last executing test programs: 184.319341ms ago: executing program 2 (id=3): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000280)={0x0, 0x8, '\x00', 0x0, &(0x7f0000000200)=[0x0]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = syz_kvm_add_vcpu$x86(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@code={0xa, 0x50, {"48c7c00000000148c7000000000048c740080000000048c740100000000048c740180100000048c740200100000048c7c11300020048c7c2000000010f01c1"}}], 0x50}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000180)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0x31237648}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect$midi(0x3, 0x48, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x644, 0x800e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x1, 0x5, 0x20, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0xf, [@ms_header={0x7, 0x24, 0x1, 0x8, 0x7}], [{{0x9, 0x5, 0x4, 0x2, 0x200, 0x2c, 0xf5, 0x2, {0x14, 0x25, 0x1, 0x10, "d7edd74705003eed8a3e473caf800300"}}}]}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x11, 0x0}) 175.188113ms ago: executing program 1 (id=2): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x3, 0x8000158}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x1, 0x0) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2b53, 0x31, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xa, 0x9543ff1f4ca95fd6, 0xc, {0x8, 0xb, 0x1, 0x6, 0x1, 0x23, 0x30, 0xe5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x8000}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x9, 0x10, {0xa, 0x25, 0x25, 0x5, 0x50, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0xf3, 0x1, {0xa, 0x25, 0x25, 0x8, 0xd, 0xfffb}}}}}}}}]}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e224e0000", 0x58}], 0x1) close(0x3) 170.288573ms ago: executing program 3 (id=4): socket$netlink(0x10, 0x3, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x80, 0x0, 0x30}]}) ioctl$DM_DEV_SUSPEND(r1, 0xc138fd06, &(0x7f0000000980)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_DEV_RENAME(r1, 0xc138fd05, &(0x7f0000000bc0)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x0, 0x0, 0x40000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, @uuid={'CRP-syz', 0x0, '1\x00'}}) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x160, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '0+8', 0x20, '512', ' 0 syz'}}}) r2 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000b40)='./dm0\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000b80)="2737ec3fa5a3cdb97e", 0x9, 0xff8) 148.039855ms ago: executing program 0 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x26) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev_mnt\x00', 0x1ff) socket$packet(0x11, 0x3, 0x300) mount(0x0, &(0x7f00000001c0)='./dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xfffffff6, 0x2, 0x0, 0x1, [@nested={0x1f, 0x14, 0x0, 0x1, [@generic="1e0013ac58eccc52a6179d4896ee29a9355bf31e841904efec71a5"]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000340)={0x0, &(0x7f0000002480)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000002500)={0x3, 0x0, 0xf0000000}) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) read$FUSE(r7, &(0x7f0000000440)={0x2020}, 0x2020) close_range(r1, 0xffffffffffffffff, 0x0) 105.52114ms ago: executing program 3 (id=5): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x8ff, 0x12) mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204080, &(0x7f0000000300)=ANY=[@ANYBLOB='size=G']) 57.409645ms ago: executing program 3 (id=6): write(0xffffffffffffffff, &(0x7f0000000100)="1c0000001800077bab092500090007000a0700000000000600003693", 0x1c) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001e0021002bbd7000000000000a000000050000000000ba1656d47f268e7362809f794b9458f926f5994e018e67f3884aa93e980800007d2f88dafe689f8f86f2c840c1dbc61a08ef7385210cace55ad0b230523b1269fb7e5df8869c6ef4d0984e682fad1916be617356c6fc78dd46d3c4b6"], 0x1c}}, 0x0) 53.845805ms ago: executing program 3 (id=7): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r1, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000780)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000880)='net/protocols\x00') sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r7, r8, &(0x7f0000000280)={0x0, 0x7590, 0x4000, 0x2, 0x128, 0x0, r6}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad5b, 0x20000, 0x3, 0x2d9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8149, 0x20, 0x2, 0x13c}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd6d7, 0x200, 0x1, 0x1c7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4ce6, 0x0, 0x2, 0x19e, 0x0, r5}}], 0x4, 0x0, 0x0) syz_ublk_setup_queues(r10, r8, &(0x7f0000000340)={0x0, 0xc1, 0x1000, 0xfffffffb, 0x7f, 0x0, r10}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x21b, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x800, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x802b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x2, 0xfffffffd, 0x26e, 0x0, r11}}], 0x1, 0x0, 0x0) 52.228355ms ago: executing program 3 (id=8): socket$netlink(0x10, 0x3, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x80, 0x0, 0x30}]}) ioctl$DM_DEV_SUSPEND(r2, 0xc138fd06, &(0x7f0000000980)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_DEV_RENAME(r2, 0xc138fd05, &(0x7f0000000bc0)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x0, 0x0, 0x40000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, @uuid={'CRP-syz', 0x0, '1\x00'}}) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x160, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '0+8', 0x20, '512', ' 0 syz'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000b00)='./dm0\x00', 0x6180, r1) r3 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000b40)='./dm0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000b80)="2737ec3fa5a3cdb97e", 0x9, 0xff8) 0s ago: executing program 3 (id=9): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, r2, 0x205, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x34}}, 0x0) shutdown(r1, 0x1) socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac2(0x0, 0xb1, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100312460008732b0a004000f401030109029f000301030040080b0002010720060904000000010120000924010e00013f000308240a05030804000f24060605050003000216040000000c240302ff010306"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x80, 0x8, 0x1, 0xf, 0x8, 0xd4e}, {0x8, 0x100, 0x4, 0x8, 0xc, 0x0, 0x9, 0x7, 0x3, 0x17, 0x1, 0x83, 0x9}, {0x80000002, 0x7, 0xa, 0xf, 0x1, 0x12, 0x0, 0xfb, 0xf2, 0xf9, 0x1, 0xff, 0x2}], 0x8}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="b91b0000000f3225ff0f00000d000010000f30b878563412bb000310008903", 0xfffffcad}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.107' (ED25519) to the list of known hosts. [ 21.119971][ T36] audit: type=1400 audit(1793824452.589:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.142919][ T36] audit: type=1400 audit(1793824452.609:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.143816][ T286] cgroup: Unknown subsys name 'net' [ 21.170897][ T36] audit: type=1400 audit(1793824452.639:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.171027][ T286] cgroup: Unknown subsys name 'devices' [ 21.290208][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.295829][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.447803][ T36] audit: type=1400 audit(1793824452.909:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.471016][ T36] audit: type=1400 audit(1793824452.909:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.495812][ T36] audit: type=1400 audit(1793824452.909:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.503996][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.528204][ T36] audit: type=1400 audit(1793824452.989:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.553602][ T36] audit: type=1400 audit(1793824452.989:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.580080][ T36] audit: type=1400 audit(1793824453.049:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.580594][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.605715][ T36] audit: type=1400 audit(1793824453.049:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.421118][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.428182][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.435517][ T295] bridge_slave_0: entered allmulticast mode [ 22.441923][ T295] bridge_slave_0: entered promiscuous mode [ 22.448675][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.455706][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.462894][ T295] bridge_slave_1: entered allmulticast mode [ 22.469108][ T295] bridge_slave_1: entered promiscuous mode [ 22.510190][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.517238][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.524313][ T293] bridge_slave_0: entered allmulticast mode [ 22.530451][ T293] bridge_slave_0: entered promiscuous mode [ 22.536654][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.543713][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.550819][ T293] bridge_slave_1: entered allmulticast mode [ 22.556924][ T293] bridge_slave_1: entered promiscuous mode [ 22.587258][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.594346][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.601484][ T296] bridge_slave_0: entered allmulticast mode [ 22.607611][ T296] bridge_slave_0: entered promiscuous mode [ 22.614086][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.621127][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.628287][ T296] bridge_slave_1: entered allmulticast mode [ 22.634549][ T296] bridge_slave_1: entered promiscuous mode [ 22.663622][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.670855][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.677930][ T294] bridge_slave_0: entered allmulticast mode [ 22.684214][ T294] bridge_slave_0: entered promiscuous mode [ 22.692939][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.699997][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.707027][ T294] bridge_slave_1: entered allmulticast mode [ 22.713209][ T294] bridge_slave_1: entered promiscuous mode [ 22.816862][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.823928][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.831218][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.838234][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.851563][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.858620][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.865863][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.872906][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.888760][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.895800][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.903063][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.910088][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.926889][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.933948][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.941217][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.948235][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.981189][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.989056][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.996223][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.003514][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.011073][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.018197][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.025597][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.032958][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.051105][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.058133][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.069758][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.076797][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.084302][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.091340][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.099216][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.106292][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.120145][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.127183][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.137746][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.144789][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.175584][ T296] veth0_vlan: entered promiscuous mode [ 23.187925][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.195024][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.202768][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.209845][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.225938][ T294] veth0_vlan: entered promiscuous mode [ 23.236719][ T296] veth1_macvtap: entered promiscuous mode [ 23.257234][ T294] veth1_macvtap: entered promiscuous mode [ 23.267218][ T295] veth0_vlan: entered promiscuous mode [ 23.283188][ T293] veth0_vlan: entered promiscuous mode [ 23.294320][ T295] veth1_macvtap: entered promiscuous mode [ 23.316534][ T293] veth1_macvtap: entered promiscuous mode [ 23.325488][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.382546][ T315] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.529762][ T337] device-mapper: ioctl: Unable to change name on mapped device syzd0 to one that already exists: CRP-syzd1 [ 23.648488][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.678424][ T312] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 23.708496][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.799062][ T65] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.799491][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.817664][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.827666][ T31] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 23.836890][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.846210][ T31] usb 1-1: config 0 descriptor?? [ 23.852394][ T312] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 23.861787][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 23.866851][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.875200][ T312] usb 2-1: Product: syz [ 23.879790][ T312] usb 2-1: Manufacturer: syz [ 23.884410][ T312] usb 2-1: SerialNumber: syz [ 23.889623][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 23.900061][ T45] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 23.909111][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.917124][ T45] usb 3-1: Product: syz [ 23.921349][ T45] usb 3-1: Manufacturer: syz [ 23.925946][ T45] usb 3-1: SerialNumber: syz [ 23.958702][ T65] usb 4-1: Using ep0 maxpacket: 8 [ 23.966498][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 23.975058][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 23.985334][ T65] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 23.995526][ T65] usb 4-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 24.004656][ T65] usb 4-1: New USB device strings: Mfr=244, Product=1, SerialNumber=3 [ 24.012843][ T65] usb 4-1: Product: syz [ 24.017059][ T65] usb 4-1: Manufacturer: syz [ 24.021706][ T65] usb 4-1: SerialNumber: syz [ 24.142451][ T45] usb 3-1: USB disconnect, device number 2 [ 24.163306][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.312717][ T65] usb 4-1: 0:1 : does not exist [ 24.317876][ T65] usb 4-1: 6:0: failed to get current value for ch 0 (-71) [ 24.325515][ T65] usb 4-1: 6:0: cannot get min/max values for control 2 (id 6) [ 24.336917][ T65] usb 4-1: 6:0: failed to get current value for ch 1 (-71) [ 24.339693][ T31] savu 0003:1E7D:2D5A.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 24.345084][ T65] usb 4-1: 6:0: failed to get current value for ch 0 (-71) [ 24.365963][ T65] usb 4-1: 6:0: failed to get current value for ch 1 (-71) [ 24.377784][ T65] usb 4-1: unit 0 not found! [ 24.389990][ T65] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 24.400663][ T65] usb 4-1: USB disconnect, device number 2 [ 24.414135][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.670081][ T334] usb 1-1: USB disconnect, device number 2 [ 24.676893][ T334] ================================================================== [ 24.684991][ T334] BUG: KASAN: slab-use-after-free in roccat_disconnect+0x236/0x240 [ 24.692881][ T334] Read of size 4 at addr ffff888113528008 by task kworker/1:4/334 [ 24.700661][ T334] [ 24.702980][ T334] CPU: 1 UID: 0 PID: 334 Comm: kworker/1:4 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 24.702996][ T334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 24.703005][ T334] Workqueue: usb_hub_wq hub_event [ 24.703029][ T334] Call Trace: [ 24.703033][ T334] [ 24.703039][ T334] __dump_stack+0x21/0x30 [ 24.703052][ T334] dump_stack_lvl+0x140/0x1c0 [ 24.703062][ T334] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.703072][ T334] print_address_description+0x71/0x210 [ 24.703084][ T334] print_report+0x4a/0x70 [ 24.703093][ T334] kasan_report+0x162/0x1a0 [ 24.703105][ T334] ? roccat_disconnect+0x236/0x240 [ 24.703120][ T334] ? roccat_disconnect+0x236/0x240 [ 24.703134][ T334] __asan_report_load4_noabort+0x18/0x20 [ 24.703148][ T334] roccat_disconnect+0x236/0x240 [ 24.703161][ T334] savu_remove+0xf0/0x170 [ 24.703172][ T334] ? __cfi_savu_remove+0x10/0x10 [ 24.703183][ T334] hid_device_remove+0x293/0x400 [ 24.703197][ T334] ? __cfi_hid_device_remove+0x10/0x10 [ 24.703210][ T334] device_release_driver_internal+0x4ad/0x830 [ 24.703224][ T334] device_release_driver+0x1d/0x30 [ 24.703236][ T334] bus_remove_device+0x34f/0x370 [ 24.703246][ T334] device_del+0x583/0xcf0 [ 24.703257][ T334] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 24.703268][ T334] ? __pm_runtime_resume+0xa0/0xa0 [ 24.703278][ T334] ? __cfi_device_del+0x10/0x10 [ 24.703289][ T334] ? __kasan_check_write+0x18/0x20 [ 24.703303][ T334] ? _raw_spin_lock_irq+0x93/0x120 [ 24.703313][ T334] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 24.703324][ T334] hid_destroy_device+0x6e/0x110 [ 24.703337][ T334] usbhid_disconnect+0xa3/0xc0 [ 24.703350][ T334] usb_unbind_interface+0x2b0/0xa40 [ 24.703364][ T334] ? __cfi_usb_unbind_interface+0x10/0x10 [ 24.703376][ T334] device_release_driver_internal+0x525/0x830 [ 24.703389][ T334] device_release_driver+0x1d/0x30 [ 24.703401][ T334] bus_remove_device+0x34f/0x370 [ 24.703411][ T334] device_del+0x583/0xcf0 [ 24.703423][ T334] ? kfree_const+0x3d/0x50 [ 24.703436][ T334] ? __cfi_device_release+0x10/0x10 [ 24.703449][ T334] ? __cfi_device_del+0x10/0x10 [ 24.703461][ T334] ? kobject_put+0x238/0x2a0 [ 24.703471][ T334] ? device_unregister+0x2b/0x40 [ 24.703483][ T334] usb_disable_device+0x3af/0x770 [ 24.703495][ T334] usb_disconnect+0x331/0x950 [ 24.703505][ T334] hub_event+0x1ad5/0x4360 [ 24.703517][ T334] ? hub_event+0x1170/0x4360 [ 24.703531][ T334] ? __cfi_hub_event+0x10/0x10 [ 24.703542][ T334] ? kick_pool+0xb9/0x540 [ 24.703556][ T334] process_scheduled_works+0x7f7/0x1060 [ 24.703569][ T334] worker_thread+0xc99/0x13f0 [ 24.703581][ T334] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 24.703594][ T334] ? __kasan_check_read+0x15/0x20 [ 24.703607][ T334] kthread+0x2c7/0x360 [ 24.703620][ T334] ? __cfi_worker_thread+0x10/0x10 [ 24.703631][ T334] ? __cfi_kthread+0x10/0x10 [ 24.703644][ T334] ret_from_fork+0x64/0xa0 [ 24.703654][ T334] ? __cfi_kthread+0x10/0x10 [ 24.703666][ T334] ret_from_fork_asm+0x1a/0x30 [ 24.703678][ T334] [ 24.703681][ T334] [ 25.002117][ T334] Allocated by task 31: [ 25.006252][ T334] kasan_save_track+0x3e/0x80 [ 25.010933][ T334] kasan_save_alloc_info+0x3a/0x50 [ 25.016029][ T334] __kasan_kmalloc+0x96/0xb0 [ 25.020616][ T334] __kmalloc_cache_noprof+0x23c/0x470 [ 25.025970][ T334] roccat_connect+0x6a/0x540 [ 25.030561][ T334] savu_probe+0x1a7/0x3f0 [ 25.034875][ T334] hid_device_probe+0x2c8/0x690 [ 25.039712][ T334] really_probe+0x2e1/0x8b0 [ 25.044199][ T334] __driver_probe_device+0x193/0x280 [ 25.049481][ T334] driver_probe_device+0x54/0x3f0 [ 25.054493][ T334] __device_attach_driver+0x2f1/0x4b0 [ 25.059847][ T334] bus_for_each_drv+0x264/0x300 [ 25.064678][ T334] __device_attach+0x2c4/0x3c0 [ 25.069423][ T334] device_initial_probe+0x1e/0x30 [ 25.074429][ T334] bus_probe_device+0x18b/0x270 [ 25.079265][ T334] device_add+0x7fd/0xbf0 [ 25.083575][ T334] hid_add_device+0x3c4/0x5a0 [ 25.088234][ T334] usbhid_probe+0xdca/0x1310 [ 25.092810][ T334] usb_probe_interface+0x6a8/0xbf0 [ 25.097901][ T334] really_probe+0x2e1/0x8b0 [ 25.102393][ T334] __driver_probe_device+0x193/0x280 [ 25.107666][ T334] driver_probe_device+0x54/0x3f0 [ 25.112764][ T334] __device_attach_driver+0x2f1/0x4b0 [ 25.118119][ T334] bus_for_each_drv+0x264/0x300 [ 25.122957][ T334] __device_attach+0x2c4/0x3c0 [ 25.127700][ T334] device_initial_probe+0x1e/0x30 [ 25.132706][ T334] bus_probe_device+0x18b/0x270 [ 25.137537][ T334] device_add+0x7fd/0xbf0 [ 25.141852][ T334] usb_set_configuration+0x1aad/0x2080 [ 25.147291][ T334] usb_generic_driver_probe+0x95/0x160 [ 25.152732][ T334] usb_probe_device+0x1f2/0x3b0 [ 25.157570][ T334] really_probe+0x2e1/0x8b0 [ 25.162092][ T334] __driver_probe_device+0x193/0x280 [ 25.167366][ T334] driver_probe_device+0x54/0x3f0 [ 25.172374][ T334] __device_attach_driver+0x2f1/0x4b0 [ 25.177736][ T334] bus_for_each_drv+0x264/0x300 [ 25.182590][ T334] __device_attach+0x2c4/0x3c0 [ 25.187359][ T334] device_initial_probe+0x1e/0x30 [ 25.192412][ T334] bus_probe_device+0x18b/0x270 [ 25.197272][ T334] device_add+0x7fd/0xbf0 [ 25.201586][ T334] usb_new_device+0x98d/0x1500 [ 25.206335][ T334] hub_event+0x2dbd/0x4360 [ 25.210734][ T334] process_scheduled_works+0x7f7/0x1060 [ 25.216265][ T334] worker_thread+0xc99/0x13f0 [ 25.220922][ T334] kthread+0x2c7/0x360 [ 25.224971][ T334] ret_from_fork+0x64/0xa0 [ 25.229367][ T334] ret_from_fork_asm+0x1a/0x30 [ 25.234110][ T334] [ 25.236409][ T334] Freed by task 318: [ 25.240276][ T334] kasan_save_track+0x3e/0x80 [ 25.244931][ T334] kasan_save_free_info+0x44/0x50 [ 25.249938][ T334] __kasan_slab_free+0x5f/0x80 [ 25.254683][ T334] kfree+0x158/0x440 [ 25.258588][ T334] roccat_release+0x2c3/0x390 [ 25.263252][ T334] __fput+0x20b/0xa30 [ 25.267217][ T334] ____fput+0x20/0x30 [ 25.271184][ T334] task_work_run+0x1e8/0x260 [ 25.275778][ T334] resume_user_mode_work+0x35/0x50 [ 25.280889][ T334] syscall_exit_to_user_mode+0x63/0xb0 [ 25.286352][ T334] do_syscall_64+0x63/0xf0 [ 25.290768][ T334] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.296646][ T334] [ 25.298951][ T334] The buggy address belongs to the object at ffff888113528000 [ 25.298951][ T334] which belongs to the cache kmalloc-512 of size 512 [ 25.312998][ T334] The buggy address is located 8 bytes inside of [ 25.312998][ T334] freed 512-byte region [ffff888113528000, ffff888113528200) [ 25.326600][ T334] [ 25.328909][ T334] The buggy address belongs to the physical page: [ 25.335307][ T334] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113528 [ 25.344133][ T334] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 25.352610][ T334] flags: 0x4000000000000040(head|zone=1) [ 25.358235][ T334] page_type: f5(slab) [ 25.362206][ T334] raw: 4000000000000040 ffff888100041c80 dead000000000122 0000000000000000 [ 25.370780][ T334] raw: 0000000000000000 0000000080100010 00000001f5000000 0000000000000000 [ 25.379361][ T334] head: 4000000000000040 ffff888100041c80 dead000000000122 0000000000000000 [ 25.388030][ T334] head: 0000000000000000 0000000080100010 00000001f5000000 0000000000000000 [ 25.396700][ T334] head: 4000000000000002 ffffea00044d4a01 ffffffffffffffff 0000000000000000 [ 25.405365][ T334] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 25.414021][ T334] page dumped because: kasan: bad access detected [ 25.420431][ T334] page_owner tracks the page as allocated [ 25.426130][ T334] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 31, tgid 31 (kworker/1:0), ts 24362691748, free_ts 24258988406 [ 25.448453][ T334] post_alloc_hook+0x37d/0x3b0 [ 25.453231][ T334] prep_new_page+0x2d/0x180 [ 25.457735][ T334] get_page_from_freelist+0x4aea/0x4ba0 [ 25.463284][ T334] __alloc_pages_noprof+0x35a/0x7e0 [ 25.468480][ T334] alloc_slab_page+0x6b/0x1e0 [ 25.473146][ T334] allocate_slab+0x69/0x430 [ 25.477645][ T334] ___slab_alloc+0x591/0x8c0 [ 25.482228][ T334] __kmalloc_cache_noprof+0x2cd/0x470 [ 25.487593][ T334] roccat_connect+0x6a/0x540 [ 25.492175][ T334] savu_probe+0x1a7/0x3f0 [ 25.496500][ T334] hid_device_probe+0x2c8/0x690 [ 25.501345][ T334] really_probe+0x2e1/0x8b0 [ 25.505844][ T334] __driver_probe_device+0x193/0x280 [ 25.511117][ T334] driver_probe_device+0x54/0x3f0 [ 25.516133][ T334] __device_attach_driver+0x2f1/0x4b0 [ 25.521496][ T334] bus_for_each_drv+0x264/0x300 [ 25.526333][ T334] page last free pid 318 tgid 318 stack trace: [ 25.532466][ T334] free_unref_page+0xb99/0xf50 [ 25.537221][ T334] __free_pages+0x6b/0x3b0 [ 25.541632][ T334] __free_slab+0xb2/0x110 [ 25.545951][ T334] free_slab+0x18/0xe0 [ 25.550010][ T334] __put_partials+0x115/0x150 [ 25.554679][ T334] put_cpu_partial+0x91/0xc0 [ 25.559256][ T334] __slab_free+0x1cf/0x2a0 [ 25.563657][ T334] ___cache_free+0xc9/0xe0 [ 25.568066][ T334] qlist_free_all+0xb5/0x130 [ 25.572670][ T334] kasan_quarantine_reduce+0x14f/0x180 [ 25.578229][ T334] __kasan_slab_alloc+0x28/0x90 [ 25.583081][ T334] kmem_cache_alloc_noprof+0x1bf/0x410 [ 25.588538][ T334] jbd2__journal_start+0x16d/0x860 [ 25.593652][ T334] __ext4_journal_start_sb+0x111/0x3f0 [ 25.599109][ T334] ext4_dirty_inode+0x97/0x110 [ 25.603878][ T334] __mark_inode_dirty+0x24e/0xc50 [ 25.608907][ T334] [ 25.611216][ T334] Memory state around the buggy address: [ 25.616830][ T334] ffff888113527f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 25.624965][ T334] ffff888113527f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 25.633008][ T334] >ffff888113528000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 25.641049][ T334] ^ [ 25.645361][ T334] ffff888113528080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 25.653408][ T334] ffff888113528100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 25.661453][ T334] ================================================================== [ 25.682439][ T334] Disabling lock debugging due to kernel taint [ 26.395522][ T312] usb 2-1: USB disconnect, device number 2 [ 26.405422][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory