last executing test programs: 273.930642ms ago: executing program 0 (id=1): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/split_huge_pages\x00', 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000300)='/proc/self/cwd/test_file,0x0,0x1', 0x20) umount2(&(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00', 0x4) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = open(&(0x7f0000000040)='./bus\x00', 0x14b27e, 0x6) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x2501, 0x4) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000000c0)=0x7, 0x4) socket$inet(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000640)='10', 0x2) r4 = getpid() process_vm_readv(r4, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/54, 0x7ffff000}, {&(0x7f0000000700)=""/152, 0x98}], 0x2, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/95, 0x7ffff000}], 0x286, 0x0) 260.330663ms ago: executing program 1 (id=2): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000180)={0x5, 0x96, 0x4000, 0x6, 0x4}) syz_usb_connect$uac2(0x2, 0x9f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0xda, 0x20, 0x8f, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x7f}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x3, 0x15, 0x4}, [@output_terminal={0xc, 0x24, 0x3, 0x6, 0x405, 0xf6, 0x4, 0x0, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd, 0x2, 0x4e, 0xb1}, @as_header={0x10, 0x24, 0x1, 0x6, 0xff, 0x2, 0x4, 0x40, 0x200, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf0, 0x3, 0x6, {0x8, 0x25, 0x1, 0x2, 0x33, 0x3, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x6, 0x40, {0x8, 0x25, 0x1, 0x0, 0x33, 0xc0, 0x6}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 252.293504ms ago: executing program 3 (id=4): r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x3401) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000200)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x60000, 0x0, &(0x7f0000000280)={0x4b5a9da54893e123, 0x3, 0x5, 0x1}, 0x8, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0xffffffffffffff3d, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=5): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) mount(0x0, &(0x7f00000000c0)='./dev\x00', 0x0, 0x0, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec) (async) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.185' (ED25519) to the list of known hosts. [ 22.446916][ T36] audit: type=1400 audit(1793846009.900:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.469945][ T36] audit: type=1400 audit(1793846009.930:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.470922][ T286] cgroup: Unknown subsys name 'net' [ 22.497801][ T36] audit: type=1400 audit(1793846009.950:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.497930][ T286] cgroup: Unknown subsys name 'devices' [ 22.600573][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.606174][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.758470][ T36] audit: type=1400 audit(1793846010.210:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.781676][ T36] audit: type=1400 audit(1793846010.210:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.788976][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.806791][ T36] audit: type=1400 audit(1793846010.220:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.838105][ T36] audit: type=1400 audit(1793846010.270:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.843474][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.863684][ T36] audit: type=1400 audit(1793846010.270:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.897948][ T36] audit: type=1400 audit(1793846010.300:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.923453][ T36] audit: type=1400 audit(1793846010.300:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.261721][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.268850][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.275913][ T296] bridge_slave_0: entered allmulticast mode [ 24.282284][ T296] bridge_slave_0: entered promiscuous mode [ 24.288548][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.295765][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.302880][ T296] bridge_slave_1: entered allmulticast mode [ 24.309147][ T296] bridge_slave_1: entered promiscuous mode [ 24.317915][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.324987][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.332080][ T294] bridge_slave_0: entered allmulticast mode [ 24.338202][ T294] bridge_slave_0: entered promiscuous mode [ 24.344478][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.351526][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.358580][ T295] bridge_slave_0: entered allmulticast mode [ 24.364932][ T295] bridge_slave_0: entered promiscuous mode [ 24.373698][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.380823][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.387925][ T295] bridge_slave_1: entered allmulticast mode [ 24.394232][ T295] bridge_slave_1: entered promiscuous mode [ 24.409477][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.416506][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.423591][ T294] bridge_slave_1: entered allmulticast mode [ 24.429737][ T294] bridge_slave_1: entered promiscuous mode [ 24.457152][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.464217][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.471459][ T293] bridge_slave_0: entered allmulticast mode [ 24.477587][ T293] bridge_slave_0: entered promiscuous mode [ 24.484106][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.491264][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.498323][ T293] bridge_slave_1: entered allmulticast mode [ 24.504565][ T293] bridge_slave_1: entered promiscuous mode [ 24.630303][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.637343][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.644714][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.651761][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.675460][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.682523][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.690155][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.697173][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.706455][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.713526][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.720812][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.727994][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.745741][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.753643][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.760995][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.768129][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.775840][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.783041][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.797226][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.804399][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.813273][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.820326][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.858294][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.865383][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.880454][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.887491][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.911745][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.918798][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.926457][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.933497][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.950056][ T295] veth0_vlan: entered promiscuous mode [ 24.967614][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.974700][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.984041][ T294] veth0_vlan: entered promiscuous mode [ 24.993107][ T295] veth1_macvtap: entered promiscuous mode [ 25.000434][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.007471][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.035264][ T293] veth0_vlan: entered promiscuous mode [ 25.044762][ T294] veth1_macvtap: entered promiscuous mode [ 25.065127][ T293] veth1_macvtap: entered promiscuous mode [ 25.080072][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.127304][ T296] veth0_vlan: entered promiscuous mode [ 25.145329][ T312] FAULT_INJECTION: forcing a failure. [ 25.145329][ T312] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 25.159415][ T296] veth1_macvtap: entered promiscuous mode [ 25.163282][ T312] CPU: 1 UID: 0 PID: 312 Comm: syz.0.1 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 25.163313][ T312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 25.163332][ T312] Call Trace: [ 25.163339][ T312] [ 25.163347][ T312] __dump_stack+0x21/0x30 [ 25.163370][ T312] dump_stack_lvl+0x140/0x1c0 [ 25.163388][ T312] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.163407][ T312] dump_stack+0x19/0x20 [ 25.163423][ T312] should_fail_ex+0x3c2/0x510 [ 25.163452][ T312] should_fail+0xf/0x20 [ 25.163467][ T312] should_fail_usercopy+0x1e/0x30 [ 25.163485][ T312] _copy_to_iter+0x3b6/0x1520 [ 25.163507][ T312] ? __cfi__copy_to_iter+0x10/0x10 [ 25.163526][ T312] ? pin_user_pages_remote+0x177/0x230 [ 25.163548][ T312] ? __cfi_pin_user_pages_remote+0x10/0x10 [ 25.163570][ T312] copy_page_to_iter+0x211/0x2f0 [ 25.163590][ T312] process_vm_rw+0x7b4/0xc70 [ 25.163610][ T312] ? __ia32_sys_process_vm_writev+0x110/0x110 [ 25.163631][ T312] ? vfs_write+0xbd2/0xfd0 [ 25.163660][ T312] ? __se_sys_futex+0x13c/0x320 [ 25.163682][ T312] ? __kasan_check_write+0x18/0x20 [ 25.163708][ T312] __x64_sys_process_vm_readv+0xeb/0x100 [ 25.163728][ T312] x64_sys_call+0x2df4/0x2ee0 [ 25.163747][ T312] do_syscall_64+0x57/0xf0 [ 25.163766][ T312] ? clear_bhb_loop+0x50/0xa0 [ 25.163791][ T312] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.163818][ T312] RIP: 0033:0x7f44de59fb19 [ 25.163839][ T312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.163855][ T312] RSP: 002b:00007f44df398028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 25.163881][ T312] RAX: ffffffffffffffda RBX: 00007f44de825fa0 RCX: 00007f44de59fb19 [ 25.163900][ T312] RDX: 0000000000000002 RSI: 0000200000000680 RDI: 0000000000000002 [ 25.163913][ T312] RBP: 00007f44de637b70 R08: 0000000000000286 R09: 0000000000000000 [ 25.163925][ T312] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000000 [ 25.163937][ T312] R13: 00007f44de826038 R14: 00007f44de825fa0 R15: 00007ffdc32630c8 [ 25.163953][ T312] [ 25.395067][ T323] ------------[ cut here ]------------ [ 25.400696][ T323] WARNING: CPU: 1 PID: 323 at mm/page_alloc.c:5286 __alloc_pages_noprof+0x109/0x7e0 [ 25.410223][ T323] Modules linked in: [ 25.414132][ T323] CPU: 1 UID: 0 PID: 323 Comm: syz.0.5 Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 25.425357][ T323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 25.435445][ T323] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 25.441478][ T323] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d fb fd 89 06 00 0f 85 c2 00 00 00 c6 05 ee fd 89 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 25.461154][ T323] RSP: 0018:ffffc9000c80f640 EFLAGS: 00010246 [ 25.467219][ T323] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 0000000000000000 [ 25.475374][ T323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000c80f6f8 [ 25.483493][ T323] RBP: ffffc9000c80f780 R08: ffffc9000c80f6f7 R09: 0000000000000000 [ 25.491529][ T323] R10: ffffc9000c80f6e0 R11: fffff52001901edf R12: ffffc9000c80f680 [ 25.499537][ T323] R13: dffffc0000000000 R14: 1ffff92001901ecc R15: 0000000000000000 [ 25.507529][ T323] FS: 00007f44df3986c0(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 25.516505][ T323] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.523106][ T323] CR2: 0000200000019000 CR3: 000000013140a000 CR4: 00000000003526b0 [ 25.528763][ T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 25.531119][ T323] Call Trace: [ 25.541890][ T323] [ 25.544817][ T323] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 25.550568][ T323] ? __kasan_slab_alloc+0x73/0x90 [ 25.555595][ T323] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 25.561490][ T323] ? hashtab_init+0xd6/0x1f0 [ 25.566092][ T323] ___kmalloc_large_node+0x81/0x220 [ 25.571334][ T323] ? hashtab_init+0xd6/0x1f0 [ 25.575924][ T323] __kmalloc_large_node_noprof+0x1e/0xd0 [ 25.582295][ T323] ? hashtab_init+0xd6/0x1f0 [ 25.586908][ T323] __kmalloc_noprof+0x326/0x510 [ 25.591795][ T323] ? __cfi_ebitmap_read+0x10/0x10 [ 25.596830][ T323] hashtab_init+0xd6/0x1f0 [ 25.601324][ T323] ? policydb_read+0x865/0x2860 [ 25.606182][ T323] symtab_init+0x44/0x70 [ 25.610477][ T323] policydb_read+0x8e1/0x2860 [ 25.615158][ T323] ? __kasan_kmalloc+0x96/0xb0 [ 25.619985][ T323] ? __cfi_policydb_read+0x10/0x10 [ 25.625097][ T323] ? security_load_policy+0x130/0x12d0 [ 25.630593][ T323] security_load_policy+0x16a/0x12d0 [ 25.635882][ T323] ? irqentry_exit+0x4a/0x60 [ 25.640761][ T323] ? __kasan_check_write+0x18/0x20 [ 25.645958][ T323] ? mutex_lock+0x97/0x1d0 [ 25.650407][ T323] ? __cfi_security_load_policy+0x10/0x10 [ 25.656133][ T323] ? rep_movs_alternative+0x4a/0xa0 [ 25.661404][ T323] sel_write_load+0x258/0x600 [ 25.666090][ T323] ? __cfi_sel_write_load+0x10/0x10 [ 25.671328][ T323] ? bpf_lsm_file_permission+0xd/0x20 [ 25.676713][ T323] ? __cfi_sel_write_load+0x10/0x10 [ 25.681955][ T323] vfs_write+0x3c1/0xfd0 [ 25.686257][ T323] ? __cfi_vfs_write+0x10/0x10 [ 25.690159][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 25.691086][ T323] ? __kasan_check_write+0x18/0x20 [ 25.699437][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 25.703832][ T323] ? mutex_lock+0x97/0x1d0 [ 25.703859][ T323] ? __cfi_mutex_lock+0x10/0x10 [ 25.712734][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 240, changing to 4 [ 25.716103][ T323] ksys_write+0x145/0x260 [ 25.716127][ T323] ? xfd_validate_state+0x68/0x140 [ 25.722872][ T10] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 25.732405][ T323] ? __cfi_ksys_write+0x10/0x10 [ 25.732438][ T323] ? __kasan_check_write+0x18/0x20 [ 25.732461][ T323] ? fpregs_restore_userregs+0x11c/0x260 [ 25.732487][ T323] __x64_sys_write+0x7f/0x90 [ 25.732505][ T323] x64_sys_call+0x271c/0x2ee0 [ 25.737332][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.741987][ T323] do_syscall_64+0x57/0xf0 [ 25.751491][ T10] usb 2-1: Product: syz [ 25.755931][ T323] ? clear_bhb_loop+0x50/0xa0 [ 25.755964][ T323] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.762072][ T10] usb 2-1: Manufacturer: syz [ 25.766706][ T323] RIP: 0033:0x7f44de59fb19 [ 25.766727][ T323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.771600][ T10] usb 2-1: SerialNumber: syz [ 25.776022][ T323] RSP: 002b:00007f44df398028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 25.776046][ T323] RAX: ffffffffffffffda RBX: 00007f44de825fa0 RCX: 00007f44de59fb19 [ 25.776059][ T323] RDX: 00000000000190ec RSI: 0000200000000000 RDI: 0000000000000003 [ 25.860885][ T323] RBP: 00007f44de637b70 R08: 0000000000000000 R09: 0000000000000000 [ 25.868885][ T323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 25.876868][ T323] R13: 00007f44de826038 R14: 00007f44de825fa0 R15: 00007ffdc32630c8 [ 25.884962][ T323] [ 25.887986][ T323] ---[ end trace 0000000000000000 ]--- [ 25.893587][ T323] SELinux: failed to load policy [ 25.895997][ T66] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.004337][ T10] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 26.014300][ T10] usb 2-1: failed to enable PITCH for EP 0x1 [ 26.020815][ T10] usb 2-1: unit 4 not found! [ 26.025545][ T10] usb 2-1: unit 0 not found! [ 26.043376][ T10] usb 2-1: USB disconnect, device number 2 [ 26.049335][ T66] usb 4-1: no configurations [ 26.055863][ T66] usb 4-1: can't read configurations, error -22 [ 26.066833][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.208733][ T66] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.359231][ T66] usb 4-1: no configurations [ 26.363868][ T66] usb 4-1: can't read configurations, error -22 [ 26.370257][ T66] usb usb4-port1: attempt power cycle [ 26.708759][ T66] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 26.729458][ T66] usb 4-1: no configurations [ 26.734079][ T66] usb 4-1: can't read configurations, error -22 [ 26.868728][ T66] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 26.889413][ T66] usb 4-1: no configurations [ 26.894062][ T66] usb 4-1: can't read configurations, error -22 [ 26.900509][ T66] usb usb4-port1: unable to enumerate USB device