avc_has_perm+0x10/0x10 [ 30.239733][ T492] ? selinux_socket_setsockopt+0x324/0x3d0 [ 30.239756][ T492] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 30.239777][ T492] ? bpf_lsm_file_permission+0xd/0x20 [ 30.239800][ T492] ? vfs_write+0xbcf/0xfd0 [ 30.239820][ T492] ipv6_setsockopt+0x5d/0x170 [ 30.239842][ T492] udpv6_setsockopt+0xa3/0xc0 [ 30.239862][ T492] sock_common_setsockopt+0xb5/0xd0 [ 30.239874][ T492] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 30.239886][ T492] do_sock_setsockopt+0x27c/0x410 [ 30.239896][ T492] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 30.239906][ T492] ? __fget_files+0x2bc/0x330 [ 30.239919][ T492] __x64_sys_setsockopt+0x1b7/0x250 [ 30.239929][ T492] x64_sys_call+0x2adc/0x2ee0 [ 30.239938][ T492] do_syscall_64+0x57/0xf0 [ 30.239950][ T492] ? clear_bhb_loop+0x50/0xa0 [ 30.239963][ T492] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.239976][ T492] RIP: 0033:0x7f844579de99 [ 30.239986][ T492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.239995][ T492] RSP: 002b:00007f8446744028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 30.240011][ T492] RAX: ffffffffffffffda RBX: 00007f8445a25fa0 RCX: 00007f844579de99 [ 30.240019][ T492] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 30.240026][ T492] RBP: 00007f8446744090 R08: 0000000000000020 R09: 0000000000000000 [ 30.240032][ T492] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 30.240039][ T492] R13: 00007f8445a26038 R14: 00007f8445a25fa0 R15: 00007ffd72ebda48 [ 30.240048][ T492] [ 30.272320][ T310] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 30.579141][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.590079][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.599885][ T310] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 30.615320][ T310] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 30.624555][ T310] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 30.634221][ T310] usb 3-1: Manufacturer: syz [ 30.641528][ T310] usb 3-1: config 0 descriptor?? [ 30.661381][ T45] usb 4-1: USB disconnect, device number 7 [ 30.842811][ T526] FAULT_INJECTION: forcing a failure. [ 30.842811][ T526] name failslab, interval 1, probability 0, space 0, times 1 [ 30.855578][ T526] CPU: 1 UID: 0 PID: 526 Comm: syz.3.59 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 30.855606][ T526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 30.855617][ T526] Call Trace: [ 30.855622][ T526] [ 30.855628][ T526] __dump_stack+0x21/0x30 [ 30.855658][ T526] dump_stack_lvl+0x140/0x1c0 [ 30.855681][ T526] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.855706][ T526] dump_stack+0x19/0x20 [ 30.855728][ T526] should_fail_ex+0x3c2/0x510 [ 30.855750][ T526] should_failslab+0xac/0x100 [ 30.855772][ T526] __kmalloc_cache_noprof+0x41/0x470 [ 30.855792][ T526] ? ipv6_flowlabel_opt+0xce3/0x25e0 [ 30.855813][ T526] ipv6_flowlabel_opt+0xce3/0x25e0 [ 30.855833][ T526] ? __cfi_ipv6_flowlabel_opt+0x10/0x10 [ 30.855852][ T526] ? __kasan_check_write+0x18/0x20 [ 30.855870][ T526] ? _raw_spin_lock_bh+0x96/0x130 [ 30.855890][ T526] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 30.855910][ T526] ? _raw_spin_unlock_bh+0x54/0x60 [ 30.855930][ T526] ? lock_sock_nested+0x216/0x2a0 [ 30.855952][ T526] ? __cfi_lock_sock_nested+0x10/0x10 [ 30.855981][ T526] ? is_bpf_text_address+0x17b/0x1a0 [ 30.856010][ T526] do_ipv6_setsockopt+0xea0/0x3350 [ 30.856038][ T526] ? __cfi_do_ipv6_setsockopt+0x10/0x10 [ 30.856064][ T526] ? avc_has_perm_noaudit+0x26b/0x360 [ 30.856092][ T526] ? __asan_memcpy+0x5a/0x80 [ 30.856110][ T526] ? avc_has_perm_noaudit+0x289/0x360 [ 30.856132][ T526] ? avc_has_perm+0x155/0x240 [ 30.856153][ T526] ? __cfi_avc_has_perm+0x10/0x10 [ 30.856174][ T526] ? selinux_socket_setsockopt+0x324/0x3d0 [ 30.856199][ T526] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 30.856221][ T526] ? bpf_lsm_file_permission+0xd/0x20 [ 30.856245][ T526] ? vfs_write+0xbcf/0xfd0 [ 30.856265][ T526] ipv6_setsockopt+0x5d/0x170 [ 30.856291][ T526] udpv6_setsockopt+0xa3/0xc0 [ 30.856313][ T526] sock_common_setsockopt+0xb5/0xd0 [ 30.856334][ T526] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 30.856364][ T526] do_sock_setsockopt+0x27c/0x410 [ 30.856383][ T526] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 30.856399][ T526] ? __fget_files+0x2bc/0x330 [ 30.856422][ T526] __x64_sys_setsockopt+0x1b7/0x250 [ 30.856440][ T526] x64_sys_call+0x2adc/0x2ee0 [ 30.856457][ T526] do_syscall_64+0x57/0xf0 [ 30.856477][ T526] ? clear_bhb_loop+0x50/0xa0 [ 30.856501][ T526] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.856523][ T526] RIP: 0033:0x7f3cf2b9de99 [ 30.856537][ T526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.856556][ T526] RSP: 002b:00007f3cf3a20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 30.856577][ T526] RAX: ffffffffffffffda RBX: 00007f3cf2e25fa0 RCX: 00007f3cf2b9de99 [ 30.856591][ T526] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 30.856602][ T526] RBP: 00007f3cf3a20090 R08: 0000000000000020 R09: 0000000000000000 [ 30.856612][ T526] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 30.856623][ T526] R13: 00007f3cf2e26038 R14: 00007f3cf2e25fa0 R15: 00007ffc9d6cbf58 [ 30.856637][ T526] [ 31.141291][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 31.265944][ T477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.274524][ T477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.322867][ T310] usbhid 3-1:0.0: can't add hid device: -71 [ 31.328867][ T310] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 31.339539][ T310] usb 3-1: USB disconnect, device number 8 [ 31.346778][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 31.355325][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.367767][ T9] usb 2-1: string descriptor 0 read error: -22 [ 31.374046][ T9] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 31.383290][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.461336][ T341] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 31.541259][ T336] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 31.611375][ T341] usb 1-1: Using ep0 maxpacket: 16 [ 31.617865][ T341] usb 1-1: unable to get BOS descriptor or descriptor too short [ 31.626699][ T341] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.637524][ T341] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 31.646719][ T341] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 67, changing to 7 [ 31.659867][ T341] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 31.669096][ T341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.677206][ T341] usb 1-1: Product: syz [ 31.681502][ T341] usb 1-1: Manufacturer: syz [ 31.686134][ T341] usb 1-1: SerialNumber: syz [ 31.701293][ T336] usb 4-1: Using ep0 maxpacket: 8 [ 31.707408][ T336] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 31.715568][ T336] usb 4-1: config 0 has no interface number 0 [ 31.723526][ T336] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 31.732650][ T336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.740838][ T336] usb 4-1: Product: syz [ 31.745139][ T336] usb 4-1: Manufacturer: syz [ 31.749954][ T336] usb 4-1: SerialNumber: syz [ 31.755210][ T336] usb 4-1: config 0 descriptor?? [ 31.897040][ T532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.905898][ T532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.924279][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 31.924296][ T36] audit: type=1400 audit(1784866086.910:202): avc: denied { name_bind } for pid=544 comm="syz.2.64" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 31.952494][ T36] audit: type=1400 audit(1784866086.940:203): avc: denied { node_bind } for pid=544 comm="syz.2.64" saddr=100.1.1.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 31.996898][ T341] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 32.006718][ T341] usb 1-1: found format II with max.bitrate = 128, frame size=3249 [ 32.015826][ T341] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 32.022596][ T341] usb 1-1: 0:2 : does not exist [ 32.028308][ T341] usb 1-1: unit 6 not found! [ 32.048737][ T341] usb 1-1: USB disconnect, device number 6 [ 32.058054][ T553] ------------[ cut here ]------------ [ 32.063721][ T553] WARNING: CPU: 1 PID: 553 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 32.073191][ T553] Modules linked in: [ 32.077283][ T553] CPU: 1 UID: 0 PID: 553 Comm: syz.0.67 Not tainted syzkaller #0 f0c7936fd393d0f1370a9bd0d5eb1da62a5da95d [ 32.079120][ T36] audit: type=1400 audit(1784866087.040:204): avc: denied { load_policy } for pid=552 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 32.088608][ T553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 32.088628][ T553] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 32.120611][ T554] udevd[554]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 32.124851][ T553] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 13 dd 0b 06 00 0f 85 c2 00 00 00 c6 05 06 dd 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 32.160341][ T553] RSP: 0018:ffffc9000e41f560 EFLAGS: 00010246 [ 32.161033][ T36] audit: type=1400 audit(1784866087.140:205): avc: denied { execute } for pid=552 comm="syz.0.67" name="file0" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.166514][ T553] RAX: 0000000000000000 RBX: 000000000000000e RCX: 0000000000000000 [ 32.188665][ T555] process 'syz.0.67' launched './file0' with NULL argv: empty string added [ 32.196491][ T553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e41f618 [ 32.209436][ T9] usb 2-1: USB disconnect, device number 5 [ 32.213364][ T553] RBP: ffffc9000e41f6a0 R08: ffffc9000e41f617 R09: 0000000000000000 [ 32.227171][ T553] R10: ffffc9000e41f600 R11: fffff52001c83ec3 R12: ffffc9000e41f5a0 [ 32.231737][ T36] audit: type=1400 audit(1784866087.220:206): avc: denied { execute_no_trans } for pid=552 comm="syz.0.67" path="/17/file0" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.235178][ T553] R13: dffffc0000000000 R14: 1ffff92001c83eb0 R15: 0000000000000000 [ 32.266218][ T553] FS: 00007f84467446c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 32.268967][ T336] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 32.275209][ T553] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.275230][ T553] CR2: 0000200000019000 CR3: 0000000116486000 CR4: 00000000003526b0 [ 32.283596][ T336] usb 4-1: No valid video chain found. [ 32.288148][ T553] Call Trace: [ 32.288160][ T553] [ 32.288167][ T553] ? vfs_write+0x3c4/0xfd0 [ 32.299564][ T336] usb 4-1: USB disconnect, device number 8 [ 32.301837][ T553] ? ksys_write+0x145/0x260 [ 32.322727][ T553] ? x64_sys_call+0x271c/0x2ee0 [ 32.327624][ T553] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 32.333377][ T553] ? hashtab_init+0xd6/0x1f0 [ 32.337984][ T553] ___kmalloc_large_node+0x81/0x220 [ 32.343235][ T553] ? hashtab_init+0xd6/0x1f0 [ 32.347840][ T553] __kmalloc_large_node_noprof+0x1e/0xd0 [ 32.353518][ T553] ? hashtab_init+0xd6/0x1f0 [ 32.358125][ T553] __kmalloc_noprof+0x326/0x510 [ 32.363019][ T553] ? kasan_save_alloc_info+0x3a/0x50 [ 32.368326][ T553] hashtab_init+0xd6/0x1f0 [ 32.372787][ T553] ? common_read+0x175/0x490 [ 32.377421][ T553] symtab_init+0x44/0x70 [ 32.381702][ T553] common_read+0x1e7/0x490 [ 32.386137][ T553] ? hashtab_init+0xd6/0x1f0 [ 32.390762][ T553] ? __cfi_common_read+0x10/0x10 [ 32.395786][ T553] ? hashtab_init+0x100/0x1f0 [ 32.400488][ T553] policydb_read+0xa83/0x2860 [ 32.405217][ T553] ? __kasan_kmalloc+0x96/0xb0 [ 32.410104][ T553] ? __cfi_policydb_read+0x10/0x10 [ 32.415421][ T553] ? security_load_policy+0x130/0x12d0 [ 32.420924][ T553] security_load_policy+0x16a/0x12d0 [ 32.426256][ T553] ? irqentry_exit+0x4a/0x60 [ 32.431142][ T553] ? __kasan_check_write+0x18/0x20 [ 32.436369][ T553] ? mutex_lock+0x97/0x1d0 [ 32.440876][ T553] ? __cfi_security_load_policy+0x10/0x10 [ 32.446865][ T553] ? rep_movs_alternative+0x4a/0xa0 [ 32.452109][ T553] sel_write_load+0x258/0x600 [ 32.456793][ T553] ? __cfi_futex_wake+0x10/0x10 [ 32.461681][ T553] ? __cfi_sel_write_load+0x10/0x10 [ 32.466918][ T553] ? bpf_lsm_file_permission+0xd/0x20 [ 32.472341][ T553] ? __cfi_sel_write_load+0x10/0x10 [ 32.477554][ T553] vfs_write+0x3c4/0xfd0 [ 32.481844][ T553] ? __cfi_vfs_write+0x10/0x10 [ 32.486723][ T553] ? __kasan_check_write+0x18/0x20 [ 32.491885][ T553] ? mutex_lock+0x97/0x1d0 [ 32.496326][ T553] ? __cfi_mutex_lock+0x10/0x10 [ 32.501350][ T553] ksys_write+0x145/0x260 [ 32.505723][ T553] ? xfd_validate_state+0x68/0x140 [ 32.510844][ T553] ? __cfi_ksys_write+0x10/0x10 [ 32.515761][ T553] ? __kasan_check_write+0x18/0x20 [ 32.520908][ T553] ? fpregs_restore_userregs+0x11c/0x260 [ 32.526580][ T553] __x64_sys_write+0x7f/0x90 [ 32.531272][ T553] x64_sys_call+0x271c/0x2ee0 [ 32.536032][ T553] do_syscall_64+0x57/0xf0 [ 32.540550][ T553] ? clear_bhb_loop+0x50/0xa0 [ 32.545255][ T553] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.551236][ T553] RIP: 0033:0x7f844579de99 [ 32.555745][ T553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.575449][ T553] RSP: 002b:00007f8446744028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 32.583988][ T553] RAX: ffffffffffffffda RBX: 00007f8445a25fa0 RCX: 00007f844579de99 [ 32.592045][ T553] RDX: 00000000000190ec RSI: 0000200000000000 RDI: 0000000000000009 [ 32.600025][ T553] RBP: 00007f8445833eaf R08: 0000000000000000 R09: 0000000000000000 [ 32.608046][ T553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.616062][ T553] R13: 00007f8445a26038 R14: 00007f8445a25fa0 R15: 00007ffd72ebda48 [ 32.624089][ T553] [ 32.627165][ T553] ---[ end trace 0000000000000000 ]--- [ 32.632970][ T553] SELinux: failed to load policy [ 32.761287][ T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 32.911285][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 32.917969][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.929805][ T31] usb 3-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 32.938984][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.947430][ T31] usb 3-1: Product: syz [ 32.951733][ T31] usb 3-1: Manufacturer: syz [ 32.956343][ T31] usb 3-1: SerialNumber: syz [ 33.165034][ T31] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 33.172110][ T31] usb 3-1: unit 2 not found! [ 33.176953][ T31] usb 3-1: 6:0: failed to get current value for ch 0 (-71) [ 33.200278][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 33.211530][ T31] usb 3-1: USB disconnect, device number 9 [ 33.220398][ T554] udevd[554]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.088172][ T36] audit: type=1400 audit(1784866090.070:207): avc: denied { search } for pid=556 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.110598][ T36] audit: type=1400 audit(1784866090.070:208): avc: denied { read } for pid=557 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.133641][ T36] audit: type=1400 audit(1784866090.070:209): avc: denied { open } for pid=557 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.158879][ T36] audit: type=1400 audit(1784866090.070:210): avc: denied { getattr } for pid=557 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.184103][ T36] audit: type=1400 audit(1784866090.130:211): avc: denied { write } for pid=556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1