last executing test programs: 4.023571204s ago: executing program 0 (id=179): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0x31, "fdf875"}}, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 2.365839616s ago: executing program 3 (id=198): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) capset(0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0xfffffffffffffffc, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x241981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.168698742s ago: executing program 3 (id=199): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r3, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000000300)="43e5", 0x2}], 0x1}}], 0x1, 0x20000081) 2.104142744s ago: executing program 3 (id=201): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r1, 0x913e0000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x3000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x3000008, 0x13, r5, 0x1000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) 2.092723524s ago: executing program 3 (id=204): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040081}, 0x4000005) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x6, 0x248, 0x9b9a}, 0x3a, [0xfffffff5, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x401, 0x40000b4, 0xa, 0x2, 0x4, 0x81, 0xe4, 0x6, 0xfc000000, 0x9, 0xbbf, 0x200, 0x1, 0x48, 0x100d, 0x3, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x10001, 0x4, 0x91, 0x4, 0xe768, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x84, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x8, 0x7, 0x5, 0x4007f, 0xffffffff, 0x6], [0x3, 0x16e, 0x6, 0xf6ca, 0x4, 0xda, 0xb8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x5, 0xa7, 0x1000, 0x101, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0xb, 0xffffff7f, 0x401, 0x6, 0x200, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x6, 0x55c, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x1, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xfffc, 0x6, 0x2, 0x2e6bf783, 0xfffff100, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x5, 0xee4b, 0x2008004, 0x1, 0x691, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x2, 0xd, 0x7, 0x601, 0x101, 0x200dd80, 0x60a0, 0x3, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x4, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xa, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x2, 0x7, 0x1afa, 0xbfc, 0x8, 0x3, 0x7f, 0x55, 0x40, 0xc, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xfffffeff, 0xffbffff7, 0x8, 0x7, 0x3, 0x939, 0x6, 0x80008001, 0x7777, 0x7fffffff, 0x2, 0x100, 0xffffffff, 0x7ffffffe, 0x4009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x6, 0x10000, 0x0, 0x8004, 0x6fff, 0x2, 0x3, 0xf, 0xe, 0x10, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff8, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f0000000500)={&(0x7f0000000300), 0x0, 0x10, 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x9}], 0x1, 0x1d, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.843860142s ago: executing program 3 (id=211): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) 1.776149914s ago: executing program 3 (id=212): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000500)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000d, 0x13, 0xffffffffffffffff, 0x2000) 1.502277603s ago: executing program 2 (id=219): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x40, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000810) 1.502197083s ago: executing program 2 (id=220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 1.448090645s ago: executing program 2 (id=222): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040081}, 0x4000005) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x6, 0x248, 0x9b9a}, 0x3a, [0xfffffff5, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x401, 0x40000b4, 0xa, 0x2, 0x4, 0x81, 0xe4, 0x6, 0xfc000000, 0x9, 0xbbf, 0x200, 0x1, 0x48, 0x100d, 0x3, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x10001, 0x4, 0x91, 0x4, 0xe768, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x84, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x8, 0x7, 0x5, 0x4007f, 0xffffffff, 0x6], [0x3, 0x16e, 0x6, 0xf6ca, 0x4, 0xda, 0xb8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x5, 0xa7, 0x1000, 0x101, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0xb, 0xffffff7f, 0x401, 0x6, 0x200, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x6, 0x55c, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x1, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xfffc, 0x6, 0x2, 0x2e6bf783, 0xfffff100, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x5, 0xee4b, 0x2008004, 0x1, 0x691, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x2, 0xd, 0x7, 0x601, 0x101, 0x200dd80, 0x60a0, 0x3, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x4, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xa, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x2, 0x7, 0x1afa, 0xbfc, 0x8, 0x3, 0x7f, 0x55, 0x40, 0xc, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xfffffeff, 0xffbffff7, 0x8, 0x7, 0x3, 0x939, 0x6, 0x80008001, 0x7777, 0x7fffffff, 0x2, 0x100, 0xffffffff, 0x7ffffffe, 0x4009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x6, 0x10000, 0x0, 0x8004, 0x6fff, 0x2, 0x3, 0xf, 0xe, 0x10, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff8, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f0000000500)={&(0x7f0000000300), 0x0, 0x10, 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x9}], 0x1, 0x1d, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.447941145s ago: executing program 1 (id=224): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 1.447879185s ago: executing program 1 (id=225): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000240)={&(0x7f0000395000/0x4000)=nil, &(0x7f0000995000/0x4000)=nil, 0x4000, 0x0, 0x2}) 1.447843795s ago: executing program 1 (id=226): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x104, 0x80000002, 0xfffff7f9, 0x1, 0x8f, "3f2e1b0000ff775cfffffffff903e7ff898640", 0x8, 0x9}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000003c0)=0xd) 1.436271105s ago: executing program 1 (id=227): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0xcf48, 0x4cc, 0xffff, 0x9dff, 0xfa, "0000a78015000073"}) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 1.350357978s ago: executing program 2 (id=228): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x400, 0x8003a}}) 1.300122579s ago: executing program 2 (id=230): r0 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) ptrace(0x4207, r0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000040)) 1.299253429s ago: executing program 1 (id=232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) 1.28869972s ago: executing program 2 (id=233): r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 1.28281084s ago: executing program 1 (id=234): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffff"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 952.199411ms ago: executing program 0 (id=235): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 952.087671ms ago: executing program 0 (id=236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 952.02642ms ago: executing program 0 (id=237): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='c 7'], 0xc) 951.8283ms ago: executing program 0 (id=238): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040081}, 0x4000005) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x6, 0x248, 0x9b9a}, 0x3a, [0xfffffff5, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x401, 0x40000b4, 0xa, 0x2, 0x4, 0x81, 0xe4, 0x6, 0xfc000000, 0x9, 0xbbf, 0x200, 0x1, 0x48, 0x100d, 0x3, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x10001, 0x4, 0x91, 0x4, 0xe768, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x84, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x8, 0x7, 0x5, 0x4007f, 0xffffffff, 0x6], [0x3, 0x16e, 0x6, 0xf6ca, 0x4, 0xda, 0xb8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x5, 0xa7, 0x1000, 0x101, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0xb, 0xffffff7f, 0x401, 0x6, 0x200, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x6, 0x55c, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x1, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xfffc, 0x6, 0x2, 0x2e6bf783, 0xfffff100, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x5, 0xee4b, 0x2008004, 0x1, 0x691, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x2, 0xd, 0x7, 0x601, 0x101, 0x200dd80, 0x60a0, 0x3, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x4, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xa, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x2, 0x7, 0x1afa, 0xbfc, 0x8, 0x3, 0x7f, 0x55, 0x40, 0xc, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xfffffeff, 0xffbffff7, 0x8, 0x7, 0x3, 0x939, 0x6, 0x80008001, 0x7777, 0x7fffffff, 0x2, 0x100, 0xffffffff, 0x7ffffffe, 0x4009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x6, 0x10000, 0x0, 0x8004, 0x6fff, 0x2, 0x3, 0xf, 0xe, 0x10, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff8, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f0000000500)={&(0x7f0000000300), 0x0, 0x10, 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x9}], 0x1, 0x1d, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 852.824083ms ago: executing program 0 (id=239): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r2, 0x2000009) socket$can_bcm(0x1d, 0x2, 0x2) 94.781137ms ago: executing program 4 (id=248): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c510daff95803f86674b875be1"}]}, 0x30}, 0x1, 0x0, 0x0, 0xc6552491d85fa764}, 0x2040090) 52.998888ms ago: executing program 4 (id=249): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040081}, 0x4000005) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x6, 0x248, 0x9b9a}, 0x3a, [0xfffffff5, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x401, 0x40000b4, 0xa, 0x2, 0x4, 0x81, 0xe4, 0x6, 0xfc000000, 0x9, 0xbbf, 0x200, 0x1, 0x48, 0x100d, 0x3, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x10001, 0x4, 0x91, 0x4, 0xe768, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x84, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x8, 0x7, 0x5, 0x4007f, 0xffffffff, 0x6], [0x3, 0x16e, 0x6, 0xf6ca, 0x4, 0xda, 0xb8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x5, 0xa7, 0x1000, 0x101, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0xb, 0xffffff7f, 0x401, 0x6, 0x200, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x6, 0x55c, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x1, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xfffc, 0x6, 0x2, 0x2e6bf783, 0xfffff100, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x5, 0xee4b, 0x2008004, 0x1, 0x691, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x2, 0xd, 0x7, 0x601, 0x101, 0x200dd80, 0x60a0, 0x3, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x4, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xa, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x2, 0x7, 0x1afa, 0xbfc, 0x8, 0x3, 0x7f, 0x55, 0x40, 0xc, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xfffffeff, 0xffbffff7, 0x8, 0x7, 0x3, 0x939, 0x6, 0x80008001, 0x7777, 0x7fffffff, 0x2, 0x100, 0xffffffff, 0x7ffffffe, 0x4009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x6, 0x10000, 0x0, 0x8004, 0x6fff, 0x2, 0x3, 0xf, 0xe, 0x10, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff8, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f0000000500)={&(0x7f0000000300), 0x0, 0x10, 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x9}], 0x1, 0x1d, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 52.838748ms ago: executing program 4 (id=250): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000ac1414aa000000000000000000000000ac1414bb000000000000000000000000000004004e24000002002020", @ANYRES32=0x0], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 52.037068ms ago: executing program 4 (id=251): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 125.44µs ago: executing program 4 (id=252): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000005ac0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="8d6c2f975b56c108ae51d44ae157b0c8c5d09dd42a33", 0x16}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000240)="9b1d", 0x2, 0x3b00, 0x0, 0x0) 0s ago: executing program 4 (id=253): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @remote}}}, 0x32) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, 0x0) kernel console output (not intermixed with test programs): rocess permissive=1 [ 11.318321][ T28] audit: type=1400 audit(1781381165.789:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. [ 17.957646][ T28] audit: type=1400 audit(1781381172.439:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 17.958711][ T279] cgroup: Unknown subsys name 'net' [ 17.960713][ T28] audit: type=1400 audit(1781381172.439:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 17.964291][ T28] audit: type=1400 audit(1781381172.449:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 17.964433][ T279] cgroup: Unknown subsys name 'devices' [ 18.060361][ T279] cgroup: Unknown subsys name 'hugetlb' [ 18.065948][ T279] cgroup: Unknown subsys name 'rlimit' [ 18.197751][ T28] audit: type=1400 audit(1781381172.679:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.221019][ T28] audit: type=1400 audit(1781381172.679:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 18.245899][ T28] audit: type=1400 audit(1781381172.679:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 18.274285][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 18.283058][ T28] audit: type=1400 audit(1781381172.779:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.308530][ T28] audit: type=1400 audit(1781381172.779:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.334966][ T28] audit: type=1400 audit(1781381172.819:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.360498][ T28] audit: type=1400 audit(1781381172.819:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.360545][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.182431][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.189579][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.196841][ T288] device bridge_slave_0 entered promiscuous mode [ 19.204959][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.212003][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.219272][ T288] device bridge_slave_1 entered promiscuous mode [ 19.285086][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.292191][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.299657][ T287] device bridge_slave_0 entered promiscuous mode [ 19.307290][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.314466][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.321782][ T287] device bridge_slave_1 entered promiscuous mode [ 19.388812][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.395853][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.403469][ T290] device bridge_slave_0 entered promiscuous mode [ 19.410450][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.417479][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.424898][ T290] device bridge_slave_1 entered promiscuous mode [ 19.444057][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.451165][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.458664][ T291] device bridge_slave_0 entered promiscuous mode [ 19.474668][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.481821][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.489315][ T291] device bridge_slave_1 entered promiscuous mode [ 19.510691][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.517738][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.525136][ T289] device bridge_slave_0 entered promiscuous mode [ 19.534654][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.541818][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.549169][ T289] device bridge_slave_1 entered promiscuous mode [ 19.661229][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.668272][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.723040][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.730094][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.737345][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.744376][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.759898][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.767835][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.775138][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.783259][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.790687][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.805611][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.822376][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 19.830753][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.839383][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.846400][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.853853][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.862127][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.869155][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.899643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.907795][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.914821][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.922267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.930586][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.937607][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.945251][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.953846][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.981530][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.989190][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.996808][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.004976][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.013530][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.021734][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.028753][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.036116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.044386][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.051407][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.058782][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.083935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.092231][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.100333][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.108102][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.115977][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.124762][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.131793][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.139365][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.147227][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.155163][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.163335][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.170357][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.178917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.200379][ T289] device veth0_vlan entered promiscuous mode [ 20.209464][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.216902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.224590][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.233090][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.241382][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.248401][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.255844][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.264230][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.272471][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.279487][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.286770][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.295215][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.303664][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.311695][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.319786][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.327833][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.335890][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.344076][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.352047][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.367202][ T288] device veth0_vlan entered promiscuous mode [ 20.374870][ T291] device veth0_vlan entered promiscuous mode [ 20.381327][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.388867][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.396230][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.405159][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.413593][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.421461][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.429403][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.437440][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.445744][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.453360][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.470993][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.479142][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.486972][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.495056][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.503040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.511527][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.519925][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.527703][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.535823][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.543454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.554487][ T289] device veth1_macvtap entered promiscuous mode [ 20.561828][ T290] device veth0_vlan entered promiscuous mode [ 20.572796][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.580743][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.589263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.602603][ T291] device veth1_macvtap entered promiscuous mode [ 20.610712][ T288] device veth1_macvtap entered promiscuous mode [ 20.619984][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.627593][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.635920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.644135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.652374][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.660731][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.669160][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.677371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.686353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.694662][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.708743][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.716970][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.725312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.733594][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.741893][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.750250][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.758633][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.766789][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.778643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.786550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.797213][ T287] device veth0_vlan entered promiscuous mode [ 20.803490][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.811102][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.824481][ T290] device veth1_macvtap entered promiscuous mode [ 20.831397][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.839742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.847806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.868733][ T289] request_module fs-gadgetfs succeeded, but still no fs? [ 20.872945][ T287] device veth1_macvtap entered promiscuous mode [ 20.888719][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.896885][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.905567][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.932049][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.942866][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.951683][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.960080][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.977311][ T314] process 'syz.0.1' launched '/dev/fd/-1' with NULL argv: empty string added [ 21.022042][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.038922][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.063578][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.082340][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.114602][ T339] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 21.288617][ T60] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 21.309032][ T327] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 21.323892][ T358] netlink: 64 bytes leftover after parsing attributes in process `syz.3.19'. [ 21.479489][ T60] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 21.489650][ T60] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 21.500243][ T60] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 21.513828][ T327] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 21.524109][ T327] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 21.533299][ T327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 21.541336][ T331] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 21.548865][ T60] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 21.557881][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 21.566268][ T60] usb 2-1: Product: syz [ 21.570727][ T327] usb 1-1: config 0 descriptor?? [ 21.575757][ T60] usb 2-1: Manufacturer: syz [ 21.580429][ T60] usb 2-1: SerialNumber: syz [ 21.587252][ T60] usb 2-1: config 0 descriptor?? [ 21.592986][ T60] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 21.678642][ T6] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 21.728505][ T327] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 21.750822][ T331] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 21.759960][ T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 21.767928][ T331] usb 5-1: Product: syz [ 21.772118][ T331] usb 5-1: Manufacturer: syz [ 21.776698][ T331] usb 5-1: SerialNumber: syz [ 21.781841][ T331] usb 5-1: config 0 descriptor?? [ 21.871176][ T6] usb 3-1: no configurations [ 21.875774][ T6] usb 3-1: can't read configurations, error -22 [ 21.908586][ T327] usb 4-1: Using ep0 maxpacket: 8 [ 21.914726][ T327] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 21.923173][ T327] usb 4-1: config 179 has no interface number 0 [ 21.929523][ T327] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 21.940737][ T327] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 21.952147][ T327] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 21.963399][ T327] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 21.973509][ T327] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 21.986871][ T327] usb 4-1: config 179 interface 65 has no altsetting 0 [ 21.993754][ T327] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 22.002797][ T327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 22.013404][ T327] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input4 [ 22.033457][ T6] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 22.214722][ T39] usb 4-1: USB disconnect, device number 2 [ 22.220588][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 22.228954][ T6] usb 3-1: no configurations [ 22.228968][ T6] usb 3-1: can't read configurations, error -22 [ 22.229038][ T6] usb usb3-port1: attempt power cycle [ 22.245421][ T39] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 22.658519][ T6] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 22.689196][ T6] usb 3-1: no configurations [ 22.693842][ T6] usb 3-1: can't read configurations, error -22 [ 22.775390][ T395] tmpfs: Unknown parameter 'usrquota' [ 22.848514][ T6] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 22.879291][ T6] usb 3-1: no configurations [ 22.883903][ T6] usb 3-1: can't read configurations, error -22 [ 22.890283][ T6] usb usb3-port1: unable to enumerate USB device [ 23.178515][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 23.359775][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 23.368116][ T6] usb 4-1: config 114 has an invalid interface number: 240 but max is 0 [ 23.376477][ T6] usb 4-1: config 114 has no interface number 0 [ 23.382862][ T6] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 23.393641][ T6] usb 4-1: config 114 interface 240 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 23.404751][ T6] usb 4-1: config 114 interface 240 has no altsetting 0 [ 23.413109][ T6] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 23.422221][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.430260][ T6] usb 4-1: Product: syz [ 23.434434][ T6] usb 4-1: Manufacturer: syz [ 23.439023][ T6] usb 4-1: SerialNumber: syz [ 23.444592][ T401] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 23.451784][ T401] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 23.665203][ T6] usb 4-1: USB disconnect, device number 3 [ 24.016765][ T39] usb 2-1: USB disconnect, device number 2 [ 24.026874][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 24.026886][ T28] audit: type=1400 audit(1781381178.509:141): avc: denied { create } for pid=409 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 24.055124][ T327] usb 1-1: USB disconnect, device number 2 [ 24.076713][ T28] audit: type=1400 audit(1781381178.559:142): avc: denied { read } for pid=415 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 24.112372][ T28] audit: type=1400 audit(1781381178.599:143): avc: denied { mounton } for pid=420 comm="syz.0.42" path="/6/file0" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 24.170990][ T28] audit: type=1400 audit(1781381178.659:144): avc: denied { create } for pid=424 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 24.201975][ T28] audit: type=1400 audit(1781381178.689:145): avc: denied { append } for pid=429 comm="syz.0.46" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 24.231888][ T432] netlink: 60 bytes leftover after parsing attributes in process `syz.0.47'. [ 24.241467][ T432] netlink: 60 bytes leftover after parsing attributes in process `syz.0.47'. [ 24.263547][ T331] usb 5-1: USB disconnect, device number 2 [ 24.287703][ T28] audit: type=1400 audit(1781381178.769:146): avc: denied { listen } for pid=439 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 24.307600][ T28] audit: type=1400 audit(1781381178.779:147): avc: denied { ioctl } for pid=441 comm="syz.0.52" path="socket:[16588]" dev="sockfs" ino=16588 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 24.341736][ T28] audit: type=1400 audit(1781381178.779:148): avc: denied { write } for pid=441 comm="syz.0.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 24.365308][ T28] audit: type=1400 audit(1781381178.819:149): avc: denied { ioctl } for pid=443 comm="syz.4.53" path="socket:[16270]" dev="sockfs" ino=16270 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 24.398417][ T28] audit: type=1400 audit(1781381178.829:150): avc: denied { mounton } for pid=445 comm="syz.0.54" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 24.398680][ T39] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 24.474717][ T468] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 24.483389][ T468] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 24.648509][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 24.654614][ T39] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.658560][ T6] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 24.665083][ T39] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 24.682569][ T39] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 24.691609][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.699589][ T39] usb 2-1: Product: syz [ 24.703721][ T39] usb 2-1: Manufacturer: syz [ 24.708280][ T39] usb 2-1: SerialNumber: syz [ 24.850861][ T6] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 24.859980][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.867957][ T6] usb 4-1: Product: syz [ 24.872159][ T6] usb 4-1: Manufacturer: syz [ 24.876817][ T6] usb 4-1: SerialNumber: syz [ 24.878513][ T331] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 24.908482][ T327] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 24.908861][ T308] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 24.920741][ T39] usb 2-1: 0:2 : does not exist [ 24.930362][ T39] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 24.942424][ T39] usb 2-1: USB disconnect, device number 3 [ 25.068706][ T331] usb 5-1: Using ep0 maxpacket: 32 [ 25.074287][ T331] usb 5-1: too many configurations: 33, using maximum allowed: 8 [ 25.082764][ T331] usb 5-1: config 6 has an invalid interface number: 132 but max is 0 [ 25.090966][ T331] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 25.101094][ T327] usb 3-1: Using ep0 maxpacket: 32 [ 25.106273][ T331] usb 5-1: config 6 has no interface number 0 [ 25.106872][ T6] rtl8150 4-1:1.0: couldn't reset the device [ 25.112478][ T331] usb 5-1: config 6 interface 132 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 25.118872][ T6] rtl8150: probe of 4-1:1.0 failed with error -5 [ 25.131554][ T331] usb 5-1: config 6 interface 132 has no altsetting 0 [ 25.139654][ T308] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 25.146545][ T327] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 25.159926][ T6] usb 4-1: USB disconnect, device number 4 [ 25.164040][ T327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.170142][ T406] udevd[406]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.177606][ T331] usb 5-1: config 6 has an invalid interface number: 132 but max is 0 [ 25.193253][ T308] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 25.208813][ T327] usb 3-1: Product: syz [ 25.218577][ T327] usb 3-1: Manufacturer: syz [ 25.220276][ T308] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 25.224310][ T327] usb 3-1: SerialNumber: syz [ 25.237585][ T308] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 25.240836][ T331] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 25.240857][ T331] usb 5-1: config 6 has no interface number 0 [ 25.240876][ T331] usb 5-1: config 6 interface 132 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 25.240898][ T331] usb 5-1: config 6 interface 132 has no altsetting 0 [ 25.241592][ T331] usb 5-1: config 6 has an invalid interface number: 132 but max is 0 [ 25.251086][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 25.260483][ T327] usb 3-1: config 0 descriptor?? [ 25.277221][ T308] usb 1-1: Product: syz [ 25.279487][ T331] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 25.286167][ T308] usb 1-1: Manufacturer: syz [ 25.294448][ T331] usb 5-1: config 6 has no interface number 0 [ 25.302669][ T308] usb 1-1: SerialNumber: syz [ 25.307485][ T331] usb 5-1: config 6 interface 132 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 25.315947][ T308] usb 1-1: config 0 descriptor?? [ 25.324293][ T331] usb 5-1: config 6 interface 132 has no altsetting 0 [ 25.330228][ T308] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 25.333346][ T331] usb 5-1: config 6 has an invalid interface number: 132 but max is 0 [ 25.376900][ T331] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 25.386964][ T331] usb 5-1: config 6 has no interface number 0 [ 25.393411][ T331] usb 5-1: config 6 interface 132 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 25.406458][ T331] usb 5-1: config 6 interface 132 has no altsetting 0 [ 25.414278][ T331] usb 5-1: config 6 has an invalid interface number: 132 but max is 0 [ 25.422492][ T331] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 25.432611][ T331] usb 5-1: config 6 has no interface number 0 [ 25.438703][ T331] usb 5-1: config 6 interface 132 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 25.451739][ T331] usb 5-1: config 6 interface 132 has no altsetting 0 [ 25.459291][ T331] usb 5-1: config 6 has an invalid interface number: 132 but max is 0 [ 25.467455][ T331] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 25.477858][ T331] usb 5-1: config 6 has no interface number 0 [ 25.484094][ T331] usb 5-1: config 6 interface 132 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 25.497712][ T331] usb 5-1: config 6 interface 132 has no altsetting 0 [ 25.505173][ T331] usb 5-1: config 6 has an invalid interface number: 132 but max is 0 [ 25.513397][ T331] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 25.523661][ T331] usb 5-1: config 6 has no interface number 0 [ 25.529896][ T331] usb 5-1: config 6 interface 132 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 25.543048][ T331] usb 5-1: config 6 interface 132 has no altsetting 0 [ 25.551088][ T331] usb 5-1: config 6 has an invalid interface number: 132 but max is 0 [ 25.559383][ T331] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 25.568729][ T502] binder: 501:502 ioctl 4018620d 0 returned -22 [ 25.569623][ T331] usb 5-1: config 6 has no interface number 0 [ 25.576171][ T502] binder: 501:502 ioctl c0306201 200000000180 returned -11 [ 25.581894][ T331] usb 5-1: config 6 interface 132 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 25.602027][ T331] usb 5-1: config 6 interface 132 has no altsetting 0 [ 25.610406][ T331] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=d3.7e [ 25.624576][ T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.632845][ T331] usb 5-1: Product: syz [ 25.637004][ T331] usb 5-1: Manufacturer: syz [ 25.641761][ T331] usb 5-1: SerialNumber: syz [ 25.851767][ T331] usb 5-1: USB disconnect, device number 3 [ 26.068521][ T308] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 26.239016][ T538] overlayfs: failed to clone lowerpath [ 26.251207][ T308] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.260360][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.268768][ T308] usb 2-1: Product: syz [ 26.273188][ T308] usb 2-1: Manufacturer: syz [ 26.277846][ T308] usb 2-1: SerialNumber: syz [ 26.391879][ T548] input: syz0 as /devices/virtual/input/input5 [ 26.431061][ T554] ======================================================= [ 26.431061][ T554] WARNING: The mand mount option has been deprecated and [ 26.431061][ T554] and is ignored by this kernel. Remove the mand [ 26.431061][ T554] option from the mount to silence this warning. [ 26.431061][ T554] ======================================================= [ 26.538473][ T331] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 26.720850][ T331] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 26.729949][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.737963][ T331] usb 4-1: Product: syz [ 26.742175][ T331] usb 4-1: Manufacturer: syz [ 26.746752][ T331] usb 4-1: SerialNumber: syz [ 26.752164][ T331] usb 4-1: config 0 descriptor?? [ 27.286797][ T308] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 27.293299][ T308] cdc_ncm 2-1:1.0: setting rx_max = 16384 [ 27.639129][ T327] usb 3-1: USB disconnect, device number 6 [ 27.656599][ T330] usb 1-1: USB disconnect, device number 3 [ 27.690092][ T308] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 27.704970][ T308] usb 2-1: USB disconnect, device number 4 [ 27.728509][ T331] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 27.730697][ T308] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 27.930787][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 27.942006][ T331] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.954834][ T331] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 27.964302][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.972862][ T331] usb 5-1: config 0 descriptor?? [ 28.158490][ T330] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 28.358470][ T330] usb 1-1: Using ep0 maxpacket: 32 [ 28.364594][ T330] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 28.374408][ T330] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 28.384158][ T330] usb 1-1: config 0 interface 0 has no altsetting 0 [ 28.391574][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.398835][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.405959][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x4 [ 28.413161][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.420306][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.427483][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.434681][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.441864][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.449024][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.456186][ T330] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 28.465228][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.472338][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.480351][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.487446][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.494558][ T330] usb 1-1: Product: syz [ 28.498714][ T330] usb 1-1: Manufacturer: syz [ 28.503285][ T330] usb 1-1: SerialNumber: syz [ 28.508164][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.515526][ T330] usb 1-1: config 0 descriptor?? [ 28.520542][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.527669][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.536041][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.543278][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.550419][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.557526][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.564640][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.571753][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.578871][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.585973][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.593125][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.600247][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.607424][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.614536][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.621653][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.628777][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.635892][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.642994][ T6] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 28.643136][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.657647][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.664763][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.671889][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.679001][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.686087][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.693199][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.700309][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.707394][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.714504][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.721624][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.728737][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.735845][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.742984][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.750104][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.757201][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.764317][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.771467][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.778590][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.785708][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.792828][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.799947][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.807040][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.814156][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.821272][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.828369][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.835504][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.838506][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 28.842635][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.849019][ T6] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 28.854856][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.863121][ T6] usb 2-1: config 0 has no interface number 0 [ 28.869972][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.876241][ T6] usb 2-1: config 0 interface 12 has no altsetting 0 [ 28.883126][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.891507][ T6] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 28.896875][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.906157][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.913050][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.921153][ T6] usb 2-1: Product: syz [ 28.928120][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.932378][ T6] usb 2-1: Manufacturer: syz [ 28.939345][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.944016][ T6] usb 2-1: SerialNumber: syz [ 28.951005][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.958336][ T6] usb 2-1: config 0 descriptor?? [ 28.963818][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.974716][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.981852][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.988985][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 28.996076][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.003191][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.010303][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.017389][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.024498][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.031611][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.038719][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.045820][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.052931][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.060037][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.067122][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.074236][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.081349][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.088464][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.095572][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.102716][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.110027][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.117141][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.124403][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.131562][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.140140][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.147263][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.154468][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.161605][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.168897][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.176074][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.180939][ T685] kvm: pic: non byte read [ 29.183357][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.187645][ T685] kvm: pic: non byte read [ 29.194792][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.199276][ T685] kvm: pic: level sensitive irq not supported [ 29.206261][ T685] kvm: pic: single mode not supported [ 29.208546][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.225003][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.232159][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.239279][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.246368][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.253484][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.260593][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.267693][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.272088][ T6] usb 4-1: USB disconnect, device number 5 [ 29.274838][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.287735][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.296055][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.303213][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.310407][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.317515][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.325801][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.332971][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.340150][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.347260][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.354410][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 29.354421][ T28] audit: type=1400 audit(1781381183.829:191): avc: denied { create } for pid=693 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.379830][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.381319][ T28] audit: type=1400 audit(1781381183.829:192): avc: denied { bind } for pid=693 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.388178][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.413951][ T28] audit: type=1400 audit(1781381183.829:193): avc: denied { listen } for pid=693 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.413975][ T698] tmpfs: Unknown parameter 'usrquota' [ 29.433483][ T28] audit: type=1400 audit(1781381183.829:194): avc: denied { ioctl } for pid=693 comm="syz.3.141" path="socket:[18550]" dev="sockfs" ino=18550 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.438728][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.470256][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.477372][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.484525][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.491646][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.498763][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.505866][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.512978][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.520098][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.527187][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.534319][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.541433][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.548545][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.555644][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.563104][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.570258][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.577359][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.584479][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.591602][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.598717][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.605825][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.612944][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.620055][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.627143][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.634253][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.641383][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.648527][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.655636][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.662781][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.669898][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.676990][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.684123][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.691242][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.698346][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.705476][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.712599][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.719714][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.726815][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.733931][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.741056][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.748163][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.755292][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.762402][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.769515][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.776614][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.783723][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.790843][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.797930][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.805041][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.812152][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.819286][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.826389][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.833506][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.840638][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.847728][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.854840][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.861952][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.868475][ T6] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 29.869155][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.883662][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.890776][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.897878][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.904990][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.912105][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.919219][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.926317][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.933442][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.940553][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.947648][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.954779][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.961898][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.969013][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.976108][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.983219][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.990334][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 29.997418][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.004528][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.011645][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.018757][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.025856][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.032970][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.040081][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.047171][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.054279][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.059537][ T6] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 30.061398][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.069717][ T6] usb 4-1: config 0 has no interface number 0 [ 30.076633][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.082883][ T6] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 30.089793][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.101079][ T6] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 30.107967][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.119173][ T6] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 30.124956][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.134154][ T6] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 30.141058][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.149228][ T6] usb 4-1: Manufacturer: syz [ 30.156103][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.160832][ T6] usb 4-1: SerialNumber: syz [ 30.167764][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.175265][ T6] usb 4-1: config 0 descriptor?? [ 30.180627][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.191532][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.198682][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.205787][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.212904][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.220051][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.227148][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.234314][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.241458][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.248584][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.255688][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.262828][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.269998][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.277110][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.284244][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.291357][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.298492][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.305597][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.312708][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.319838][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.326929][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.334041][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.341165][ T331] logitech 0003:046D:C24F.0001: unknown main item tag 0x0 [ 30.349650][ T331] logitech 0003:046D:C24F.0001: hidraw0: USB HID v0.06 Device [HID 046d:c24f] on usb-dummy_hcd.4-1/input0 [ 30.360971][ T331] logitech 0003:046D:C24F.0001: no inputs found [ 30.370143][ T331] usb 5-1: USB disconnect, device number 4 [ 30.390667][ T706] fido_id[706]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 30.498521][ T330] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 30.679566][ T330] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.692514][ T330] usb 3-1: config 0 interface 0 has no altsetting 0 [ 30.699140][ T330] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 30.708184][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.717007][ T330] usb 3-1: config 0 descriptor?? [ 30.722014][ T331] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 30.767516][ T496] usb 1-1: USB disconnect, device number 4 [ 30.908469][ T331] usb 5-1: Using ep0 maxpacket: 8 [ 30.914589][ T331] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 30.925858][ T331] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 30.936038][ T331] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 30.946102][ T331] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 30.959167][ T331] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 30.968248][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.146980][ T330] holtek 0003:1241:5015.0002: unknown main item tag 0x2 [ 31.153992][ T330] holtek 0003:1241:5015.0002: unexpected long global item [ 31.161268][ T330] holtek 0003:1241:5015.0002: parse failed [ 31.167061][ T330] holtek: probe of 0003:1241:5015.0002 failed with error -22 [ 31.328483][ T496] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 31.348057][ T330] usb 3-1: USB disconnect, device number 7 [ 31.370435][ T6] usb 2-1: USB disconnect, device number 5 [ 31.485947][ T726] tipc: Started in network mode [ 31.490888][ T726] tipc: Node identity 4, cluster identity 4711 [ 31.497046][ T726] tipc: Node number set to 4 [ 31.511701][ T28] audit: type=1400 audit(1781381185.969:195): avc: denied { setopt } for pid=723 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.531396][ T28] audit: type=1400 audit(1781381185.989:196): avc: denied { write } for pid=723 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.560862][ T496] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 31.569953][ T496] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.577965][ T496] usb 1-1: Product: syz [ 31.582291][ T496] usb 1-1: Manufacturer: syz [ 31.586862][ T496] usb 1-1: SerialNumber: syz [ 31.994418][ T496] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 32.408519][ T496] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 32.488490][ T308] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 32.496700][ T331] usb 4-1: USB disconnect, device number 6 [ 32.533179][ T28] audit: type=1400 audit(1781381187.019:197): avc: denied { bind } for pid=742 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.556530][ T28] audit: type=1400 audit(1781381187.019:198): avc: denied { setopt } for pid=742 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.564778][ T19] usb 5-1: USB disconnect, device number 5 [ 32.589948][ T496] usb 3-1: Using ep0 maxpacket: 8 [ 32.596042][ T496] usb 3-1: config 0 has no interfaces? [ 32.616054][ T496] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 32.619782][ T750] tmpfs: Unknown parameter 'usrquota' [ 32.631960][ T496] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.645160][ T496] usb 3-1: Product: syz [ 32.649508][ T496] usb 3-1: Manufacturer: syz [ 32.658228][ T496] usb 3-1: SerialNumber: syz [ 32.670748][ T496] usb 3-1: config 0 descriptor?? [ 32.684279][ T308] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 32.693776][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.702461][ T308] usb 2-1: Product: syz [ 32.706617][ T308] usb 2-1: Manufacturer: syz [ 32.713777][ T308] usb 2-1: SerialNumber: syz [ 32.877469][ T330] usb 3-1: USB disconnect, device number 8 [ 33.008488][ T331] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 33.128485][ T19] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 33.189525][ T331] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 33.202371][ T331] usb 4-1: config 0 interface 0 has no altsetting 0 [ 33.208982][ T331] usb 4-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 33.218017][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.226782][ T331] usb 4-1: config 0 descriptor?? [ 33.309525][ T19] usb 5-1: config 0 has an invalid interface number: 180 but max is 0 [ 33.317762][ T19] usb 5-1: config 0 has no interface number 0 [ 33.323886][ T19] usb 5-1: too many endpoints for config 0 interface 180 altsetting 252: 189, using maximum allowed: 30 [ 33.335077][ T19] usb 5-1: config 0 interface 180 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 189 [ 33.348504][ T19] usb 5-1: config 0 interface 180 has no altsetting 0 [ 33.355271][ T19] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 33.364353][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.372883][ T19] usb 5-1: config 0 descriptor?? [ 33.401737][ T28] audit: type=1400 audit(1781381187.889:199): avc: denied { create } for pid=770 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.421381][ T28] audit: type=1400 audit(1781381187.889:200): avc: denied { connect } for pid=770 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.643037][ T331] logitech 0003:046D:C216.0003: unknown main item tag 0x2 [ 33.650231][ T331] logitech 0003:046D:C216.0003: unknown main item tag 0x0 [ 33.657369][ T331] logitech 0003:046D:C216.0003: bogus close delimiter [ 33.664152][ T331] logitech 0003:046D:C216.0003: item 0 0 2 10 parsing failed [ 33.671703][ T331] logitech 0003:046D:C216.0003: parse failed [ 33.677698][ T331] logitech: probe of 0003:046D:C216.0003 failed with error -22 [ 33.734055][ T19] usb 5-1: string descriptor 0 read error: -71 [ 33.742938][ T19] usb 5-1: USB disconnect, device number 6 [ 33.844677][ T331] usb 4-1: USB disconnect, device number 7 [ 33.975536][ T19] usb 1-1: USB disconnect, device number 5 [ 33.984524][ T19] usblp0: removed [ 34.340400][ T19] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.358494][ T331] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 34.367534][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 34.367546][ T28] audit: type=1400 audit(1781381188.849:213): avc: denied { mount } for pid=795 comm="syz.3.183" name="/" dev="configfs" ino=13996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 34.411417][ T28] audit: type=1400 audit(1781381188.889:214): avc: denied { search } for pid=795 comm="syz.3.183" name="/" dev="configfs" ino=13996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 34.434218][ T28] audit: type=1400 audit(1781381188.889:215): avc: denied { write } for pid=795 comm="syz.3.183" name="/" dev="configfs" ino=13996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 34.484850][ T28] audit: type=1400 audit(1781381188.969:216): avc: denied { block_suspend } for pid=810 comm="syz.2.189" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.507658][ T28] audit: type=1400 audit(1781381188.999:217): avc: denied { connect } for pid=812 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.558484][ T331] usb 5-1: Using ep0 maxpacket: 32 [ 34.564649][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.575731][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.578465][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 34.585641][ T331] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 34.591729][ T19] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 34.599616][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.608935][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.621592][ T331] usb 5-1: config 0 descriptor?? [ 34.635114][ T19] usb 1-1: config 0 descriptor?? [ 34.818483][ T496] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 34.999900][ T496] usb 3-1: unable to get BOS descriptor or descriptor too short [ 35.008265][ T496] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.018537][ T496] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 35.027485][ T496] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 35.032475][ T331] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 35.045628][ T496] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 35.045648][ T331] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 35.045670][ T331] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 35.058889][ T496] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 35.066020][ T331] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 35.073082][ T496] usb 3-1: config 1 interface 1 has no altsetting 0 [ 35.083810][ T331] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0 [ 35.093031][ T496] usb 3-1: string descriptor 0 read error: -22 [ 35.098123][ T331] koneplus 0003:1E7D:2D51.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 35.104674][ T496] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 35.130930][ T496] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.232233][ T331] koneplus 0003:1E7D:2D51.0004: couldn't init struct koneplus_device [ 35.236235][ T19] usb 2-1: USB disconnect, device number 6 [ 35.240387][ T331] koneplus 0003:1E7D:2D51.0004: couldn't install mouse [ 35.255437][ T331] koneplus: probe of 0003:1E7D:2D51.0004 failed with error -32 [ 35.283706][ T331] usb 5-1: USB disconnect, device number 7 [ 35.534953][ T833] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 35.535931][ T833] @0Ù: renamed from bond_slave_1 [ 35.876365][ T28] audit: type=1400 audit(1781381190.359:218): avc: denied { create } for pid=845 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 35.917429][ T849] overlayfs: failed to clone upperpath [ 35.949479][ T496] usb 3-1: USB disconnect, device number 9 [ 35.981831][ T28] audit: type=1400 audit(1781381190.469:219): avc: denied { mount } for pid=853 comm="syz.4.205" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 35.982124][ T854] overlayfs: failed to clone lowerpath [ 36.030230][ T854] overlayfs: failed to clone lowerpath [ 36.076061][ T28] audit: type=1400 audit(1781381190.559:220): avc: denied { read } for pid=857 comm="syz.4.206" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.669780][ T330] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 36.858485][ T330] usb 4-1: Using ep0 maxpacket: 8 [ 36.865795][ T330] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 36.874868][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.882865][ T330] usb 4-1: Product: syz [ 36.887005][ T330] usb 4-1: Manufacturer: syz [ 36.891592][ T330] usb 4-1: SerialNumber: syz [ 36.896596][ T330] usb 4-1: config 0 descriptor?? [ 36.988501][ T327] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 36.988509][ T496] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 36.989400][ T19] usb 1-1: USB disconnect, device number 6 [ 37.169477][ T327] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 37.178569][ T327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.186928][ T327] usb 3-1: config 0 descriptor?? [ 37.189609][ T496] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.208005][ T496] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 37.219799][ T496] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.231598][ T496] usb 2-1: config 0 descriptor?? [ 37.440162][ T496] usbhid 2-1:0.0: can't add hid device: -71 [ 37.446130][ T496] usbhid: probe of 2-1:0.0 failed with error -71 [ 37.454549][ T496] usb 2-1: USB disconnect, device number 7 [ 37.742818][ T28] audit: type=1400 audit(1781381192.229:221): avc: denied { mount } for pid=941 comm="syz.4.242" name="/" dev="ramfs" ino=19509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 37.803683][ T28] audit: type=1400 audit(1781381192.289:222): avc: denied { execute } for pid=941 comm="syz.4.242" path="/cpuacct.usage_percpu_user" dev="ramfs" ino=19510 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 37.937492][ T961] netlink: 277 bytes leftover after parsing attributes in process `syz.4.250'. [ 37.980866][ T966] ================================================================== [ 37.988944][ T966] BUG: KASAN: use-after-free in rcu_segcblist_enqueue+0x9c/0xb0 [ 37.996558][ T966] Write of size 8 at addr ffff888136635d90 by task syz.4.253/966 [ 38.004273][ T966] [ 38.006577][ T966] CPU: 1 PID: 966 Comm: syz.4.253 Not tainted syzkaller #0 [ 38.013756][ T966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.018498][ T496] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 38.023805][ T966] Call Trace: [ 38.023813][ T966] [ 38.037402][ T966] __dump_stack+0x21/0x24 [ 38.041716][ T966] dump_stack_lvl+0x110/0x170 [ 38.046372][ T966] ? __cfi_dump_stack_lvl+0x8/0x8 [ 38.051389][ T966] ? rcu_segcblist_enqueue+0x9c/0xb0 [ 38.056685][ T966] print_address_description+0x71/0x200 [ 38.062206][ T966] print_report+0x4a/0x60 [ 38.066513][ T966] kasan_report+0x122/0x150 [ 38.070995][ T966] ? rcu_segcblist_enqueue+0x9c/0xb0 [ 38.076263][ T966] __asan_report_store8_noabort+0x17/0x20 [ 38.081963][ T966] rcu_segcblist_enqueue+0x9c/0xb0 [ 38.087056][ T966] call_rcu+0x554/0xf50 [ 38.091194][ T966] ? __cfi_call_rcu+0x10/0x10 [ 38.095853][ T966] ? __kasan_check_write+0x14/0x20 [ 38.100945][ T966] ? selinux_inode_free_security+0x21f/0x230 [ 38.106910][ T966] security_inode_free+0xc5/0xe0 [ 38.111831][ T966] __destroy_inode+0x175/0x500 [ 38.116573][ T966] evict+0x777/0x8c0 [ 38.120449][ T966] ? proc_nr_inodes+0x2f0/0x2f0 [ 38.125279][ T966] ? _raw_spin_lock+0x94/0xf0 [ 38.129941][ T966] ? __cfi__raw_spin_lock+0x10/0x10 [ 38.135120][ T966] ? __kasan_check_write+0x14/0x20 [ 38.140211][ T966] iput+0x633/0x690 [ 38.143998][ T966] dentry_unlink_inode+0x346/0x3f0 [ 38.149084][ T966] __dentry_kill+0x46c/0x680 [ 38.153661][ T966] dentry_kill+0xc0/0x2a0 [ 38.157976][ T966] dput+0x42/0x80 [ 38.161594][ T966] __fput+0x5c0/0x8f0 [ 38.165557][ T966] ____fput+0x15/0x20 [ 38.169518][ T966] task_work_run+0x1e1/0x250 [ 38.174090][ T966] ? __cfi_task_work_run+0x10/0x10 [ 38.179182][ T966] ? __cfi___close_range+0x10/0x10 [ 38.184270][ T966] ? do_user_addr_fault+0x9a5/0x1030 [ 38.189540][ T966] exit_to_user_mode_loop+0x9b/0xb0 [ 38.194719][ T966] exit_to_user_mode_prepare+0x87/0xd0 [ 38.200162][ T966] syscall_exit_to_user_mode+0x1a/0x30 [ 38.205606][ T966] do_syscall_64+0x58/0xa0 [ 38.210003][ T966] ? clear_bhb_loop+0x30/0x80 [ 38.214658][ T966] ? clear_bhb_loop+0x30/0x80 [ 38.219311][ T966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.225187][ T966] RIP: 0033:0x7f7fdf79ce59 [ 38.229582][ T966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.249598][ T966] RSP: 002b:00007ffcc50849b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 38.258000][ T966] RAX: 0000000000000000 RBX: 00007ffcc5084aa0 RCX: 00007f7fdf79ce59 [ 38.265950][ T966] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 38.273900][ T966] RBP: 0000000000009447 R08: 0000000000000001 R09: 0000000000000000 [ 38.281848][ T966] R10: 0000001b2de20000 R11: 0000000000000246 R12: 00007ffcc5084ae0 [ 38.289802][ T966] R13: 00007f7fdfa15fac R14: 000000000000947c R15: 00007f7fdfa15fa0 [ 38.297753][ T966] [ 38.300750][ T966] [ 38.303051][ T966] Allocated by task 967: [ 38.307265][ T966] kasan_set_track+0x4b/0x70 [ 38.311836][ T966] kasan_save_alloc_info+0x1f/0x30 [ 38.316924][ T966] __kasan_kmalloc+0x95/0xb0 [ 38.321493][ T966] __kmalloc+0xb4/0x1e0 [ 38.325626][ T966] l2tp_session_create+0x38/0xbd0 [ 38.330625][ T966] pppol2tp_connect+0xbf5/0x1640 [ 38.335544][ T966] __sys_connect+0x3da/0x460 [ 38.340110][ T966] __x64_sys_connect+0x7a/0x90 [ 38.344851][ T966] x64_sys_call+0x88d/0x9a0 [ 38.349333][ T966] do_syscall_64+0x4c/0xa0 [ 38.353728][ T966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.359604][ T966] [ 38.361904][ T966] Freed by task 343: [ 38.365783][ T966] kasan_set_track+0x4b/0x70 [ 38.370354][ T966] kasan_save_free_info+0x2b/0x40 [ 38.375353][ T966] ____kasan_slab_free+0x132/0x180 [ 38.380440][ T966] __kasan_slab_free+0x11/0x20 [ 38.385184][ T966] slab_free_freelist_hook+0xc2/0x190 [ 38.390530][ T966] __kmem_cache_free+0xb7/0x1b0 [ 38.395362][ T966] kfree+0x6f/0xf0 [ 38.399057][ T966] l2tp_session_put+0xaf/0x1a0 [ 38.403796][ T966] l2tp_session_delete+0x3df/0x4d0 [ 38.408885][ T966] l2tp_tunnel_del_work+0x199/0x410 [ 38.414059][ T966] process_one_work+0x717/0xc30 [ 38.418885][ T966] worker_thread+0xa4d/0x11d0 [ 38.423539][ T966] kthread+0x281/0x320 [ 38.427584][ T966] ret_from_fork+0x1f/0x30 [ 38.431978][ T966] [ 38.434278][ T966] Last potentially related work creation: [ 38.439969][ T966] kasan_save_stack+0x3a/0x60 [ 38.444625][ T966] __kasan_record_aux_stack+0xb6/0xc0 [ 38.449978][ T966] kasan_record_aux_stack_noalloc+0xb/0x10 [ 38.455760][ T966] call_rcu+0xcf/0xf50 [ 38.459812][ T966] pppol2tp_release+0x1e3/0x2b0 [ 38.464641][ T966] sock_close+0xc9/0x220 [ 38.468865][ T966] __fput+0x1fd/0x8f0 [ 38.472827][ T966] ____fput+0x15/0x20 [ 38.476786][ T966] task_work_run+0x1e1/0x250 [ 38.481353][ T966] exit_to_user_mode_loop+0x9b/0xb0 [ 38.486532][ T966] exit_to_user_mode_prepare+0x87/0xd0 [ 38.491970][ T966] syscall_exit_to_user_mode+0x1a/0x30 [ 38.497410][ T966] do_syscall_64+0x58/0xa0 [ 38.501805][ T966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.507679][ T966] [ 38.509979][ T966] The buggy address belongs to the object at ffff888136635c00 [ 38.509979][ T966] which belongs to the cache kmalloc-512 of size 512 [ 38.524004][ T966] The buggy address is located 400 bytes inside of [ 38.524004][ T966] 512-byte region [ffff888136635c00, ffff888136635e00) [ 38.537256][ T966] [ 38.539558][ T966] The buggy address belongs to the physical page: [ 38.545959][ T966] page:ffffea0004d98d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x136634 [ 38.556177][ T966] head:ffffea0004d98d00 order:2 compound_mapcount:0 compound_pincount:0 [ 38.564486][ T966] flags: 0x4000000000010200(slab|head|zone=1) [ 38.570549][ T966] raw: 4000000000010200 ffffea0004d98c00 dead000000000002 ffff888100042f00 [ 38.579113][ T966] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 38.587671][ T966] page dumped because: kasan: bad access detected [ 38.594062][ T966] page_owner tracks the page as allocated [ 38.599751][ T966] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 327, tgid 327 (kworker/1:3), ts 22429218203, free_ts 22257872720 [ 38.621624][ T966] post_alloc_hook+0x1f5/0x210 [ 38.626376][ T966] prep_new_page+0x1c/0x110 [ 38.630858][ T966] get_page_from_freelist+0x2ca9/0x2d20 [ 38.636384][ T966] __alloc_pages+0x1fa/0x610 [ 38.640965][ T966] alloc_slab_page+0x6e/0xf0 [ 38.645530][ T966] new_slab+0x98/0x3e0 [ 38.649578][ T966] ___slab_alloc+0x70f/0xb70 [ 38.654148][ T966] __slab_alloc+0x5e/0xa0 [ 38.658462][ T966] __kmem_cache_alloc_node+0x204/0x2d0 [ 38.663905][ T966] __kmalloc_node_track_caller+0xa1/0x1e0 [ 38.669607][ T966] __alloc_skb+0x226/0x4a0 [ 38.674000][ T966] ndisc_send_rs+0x31d/0x870 [ 38.678564][ T966] addrconf_dad_completed+0x958/0xe80 [ 38.683913][ T966] addrconf_dad_work+0xc1b/0x14a0 [ 38.688911][ T966] process_one_work+0x717/0xc30 [ 38.693739][ T966] worker_thread+0xa4d/0x11d0 [ 38.698397][ T966] page last free stack trace: [ 38.703042][ T966] free_unref_page_prepare+0x80c/0x820 [ 38.708482][ T966] free_unref_page+0x93/0x530 [ 38.713137][ T966] __free_pages+0x67/0x100 [ 38.717532][ T966] free_pages+0x82/0x90 [ 38.721670][ T966] __stack_depot_save+0x45f/0x490 [ 38.726675][ T966] kasan_set_track+0x60/0x70 [ 38.731248][ T966] kasan_save_free_info+0x2b/0x40 [ 38.736250][ T966] ____kasan_slab_free+0x132/0x180 [ 38.741340][ T966] __kasan_slab_free+0x11/0x20 [ 38.746081][ T966] slab_free_freelist_hook+0xc2/0x190 [ 38.751429][ T966] kmem_cache_free+0x12d/0x300 [ 38.756172][ T966] kernfs_put+0x315/0x480 [ 38.760478][ T966] sysfs_remove_group+0x238/0x250 [ 38.765489][ T966] dpm_sysfs_remove+0x95/0xc0 [ 38.770142][ T966] device_del+0x270/0xe50 [ 38.774452][ T966] device_unregister+0x15/0x40 [ 38.779195][ T966] [ 38.781496][ T966] Memory state around the buggy address: [ 38.787101][ T966] ffff888136635c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 38.795141][ T966] ffff888136635d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 38.803176][ T966] >ffff888136635d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 38.811212][ T966] ^ [ 38.815776][ T966] ffff888136635e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 38.823812][ T966] ffff888136635e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 38.831843][ T966] ================================================================== [ 38.839876][ T966] Disabling lock debugging due to kernel taint [ 38.939508][ T496] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.950435][ T496] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 38.959461][ T496] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.967980][ T496] usb 2-1: config 0 descriptor?? [ 39.203366][ T19] usb 4-1: USB disconnect, device number 8 [ 39.727829][ T19] usb 3-1: USB disconnect, device number 10 [ 39.788841][ T496] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 39.796185][ T496] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 40.082237][ T330] usb 2-1: USB disconnect, device number 8 [ 40.082321][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19