last executing test programs: 4.00652695s ago: executing program 1 (id=712): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 3.950843601s ago: executing program 1 (id=713): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(0x0, 0x40, 0x0) 2.898049768s ago: executing program 2 (id=728): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) 2.576183614s ago: executing program 2 (id=730): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.269139936s ago: executing program 1 (id=734): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x102) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) 2.090577218s ago: executing program 0 (id=736): openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.930586744s ago: executing program 0 (id=738): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.930485585s ago: executing program 1 (id=740): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.790024316s ago: executing program 0 (id=742): eventfd2(0x7, 0x801) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f00000005c0)="4e4f137360dcdeb318", 0x9}], 0x1}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) 1.664519301s ago: executing program 1 (id=743): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) sendto$inet(r0, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 1.664314817s ago: executing program 0 (id=744): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff000005000300000000000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.578482444s ago: executing program 1 (id=746): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120100038ee3710889076001fe8201020301090212000107d1102d0904"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002d00)={0x44, &(0x7f0000000000)={0x20, 0x16, 0x6, "99d9e9678b2c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 1.434061431s ago: executing program 0 (id=749): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.162086354s ago: executing program 0 (id=752): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000800000008048263d1cb392ee6262d168b33aca6c4419e26a06d31c66505701b7d6df7375f4272f4ec7f1f4c718875e08cb6005f8d89f22f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='P') 822.460508ms ago: executing program 4 (id=756): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = fcntl$dupfd(r0, 0x0, r0) read$snapshot(r1, 0x0, 0xffffffbf) 676.552738ms ago: executing program 3 (id=757): sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)="8baf69369f9829956576c0b148ce979cc9df9f2720772440d7c864ad9c9046554774708875e09b6dd1bc26e0c1b6f33e0e90e9e4f1bbb63e6b95e21f3b04e1944c9c73061f671149f0c16e9ad0be0ea17b8e930e91831649af9f0f2258492ee6319c", 0x62}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) 640.232538ms ago: executing program 4 (id=758): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff000005000300000000000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 613.306872ms ago: executing program 3 (id=759): memfd_create(&(0x7f0000000040)='security.selinux\x00\xab', 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) 514.50955ms ago: executing program 3 (id=760): socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) unshare(0x2c020400) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f, 0x0, 0x4, @void, @value=r0}, 0x20) 488.190571ms ago: executing program 4 (id=761): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10, 0x21800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}}, 0x0) 429.628279ms ago: executing program 2 (id=762): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x4009}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000480)=0x7) 361.95139ms ago: executing program 4 (id=763): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) write$binfmt_script(r0, 0x0, 0x0) 317.055431ms ago: executing program 2 (id=764): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x4f27, 0x4, 0x10000, 0x4, 0x3, 0x5, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0xb, 0xe66, 0x3, 0x7f, 0x4085, 0xffffffff, 0xfffffff8]}) ioctl$COMEDI_SETWSUBD(r0, 0x6411) 294.027656ms ago: executing program 3 (id=765): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff48000000000000009500000000000000f811a93abffc759bde1cf5b81c9045c7f4dca2d408451ec23c4ea77107b2abe994a17fcec0260ec3bef7eb0ac2f05d610b888ba39d80dcc64cac513e6b5925357ba931b314a93fadea268c75f78d1b7735870ff51ee507ab14821403c12546bcfab94c91245455f9738810ff2ecbfbbbd4191d77f1d7be8c14ceb3aaeca09ac65fdf97bdceb3f4f5f4d3fac374d8c48b01455ad365ba0f706afe"], &(0x7f0000000040)='GPL\x00', 0x3, 0x1b, &(0x7f00000004c0)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x13, 0x10, &(0x7f0000000200), 0x10}, 0x80) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x20000000000000d2, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 159.721664ms ago: executing program 3 (id=766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x13, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x1c}}, 0x40880) 159.096832ms ago: executing program 2 (id=767): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="330360002e00feffff7f7ef52f555f2a0c0900000000000000f786dd3baa4b1f0f858c4632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x62, 0x6, @broadcast}, 0x14) 149.484817ms ago: executing program 4 (id=768): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 22.574743ms ago: executing program 3 (id=769): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x5, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='illinois\x00', 0x9) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 7.336469ms ago: executing program 2 (id=770): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2005, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=771): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. [ 63.549493][ T30] audit: type=1400 audit(1757982060.334:62): avc: denied { mounton } for pid=5835 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 63.552892][ T5835] cgroup: Unknown subsys name 'net' [ 63.572248][ T30] audit: type=1400 audit(1757982060.334:63): avc: denied { mount } for pid=5835 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.599576][ T30] audit: type=1400 audit(1757982060.364:64): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.733246][ T5835] cgroup: Unknown subsys name 'cpuset' [ 63.741635][ T5835] cgroup: Unknown subsys name 'rlimit' [ 63.866626][ T30] audit: type=1400 audit(1757982060.654:65): avc: denied { setattr } for pid=5835 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.898652][ T30] audit: type=1400 audit(1757982060.654:66): avc: denied { create } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 63.938686][ T30] audit: type=1400 audit(1757982060.654:67): avc: denied { write } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.940852][ T5837] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 63.959381][ T30] audit: type=1400 audit(1757982060.654:68): avc: denied { read } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.988025][ T30] audit: type=1400 audit(1757982060.664:69): avc: denied { mounton } for pid=5835 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 64.012868][ T30] audit: type=1400 audit(1757982060.664:70): avc: denied { mount } for pid=5835 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 64.036678][ T30] audit: type=1400 audit(1757982060.704:71): avc: denied { read } for pid=5517 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 64.937096][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.886614][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.894624][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.910398][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.917618][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.922889][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.924964][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.931998][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.940261][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.946492][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.953197][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.960747][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.975302][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.981395][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.982861][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.998304][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.002800][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.005610][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.020115][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.020299][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.028394][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.035012][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.049959][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.057991][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.068223][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.080416][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.493119][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 67.559275][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 67.586568][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 67.639982][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 67.676029][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 67.748868][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.756247][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.763569][ T5845] bridge_slave_0: entered allmulticast mode [ 67.770261][ T5845] bridge_slave_0: entered promiscuous mode [ 67.786772][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.793899][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.801195][ T5847] bridge_slave_0: entered allmulticast mode [ 67.807772][ T5847] bridge_slave_0: entered promiscuous mode [ 67.814819][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.821933][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.829030][ T5847] bridge_slave_1: entered allmulticast mode [ 67.836236][ T5847] bridge_slave_1: entered promiscuous mode [ 67.849458][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.856559][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.863804][ T5845] bridge_slave_1: entered allmulticast mode [ 67.871146][ T5845] bridge_slave_1: entered promiscuous mode [ 67.948122][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.962132][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.969240][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.976372][ T5846] bridge_slave_0: entered allmulticast mode [ 67.983229][ T5846] bridge_slave_0: entered promiscuous mode [ 67.991537][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.002932][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.020329][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.043405][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.050505][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.058209][ T5846] bridge_slave_1: entered allmulticast mode [ 68.065125][ T5846] bridge_slave_1: entered promiscuous mode [ 68.088011][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.095232][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.102845][ T5854] bridge_slave_0: entered allmulticast mode [ 68.109434][ T5854] bridge_slave_0: entered promiscuous mode [ 68.117438][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.124984][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.132569][ T5854] bridge_slave_1: entered allmulticast mode [ 68.139120][ T5854] bridge_slave_1: entered promiscuous mode [ 68.189031][ T5845] team0: Port device team_slave_0 added [ 68.197220][ T5845] team0: Port device team_slave_1 added [ 68.203238][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.210296][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.218235][ T5848] bridge_slave_0: entered allmulticast mode [ 68.224970][ T5848] bridge_slave_0: entered promiscuous mode [ 68.233252][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.244889][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.255091][ T5847] team0: Port device team_slave_0 added [ 68.275963][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.283155][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.290229][ T5848] bridge_slave_1: entered allmulticast mode [ 68.297662][ T5848] bridge_slave_1: entered promiscuous mode [ 68.321028][ T5847] team0: Port device team_slave_1 added [ 68.328301][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.355112][ T5846] team0: Port device team_slave_0 added [ 68.363618][ T5846] team0: Port device team_slave_1 added [ 68.377176][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.394850][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.401808][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.427746][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.466165][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.473146][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.499378][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.518993][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.526281][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.552714][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.565349][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.577137][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.594701][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.601740][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.627915][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.645153][ T5854] team0: Port device team_slave_0 added [ 68.653116][ T5854] team0: Port device team_slave_1 added [ 68.669745][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.676723][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.703401][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.715433][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.722398][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.748432][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.806702][ T5847] hsr_slave_0: entered promiscuous mode [ 68.813156][ T5847] hsr_slave_1: entered promiscuous mode [ 68.819886][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.827128][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.853263][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.865317][ T5848] team0: Port device team_slave_0 added [ 68.888005][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.895035][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.921004][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.937357][ T5848] team0: Port device team_slave_1 added [ 68.983346][ T5845] hsr_slave_0: entered promiscuous mode [ 68.989318][ T5845] hsr_slave_1: entered promiscuous mode [ 68.996263][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 69.002074][ T5845] Cannot create hsr debugfs directory [ 69.019571][ T5846] hsr_slave_0: entered promiscuous mode [ 69.025992][ T5846] hsr_slave_1: entered promiscuous mode [ 69.031963][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 69.037664][ T5846] Cannot create hsr debugfs directory [ 69.061852][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.068794][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.095472][ T50] Bluetooth: hci1: command tx timeout [ 69.097847][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.113513][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.120446][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.146531][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.157260][ T50] Bluetooth: hci3: command tx timeout [ 69.163515][ T5852] Bluetooth: hci4: command tx timeout [ 69.168277][ T50] Bluetooth: hci2: command tx timeout [ 69.169306][ T5861] Bluetooth: hci0: command tx timeout [ 69.259008][ T5854] hsr_slave_0: entered promiscuous mode [ 69.265317][ T5854] hsr_slave_1: entered promiscuous mode [ 69.271943][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 69.277652][ T5854] Cannot create hsr debugfs directory [ 69.339439][ T5848] hsr_slave_0: entered promiscuous mode [ 69.345906][ T5848] hsr_slave_1: entered promiscuous mode [ 69.351920][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 69.357620][ T5848] Cannot create hsr debugfs directory [ 69.580276][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.595501][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.609488][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.619584][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.689786][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.704271][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.721737][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.732098][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.799961][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.822354][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.832316][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.848161][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.926656][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.937240][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.957674][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.964536][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.976213][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.037814][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.062411][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.077962][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.091952][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.099171][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.108184][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.115272][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.126753][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.137748][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.162298][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.199949][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.214438][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.255711][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.262833][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.276181][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.283250][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.304137][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.357643][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.364796][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.372369][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 70.372381][ T30] audit: type=1400 audit(1757982067.164:86): avc: denied { sys_module } for pid=5847 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 70.374387][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.406583][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.506272][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.538958][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.587210][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.625009][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.632116][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.658260][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.669734][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.694118][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.701515][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.745354][ T266] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.752550][ T266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.828855][ T266] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.836016][ T266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.915886][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.924918][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.974442][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.059699][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.122958][ T5846] veth0_vlan: entered promiscuous mode [ 71.152222][ T5861] Bluetooth: hci1: command tx timeout [ 71.193068][ T5846] veth1_vlan: entered promiscuous mode [ 71.209696][ T5847] veth0_vlan: entered promiscuous mode [ 71.231813][ T5861] Bluetooth: hci4: command tx timeout [ 71.232135][ T5852] Bluetooth: hci2: command tx timeout [ 71.237249][ T5861] Bluetooth: hci0: command tx timeout [ 71.242890][ T50] Bluetooth: hci3: command tx timeout [ 71.261218][ T5847] veth1_vlan: entered promiscuous mode [ 71.306480][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.319276][ T5845] veth0_vlan: entered promiscuous mode [ 71.337533][ T5846] veth0_macvtap: entered promiscuous mode [ 71.348128][ T5846] veth1_macvtap: entered promiscuous mode [ 71.363537][ T5845] veth1_vlan: entered promiscuous mode [ 71.395581][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.405772][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.417345][ T5847] veth0_macvtap: entered promiscuous mode [ 71.429426][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.464210][ T5847] veth1_macvtap: entered promiscuous mode [ 71.475790][ T266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.496734][ T266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.505660][ T266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.522390][ T5845] veth0_macvtap: entered promiscuous mode [ 71.534307][ T3592] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.553517][ T5854] veth0_vlan: entered promiscuous mode [ 71.564123][ T5845] veth1_macvtap: entered promiscuous mode [ 71.599075][ T5854] veth1_vlan: entered promiscuous mode [ 71.619581][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.643581][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.662499][ T5848] veth0_vlan: entered promiscuous mode [ 71.677554][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.686379][ T266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.698287][ T266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.711791][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.724726][ T5848] veth1_vlan: entered promiscuous mode [ 71.734173][ T266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.743552][ T1162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.752728][ T1162] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.786996][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.796104][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.816319][ T5854] veth0_macvtap: entered promiscuous mode [ 71.824313][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.833289][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.849487][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.858212][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.860242][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.880909][ T5854] veth1_macvtap: entered promiscuous mode [ 71.894065][ T30] audit: type=1400 audit(1757982068.684:87): avc: denied { mounton } for pid=5846 comm="syz-executor" path="/root/syzkaller.71ImUB/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 71.919829][ T30] audit: type=1400 audit(1757982068.684:88): avc: denied { mount } for pid=5846 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.961649][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.965053][ T30] audit: type=1400 audit(1757982068.684:89): avc: denied { mounton } for pid=5846 comm="syz-executor" path="/root/syzkaller.71ImUB/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.984249][ T5848] veth0_macvtap: entered promiscuous mode [ 72.008173][ T30] audit: type=1400 audit(1757982068.684:90): avc: denied { mount } for pid=5846 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 72.037851][ T30] audit: type=1400 audit(1757982068.684:91): avc: denied { mounton } for pid=5846 comm="syz-executor" path="/root/syzkaller.71ImUB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 72.063224][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.072669][ T30] audit: type=1400 audit(1757982068.694:92): avc: denied { mounton } for pid=5846 comm="syz-executor" path="/root/syzkaller.71ImUB/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 72.101744][ T30] audit: type=1400 audit(1757982068.694:93): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.127330][ T30] audit: type=1400 audit(1757982068.714:94): avc: denied { mounton } for pid=5846 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 72.154378][ T5848] veth1_macvtap: entered promiscuous mode [ 72.156634][ T30] audit: type=1400 audit(1757982068.714:95): avc: denied { mount } for pid=5846 comm="syz-executor" name="/" dev="gadgetfs" ino=8275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 72.186453][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.213025][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.223836][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.248843][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.256761][ T1162] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.271391][ T1162] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.306850][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.314214][ T1162] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.330220][ T1162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.354142][ T3592] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.369217][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.377986][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.385422][ T3592] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.394583][ T3592] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.452961][ T3592] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.473647][ T5965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6'. [ 72.483205][ T5965] openvswitch: netlink: Flow key attr not present in new flow. [ 72.528630][ T3592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.540344][ T3592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.617948][ T266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.656447][ T266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.689449][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.701448][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.779060][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.788333][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.883916][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.910433][ T5974] Illegal XDP return value 4294967294 on prog (id 4) dev N/A, expect packet loss! [ 72.928341][ T266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.944311][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.946968][ T266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.231697][ T50] Bluetooth: hci1: command tx timeout [ 73.311781][ T50] Bluetooth: hci0: command tx timeout [ 73.317203][ T50] Bluetooth: hci4: command tx timeout [ 73.322704][ T5852] Bluetooth: hci3: command tx timeout [ 73.323194][ T5861] Bluetooth: hci2: command tx timeout [ 73.734493][ T6008] dummy0: entered promiscuous mode [ 73.762870][ T6007] dummy0: left promiscuous mode [ 74.228912][ T6035] netlink: 68 bytes leftover after parsing attributes in process `syz.0.33'. [ 75.136668][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 75.175206][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.47'. [ 75.313102][ T5861] Bluetooth: hci1: command tx timeout [ 75.391131][ T5857] Bluetooth: hci4: command tx timeout [ 75.391503][ T50] Bluetooth: hci3: command tx timeout [ 75.396528][ T5857] Bluetooth: hci0: command tx timeout [ 75.406280][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 75.406292][ T30] audit: type=1400 audit(1757982072.194:154): avc: denied { ioctl } for pid=6074 comm="syz.3.51" path="/dev/vmci" dev="devtmpfs" ino=697 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.407720][ T5861] Bluetooth: hci2: command tx timeout [ 75.767851][ T5919] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.768587][ T30] audit: type=1400 audit(1757982072.554:155): avc: denied { read write } for pid=6090 comm="syz.0.57" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.861759][ T30] audit: type=1400 audit(1757982072.584:156): avc: denied { open } for pid=6090 comm="syz.0.57" path="/dev/sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.946806][ T30] audit: type=1400 audit(1757982072.594:157): avc: denied { ioctl } for pid=6090 comm="syz.0.57" path="/dev/sg0" dev="devtmpfs" ino=765 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.960648][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 76.003431][ T5919] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 76.035345][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.077473][ T5919] usb 3-1: config 0 descriptor?? [ 76.085094][ T30] audit: type=1400 audit(1757982072.734:158): avc: denied { create } for pid=6098 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.111805][ T6101] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.63'. [ 76.174389][ T30] audit: type=1400 audit(1757982072.764:159): avc: denied { setopt } for pid=6098 comm="syz.3.62" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.286876][ T30] audit: type=1400 audit(1757982072.774:160): avc: denied { read } for pid=6098 comm="syz.3.62" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.368544][ T5919] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 76.390044][ T30] audit: type=1400 audit(1757982073.124:161): avc: denied { read } for pid=6107 comm="syz.1.67" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 76.408356][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 76.464986][ T5919] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 76.501208][ T5919] usb 3-1: media controller created [ 76.567955][ T30] audit: type=1400 audit(1757982073.124:162): avc: denied { open } for pid=6107 comm="syz.1.67" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 76.604142][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 76.689312][ T30] audit: type=1400 audit(1757982073.224:163): avc: denied { read } for pid=6109 comm="syz.4.68" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 76.694932][ T5919] az6027: usb out operation failed. (-71) [ 76.731881][ T6121] batadv_slave_1: entered promiscuous mode [ 76.755741][ T6121] batman_adv: batadv0: Adding interface: macsec1 [ 76.781905][ T5919] az6027: usb out operation failed. (-71) [ 76.790149][ T5919] stb0899_attach: Driver disabled by Kconfig [ 76.797291][ T6121] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.818082][ T5919] az6027: no front-end attached [ 76.818082][ T5919] [ 76.854741][ T6121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.856072][ T5919] az6027: usb out operation failed. (-71) [ 76.871484][ T6121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.871521][ T6121] batman_adv: batadv0: Interface activated: macsec1 [ 76.938520][ T5919] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 76.966063][ T5919] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 76.988769][ T5919] dvb-usb: schedule remote query interval to 400 msecs. [ 77.003893][ T5919] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 77.030122][ T5919] usb 3-1: USB disconnect, device number 2 [ 77.059993][ T5912] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.129883][ T5919] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 77.246840][ T5912] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.273848][ T5912] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.313582][ T5912] usb 2-1: config 1 interface 1 has no altsetting 1 [ 77.325964][ T6136] C: renamed from lo (while UP) [ 77.336574][ T5912] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.349582][ T6136] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 77.367377][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.375980][ T5912] usb 2-1: Product: syz [ 77.380211][ T5912] usb 2-1: Manufacturer: syz [ 77.385288][ T5912] usb 2-1: SerialNumber: syz [ 77.432484][ T5912] usb 2-1: selecting invalid altsetting 1 [ 77.740634][ T5926] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.835870][ T5912] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 77.857788][ T5912] cdc_ncm 2-1:1.0: bind() failure [ 77.898983][ T5912] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 77.907564][ T5912] cdc_ncm 2-1:1.1: bind() failure [ 77.920725][ T5926] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 77.939922][ T5912] usb 2-1: USB disconnect, device number 2 [ 77.946138][ T5926] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 78.004724][ T5926] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 78.055525][ T5926] usb 4-1: config 220 has no interface number 2 [ 78.068547][ T5926] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 78.087591][ T5926] usb 4-1: config 220 interface 0 has no altsetting 0 [ 78.104075][ T5926] usb 4-1: config 220 interface 76 has no altsetting 0 [ 78.114844][ T5926] usb 4-1: config 220 interface 1 has no altsetting 0 [ 78.126092][ T5926] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 78.135332][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.146294][ T5926] usb 4-1: Product: syz [ 78.152170][ T5926] usb 4-1: Manufacturer: syz [ 78.180590][ T5926] usb 4-1: SerialNumber: syz [ 78.438128][ T5926] uvcvideo 4-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 78.454139][ T5926] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 78.460501][ T5926] usb 4-1: No valid video chain found. [ 78.503266][ T5926] usb 4-1: selecting invalid altsetting 0 [ 78.544523][ T5926] usb 4-1: selecting invalid altsetting 0 [ 78.550276][ T5926] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 78.608925][ T5926] usb 4-1: USB disconnect, device number 2 [ 79.047009][ T6187] process 'syz.4.102' launched './file1' with NULL argv: empty string added [ 79.258118][ T6199] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.699720][ T6222] netlink: 64 bytes leftover after parsing attributes in process `syz.2.118'. [ 79.942743][ T6228] netlink: 36 bytes leftover after parsing attributes in process `syz.2.121'. [ 80.223614][ T6242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.127'. [ 80.380033][ T6250] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.541831][ T6257] x_tables: ip6_tables: cluster.0 match: invalid size 16 (kernel) != (user) 104 [ 80.825867][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 80.825883][ T30] audit: type=1400 audit(1757982077.614:220): avc: denied { search } for pid=5517 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.857810][ T6266] gtp0: entered promiscuous mode [ 80.871385][ T6266] gtp0: entered allmulticast mode [ 80.880728][ T5926] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 80.893356][ T30] audit: type=1400 audit(1757982077.614:221): avc: denied { search } for pid=5517 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.931200][ T30] audit: type=1400 audit(1757982077.614:222): avc: denied { search } for pid=5517 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.010826][ T30] audit: type=1400 audit(1757982077.614:223): avc: denied { read } for pid=5517 comm="dhcpcd" name="n100" dev="tmpfs" ino=2434 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.059715][ T30] audit: type=1400 audit(1757982077.614:224): avc: denied { open } for pid=5517 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2434 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.093834][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 81.106283][ T6273] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.108062][ T30] audit: type=1400 audit(1757982077.614:225): avc: denied { getattr } for pid=5517 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=2434 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.114246][ T6273] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.114352][ T6273] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.114445][ T6273] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.114538][ T6273] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.115085][ T6273] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.177138][ T6273] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.180190][ T54] cfg80211: failed to load regulatory.db [ 81.184985][ T6273] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.198356][ T6273] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.206217][ T6273] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.240018][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.261632][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.283398][ T30] audit: type=1400 audit(1757982077.984:226): avc: denied { read open } for pid=6275 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.308825][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 81.308883][ T5926] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 81.308902][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.352205][ T5926] usb 2-1: config 0 descriptor?? [ 81.364206][ T6278] capability: warning: `syz.2.141' uses deprecated v2 capabilities in a way that may be insecure [ 81.510595][ T30] audit: type=1400 audit(1757982077.984:227): avc: denied { getattr } for pid=6275 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.808719][ T30] audit: type=1400 audit(1757982078.594:228): avc: denied { add_name } for pid=6274 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.828671][ T5926] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 81.893805][ T5926] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 81.895013][ T30] audit: type=1400 audit(1757982078.594:229): avc: denied { create } for pid=6274 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 81.921549][ T5926] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 82.036202][ T5926] microsoft 0003:045E:07DA.0001: no inputs found [ 82.077443][ T6305] bridge0: entered promiscuous mode [ 82.087800][ T5926] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 82.142858][ T6305] macvlan2: entered promiscuous mode [ 82.154540][ T5926] usb 2-1: USB disconnect, device number 3 [ 82.304310][ T6310] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.151'. [ 82.359451][ T6310] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.151'. [ 82.730595][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.922991][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 82.940011][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 82.966335][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.986586][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 83.023523][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.033587][ T5926] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.054009][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.093091][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 83.112986][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.205854][ T5926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.224507][ T5926] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.250234][ T5926] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 83.277361][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 83.303878][ T5926] usb 3-1: SerialNumber: syz [ 83.349124][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 83.360701][ T9] usbtmc 1-1:16.0: can't read capabilities [ 83.530638][ T54] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 83.536968][ T5926] usb 3-1: 0:2 : does not exist [ 83.600501][ T24] usb 1-1: USB disconnect, device number 2 [ 83.606873][ T5926] usb 3-1: USB disconnect, device number 3 [ 83.649133][ T5865] udevd[5865]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.703240][ T54] usb 2-1: Using ep0 maxpacket: 32 [ 83.710023][ T54] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.726018][ T54] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.740934][ T54] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 83.750085][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.771841][ T54] usb 2-1: config 0 descriptor?? [ 84.000690][ T1226] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 84.162408][ T1226] usb 5-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.204352][ T54] ft260 0003:0403:6030.0002: unknown main item tag 0x7 [ 84.211929][ T1226] usb 5-1: config 1 interface 0 has no altsetting 0 [ 84.230427][ T1226] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.259632][ T1226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 84.288123][ T1226] usb 5-1: SerialNumber: syz [ 84.304059][ T6351] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 84.392174][ T54] ft260 0003:0403:6030.0002: chip code: 6424 8183 [ 84.557260][ T1226] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 84.583654][ T1226] usb 5-1: USB disconnect, device number 2 [ 84.600261][ T54] ft260 0003:0403:6030.0002: failed to retrieve system status [ 84.641581][ T54] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -71 [ 84.690211][ T54] usb 2-1: USB disconnect, device number 4 [ 85.510136][ T1226] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 85.690052][ T1226] usb 2-1: Using ep0 maxpacket: 32 [ 85.708125][ T1226] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 85.730228][ T1226] usb 2-1: config 0 has no interface number 0 [ 85.751879][ T1226] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 85.772182][ T1226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.800606][ T1226] usb 2-1: Product: syz [ 85.805191][ T1226] usb 2-1: Manufacturer: syz [ 85.829946][ T1226] usb 2-1: SerialNumber: syz [ 85.842378][ T1226] usb 2-1: config 0 descriptor?? [ 85.845049][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 85.845061][ T30] audit: type=1400 audit(1757982338.640:250): avc: denied { read write } for pid=6404 comm="syz.3.188" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 85.863740][ T1226] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 85.955966][ T30] audit: type=1400 audit(1757982338.680:251): avc: denied { open } for pid=6404 comm="syz.3.188" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 86.029599][ T30] audit: type=1400 audit(1757982338.750:252): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 86.182232][ T1226] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 86.220202][ T1226] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 86.263422][ T30] audit: type=1400 audit(1757982339.050:253): avc: denied { shutdown } for pid=6419 comm="syz.4.195" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.419650][ T30] audit: type=1400 audit(1757982339.180:254): avc: denied { ioctl } for pid=6423 comm="syz.4.197" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 86.626352][ T6432] syz_tun: entered allmulticast mode [ 86.645537][ T6431] syz_tun: left allmulticast mode [ 86.653483][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 86.654315][ T5926] usb 2-1: USB disconnect, device number 5 [ 86.698022][ T5926] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 86.731997][ T30] audit: type=1400 audit(1757982339.531:255): avc: denied { create } for pid=6435 comm="syz.4.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.773479][ T5926] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 86.816552][ T5926] quatech2 2-1:0.51: device disconnected [ 87.288000][ T30] audit: type=1400 audit(1757982340.081:256): avc: denied { name_bind } for pid=6462 comm="syz.0.215" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 87.371365][ T30] audit: type=1400 audit(1757982340.121:257): avc: denied { sys_module } for pid=6457 comm="syz.3.214" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 87.434797][ T30] audit: type=1400 audit(1757982340.131:258): avc: denied { name_bind } for pid=6465 comm="syz.1.217" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 87.639142][ T1226] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.789066][ T1226] usb 3-1: Using ep0 maxpacket: 16 [ 87.804533][ T1226] usb 3-1: config 5 has an invalid interface number: 22 but max is 0 [ 87.814068][ T1226] usb 3-1: config 5 has no interface number 0 [ 87.820996][ T1226] usb 3-1: config 5 interface 22 has no altsetting 0 [ 87.830231][ T1226] usb 3-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=95.4b [ 87.839518][ T1226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.847498][ T1226] usb 3-1: Product: syz [ 87.852254][ T1226] usb 3-1: Manufacturer: syz [ 87.856846][ T1226] usb 3-1: SerialNumber: syz [ 87.998918][ T54] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 88.088158][ T1226] HFC-S_USB 3-1:5.22: probe with driver HFC-S_USB failed with error -5 [ 88.115403][ T1226] usb 3-1: USB disconnect, device number 4 [ 88.159996][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 88.171043][ T54] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 88.182805][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 88.199287][ T54] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 88.208333][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.217701][ T54] usb 1-1: Product: syz [ 88.221931][ T54] usb 1-1: Manufacturer: syz [ 88.226496][ T54] usb 1-1: SerialNumber: syz [ 88.232743][ T54] usb 1-1: config 0 descriptor?? [ 88.238236][ T6489] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 88.245583][ T6489] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 88.255015][ T54] usb 1-1: ucan: probing device on interface #0 [ 88.346509][ T9] kernel read not supported for file /dsp (pid: 9 comm: kworker/0:0) [ 88.588642][ T5926] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 88.709154][ T30] audit: type=1326 audit(1757982341.502:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6510 comm="syz.2.237" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5dc7b8eba9 code=0x0 [ 88.791225][ T5926] usb 2-1: unable to get BOS descriptor or descriptor too short [ 88.813999][ T5926] usb 2-1: no configurations [ 88.820142][ T5926] usb 2-1: can't read configurations, error -22 [ 88.871243][ T54] ucan 1-1:0.0: probe with driver ucan failed with error -22 [ 89.105366][ T5912] usb 1-1: USB disconnect, device number 3 [ 89.791301][ T6548] vlan2: entered allmulticast mode [ 89.807705][ T6548] macvtap0: entered allmulticast mode [ 89.827104][ T6548] veth0_macvtap: entered allmulticast mode [ 89.930439][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 90.099332][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.127846][ T9] usb 3-1: config 0 has no interface number 0 [ 90.146127][ T9] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 90.163034][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.183424][ T9] usb 3-1: Product: syz [ 90.190782][ T6565] smc: net device ip6gre0 applied user defined pnetid SYZ0 [ 90.192056][ T9] usb 3-1: Manufacturer: syz [ 90.205887][ T9] usb 3-1: SerialNumber: syz [ 90.211674][ T6567] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 90.214755][ T9] usb 3-1: config 0 descriptor?? [ 90.257774][ T54] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.428613][ T54] usb 1-1: Using ep0 maxpacket: 32 [ 90.434554][ T9] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 90.455972][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.462675][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 90.491147][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.521288][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 90.523983][ T54] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 90.537642][ T9] usb 3-1: media controller created [ 90.579905][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.585396][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.604926][ T6579] Zero length message leads to an empty skb [ 90.624849][ T54] usb 1-1: config 0 descriptor?? [ 90.674710][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 90.782767][ T9] usb 3-1: USB disconnect, device number 5 [ 90.817362][ T6583] input: syz0 as /devices/virtual/input/input8 [ 91.026768][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 91.026782][ T30] audit: type=1400 audit(1757982343.813:271): avc: denied { setopt } for pid=6590 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 91.069734][ T54] ft260 0003:0403:6030.0003: unknown main item tag 0x7 [ 91.095291][ T30] audit: type=1400 audit(1757982343.823:272): avc: denied { getopt } for pid=6590 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 91.118355][ T6595] syz.3.276 uses obsolete (PF_INET,SOCK_PACKET) [ 91.261450][ T54] ft260 0003:0403:6030.0003: failed to retrieve chip version [ 91.265792][ T30] audit: type=1400 audit(1757982344.053:273): avc: denied { getopt } for pid=6597 comm="syz.4.278" lport=33979 faddr=::ffff:172.30.1.5 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.279671][ T54] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -32 [ 91.352669][ T54] usb 1-1: USB disconnect, device number 4 [ 91.447024][ T30] audit: type=1400 audit(1757982344.233:274): avc: denied { mounton } for pid=6600 comm="syz.2.279" path="/48/file1" dev="tmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.715093][ T6610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 91.775547][ T6612] warning: `syz.2.284' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.832325][ T30] audit: type=1400 audit(1757982344.623:275): avc: denied { read write } for pid=6613 comm="syz.1.285" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.927014][ T30] audit: type=1400 audit(1757982344.623:276): avc: denied { open } for pid=6613 comm="syz.1.285" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.983880][ T30] audit: type=1400 audit(1757982344.683:277): avc: denied { mount } for pid=6615 comm="syz.3.286" name="/" dev="ramfs" ino=11580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 92.027622][ T30] audit: type=1400 audit(1757982344.723:278): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 92.175917][ T30] audit: type=1400 audit(1757982344.963:279): avc: denied { ioctl } for pid=6628 comm="syz.4.293" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.201702][ T30] audit: type=1400 audit(1757982344.963:280): avc: denied { connect } for pid=6629 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.327493][ T54] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 92.356705][ T5919] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 92.486751][ T54] usb 1-1: Using ep0 maxpacket: 32 [ 92.493286][ T54] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.516611][ T54] usb 1-1: config 0 interface 0 has no altsetting 0 [ 92.523219][ T54] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 92.532311][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 92.546658][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.556013][ T5919] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 92.567865][ T5919] usb 3-1: config 0 has no interface number 0 [ 92.573958][ T5919] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.585705][ T54] usb 1-1: config 0 descriptor?? [ 92.616617][ T5919] usb 3-1: config 0 interface 85 has no altsetting 0 [ 92.626051][ T5919] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 92.635220][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.656542][ T5919] usb 3-1: Product: syz [ 92.660726][ T5919] usb 3-1: Manufacturer: syz [ 92.665324][ T5919] usb 3-1: SerialNumber: syz [ 92.678960][ T5919] usb 3-1: config 0 descriptor?? [ 93.039314][ T54] aquacomputer_d5next 0003:0C70:F00E.0004: hidraw0: USB HID v4.06 Device [HID 0c70:f00e] on usb-dummy_hcd.0-1/input0 [ 93.109469][ T5919] appletouch 3-1:0.85: Failed to read mode from device. [ 93.118533][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'. [ 93.137153][ T5919] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 93.207778][ T5919] usb 3-1: USB disconnect, device number 6 [ 93.394774][ T6658] netlink: 'syz.1.304': attribute type 4 has an invalid length. [ 93.449285][ T5919] usb 1-1: USB disconnect, device number 5 [ 93.607090][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 94.098112][ T5926] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 94.125876][ T5912] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 94.134624][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 94.142200][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.275838][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 94.283022][ T5926] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 94.292517][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.316413][ T5926] usb 3-1: config 0 descriptor?? [ 94.328681][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 94.333895][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 94.343913][ T5912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.360600][ T5912] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 94.370637][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.382313][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.393648][ T5912] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 94.404080][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.415810][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.425567][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 94.438282][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.446386][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 94.455426][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.467485][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.480391][ T5912] usb 4-1: config 0 descriptor?? [ 94.486358][ T10] usb 2-1: config 0 descriptor?? [ 94.493696][ T5912] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 94.502963][ T5912] dvb-usb: bulk message failed: -22 (3/0) [ 94.509829][ T9] usb 5-1: config 0 descriptor?? [ 94.530489][ T5926] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 94.540456][ T5912] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 94.556226][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 94.567046][ T5912] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 94.574146][ T5912] usb 4-1: media controller created [ 94.582171][ T5926] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 94.592121][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.600870][ T5926] usb 3-1: media controller created [ 94.620945][ T5912] dvb-usb: bulk message failed: -22 (6/0) [ 94.635626][ T5912] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 94.647931][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.656485][ T5912] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 94.679768][ T5912] dvb-usb: schedule remote query interval to 150 msecs. [ 94.691231][ T5912] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 94.734133][ T6676] dvb-usb: bulk message failed: -22 (2/0) [ 94.741605][ T5912] usb 4-1: USB disconnect, device number 3 [ 94.749905][ T5926] az6027: usb out operation failed. (-71) [ 94.761890][ T5926] az6027: usb out operation failed. (-71) [ 94.777551][ T5926] stb0899_attach: Driver disabled by Kconfig [ 94.788791][ T5926] az6027: no front-end attached [ 94.788791][ T5926] [ 94.796594][ T5912] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 94.807805][ T5926] az6027: usb out operation failed. (-71) [ 94.813579][ T5926] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 94.826434][ T5926] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 94.867007][ T5926] dvb-usb: schedule remote query interval to 400 msecs. [ 94.883290][ T5926] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 94.905780][ T5926] usb 3-1: USB disconnect, device number 7 [ 94.944086][ T10] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 94.954346][ T9] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 94.968197][ T10] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 94.984724][ T9] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 94.994750][ T10] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 95.003393][ T5926] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 95.011903][ T9] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 95.020170][ T10] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 95.027476][ T9] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 95.034611][ T9] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 95.048061][ T10] koneplus 0003:1E7D:2D51.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 95.065966][ T9] koneplus 0003:1E7D:2D51.0006: hidraw1: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 95.133653][ T6682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.180384][ T6682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.203666][ T10] koneplus 0003:1E7D:2D51.0005: couldn't init struct koneplus_device [ 95.216803][ T10] koneplus 0003:1E7D:2D51.0005: couldn't install mouse [ 95.224721][ T10] koneplus 0003:1E7D:2D51.0005: probe with driver koneplus failed with error -71 [ 95.239865][ T10] usb 2-1: USB disconnect, device number 8 [ 95.390036][ T6700] syzkaller0 speed is unknown, defaulting to 1000 [ 95.408533][ T6700] syzkaller0 speed is unknown, defaulting to 1000 [ 95.410238][ T9] usb 5-1: USB disconnect, device number 3 [ 95.416495][ T54] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 95.448056][ T6700] syzkaller0 speed is unknown, defaulting to 1000 [ 95.464628][ T6700] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 95.486185][ T6700] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 95.532836][ T6700] syzkaller0 speed is unknown, defaulting to 1000 [ 95.540760][ T6700] syzkaller0 speed is unknown, defaulting to 1000 [ 95.549163][ T6700] syzkaller0 speed is unknown, defaulting to 1000 [ 95.556891][ T6700] syzkaller0 speed is unknown, defaulting to 1000 [ 95.563970][ T6700] syzkaller0 speed is unknown, defaulting to 1000 [ 95.571946][ T6704] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 95.590239][ T54] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 95.599710][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.609800][ T54] usb 1-1: Product: syz [ 95.613969][ T54] usb 1-1: Manufacturer: syz [ 95.619241][ T54] usb 1-1: SerialNumber: syz [ 95.645801][ T54] usb 1-1: config 0 descriptor?? [ 95.667685][ T54] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 95.668772][ T6706] input: syz1 as /devices/virtual/input/input12 [ 96.067369][ T1226] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.170600][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 96.170614][ T30] audit: type=1400 audit(1757982348.965:292): avc: denied { connect } for pid=6729 comm="syz.4.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.224967][ T1226] usb 4-1: Using ep0 maxpacket: 16 [ 96.235072][ T1226] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 96.245562][ T1226] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 96.256853][ T1226] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 96.267219][ T1226] usb 4-1: config 0 interface 0 has no altsetting 0 [ 96.278059][ T1226] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 96.292552][ T24] kernel read not supported for file /dsp (pid: 24 comm: kworker/1:0) [ 96.309143][ T1226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.317877][ T1226] usb 4-1: Product: syz [ 96.322042][ T1226] usb 4-1: Manufacturer: syz [ 96.329898][ T1226] usb 4-1: SerialNumber: syz [ 96.345693][ T1226] usb 4-1: config 0 descriptor?? [ 96.417994][ T10] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 96.553329][ T24] usb 1-1: USB disconnect, device number 6 [ 96.588866][ T1226] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 96.592641][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 96.626827][ T5207] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 96.638496][ T10] usb 2-1: no configurations [ 96.646926][ T5207] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 96.649181][ T10] usb 2-1: can't read configurations, error -22 [ 96.662615][ T5207] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 96.672101][ T5207] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 96.733189][ T5838] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 96.776638][ T5207] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 96.804532][ T30] audit: type=1400 audit(1757982349.586:293): avc: denied { append } for pid=6748 comm="syz.4.347" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 96.835141][ T5207] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 96.850438][ T5207] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 96.864899][ T6712] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 96.881991][ T9] usb 4-1: USB disconnect, device number 4 [ 97.099062][ T30] audit: type=1400 audit(1757982349.886:294): avc: denied { read write } for pid=6758 comm="syz.4.351" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 97.134229][ T30] audit: type=1400 audit(1757982349.886:295): avc: denied { open } for pid=6758 comm="syz.4.351" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 97.227879][ T30] audit: type=1400 audit(1757982349.886:296): avc: denied { ioctl } for pid=6758 comm="syz.4.351" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 97.309947][ T30] audit: type=1400 audit(1757982350.106:297): avc: denied { read } for pid=6764 comm="syz.0.354" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.357115][ T6765] dlm: non-version read from control device 4 [ 97.394767][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 97.407594][ T30] audit: type=1400 audit(1757982350.106:298): avc: denied { open } for pid=6764 comm="syz.0.354" path="/dev/dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.526652][ T30] audit: type=1400 audit(1757982350.316:299): avc: denied { append } for pid=6774 comm="syz.4.359" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.621912][ T30] audit: type=1400 audit(1757982350.326:300): avc: denied { ioctl } for pid=6774 comm="syz.4.359" path="/dev/comedi3" dev="devtmpfs" ino=1279 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.726116][ T30] audit: type=1400 audit(1757982350.376:301): avc: denied { bind } for pid=6778 comm="syz.2.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.806414][ T6786] netlink: 'syz.3.363': attribute type 3 has an invalid length. [ 97.817296][ T6786] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.363'. [ 98.563517][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 98.724354][ T24] usb 3-1: config 0 has no interfaces? [ 98.729858][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.762880][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.768670][ T10] kernel read not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 98.784158][ T24] usb 3-1: config 0 descriptor?? [ 98.959199][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 99.046338][ T9] usb 3-1: USB disconnect, device number 8 [ 99.783835][ T5857] Bluetooth: hci4: command tx timeout [ 99.968204][ T6875] netlink: 'syz.3.402': attribute type 2 has an invalid length. [ 100.002994][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 100.132706][ T6879] bridge1: entered allmulticast mode [ 100.354714][ T5861] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 100.532253][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.416'. [ 100.613936][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 100.802600][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 100.816317][ T10] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.852416][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 100.870254][ T10] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 100.903031][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.934744][ T10] usb 2-1: config 0 descriptor?? [ 101.365430][ T10] aquacomputer_d5next 0003:0C70:F00E.0007: hidraw0: USB HID v4.06 Device [HID 0c70:f00e] on usb-dummy_hcd.1-1/input0 [ 101.569779][ T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 101.639416][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 101.639487][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.433'. [ 101.753957][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 101.753988][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.754020][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=023b, bcdDevice= 0.00 [ 101.754040][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.756016][ T24] usb 5-1: config 0 descriptor?? [ 101.814552][ T10] usb 2-1: USB disconnect, device number 11 [ 101.862011][ T5861] Bluetooth: hci4: command 0x206a tx timeout [ 102.074828][ T10] kernel read not supported for file /video7 (pid: 10 comm: kworker/0:1) [ 102.170112][ T24] wacom 0003:056A:023B.0008: Unknown device_type for 'HID 056a:023b'. Ignoring. [ 102.404256][ T24] usb 5-1: USB disconnect, device number 4 [ 102.990951][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 102.990965][ T30] audit: type=1400 audit(1757982355.779:307): avc: denied { mount } for pid=6983 comm="syz.2.447" name="/" dev="pstore" ino=4161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 103.431584][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 103.586962][ T1162] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.604269][ T7004] netlink: 36 bytes leftover after parsing attributes in process `syz.3.459'. [ 103.614713][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 103.628512][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.675219][ T9] usb 5-1: config 0 descriptor?? [ 103.686032][ T1162] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.703288][ T9] cp210x 5-1:0.0: cp210x converter detected [ 103.816858][ T1162] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.932371][ T7011] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 103.951852][ T1162] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.111202][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.120371][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.129059][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.138160][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.146058][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.159085][ T30] audit: type=1400 audit(1757982356.959:308): avc: denied { mounton } for pid=7016 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 104.202887][ T30] audit: type=1400 audit(1757982357.009:309): avc: denied { unlink } for pid=7014 comm="syz.2.465" name="#1" dev="tmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.230426][ T30] audit: type=1400 audit(1757982357.009:310): avc: denied { mount } for pid=7014 comm="syz.2.465" name="/" dev="overlay" ino=429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 104.320437][ T9] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 104.363252][ T9] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 104.372176][ T1162] bridge_slave_1: left allmulticast mode [ 104.398859][ T1162] bridge_slave_1: left promiscuous mode [ 104.424617][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 104.432063][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.442513][ T9] usb 5-1: USB disconnect, device number 5 [ 104.468081][ T1162] bridge_slave_0: left allmulticast mode [ 104.469396][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 104.480730][ T1162] bridge_slave_0: left promiscuous mode [ 104.489379][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.526230][ T9] cp210x 5-1:0.0: device disconnected [ 104.611277][ T5926] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 104.785980][ T5926] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 104.797792][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.807879][ T5926] usb 2-1: Product: syz [ 104.812592][ T5926] usb 2-1: Manufacturer: syz [ 104.817274][ T5926] usb 2-1: SerialNumber: syz [ 104.817621][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.830893][ T5926] usb 2-1: config 0 descriptor?? [ 104.842852][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.854935][ T1162] bond0 (unregistering): Released all slaves [ 104.878963][ T7016] syzkaller0 speed is unknown, defaulting to 1000 [ 104.894267][ T7034] netlink: 116 bytes leftover after parsing attributes in process `syz.2.473'. [ 104.959448][ T7037] sp0: Synchronizing with TNC [ 105.002627][ T7037] sp0: Found TNC [ 105.096984][ T9] usb 2-1: USB disconnect, device number 12 [ 105.490550][ T30] audit: type=1400 audit(1757982358.290:311): avc: denied { create } for pid=7056 comm="syz.4.479" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 105.596443][ T30] audit: type=1400 audit(1757982358.290:312): avc: denied { mounton } for pid=7056 comm="syz.4.479" path="/119/file0" dev="tmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 105.656599][ T30] audit: type=1400 audit(1757982358.450:313): avc: denied { read } for pid=7066 comm="syz.2.483" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 105.696371][ T30] audit: type=1400 audit(1757982358.450:314): avc: denied { open } for pid=7066 comm="syz.2.483" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 105.721727][ T1162] hsr_slave_0: left promiscuous mode [ 105.737907][ T30] audit: type=1400 audit(1757982358.490:315): avc: denied { ioctl } for pid=7066 comm="syz.2.483" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 105.752972][ T1162] hsr_slave_1: left promiscuous mode [ 105.773160][ T7071] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 105.798521][ T30] audit: type=1400 audit(1757982358.580:316): avc: denied { read write } for pid=7069 comm="syz.4.482" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 105.799114][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.822880][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.852570][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.887709][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.915100][ T1162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.947373][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.995297][ T1162] batman_adv: batadv0: Interface deactivated: macsec1 [ 106.020349][ T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 106.029658][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.043232][ T1162] batman_adv: batadv0: Removing interface: macsec1 [ 106.076234][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 106.110190][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 106.142186][ T9] usb 4-1: Manufacturer: syz [ 106.143872][ T1162] batadv_slave_1: left promiscuous mode [ 106.172610][ T1162] veth1_macvtap: left promiscuous mode [ 106.189185][ T9] usb 4-1: config 0 descriptor?? [ 106.191637][ T1162] veth0_macvtap: left promiscuous mode [ 106.199649][ T5857] Bluetooth: hci2: command tx timeout [ 106.221041][ T1162] veth1_vlan: left promiscuous mode [ 106.226442][ T1162] veth0_vlan: left promiscuous mode [ 106.290221][ T9] rc_core: IR keymap rc-hauppauge not found [ 106.303662][ T9] Registered IR keymap rc-empty [ 106.311439][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 106.328410][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 106.443218][ T9] usb 4-1: USB disconnect, device number 5 [ 106.594373][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 106.621325][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 106.809206][ T7087] netlink: 36 bytes leftover after parsing attributes in process `syz.1.491'. [ 106.822573][ T7016] chnl_net:caif_netlink_parms(): no params data found [ 106.966167][ T7098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.023920][ T7016] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.054869][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.084036][ T7016] bridge_slave_0: entered allmulticast mode [ 107.106097][ T7016] bridge_slave_0: entered promiscuous mode [ 107.123481][ T7016] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.151581][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.161603][ T7016] bridge_slave_1: entered allmulticast mode [ 107.168958][ T7016] bridge_slave_1: entered promiscuous mode [ 107.181931][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 107.266514][ T7016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.301735][ T7016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.359401][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 107.377646][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.398882][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.432711][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 107.442616][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.462892][ T7016] team0: Port device team_slave_0 added [ 107.479982][ T7016] team0: Port device team_slave_1 added [ 107.494064][ T9] usb 2-1: config 0 descriptor?? [ 107.585453][ T7016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.585487][ T7016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.585505][ T7016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.586987][ T7016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.587000][ T7016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.587020][ T7016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.742377][ T7016] hsr_slave_0: entered promiscuous mode [ 107.743272][ T7016] hsr_slave_1: entered promiscuous mode [ 107.743836][ T7016] debugfs: 'hsr0' already exists in 'hsr' [ 107.743852][ T7016] Cannot create hsr debugfs directory [ 107.932381][ T9] hid_parser_main: 1 callbacks suppressed [ 107.932399][ T9] ft260 0003:0403:6030.0009: unknown main item tag 0x7 [ 108.126962][ T9] ft260 0003:0403:6030.0009: failed to retrieve chip version [ 108.147382][ T9] ft260 0003:0403:6030.0009: probe with driver ft260 failed with error -32 [ 108.184940][ T9] usb 2-1: USB disconnect, device number 13 [ 108.258995][ T5857] Bluetooth: hci2: command tx timeout [ 108.961869][ T7016] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.964319][ T7160] net_ratelimit: 45 callbacks suppressed [ 108.964332][ T7160] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 109.015583][ T7016] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.036467][ T7016] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.089856][ T7016] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.341464][ T7016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.368048][ T7016] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.396394][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.403542][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.453952][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.461129][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.596287][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.649221][ T10] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 110.101257][ T7016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.180184][ T7016] veth0_vlan: entered promiscuous mode [ 110.206369][ T7016] veth1_vlan: entered promiscuous mode [ 110.224504][ T5919] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 110.328367][ T7016] veth0_macvtap: entered promiscuous mode [ 110.338731][ T5857] Bluetooth: hci2: command tx timeout [ 110.368836][ T7016] veth1_macvtap: entered promiscuous mode [ 110.399800][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 110.409168][ T5919] usb 2-1: config 0 has no interfaces? [ 110.420348][ T5919] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 110.430230][ T7016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.437778][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.446094][ T5919] usb 2-1: Product: syz [ 110.454005][ T5919] usb 2-1: Manufacturer: syz [ 110.477681][ T5919] usb 2-1: SerialNumber: syz [ 110.484843][ T7016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.508502][ T5919] usb 2-1: config 0 descriptor?? [ 110.532083][ T1115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.567597][ T1115] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.622949][ T1115] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.659380][ T1115] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.749226][ T54] usb 2-1: USB disconnect, device number 14 [ 110.891323][ T3592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.918823][ T3592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.005552][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.030272][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.073395][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 111.073408][ T30] audit: type=1400 audit(1757982363.873:319): avc: denied { mounton } for pid=7016 comm="syz-executor" path="/root/syzkaller.q3NhG4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 111.232280][ T30] audit: type=1400 audit(1757982363.953:320): avc: denied { mount } for pid=7016 comm="syz-executor" name="/" dev="gadgetfs" ino=8275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 111.258030][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.536'. [ 111.413110][ T7262] netlink: 'syz.1.537': attribute type 3 has an invalid length. [ 111.475499][ T7262] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.537'. [ 111.877076][ T7284] input: syz1 as /devices/virtual/input/input19 [ 112.055725][ T30] audit: type=1400 audit(1757982620.856:321): avc: denied { create } for pid=7291 comm="syz.0.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.144952][ T7297] netlink: 24 bytes leftover after parsing attributes in process `syz.4.552'. [ 112.146423][ T30] audit: type=1400 audit(1757982620.886:322): avc: denied { connect } for pid=7291 comm="syz.0.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.203582][ T7297] openvswitch: netlink: Flow key attr not present in new flow. [ 112.253190][ T30] audit: type=1400 audit(1757982620.886:323): avc: denied { write } for pid=7291 comm="syz.0.550" path="socket:[15363]" dev="sockfs" ino=15363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.290797][ T7305] netlink: 'syz.2.555': attribute type 3 has an invalid length. [ 112.307295][ T7305] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.555'. [ 112.321690][ T30] audit: type=1400 audit(1757982620.906:324): avc: denied { mount } for pid=7293 comm="syz.2.551" name="/" dev="autofs" ino=15366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 112.418760][ T5857] Bluetooth: hci2: command tx timeout [ 112.500910][ T7311] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.695387][ T30] audit: type=1400 audit(1757982621.496:325): avc: denied { search } for pid=7323 comm="syz.2.560" name="/" dev="configfs" ino=1135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 112.769598][ T30] audit: type=1400 audit(1757982621.496:326): avc: denied { getopt } for pid=7322 comm="syz.3.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.376800][ T54] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 113.563683][ T7358] netlink: 'syz.3.575': attribute type 4 has an invalid length. [ 113.586991][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.616642][ T54] usb 3-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 113.625700][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.681849][ T54] usb 3-1: config 0 descriptor?? [ 113.706041][ T5926] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 113.885548][ T5926] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 113.904994][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.931700][ T5926] usb 5-1: Product: syz [ 113.947999][ T5926] usb 5-1: Manufacturer: syz [ 113.952633][ T5926] usb 5-1: SerialNumber: syz [ 113.976763][ T5926] usb 5-1: config 0 descriptor?? [ 113.999036][ T30] audit: type=1400 audit(1757982622.797:327): avc: denied { write } for pid=7370 comm="syz.1.583" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 114.104964][ T54] steelseries 0003:1038:12C2.000B: unknown main item tag 0x3 [ 114.146513][ T54] steelseries 0003:1038:12C2.000B: item fetching failed at offset 5/7 [ 114.180181][ T54] steelseries 0003:1038:12C2.000B: probe with driver steelseries failed with error -22 [ 114.251234][ T5926] usb 5-1: USB disconnect, device number 6 [ 114.344405][ T1226] usb 3-1: USB disconnect, device number 9 [ 114.465790][ T54] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 114.626820][ T54] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.639284][ T54] usb 2-1: config 0 has no interfaces? [ 114.644773][ T54] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 114.654178][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.669427][ T54] usb 2-1: config 0 descriptor?? [ 114.685543][ T5912] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 114.835465][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 114.842026][ T5912] usb 1-1: config 0 interface 0 has no altsetting 0 [ 114.848026][ T7390] serio: Serial port ptm0 [ 114.849125][ T5912] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 114.862147][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.873408][ T5912] usb 1-1: config 0 descriptor?? [ 114.908880][ T9] usb 2-1: USB disconnect, device number 15 [ 114.944335][ T30] audit: type=1400 audit(1757982623.748:328): avc: denied { create } for pid=7392 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 115.309117][ T5912] hid (null): unknown global tag 0xc [ 115.331625][ T5912] hid-generic 0003:0DFC:0101.000C: unknown main item tag 0x0 [ 115.340387][ T5912] hid-generic 0003:0DFC:0101.000C: unknown main item tag 0x0 [ 115.363722][ T5912] hid-generic 0003:0DFC:0101.000C: unknown main item tag 0x0 [ 115.373818][ T5912] hid-generic 0003:0DFC:0101.000C: unknown main item tag 0x0 [ 115.406230][ T5912] hid-generic 0003:0DFC:0101.000C: unknown main item tag 0x0 [ 115.413649][ T5912] hid-generic 0003:0DFC:0101.000C: unknown main item tag 0x0 [ 115.470331][ T5912] hid-generic 0003:0DFC:0101.000C: unknown main item tag 0x0 [ 115.481415][ T5912] hid-generic 0003:0DFC:0101.000C: unknown main item tag 0x0 [ 115.508709][ T5912] hid-generic 0003:0DFC:0101.000C: unknown main item tag 0x0 [ 115.522864][ T5912] hid-generic 0003:0DFC:0101.000C: unknown global tag 0xc [ 115.545104][ T5912] hid-generic 0003:0DFC:0101.000C: item 0 4 1 12 parsing failed [ 115.559752][ T5912] hid-generic 0003:0DFC:0101.000C: probe with driver hid-generic failed with error -22 [ 115.608832][ T5912] usb 1-1: USB disconnect, device number 7 [ 116.096293][ T7442] dlm: non-version read from control device 4 [ 117.577728][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 117.594338][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 117.594600][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.643'. [ 117.752741][ T7512] netlink: 'syz.4.646': attribute type 8 has an invalid length. [ 117.775977][ T10] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 117.796614][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.834086][ T10] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 117.860631][ T10] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 117.877676][ T10] usb 3-1: Manufacturer: syz [ 117.888365][ T10] usb 3-1: config 0 descriptor?? [ 118.004013][ T10] rc_core: IR keymap rc-hauppauge not found [ 118.013617][ T10] Registered IR keymap rc-empty [ 118.027318][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 118.055569][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 118.167427][ T24] usb 3-1: USB disconnect, device number 10 [ 118.254896][ T10] kernel read not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 118.708849][ T7544] netlink: 'syz.0.659': attribute type 8 has an invalid length. [ 118.793694][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 118.974905][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.991203][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.002215][ T24] usb 5-1: config 1 interface 1 has no altsetting 1 [ 119.011527][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.033818][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.048279][ T24] usb 5-1: Product: syz [ 119.052566][ T24] usb 5-1: Manufacturer: syz [ 119.057500][ T24] usb 5-1: SerialNumber: syz [ 119.067123][ T24] usb 5-1: selecting invalid altsetting 1 [ 119.093337][ T54] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 119.213382][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 119.243407][ T54] usb 1-1: Using ep0 maxpacket: 32 [ 119.249797][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.260884][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.270699][ T54] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 119.279787][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.285590][ T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 119.290913][ T54] usb 1-1: config 0 descriptor?? [ 119.374430][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 119.380832][ T10] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 119.389954][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.399624][ T10] usb 4-1: config 0 descriptor?? [ 119.459680][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.469918][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 119.478951][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 119.483144][ T5919] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 119.488612][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.499495][ T24] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 119.511324][ T9] usb 3-1: config 0 descriptor?? [ 119.516512][ T24] cdc_ncm 5-1:1.0: bind() failure [ 119.528543][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 119.530350][ T24] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 119.539750][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 119.546298][ T24] cdc_ncm 5-1:1.1: bind() failure [ 119.560057][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 119.563397][ T24] usb 5-1: USB disconnect, device number 7 [ 119.578832][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 119.586528][ T9] usb 3-1: media controller created [ 119.593832][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.627032][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 119.633886][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 119.651321][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 119.659210][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 119.671044][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 119.682530][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 119.686756][ T5919] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.690101][ T10] usb 4-1: media controller created [ 119.705241][ T5919] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.715414][ T5919] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 119.715911][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 119.730383][ T54] hid_parser_main: 624 callbacks suppressed [ 119.730398][ T54] koneplus 0003:1E7D:2D51.000D: unknown main item tag 0x0 [ 119.757727][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 119.759901][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 119.771813][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.779874][ T54] koneplus 0003:1E7D:2D51.000D: unknown main item tag 0x0 [ 119.792808][ T9] usb 3-1: USB disconnect, device number 11 [ 119.800791][ T5919] usb 2-1: SerialNumber: syz [ 119.810663][ T54] koneplus 0003:1E7D:2D51.000D: unknown main item tag 0x0 [ 119.819144][ T54] koneplus 0003:1E7D:2D51.000D: unknown main item tag 0x0 [ 119.824336][ T7557] dvb-usb: bulk message failed: -22 (2/0) [ 119.827821][ T54] koneplus 0003:1E7D:2D51.000D: unknown main item tag 0x0 [ 119.844866][ T10] az6027: usb out operation failed. (-71) [ 119.851203][ T54] koneplus 0003:1E7D:2D51.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 119.868601][ T10] az6027: usb out operation failed. (-71) [ 119.874806][ T10] stb0899_attach: Driver disabled by Kconfig [ 119.881854][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 119.894283][ T10] az6027: no front-end attached [ 119.894283][ T10] [ 119.921731][ T10] az6027: usb out operation failed. (-71) [ 119.928400][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 119.948170][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22 [ 119.948562][ T7550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.971747][ T7550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.973954][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 119.984349][ T54] koneplus 0003:1E7D:2D51.000D: couldn't init struct koneplus_device [ 120.002574][ T54] koneplus 0003:1E7D:2D51.000D: couldn't install mouse [ 120.017612][ T54] koneplus 0003:1E7D:2D51.000D: probe with driver koneplus failed with error -71 [ 120.020013][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 120.036479][ T54] usb 1-1: USB disconnect, device number 8 [ 120.055882][ T5919] usb 2-1: 0:2 : does not exist [ 120.056783][ T10] usb 4-1: USB disconnect, device number 6 [ 120.095703][ T5919] usb 2-1: USB disconnect, device number 16 [ 120.121347][ T7562] fido_id[7562]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 120.192019][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 120.541643][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'. [ 120.553888][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.673'. [ 120.738334][ T5857] Bluetooth: hci3: command 0x206a tx timeout [ 120.745229][ T5861] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 121.104640][ T7596] ieee802154 phy0 wpan0: encryption failed: -22 [ 121.243987][ T7604] netlink: 'syz.3.684': attribute type 8 has an invalid length. [ 121.267530][ T7602] netlink: 'syz.2.683': attribute type 4 has an invalid length. [ 121.402282][ T10] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 121.575734][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.598730][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 121.612110][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 121.619722][ T10] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 121.639510][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.659666][ T10] usb 1-1: config 0 descriptor?? [ 121.664811][ T5926] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 121.681306][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 121.690796][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 121.701052][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 121.712302][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 121.719360][ T10] usb 1-1: media controller created [ 121.742447][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.767062][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 121.779361][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 121.787724][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 121.806711][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input23 [ 121.821286][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 121.830812][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.846193][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 121.854505][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 121.862859][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 121.886924][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.900904][ T9] usb 2-1: config 0 descriptor?? [ 121.914039][ T10] usb 1-1: USB disconnect, device number 9 [ 121.920367][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.942394][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.977149][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 122.003385][ T5926] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 122.019887][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.031551][ T5926] usb 4-1: config 0 descriptor?? [ 122.192072][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 122.218823][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 122.235896][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 122.254143][ T9] usb 2-1: media controller created [ 122.305465][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.405690][ T7608] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 122.425121][ T9] az6027: usb out operation failed. (-71) [ 122.441372][ T9] az6027: usb out operation failed. (-71) [ 122.447493][ T9] stb0899_attach: Driver disabled by Kconfig [ 122.461121][ T5926] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 122.469264][ T9] az6027: no front-end attached [ 122.469264][ T9] [ 122.481655][ T5926] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 122.491949][ T9] az6027: usb out operation failed. (-71) [ 122.497671][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 122.511997][ T5926] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 122.535234][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25 [ 122.556534][ T5926] microsoft 0003:045E:07DA.000E: no inputs found [ 122.576892][ T5926] microsoft 0003:045E:07DA.000E: could not initialize ff, continuing anyway [ 122.587503][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 122.601861][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 122.691991][ T9] usb 2-1: USB disconnect, device number 17 [ 122.712580][ T5926] usb 4-1: USB disconnect, device number 7 [ 122.858869][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 123.739139][ T7648] syz_tun: entered allmulticast mode [ 123.750821][ T7647] syz_tun: left allmulticast mode [ 124.775575][ T7680] serio: Serial port ptm0 [ 124.830593][ T5919] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 124.960620][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 125.000462][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 125.007691][ T5919] usb 4-1: config 5 has an invalid interface number: 22 but max is 0 [ 125.015882][ T24] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 125.023493][ T5919] usb 4-1: config 5 has no interface number 0 [ 125.029577][ T5919] usb 4-1: config 5 interface 22 has no altsetting 0 [ 125.038747][ T5919] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=95.4b [ 125.052675][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.062173][ T5919] usb 4-1: Product: syz [ 125.066378][ T5919] usb 4-1: Manufacturer: syz [ 125.074255][ T5919] usb 4-1: SerialNumber: syz [ 125.112732][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 125.121325][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.143582][ T9] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 125.153933][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.169762][ T9] usb 2-1: config 0 descriptor?? [ 125.187692][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.196216][ T24] usb 3-1: no configurations [ 125.200926][ T24] usb 3-1: can't read configurations, error -22 [ 125.231024][ T54] kernel write not supported for file /sequencer (pid: 54 comm: kworker/1:1) [ 125.289988][ T7696] Bluetooth: MGMT ver 1.23 [ 125.300641][ T5919] HFC-S_USB 4-1:5.22: probe with driver HFC-S_USB failed with error -5 [ 125.318314][ T5919] usb 4-1: USB disconnect, device number 8 [ 125.595379][ T9] hid-steam 0003:28DE:1102.000F: unknown main item tag 0x0 [ 125.605328][ T9] hid-steam 0003:28DE:1102.000F: unknown main item tag 0x0 [ 125.613648][ T9] hid-steam 0003:28DE:1102.000F: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 125.680414][ T9] hid-steam 0003:28DE:1102.000F: Steam Controller 'XXXXXXXXXX' connected [ 125.703703][ T9] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.000F/input/input26 [ 126.010880][ T7708] input: syz0 as /devices/virtual/input/input27 [ 126.106840][ T9] hid-steam 0003:28DE:1102.0010: unknown main item tag 0x0 [ 126.118674][ T9] hid-steam 0003:28DE:1102.0010: unknown main item tag 0x0 [ 126.168854][ T9] hid-steam 0003:28DE:1102.0010: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 126.215425][ T9] usb 2-1: USB disconnect, device number 18 [ 126.354731][ T9] hid-steam 0003:28DE:1102.000F: Steam Controller 'XXXXXXXXXX' disconnected [ 126.409502][ T7715] fido_id[7715]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 126.449695][ T5926] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 126.518341][ T7723] netdevsim netdevsim1: Firmware load for '/../file0' refused, path contains '..' component [ 126.629656][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 126.641873][ T5919] kernel write not supported for file /uhid (pid: 5919 comm: kworker/1:4) [ 126.653647][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.665834][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.681935][ T7729] netlink: 'syz.4.737': attribute type 1 has an invalid length. [ 126.690346][ T7729] netlink: 180 bytes leftover after parsing attributes in process `syz.4.737'. [ 126.702523][ T5926] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 126.719673][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.729954][ T5926] usb 3-1: config 0 descriptor?? [ 127.133935][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 127.133949][ T30] audit: type=1400 audit(1757982635.944:331): avc: denied { recv } for pid=1115 comm="kworker/u8:6" saddr=10.128.0.169 src=30006 daddr=10.128.1.163 dest=33616 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 127.184349][ T5926] ft260 0003:0403:6030.0011: unknown main item tag 0x7 [ 127.233510][ T30] audit: type=1326 audit(1757982635.994:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.4.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d3cf8eba9 code=0x7ffc0000 [ 127.301768][ T30] audit: type=1326 audit(1757982635.994:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.4.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d3cf8eba9 code=0x7ffc0000 [ 127.349175][ T30] audit: type=1326 audit(1757982635.994:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.4.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5d3cf8eba9 code=0x7ffc0000 [ 127.380782][ T5926] ft260 0003:0403:6030.0011: chip code: 6424 8183 [ 127.394072][ T30] audit: type=1326 audit(1757982635.994:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.4.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d3cf8eba9 code=0x7ffc0000 [ 127.420574][ T30] audit: type=1326 audit(1757982635.994:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.4.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f5d3cf8eba9 code=0x7ffc0000 [ 127.446623][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 127.513310][ T30] audit: type=1326 audit(1757983404.007:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.4.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d3cf8eba9 code=0x7ffc0000 [ 127.543373][ T10] kernel write not supported for file /uhid (pid: 10 comm: kworker/0:1) [ 127.564385][ T30] audit: type=1326 audit(1757983404.017:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7748 comm="syz.4.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d3cf8eba9 code=0x7ffc0000 [ 127.572469][ T5926] ft260 0003:0403:6030.0011: failed to retrieve system status [ 127.595608][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 127.604763][ T30] audit: type=1400 audit(1757983404.038:339): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 127.623512][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 127.649906][ T30] audit: type=1400 audit(1757983404.038:340): avc: denied { sendto } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 127.655835][ T5926] ft260 0003:0403:6030.0011: probe with driver ft260 failed with error -71 [ 127.733602][ T9] usb 2-1: string descriptor 0 read error: -22 [ 127.739876][ T9] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 127.756667][ T7771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.754'. [ 127.767815][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.782348][ T5926] usb 3-1: USB disconnect, device number 14 [ 127.817996][ T5919] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 127.902881][ T7778] sg_read: process 371 (syz.4.756) changed security contexts after opening file descriptor, this is not allowed. [ 127.960858][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 127.981851][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.996770][ T9] asix 2-1:7.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 128.001714][ T5919] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 128.043475][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.088151][ T5919] usb 1-1: config 0 descriptor?? [ 128.380284][ T9] asix 2-1:7.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 128.414958][ T9] asix 2-1:7.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 128.434211][ T9] asix 2-1:7.0: probe with driver asix failed with error -71 [ 128.461103][ T9] usb 2-1: USB disconnect, device number 19 [ 128.524791][ T5919] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 128.529552][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 128.674714][ C1] ================================================================== [ 128.682803][ C1] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0x1070/0x10a0 [ 128.690888][ C1] Read of size 1 at addr ffff88805c157fff by task kworker/1:4/5919 [ 128.698762][ C1] [ 128.701070][ C1] CPU: 1 UID: 0 PID: 5919 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 128.701090][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 128.701103][ C1] Workqueue: usb_hub_wq hub_event [ 128.701128][ C1] Call Trace: [ 128.701134][ C1] [ 128.701140][ C1] dump_stack_lvl+0x116/0x1f0 [ 128.701176][ C1] print_report+0xcd/0x630 [ 128.701196][ C1] ? __virt_addr_valid+0x81/0x610 [ 128.701218][ C1] ? __phys_addr+0xe8/0x180 [ 128.701239][ C1] ? mcp2221_raw_event+0x1070/0x10a0 [ 128.701264][ C1] kasan_report+0xe0/0x110 [ 128.701282][ C1] ? mcp2221_raw_event+0x1070/0x10a0 [ 128.701309][ C1] mcp2221_raw_event+0x1070/0x10a0 [ 128.701332][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 128.701351][ C1] __hid_input_report.constprop.0+0x314/0x450 [ 128.701369][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 128.701393][ C1] hid_irq_in+0x35e/0x870 [ 128.701416][ C1] __usb_hcd_giveback_urb+0x388/0x610 [ 128.701436][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 128.701452][ C1] dummy_timer+0x1814/0x3a30 [ 128.701480][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 128.701497][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 128.701513][ C1] ? mark_held_locks+0x49/0x80 [ 128.701536][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 128.701555][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 128.701573][ C1] __hrtimer_run_queues+0x202/0xad0 [ 128.701594][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 128.701612][ C1] ? read_tsc+0x9/0x20 [ 128.701634][ C1] hrtimer_run_softirq+0x17d/0x350 [ 128.701653][ C1] handle_softirqs+0x219/0x8e0 [ 128.701674][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 128.701694][ C1] __irq_exit_rcu+0x109/0x170 [ 128.701712][ C1] irq_exit_rcu+0x9/0x30 [ 128.701729][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 128.701748][ C1] [ 128.701752][ C1] [ 128.701758][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 128.701774][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 128.701788][ C1] Code: 06 3f 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 22 99 13 0f 0f 82 74 02 00 00 8b 35 da ca 13 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 79 06 3f 12 0f 85 c7 02 00 00 48 83 c4 [ 128.701804][ C1] RSP: 0018:ffffc90003396768 EFLAGS: 00000206 [ 128.701816][ C1] RAX: 0000000000000046 RBX: ffffffff8e832b18 RCX: 0000000000000001 [ 128.701826][ C1] RDX: 0000000000000000 RSI: ffffffff8de2d6e8 RDI: ffffffff8c163300 [ 128.701836][ C1] RBP: 0000000000000000 R08: e591b3ec4ad990e7 R09: 000000000000000b [ 128.701845][ C1] R10: ffffc90003396698 R11: 0000000000000000 R12: 0000000000000001 [ 128.701858][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 128.701873][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 128.701889][ C1] ? find_held_lock+0x2b/0x80 [ 128.701907][ C1] _raw_spin_lock+0x2e/0x40 [ 128.701922][ C1] ? sysfs_do_create_link_sd+0x41/0x140 [ 128.701942][ C1] sysfs_do_create_link_sd+0x41/0x140 [ 128.701962][ C1] sysfs_create_link+0x61/0xc0 [ 128.701982][ C1] device_add+0x50a/0x1aa0 [ 128.702004][ C1] ? __pfx_device_add+0x10/0x10 [ 128.702025][ C1] ? __pfx_exact_lock+0x10/0x10 [ 128.702045][ C1] ? kobject_get+0xbb/0x150 [ 128.702067][ C1] cdev_device_add+0xc2/0x1e0 [ 128.702085][ C1] i2cdev_attach_adapter+0x359/0x4c0 [ 128.702103][ C1] i2cdev_notifier_call+0x65/0x80 [ 128.702118][ C1] notifier_call_chain+0xb9/0x410 [ 128.702140][ C1] ? __pfx_i2cdev_notifier_call+0x10/0x10 [ 128.702157][ C1] blocking_notifier_call_chain+0x69/0xa0 [ 128.702181][ C1] bus_notify+0x56/0x70 [ 128.702197][ C1] device_add+0x10d3/0x1aa0 [ 128.702220][ C1] ? __pfx_device_add+0x10/0x10 [ 128.702240][ C1] ? find_held_lock+0x2b/0x80 [ 128.702258][ C1] ? mark_held_locks+0x49/0x80 [ 128.702280][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 128.702299][ C1] i2c_register_adapter+0x39e/0x1370 [ 128.702318][ C1] i2c_add_adapter+0x10a/0x1b0 [ 128.702335][ C1] devm_i2c_add_adapter+0x1b/0x90 [ 128.702352][ C1] mcp2221_probe+0x5f1/0xc50 [ 128.702374][ C1] ? __pfx_mcp2221_probe+0x10/0x10 [ 128.702395][ C1] hid_device_probe+0x363/0x720 [ 128.702413][ C1] ? __pfx_hid_device_probe+0x10/0x10 [ 128.702431][ C1] really_probe+0x23e/0xa90 [ 128.702454][ C1] __driver_probe_device+0x1de/0x440 [ 128.702474][ C1] driver_probe_device+0x4c/0x1b0 [ 128.702492][ C1] __device_attach_driver+0x1df/0x310 [ 128.702511][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 128.702529][ C1] bus_for_each_drv+0x156/0x1e0 [ 128.702544][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 128.702559][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.702577][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 128.702595][ C1] __device_attach+0x1e4/0x4b0 [ 128.702614][ C1] ? __pfx___device_attach+0x10/0x10 [ 128.702635][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 128.702655][ C1] bus_probe_device+0x17f/0x1c0 [ 128.702672][ C1] device_add+0x1148/0x1aa0 [ 128.702694][ C1] ? __pfx_device_add+0x10/0x10 [ 128.702716][ C1] ? debugfs_create_file_full+0x41/0x60 [ 128.702736][ C1] hid_add_device+0x373/0xa60 [ 128.702752][ C1] ? __pfx_hid_add_device+0x10/0x10 [ 128.702766][ C1] ? lockdep_init_map_type+0x5c/0x280 [ 128.702781][ C1] ? lockdep_init_map_type+0x5c/0x280 [ 128.702796][ C1] usbhid_probe+0xd38/0x13f0 [ 128.702820][ C1] usb_probe_interface+0x300/0xa40 [ 128.702836][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 128.702851][ C1] really_probe+0x23e/0xa90 [ 128.702870][ C1] __driver_probe_device+0x1de/0x440 [ 128.702889][ C1] driver_probe_device+0x4c/0x1b0 [ 128.702908][ C1] __device_attach_driver+0x1df/0x310 [ 128.702929][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 128.702948][ C1] bus_for_each_drv+0x156/0x1e0 [ 128.702962][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 128.702977][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.702995][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 128.703013][ C1] __device_attach+0x1e4/0x4b0 [ 128.703032][ C1] ? __pfx___device_attach+0x10/0x10 [ 128.703050][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 128.703068][ C1] bus_probe_device+0x17f/0x1c0 [ 128.703084][ C1] device_add+0x1148/0x1aa0 [ 128.703106][ C1] ? __pfx_device_add+0x10/0x10 [ 128.703127][ C1] ? mark_held_locks+0x49/0x80 [ 128.703151][ C1] usb_set_configuration+0x1187/0x1e20 [ 128.703177][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 128.703196][ C1] usb_generic_driver_probe+0xb1/0x110 [ 128.703214][ C1] usb_probe_device+0xec/0x3e0 [ 128.703234][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 128.703256][ C1] really_probe+0x23e/0xa90 [ 128.703274][ C1] __driver_probe_device+0x1de/0x440 [ 128.703292][ C1] ? usb_driver_applicable+0x1c7/0x220 [ 128.703306][ C1] driver_probe_device+0x4c/0x1b0 [ 128.703324][ C1] __device_attach_driver+0x1df/0x310 [ 128.703344][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 128.703362][ C1] bus_for_each_drv+0x156/0x1e0 [ 128.703377][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 128.703391][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.703409][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 128.703427][ C1] __device_attach+0x1e4/0x4b0 [ 128.703449][ C1] ? __pfx___device_attach+0x10/0x10 [ 128.703468][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 128.703486][ C1] bus_probe_device+0x17f/0x1c0 [ 128.703502][ C1] device_add+0x1148/0x1aa0 [ 128.703524][ C1] ? __pfx_device_add+0x10/0x10 [ 128.703544][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 128.703563][ C1] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 128.703589][ C1] usb_new_device+0xd07/0x1a60 [ 128.703612][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 128.703628][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 128.703649][ C1] ? mark_held_locks+0x49/0x80 [ 128.703672][ C1] hub_event+0x2f34/0x4fe0 [ 128.703701][ C1] ? __pfx_hub_event+0x10/0x10 [ 128.703720][ C1] ? assoc_array_insert+0x1ec0/0x3970 [ 128.703747][ C1] ? rcu_is_watching+0x12/0xc0 [ 128.703768][ C1] process_one_work+0x9cc/0x1b70 [ 128.703788][ C1] ? __pfx_hcd_resume_work+0x10/0x10 [ 128.703810][ C1] ? __pfx_process_one_work+0x10/0x10 [ 128.703829][ C1] ? assign_work+0x1a0/0x250 [ 128.703845][ C1] worker_thread+0x6c8/0xf10 [ 128.703863][ C1] ? __kthread_parkme+0x19e/0x250 [ 128.703886][ C1] ? __pfx_worker_thread+0x10/0x10 [ 128.703902][ C1] kthread+0x3c2/0x780 [ 128.703916][ C1] ? __pfx_kthread+0x10/0x10 [ 128.703931][ C1] ? rcu_is_watching+0x12/0xc0 [ 128.703949][ C1] ? __pfx_kthread+0x10/0x10 [ 128.703964][ C1] ret_from_fork+0x56a/0x730 [ 128.703978][ C1] ? __pfx_kthread+0x10/0x10 [ 128.703992][ C1] ret_from_fork_asm+0x1a/0x30 [ 128.704016][ C1] [ 128.704021][ C1] [ 129.532986][ C1] Allocated by task 2: [ 129.537031][ C1] kasan_save_stack+0x33/0x60 [ 129.541691][ C1] kasan_save_track+0x14/0x30 [ 129.546347][ C1] __kasan_kmalloc+0xaa/0xb0 [ 129.550915][ C1] set_kthread_struct+0xcb/0x380 [ 129.555832][ C1] copy_process+0x3107/0x7690 [ 129.560503][ C1] kernel_clone+0xfc/0x930 [ 129.564901][ C1] kernel_thread+0xd4/0x120 [ 129.569395][ C1] kthreadd+0x503/0x800 [ 129.573528][ C1] ret_from_fork+0x56a/0x730 [ 129.578097][ C1] ret_from_fork_asm+0x1a/0x30 [ 129.582842][ C1] [ 129.585143][ C1] The buggy address belongs to the object at ffff88805c157c00 [ 129.585143][ C1] which belongs to the cache kmalloc-512 of size 512 [ 129.599170][ C1] The buggy address is located 759 bytes to the right of [ 129.599170][ C1] allocated 264-byte region [ffff88805c157c00, ffff88805c157d08) [ 129.613810][ C1] [ 129.616113][ C1] The buggy address belongs to the physical page: [ 129.622496][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c154 [ 129.631230][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 129.639702][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 129.647226][ C1] page_type: f5(slab) [ 129.651210][ C1] raw: 00fff00000000040 ffff88801b841c80 dead000000000100 dead000000000122 [ 129.659786][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 129.668349][ C1] head: 00fff00000000040 ffff88801b841c80 dead000000000100 dead000000000122 [ 129.676996][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 129.685647][ C1] head: 00fff00000000002 ffffea0001705501 00000000ffffffff 00000000ffffffff [ 129.694298][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 129.702939][ C1] page dumped because: kasan: bad access detected [ 129.709322][ C1] page_owner tracks the page as allocated [ 129.715011][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5847, tgid 5847 (syz-executor), ts 70243689758, free_ts 15461512951 [ 129.736349][ C1] post_alloc_hook+0x1c0/0x230 [ 129.741105][ C1] get_page_from_freelist+0x132b/0x38e0 [ 129.746627][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 129.752501][ C1] alloc_pages_mpol+0x1fb/0x550 [ 129.757334][ C1] new_slab+0x247/0x330 [ 129.761472][ C1] ___slab_alloc+0xcf2/0x1750 [ 129.766134][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 129.771490][ C1] __kmalloc_noprof+0x2f2/0x510 [ 129.776319][ C1] fib6_info_alloc+0x40/0x160 [ 129.780973][ C1] ip6_route_info_create+0x14c/0x870 [ 129.786335][ C1] ip6_route_add.part.0+0x22/0x1d0 [ 129.791440][ C1] ip6_route_add+0x45/0x60 [ 129.795860][ C1] addrconf_prefix_route+0x2fd/0x510 [ 129.801134][ C1] inet6_addr_add+0x589/0x960 [ 129.805805][ C1] inet6_rtm_newaddr+0x1619/0x1c70 [ 129.810905][ C1] rtnetlink_rcv_msg+0x95b/0xe90 [ 129.815829][ C1] page last free pid 1 tgid 1 stack trace: [ 129.821611][ C1] __free_frozen_pages+0x7d5/0x10f0 [ 129.826796][ C1] free_contig_range+0x183/0x4b0 [ 129.831718][ C1] destroy_args+0x794/0xc10 [ 129.836209][ C1] debug_vm_pgtable+0x1a32/0x3640 [ 129.841220][ C1] do_one_initcall+0x120/0x6e0 [ 129.845970][ C1] kernel_init_freeable+0x5c2/0x910 [ 129.851155][ C1] kernel_init+0x1c/0x2b0 [ 129.855474][ C1] ret_from_fork+0x56a/0x730 [ 129.860043][ C1] ret_from_fork_asm+0x1a/0x30 [ 129.864790][ C1] [ 129.867090][ C1] Memory state around the buggy address: [ 129.872697][ C1] ffff88805c157e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 129.880734][ C1] ffff88805c157f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 129.888771][ C1] >ffff88805c157f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 129.896807][ C1] ^ [ 129.904757][ C1] ffff88805c158000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 129.912794][ C1] ffff88805c158080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 129.920830][ C1] ================================================================== [ 129.928868][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 129.936039][ C1] CPU: 1 UID: 0 PID: 5919 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 129.945388][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 129.955426][ C1] Workqueue: usb_hub_wq hub_event [ 129.960443][ C1] Call Trace: [ 129.963705][ C1] [ 129.966536][ C1] dump_stack_lvl+0x3d/0x1f0 [ 129.971112][ C1] vpanic+0x6e8/0x7a0 [ 129.975096][ C1] ? __pfx_vpanic+0x10/0x10 [ 129.979589][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 129.984598][ C1] ? mcp2221_raw_event+0x1070/0x10a0 [ 129.989903][ C1] panic+0xca/0xd0 [ 129.993608][ C1] ? __pfx_panic+0x10/0x10 [ 129.998005][ C1] ? end_report+0x4c/0x170 [ 130.002405][ C1] ? rcu_is_watching+0x12/0xc0 [ 130.007152][ C1] ? lock_release+0x201/0x2f0 [ 130.011834][ C1] check_panic_on_warn+0xab/0xb0 [ 130.016755][ C1] end_report+0x107/0x170 [ 130.021067][ C1] kasan_report+0xee/0x110 [ 130.025471][ C1] ? mcp2221_raw_event+0x1070/0x10a0 [ 130.030748][ C1] mcp2221_raw_event+0x1070/0x10a0 [ 130.035847][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 130.041657][ C1] __hid_input_report.constprop.0+0x314/0x450 [ 130.047726][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 130.053201][ C1] hid_irq_in+0x35e/0x870 [ 130.057547][ C1] __usb_hcd_giveback_urb+0x388/0x610 [ 130.062905][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 130.068086][ C1] dummy_timer+0x1814/0x3a30 [ 130.072690][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 130.077613][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 130.082531][ C1] ? mark_held_locks+0x49/0x80 [ 130.087283][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 130.093075][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 130.097998][ C1] __hrtimer_run_queues+0x202/0xad0 [ 130.103184][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 130.108886][ C1] ? read_tsc+0x9/0x20 [ 130.112955][ C1] hrtimer_run_softirq+0x17d/0x350 [ 130.118050][ C1] handle_softirqs+0x219/0x8e0 [ 130.122799][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 130.128070][ C1] __irq_exit_rcu+0x109/0x170 [ 130.132729][ C1] irq_exit_rcu+0x9/0x30 [ 130.136955][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 130.142571][ C1] [ 130.145483][ C1] [ 130.148393][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 130.154354][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 130.159530][ C1] Code: 06 3f 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 22 99 13 0f 0f 82 74 02 00 00 8b 35 da ca 13 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 79 06 3f 12 0f 85 c7 02 00 00 48 83 c4 [ 130.179130][ C1] RSP: 0018:ffffc90003396768 EFLAGS: 00000206 [ 130.185176][ C1] RAX: 0000000000000046 RBX: ffffffff8e832b18 RCX: 0000000000000001 [ 130.193140][ C1] RDX: 0000000000000000 RSI: ffffffff8de2d6e8 RDI: ffffffff8c163300 [ 130.201090][ C1] RBP: 0000000000000000 R08: e591b3ec4ad990e7 R09: 000000000000000b [ 130.209040][ C1] R10: ffffc90003396698 R11: 0000000000000000 R12: 0000000000000001 [ 130.217001][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.224963][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 130.229994][ C1] ? find_held_lock+0x2b/0x80 [ 130.234671][ C1] _raw_spin_lock+0x2e/0x40 [ 130.239156][ C1] ? sysfs_do_create_link_sd+0x41/0x140 [ 130.244688][ C1] sysfs_do_create_link_sd+0x41/0x140 [ 130.250043][ C1] sysfs_create_link+0x61/0xc0 [ 130.254788][ C1] device_add+0x50a/0x1aa0 [ 130.259195][ C1] ? __pfx_device_add+0x10/0x10 [ 130.264042][ C1] ? __pfx_exact_lock+0x10/0x10 [ 130.268876][ C1] ? kobject_get+0xbb/0x150 [ 130.273369][ C1] cdev_device_add+0xc2/0x1e0 [ 130.278030][ C1] i2cdev_attach_adapter+0x359/0x4c0 [ 130.283326][ C1] i2cdev_notifier_call+0x65/0x80 [ 130.288329][ C1] notifier_call_chain+0xb9/0x410 [ 130.293342][ C1] ? __pfx_i2cdev_notifier_call+0x10/0x10 [ 130.299044][ C1] blocking_notifier_call_chain+0x69/0xa0 [ 130.304758][ C1] bus_notify+0x56/0x70 [ 130.308894][ C1] device_add+0x10d3/0x1aa0 [ 130.313384][ C1] ? __pfx_device_add+0x10/0x10 [ 130.318237][ C1] ? find_held_lock+0x2b/0x80 [ 130.322901][ C1] ? mark_held_locks+0x49/0x80 [ 130.327663][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 130.333455][ C1] i2c_register_adapter+0x39e/0x1370 [ 130.338725][ C1] i2c_add_adapter+0x10a/0x1b0 [ 130.343472][ C1] devm_i2c_add_adapter+0x1b/0x90 [ 130.348489][ C1] mcp2221_probe+0x5f1/0xc50 [ 130.353078][ C1] ? __pfx_mcp2221_probe+0x10/0x10 [ 130.358185][ C1] hid_device_probe+0x363/0x720 [ 130.363042][ C1] ? __pfx_hid_device_probe+0x10/0x10 [ 130.368404][ C1] really_probe+0x23e/0xa90 [ 130.372895][ C1] __driver_probe_device+0x1de/0x440 [ 130.378167][ C1] driver_probe_device+0x4c/0x1b0 [ 130.383175][ C1] __device_attach_driver+0x1df/0x310 [ 130.388530][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 130.394407][ C1] bus_for_each_drv+0x156/0x1e0 [ 130.399237][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 130.404586][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.409767][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 130.415556][ C1] __device_attach+0x1e4/0x4b0 [ 130.420304][ C1] ? __pfx___device_attach+0x10/0x10 [ 130.425570][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 130.430749][ C1] bus_probe_device+0x17f/0x1c0 [ 130.435582][ C1] device_add+0x1148/0x1aa0 [ 130.440073][ C1] ? __pfx_device_add+0x10/0x10 [ 130.444909][ C1] ? debugfs_create_file_full+0x41/0x60 [ 130.450439][ C1] hid_add_device+0x373/0xa60 [ 130.455097][ C1] ? __pfx_hid_add_device+0x10/0x10 [ 130.460271][ C1] ? lockdep_init_map_type+0x5c/0x280 [ 130.465621][ C1] ? lockdep_init_map_type+0x5c/0x280 [ 130.470979][ C1] usbhid_probe+0xd38/0x13f0 [ 130.475558][ C1] usb_probe_interface+0x300/0xa40 [ 130.480650][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 130.486260][ C1] really_probe+0x23e/0xa90 [ 130.490746][ C1] __driver_probe_device+0x1de/0x440 [ 130.496011][ C1] driver_probe_device+0x4c/0x1b0 [ 130.501016][ C1] __device_attach_driver+0x1df/0x310 [ 130.506368][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 130.512242][ C1] bus_for_each_drv+0x156/0x1e0 [ 130.517072][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 130.522420][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.527599][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 130.533388][ C1] __device_attach+0x1e4/0x4b0 [ 130.538150][ C1] ? __pfx___device_attach+0x10/0x10 [ 130.543429][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 130.548612][ C1] bus_probe_device+0x17f/0x1c0 [ 130.553445][ C1] device_add+0x1148/0x1aa0 [ 130.557936][ C1] ? __pfx_device_add+0x10/0x10 [ 130.562773][ C1] ? mark_held_locks+0x49/0x80 [ 130.567529][ C1] usb_set_configuration+0x1187/0x1e20 [ 130.572985][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 130.579036][ C1] usb_generic_driver_probe+0xb1/0x110 [ 130.584485][ C1] usb_probe_device+0xec/0x3e0 [ 130.589235][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 130.594600][ C1] really_probe+0x23e/0xa90 [ 130.599093][ C1] __driver_probe_device+0x1de/0x440 [ 130.604374][ C1] ? usb_driver_applicable+0x1c7/0x220 [ 130.609827][ C1] driver_probe_device+0x4c/0x1b0 [ 130.614841][ C1] __device_attach_driver+0x1df/0x310 [ 130.620376][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 130.626262][ C1] bus_for_each_drv+0x156/0x1e0 [ 130.631185][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 130.636542][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.641725][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 130.647518][ C1] __device_attach+0x1e4/0x4b0 [ 130.652269][ C1] ? __pfx___device_attach+0x10/0x10 [ 130.657538][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 130.662734][ C1] bus_probe_device+0x17f/0x1c0 [ 130.667582][ C1] device_add+0x1148/0x1aa0 [ 130.672080][ C1] ? __pfx_device_add+0x10/0x10 [ 130.676916][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 130.682639][ C1] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 130.688523][ C1] usb_new_device+0xd07/0x1a60 [ 130.693272][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 130.698278][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 130.703462][ C1] ? mark_held_locks+0x49/0x80 [ 130.708226][ C1] hub_event+0x2f34/0x4fe0 [ 130.712639][ C1] ? __pfx_hub_event+0x10/0x10 [ 130.717387][ C1] ? assoc_array_insert+0x1ec0/0x3970 [ 130.722769][ C1] ? rcu_is_watching+0x12/0xc0 [ 130.727533][ C1] process_one_work+0x9cc/0x1b70 [ 130.732459][ C1] ? __pfx_hcd_resume_work+0x10/0x10 [ 130.737738][ C1] ? __pfx_process_one_work+0x10/0x10 [ 130.743095][ C1] ? assign_work+0x1a0/0x250 [ 130.747668][ C1] worker_thread+0x6c8/0xf10 [ 130.752244][ C1] ? __kthread_parkme+0x19e/0x250 [ 130.757259][ C1] ? __pfx_worker_thread+0x10/0x10 [ 130.762350][ C1] kthread+0x3c2/0x780 [ 130.766401][ C1] ? __pfx_kthread+0x10/0x10 [ 130.770972][ C1] ? rcu_is_watching+0x12/0xc0 [ 130.775719][ C1] ? __pfx_kthread+0x10/0x10 [ 130.780290][ C1] ret_from_fork+0x56a/0x730 [ 130.784890][ C1] ? __pfx_kthread+0x10/0x10 [ 130.789468][ C1] ret_from_fork_asm+0x1a/0x30 [ 130.794220][ C1] [ 130.797498][ C1] Kernel Offset: disabled [ 130.801799][ C1] Rebooting in 86400 seconds..