last executing test programs: 19.607876048s ago: executing program 3 (id=503): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x1, 0x0, 0x0, 0x400000) fcntl$setpipe(r4, 0x407, 0x2) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000480), &(0x7f00000004c0)=0x4) 18.018967231s ago: executing program 3 (id=505): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000500)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @remote}}}], 0x20}}], 0x1, 0x240080a0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4a818a79}}], 0x18}}], 0x2, 0x12) (fail_nth: 4) 14.01514234s ago: executing program 3 (id=528): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='+192.0.2.1', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='10', 0x2) 13.640256337s ago: executing program 3 (id=533): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x7, @empty, 0x318}}, 0x80, 0x0}}], 0x2, 0x0) 13.356762225s ago: executing program 3 (id=534): r0 = fsopen(&(0x7f0000000280)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r4, 0x0, 0xcf, 0x0, &(0x7f0000000240)) 13.100864158s ago: executing program 3 (id=537): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='tcp 2049', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000f00)='127.0.0.1:/\x00', &(0x7f0000000e00)='./mnt\x00', &(0x7f0000001000), 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,noresvport']) 2.841413558s ago: executing program 2 (id=644): ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000040)={0x18, 0x0, 0xfffffffffffffedc, 0x4000, 0x0}) 2.704976794s ago: executing program 2 (id=646): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2.64330237s ago: executing program 2 (id=649): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100003801000000000000000000000000000000000000000000000000000000000000746573745f6d") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a0010000380100000100"/42) 2.499717613s ago: executing program 2 (id=652): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) keyctl$session_to_parent(0x12) 2.451387914s ago: executing program 1 (id=654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x6044040) syz_emit_ethernet(0x36, &(0x7f00000004c0)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, '\b\x00', 0x0, 0x3c, 0x0, @remote, @local}}}}, 0x0) 2.3202674s ago: executing program 1 (id=655): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x70bd26, 0x1, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x48074}, 0x0) 2.26572857s ago: executing program 2 (id=657): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe4", 0xc) write(r1, &(0x7f0000000180)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x8082, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.160973869s ago: executing program 1 (id=658): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000000c0)=0x9, 0x4) 2.11092837s ago: executing program 1 (id=660): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x800) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) setns(0xc9, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000002}) r1 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x400261f3, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x3000) socket$rds(0x15, 0x5, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, 0x0, 0x44000) 1.876206027s ago: executing program 1 (id=665): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200"], 0x50) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r0, r3) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000340)={r2, 0x5}, 0x8) 1.872731793s ago: executing program 0 (id=666): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='+bond_slave_0', 0xd) 1.664936596s ago: executing program 1 (id=668): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x5ada985dea50982f) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) 1.664811403s ago: executing program 0 (id=669): r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000400)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x13}], 0x1) 1.640297692s ago: executing program 2 (id=671): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r0, &(0x7f00000007c0)='na', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)="b84fc7", 0x3) 1.528884819s ago: executing program 0 (id=672): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x200}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0xff, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 1.467689938s ago: executing program 0 (id=674): ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2, 0xa4) write(r0, &(0x7f0000000000)='3', 0x4e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.088927787s ago: executing program 0 (id=676): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x800) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) setns(0xc9, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000002}) r1 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x400261f3, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x3000) socket$rds(0x15, 0x5, 0x0) 933.04451ms ago: executing program 0 (id=679): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000020feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffdb03000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a3"], 0x0}, 0x94) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bc"]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x8000, 0x0) 724.837412ms ago: executing program 4 (id=681): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r5 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x40, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001100)={@broadcast, @dev, @void, {@ipv4={0x806, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x600, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local}}}}}}, 0x0) 650.155866ms ago: executing program 4 (id=682): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 568.822491ms ago: executing program 4 (id=683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf4}}, 0x0) 445.540313ms ago: executing program 4 (id=684): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 111.394331ms ago: executing program 4 (id=685): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x200}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0xff, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 0s ago: executing program 4 (id=686): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20101, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0xa6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x5462, 0x204000) kernel console output (not intermixed with test programs): redrat3 3-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 183.856739][ T5820] usb 2-1: config 0 descriptor?? [ 184.148146][ T5798] redrat3 3-1:1.0: probe with driver redrat3 failed with error -5 [ 184.327130][ T5798] usb 3-1: USB disconnect, device number 11 [ 184.491751][ T5601] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 184.905098][ T7181] FAULT_INJECTION: forcing a failure. [ 184.905098][ T7181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.905688][ T7181] CPU: 0 UID: 0 PID: 7181 Comm: syz.0.371 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.905715][ T7181] Tainted: [L]=SOFTLOCKUP [ 184.905722][ T7181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 184.905733][ T7181] Call Trace: [ 184.905739][ T7181] [ 184.905747][ T7181] dump_stack_lvl+0x100/0x190 [ 184.905780][ T7181] should_fail_ex.cold+0x5/0xa [ 184.905807][ T7181] _copy_from_user+0x2e/0xd0 [ 184.905828][ T7181] __sys_bpf+0x2f5/0x4a30 [ 184.905845][ T7181] ? find_held_lock+0x2b/0x80 [ 184.905871][ T7181] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 184.905898][ T7181] ? __pfx___sys_bpf+0x10/0x10 [ 184.905916][ T7181] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 184.905941][ T7181] ? rcu_is_watching+0x13/0xc0 [ 184.905965][ T7181] ? trace_sched_exit_tp+0x120/0x160 [ 184.905989][ T7181] ? __schedule+0x126b/0x6920 [ 184.906025][ T7181] ? __pfx___schedule+0x10/0x10 [ 184.906049][ T7181] ? preempt_schedule_irq+0x79/0x90 [ 184.906093][ T7181] ? __x64_sys_bpf+0xce/0x140 [ 184.906111][ T7181] __x64_sys_bpf+0xce/0x140 [ 184.906131][ T7181] ? do_syscall_64+0xae/0x790 [ 184.906157][ T7181] do_syscall_64+0x123/0x790 [ 184.906183][ T7181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.906203][ T7181] RIP: 0033:0x7f6ab3d9e159 [ 184.906219][ T7181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.906236][ T7181] RSP: 002b:00007f6ab4b94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.906255][ T7181] RAX: ffffffffffffffda RBX: 00007f6ab4026090 RCX: 00007f6ab3d9e159 [ 184.906267][ T7181] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 184.906278][ T7181] RBP: 00007f6ab4b94090 R08: 0000000000000000 R09: 0000000000000000 [ 184.906290][ T7181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.906301][ T7181] R13: 00007f6ab4026128 R14: 00007f6ab4026090 R15: 00007ffe2ba71e18 [ 184.906326][ T7181] [ 185.188600][ T5820] usbhid 2-1:0.0: can't add hid device: -71 [ 185.188678][ T5820] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 185.221919][ T5820] usb 2-1: USB disconnect, device number 9 [ 185.381656][ T5701] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 185.482511][ T5693] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 185.542072][ T5701] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 185.542934][ T5701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.542971][ T5701] usb 5-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.542995][ T5701] usb 5-1: config 0 interface 0 has no altsetting 0 [ 185.546212][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 185.546234][ T5701] usb 5-1: Product: syz [ 185.546246][ T5701] usb 5-1: Manufacturer: syz [ 185.546254][ T5701] usb 5-1: SerialNumber: syz [ 185.549075][ T5701] usb 5-1: config 0 descriptor?? [ 185.616052][ T5601] Bluetooth: hci4: command 0x0406 tx timeout [ 185.616078][ T5601] Bluetooth: hci3: command 0x0406 tx timeout [ 185.616118][ T5601] Bluetooth: hci2: command 0x0406 tx timeout [ 185.631936][ T5693] usb 1-1: Using ep0 maxpacket: 16 [ 185.633139][ T5693] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 185.638038][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.638057][ T5693] usb 1-1: Product: syz [ 185.638069][ T5693] usb 1-1: Manufacturer: syz [ 185.638082][ T5693] usb 1-1: SerialNumber: syz [ 185.681911][ T5693] usb 1-1: config 0 descriptor?? [ 185.687882][ T5693] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 185.716734][ T5701] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 185.736305][ T5820] usb 4-1: USB disconnect, device number 14 [ 185.759829][ T6179] udevd[6179]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.822643][ T5701] usb 5-1: USB disconnect, device number 13 [ 185.831648][ T5790] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 185.968992][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'. [ 185.982449][ T5790] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 185.983683][ T5790] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 185.983707][ T5790] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 185.985569][ T5790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.985588][ T5790] usb 3-1: Product: syz [ 185.985602][ T5790] usb 3-1: Manufacturer: syz [ 185.985615][ T5790] usb 3-1: SerialNumber: syz [ 186.092900][ T5693] usb 1-1: clie_3_5_startup: get interface number failed: -71 [ 186.093031][ T5693] visor 1-1:0.0: probe with driver visor failed with error -71 [ 186.099669][ T5693] usb 1-1: USB disconnect, device number 17 [ 186.631078][ T31] audit: type=1400 audit(1789436683.356:889): avc: denied { bind } for pid=7204 comm="iou-wrk-7205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.632372][ T31] audit: type=1400 audit(1789436683.366:890): avc: denied { shutdown } for pid=7204 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 186.931773][ T5798] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 186.962440][ T5790] usb 3-1: failed to send ARPC request 1: -110 [ 186.972099][ T5790] usb 3-1: failed to execute ARPC: -110 [ 186.972115][ T5790] usb 3-1: failed to set connected state for cport 0: -110 [ 186.972131][ T5790] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 186.997696][ T5790] usb 3-1: failed to send ARPC request 3: -32 [ 186.997785][ T5790] usb 3-1: failed to execute ARPC: -32 [ 186.997798][ T5790] usb 3-1: failed to clear cport 0: -32 [ 186.997812][ T5790] greybus greybus1: 0/0:0: failed to clear host cport: -32 [ 187.007964][ T5790] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 187.332143][ T5798] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 187.334072][ T5798] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 187.334087][ T5798] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 187.336618][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.336639][ T5798] usb 1-1: Product: syz [ 187.336653][ T5798] usb 1-1: Manufacturer: syz [ 187.336668][ T5798] usb 1-1: SerialNumber: syz [ 187.626617][ T7222] kvm: pic: non byte write [ 188.031280][ T5700] usb 3-1: USB disconnect, device number 12 [ 188.094405][ T5820] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 188.242222][ T5820] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 188.262171][ T5820] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.264082][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.264126][ T5820] usb 5-1: Product: syz [ 188.264140][ T5820] usb 5-1: Manufacturer: syz [ 188.264155][ T5820] usb 5-1: SerialNumber: syz [ 188.266634][ T5820] usb 5-1: config 0 descriptor?? [ 188.283870][ T5798] usb 1-1: failed to send ARPC request 1: -110 [ 188.283972][ T5798] usb 1-1: failed to execute ARPC: -110 [ 188.283988][ T5798] usb 1-1: failed to set connected state for cport 0: -110 [ 188.284006][ T5798] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 188.333750][ T5798] usb 1-1: failed to send ARPC request 3: -32 [ 188.333859][ T5798] usb 1-1: failed to execute ARPC: -32 [ 188.333874][ T5798] usb 1-1: failed to clear cport 0: -32 [ 188.333890][ T5798] greybus greybus1: 0/0:0: failed to clear host cport: -32 [ 188.367614][ T5820] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 188.367653][ T5820] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 188.370204][ T5798] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 188.376195][ T5693] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 188.552073][ T5693] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 188.552868][ T5693] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.552889][ T5693] usb 2-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 188.552905][ T5693] usb 2-1: config 0 interface 0 has no altsetting 0 [ 188.554367][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 188.554380][ T5693] usb 2-1: Product: syz [ 188.554388][ T5693] usb 2-1: Manufacturer: syz [ 188.554396][ T5693] usb 2-1: SerialNumber: syz [ 188.558426][ T5693] usb 2-1: config 0 descriptor?? [ 188.666958][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.667003][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.693045][ T5693] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 188.756551][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.838201][ T5693] usb 2-1: USB disconnect, device number 10 [ 188.944444][ T31] audit: type=1400 audit(1789436685.676:891): avc: denied { read } for pid=5262 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 188.972604][ T31] audit: type=1400 audit(1789436685.686:892): avc: denied { ioctl } for pid=7239 comm="syz.2.396" path="socket:[15025]" dev="sockfs" ino=15025 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 188.972649][ T31] audit: type=1400 audit(1789436685.686:893): avc: denied { bind } for pid=7239 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 188.972683][ T31] audit: type=1400 audit(1789436685.686:894): avc: denied { listen } for pid=7239 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 188.998063][ T31] audit: type=1400 audit(1789436685.706:895): avc: denied { cmd } for pid=7239 comm="syz.2.396" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 189.988166][ T5820] usb 1-1: USB disconnect, device number 18 [ 190.065415][ T5615] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 190.169993][ T31] audit: type=1400 audit(1789436686.896:896): avc: denied { write } for pid=7245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.270935][ T7266] No source specified [ 190.299097][ T31] audit: type=1400 audit(1789436687.026:897): avc: denied { write } for pid=7267 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.831960][ T5693] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 190.984038][ T5693] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 190.987272][ T5693] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.997755][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.997775][ T5693] usb 4-1: Product: syz [ 190.997788][ T5693] usb 4-1: Manufacturer: syz [ 190.997800][ T5693] usb 4-1: SerialNumber: syz [ 191.121494][ T5701] usb 5-1: USB disconnect, device number 14 [ 191.235858][ T5693] usb 4-1: Limiting number of CPorts to U8_MAX [ 191.245053][ T5693] usb 4-1: Not enough endpoints found in device, aborting! [ 191.782267][ T31] audit: type=1400 audit(1789436688.456:898): avc: denied { mount } for pid=7288 comm="syz.1.407" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 191.869832][ T7289] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12 [ 192.042145][ T5701] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 192.197084][ T5701] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 192.206092][ T5701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.206125][ T5701] usb 5-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 192.206147][ T5701] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.215053][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 192.215081][ T5701] usb 5-1: Product: syz [ 192.215143][ T5701] usb 5-1: Manufacturer: syz [ 192.215208][ T5701] usb 5-1: SerialNumber: syz [ 192.238665][ T5701] usb 5-1: config 0 descriptor?? [ 192.875720][ T5790] usb 4-1: USB disconnect, device number 15 [ 192.917972][ T5701] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 192.935158][ T5701] usb 5-1: USB disconnect, device number 15 [ 192.967686][ T31] audit: type=1400 audit(1789436689.696:899): avc: denied { write } for pid=7275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.968225][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.550345][ T31] audit: type=1400 audit(1789436690.276:900): avc: denied { name_bind } for pid=7305 comm="syz.2.411" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 194.945830][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 194.945848][ T31] audit: type=1400 audit(1789436691.676:902): avc: denied { write } for pid=7328 comm="syz.4.416" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 195.020988][ T31] audit: type=1400 audit(1789436691.746:903): avc: denied { write } for pid=7320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.050543][ T7330] netlink: 148 bytes leftover after parsing attributes in process `syz.2.414'. [ 195.139240][ T31] audit: type=1400 audit(1789436691.866:904): avc: denied { write } for pid=7346 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.168496][ T7347] Illegal XDP return value 98 on prog (id 76) dev syz_tun, expect packet loss! [ 195.237447][ T5820] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 195.253166][ T31] audit: type=1400 audit(1789436691.986:905): avc: denied { getopt } for pid=7349 comm="syz.0.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.350537][ T7355] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12 [ 195.361961][ T5820] usb 2-1: device descriptor read/64, error -71 [ 195.423295][ T7357] FAULT_INJECTION: forcing a failure. [ 195.423295][ T7357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.424011][ T7357] CPU: 0 UID: 0 PID: 7357 Comm: syz.4.420 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.424038][ T7357] Tainted: [L]=SOFTLOCKUP [ 195.424045][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 195.424055][ T7357] Call Trace: [ 195.424062][ T7357] [ 195.424069][ T7357] dump_stack_lvl+0x100/0x190 [ 195.424100][ T7357] should_fail_ex.cold+0x5/0xa [ 195.424125][ T7357] _copy_from_user+0x2e/0xd0 [ 195.424146][ T7357] kstrtouint_from_user+0xd6/0x1d0 [ 195.424171][ T7357] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 195.424201][ T7357] ? lock_acquire+0x1d1/0x380 [ 195.424226][ T7357] proc_fail_nth_write+0x83/0x220 [ 195.424249][ T7357] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 195.424280][ T7357] vfs_write+0x2aa/0x1050 [ 195.424300][ T7357] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 195.424322][ T7357] ? lock_acquire+0x1d1/0x380 [ 195.424340][ T7357] ? __fget_files+0x34/0x3d0 [ 195.424362][ T7357] ? __pfx_vfs_write+0x10/0x10 [ 195.424378][ T7357] ? find_held_lock+0x2b/0x80 [ 195.424404][ T7357] ? __fget_files+0x215/0x3d0 [ 195.424429][ T7357] ? __fget_files+0x21f/0x3d0 [ 195.424458][ T7357] ksys_write+0x12a/0x250 [ 195.424477][ T7357] ? __pfx_ksys_write+0x10/0x10 [ 195.424503][ T7357] do_syscall_64+0x123/0x790 [ 195.424530][ T7357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.424549][ T7357] RIP: 0033:0x7fde4a75e98e [ 195.424564][ T7357] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 195.424581][ T7357] RSP: 002b:00007fde4b734fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.424599][ T7357] RAX: ffffffffffffffda RBX: 00007fde4b7356c0 RCX: 00007fde4a75e98e [ 195.424611][ T7357] RDX: 0000000000000001 RSI: 00007fde4b7350a0 RDI: 0000000000000004 [ 195.424622][ T7357] RBP: 00007fde4b735090 R08: 0000000000000000 R09: 0000000000000000 [ 195.424632][ T7357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.424643][ T7357] R13: 00007fde4aa26038 R14: 00007fde4aa25fa0 R15: 00007ffe8db15178 [ 195.424668][ T7357] [ 195.551183][ T7360] FAULT_INJECTION: forcing a failure. [ 195.551183][ T7360] name failslab, interval 1, probability 0, space 0, times 0 [ 195.551208][ T7360] CPU: 1 UID: 0 PID: 7360 Comm: syz.2.422 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.551230][ T7360] Tainted: [L]=SOFTLOCKUP [ 195.551241][ T7360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 195.551250][ T7360] Call Trace: [ 195.551256][ T7360] [ 195.551262][ T7360] dump_stack_lvl+0x100/0x190 [ 195.551289][ T7360] should_fail_ex.cold+0x5/0xa [ 195.551312][ T7360] should_failslab+0xc2/0x120 [ 195.551332][ T7360] __kmalloc_noprof+0xfc/0x840 [ 195.551349][ T7360] ? io_cache_alloc_new+0x45/0xe0 [ 195.551378][ T7360] io_cache_alloc_new+0x45/0xe0 [ 195.551400][ T7360] __io_prep_rw+0x21d/0xfb0 [ 195.551417][ T7360] ? __pfx___io_prep_rw+0x10/0x10 [ 195.551430][ T7360] ? lock_acquire+0x1d1/0x380 [ 195.551447][ T7360] ? rcu_lock_acquire.constprop.0+0x17/0x30 [ 195.551475][ T7360] ? find_held_lock+0x2b/0x80 [ 195.551499][ T7360] io_prep_rw+0x76/0x2c0 [ 195.551514][ T7360] ? __pfx_io_prep_rw+0x10/0x10 [ 195.551529][ T7360] ? __io_alloc_req_refill+0x2e1/0x330 [ 195.551549][ T7360] io_prep_readv+0x78/0x2e0 [ 195.551565][ T7360] ? __pfx_io_prep_readv+0x10/0x10 [ 195.551588][ T7360] io_submit_sqes+0xa03/0x2480 [ 195.551617][ T7360] __do_sys_io_uring_enter+0xa88/0x1b10 [ 195.551638][ T7360] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 195.551662][ T7360] ? __fget_files+0x21f/0x3d0 [ 195.551680][ T7360] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 195.551702][ T7360] ? fput+0x7c/0x100 [ 195.551733][ T7360] ? ksys_write+0x1ac/0x250 [ 195.551748][ T7360] ? __pfx_ksys_write+0x10/0x10 [ 195.551771][ T7360] do_syscall_64+0x123/0x790 [ 195.551795][ T7360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.551811][ T7360] RIP: 0033:0x7f0b9779e159 [ 195.551825][ T7360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.551839][ T7360] RSP: 002b:00007f0b959f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 195.551856][ T7360] RAX: ffffffffffffffda RBX: 00007f0b97a25fa0 RCX: 00007f0b9779e159 [ 195.551866][ T7360] RDX: 00000000fffffffd RSI: 0000000000002000 RDI: 0000000000000004 [ 195.551876][ T7360] RBP: 00007f0b959f6090 R08: 0000000000000000 R09: 0000000000000000 [ 195.551885][ T7360] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 195.551895][ T7360] R13: 00007f0b97a26038 R14: 00007f0b97a25fa0 R15: 00007ffc0e578588 [ 195.551916][ T7360] [ 195.583212][ T31] audit: type=1400 audit(1789436692.316:906): avc: denied { setopt } for pid=7351 comm="syz.3.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 195.684073][ T5820] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 196.409415][ T5820] usb 2-1: device descriptor read/64, error -71 [ 196.521861][ T5820] usb usb2-port1: attempt power cycle [ 197.834958][ T5820] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 198.090320][ T5820] usb 2-1: device descriptor read/8, error -71 [ 198.171604][ T7385] FAULT_INJECTION: forcing a failure. [ 198.171604][ T7385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.171634][ T7385] CPU: 1 UID: 0 PID: 7385 Comm: syz.1.430 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.171657][ T7385] Tainted: [L]=SOFTLOCKUP [ 198.171664][ T7385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 198.171684][ T7385] Call Trace: [ 198.171690][ T7385] [ 198.171697][ T7385] dump_stack_lvl+0x100/0x190 [ 198.171728][ T7385] should_fail_ex.cold+0x5/0xa [ 198.171753][ T7385] _copy_to_user+0x32/0xd0 [ 198.171773][ T7385] msr_read+0x144/0x240 [ 198.171800][ T7385] ? __pfx_msr_read+0x10/0x10 [ 198.171824][ T7385] ? bpf_lsm_file_permission+0x9/0x10 [ 198.171845][ T7385] ? security_file_permission+0x76/0x210 [ 198.171867][ T7385] ? rw_verify_area+0xce/0x6d0 [ 198.171892][ T7385] ? __pfx_msr_read+0x10/0x10 [ 198.171917][ T7385] vfs_read+0x1e4/0xb40 [ 198.171935][ T7385] ? lock_acquire+0x1d1/0x380 [ 198.171953][ T7385] ? __fget_files+0x34/0x3d0 [ 198.171973][ T7385] ? __pfx_vfs_read+0x10/0x10 [ 198.171988][ T7385] ? find_held_lock+0x2b/0x80 [ 198.172011][ T7385] ? __fget_files+0x215/0x3d0 [ 198.172031][ T7385] ? __fget_files+0x215/0x3d0 [ 198.172056][ T7385] ? __fget_files+0x21f/0x3d0 [ 198.172084][ T7385] ksys_read+0x12a/0x250 [ 198.172101][ T7385] ? __pfx_ksys_read+0x10/0x10 [ 198.172125][ T7385] do_syscall_64+0x123/0x790 [ 198.172152][ T7385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.172169][ T7385] RIP: 0033:0x7f1421f9e159 [ 198.172184][ T7385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.172200][ T7385] RSP: 002b:00007f1422ee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 198.172218][ T7385] RAX: ffffffffffffffda RBX: 00007f1422225fa0 RCX: 00007f1421f9e159 [ 198.172230][ T7385] RDX: 0000000000019000 RSI: 0000200000032680 RDI: 0000000000000007 [ 198.172240][ T7385] RBP: 00007f142203503b R08: 0000000000000000 R09: 0000000000000000 [ 198.172251][ T7385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.172261][ T7385] R13: 00007f1422226038 R14: 00007f1422225fa0 R15: 00007ffea1959308 [ 198.172285][ T7385] [ 198.450212][ T7394] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12 [ 198.592361][ T7400] FAULT_INJECTION: forcing a failure. [ 198.592361][ T7400] name failslab, interval 1, probability 0, space 0, times 0 [ 198.592389][ T7400] CPU: 0 UID: 0 PID: 7400 Comm: syz.4.434 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.592413][ T7400] Tainted: [L]=SOFTLOCKUP [ 198.592420][ T7400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 198.592430][ T7400] Call Trace: [ 198.592437][ T7400] [ 198.592444][ T7400] dump_stack_lvl+0x100/0x190 [ 198.592475][ T7400] should_fail_ex.cold+0x5/0xa [ 198.592499][ T7400] should_failslab+0xc2/0x120 [ 198.592523][ T7400] kmem_cache_alloc_noprof+0x92/0x6a0 [ 198.592544][ T7400] ? __inet_hash_connect+0x6da/0x2000 [ 198.592569][ T7400] __inet_hash_connect+0x6da/0x2000 [ 198.592598][ T7400] ? __pfx___inet_check_established+0x10/0x10 [ 198.592620][ T7400] ? __pfx___inet_hash_connect+0x10/0x10 [ 198.592646][ T7400] ? inet_init_ehash_secret+0xd/0x60 [ 198.592673][ T7400] ? inet_hash_connect+0x9f/0x340 [ 198.592696][ T7400] tcp_v4_connect+0xeb3/0x1b40 [ 198.592732][ T7400] ? __pfx_tcp_v4_connect+0x10/0x10 [ 198.592760][ T7400] ? avc_has_perm_noaudit+0x145/0x3b0 [ 198.592794][ T7400] tcp_v6_connect+0x779/0x2660 [ 198.592820][ T7400] ? __pfx_tcp_v6_connect+0x10/0x10 [ 198.592845][ T7400] ? __lock_acquire+0x5c0/0x1f40 [ 198.592871][ T7400] __inet_stream_connect+0x208/0xf90 [ 198.592900][ T7400] ? lock_acquire+0x1d1/0x380 [ 198.592920][ T7400] ? __pfx___inet_stream_connect+0x10/0x10 [ 198.592945][ T7400] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 198.592971][ T7400] ? __local_bh_enable_ip+0xa5/0x120 [ 198.592995][ T7400] inet_stream_connect+0x57/0xa0 [ 198.593022][ T7400] __sys_connect_file+0x146/0x1a0 [ 198.593045][ T7400] __sys_connect+0x141/0x170 [ 198.593063][ T7400] ? __pfx___sys_connect+0x10/0x10 [ 198.593080][ T7400] ? __fget_files+0x21f/0x3d0 [ 198.593112][ T7400] ? __pfx_ksys_write+0x10/0x10 [ 198.593136][ T7400] __x64_sys_connect+0x72/0xb0 [ 198.593155][ T7400] ? lockdep_hardirqs_on+0x7d/0x110 [ 198.593179][ T7400] do_syscall_64+0x123/0x790 [ 198.593207][ T7400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.593225][ T7400] RIP: 0033:0x7fde4a79e159 [ 198.593240][ T7400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.593257][ T7400] RSP: 002b:00007fde4b735028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 198.593276][ T7400] RAX: ffffffffffffffda RBX: 00007fde4aa25fa0 RCX: 00007fde4a79e159 [ 198.593287][ T7400] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000003 [ 198.593298][ T7400] RBP: 00007fde4b735090 R08: 0000000000000000 R09: 0000000000000000 [ 198.593309][ T7400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.593320][ T7400] R13: 00007fde4aa26038 R14: 00007fde4aa25fa0 R15: 00007ffe8db15178 [ 198.593345][ T7400] [ 198.614639][ T31] audit: type=1400 audit(1789436695.346:907): avc: denied { ioctl } for pid=7397 comm="syz.1.433" path="socket:[16870]" dev="sockfs" ino=16870 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 201.545205][ T7422] binder: BINDER_SET_CONTEXT_MGR already set [ 201.545215][ T7422] binder: 7421:7422 ioctl 4018620d 200000004a80 returned -16 [ 201.893297][ T7432] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12 [ 203.020060][ T31] audit: type=1400 audit(1789436699.616:908): avc: denied { connect } for pid=7434 comm="syz.0.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.020694][ T5820] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 203.172630][ T5820] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 203.173759][ T5820] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 203.173785][ T5820] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 203.173818][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.425082][ T30] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 204.498872][ T5820] cxacru 4-1:1.0: send of cm 0x90 failed (-71) [ 204.498904][ T5820] cxacru 4-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 204.499046][ T5820] cxacru 4-1:1.0: probe with driver cxacru failed with error -22 [ 204.500681][ T7452] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7452 comm=syz.2.449 [ 204.525538][ T5820] usb 4-1: USB disconnect, device number 16 [ 204.592198][ T30] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 204.593219][ T30] usb 2-1: config 1 has an invalid descriptor of length 81, skipping remainder of the config [ 204.595268][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.595289][ T30] usb 2-1: Product: syz [ 204.595303][ T30] usb 2-1: Manufacturer: syz [ 204.595316][ T30] usb 2-1: SerialNumber: syz [ 204.648380][ T30] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 204.878914][ T31] audit: type=1400 audit(1789436701.606:909): avc: denied { mounton } for pid=7448 comm="syz.1.442" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 204.898037][ T7449] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 205.017051][ T31] audit: type=1400 audit(1789436701.746:910): avc: denied { setopt } for pid=7448 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 206.195483][ T30] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 206.195510][ T30] usb 2-1: 2:1 : unsupported format bits 0x2020000 [ 206.221610][ T7464] syzkaller0: entered promiscuous mode [ 206.221629][ T7464] syzkaller0: entered allmulticast mode [ 206.225882][ T7466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.238575][ T30] usb 2-1: USB disconnect, device number 15 [ 206.255415][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.280312][ T7464] tipc: Started in network mode [ 206.280358][ T7464] tipc: Node identity c6044d0dea0c, cluster identity 4711 [ 206.281221][ T7464] tipc: Enabled bearer , priority 0 [ 206.873319][ T7472] binder: BINDER_SET_CONTEXT_MGR already set [ 206.873347][ T7472] binder: 7468:7472 ioctl 4018620d 200000004a80 returned -16 [ 207.394854][ T5798] tipc: Node number set to 738741517 [ 208.195856][ T7484] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12 [ 209.126899][ T7490] binder: BINDER_SET_CONTEXT_MGR already set [ 209.126927][ T7490] binder: 7486:7490 ioctl 4018620d 200000004a80 returned -16 [ 210.363030][ T31] audit: type=1400 audit(1789436707.096:911): avc: denied { bind } for pid=7499 comm="syz.1.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 210.901865][ T5701] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 211.096249][ T5701] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 211.100763][ T5701] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.131270][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.131297][ T5701] usb 2-1: Product: syz [ 211.131361][ T5701] usb 2-1: Manufacturer: syz [ 211.131397][ T5701] usb 2-1: SerialNumber: syz [ 211.491092][ T5701] usb 2-1: Limiting number of CPorts to U8_MAX [ 211.543081][ T5701] usb 2-1: Not enough endpoints found in device, aborting! [ 212.326130][ T7508] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 212.695281][ T5701] usb 2-1: USB disconnect, device number 16 [ 212.794823][ T5615] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 212.969390][ T7518] ip_tables: iptables: counters copy to user failed while replacing table [ 213.046862][ T7519] 9pnet_fd: Insufficient options for proto=fd [ 213.968202][ T5700] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 214.112084][ T5700] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 214.113004][ T5700] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.113033][ T5700] usb 3-1: config 0 interface 0 has no altsetting 0 [ 214.114753][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 214.114775][ T5700] usb 3-1: Product: syz [ 214.114788][ T5700] usb 3-1: Manufacturer: syz [ 214.114803][ T5700] usb 3-1: SerialNumber: syz [ 214.119466][ T5700] usb 3-1: config 0 descriptor?? [ 214.612594][ T7538] FAULT_INJECTION: forcing a failure. [ 214.612594][ T7538] name failslab, interval 1, probability 0, space 0, times 0 [ 214.612640][ T7538] CPU: 1 UID: 0 PID: 7538 Comm: syz.4.473 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.612665][ T7538] Tainted: [L]=SOFTLOCKUP [ 214.612671][ T7538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 214.612682][ T7538] Call Trace: [ 214.612688][ T7538] [ 214.612696][ T7538] dump_stack_lvl+0x100/0x190 [ 214.612728][ T7538] should_fail_ex.cold+0x5/0xa [ 214.612755][ T7538] should_failslab+0xc2/0x120 [ 214.612778][ T7538] __kmalloc_noprof+0xfc/0x840 [ 214.612797][ T7538] ? rcu_is_watching+0x13/0xc0 [ 214.612815][ T7538] ? tomoyo_realpath_from_path+0xb6/0x690 [ 214.612838][ T7538] tomoyo_realpath_from_path+0xb6/0x690 [ 214.612859][ T7538] tomoyo_path_number_perm+0x23c/0x580 [ 214.612873][ T7538] ? tomoyo_path_number_perm+0x22e/0x580 [ 214.612888][ T7538] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 214.612901][ T7538] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 214.612926][ T7538] ? __lock_acquire+0x5c0/0x1f40 [ 214.612954][ T7538] ? __fget_files+0x34/0x3d0 [ 214.612972][ T7538] ? find_held_lock+0x2b/0x80 [ 214.612991][ T7538] ? hook_file_ioctl_common+0x140/0x440 [ 214.613014][ T7538] ? __fget_files+0x21f/0x3d0 [ 214.613034][ T7538] security_file_ioctl+0xd3/0x230 [ 214.613051][ T7538] __x64_sys_ioctl+0xb7/0x210 [ 214.613067][ T7538] do_syscall_64+0x123/0x790 [ 214.613088][ T7538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.613102][ T7538] RIP: 0033:0x7fde4a79e159 [ 214.613114][ T7538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.613127][ T7538] RSP: 002b:00007fde4b6f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.613142][ T7538] RAX: ffffffffffffffda RBX: 00007fde4aa26180 RCX: 00007fde4a79e159 [ 214.613152][ T7538] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 214.613160][ T7538] RBP: 00007fde4b6f3090 R08: 0000000000000000 R09: 0000000000000000 [ 214.613168][ T7538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.613176][ T7538] R13: 00007fde4aa26218 R14: 00007fde4aa26180 R15: 00007ffe8db15178 [ 214.613195][ T7538] [ 214.613217][ T7538] ERROR: Out of memory at tomoyo_realpath_from_path. [ 215.007438][ T5700] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 215.021386][ T5700] usb 3-1: USB disconnect, device number 13 [ 215.471665][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.466034][ T7558] FAULT_INJECTION: forcing a failure. [ 216.466034][ T7558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.466064][ T7558] CPU: 0 UID: 0 PID: 7558 Comm: syz.4.480 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.466088][ T7558] Tainted: [L]=SOFTLOCKUP [ 216.466094][ T7558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 216.466105][ T7558] Call Trace: [ 216.466111][ T7558] [ 216.466118][ T7558] dump_stack_lvl+0x100/0x190 [ 216.466149][ T7558] should_fail_ex.cold+0x5/0xa [ 216.466175][ T7558] _copy_from_user+0x2e/0xd0 [ 216.466195][ T7558] kstrtouint_from_user+0xd6/0x1d0 [ 216.466220][ T7558] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 216.466250][ T7558] ? lock_acquire+0x1d1/0x380 [ 216.466275][ T7558] proc_fail_nth_write+0x83/0x220 [ 216.466300][ T7558] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 216.466330][ T7558] vfs_write+0x2aa/0x1050 [ 216.466350][ T7558] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 216.466371][ T7558] ? lock_acquire+0x1d1/0x380 [ 216.466390][ T7558] ? __fget_files+0x34/0x3d0 [ 216.466417][ T7558] ? __pfx_vfs_write+0x10/0x10 [ 216.466434][ T7558] ? find_held_lock+0x2b/0x80 [ 216.466460][ T7558] ? __fget_files+0x215/0x3d0 [ 216.466485][ T7558] ? __fget_files+0x21f/0x3d0 [ 216.466514][ T7558] ksys_write+0x12a/0x250 [ 216.466532][ T7558] ? __pfx_ksys_write+0x10/0x10 [ 216.466561][ T7558] do_syscall_64+0x123/0x790 [ 216.466588][ T7558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.466607][ T7558] RIP: 0033:0x7fde4a75e98e [ 216.466621][ T7558] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 216.466638][ T7558] RSP: 002b:00007fde4b734fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.466656][ T7558] RAX: ffffffffffffffda RBX: 00007fde4b7356c0 RCX: 00007fde4a75e98e [ 216.466668][ T7558] RDX: 0000000000000001 RSI: 00007fde4b7350a0 RDI: 0000000000000005 [ 216.466679][ T7558] RBP: 00007fde4b735090 R08: 0000000000000000 R09: 0000000000000000 [ 216.466690][ T7558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.466701][ T7558] R13: 00007fde4aa26038 R14: 00007fde4aa25fa0 R15: 00007ffe8db15178 [ 216.466727][ T7558] [ 216.590308][ T31] audit: type=1400 audit(1789436713.316:912): avc: denied { name_bind } for pid=7560 comm="syz.4.481" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 216.768618][ T7564] pim6reg: entered allmulticast mode [ 216.768735][ T7562] team0: entered allmulticast mode [ 216.768750][ T7562] team_slave_0: entered allmulticast mode [ 216.768763][ T7562] team_slave_1: entered allmulticast mode [ 216.780349][ T7562] team0: left allmulticast mode [ 216.780364][ T7562] team_slave_0: left allmulticast mode [ 216.780377][ T7562] team_slave_1: left allmulticast mode [ 216.780455][ T7562] pim6reg: left allmulticast mode [ 216.858536][ T7564] warning: `syz.2.479' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 217.201916][ T30] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 217.445091][ T30] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 217.447383][ T30] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.447413][ T30] usb 4-1: config 0 interface 0 has no altsetting 0 [ 217.492498][ T30] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 217.492517][ T30] usb 4-1: Product: syz [ 217.492525][ T30] usb 4-1: Manufacturer: syz [ 217.492533][ T30] usb 4-1: SerialNumber: syz [ 217.500940][ T30] usb 4-1: config 0 descriptor?? [ 217.600648][ T30] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 217.642735][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.758883][ T31] audit: type=1400 audit(1789436714.486:913): avc: denied { read } for pid=7578 comm="syz.2.487" name="usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 217.760195][ T31] audit: type=1400 audit(1789436714.486:914): avc: denied { open } for pid=7578 comm="syz.2.487" path="/dev/usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 217.785786][ T31] audit: type=1400 audit(1789436714.496:915): avc: denied { ioctl } for pid=7578 comm="syz.2.487" path="/dev/usbmon9" dev="devtmpfs" ino=742 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 217.785828][ T31] audit: type=1400 audit(1789436714.496:916): avc: denied { connect } for pid=7578 comm="syz.2.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 218.217890][ T30] usb 4-1: USB disconnect, device number 17 [ 220.469549][ T7616] virtio-fs: tag not found [ 221.032352][ T31] audit: type=1400 audit(1789436717.766:917): avc: denied { write } for pid=7584 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.037376][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x8b7b instead [ 221.037399][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x6d07 instead [ 221.037414][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x3e5f instead [ 221.037428][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0xebf6 instead [ 221.037444][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x8d60 instead [ 221.037458][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x423a instead [ 221.037473][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x4f1a instead [ 221.037488][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x2a8e instead [ 221.037503][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x034d instead [ 221.037518][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xda4c instead [ 221.037532][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.037914][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x836f instead [ 221.037928][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x1538 instead [ 221.037942][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x11cd instead [ 221.037957][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0xc5c1 instead [ 221.037971][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0xe12e instead [ 221.037985][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x5a36 instead [ 221.037999][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x0557 instead [ 221.038013][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x7278 instead [ 221.038027][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x8048 instead [ 221.038042][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x9efd instead [ 221.038056][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.040996][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0xc0aa instead [ 221.041016][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0xbfa4 instead [ 221.041031][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0xfe0a instead [ 221.041046][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xda7f instead [ 221.041061][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x720f instead [ 221.041076][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x6b00 instead [ 221.041092][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xdc73 instead [ 221.041106][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0xc96e instead [ 221.041120][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x5b9e instead [ 221.041134][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0xf1ab instead [ 221.041148][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.041528][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x972f instead [ 221.041543][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0xea40 instead [ 221.045135][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x8580 instead [ 221.045150][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0xd3cf instead [ 221.045164][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x8aa9 instead [ 221.045178][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0xc100 instead [ 221.045191][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x572b instead [ 221.045204][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0xc541 instead [ 221.045217][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0xd216 instead [ 221.045230][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x7a2c instead [ 221.045243][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.045583][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x9cd2 instead [ 221.045596][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0193 instead [ 221.045607][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0xac74 instead [ 221.045619][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x6108 instead [ 221.045631][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0xcb64 instead [ 221.045642][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x2024 instead [ 221.045654][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xf649 instead [ 221.045666][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0x9b6f instead [ 221.045679][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x6857 instead [ 221.045691][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0xb060 instead [ 221.045704][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.047479][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0xab16 instead [ 221.047493][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0xfd80 instead [ 221.047505][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x75e6 instead [ 221.047517][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x4a2e instead [ 221.047529][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x6ae4 instead [ 221.047543][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x8c68 instead [ 221.047556][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x92d5 instead [ 221.047569][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x3975 instead [ 221.047582][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x0d14 instead [ 221.047595][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x397a instead [ 221.047608][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.047928][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0xaffb instead [ 221.047940][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x4d47 instead [ 221.047953][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x16f1 instead [ 221.047965][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0x3d34 instead [ 221.047977][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0xe8e1 instead [ 221.047989][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x981a instead [ 221.048001][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x7a47 instead [ 221.048013][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x8e98 instead [ 221.048024][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0xc648 instead [ 221.048036][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x98e7 instead [ 221.048048][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.048367][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x5594 instead [ 221.048380][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0ce4 instead [ 221.048391][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0xe464 instead [ 221.048403][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0xd58c instead [ 221.048415][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x67fe instead [ 221.048428][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0xca43 instead [ 221.048441][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xfce5 instead [ 221.048454][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0xf170 instead [ 221.048467][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0x3ec0 instead [ 221.048481][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0xccf9 instead [ 221.048493][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.069145][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x608d instead [ 221.069161][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x3abd instead [ 221.069174][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x5509 instead [ 221.069188][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x9332 instead [ 221.069201][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0xf376 instead [ 221.069215][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x3e80 instead [ 221.069228][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xd46b instead [ 221.069241][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0x6b62 instead [ 221.069254][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x1f1c instead [ 221.069267][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0xde93 instead [ 221.069280][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.069609][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0xe052 instead [ 221.069621][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0xa68f instead [ 221.069634][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x4d02 instead [ 221.069656][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x2c03 instead [ 221.069668][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x1903 instead [ 221.069680][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0xc0ea instead [ 221.069693][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xe09c instead [ 221.069705][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0x7198 instead [ 221.069717][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0x6b9a instead [ 221.069729][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0xd03c instead [ 221.069740][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.070046][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x46ba instead [ 221.070058][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x8134 instead [ 221.070070][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0x767a instead [ 221.070082][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xeb54 instead [ 221.070094][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0x1ea4 instead [ 221.070106][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x0d82 instead [ 221.070118][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x6133 instead [ 221.070130][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0xfd36 instead [ 221.070143][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0xe1b8 instead [ 221.070155][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x1708 instead [ 221.070167][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.070483][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x273a instead [ 221.113923][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0xb285 instead [ 221.113940][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x03f0 instead [ 221.113953][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x4312 instead [ 221.113965][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0xfc58 instead [ 221.113977][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0xc93b instead [ 221.113990][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xfe14 instead [ 221.114002][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0xa811 instead [ 221.114015][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x8bae instead [ 221.114027][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x1b41 instead [ 221.114039][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.114353][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x19ae instead [ 221.114366][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x35ce instead [ 221.114378][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xa77b instead [ 221.114390][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0xe773 instead [ 221.114402][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0x454b instead [ 221.114414][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x8466 instead [ 221.114426][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x8a63 instead [ 221.114449][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x3ec9 instead [ 221.114461][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x583a instead [ 221.114474][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0xbd97 instead [ 221.114485][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.114794][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x8d4e instead [ 221.114807][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x680a instead [ 221.114820][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x02dc instead [ 221.114832][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x95a3 instead [ 221.114844][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xde1e instead [ 221.114856][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x4f4c instead [ 221.114869][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x2da4 instead [ 221.114881][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x81b8 instead [ 221.114893][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x7a4d instead [ 221.114906][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x3e43 instead [ 221.114918][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.115233][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0xf6ee instead [ 221.115245][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x258f instead [ 221.115257][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x169e instead [ 221.115269][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0xf541 instead [ 221.115281][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x4e19 instead [ 221.115293][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x0990 instead [ 221.115306][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xab43 instead [ 221.115318][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0xbf7d instead [ 221.115330][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x63e1 instead [ 221.115342][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x1fff instead [ 221.138284][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.138613][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x66b3 instead [ 221.138627][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x8bd8 instead [ 221.138639][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x3f58 instead [ 221.138651][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0xd7d5 instead [ 221.138663][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0xedc7 instead [ 221.138676][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x7b7c instead [ 221.138688][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xf272 instead [ 221.138700][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x91fb instead [ 221.138712][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x564a instead [ 221.138725][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x6231 instead [ 221.138737][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.139044][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4a30 instead [ 221.139056][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0xf514 instead [ 221.139068][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0xb74a instead [ 221.139081][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0xca89 instead [ 221.139092][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0x44b7 instead [ 221.139104][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0x7e9d instead [ 221.139116][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x35bf instead [ 221.139129][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0x2c50 instead [ 221.139141][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0xe23a instead [ 221.139153][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0xbbc9 instead [ 221.139165][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.151628][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0xfcb3 instead [ 221.151645][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0xf026 instead [ 221.151658][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0x4328 instead [ 221.151670][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0xa881 instead [ 221.151682][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0xe5bb instead [ 221.151693][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0x1dcf instead [ 221.151706][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xaa22 instead [ 221.151718][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0x1c28 instead [ 221.151730][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0x46fb instead [ 221.151743][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0x6fe7 instead [ 221.151755][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.389813][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x16b0 instead [ 221.389834][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0xa162 instead [ 221.389848][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0x88dd instead [ 221.389856][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0xda29 instead [ 221.389865][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0x9dba instead [ 221.389873][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0xff31 instead [ 221.389881][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x5d96 instead [ 221.389889][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0x4fcc instead [ 221.389898][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0x035e instead [ 221.389906][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0xbab1 instead [ 221.389913][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.390158][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x3e9a instead [ 221.390170][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0xdfa9 instead [ 221.390184][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0xcd5d instead [ 221.390197][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0x9531 instead [ 221.390209][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0xc0d4 instead [ 221.390217][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0xfe2f instead [ 221.390226][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xbca0 instead [ 221.390234][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0x8e22 instead [ 221.390242][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0x7962 instead [ 221.390250][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0xa95b instead [ 221.390258][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.390479][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x6366 instead [ 221.390488][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0xfb7b instead [ 221.390496][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0x7010 instead [ 221.390504][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0x2fe9 instead [ 221.390512][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0x60f2 instead [ 221.390520][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0x858e instead [ 221.390528][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x2818 instead [ 221.390537][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0x502a instead [ 221.390545][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0x89c0 instead [ 221.390553][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0xa161 instead [ 221.390561][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.390788][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x6bbc instead [ 221.390796][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x9ed6 instead [ 221.390804][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0x1a99 instead [ 221.390812][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0x0ba5 instead [ 221.390820][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0x7ccf instead [ 221.390828][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0x1a32 instead [ 221.390836][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xf1b6 instead [ 221.390848][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0x7d34 instead [ 221.390857][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0x69cf instead [ 221.390865][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0xb28a instead [ 221.390872][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.402696][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0xd488 instead [ 221.402739][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x9030 instead [ 221.402774][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0xe6b5 instead [ 221.402813][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0xe096 instead [ 221.402852][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0x4c11 instead [ 221.402889][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0x82e2 instead [ 221.402937][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xfe83 instead [ 221.402983][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0xa9c6 instead [ 221.403005][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0xca36 instead [ 221.403046][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0x2c20 instead [ 221.403083][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.434906][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x8320 instead [ 221.434931][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0xd4f5 instead [ 221.434946][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0x7be0 instead [ 221.434994][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0xea24 instead [ 221.435017][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0x6aa1 instead [ 221.435058][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0x8e78 instead [ 221.435093][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x4d8b instead [ 221.435140][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0xb9a8 instead [ 221.435175][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0xc4d2 instead [ 221.435215][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0x4a03 instead [ 221.435237][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.478865][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0xc9fe instead [ 221.478892][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x5819 instead [ 221.478907][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0xb2f1 instead [ 221.478960][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0xa8ed instead [ 221.478995][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0x7f47 instead [ 221.479034][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0x7574 instead [ 221.479069][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xf1ae instead [ 221.479108][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0xbaa4 instead [ 221.479141][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0xcf04 instead [ 221.479180][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0x2a15 instead [ 221.479214][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.502094][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4c3b instead [ 221.502136][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0xe79e instead [ 221.502170][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0x3222 instead [ 221.502209][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0x68d1 instead [ 221.502243][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0x5e36 instead [ 221.502282][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0x9a8e instead [ 221.502317][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xae5f instead [ 221.502361][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0x4fea instead [ 221.512777][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0xb892 instead [ 221.512801][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0xb81e instead [ 221.512857][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.524956][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x275f instead [ 221.524990][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0xaf25 instead [ 221.525012][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0x1eaa instead [ 221.535504][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0xfb7d instead [ 221.535525][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0xd81c instead [ 221.535566][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0xba83 instead [ 221.535610][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x89b1 instead [ 221.535649][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x9b50 instead [ 221.535693][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0x68ef instead [ 221.535728][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0x7298 instead [ 221.535750][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.577760][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x96a8 instead [ 221.577807][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0b04 instead [ 221.578049][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0x7cf3 instead [ 221.578072][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0xac03 instead [ 221.578128][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0x5c51 instead [ 221.578174][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0x8825 instead [ 221.578226][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x48bb instead [ 221.578248][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0x02c1 instead [ 221.588660][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0x81bd instead [ 221.588691][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0xa372 instead [ 221.588733][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.611530][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x50b6 instead [ 221.611586][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x3b76 instead [ 221.622011][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0x0d43 instead [ 221.622035][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0xf217 instead [ 221.632493][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0x86da instead [ 221.632515][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0x6718 instead [ 221.632548][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x2bf4 instead [ 221.634058][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0xf2fb instead [ 221.634102][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0xb64c instead [ 221.634126][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0xd73d instead [ 221.634169][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.684116][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x36d8 instead [ 221.684142][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0xcb1d instead [ 221.684184][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0xb4fa instead [ 221.684207][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0xd70b instead [ 221.684249][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0x0b02 instead [ 221.684284][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0x6961 instead [ 221.684323][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x97e6 instead [ 221.684362][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0xaa2b instead [ 221.684393][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0xdfa5 instead [ 221.684435][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0xa438 instead [ 221.684474][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.738448][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x38ef instead [ 221.738476][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x2fbb instead [ 221.738515][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0x0cef instead [ 221.738556][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0x7c6c instead [ 221.738579][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0x4fa9 instead [ 221.738622][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0xbbc9 instead [ 221.738645][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xfe7f instead [ 221.738688][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0x6365 instead [ 221.738710][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0x6e57 instead [ 221.738753][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0xb119 instead [ 221.738775][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.751163][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x6541 instead [ 221.751187][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x426f instead [ 221.751228][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0xe8ab instead [ 221.751263][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0x7079 instead [ 221.751302][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0xcdcc instead [ 221.751351][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0x2041 instead [ 221.751397][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x6263 instead [ 221.751431][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0x0a13 instead [ 221.751471][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0xa778 instead [ 221.751506][ T7620] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0x5bac instead [ 221.751545][ T7620] jffs2: Further such events for this erase block will not be printed [ 221.793725][ T7620] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 221.793764][ T7620] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 222.049865][ T31] audit: type=1400 audit(1789436718.776:918): avc: denied { write } for pid=7618 comm="syz.4.495" name="core" dev="configfs" ino=3021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 223.103548][ T5701] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 223.168875][ T31] audit: type=1400 audit(1789436719.886:919): avc: denied { write } for pid=7633 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.274361][ T5701] usb 1-1: New USB device found, idVendor=84fd, idProduct=00ff, bcdDevice= 0.40 [ 223.275200][ T5701] usb 1-1: config 227 has an invalid descriptor of length 149, skipping remainder of the config [ 223.275218][ T5701] usb 1-1: config 227 has 0 interfaces, different from the descriptor's value: 3 [ 223.281299][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.281318][ T5701] usb 1-1: Product: syz [ 223.281331][ T5701] usb 1-1: Manufacturer: syz [ 223.281343][ T5701] usb 1-1: SerialNumber: syz [ 224.081604][ T5693] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 225.123264][ T31] audit: type=1400 audit(1789436721.856:920): avc: denied { create } for pid=7645 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 225.226303][ T5693] usb 5-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 225.250595][ T5693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.532988][ T5693] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 225.671223][ T7647] smpboot: CPU 1 is now offline [ 226.104422][ T5693] gspca_sn9c20x: Write register 1001 failed -71 [ 226.104435][ T5693] gspca_sn9c20x: Device initialization failed [ 226.104468][ T5693] gspca_sn9c20x 5-1:252.0: probe with driver gspca_sn9c20x failed with error -71 [ 226.151329][ T5693] usb 5-1: USB disconnect, device number 16 [ 226.165152][ T5701] usb 1-1: USB disconnect, device number 19 [ 226.299898][ T7661] FAULT_INJECTION: forcing a failure. [ 226.299898][ T7661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.299918][ T7661] CPU: 0 UID: 0 PID: 7661 Comm: syz.0.506 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.299933][ T7661] Tainted: [L]=SOFTLOCKUP [ 226.299937][ T7661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 226.299944][ T7661] Call Trace: [ 226.299948][ T7661] [ 226.299952][ T7661] dump_stack_lvl+0x100/0x190 [ 226.299972][ T7661] should_fail_ex.cold+0x5/0xa [ 226.299988][ T7661] _copy_from_iter+0x1f4/0x1690 [ 226.300001][ T7661] ? __asan_memset+0x23/0x50 [ 226.300013][ T7661] ? __pfx__copy_from_iter+0x10/0x10 [ 226.300024][ T7661] ? __pfx___alloc_skb+0x10/0x10 [ 226.300036][ T7661] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 226.300054][ T7661] ? sock_has_perm+0x25a/0x2f0 [ 226.300071][ T7661] ? __pfx_sock_has_perm+0x10/0x10 [ 226.300091][ T7661] netlink_sendmsg+0x808/0xda0 [ 226.300105][ T7661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.300118][ T7661] ? selinux_socket_sendmsg+0x198/0x2f0 [ 226.300131][ T7661] ____sys_sendmsg+0xa4d/0xbe0 [ 226.300147][ T7661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.300160][ T7661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.300179][ T7661] ? lock_acquire+0x1d1/0x380 [ 226.300190][ T7661] ? get_pid_task+0x2a/0x250 [ 226.300206][ T7661] ___sys_sendmsg+0x190/0x1e0 [ 226.300224][ T7661] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.300241][ T7661] ? get_pid_task+0x106/0x250 [ 226.300261][ T7661] ? find_held_lock+0x2b/0x80 [ 226.300290][ T7661] __sys_sendmsg+0x160/0x210 [ 226.300305][ T7661] ? __pfx___sys_sendmsg+0x10/0x10 [ 226.300325][ T7661] do_syscall_64+0x123/0x790 [ 226.300341][ T7661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.300352][ T7661] RIP: 0033:0x7f6ab3d9e159 [ 226.300362][ T7661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.300372][ T7661] RSP: 002b:00007f6ab4bb5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.300384][ T7661] RAX: ffffffffffffffda RBX: 00007f6ab4025fa0 RCX: 00007f6ab3d9e159 [ 226.300393][ T7661] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 226.300400][ T7661] RBP: 00007f6ab4bb5090 R08: 0000000000000000 R09: 0000000000000000 [ 226.300406][ T7661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.300412][ T7661] R13: 00007f6ab4026038 R14: 00007f6ab4025fa0 R15: 00007ffe2ba71e18 [ 226.300426][ T7661] [ 226.759778][ T31] audit: type=1400 audit(1789436723.486:921): avc: denied { create } for pid=7664 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 226.844396][ T31] audit: type=1400 audit(1789436723.576:922): avc: denied { write } for pid=7664 comm="syz.0.507" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 226.844738][ T31] audit: type=1400 audit(1789436723.576:923): avc: denied { read } for pid=7664 comm="syz.0.507" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 226.942081][ T31] audit: type=1400 audit(1789436723.676:924): avc: denied { write } for pid=7642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.174571][ T31] audit: type=1400 audit(1789436723.906:925): avc: denied { write } for pid=7678 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.299826][ T31] audit: type=1400 audit(1789436724.026:926): avc: denied { getopt } for pid=7680 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 227.328125][ T31] audit: type=1400 audit(1789436724.056:927): avc: denied { create } for pid=7673 comm="syz.4.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 227.359277][ T31] audit: type=1400 audit(1789436724.086:928): avc: denied { setattr } for pid=7680 comm="syz.0.512" name="TIPC" dev="sockfs" ino=18773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 227.747425][ T31] audit: type=1400 audit(1789436724.476:929): avc: denied { bind } for pid=7698 comm="syz.4.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 227.750536][ T31] audit: type=1400 audit(1789436724.476:930): avc: denied { connect } for pid=7698 comm="syz.4.515" laddr=172.20.20.170 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 227.882807][ T7705] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 227.910298][ T7697] virtio-fs: tag not found [ 228.074348][ T31] audit: type=1400 audit(1789436724.806:931): avc: denied { write } for pid=7688 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.337544][ T31] audit: type=1400 audit(1789436725.066:932): avc: denied { write } for pid=7713 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.741955][ T7726] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 228.804900][ T31] audit: type=1400 audit(1789436725.536:933): avc: denied { setopt } for pid=7727 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 228.917950][ T31] audit: type=1400 audit(1789436725.646:934): avc: denied { accept } for pid=7729 comm="syz.0.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 229.374454][ T7734] team0: Port device netdevsim1 removed [ 229.782860][ T7734] netlink: 'syz.1.524': attribute type 10 has an invalid length. [ 230.169017][ T7774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.538'. [ 230.196254][ T7776] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 230.391388][ T7781] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 230.527846][ T7785] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 230.979380][ T7794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.404598][ T7811] FAULT_INJECTION: forcing a failure. [ 231.404598][ T7811] name failslab, interval 1, probability 0, space 0, times 0 [ 231.404619][ T7811] CPU: 0 UID: 0 PID: 7811 Comm: syz.4.553 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.404635][ T7811] Tainted: [L]=SOFTLOCKUP [ 231.404639][ T7811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 231.404646][ T7811] Call Trace: [ 231.404650][ T7811] [ 231.404655][ T7811] dump_stack_lvl+0x100/0x190 [ 231.404674][ T7811] should_fail_ex.cold+0x5/0xa [ 231.404690][ T7811] should_failslab+0xc2/0x120 [ 231.404705][ T7811] __kmalloc_noprof+0xfc/0x840 [ 231.404718][ T7811] ? raw_event_queue_add+0x82/0x220 [ 231.404738][ T7811] raw_event_queue_add+0x82/0x220 [ 231.404756][ T7811] gadget_bind+0x422/0x660 [ 231.404769][ T7811] gadget_bind_driver+0x28c/0xbf0 [ 231.404780][ T7811] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 231.404797][ T7811] ? __pfx_gadget_bind_driver+0x10/0x10 [ 231.404809][ T7811] really_probe+0x241/0xa60 [ 231.404827][ T7811] __driver_probe_device+0x210/0x460 [ 231.404839][ T7811] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 231.404855][ T7811] driver_probe_device+0x4a/0x140 [ 231.404869][ T7811] __driver_attach+0x21f/0x5b0 [ 231.404883][ T7811] ? __pfx___driver_attach+0x10/0x10 [ 231.404896][ T7811] bus_for_each_dev+0x13e/0x1d0 [ 231.404913][ T7811] ? __pfx_bus_for_each_dev+0x10/0x10 [ 231.404930][ T7811] ? bus_add_driver+0x2b5/0x5b0 [ 231.404945][ T7811] bus_add_driver+0x305/0x5b0 [ 231.404958][ T7811] driver_register+0x1e2/0x360 [ 231.404971][ T7811] ? rcu_is_watching+0x13/0xc0 [ 231.404988][ T7811] usb_gadget_register_driver_owner+0x132/0x210 [ 231.405001][ T7811] raw_ioctl+0x1a85/0x2b80 [ 231.405014][ T7811] ? __pfx_raw_ioctl+0x10/0x10 [ 231.405024][ T7811] ? selinux_file_ioctl+0x13b/0x290 [ 231.405036][ T7811] ? selinux_file_ioctl+0xb6/0x290 [ 231.405048][ T7811] ? __pfx_raw_ioctl+0x10/0x10 [ 231.405058][ T7811] __x64_sys_ioctl+0x18e/0x210 [ 231.405070][ T7811] do_syscall_64+0x123/0x790 [ 231.405085][ T7811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.405097][ T7811] RIP: 0033:0x7fde4a79ddeb [ 231.405106][ T7811] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 231.405116][ T7811] RSP: 002b:00007fde4b732f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.405127][ T7811] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fde4a79ddeb [ 231.405134][ T7811] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 231.405140][ T7811] RBP: 00007fde4b733fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 231.405147][ T7811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.405153][ T7811] R13: 0000200000000180 R14: 0000000000000001 R15: 0000000000000000 [ 231.405166][ T7811] [ 231.405188][ T7811] raw-gadget.0 gadget.4: failed to queue connect event [ 231.405197][ T7811] udc dummy_udc.4: failed to start USB Raw Gadget: -12 [ 231.405208][ T7811] raw-gadget.0 gadget.4: probe with driver raw-gadget.0 failed with error -12 [ 231.406630][ T7811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.406812][ T7811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.877419][ T7813] ima: policy update completed [ 232.013308][ T7819] netlink: zone id is out of range [ 232.013317][ T7819] netlink: zone id is out of range [ 232.013322][ T7819] netlink: zone id is out of range [ 232.013326][ T7819] netlink: zone id is out of range [ 232.013329][ T7819] netlink: zone id is out of range [ 232.013333][ T7819] netlink: zone id is out of range [ 232.013336][ T7819] netlink: zone id is out of range [ 232.013339][ T7819] netlink: zone id is out of range [ 232.013343][ T7819] netlink: zone id is out of range [ 232.247987][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 232.247998][ T31] audit: type=1800 audit(1789436728.976:963): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 232.310450][ T31] audit: type=1800 audit(1789436729.036:964): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15131 res=0 errno=0 [ 232.361143][ T31] audit: type=1800 audit(1789436729.086:965): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15377 res=0 errno=0 [ 232.405864][ T31] audit: type=1800 audit(1789436729.136:966): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15377 res=0 errno=0 [ 232.485540][ T31] audit: type=1800 audit(1789436729.216:967): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 232.538716][ T31] audit: type=1800 audit(1789436729.266:968): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15377 res=0 errno=0 [ 232.608703][ T7834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.564'. [ 232.635970][ T31] audit: type=1800 audit(1789436729.366:969): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 232.677384][ T7836] bridge0: entered allmulticast mode [ 232.697523][ T7836] bridge0: left allmulticast mode [ 232.709347][ T31] audit: type=1800 audit(1789436729.436:970): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15131 res=0 errno=0 [ 232.770080][ T31] audit: type=1800 audit(1789436729.496:971): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15377 res=0 errno=0 [ 232.835552][ T31] audit: type=1400 audit(1789436729.566:972): avc: denied { read write } for pid=7839 comm="syz.2.567" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 233.148930][ T7851] null_blk: nullb1: using native zone append [ 233.201934][ T7855] nvmet: adding nsid 1 to subsystem testsubsys [ 233.349529][ T7851] null_blk: disk nullb1 created [ 233.394741][ T7855] block device autoloading is deprecated and will be removed. [ 233.945993][ T7876] FAULT_INJECTION: forcing a failure. [ 233.945993][ T7876] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 233.946015][ T7876] CPU: 0 UID: 0 PID: 7876 Comm: syz.4.580 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.946029][ T7876] Tainted: [L]=SOFTLOCKUP [ 233.946034][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 233.946040][ T7876] Call Trace: [ 233.946044][ T7876] [ 233.946048][ T7876] dump_stack_lvl+0x100/0x190 [ 233.946068][ T7876] should_fail_ex.cold+0x5/0xa [ 233.946082][ T7876] ? prepare_alloc_pages+0x16d/0x5b0 [ 233.946099][ T7876] should_fail_alloc_page+0xeb/0x140 [ 233.946117][ T7876] prepare_alloc_pages+0x1f0/0x5b0 [ 233.946134][ T7876] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 233.946161][ T7876] ? __lock_acquire+0x5c0/0x1f40 [ 233.946176][ T7876] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 233.946195][ T7876] ? lock_acquire+0x1d1/0x380 [ 233.946206][ T7876] ? unwind_next_frame+0xbd/0x2090 [ 233.946225][ T7876] ? lock_acquire+0x1d1/0x380 [ 233.946236][ T7876] ? is_bpf_text_address+0x25/0x1a0 [ 233.946252][ T7876] ? find_held_lock+0x2b/0x80 [ 233.946270][ T7876] ? __lock_acquire+0x5c0/0x1f40 [ 233.946285][ T7876] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 233.946299][ T7876] ? policy_nodemask+0xed/0x4f0 [ 233.946315][ T7876] alloc_pages_mpol+0x201/0x550 [ 233.946330][ T7876] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 233.946344][ T7876] ? lock_acquire+0x1d1/0x380 [ 233.946356][ T7876] ? is_bpf_text_address+0x25/0x1a0 [ 233.946373][ T7876] folio_alloc_mpol_noprof+0x36/0x260 [ 233.946390][ T7876] shmem_alloc_folio+0x135/0x160 [ 233.946405][ T7876] shmem_alloc_and_add_folio+0x371/0xd40 [ 233.946424][ T7876] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 233.946441][ T7876] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 233.946458][ T7876] ? __lock_acquire+0x5c0/0x1f40 [ 233.946471][ T7876] shmem_get_folio_gfp+0x75b/0x1980 [ 233.946491][ T7876] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 233.946509][ T7876] ? __lock_acquire+0x5c0/0x1f40 [ 233.946522][ T7876] shmem_write_begin+0x1a4/0x420 [ 233.946540][ T7876] ? __pfx_shmem_write_begin+0x10/0x10 [ 233.946556][ T7876] ? reacquire_held_locks+0xdd/0x1f0 [ 233.946568][ T7876] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 233.946588][ T7876] generic_perform_write+0x292/0xa40 [ 233.946602][ T7876] ? __mark_inode_dirty+0x557/0x16e0 [ 233.946616][ T7876] ? __pfx_generic_perform_write+0x10/0x10 [ 233.946630][ T7876] ? mnt_put_write_access_file+0x4e/0x100 [ 233.946644][ T7876] ? file_update_time_flags+0x38c/0x520 [ 233.946663][ T7876] shmem_file_write_iter+0x10e/0x140 [ 233.946675][ T7876] iter_file_splice_write+0x830/0x10b0 [ 233.946698][ T7876] ? __pfx_iter_file_splice_write+0x10/0x10 [ 233.946714][ T7876] ? shmem_file_splice_read+0x724/0xd80 [ 233.946739][ T7876] ? __pfx_iter_file_splice_write+0x10/0x10 [ 233.946755][ T7876] direct_splice_actor+0x192/0x690 [ 233.946771][ T7876] splice_direct_to_actor+0x345/0xa30 [ 233.946787][ T7876] ? __pfx_direct_splice_actor+0x10/0x10 [ 233.946804][ T7876] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 233.946818][ T7876] ? __lock_acquire+0x5c0/0x1f40 [ 233.946830][ T7876] ? find_held_lock+0x2b/0x80 [ 233.946848][ T7876] do_splice_direct+0x174/0x240 [ 233.946863][ T7876] ? __pfx_do_splice_direct+0x10/0x10 [ 233.946878][ T7876] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 233.946897][ T7876] vfs_copy_file_range+0xc92/0x18d0 [ 233.946914][ T7876] ? __pfx_vfs_copy_file_range+0x10/0x10 [ 233.946928][ T7876] ? __might_fault+0xc5/0x140 [ 233.946943][ T7876] ? __might_fault+0xc5/0x140 [ 233.946965][ T7876] __do_sys_copy_file_range+0x1a1/0x460 [ 233.946981][ T7876] ? __pfx___do_sys_copy_file_range+0x10/0x10 [ 233.947001][ T7876] do_syscall_64+0x123/0x790 [ 233.947017][ T7876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.947029][ T7876] RIP: 0033:0x7fde4a79e159 [ 233.947039][ T7876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.947049][ T7876] RSP: 002b:00007fde4b735028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 233.947061][ T7876] RAX: ffffffffffffffda RBX: 00007fde4aa25fa0 RCX: 00007fde4a79e159 [ 233.947069][ T7876] RDX: 0000000000000003 RSI: 00002000000001c0 RDI: 0000000000000004 [ 233.947075][ T7876] RBP: 00007fde4a83503b R08: ffffffffa003e45b R09: 0700000000000000 [ 233.947082][ T7876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.947088][ T7876] R13: 00007fde4aa26038 R14: 00007fde4aa25fa0 R15: 00007ffe8db15178 [ 233.947103][ T7876] [ 234.535418][ T7880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.926945][ T7892] tipc: Resetting bearer [ 234.928109][ T7892] syzkaller0: left promiscuous mode [ 234.928121][ T7892] syzkaller0: left allmulticast mode [ 234.943462][ T6899] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.943484][ T6899] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.943501][ T6899] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.943517][ T6899] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.077842][ T7890] (syz.2.586,7890,0):o2hb_bio_end_io:546 ERROR: IO Error 10 [ 235.078455][ T7890] (syz.2.586,7890,0):o2hb_region_dev_store:1944 ERROR: status = -5 [ 235.272941][ T7896] net_ratelimit: 1 callbacks suppressed [ 235.272954][ T7896] socket: no more sockets [ 235.339236][ T7896] socket: no more sockets [ 235.447609][ T7900] FAULT_INJECTION: forcing a failure. [ 235.447609][ T7900] name failslab, interval 1, probability 0, space 0, times 0 [ 235.447629][ T7900] CPU: 0 UID: 0 PID: 7900 Comm: syz.2.591 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.447644][ T7900] Tainted: [L]=SOFTLOCKUP [ 235.447648][ T7900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 235.447655][ T7900] Call Trace: [ 235.447659][ T7900] [ 235.447663][ T7900] dump_stack_lvl+0x100/0x190 [ 235.447684][ T7900] should_fail_ex.cold+0x5/0xa [ 235.447701][ T7900] should_failslab+0xc2/0x120 [ 235.447716][ T7900] __kmalloc_cache_noprof+0x91/0x6d0 [ 235.447735][ T7900] ? input_allocate_device+0x44/0x350 [ 235.447754][ T7900] input_allocate_device+0x44/0x350 [ 235.447769][ T7900] uinput_ioctl_handler.isra.0+0x3c8/0x1d20 [ 235.447782][ T7900] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 235.447792][ T7900] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 235.447806][ T7900] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 235.447819][ T7900] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 235.447834][ T7900] ? __fget_files+0x34/0x3d0 [ 235.447853][ T7900] ? selinux_file_ioctl+0x13b/0x290 [ 235.447865][ T7900] ? selinux_file_ioctl+0xb6/0x290 [ 235.447877][ T7900] ? __pfx_uinput_ioctl+0x10/0x10 [ 235.447889][ T7900] __x64_sys_ioctl+0x18e/0x210 [ 235.447901][ T7900] do_syscall_64+0x123/0x790 [ 235.447917][ T7900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.447929][ T7900] RIP: 0033:0x7f0b9779e159 [ 235.447939][ T7900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.447949][ T7900] RSP: 002b:00007f0b959f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.447960][ T7900] RAX: ffffffffffffffda RBX: 00007f0b97a25fa0 RCX: 00007f0b9779e159 [ 235.447967][ T7900] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 235.447974][ T7900] RBP: 00007f0b9783503b R08: 0000000000000000 R09: 0000000000000000 [ 235.447980][ T7900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.447986][ T7900] R13: 00007f0b97a26038 R14: 00007f0b97a25fa0 R15: 00007ffc0e578588 [ 235.448000][ T7900] [ 235.836696][ T7905] FAULT_INJECTION: forcing a failure. [ 235.836696][ T7905] name fail_futex, interval 1, probability 0, space 0, times 1 [ 235.836717][ T7905] CPU: 0 UID: 0 PID: 7905 Comm: syz.0.593 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.836733][ T7905] Tainted: [L]=SOFTLOCKUP [ 235.836737][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 235.836743][ T7905] Call Trace: [ 235.836748][ T7905] [ 235.836752][ T7905] dump_stack_lvl+0x100/0x190 [ 235.836772][ T7905] should_fail_ex.cold+0x5/0xa [ 235.836788][ T7905] get_futex_key+0x1d0/0x14f0 [ 235.836805][ T7905] ? __pfx_get_futex_key+0x10/0x10 [ 235.836824][ T7905] futex_wake+0xf4/0x5e0 [ 235.836842][ T7905] ? __pfx_futex_wake+0x10/0x10 [ 235.836857][ T7905] ? kasan_quarantine_put+0x104/0x240 [ 235.836871][ T7905] ? putname+0xb1/0x110 [ 235.836884][ T7905] ? kmem_cache_free+0x127/0x6c0 [ 235.836904][ T7905] do_futex+0x2b2/0x440 [ 235.836919][ T7905] ? __pfx_do_futex+0x10/0x10 [ 235.836933][ T7905] ? __pfx_do_sys_openat2+0x10/0x10 [ 235.836948][ T7905] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 235.836965][ T7905] __x64_sys_futex+0x34f/0x4d0 [ 235.836980][ T7905] ? __x64_sys_openat+0x12d/0x210 [ 235.836995][ T7905] ? __pfx___x64_sys_futex+0x10/0x10 [ 235.837014][ T7905] do_syscall_64+0x123/0x790 [ 235.837030][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.837041][ T7905] RIP: 0033:0x7f6ab3d9e159 [ 235.837050][ T7905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.837060][ T7905] RSP: 002b:00007f6ab4bb50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 235.837071][ T7905] RAX: ffffffffffffffda RBX: 00007f6ab4025fa8 RCX: 00007f6ab3d9e159 [ 235.837078][ T7905] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6ab4025fac [ 235.837084][ T7905] RBP: 00007f6ab4025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 235.837091][ T7905] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 235.837098][ T7905] R13: 00007f6ab4026038 R14: 00007ffe2ba71d30 R15: 00007ffe2ba71e18 [ 235.837112][ T7905] [ 236.076657][ T7908] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments (-EINVAL) [ 236.076670][ T7908] device-mapper: ioctl: error adding target to table [ 236.114547][ T7905] erofs (device nbd0): cannot find valid erofs superblock [ 236.224786][ T7913] netlink: 256 bytes leftover after parsing attributes in process `syz.4.596'. [ 236.224862][ T7913] unsupported nlmsg_type 40 [ 236.501404][ T7924] netlink: 52 bytes leftover after parsing attributes in process `syz.2.600'. [ 236.756033][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.605'. [ 236.756046][ T7934] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 236.859211][ T7779] Set syz1 is full, maxelem 65536 reached [ 236.959724][ T7940] netlink: 'syz.1.608': attribute type 10 has an invalid length. [ 236.959741][ T7940] syz_tun: entered promiscuous mode [ 236.981339][ T7940] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 237.266065][ T31] kauditd_printk_skb: 96 callbacks suppressed [ 237.266077][ T31] audit: type=1800 audit(1789436733.996:1069): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15131 res=0 errno=0 [ 237.269557][ T31] audit: type=1800 audit(1789436733.996:1070): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=140894 res=0 errno=0 [ 237.355979][ T31] audit: type=1800 audit(1789436734.086:1071): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 237.391198][ T6896] nvmet: connect request for invalid subsystem testsubsys! [ 237.400451][ T7951] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 237.451479][ T31] audit: type=1800 audit(1789436734.176:1072): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15131 res=0 errno=0 [ 237.531913][ T31] audit: type=1800 audit(1789436734.256:1073): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 237.574093][ T31] audit: type=1800 audit(1789436734.306:1074): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 237.617580][ T31] audit: type=1400 audit(1789436734.346:1075): avc: denied { write } for pid=7964 comm="syz.1.619" path="socket:[20208]" dev="sockfs" ino=20208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.617689][ T7965] Bluetooth: MGMT ver 1.23 [ 237.674169][ T31] audit: type=1800 audit(1789436734.406:1076): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15131 res=0 errno=0 [ 237.733086][ T31] audit: type=1800 audit(1789436734.466:1077): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 237.783971][ T31] audit: type=1800 audit(1789436734.516:1078): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 237.848254][ T7973] netlink: 9 bytes leftover after parsing attributes in process `syz.1.623'. [ 237.848375][ T7973] FAULT_INJECTION: forcing a failure. [ 237.848375][ T7973] name failslab, interval 1, probability 0, space 0, times 0 [ 237.848392][ T7973] CPU: 0 UID: 0 PID: 7973 Comm: syz.1.623 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.848407][ T7973] Tainted: [L]=SOFTLOCKUP [ 237.848412][ T7973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 237.848419][ T7973] Call Trace: [ 237.848423][ T7973] [ 237.848428][ T7973] dump_stack_lvl+0x100/0x190 [ 237.848448][ T7973] should_fail_ex.cold+0x5/0xa [ 237.848464][ T7973] should_failslab+0xc2/0x120 [ 237.848479][ T7973] __kmalloc_cache_noprof+0x91/0x6d0 [ 237.848497][ T7973] ? netdevice_event+0x308/0x9a0 [ 237.848511][ T7973] netdevice_event+0x308/0x9a0 [ 237.848525][ T7973] ? __pfx_netdevice_event+0x10/0x10 [ 237.848536][ T7973] ? __pfx_del_netdev_ips+0x10/0x10 [ 237.848545][ T7973] ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10 [ 237.848558][ T7973] ? __pfx_add_default_gids+0x10/0x10 [ 237.848568][ T7973] ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10 [ 237.848581][ T7973] ? __pfx_add_netdev_ips+0x10/0x10 [ 237.848592][ T7973] ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10 [ 237.848605][ T7973] ? wext_netdev_notifier_call+0xe/0x20 [ 237.848618][ T7973] ? cfg802154_netdev_notifier_call+0x17a/0xad0 [ 237.848635][ T7973] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 237.848650][ T7973] notifier_call_chain+0x99/0x3f0 [ 237.848668][ T7973] call_netdevice_notifiers_info+0xbe/0x110 [ 237.848686][ T7973] netif_set_mac_address+0x370/0x4a0 [ 237.848700][ T7973] ? __pfx_netif_set_mac_address+0x10/0x10 [ 237.848716][ T7973] ? __pfx_down_write+0x10/0x10 [ 237.848731][ T7973] ? tick_nohz_tick_stopped+0x6c/0xa0 [ 237.848746][ T7973] do_setlink.isra.0+0x75f/0x3e60 [ 237.848764][ T7973] ? __lock_acquire+0x5c0/0x1f40 [ 237.848775][ T7973] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 237.848791][ T7973] ? __lock_acquire+0x5c0/0x1f40 [ 237.848804][ T7973] ? lock_acquire+0x1d1/0x380 [ 237.848815][ T7973] ? avc_has_perm_noaudit+0x56/0x3b0 [ 237.848832][ T7973] ? lock_acquire+0x1d1/0x380 [ 237.848843][ T7973] ? rtnl_setlink+0x4dd/0xac0 [ 237.848859][ T7973] ? rcu_is_watching+0x13/0xc0 [ 237.848873][ T7973] ? trace_contention_end+0x126/0x160 [ 237.848886][ T7973] ? __mutex_lock+0x26c/0x1bd0 [ 237.848900][ T7973] ? rtnl_setlink+0x4dd/0xac0 [ 237.848923][ T7973] ? netlink_ns_capable+0xfa/0x130 [ 237.848942][ T7973] rtnl_setlink+0x5fd/0xac0 [ 237.848957][ T7973] ? __pfx_rtnl_setlink+0x10/0x10 [ 237.848995][ T7973] ? __lock_acquire+0x5c0/0x1f40 [ 237.849012][ T7973] ? lock_acquire+0x1d1/0x380 [ 237.849023][ T7973] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 237.849036][ T7973] ? find_held_lock+0x2b/0x80 [ 237.849051][ T7973] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 237.849064][ T7973] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 237.849078][ T7973] ? __pfx_rtnl_setlink+0x10/0x10 [ 237.849092][ T7973] rtnetlink_rcv_msg+0x95e/0xe90 [ 237.849108][ T7973] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.849123][ T7973] ? __lock_acquire+0x5c0/0x1f40 [ 237.849135][ T7973] ? __netlink_lookup+0xa9/0x900 [ 237.849147][ T7973] netlink_rcv_skb+0x159/0x420 [ 237.849159][ T7973] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.849174][ T7973] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.849199][ T7973] ? netlink_deliver_tap+0x1ae/0xcc0 [ 237.849214][ T7973] netlink_unicast+0x585/0x850 [ 237.849229][ T7973] ? __pfx_netlink_unicast+0x10/0x10 [ 237.849246][ T7973] netlink_sendmsg+0x8b0/0xda0 [ 237.849261][ T7973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.849275][ T7973] ? selinux_socket_sendmsg+0x198/0x2f0 [ 237.849290][ T7973] sock_write_iter+0x53a/0x5b0 [ 237.849308][ T7973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.849320][ T7973] ? __pfx_sock_write_iter+0x10/0x10 [ 237.849339][ T7973] ? __pfx___file_has_perm+0x10/0x10 [ 237.849353][ T7973] do_iter_readv_writev+0x6f7/0x930 [ 237.849371][ T7973] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 237.849387][ T7973] ? selinux_file_permission+0x8f/0x6d0 [ 237.849400][ T7973] ? bpf_lsm_file_permission+0x9/0x10 [ 237.849414][ T7973] ? security_file_permission+0x76/0x210 [ 237.849428][ T7973] ? rw_verify_area+0xce/0x6d0 [ 237.849445][ T7973] vfs_writev+0x360/0xdd0 [ 237.849456][ T7973] ? __lock_acquire+0x5c0/0x1f40 [ 237.849469][ T7973] ? __pfx_vfs_writev+0x10/0x10 [ 237.849479][ T7973] ? percpu_counter_add_batch+0xb9/0x230 [ 237.849493][ T7973] ? lock_acquire+0x1d1/0x380 [ 237.849504][ T7973] ? __fget_files+0x34/0x3d0 [ 237.849522][ T7973] ? __fget_files+0x21f/0x3d0 [ 237.849539][ T7973] ? do_writev+0x28a/0x340 [ 237.849547][ T7973] do_writev+0x28a/0x340 [ 237.849558][ T7973] ? __pfx_do_writev+0x10/0x10 [ 237.849572][ T7973] do_syscall_64+0x123/0x790 [ 237.849588][ T7973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.849599][ T7973] RIP: 0033:0x7f1421f9e159 [ 237.849609][ T7973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.849619][ T7973] RSP: 002b:00007f1422ee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 237.849630][ T7973] RAX: ffffffffffffffda RBX: 00007f1422225fa0 RCX: 00007f1421f9e159 [ 237.849637][ T7973] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000005 [ 237.849643][ T7973] RBP: 00007f142203503b R08: 0000000000000000 R09: 0000000000000000 [ 237.849650][ T7973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.849656][ T7973] R13: 00007f1422226038 R14: 00007f1422225fa0 R15: 00007ffea1959308 [ 237.849671][ T7973] [ 237.851201][ T7973] gretap0: entered promiscuous mode [ 238.290699][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.621'. [ 238.415672][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.458827][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.621'. [ 238.477098][ T7973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.623'. [ 238.751597][ T5700] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 238.831794][ T5820] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 238.902086][ T5700] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.902890][ T5700] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.902907][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 238.902920][ T5700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 238.902932][ T5700] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 238.902951][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.905251][ T5700] usb 5-1: config 0 descriptor?? [ 239.001723][ T5820] usb 2-1: Using ep0 maxpacket: 8 [ 239.002154][ T5820] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 239.002942][ T5820] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 239.002963][ T5820] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 239.002977][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 239.002991][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 239.004559][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.004584][ T5820] usb 2-1: Product: syz [ 239.004592][ T5820] usb 2-1: Manufacturer: syz [ 239.004599][ T5820] usb 2-1: SerialNumber: syz [ 239.005951][ T5820] usb 2-1: config 0 descriptor?? [ 239.006356][ T7982] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 239.218540][ T5820] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 239.221281][ T5820] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input25 [ 239.413597][ T5700] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 239.447242][ C0] powermate: config urb returned -71 [ 239.448155][ C0] powermate: config urb returned -71 [ 239.448367][ C0] powermate: config urb returned -71 [ 239.448525][ C0] powermate: config urb returned -71 [ 239.449037][ T5700] usb 2-1: USB disconnect, device number 17 [ 239.449148][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 239.451861][ T6896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.452196][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.452577][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.524567][ T7985] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 239.524646][ T7985] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 239.623631][ T7985] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 239.624179][ T7985] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 239.646906][ T7985] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 239.646953][ T7985] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 239.737917][ T5798] usb 5-1: USB disconnect, device number 17 [ 239.844009][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 239.844035][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 240.014502][ T8010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.059877][ T8010] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 240.586514][ T8036] device-mapper: table: 248:0: zero-length target [ 240.586523][ T8036] device-mapper: ioctl: error adding target to table [ 240.725559][ T8044] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 240.726492][ T8044] batman_adv: batadv0: Adding interface: gretap1 [ 240.726500][ T8044] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.726517][ T8044] batman_adv: batadv0: Interface activated: gretap1 [ 240.733032][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 240.888578][ T8050] netlink: 'syz.1.655': attribute type 1 has an invalid length. [ 241.261271][ T8070] device-mapper: table: 248:0: zero-length target [ 241.261281][ T8070] device-mapper: ioctl: error adding target to table [ 241.385071][ T8074] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 241.385087][ T8074] bond0: option slaves: unable to set because the bond device is up [ 241.691642][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 241.691672][ T5615] Bluetooth: hci4: command 0x0406 tx timeout [ 241.749333][ T8092] FAULT_INJECTION: forcing a failure. [ 241.749333][ T8092] name failslab, interval 1, probability 0, space 0, times 0 [ 241.749353][ T8092] CPU: 0 UID: 0 PID: 8092 Comm: syz.0.674 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.749368][ T8092] Tainted: [L]=SOFTLOCKUP [ 241.749373][ T8092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 241.749380][ T8092] Call Trace: [ 241.749384][ T8092] [ 241.749389][ T8092] dump_stack_lvl+0x100/0x190 [ 241.749408][ T8092] should_fail_ex.cold+0x5/0xa [ 241.749424][ T8092] should_failslab+0xc2/0x120 [ 241.749439][ T8092] __kmalloc_noprof+0xfc/0x840 [ 241.749452][ T8092] ? trace_kmalloc+0xeb/0x110 [ 241.749465][ T8092] ? lsm_blob_alloc+0x68/0x90 [ 241.749483][ T8092] lsm_blob_alloc+0x68/0x90 [ 241.749497][ T8092] security_sk_alloc+0x2d/0x290 [ 241.749508][ T8092] sk_prot_alloc+0x12a/0x2a0 [ 241.749525][ T8092] sk_alloc+0x36/0xe80 [ 241.749537][ T8092] bt_sock_alloc+0x3b/0x3c0 [ 241.749550][ T8092] hci_sock_create+0xbc/0x1c0 [ 241.749563][ T8092] bt_sock_create+0x185/0x350 [ 241.749575][ T8092] __sock_create+0x339/0x860 [ 241.749593][ T8092] __sys_socket+0x14d/0x260 [ 241.749604][ T8092] ? __pfx___sys_socket+0x10/0x10 [ 241.749618][ T8092] __x64_sys_socket+0x72/0xb0 [ 241.749629][ T8092] ? lockdep_hardirqs_on+0x7d/0x110 [ 241.749643][ T8092] do_syscall_64+0x123/0x790 [ 241.749658][ T8092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.749669][ T8092] RIP: 0033:0x7f6ab3d9e159 [ 241.749678][ T8092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.749688][ T8092] RSP: 002b:00007f6ab4bb4fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 241.749700][ T8092] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f6ab3d9e159 [ 241.749706][ T8092] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001f [ 241.749713][ T8092] RBP: 00007f6ab3e3503b R08: 0000000000000000 R09: 0000000000000000 [ 241.749719][ T8092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.749725][ T8092] R13: 00007f6ab4026038 R14: 00007f6ab4025fa0 R15: 00007ffe2ba71e18 [ 241.749738][ T8092] [ 242.287634][ T31] kauditd_printk_skb: 102 callbacks suppressed [ 242.287647][ T31] audit: type=1800 audit(1789436739.016:1181): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15377 res=0 errno=0 [ 242.376120][ T31] audit: type=1800 audit(1789436739.106:1182): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15377 res=0 errno=0 [ 242.418647][ T8108] netlink: 'syz.4.681': attribute type 10 has an invalid length. [ 242.418665][ T8108] syz_tun: entered promiscuous mode [ 242.421353][ T8108] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 242.481638][ T5820] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 242.486473][ T31] audit: type=1800 audit(1789436739.216:1183): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15377 res=0 errno=0 [ 242.567969][ T31] audit: type=1800 audit(1789436739.296:1184): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15377 res=0 errno=0 [ 242.631721][ T5820] usb 1-1: Using ep0 maxpacket: 8 [ 242.632170][ T5820] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 242.632889][ T5820] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 242.632902][ T5820] usb 1-1: config 179 has no interface number 0 [ 242.632921][ T5820] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 242.632935][ T5820] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 242.632949][ T5820] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 242.632963][ T5820] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 242.632976][ T5820] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 242.632996][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.635063][ T8104] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 242.763789][ T31] audit: type=1800 audit(1789436739.496:1185): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15377 res=0 errno=0 [ 242.765514][ T31] audit: type=1800 audit(1789436739.496:1186): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=141395 res=0 errno=0 [ 242.765768][ T31] audit: type=1800 audit(1789436739.496:1187): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=141424 res=0 errno=0 [ 242.767895][ T31] audit: type=1800 audit(1789436739.496:1188): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=141402 res=0 errno=0 [ 242.768423][ T31] audit: type=1800 audit(1789436739.496:1189): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=141403 res=0 errno=0 [ 242.820849][ T5610] Bluetooth: hci3: command 0x0406 tx timeout [ 242.844813][ T31] audit: type=1800 audit(1789436739.576:1190): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=141404 res=0 errno=0 [ 242.963685][ T5820] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input27 [ 243.136864][ T8104] ================================================================== [ 243.136874][ T8104] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 243.136892][ T8104] Read of size 1 at addr ffff88802c458758 by task syz.0.679/8104 [ 243.136901][ T8104] [ 243.136908][ T8104] CPU: 0 UID: 0 PID: 8104 Comm: syz.0.679 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.136924][ T8104] Tainted: [L]=SOFTLOCKUP [ 243.136928][ T8104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 243.136935][ T8104] Call Trace: [ 243.136939][ T8104] [ 243.136943][ T8104] dump_stack_lvl+0x100/0x190 [ 243.136961][ T8104] print_report+0x13d/0x4b0 [ 243.136979][ T8104] ? __virt_addr_valid+0x239/0x430 [ 243.136992][ T8104] ? string+0x471/0x4d0 [ 243.137002][ T8104] kasan_report+0xdf/0x1c0 [ 243.137017][ T8104] ? string+0x471/0x4d0 [ 243.137029][ T8104] string+0x471/0x4d0 [ 243.137041][ T8104] ? __pfx_string+0x10/0x10 [ 243.137053][ T8104] vsnprintf+0x422/0x1300 [ 243.137067][ T8104] ? __pfx_vsnprintf+0x10/0x10 [ 243.137082][ T8104] seq_printf+0x1a4/0x250 [ 243.137094][ T8104] ? __kasan_kmalloc+0xaa/0xb0 [ 243.137113][ T8104] ? __pfx_seq_printf+0x10/0x10 [ 243.137127][ T8104] ? __asan_memcpy+0x3c/0x60 [ 243.137137][ T8104] ? kobject_get_path+0x8d/0x2c0 [ 243.137156][ T8104] input_devices_seq_show+0x1bf/0x1130 [ 243.137175][ T8104] ? __pfx_input_devices_seq_show+0x10/0x10 [ 243.137192][ T8104] ? seq_list_start+0x7a/0xc0 [ 243.137203][ T8104] traverse.part.0.constprop.0+0x107/0x650 [ 243.137219][ T8104] seq_read_iter+0x93f/0x1270 [ 243.137231][ T8104] ? futex_unqueue+0x29/0x2c0 [ 243.137243][ T8104] ? find_held_lock+0x2b/0x80 [ 243.137258][ T8104] ? futex_unqueue+0x133/0x2c0 [ 243.137272][ T8104] seq_read+0x344/0x4d0 [ 243.137283][ T8104] ? __pfx_seq_read+0x10/0x10 [ 243.137297][ T8104] ? seq_read+0x24/0x4d0 [ 243.137309][ T8104] ? __pfx_seq_read+0x10/0x10 [ 243.137320][ T8104] proc_reg_read+0x240/0x330 [ 243.137336][ T8104] ? __pfx_proc_reg_read+0x10/0x10 [ 243.137351][ T8104] vfs_readv+0x5d8/0x8d0 [ 243.137368][ T8104] ? __pfx_vfs_readv+0x10/0x10 [ 243.137385][ T8104] ? lock_acquire+0x1d1/0x380 [ 243.137395][ T8104] ? __fget_files+0x34/0x3d0 [ 243.137410][ T8104] ? __fget_files+0x21f/0x3d0 [ 243.137423][ T8104] ? do_preadv+0x1ac/0x270 [ 243.137432][ T8104] do_preadv+0x1ac/0x270 [ 243.137441][ T8104] ? __pfx_do_preadv+0x10/0x10 [ 243.137451][ T8104] do_syscall_64+0x123/0x790 [ 243.137466][ T8104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.137478][ T8104] RIP: 0033:0x7f6ab3d9e159 [ 243.137486][ T8104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.137497][ T8104] RSP: 002b:00007f6ab4bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 243.137508][ T8104] RAX: ffffffffffffffda RBX: 00007f6ab4025fa0 RCX: 00007f6ab3d9e159 [ 243.137515][ T8104] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004 [ 243.137522][ T8104] RBP: 00007f6ab3e3503b R08: 0000000000000000 R09: 0000000000000000 [ 243.137528][ T8104] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 243.137534][ T8104] R13: 00007f6ab4026038 R14: 00007f6ab4025fa0 R15: 00007ffe2ba71e18 [ 243.137544][ T8104] [ 243.137548][ T8104] [ 243.137551][ T8104] Allocated by task 7926: [ 243.137555][ T8104] kasan_save_stack+0x30/0x50 [ 243.137566][ T8104] kasan_save_track+0x14/0x30 [ 243.137577][ T8104] __kasan_kmalloc+0xaa/0xb0 [ 243.137587][ T8104] __kmalloc_node_track_caller_noprof+0x33d/0x870 [ 243.137598][ T8104] kmalloc_reserve+0xe8/0x350 [ 243.137612][ T8104] __alloc_skb+0x185/0x710 [ 243.137622][ T8104] _sctp_make_chunk+0x51/0x270 [ 243.137635][ T8104] sctp_make_datafrag_empty+0x14e/0x230 [ 243.137650][ T8104] sctp_datamsg_from_user+0x5ea/0x1360 [ 243.137662][ T8104] sctp_sendmsg_to_asoc+0xb1c/0x1c50 [ 243.137678][ T8104] sctp_sendmsg+0x1144/0x22e0 [ 243.137688][ T8104] inet_sendmsg+0x11c/0x140 [ 243.137702][ T8104] __sys_sendto+0x453/0x4e0 [ 243.137712][ T8104] __x64_sys_sendto+0xe0/0x1c0 [ 243.137722][ T8104] do_syscall_64+0x123/0x790 [ 243.137735][ T8104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.137744][ T8104] [ 243.137747][ T8104] Freed by task 7929: [ 243.137751][ T8104] kasan_save_stack+0x30/0x50 [ 243.137762][ T8104] kasan_save_track+0x14/0x30 [ 243.137772][ T8104] kasan_save_free_info+0x3b/0x70 [ 243.137787][ T8104] __kasan_slab_free+0x5f/0x80 [ 243.137798][ T8104] kfree+0x22b/0x6d0 [ 243.137811][ T8104] skb_free_head+0xb9/0x160 [ 243.137819][ T8104] skb_release_data+0x6c5/0x8e0 [ 243.137830][ T8104] consume_skb+0xc4/0x110 [ 243.137842][ T8104] sctp_chunk_put+0x1b2/0x2d0 [ 243.137854][ T8104] sctp_datamsg_put+0x129/0x5f0 [ 243.137865][ T8104] sctp_chunk_free+0x45/0x60 [ 243.137878][ T8104] __sctp_outq_teardown+0x70a/0xc40 [ 243.137888][ T8104] sctp_association_free+0x210/0x7d0 [ 243.137898][ T8104] sctp_do_sm+0x15b5/0x5c30 [ 243.137909][ T8104] sctp_primitive_SHUTDOWN+0x9f/0xd0 [ 243.137920][ T8104] sctp_shutdown+0x137/0x180 [ 243.137934][ T8104] inet_shutdown+0x1a5/0x410 [ 243.137946][ T8104] __sys_shutdown+0x116/0x1b0 [ 243.137956][ T8104] __x64_sys_shutdown+0x53/0x80 [ 243.137968][ T8104] do_syscall_64+0x123/0x790 [ 243.137980][ T8104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.137989][ T8104] [ 243.137991][ T8104] The buggy address belongs to the object at ffff88802c458000 [ 243.137991][ T8104] which belongs to the cache kmalloc-2k of size 2048 [ 243.137999][ T8104] The buggy address is located 1880 bytes inside of [ 243.137999][ T8104] freed 2048-byte region [ffff88802c458000, ffff88802c458800) [ 243.138009][ T8104] [ 243.138012][ T8104] The buggy address belongs to the physical page: [ 243.138017][ T8104] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c458 [ 243.138026][ T8104] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 243.138034][ T8104] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 243.138043][ T8104] page_type: f5(slab) [ 243.138052][ T8104] raw: 00fff00000000040 ffff88801c034000 dead000000000100 dead000000000122 [ 243.138061][ T8104] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 243.138070][ T8104] head: 00fff00000000040 ffff88801c034000 dead000000000100 dead000000000122 [ 243.138078][ T8104] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 243.138087][ T8104] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 243.138101][ T8104] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 243.138107][ T8104] page dumped because: kasan: bad access detected [ 243.138112][ T8104] page_owner tracks the page as allocated [ 243.138116][ T8104] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5715, tgid 5715 (kworker/1:6), ts 65124109362 [ 243.138134][ T8104] post_alloc_hook+0xfd/0x120 [ 243.138149][ T8104] get_page_from_freelist+0x110d/0x35d0 [ 243.138166][ T8104] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 243.138182][ T8104] new_slab+0xa9/0x6e0 [ 243.138195][ T8104] refill_objects+0xe3/0x410 [ 243.138210][ T8104] __pcs_replace_empty_main+0x35e/0x650 [ 243.138224][ T8104] __kmalloc_node_track_caller_noprof+0x6a8/0x870 [ 243.138235][ T8104] kmalloc_reserve+0xe8/0x350 [ 243.138248][ T8104] __alloc_skb+0x185/0x710 [ 243.138258][ T8104] mld_newpack.isra.0+0x18e/0xa20 [ 243.138270][ T8104] add_grhead+0x299/0x340 [ 243.138281][ T8104] add_grec+0x1389/0x1930 [ 243.138292][ T8104] mld_ifc_work+0x3c5/0xc10 [ 243.138304][ T8104] process_one_work+0xac7/0x1b10 [ 243.138319][ T8104] worker_thread+0x5ef/0xe50 [ 243.138333][ T8104] kthread+0x373/0x450 [ 243.138346][ T8104] page last free pid 5285 tgid 5285 ts 34971958242 stack trace: [ 243.138353][ T8104] __free_frozen_pages+0x79f/0x10f0 [ 243.138365][ T8104] qlist_free_all+0x47/0xf0 [ 243.138375][ T8104] kasan_quarantine_reduce+0x1a0/0x1f0 [ 243.138385][ T8104] __kasan_slab_alloc+0x69/0x90 [ 243.138396][ T8104] kmem_cache_alloc_noprof+0x269/0x6a0 [ 243.138406][ T8104] __anon_vma_prepare+0xae/0x5e0 [ 243.138419][ T8104] __vmf_anon_prepare+0x11f/0x250 [ 243.138430][ T8104] do_anonymous_page+0x47d/0x2050 [ 243.138444][ T8104] __handle_mm_fault+0x1ff3/0x2f60 [ 243.138457][ T8104] handle_mm_fault+0x363/0xa20 [ 243.138470][ T8104] do_user_addr_fault+0x59c/0x12f0 [ 243.138483][ T8104] exc_page_fault+0x6f/0xd0 [ 243.138495][ T8104] asm_exc_page_fault+0x26/0x30 [ 243.138504][ T8104] [ 243.138507][ T8104] Memory state around the buggy address: [ 243.138511][ T8104] ffff88802c458600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.138518][ T8104] ffff88802c458680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.138525][ T8104] >ffff88802c458700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.138530][ T8104] ^ [ 243.138536][ T8104] ffff88802c458780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 243.138543][ T8104] ffff88802c458800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 243.138548][ T8104] ================================================================== [ 243.199196][ T8104] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 244.021808][ T8104] CPU: 0 UID: 0 PID: 8104 Comm: syz.0.679 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.032535][ T8104] Tainted: [L]=SOFTLOCKUP [ 244.036834][ T8104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 244.046858][ T8104] Call Trace: [ 244.050110][ T8104] [ 244.053013][ T8104] dump_stack_lvl+0x100/0x190 [ 244.057665][ T8104] vpanic+0x553/0x970 [ 244.061616][ T8104] ? __pfx_vpanic+0x10/0x10 [ 244.066085][ T8104] ? mark_held_locks+0x40/0x70 [ 244.070819][ T8104] ? string+0x471/0x4d0 [ 244.074954][ T8104] panic+0xd1/0xe0 [ 244.078641][ T8104] ? __pfx_panic+0x10/0x10 [ 244.083025][ T8104] ? string+0x471/0x4d0 [ 244.087158][ T8104] ? preempt_schedule_common+0x3c/0xb0 [ 244.092589][ T8104] check_panic_on_warn.cold+0x19/0x34 [ 244.097929][ T8104] end_report.part.0+0x3a/0x90 [ 244.102664][ T8104] kasan_report.cold+0xe/0x18 [ 244.107315][ T8104] ? string+0x471/0x4d0 [ 244.111443][ T8104] string+0x471/0x4d0 [ 244.115393][ T8104] ? __pfx_string+0x10/0x10 [ 244.119866][ T8104] vsnprintf+0x422/0x1300 [ 244.124166][ T8104] ? __pfx_vsnprintf+0x10/0x10 [ 244.128902][ T8104] seq_printf+0x1a4/0x250 [ 244.133200][ T8104] ? __kasan_kmalloc+0xaa/0xb0 [ 244.137934][ T8104] ? __pfx_seq_printf+0x10/0x10 [ 244.142755][ T8104] ? __asan_memcpy+0x3c/0x60 [ 244.147310][ T8104] ? kobject_get_path+0x8d/0x2c0 [ 244.152220][ T8104] input_devices_seq_show+0x1bf/0x1130 [ 244.157662][ T8104] ? __pfx_input_devices_seq_show+0x10/0x10 [ 244.163527][ T8104] ? seq_list_start+0x7a/0xc0 [ 244.168170][ T8104] traverse.part.0.constprop.0+0x107/0x650 [ 244.173946][ T8104] seq_read_iter+0x93f/0x1270 [ 244.178591][ T8104] ? futex_unqueue+0x29/0x2c0 [ 244.183238][ T8104] ? find_held_lock+0x2b/0x80 [ 244.187894][ T8104] ? futex_unqueue+0x133/0x2c0 [ 244.192629][ T8104] seq_read+0x344/0x4d0 [ 244.196755][ T8104] ? __pfx_seq_read+0x10/0x10 [ 244.201410][ T8104] ? seq_read+0x24/0x4d0 [ 244.205621][ T8104] ? __pfx_seq_read+0x10/0x10 [ 244.210264][ T8104] proc_reg_read+0x240/0x330 [ 244.214829][ T8104] ? __pfx_proc_reg_read+0x10/0x10 [ 244.219913][ T8104] vfs_readv+0x5d8/0x8d0 [ 244.224129][ T8104] ? __pfx_vfs_readv+0x10/0x10 [ 244.228866][ T8104] ? lock_acquire+0x1d1/0x380 [ 244.233509][ T8104] ? __fget_files+0x34/0x3d0 [ 244.238071][ T8104] ? __fget_files+0x21f/0x3d0 [ 244.242718][ T8104] ? do_preadv+0x1ac/0x270 [ 244.247100][ T8104] do_preadv+0x1ac/0x270 [ 244.251309][ T8104] ? __pfx_do_preadv+0x10/0x10 [ 244.256041][ T8104] do_syscall_64+0x123/0x790 [ 244.260603][ T8104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.266462][ T8104] RIP: 0033:0x7f6ab3d9e159 [ 244.270845][ T8104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.290424][ T8104] RSP: 002b:00007f6ab4bb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 244.298802][ T8104] RAX: ffffffffffffffda RBX: 00007f6ab4025fa0 RCX: 00007f6ab3d9e159 [ 244.306740][ T8104] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004 [ 244.314680][ T8104] RBP: 00007f6ab3e3503b R08: 0000000000000000 R09: 0000000000000000 [ 244.322620][ T8104] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 244.330560][ T8104] R13: 00007f6ab4026038 R14: 00007f6ab4025fa0 R15: 00007ffe2ba71e18 [ 244.338505][ T8104] [ 244.341563][ T8104] Kernel Offset: disabled [ 244.345857][ T8104] Rebooting in 86400 seconds..