last executing test programs: 1.389623246s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_link\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_link/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='ehci-platform\x00', 0xe) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys_link/bus/platform/drivers/ehci-platform/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='pcspkr\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys_link/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='ehci-platform\x00', 0xe) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys_link/bus/platform/drivers/ehci-platform/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='serial8250\x00', 0xb) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys_link/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000d00)='ehci-pci\x00', 0x9) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys_link/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000f00)='0000:00:01.0\x00', 0xd) close(r5) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 1.382056796s ago: executing program 1 (id=2): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x40}}]}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000180)="01020304") 1.345865787s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)="030000001b0000000800000001000000000b000000000204000000", 0x1b) 1.273140649s ago: executing program 3 (id=6): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@block_validity}, {}, {@nombcache}, {@oldalloc}, {@dioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x100000000}}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x4) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x200000, 0x1, 0x0, r1, 0x0}]) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e000000200"/45], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x4004) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004811}, 0x2c000010) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$KVM_NMI(r1, 0xae9a) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 1.243903559s ago: executing program 2 (id=7): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 1.188324761s ago: executing program 2 (id=8): socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='add 1-1\x00', 0x8) close(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='1-1\x00', 0x4) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/usb/drivers/usbip-host/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='1-1\x00', 0x4) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/usb/devices/1-1/usbip_sockfd\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='3\x00', 0x2) close(r4) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) write(r0, &(0x7f0000000400)="00000001000000010001000200"/48, 0x30) write(r0, &(0x7f0000000440)="00000001000000020002000200"/48, 0x30) write(r0, &(0x7f0000000480)="00000002000000030001000200000000000000000000000100"/48, 0x30) write(r0, &(0x7f00000004c0)="00000002000000040002000200000000000000000000000200"/48, 0x30) 1.125381402s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)="0300000033000000071b000001000000", 0x33) 1.090267373s ago: executing program 0 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back\n\x00', 0x2c) write(r0, &(0x7f0000000300)='base=0x0 size=0x40000000 type=write-back\n\x00', 0x29) 1.050365144s ago: executing program 0 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040341278560001010203010902270001010080320904000003fe030100070581020002000705020200020007058303400001"], 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/1-1:1.0/bInterfaceSubClass\x00', 0x0, 0x0) read(r0, &(0x7f0000000600), 0x100) 1.001447575s ago: executing program 4 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0\x00', 0x1) write(r0, &(0x7f0000000180)='1\x00', 0x1) 269.965403ms ago: executing program 4 (id=13): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x8010) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000000080)={@random="0500fe3d91b5", @random="0010000200", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}, @random="7a3c466e0cd2", @remote}}}}, 0x0) 217.056535ms ago: executing program 3 (id=14): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) write(r0, &(0x7f0000000240)="62f5ff6ccf3d2ec97f0e4bc8a900d2e75067a5109d749cdf1ba00926335fdca4d6df9c6093533dbe86131af765f8be", 0x2f) read(r1, &(0x7f0000000b00), 0x64) 206.446095ms ago: executing program 4 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x268, 0x0, 0x120000}]}) 160.910496ms ago: executing program 4 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0', 0x1) 57.645838ms ago: executing program 4 (id=17): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file2\x00', 0x42, 0x1ff) fsetxattr(r0, &(0x7f0000000080)=@random={'user.', 'attr0\x00'}, &(0x7f00000000c0)='val0\x00', 0x5, 0x1) 57.536528ms ago: executing program 4 (id=18): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000080)={0x0, 0x3, "6875620000000000000000000000000000000000000000000000000000000001f0ffffffffffff00000000100000000000000000000000000000000000000000000000f695724d000000000000000000000000000000000000005d000002000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfff0010000000000000000000000000006761bcc8bdd7d2b300"}) 0s ago: executing program 3 (id=19): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x77f, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/fail_page_alloc/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='10', 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x1d) write(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts. [ 22.236920][ T30] audit: type=1400 audit(1785157404.759:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.240106][ T277] cgroup: Unknown subsys name 'net' [ 22.259655][ T30] audit: type=1400 audit(1785157404.759:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.286895][ T30] audit: type=1400 audit(1785157404.789:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.287292][ T277] cgroup: Unknown subsys name 'devices' [ 22.405368][ T277] cgroup: Unknown subsys name 'hugetlb' [ 22.411001][ T277] cgroup: Unknown subsys name 'rlimit' [ 22.550759][ T30] audit: type=1400 audit(1785157405.069:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.573977][ T30] audit: type=1400 audit(1785157405.069:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.598714][ T30] audit: type=1400 audit(1785157405.069:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.623039][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.631811][ T30] audit: type=1400 audit(1785157405.149:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.657228][ T30] audit: type=1400 audit(1785157405.149:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.670794][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.683813][ T30] audit: type=1400 audit(1785157405.179:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.716958][ T30] audit: type=1400 audit(1785157405.179:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.242958][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.250150][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.257813][ T285] device bridge_slave_0 entered promiscuous mode [ 23.266214][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.273254][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.280710][ T285] device bridge_slave_1 entered promiscuous mode [ 23.299460][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.306611][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.314012][ T287] device bridge_slave_0 entered promiscuous mode [ 23.341384][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.348484][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.355938][ T286] device bridge_slave_0 entered promiscuous mode [ 23.362656][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.369826][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.377172][ T287] device bridge_slave_1 entered promiscuous mode [ 23.389401][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.396491][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.403836][ T286] device bridge_slave_1 entered promiscuous mode [ 23.445893][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.452942][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.460559][ T289] device bridge_slave_0 entered promiscuous mode [ 23.469164][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.476382][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.483912][ T289] device bridge_slave_1 entered promiscuous mode [ 23.548749][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.555868][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.563264][ T288] device bridge_slave_0 entered promiscuous mode [ 23.570343][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.577440][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.584883][ T288] device bridge_slave_1 entered promiscuous mode [ 23.662614][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.669700][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.677061][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.684095][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.698915][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.705954][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.713210][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.720277][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.736797][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.743847][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.751102][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.758147][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.819868][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.826942][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.834230][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.841255][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.855852][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.864719][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.871895][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.879440][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.886907][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.894199][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.901441][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.909789][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.917039][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.925268][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.932657][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.944413][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.952569][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.959615][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.995598][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.004009][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.011091][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.018570][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.027295][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.034436][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.041780][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.049764][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.057833][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.065415][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.073589][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.080603][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.087997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.096188][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.103209][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.110593][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.118505][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.144646][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.152921][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.161077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.169201][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.177459][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.184530][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.192290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.211023][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.218566][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.226221][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.235163][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.243262][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.250315][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.258031][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.266464][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.274734][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.281766][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.289201][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.297614][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.313522][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.322029][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.330439][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.339011][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.347107][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.355552][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.372500][ T285] device veth0_vlan entered promiscuous mode [ 24.380310][ T288] device veth0_vlan entered promiscuous mode [ 24.386872][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.395356][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.404771][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.411820][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.419279][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.427707][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.436121][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.444302][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.452332][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.460268][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.468531][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.476741][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.484901][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.492753][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.500946][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.508812][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.516404][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.523927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.535987][ T286] device veth0_vlan entered promiscuous mode [ 24.551848][ T288] device veth1_macvtap entered promiscuous mode [ 24.558680][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.566692][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.574968][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.583040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.591351][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.599081][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.607521][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.615882][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.623290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.637718][ T285] device veth1_macvtap entered promiscuous mode [ 24.650293][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.658394][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.665898][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.673301][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.682081][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.690519][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.698236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.707539][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.715810][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.724977][ T289] device veth0_vlan entered promiscuous mode [ 24.731767][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.740187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.749180][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.757700][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.768645][ T286] device veth1_macvtap entered promiscuous mode [ 24.777335][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.785500][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.794022][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.802284][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.810676][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.831654][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.839755][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.847903][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.856263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.864833][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.873010][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.881491][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.889822][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.902855][ T287] device veth0_vlan entered promiscuous mode [ 24.914023][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.921460][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 24.924467][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.960644][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.979839][ T287] device veth1_macvtap entered promiscuous mode [ 24.992210][ T313] ehci-pci 0000:00:01.0: Found HC with no IRQ. Check BIOS/PCI 0000:00:01.0 setup! [ 25.002401][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.010586][ T313] ehci-pci 0000:00:01.0: init 0000:00:01.0 fail, -19 [ 25.019590][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.029382][ T315] file system registered [ 25.029866][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.040752][ T315] read descriptors [ 25.045606][ T289] device veth1_macvtap entered promiscuous mode [ 25.059077][ T286] ffs_data_put(): freeing [ 25.065286][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.073801][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.089218][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.108060][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.111215][ T317] loop3: detected capacity change from 0 to 1024 [ 25.135430][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.154347][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.162684][ T317] EXT4-fs (loop3): Ignoring removed oldalloc option [ 25.162850][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.178807][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.206777][ T326] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.231750][ T328] read descriptors [ 25.242386][ T287] ffs_data_put(): freeing [ 25.273430][ T305] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.563445][ T306] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.968396][ T317] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 26.001743][ T338] smpboot: CPU 1 is now offline [ 26.017886][ T340] x86: Booting SMP configuration: [ 26.023051][ T340] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 26.030361][ T0] kvm-clock: cpu 1, msr 70c4041, secondary cpu clock [ 26.031574][ T22] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 26.065741][ T324] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.082406][ T343] bridge0: port 3(syz_tun) entered blocking state [ 26.089047][ T343] bridge0: port 3(syz_tun) entered disabled state [ 26.096194][ T343] device syz_tun entered promiscuous mode [ 26.102118][ T343] bridge0: port 3(syz_tun) entered blocking state [ 26.108591][ T343] bridge0: port 3(syz_tun) entered forwarding state [ 26.191418][ T348] smpboot: CPU 1 is now offline [ 26.213883][ T305] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 26.314377][ T324] usb 3-1: Using ep0 maxpacket: 8 [ 26.348781][ T357] loop3: detected capacity change from 0 to 2048 [ 26.381429][ T357] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 26.393215][ T357] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.403781][ T305] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 26.424333][ T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.432530][ T356] FAULT_INJECTION: forcing a failure. [ 26.432530][ T356] name fail_page_alloc, interval 1, probability 10, space 0, times 1 [ 26.446116][ T324] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 26.454562][ T305] usb 2-1: Product: syz [ 26.458780][ T305] usb 2-1: Manufacturer: syz [ 26.463614][ T324] usb 3-1: config 0 has no interface number 0 [ 26.469827][ T356] CPU: 0 PID: 356 Comm: syz.3.19 Not tainted syzkaller #0 [ 26.476933][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 26.486993][ T356] Call Trace: [ 26.490270][ T356] [ 26.493201][ T356] __dump_stack+0x21/0x30 [ 26.497526][ T356] dump_stack_lvl+0x110/0x170 [ 26.502212][ T356] ? show_regs_print_info+0x20/0x20 [ 26.507403][ T356] ? prandom_u32+0x24d/0x290 [ 26.511997][ T356] dump_stack+0x15/0x20 [ 26.516148][ T356] should_fail+0x3ab/0x500 [ 26.520555][ T356] should_fail_alloc_page+0x55/0x80 [ 26.525754][ T356] prepare_alloc_pages+0x13f/0x590 [ 26.530862][ T356] ? __alloc_pages_bulk+0xab0/0xab0 [ 26.536073][ T356] __alloc_pages+0x11d/0x460 [ 26.540678][ T356] ? prep_new_page+0x110/0x110 [ 26.545442][ T356] page_cache_ra_unbounded+0x2bc/0x960 [ 26.550900][ T356] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 26.557393][ T356] ? xas_start+0x31d/0x3e0 [ 26.561823][ T356] ? xas_load+0x2ea/0x300 [ 26.566147][ T356] do_page_cache_ra+0xf2/0x110 [ 26.570922][ T356] do_sync_mmap_readahead+0x6ea/0xaf0 [ 26.576288][ T356] ? __kasan_check_write+0x14/0x20 [ 26.581392][ T356] ? count_memcg_event_mm+0x140/0x140 [ 26.586753][ T356] ? trace_android_vh_page_cache_miss+0x150/0x150 [ 26.593162][ T356] ? trace_android_vh_page_cache_miss+0x29/0x150 [ 26.599484][ T356] ? filemap_fault+0x736/0x1cc0 [ 26.604353][ T356] filemap_fault+0x7a2/0x1cc0 [ 26.609034][ T356] ? __kasan_check_write+0x14/0x20 [ 26.614157][ T356] ? mapping_seek_hole_data+0xb50/0xb50 [ 26.619693][ T356] ? __kasan_check_write+0x14/0x20 [ 26.624848][ T356] ? _raw_spin_lock+0x94/0xf0 [ 26.629521][ T356] ? _raw_spin_trylock_bh+0x150/0x150 [ 26.634899][ T356] ? __kasan_check_write+0x14/0x20 [ 26.640013][ T356] ? fput_many+0x15a/0x1a0 [ 26.644517][ T356] __do_fault+0x25f/0x2f0 [ 26.648875][ T356] handle_pte_fault+0xc60/0x2770 [ 26.653808][ T356] ? fault_around_bytes_set+0xc0/0xc0 [ 26.659175][ T356] do_handle_mm_fault+0x1b3b/0x1e30 [ 26.664366][ T356] ? downgrade_write+0x440/0x440 [ 26.669299][ T356] ? numa_migrate_prep+0xd0/0xd0 [ 26.674231][ T356] ? __kasan_check_write+0x14/0x20 [ 26.679369][ T356] ? __find_vma+0x30/0x150 [ 26.683789][ T356] do_user_addr_fault+0x808/0x11c0 [ 26.688898][ T356] ? __kasan_check_write+0x14/0x20 [ 26.694015][ T356] ? do_kern_addr_fault+0x80/0x80 [ 26.699041][ T356] ? debug_smp_processor_id+0x17/0x20 [ 26.704407][ T356] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 26.710497][ T356] ? exit_to_user_mode_prepare+0x39/0xd0 [ 26.716138][ T356] exc_page_fault+0x51/0xb0 [ 26.720727][ T356] asm_exc_page_fault+0x27/0x30 [ 26.725599][ T356] RIP: 0033:0x7f28d8b4bd52 [ 26.730016][ T356] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 13 8c fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 26.749759][ T356] RSP: 002b:00007ffc7fccd090 EFLAGS: 00010202 [ 26.755838][ T356] RAX: 0000000000011008 RBX: 00007f28d9a2e720 RCX: 0000000000000000 [ 26.763892][ T356] RDX: 0000001b2ed13000 RSI: 0000000000000008 RDI: 00007f28d9a2e720 [ 26.771858][ T356] RBP: 00000000000004fe R08: 00007f28d8ee9000 R09: 00007f28d8eff038 [ 26.779824][ T356] R10: 0000000000000003 R11: 0000000000000007 R12: ffffffff81d390dd [ 26.787787][ T356] R13: 00007f28d8eff038 R14: 00000000000002db R15: fffffffffffef000 [ 26.795770][ T356] ? ext4_inode_bitmap_csum_set+0x19d/0x460 [ 26.801666][ T356] [ 26.806751][ T305] usb 2-1: SerialNumber: syz [ 26.811396][ T324] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 26.822015][ T321] FAULT_INJECTION: forcing a failure. [ 26.822015][ T321] name fail_page_alloc, interval 1, probability 10, space 0, times 1 [ 26.835677][ T277] FAULT_INJECTION: forcing a failure. [ 26.835677][ T277] name fail_page_alloc, interval 1, probability 10, space 0, times 1 [ 26.849221][ T324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.857410][ T277] CPU: 0 PID: 277 Comm: syz-executor Not tainted syzkaller #0 [ 26.864951][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 26.875119][ T277] Call Trace: [ 26.878393][ T277] [ 26.881320][ T277] __dump_stack+0x21/0x30 [ 26.885644][ T277] dump_stack_lvl+0x110/0x170 [ 26.890315][ T277] ? show_regs_print_info+0x20/0x20 [ 26.895505][ T277] ? prandom_u32+0x24d/0x290 [ 26.900086][ T277] dump_stack+0x15/0x20 [ 26.904234][ T277] should_fail+0x3ab/0x500 [ 26.908636][ T277] should_fail_alloc_page+0x55/0x80 [ 26.913845][ T277] prepare_alloc_pages+0x13f/0x590 [ 26.918965][ T277] ? __alloc_pages_bulk+0xab0/0xab0 [ 26.924153][ T277] ? __kasan_check_write+0x14/0x20 [ 26.929254][ T277] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 26.934706][ T277] __alloc_pages+0x11d/0x460 [ 26.939291][ T277] ? prep_new_page+0x110/0x110 [ 26.944042][ T277] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 26.949840][ T277] ? add_wait_queue+0x186/0x1c0 [ 26.954766][ T277] __get_free_pages+0x10/0x30 [ 26.959430][ T277] __pollwait+0x12e/0x3e0 [ 26.963768][ T277] ? poll_initwait+0x160/0x160 [ 26.968538][ T277] pipe_poll+0xf5/0x4e0 [ 26.972680][ T277] ? __fdget+0x15b/0x230 [ 26.976909][ T277] ? pipe_write+0x1910/0x1910 [ 26.981575][ T277] do_select+0xe07/0x16b0 [ 26.985896][ T277] ? core_sys_select+0x700/0x700 [ 26.990853][ T277] ? poll_initwait+0x160/0x160 [ 26.995612][ T277] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 27.001845][ T277] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 27.008079][ T277] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 27.014317][ T277] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 27.020547][ T277] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 27.026782][ T277] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 27.033014][ T277] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 27.039244][ T277] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 27.045475][ T277] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 27.051698][ T277] ? inet_recvmsg+0x153/0x470 [ 27.056368][ T277] ? check_stack_object+0x10f/0x150 [ 27.061560][ T277] core_sys_select+0x4f8/0x700 [ 27.066312][ T277] ? poll_select_set_timeout+0x160/0x160 [ 27.071936][ T277] ? sigprocmask+0x1b0/0x1b0 [ 27.076533][ T277] __se_sys_pselect6+0x274/0x340 [ 27.081471][ T277] ? __x64_sys_pselect6+0x100/0x100 [ 27.086655][ T277] ? ksys_read+0x1eb/0x260 [ 27.091083][ T277] ? vfs_write+0xfd0/0xfd0 [ 27.095493][ T277] __x64_sys_pselect6+0xe5/0x100 [ 27.100438][ T277] x64_sys_call+0x760/0x9a0 [ 27.104935][ T277] do_syscall_64+0x4c/0xa0 [ 27.109358][ T277] ? clear_bhb_loop+0x50/0xa0 [ 27.114024][ T277] ? clear_bhb_loop+0x50/0xa0 [ 27.118693][ T277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 27.124576][ T277] RIP: 0033:0x7f5b1a110017 [ 27.128987][ T277] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 27.148591][ T277] RSP: 002b:00007ffe53790db0 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 27.156995][ T277] RAX: ffffffffffffffda RBX: 000055556ce7b500 RCX: 00007f5b1a110017 [ 27.164964][ T277] RDX: 0000000000000000 RSI: 00007ffe53790ed0 RDI: 0000000000000023 [ 27.172926][ T277] RBP: 00007ffe53791330 R08: 00007ffe53790df0 R09: 00007ffe53790e00 [ 27.180891][ T277] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe53791170 [ 27.188881][ T277] R13: 00007ffe53790f60 R14: 585858582e7a7973 R15: 00007ffe537913a0 [ 27.196848][ T277] [ 27.200505][ T351] FAULT_INJECTION: forcing a failure. [ 27.200505][ T351] name fail_page_alloc, interval 1, probability 10, space 0, times 1 [ 27.215106][ T312] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 27.222355][ T306] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 27.232832][ T321] CPU: 0 PID: 321 Comm: udevd Not tainted syzkaller #0 [ 27.239678][ T321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 27.249756][ T321] Call Trace: [ 27.253026][ T321] [ 27.255953][ T321] __dump_stack+0x21/0x30 [ 27.260278][ T321] dump_stack_lvl+0x110/0x170 [ 27.264951][ T321] ? show_regs_print_info+0x20/0x20 [ 27.270153][ T321] ? prandom_u32+0x24d/0x290 [ 27.274740][ T321] dump_stack+0x15/0x20 [ 27.278885][ T321] should_fail+0x3ab/0x500 [ 27.283292][ T321] should_fail_alloc_page+0x55/0x80 [ 27.288484][ T321] prepare_alloc_pages+0x13f/0x590 [ 27.293591][ T321] ? __alloc_pages_bulk+0xab0/0xab0 [ 27.298815][ T321] __alloc_pages+0x11d/0x460 [ 27.303404][ T321] ? __kernel_text_address+0xa0/0x100 [ 27.308762][ T321] ? prep_new_page+0x110/0x110 [ 27.313524][ T321] ? unwind_get_return_address+0x4d/0x90 [ 27.319146][ T321] ? stack_trace_save+0xf0/0xf0 [ 27.323990][ T321] new_slab+0xa0/0x4d0 [ 27.328048][ T321] ? stack_trace_save+0xa6/0xf0 [ 27.332907][ T321] ___slab_alloc+0x3ac/0x840 [ 27.337487][ T321] ? kvmalloc_node+0x211/0x320 [ 27.342240][ T321] ? kvmalloc_node+0x211/0x320 [ 27.347013][ T321] __slab_alloc+0x49/0x90 [ 27.351338][ T321] __kmalloc+0x16a/0x2c0 [ 27.355572][ T321] ? kvmalloc_node+0x211/0x320 [ 27.360347][ T321] kvmalloc_node+0x211/0x320 [ 27.364929][ T321] ? __kasan_check_write+0x14/0x20 [ 27.370029][ T321] ? mutex_lock+0x9b/0x1c0 [ 27.374438][ T321] ? vm_mmap+0xb0/0xb0 [ 27.378494][ T321] seq_read_iter+0x1f1/0xce0 [ 27.383077][ T321] ? avc_policy_seqno+0x1b/0x70 [ 27.387921][ T321] kernfs_fop_read_iter+0x146/0x460 [ 27.393127][ T321] vfs_read+0x6c0/0xc20 [ 27.397274][ T321] ? kernel_read+0x1f0/0x1f0 [ 27.401853][ T321] ? __kasan_check_read+0x11/0x20 [ 27.406871][ T321] ? __fdget_pos+0x2d9/0x380 [ 27.411470][ T321] ksys_read+0x14a/0x260 [ 27.415701][ T321] ? vfs_write+0xfd0/0xfd0 [ 27.420104][ T321] ? debug_smp_processor_id+0x17/0x20 [ 27.425471][ T321] __x64_sys_read+0x7b/0x90 [ 27.429964][ T321] x64_sys_call+0x96d/0x9a0 [ 27.434466][ T321] do_syscall_64+0x4c/0xa0 [ 27.438873][ T321] ? clear_bhb_loop+0x50/0xa0 [ 27.443545][ T321] ? clear_bhb_loop+0x50/0xa0 [ 27.448227][ T321] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 27.454113][ T321] RIP: 0033:0x7f2492fc6407 [ 27.458541][ T321] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 27.478168][ T321] RSP: 002b:00007ffdb9ff2f80 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 27.486579][ T321] RAX: ffffffffffffffda RBX: 00007f2492ed8880 RCX: 00007f2492fc6407 [ 27.494626][ T321] RDX: 0000000000001000 RSI: 00007ffdb9ff3460 RDI: 0000000000000008 [ 27.502587][ T321] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 27.510549][ T321] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555e7204f230 [ 27.518511][ T321] R13: 00007ffdb9ff3060 R14: 00007ffdb9ff3460 R15: 0000555e3dd7abcc [ 27.526492][ T321] [ 27.530938][ T305] FAULT_INJECTION: forcing a failure. [ 27.530938][ T305] name fail_page_alloc, interval 1, probability 10, space 0, times 1 [ 27.545840][ T90] FAULT_INJECTION: forcing a failure. [ 27.545840][ T90] name fail_page_alloc, interval 1, probability 10, space 0, times 1 [ 27.559881][ T309] FAULT_INJECTION: forcing a failure. [ 27.559881][ T309] name fail_page_alloc, interval 1, probability 10, space 0, times 1 [ 27.573630][ T324] usb 3-1: config 0 descriptor?? [ 27.578702][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.587018][ T306] usb 1-1: Product: syz [ 27.591387][ T309] CPU: 0 PID: 309 Comm: udevd Not tainted syzkaller #0 [ 27.598271][ T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 27.608412][ T309] Call Trace: [ 27.611751][ T309] [ 27.614678][ T309] __dump_stack+0x21/0x30 [ 27.619028][ T309] dump_stack_lvl+0x110/0x170 [ 27.623709][ T309] ? show_regs_print_info+0x20/0x20 [ 27.628904][ T309] ? prandom_u32+0x24d/0x290 [ 27.633490][ T309] dump_stack+0x15/0x20 [ 27.637645][ T309] should_fail+0x3ab/0x500 [ 27.642089][ T309] should_fail_alloc_page+0x55/0x80 [ 27.647290][ T309] prepare_alloc_pages+0x13f/0x590 [ 27.652394][ T309] ? path_openat+0x282/0x2f80 [ 27.657060][ T309] ? __alloc_pages_bulk+0xab0/0xab0 [ 27.662266][ T309] __alloc_pages+0x11d/0x460 [ 27.666855][ T309] ? prep_new_page+0x110/0x110 [ 27.671630][ T309] ? __kasan_check_write+0x14/0x20 [ 27.676744][ T309] ? _raw_spin_lock+0x94/0xf0 [ 27.681419][ T309] __get_free_pages+0x10/0x30 [ 27.686117][ T309] selinux_genfs_get_sid+0x59/0x250 [ 27.691786][ T309] ? lockref_get+0xbc/0x120 [ 27.696306][ T309] inode_doinit_with_dentry+0x884/0xd90 [ 27.701879][ T309] ? sb_finish_set_opts+0xa10/0xa10 [ 27.707076][ T309] ? atime_needs_update+0x810/0x810 [ 27.712298][ T309] selinux_d_instantiate+0x27/0x40 [ 27.717441][ T309] security_d_instantiate+0x9e/0xf0 [ 27.722666][ T309] d_splice_alias+0x6d/0x390 [ 27.727254][ T309] kernfs_iop_lookup+0x2c2/0x310 [ 27.732187][ T309] __lookup_slow+0x2b8/0x410 [ 27.736773][ T309] ? lookup_one_len+0x2d0/0x2d0 [ 27.741886][ T309] ? down_read+0xab/0x100 [ 27.746239][ T309] ? handle_dots+0xe10/0xe10 [ 27.750823][ T309] lookup_slow+0x57/0x70 [ 27.755063][ T309] walk_component+0x326/0x460 [ 27.759826][ T309] link_path_walk+0x688/0xde0 [ 27.764512][ T309] ? handle_lookup_down+0x130/0x130 [ 27.769719][ T309] path_openat+0x282/0x2f80 [ 27.774678][ T309] ? __kasan_slab_alloc+0xc9/0xe0 [ 27.779735][ T309] ? __kasan_slab_alloc+0xb7/0xe0 [ 27.784761][ T309] ? slab_post_alloc_hook+0x4f/0x2b0 [ 27.790034][ T309] ? do_sys_openat2+0xeb/0x7f0 [ 27.794789][ T309] ? __x64_sys_openat+0x136/0x160 [ 27.799801][ T309] ? x64_sys_call+0x219/0x9a0 [ 27.804491][ T309] ? do_syscall_64+0x4c/0xa0 [ 27.809088][ T309] ? do_filp_open+0x400/0x400 [ 27.813756][ T309] do_filp_open+0x1df/0x400 [ 27.818257][ T309] ? vfs_tmpfile+0x2d0/0x2d0 [ 27.822850][ T309] do_sys_openat2+0x15e/0x7f0 [ 27.827537][ T309] ? __kasan_check_read+0x11/0x20 [ 27.832555][ T309] ? __fdget+0x15b/0x230 [ 27.836881][ T309] ? __x64_sys_recvmsg+0x216/0x2d0 [ 27.841988][ T309] ? do_sys_open+0xe0/0xe0 [ 27.846413][ T309] ? ___sys_recvmsg+0x5c0/0x5c0 [ 27.851270][ T309] ? __x64_sys_epoll_wait+0x1d4/0x220 [ 27.856653][ T309] __x64_sys_openat+0x136/0x160 [ 27.861495][ T309] x64_sys_call+0x219/0x9a0 [ 27.865992][ T309] do_syscall_64+0x4c/0xa0 [ 27.870399][ T309] ? clear_bhb_loop+0x50/0xa0 [ 27.875067][ T309] ? clear_bhb_loop+0x50/0xa0 [ 27.879788][ T309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 27.885683][ T309] RIP: 0033:0x7f2492fc6407 [ 27.890102][ T309] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 27.909710][ T309] RSP: 002b:00007ffdb9ff1490 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 27.918141][ T309] RAX: ffffffffffffffda RBX: 00007f2492ed8880 RCX: 00007f2492fc6407 [ 27.926110][ T309] RDX: 0000000000080000 RSI: 00007ffdb9ff1610 RDI: ffffffffffffff9c [ 27.934074][ T309] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 27.942143][ T309] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555e3dd737f5 [ 27.950132][ T309] R13: 0000555e3dd737f5 R14: 0000000000000001 R15: 0000555e3dd8e140 [ 27.958123][ T309] [ 27.962739][ T312] FAULT_INJECTION: forcing a failure. [ 27.962739][ T312] name fail_page_alloc, interval 1, probability 10, space 0, times 1 [ 27.976125][ T312] CPU: 0 PID: 312 Comm: syz.1.2 Not tainted syzkaller #0 [ 27.983173][ T312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 27.993222][ T312] Call Trace: [ 27.996495][ T312] [ 27.999437][ T312] __dump_stack+0x21/0x30 [ 28.003758][ T312] dump_stack_lvl+0x110/0x170 [ 28.008426][ T312] ? show_regs_print_info+0x20/0x20 [ 28.013616][ T312] ? prandom_u32+0x24d/0x290 [ 28.018356][ T312] dump_stack+0x15/0x20 [ 28.022511][ T312] should_fail+0x3ab/0x500 [ 28.026933][ T312] should_fail_alloc_page+0x55/0x80 [ 28.032131][ T312] prepare_alloc_pages+0x13f/0x590 [ 28.037238][ T312] ? __alloc_pages_bulk+0xab0/0xab0 [ 28.042464][ T312] ? release_pages+0x1264/0x12c0 [ 28.047407][ T312] __alloc_pages+0x11d/0x460 [ 28.052011][ T312] ? unlock_page_memcg+0x114/0x130 [ 28.057130][ T312] ? prep_new_page+0x110/0x110 [ 28.061976][ T312] ? page_remove_rmap+0xc6d/0xf40 [ 28.066997][ T312] ? page_add_file_rmap+0x700/0x700 [ 28.072209][ T312] ? __kasan_check_write+0x14/0x20 [ 28.077321][ T312] ? _raw_spin_lock+0x94/0xf0 [ 28.081990][ T312] __get_free_pages+0x10/0x30 [ 28.086665][ T312] __tlb_remove_page_size+0x18a/0x310 [ 28.092070][ T312] unmap_page_range+0x1059/0x1e00 [ 28.097135][ T312] ? __count_memcg_events+0xad/0x120 [ 28.102429][ T312] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 28.108772][ T312] ? activate_page+0x500/0x500 [ 28.113539][ T312] ? page_add_new_anon_rmap+0x530/0x530 [ 28.119097][ T312] unmap_vmas+0x26d/0x380 [ 28.123422][ T312] ? unmap_page_range+0x1e00/0x1e00 [ 28.128621][ T312] ? __kasan_check_write+0x14/0x20 [ 28.133732][ T312] ? tlb_gather_mmu_fullmm+0x144/0x1c0 [ 28.139286][ T312] exit_mmap+0x412/0x8b0 [ 28.143536][ T312] ? vm_brk+0x30/0x30 [ 28.147521][ T312] ? mutex_unlock+0x8f/0x230 [ 28.152114][ T312] ? uprobe_clear_state+0x2c6/0x320 [ 28.157308][ T312] __mmput+0x92/0x300 [ 28.161322][ T312] mmput+0x50/0x150 [ 28.165125][ T312] do_exit+0xacc/0x29a0 [ 28.169305][ T312] ? finish_task_switch+0x32a/0x790 [ 28.174512][ T312] ? put_task_struct+0x90/0x90 [ 28.179282][ T312] ? release_firmware_map_entry+0x190/0x190 [ 28.185171][ T312] ? __kasan_check_write+0x14/0x20 [ 28.190369][ T312] ? _raw_spin_lock_irq+0x95/0xf0 [ 28.195398][ T312] do_group_exit+0x149/0x310 [ 28.199991][ T312] ? __kasan_check_write+0x14/0x20 [ 28.205243][ T312] ? recalc_sigpending+0x1c4/0x230 [ 28.210360][ T312] get_signal+0x64f/0x1430 [ 28.214782][ T312] ? usleep_range_state+0x130/0x130 [ 28.219984][ T312] arch_do_signal_or_restart+0xe2/0x1100 [ 28.225632][ T312] ? nanosleep_copyout+0x120/0x120 [ 28.230748][ T312] ? __remove_hrtimer+0x3d0/0x3d0 [ 28.235765][ T312] ? get_timespec64+0x116/0x1b0 [ 28.240609][ T312] ? get_sigframe_size+0x10/0x10 [ 28.245654][ T312] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 28.251307][ T312] exit_to_user_mode_loop+0xa7/0xe0 [ 28.256561][ T312] exit_to_user_mode_prepare+0x87/0xd0 [ 28.262117][ T312] syscall_exit_to_user_mode+0x1a/0x30 [ 28.267577][ T312] do_syscall_64+0x58/0xa0 [ 28.271994][ T312] ? clear_bhb_loop+0x50/0xa0 [ 28.276674][ T312] ? clear_bhb_loop+0x50/0xa0 [ 28.281359][ T312] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 28.287364][ T312] RIP: 0033:0x7f20676bb6ce [ 28.291775][ T312] Code: Unable to access opcode bytes at RIP 0x7f20676bb6a4. [ 28.299134][ T312] RSP: 002b:00007f2066151ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 28.307544][ T312] RAX: 0000000000000000 RBX: 00007f20661546c0 RCX: 00007f20676bb6ce [ 28.315511][ T312] RDX: 00007f2066151f30 RSI: 0000000000000000 RDI: 0000000000000000 [ 28.323473][ T312] RBP: 00007f2066152fd0 R08: 0000000000000000 R09: 0000000000000000 [ 28.331452][ T312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 28.339409][ T312] R13: 0000000800000000 R14: 0000000000000000 R15: 00007f20677af6c7 [ 28.347380][ T312] [ 28.360010][ T305] CPU: 0 PID: 305 Comm: kworker/0:2 Not tainted syzkaller #0 [ 28.367404][ T305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 28.379121][ T305] Workqueue: usb_hub_wq hub_event [ 28.384147][ T305] Call Trace: [ 28.387427][ T305] [ 28.390359][ T305] __dump_stack+0x21/0x30 [ 28.394689][ T305] dump_stack_lvl+0x110/0x170 [ 28.399370][ T305] ? show_regs_print_info+0x20/0x20 [ 28.404562][ T305] ? prandom_u32+0x24d/0x290 [ 28.409143][ T305] dump_stack+0x15/0x20 [ 28.413286][ T305] should_fail+0x3ab/0x500 [ 28.417692][ T305] should_fail_alloc_page+0x55/0x80 [ 28.422899][ T305] prepare_alloc_pages+0x13f/0x590 [ 28.428046][ T305] ? __alloc_pages_bulk+0xab0/0xab0 [ 28.433237][ T305] __alloc_pages+0x11d/0x460 [ 28.437820][ T305] ? prep_new_page+0x110/0x110 [ 28.442676][ T305] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 28.448153][ T305] new_slab+0xa0/0x4d0 [ 28.452218][ T305] ___slab_alloc+0x3ac/0x840 [ 28.456803][ T305] ? __kernfs_new_node+0xe1/0x670 [ 28.461840][ T305] ? __kernfs_new_node+0xe1/0x670 [ 28.467096][ T305] __slab_alloc+0x49/0x90 [ 28.471437][ T305] ? __kernfs_new_node+0xe1/0x670 [ 28.476499][ T305] kmem_cache_alloc+0x138/0x260 [ 28.481351][ T305] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 28.486826][ T305] __kernfs_new_node+0xe1/0x670 [ 28.491692][ T305] ? __kasan_check_write+0x14/0x20 [ 28.496803][ T305] ? __mutex_lock_slowpath+0x10/0x10 [ 28.502084][ T305] ? kernfs_new_node+0x260/0x260 [ 28.507048][ T305] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 28.512849][ T305] ? __kasan_check_write+0x14/0x20 [ 28.517957][ T305] kernfs_new_node+0x150/0x260 [ 28.522725][ T305] kernfs_create_link+0xa4/0x200 [ 28.527659][ T305] sysfs_do_create_link_sd+0x8a/0x110 [ 28.533034][ T305] sysfs_create_link+0x68/0x80 [ 28.537816][ T305] usb_new_device+0xd97/0x1720 [ 28.542578][ T305] ? usb_disconnect+0x870/0x870 [ 28.547440][ T305] ? mutex_unlock+0x8f/0x230 [ 28.552039][ T305] ? __mutex_lock_slowpath+0x10/0x10 [ 28.557321][ T305] hub_event+0x291b/0x43f0 [ 28.561754][ T305] ? hub_post_resume+0x120/0x120 [ 28.566689][ T305] ? __kasan_check_write+0x14/0x20 [ 28.571797][ T305] ? _raw_spin_lock_irq+0x95/0xf0 [ 28.577015][ T305] ? _raw_spin_lock_irqsave+0x130/0x130 [ 28.582562][ T305] process_one_work+0x6c8/0xbb0 [ 28.587408][ T305] worker_thread+0xaa0/0x1250 [ 28.592087][ T305] ? __kasan_check_read+0x11/0x20 [ 28.597197][ T305] kthread+0x3f5/0x4f0 [ 28.601277][ T305] ? worker_clr_flags+0x190/0x190 [ 28.606316][ T305] ? kthread_blkcg+0xd0/0xd0 [ 28.610900][ T305] ret_from_fork+0x1f/0x30 [ 28.615319][ T305] [ 28.620131][ T90] CPU: 0 PID: 90 Comm: klogd Not tainted syzkaller #0 [ 28.626904][ T90] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 28.636955][ T90] Call Trace: [ 28.640228][ T90] [ 28.643157][ T90] __dump_stack+0x21/0x30 [ 28.647614][ T90] dump_stack_lvl+0x110/0x170 [ 28.652293][ T90] ? show_regs_print_info+0x20/0x20 [ 28.657588][ T90] ? prandom_u32+0x24d/0x290 [ 28.662194][ T90] dump_stack+0x15/0x20 [ 28.666350][ T90] should_fail+0x3ab/0x500 [ 28.670763][ T90] should_fail_alloc_page+0x55/0x80 [ 28.675963][ T90] prepare_alloc_pages+0x13f/0x590 [ 28.681355][ T90] ? __alloc_pages_bulk+0xab0/0xab0 [ 28.686557][ T90] __alloc_pages+0x11d/0x460 [ 28.691163][ T90] ? do_syscall_64+0x4c/0xa0 [ 28.695745][ T90] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 28.701806][ T90] ? prep_new_page+0x110/0x110 [ 28.706569][ T90] new_slab+0xa0/0x4d0 [ 28.710635][ T90] ___slab_alloc+0x3ac/0x840 [ 28.715224][ T90] ? alloc_skb_with_frags+0xa8/0x620 [ 28.720508][ T90] ? alloc_skb_with_frags+0xa8/0x620 [ 28.725796][ T90] ? alloc_skb_with_frags+0xa8/0x620 [ 28.732047][ T90] __slab_alloc+0x49/0x90 [ 28.736388][ T90] ? alloc_skb_with_frags+0xa8/0x620 [ 28.741661][ T90] __kmalloc_track_caller+0x169/0x2c0 [ 28.747056][ T90] ? alloc_skb_with_frags+0xa8/0x620 [ 28.752346][ T90] ? alloc_skb_with_frags+0xa8/0x620 [ 28.757629][ T90] __alloc_skb+0x210/0x730 [ 28.762069][ T90] alloc_skb_with_frags+0xa8/0x620 [ 28.767173][ T90] ? memcpy+0x56/0x70 [ 28.771171][ T90] sock_alloc_send_pskb+0x87f/0x9a0 [ 28.776361][ T90] ? sock_kzfree_s+0x60/0x60 [ 28.780975][ T90] ? __kasan_check_write+0x14/0x20 [ 28.786125][ T90] ? _raw_spin_lock+0x94/0xf0 [ 28.790812][ T90] ? _raw_spin_trylock_bh+0x150/0x150 [ 28.796203][ T90] unix_dgram_sendmsg+0x6f3/0x19b0 [ 28.801323][ T90] ? unix_dgram_poll+0x6c0/0x6c0 [ 28.806263][ T90] ? security_socket_sendmsg+0x82/0xa0 [ 28.811713][ T90] __sys_sendto+0x46d/0x620 [ 28.816209][ T90] ? __ia32_sys_getpeername+0x90/0x90 [ 28.821574][ T90] ? sched_clock+0x9/0x10 [ 28.825904][ T90] ? sched_clock_cpu+0x18/0x3d0 [ 28.830762][ T90] ? __kasan_check_write+0x14/0x20 [ 28.835876][ T90] __x64_sys_sendto+0xe5/0x100 [ 28.840637][ T90] x64_sys_call+0x178/0x9a0 [ 28.845151][ T90] do_syscall_64+0x4c/0xa0 [ 28.849561][ T90] ? clear_bhb_loop+0x50/0xa0 [ 28.854234][ T90] ? clear_bhb_loop+0x50/0xa0 [ 28.858925][ T90] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 28.864814][ T90] RIP: 0033:0x7f042ccbd407 [ 28.869223][ T90] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 28.888821][ T90] RSP: 002b:00007ffeb0c89420 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 28.897225][ T90] RAX: ffffffffffffffda RBX: 00007f042cb6dc80 RCX: 00007f042ccbd407 [ 28.905197][ T90] RDX: 0000000000000074 RSI: 00007ffeb0c89560 RDI: 0000000000000003 [ 28.913164][ T90] RBP: 00007ffeb0c89990 R08: 0000000000000000 R09: 0000000000000000 [ 28.921149][ T90] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffeb0c899a8 [ 28.929117][ T90] R13: 00007ffeb0c89560 R14: 0000000000000059 R15: 00007ffeb0c89560 [ 28.937106][ T90] [ 28.958443][ T306] usb 1-1: Manufacturer: syz [ 28.963056][ T306] usb 1-1: SerialNumber: syz [ 28.971882][ T351] CPU: 0 PID: 351 Comm: syz.4.18 Not tainted syzkaller #0 [ 28.979008][ T351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 28.992256][ T351] Call Trace: [ 28.996002][ T351] [ 28.999606][ T351] __dump_stack+0x21/0x30 [ 29.006661][ T351] dump_stack_lvl+0x110/0x170 [ 29.011588][ T351] ? show_regs_print_info+0x20/0x20 [ 29.016787][ T351] ? prandom_u32+0x24d/0x290 [ 29.021394][ T351] dump_stack+0x15/0x20 [ 29.025549][ T351] should_fail+0x3ab/0x500 [ 29.029985][ T351] should_fail_alloc_page+0x55/0x80 [ 29.035195][ T351] prepare_alloc_pages+0x13f/0x590 [ 29.040318][ T351] ? __alloc_pages_bulk+0xab0/0xab0 [ 29.045512][ T351] __alloc_pages+0x11d/0x460 [ 29.050097][ T351] ? prep_new_page+0x110/0x110 [ 29.054856][ T351] ? vm_normal_page+0x1dd/0x1f0 [ 29.059702][ T351] ? __pte_map_lock+0x4ea/0x580 [ 29.064580][ T351] handle_pte_fault+0xee5/0x2770 [ 29.069510][ T351] ? _raw_spin_unlock+0x4d/0x70 [ 29.074381][ T351] ? fault_around_bytes_set+0xc0/0xc0 [ 29.079780][ T351] ? memcpy+0x56/0x70 [ 29.083764][ T351] do_handle_mm_fault+0x1b3b/0x1e30 [ 29.088953][ T351] ? numa_migrate_prep+0xd0/0xd0 [ 29.093893][ T351] ? access_error+0x152/0x260 [ 29.098560][ T351] do_user_addr_fault+0x5c5/0x11c0 [ 29.103667][ T351] ? do_kern_addr_fault+0x80/0x80 [ 29.108683][ T351] ? get_timespec64+0x116/0x1b0 [ 29.113546][ T351] ? debug_smp_processor_id+0x17/0x20 [ 29.118907][ T351] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 29.124971][ T351] ? exit_to_user_mode_prepare+0x39/0xd0 [ 29.130600][ T351] exc_page_fault+0x51/0xb0 [ 29.135096][ T351] asm_exc_page_fault+0x27/0x30 [ 29.139947][ T351] RIP: 0033:0x7f4d219be7f6 [ 29.144358][ T351] Code: 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b <41> 88 3c 10 31 c0 49 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 [ 29.163976][ T351] RSP: 002b:00007fff87ba3e38 EFLAGS: 00010246 [ 29.170037][ T351] RAX: 0000000081321f91 RBX: ffffffff81321f91 RCX: 0000000000000000 [ 29.178017][ T351] RDX: 0000000000001f91 RSI: ffffffff81321f91 RDI: 0000000000000000 [ 29.185994][ T351] RBP: 0000000000000000 R08: 00007f4d21d7d000 R09: 00007f4d21d7f000 [ 29.193957][ T351] R10: 0000000081321f95 R11: 0000000000000000 R12: 00007f4d21d93038 [ 29.201911][ T351] R13: 0000000000000004 R14: ffffffff81321062 R15: 00007f4d228c2720 [ 29.209869][ T351] ? do_user_addr_fault+0x1f2/0x11c0 [ 29.215151][ T351] ? do_user_addr_fault+0x1121/0x11c0 [ 29.220531][ T351] ? do_user_addr_fault+0x1121/0x11c0 [ 29.225897][ T351] [ 29.234713][ T324] usb 3-1: USB disconnect, device number 2 [ 29.243466][ T306] usb 1-1: can't set config #1, error -71 SYZFAIL: pselect failed (errno 12: Cannot allocate memory) [ 29.256890][ T306] usb 1-1: USB disconnect, device number 2 [ 29.274638][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 29.274649][ T30] audit: type=1400 audit(1785157411.799:152): avc: denied { remove_name } for pid=286 comm="syz-executor" name="memory.events" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.384201][ T30] audit: type=1400 audit(1785157411.829:153): avc: denied { unlink } for pid=286 comm="syz-executor" name="memory.events" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.453434][ T30] audit: type=1400 audit(1785157411.829:154): avc: denied { unlink } for pid=286 comm="syz-executor" name="file3" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.492107][ T30] audit: type=1400 audit(1785157411.829:155): avc: denied { unlink } for pid=286 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 29.539363][ T30] audit: type=1400 audit(1785157411.829:156): avc: denied { rmdir } for pid=286 comm="syz-executor" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.572936][ T351] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 29.590653][ T30] audit: type=1400 audit(1785157411.829:157): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 29.623637][ T30] audit: type=1400 audit(1785157411.829:158): avc: denied { rmdir } for pid=286 comm="syz-executor" name="debug" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 29.647130][ T324] usb 2-1: USB disconnect, device number 2 [ 29.664020][ T351] bridge0: port 3(syz_tun) entered disabled state [ 29.670546][ T30] audit: type=1400 audit(1785157411.849:159): avc: denied { write } for pid=277 comm="syz-executor" path="pipe:[14051]" dev="pipefs" ino=14051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 29.694723][ T351] device syz_tun left promiscuous mode [ 29.700189][ T351] bridge0: port 3(syz_tun) entered disabled state [ 29.935108][ T320] device bridge_slave_1 left promiscuous mode [ 29.941372][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.949006][ T320] device bridge_slave_0 left promiscuous mode [ 29.955495][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.963289][ T320] device bridge_slave_1 left promiscuous mode [ 29.969596][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.977062][ T320] device bridge_slave_0 left promiscuous mode [ 29.983155][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.991892][ T320] device veth1_macvtap left promiscuous mode [ 29.997939][ T320] device veth0_vlan left promiscuous mode [ 30.004002][ T320] device veth1_macvtap left promiscuous mode [ 30.009997][ T320] device veth0_vlan left promiscuous mode [ 30.704361][ T320] device bridge_slave_1 left promiscuous mode [ 30.710484][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.718053][ T320] device bridge_slave_0 left promiscuous mode [ 30.724233][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.731887][ T320] device bridge_slave_1 left promiscuous mode [ 30.738183][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.745681][ T320] device bridge_slave_0 left promiscuous mode [ 30.751802][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.759932][ T320] device bridge_slave_1 left promiscuous mode [ 30.766093][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.773674][ T320] device bridge_slave_0 left promiscuous mode [ 30.779809][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.788155][ T320] device veth1_macvtap left promiscuous mode [ 30.794234][ T320] device veth0_vlan left promiscuous mode [ 30.800057][ T320] device veth1_macvtap left promiscuous mode [ 30.806225][ T320] device veth0_vlan left promiscuous mode [ 30.812040][ T320] device veth1_macvtap left promiscuous mode [ 30.818203][ T320] device veth0_vlan left promiscuous mode