last executing test programs: 222.077575ms ago: executing program 3 (id=4): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x4, &(0x7f0000000540)=""/55, 0x37}, 0x80000000}], 0x400000000000222, 0x12142, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002104, 0x0) 212.965525ms ago: executing program 2 (id=3): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) setsockopt(r0, 0x1, 0x9, &(0x7f0000000040), 0x29) 186.033375ms ago: executing program 3 (id=5): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000240)=0xfffffff4, 0x38) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 184.761675ms ago: executing program 0 (id=1): add_key$keyring(&(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4c}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 182.439286ms ago: executing program 1 (id=2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0x3, 0x6}, 'syz0\x00', 0x38}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f00000002c0)={{0x0, 0x2710}, 0x12, 0x4007, 0x100000a}, 0x18) 114.262777ms ago: executing program 2 (id=6): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000e00)={0x1c, &(0x7f0000000940)={0x20, 0x1b, 0x7, "4043ba2e7d5214"}, &(0x7f0000000980)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000dc0)}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001280)={0x34, &(0x7f0000000fc0)={0x40, 0x31, 0x4, "917b30ff"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 113.989367ms ago: executing program 3 (id=7): setresgid(0x0, 0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) listxattr(&(0x7f0000004080)='./file0\x00', 0x0, 0x0) 113.815897ms ago: executing program 3 (id=8): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95a", 0x4}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 100.851528ms ago: executing program 1 (id=9): r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, 0x0, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000400)) mount_setattr(r0, &(0x7f0000000280)='./file0\x00', 0x1800, &(0x7f0000000440)={0x100000, 0x2, 0x0, {r1}}, 0x20) 75.992728ms ago: executing program 1 (id=10): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x200040c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff20, 0x0, 0x0, 0xffffffffffffffff, 0x100}, 0x2040) 227.25µs ago: executing program 3 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000000340)="55f7ee03ccaa274c40812dbb2c45", 0xfffffdd4) 0s ago: executing program 1 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x', 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.4' (ED25519) to the list of known hosts. [ 31.420742][ T36] audit: type=1400 audit(1787259972.870:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.424829][ T287] cgroup: Unknown subsys name 'net' [ 31.443642][ T36] audit: type=1400 audit(1787259972.870:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.473147][ T36] audit: type=1400 audit(1787259972.900:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.473802][ T287] cgroup: Unknown subsys name 'devices' [ 31.595844][ T287] cgroup: Unknown subsys name 'hugetlb' [ 31.601868][ T287] cgroup: Unknown subsys name 'rlimit' [ 31.697774][ T36] audit: type=1400 audit(1787259973.150:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.725907][ T36] audit: type=1400 audit(1787259973.150:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.760157][ T36] audit: type=1400 audit(1787259973.150:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 31.788082][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.798635][ T36] audit: type=1400 audit(1787259973.250:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 31.832816][ T36] audit: type=1400 audit(1787259973.250:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.879637][ T36] audit: type=1400 audit(1787259973.330:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.883204][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.916397][ T36] audit: type=1400 audit(1787259973.330:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.318065][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.325328][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.332840][ T294] bridge_slave_0: entered allmulticast mode [ 33.339615][ T294] bridge_slave_0: entered promiscuous mode [ 33.347477][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.354860][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.362027][ T294] bridge_slave_1: entered allmulticast mode [ 33.368759][ T294] bridge_slave_1: entered promiscuous mode [ 33.454084][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.461200][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.468938][ T295] bridge_slave_0: entered allmulticast mode [ 33.475468][ T295] bridge_slave_0: entered promiscuous mode [ 33.496027][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.503285][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.510672][ T296] bridge_slave_0: entered allmulticast mode [ 33.517212][ T296] bridge_slave_0: entered promiscuous mode [ 33.523609][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.530778][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.538207][ T295] bridge_slave_1: entered allmulticast mode [ 33.544797][ T295] bridge_slave_1: entered promiscuous mode [ 33.555665][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.562762][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.570069][ T296] bridge_slave_1: entered allmulticast mode [ 33.577868][ T296] bridge_slave_1: entered promiscuous mode [ 33.610282][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.617816][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.625219][ T297] bridge_slave_0: entered allmulticast mode [ 33.632054][ T297] bridge_slave_0: entered promiscuous mode [ 33.642806][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.650392][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.657764][ T297] bridge_slave_1: entered allmulticast mode [ 33.664397][ T297] bridge_slave_1: entered promiscuous mode [ 33.767189][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.774485][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.782718][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.789839][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.839483][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.846775][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.854206][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.861264][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.892059][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.899493][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.906938][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.914082][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.924154][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.931262][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.938886][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.945966][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.974226][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.981696][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.989616][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.997607][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.005301][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.012730][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.020891][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.028297][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.049172][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.056446][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.067816][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.074939][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.084819][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.092523][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.111736][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.119852][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.135014][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.142095][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.150056][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.157244][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.180109][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.187363][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.195573][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.203828][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.262284][ T297] veth0_vlan: entered promiscuous mode [ 34.271730][ T294] veth0_vlan: entered promiscuous mode [ 34.279452][ T296] veth0_vlan: entered promiscuous mode [ 34.302342][ T295] veth0_vlan: entered promiscuous mode [ 34.312642][ T296] veth1_macvtap: entered promiscuous mode [ 34.326189][ T297] veth1_macvtap: entered promiscuous mode [ 34.340379][ T294] veth1_macvtap: entered promiscuous mode [ 34.347814][ T295] veth1_macvtap: entered promiscuous mode [ 34.411321][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.509385][ T323] input: syz0 as /devices/virtual/input/input4 [ 34.574414][ T334] loop2: detected capacity change from 0 to 7 [ 34.613888][ T338] ------------[ cut here ]------------ [ 34.619543][ T338] WARNING: CPU: 0 PID: 338 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 34.629144][ T338] Modules linked in: [ 34.633800][ T338] CPU: 0 UID: 0 PID: 338 Comm: syz.3.11 Not tainted syzkaller #0 8b5107c30037f7cfe212f1198c23c0388356dd7c [ 34.646121][ T338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.657061][ T338] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 34.663760][ T338] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 84 c4 0b 06 00 0f 85 c2 00 00 00 c6 05 77 c4 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 34.684595][ T338] RSP: 0018:ffffc9000b8af8c0 EFLAGS: 00010246 [ 34.692148][ T338] RAX: 0000000000000000 RBX: 0000000000000013 RCX: 0000000000000000 [ 34.701288][ T338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000b8af978 [ 34.709582][ T338] RBP: ffffc9000b8af9f0 R08: ffffc9000b8af977 R09: 0000000000000000 [ 34.718070][ T338] R10: ffffc9000b8af960 R11: fffff52001715f2f R12: ffffc9000b8af900 [ 34.726211][ T338] R13: dffffc0000000000 R14: 1ffff92001715f1c R15: 0000000000000000 [ 34.735757][ T338] FS: 00007fd3ea3e36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 34.745120][ T338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.751854][ T338] CR2: 000000110c2b1e9a CR3: 0000000113412000 CR4: 00000000003526b0 [ 34.760007][ T338] Call Trace: [ 34.763414][ T338] [ 34.766474][ T338] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 34.772931][ T338] ? plist_add+0x4d4/0x570 [ 34.777748][ T338] ? __futex_queue+0x19f/0x350 [ 34.782713][ T338] ___kmalloc_large_node+0x81/0x220 [ 34.788591][ T338] __kmalloc_large_node_noprof+0x1e/0xd0 [ 34.794449][ T338] __kmalloc_node_track_caller_noprof+0x30d/0x4f0 [ 34.801569][ T338] ? bitmap_parse_user+0x29/0x80 [ 34.806650][ T338] memdup_user_nul+0x40/0x1a0 [ 34.811477][ T338] ? bitmap_parse_user+0x1f/0x80 [ 34.816688][ T338] bitmap_parse_user+0x29/0x80 [ 34.821710][ T338] irq_affinity_proc_write+0x139/0x230 [ 34.827334][ T338] ? __cfi_irq_affinity_proc_write+0x10/0x10 [ 34.833430][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.841099][ T338] ? futex_wait+0x2b8/0x7c0 [ 34.845889][ T338] ? __cfi_irq_affinity_proc_write+0x10/0x10 [ 34.852213][ T338] proc_reg_write+0x1fa/0x2f0 [ 34.857081][ T338] ? __cfi_proc_reg_write+0x10/0x10 [ 34.862339][ T338] vfs_write+0x3c4/0xfd0 [ 34.866844][ T338] ? __cfi_vfs_write+0x10/0x10 [ 34.871677][ T338] ? __kasan_check_write+0x18/0x20 [ 34.877312][ T338] ? mutex_lock+0x97/0x1d0 [ 34.882052][ T338] ? __cfi_mutex_lock+0x10/0x10 [ 34.887288][ T338] ksys_write+0x145/0x260 [ 34.891717][ T338] ? xfd_validate_state+0x68/0x140 [ 34.897119][ T338] ? __cfi_ksys_write+0x10/0x10 [ 34.902031][ T338] ? __kasan_check_write+0x18/0x20 [ 34.907262][ T338] ? fpregs_restore_userregs+0x11c/0x260 [ 34.913726][ T338] __x64_sys_write+0x7f/0x90 [ 34.918559][ T338] x64_sys_call+0x271c/0x2ee0 [ 34.923683][ T338] do_syscall_64+0x57/0xf0 [ 34.928253][ T338] ? clear_bhb_loop+0x50/0xa0 [ 34.932955][ T338] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.939242][ T338] RIP: 0033:0x7fd3eb99e0d9 [ 34.943815][ T338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.964272][ T338] RSP: 002b:00007fd3ea3e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 34.973166][ T338] RAX: ffffffffffffffda RBX: 00007fd3ebc25fa0 RCX: 00007fd3eb99e0d9 [ 34.981321][ T338] RDX: 00000000fffffdd4 RSI: 0000200000000340 RDI: 0000000000000003 [ 34.989688][ T338] RBP: 00007fd3eba35024 R08: 0000000000000000 R09: 0000000000000000 [ 34.999859][ T338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.007126][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 35.009331][ T338] R13: 00007fd3ebc26038 R14: 00007fd3ebc25fa0 R15: 00007ffd80a144d8 [ 35.025361][ T338] [ 35.027689][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.028513][ T338] ---[ end trace 0000000000000000 ]--- [ 35.055489][ T46] usb 1-1: string descriptor 0 read error: -22 [ 35.065933][ T46] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 35.075768][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.193167][ T66] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 35.343114][ T66] usb 3-1: Using ep0 maxpacket: 32 [ 35.349521][ T66] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 35.357960][ T66] usb 3-1: config 0 has no interface number 0 [ 35.364374][ T66] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 35.376128][ T66] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 35.385694][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.393774][ T66] usb 3-1: Product: syz [ 35.398096][ T66] usb 3-1: Manufacturer: syz [ 35.402732][ T66] usb 3-1: SerialNumber: syz [ 35.409214][ T66] usb 3-1: config 0 descriptor?? [ 35.414806][ T326] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 35.624248][ T326] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 35.891467][ T46] usb 1-1: USB disconnect, device number 2 [ 36.434156][ T66] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 36.445681][ T66] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 36.456291][ T66] asix 3-1:0.188: probe with driver asix failed with error -71 [ 36.466534][ T66] usb 3-1: USB disconnect, device number 2