last executing test programs: 4.960134499s ago: executing program 1 (id=55): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="64000000100001060000000a00000000000000003f000000000000000000000010000300766574683000000000000000100012000800010076657468180002000a000100000002000000000d05e2cf6c50a3070010000300766574683100000000000000", 0x64}], 0x1}, 0x0) 4.817695473s ago: executing program 1 (id=56): socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) r2 = socket$inet6(0xa, 0x3, 0xff) epoll_create1(0xd3015ecdf910ee12) ptrace(0x10, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x5) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="a8000000210001000000000000000000fe8000000000000000000000000000aaac1e01010000000000000000000000004e200000000200000a0000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000ff020000000000000000000000000001ff0200000000000000000000000000013c040000030000000a000200050019003c000000"], 0xa8}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(0x0, 0x4, 0x2, 0x0, &(0x7f0000048000), 0xfffffffc) futex(&(0x7f0000000680)=0x1, 0xa, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x0) rt_sigtimedwait(&(0x7f0000000540)={[0xc05]}, &(0x7f0000000580), &(0x7f0000000600)={0x0, 0x3938700}, 0x8) setrlimit(0x0, &(0x7f0000000040)={0x4848, 0xfffffffffffff002}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) mlock2(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000009000/0x3000)=nil, 0x3000) ioctl$NILFS_IOCTL_SYNC(r1, 0x80086e8a, &(0x7f0000000300)) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x800, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1d43}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0xa214}, 0x1c) 4.767178624s ago: executing program 1 (id=57): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff88a84f028100400086dd63acca10001000ff000000000000000000000000000000ff2001000000000000000000000000000167010103"], 0x4e) 4.708928825s ago: executing program 1 (id=58): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c0004003a2e5f00005f2e2d0c0003"], 0x30}, 0x1, 0x0, 0x0, 0xc091}, 0x4004014) 4.638384987s ago: executing program 1 (id=59): ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000001c0)={'vlan0\x00'}) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.01316422s ago: executing program 1 (id=80): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r4, 0x4004743c, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12015000000000101c1b061c400001020301030709210300f4012289010905813f0002030402090502034000e50401"], &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0xb, 0x3, 0x40, 0x10, 0xff}, 0x23, &(0x7f0000000100)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "bb6a515d27dc76b3360ec2dd3c92b1d5"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4, 0x5, 0x3}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x400a}}]}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000030007000000000c00018008000100", @ANYRES32=r3, @ANYBLOB], 0x20}}, 0x0) 1.948671028s ago: executing program 0 (id=98): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="38010000100001000000000000000000fc010000000000fffffff00000000001fc0100000000000000000000000000014e2000004e2000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000032320004d26c000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000300"], 0x138}}, 0x0) 1.925820949s ago: executing program 0 (id=101): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff00000100fd00", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x80) 1.862901411s ago: executing program 0 (id=102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r3, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r4 = socket$nl_generic(0x10, 0x3, 0x10) writev(r4, &(0x7f0000000200), 0x20) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01070000000081000000670004000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r11 = syz_ublk_setup_io_uring(0x245c, &(0x7f0000000180)={0x0, 0xd66e, 0x2, 0x1, 0x121, 0x0, r5}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_PBUF_RING(0x0, 0x4, 0x1, 0x80010, r11, 0x873073c0) r12 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r12, &(0x7f0000000500)={0x2020}, 0x2020) 1.826115422s ago: executing program 0 (id=105): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) write(r0, &(0x7f00000006c0)="2a756205b976743a", 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r2 = dup2(r1, r1) write$FUSE_NOTIFY_INVAL_INODE(r2, 0x0, 0x0) 1.717383035s ago: executing program 0 (id=108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c000400402e5f00005f2e2d0c0003"], 0x30}, 0x1, 0x0, 0x0, 0xc091}, 0x4004014) 1.5069821s ago: executing program 0 (id=111): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) unshare(0x60000600) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @broadcast}}}}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f900655e00000000ae00002d000000000000ea08000f0001000000", 0x24) 1.50603613s ago: executing program 32 (id=111): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) unshare(0x60000600) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @broadcast}}}}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x804, 0x0, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f900655e00000000ae00002d000000000000ea08000f0001000000", 0x24) 546.635226ms ago: executing program 4 (id=126): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4098, 0x1002}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000040)=""/31, 0x1f}, {&(0x7f0000000340)=""/99, 0x63}, {&(0x7f0000000000)=""/64, 0x40}, {&(0x7f00000035c0)=""/4097, 0x1001}], 0x6}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x5}], 0x3, 0x40010120, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1800000, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xf}}]}}) (async, rerun: 64) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (rerun: 64) keyctl$read(0xb, r2, &(0x7f00000000c0)=""/40, 0x28) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004200)={0x2020}, 0x2020) 519.072056ms ago: executing program 3 (id=129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000100)=@ethtool_eeprom={0xb, 0xffffffff, 0x4}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 462.702718ms ago: executing program 4 (id=130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff88a84f028100400086dd63acca10001000ff000000000000000000000000000000002001003800000000000000000000000167010103"], 0x4e) 374.11363ms ago: executing program 4 (id=135): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648009978b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 348.074101ms ago: executing program 4 (id=137): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x4004014) 340.053561ms ago: executing program 3 (id=138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a0080"], 0x110) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x60d}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000000c0)={"23cb620836577e9fd00fa1696a2d57a4", 0x0, r4, {0x1, 0x9}, {0x7, 0x1}, 0x4e5c7bad, [0xffffffffffffffff, 0x1, 0x4, 0xd, 0xfffffffffffffffe, 0x0, 0x7, 0x8, 0x2, 0x100000000, 0xffffffff, 0x6, 0x9, 0x9, 0xa2ac]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 304.674612ms ago: executing program 4 (id=139): r0 = socket$netlink(0x10, 0x3, 0xa) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff0100320001000000000007fdd411efc408000400000000000000000000008700"/57, 0x39}], 0x1) 283.356802ms ago: executing program 4 (id=141): r0 = socket$xdp(0x2c, 0x3, 0x0) setrlimit(0x8, &(0x7f0000000140)={0x0, 0xffffffffffffffff}) setuid(0xee01) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800, 0x0, 0x1}, 0x20) syz_usb_connect$uac2(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100300000040532b310040000102030109026e0003010d0067080b0002010020ff09040000000101200009240100800c0e000005240b04000904010000010220000904010101010220000905010920000308fb082501010305f9ff09040200000102200009040001"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, [{0x7b, &(0x7f0000000000)=@string={0x7b, 0x3, "0b8913324f0a0ccfdfd17fe1841a54350f86196f8059940fe3625800a3b2badc19d37ae4041aaab7c3bea1827b27be6d2fb35f0c2971c28b349575befb1359fcfc7502fd96c557a97d3aac35fbdbf2af81752869e4e05ac846cdd40545c7598e02cad4f7eca7edd087c8def5da80c6ec16ac4122d41b8f586f"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x40f}}, {0xb0, &(0x7f0000000180)=@string={0xb0, 0x3, "72f05da65d7240c3cea5d650bb5374bac49a40cfa11362765306fb92398f88e89f3d27c2a8362c4ba0bd38c67b8108aa55be58ad5ff665b2ed5e7b5783d2e3e3b99c19b75a7ab317f62d3d3bc37928360e3018db595ab56069edc359ff4a7acb03dea7d13fa1507ddd7587dc094876e03a4cbd9e94531e25de48d5d4839b676839a9febfa0b64c4a164c28c543be032cfed66f3cbe7da805344dc2f9a255e950e40301bc11692592c185aa955e87"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x80c}}, {0xc2, &(0x7f00000002c0)=@string={0xc2, 0x3, "70f7022b3dce6f1ada3a25d2dc133db4947fea68307f4b4ce1075923e068495ce5f02a5c2f0148ed13f6bb9f4a7f074d019d192054630db0f14610c4219a8d95510e2dee4cf529286e18460c69f15bf18640e3a257628acb02532c424b8eeb6fa066ea7b02b79d8502d13718e8ed04d868045ee209a4ef4555a33caf44ce3481056a6d6c1a656249dca6987307cb85607de2a8a5af2d6c28e5078bcc942e6998bce348a77d870ded5f8f47f904abb450ea07f6cf00a5305d3e0e90f3b33b2b7a"}}, {0x1c, &(0x7f00000003c0)=@string={0x1c, 0x3, "e25d97f02f40fff701000000205a56d17d76bae2ea4f571b7a97"}}, {0x4c, &(0x7f0000000400)=@string={0x4c, 0x3, "32439509f696ab4644eb45ac7e568bfaffc6307e8b2ff9599d5228997d67034016dd93055ebd45f87c4c8a083a1547efc3c9a25a82e5c339042c1d498473516949b49aa082f08d729361"}}]}) 234.558404ms ago: executing program 3 (id=144): ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0x0}) ioprio_set$pid(0x1, r0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x98, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x98}, 0x1, 0x0, 0x0, 0x4005}, 0x80) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0xff5b}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 210.678965ms ago: executing program 3 (id=146): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="64000000100001060000002400000000000000003f000000000000000000000010000300766574683000000000000000100012000800010076657468180002000a000100000002000000000d05e2cf6c50a3070010000300766574683100000000000000", 0x64}], 0x1}, 0x0) 120.758207ms ago: executing program 3 (id=150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c0004002d5f5f00005f2e2d0c0003"], 0x30}, 0x1, 0x0, 0x0, 0xc091}, 0x4004014) 82.746978ms ago: executing program 3 (id=152): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x4d802, 0x0) write(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004025098888000000000001090224"], 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) socket$vsock_stream(0x28, 0x1, 0x0) syz_socket_connect_nvme_tcp() accept4$nfc_llcp(r2, &(0x7f0000000180), &(0x7f0000000300)=0x60, 0x800) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0xfffffffc, 0xb}, 0x8) close(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r4 = dup2(r3, r3) write$FUSE_NOTIFY_INVAL_INODE(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x44001) 22.94723ms ago: executing program 2 (id=153): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff00000100fdff", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x80) 22.686579ms ago: executing program 2 (id=154): r0 = socket$netlink(0x10, 0x3, 0x7) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 22.61699ms ago: executing program 2 (id=155): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="38010000100001000000000000000000fc010000000000000000000000000101fc0100000000000000000000000000014e2000004e2000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000032320004d26c000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000300"], 0x138}}, 0x0) 22.581099ms ago: executing program 2 (id=156): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc091}, 0x4004014) 15.17982ms ago: executing program 2 (id=157): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0xeeee8000, 0xf000, 0x7, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x17d004, 0xd, 0x0, 0x0, 0x7, 0x7, 0x0, 0x4, 0x1, 0x4}, {0x118004, 0xffff1000, 0x18, 0xe, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x6}, {0xa000, 0x2000, 0xa, 0xff, 0x80, 0x5, 0x3, 0x0, 0x0, 0x0, 0x2}, {0x1000, 0x0, 0xd, 0x8, 0x70, 0x80, 0x5c, 0x0, 0xfd, 0x1c, 0x7, 0x88}, {0x100026fff, 0xeeef0000, 0x8, 0x4, 0xcf, 0x8, 0x0, 0x0, 0x6, 0xfc, 0x86, 0x8}, {0xeeee8000, 0x10000, 0xf, 0x0, 0x5, 0x0, 0x0, 0x81, 0x0, 0x4}, {0xd000, 0x41000, 0x3, 0x82, 0xfc, 0x10, 0x4, 0xe}, {0x41000, 0x800}, {0x1, 0xfffe}, 0x40000010, 0x0, 0x26000, 0x10, 0xffffffffffffffd, 0x0, 0x900, [0x0, 0x0, 0x2, 0x40000000000004]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000001000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b"], 0x23c}}, 0x4080) 0s ago: executing program 2 (id=158): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f00000000c0)={0x6, 0x8c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) rmdir(&(0x7f0000000600)='./config/usb_gadget/g1\x00') ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000080)) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 15.433734][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 15.433752][ T36] audit: type=1400 audit(1787965661.440:59): avc: denied { transition } for pid=233 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.438285][ T36] audit: type=1400 audit(1787965661.440:60): avc: denied { noatsecure } for pid=233 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.442477][ T36] audit: type=1400 audit(1787965661.450:61): avc: denied { write } for pid=233 comm="sh" path="pipe:[2521]" dev="pipefs" ino=2521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.445935][ T36] audit: type=1400 audit(1787965661.450:62): avc: denied { rlimitinh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.448841][ T36] audit: type=1400 audit(1787965661.450:63): avc: denied { siginh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. [ 23.793624][ T36] audit: type=1400 audit(1787965669.800:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.797420][ T287] cgroup: Unknown subsys name 'net' [ 23.817452][ T36] audit: type=1400 audit(1787965669.800:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.846030][ T36] audit: type=1400 audit(1787965669.830:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.846636][ T287] cgroup: Unknown subsys name 'devices' [ 23.973271][ T287] cgroup: Unknown subsys name 'hugetlb' [ 23.978953][ T287] cgroup: Unknown subsys name 'rlimit' [ 24.093781][ T36] audit: type=1400 audit(1787965670.100:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.117205][ T36] audit: type=1400 audit(1787965670.100:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.142384][ T36] audit: type=1400 audit(1787965670.100:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.161500][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.174349][ T36] audit: type=1400 audit(1787965670.180:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.199899][ T36] audit: type=1400 audit(1787965670.180:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.213219][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.226317][ T36] audit: type=1400 audit(1787965670.220:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.260184][ T36] audit: type=1400 audit(1787965670.220:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.239136][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.246276][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.253524][ T294] bridge_slave_0: entered allmulticast mode [ 25.260106][ T294] bridge_slave_0: entered promiscuous mode [ 25.267038][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.274199][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.281688][ T294] bridge_slave_1: entered allmulticast mode [ 25.288019][ T294] bridge_slave_1: entered promiscuous mode [ 25.342738][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.350098][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.357236][ T295] bridge_slave_0: entered allmulticast mode [ 25.363592][ T295] bridge_slave_0: entered promiscuous mode [ 25.369965][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.377228][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.384521][ T296] bridge_slave_0: entered allmulticast mode [ 25.390872][ T296] bridge_slave_0: entered promiscuous mode [ 25.397396][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.404525][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.411691][ T296] bridge_slave_1: entered allmulticast mode [ 25.418072][ T296] bridge_slave_1: entered promiscuous mode [ 25.430109][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.437277][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.444658][ T295] bridge_slave_1: entered allmulticast mode [ 25.451112][ T295] bridge_slave_1: entered promiscuous mode [ 25.499133][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.506436][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.513633][ T297] bridge_slave_0: entered allmulticast mode [ 25.519916][ T297] bridge_slave_0: entered promiscuous mode [ 25.529556][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.536696][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.545483][ T297] bridge_slave_1: entered allmulticast mode [ 25.551820][ T297] bridge_slave_1: entered promiscuous mode [ 25.708924][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.716229][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.725293][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.733323][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.757069][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.764383][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.771903][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.779141][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.792113][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.800266][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.808396][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.815530][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.823592][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.831298][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.838661][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.845948][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.853429][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.860730][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.881838][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.888949][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.897171][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.904254][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.944519][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.951657][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.960323][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.967394][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.975006][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.982154][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.001873][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.008931][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.045263][ T294] veth0_vlan: entered promiscuous mode [ 26.059067][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.066250][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.074178][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.081257][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.101662][ T294] veth1_macvtap: entered promiscuous mode [ 26.120358][ T295] veth0_vlan: entered promiscuous mode [ 26.141433][ T297] veth0_vlan: entered promiscuous mode [ 26.150095][ T295] veth1_macvtap: entered promiscuous mode [ 26.182067][ T296] veth0_vlan: entered promiscuous mode [ 26.189144][ T297] veth1_macvtap: entered promiscuous mode [ 26.220218][ T296] veth1_macvtap: entered promiscuous mode [ 26.228586][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.301848][ T316] tipc: Started in network mode [ 26.307725][ T316] tipc: Node identity , cluster identity 4711 [ 26.317697][ T319] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.426646][ T333] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=333 comm=syz.3.10 [ 26.473200][ T339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 26.522010][ T344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14'. [ 26.533754][ T344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 26.545204][ T347] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.620359][ T65] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.660650][ T312] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.668850][ T353] netlink: 'syz.3.17': attribute type 12 has an invalid length. [ 26.720164][ T359] netlink: 'syz.0.20': attribute type 7 has an invalid length. [ 26.770608][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 26.777082][ T65] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.788074][ T65] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 26.798919][ T65] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 26.808796][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.817381][ T312] usb 3-1: Using ep0 maxpacket: 16 [ 26.824473][ T65] usb 2-1: Product: syz [ 26.828770][ T65] usb 2-1: Manufacturer: syz [ 26.834234][ T65] usb 2-1: SerialNumber: syz [ 26.840742][ T312] usb 3-1: New USB device found, idVendor=000f, idProduct=0000, bcdDevice= 0.40 [ 26.850430][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.858474][ T312] usb 3-1: Product: syz [ 26.864968][ T312] usb 3-1: Manufacturer: syz [ 26.878595][ T312] usb 3-1: SerialNumber: syz [ 26.935448][ T370] tipc: Started in network mode [ 26.941566][ T370] tipc: Node identity , cluster identity 4711 [ 27.053039][ T12] tipc: Subscription rejected, illegal request [ 27.080264][ T65] usb 2-1: 0:2 : does not exist [ 27.104968][ T65] usb 2-1: USB disconnect, device number 2 [ 27.297726][ T330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.307136][ T330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.516510][ T312] usb 3-1: MIDIStreaming interface descriptor not found [ 27.527698][ T312] usb 3-1: USB disconnect, device number 2 [ 27.552535][ T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.593370][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 27.792232][ T384] batadv_slave_0: entered promiscuous mode [ 27.935098][ T404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.35'. [ 27.944027][ T404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 27.998093][ T406] tipc: Started in network mode [ 28.003057][ T406] tipc: Node identity , cluster identity 4711 [ 28.043486][ T410] ======================================================= [ 28.043486][ T410] WARNING: The mand mount option has been deprecated and [ 28.043486][ T410] and is ignored by this kernel. Remove the mand [ 28.043486][ T410] option from the mount to silence this warning. [ 28.043486][ T410] ======================================================= [ 28.096175][ T414] FAULT_INJECTION: forcing a failure. [ 28.096175][ T414] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 28.109552][ T414] CPU: 1 UID: 0 PID: 414 Comm: syz.3.40 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 28.109586][ T414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.109610][ T414] Call Trace: [ 28.109618][ T414] [ 28.109627][ T414] __dump_stack+0x21/0x30 [ 28.109671][ T414] dump_stack_lvl+0x140/0x1c0 [ 28.109704][ T414] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.109736][ T414] ? check_stack_object+0x138/0x150 [ 28.109762][ T414] dump_stack+0x19/0x20 [ 28.109792][ T414] should_fail_ex+0x3c2/0x510 [ 28.109822][ T414] should_fail+0xf/0x20 [ 28.109846][ T414] should_fail_usercopy+0x1e/0x30 [ 28.109874][ T414] _copy_to_user+0x24/0xa0 [ 28.109906][ T414] simple_read_from_buffer+0xed/0x160 [ 28.109940][ T414] proc_fail_nth_read+0x1aa/0x220 [ 28.109974][ T414] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 28.110008][ T414] ? bpf_lsm_file_permission+0xd/0x20 [ 28.110038][ T414] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 28.110071][ T414] vfs_read+0x288/0xc70 [ 28.110095][ T414] ? __cfi_vfs_read+0x10/0x10 [ 28.110116][ T414] ? __kasan_check_write+0x18/0x20 [ 28.110137][ T414] ? mutex_lock+0x97/0x1d0 [ 28.110160][ T414] ? __cfi_mutex_lock+0x10/0x10 [ 28.110191][ T414] ksys_read+0x145/0x260 [ 28.110213][ T414] ? __cfi_ksys_read+0x10/0x10 [ 28.110235][ T414] ? fput+0x1a4/0x230 [ 28.110265][ T414] ? __kasan_check_read+0x15/0x20 [ 28.110287][ T414] __x64_sys_read+0x7f/0x90 [ 28.110311][ T414] x64_sys_call+0x2638/0x2ee0 [ 28.110332][ T414] do_syscall_64+0x57/0xf0 [ 28.110375][ T414] ? clear_bhb_loop+0x50/0xa0 [ 28.110402][ T414] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.110427][ T414] RIP: 0033:0x7ff207b5e98e [ 28.110453][ T414] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 28.110471][ T414] RSP: 002b:00007ff208a2ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 28.110499][ T414] RAX: ffffffffffffffda RBX: 00007ff208a306c0 RCX: 00007ff207b5e98e [ 28.110517][ T414] RDX: 000000000000000f RSI: 00007ff208a300a0 RDI: 0000000000000003 [ 28.110532][ T414] RBP: 00007ff208a30090 R08: 0000000000000000 R09: 0000000000000000 [ 28.110547][ T414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 28.110561][ T414] R13: 00007ff207e26038 R14: 00007ff207e25fa0 R15: 00007ffc23206708 [ 28.110581][ T414] [ 28.170883][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.295289][ T419] Bluetooth: ISO socket layer initialized [ 28.313335][ T420] netlink: 32 bytes leftover after parsing attributes in process `syz.3.43'. [ 28.476385][ T429] rust_binder: 425:429 FDA parent offset not aligned correctly [ 28.484383][ T429] rust_binder: 425:429 error while translating object: EINVAL [ 28.492349][ T429] rust_binder: Failure in copy_transaction_data: EINVAL [ 28.492413][ T429] rust_binder: 425:429 transaction call to 425:0 failed EINVAL, code 0 size 96-24 [ 28.530319][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 28.537870][ T10] usb 1-1: config 1 interface 0 altsetting 64 bulk endpoint 0x1 has invalid maxpacket 64 [ 28.547964][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 28.556605][ T10] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 28.565875][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.571670][ T381] batadv_slave_0: left promiscuous mode [ 28.574202][ T10] usb 1-1: Product: syz [ 28.584323][ T10] usb 1-1: Manufacturer: syz [ 28.589317][ T10] usb 1-1: SerialNumber: syz [ 28.599484][ T398] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 28.620903][ T432] rust_binder: 425: undelivered TRANSACTION_ERROR: 29201 [ 28.692059][ T437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 28.740285][ T310] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.793567][ T449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.55'. [ 28.804796][ T449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 28.816431][ T10] usb 1-1: USB disconnect, device number 2 [ 28.885484][ T36] kauditd_printk_skb: 102 callbacks suppressed [ 28.885504][ T36] audit: type=1400 audit(1787965674.890:176): avc: denied { create } for pid=450 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.900396][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 28.918930][ T310] usb 3-1: New USB device found, idVendor=000f, idProduct=0000, bcdDevice= 0.40 [ 28.928414][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.936739][ T310] usb 3-1: Product: syz [ 28.940983][ T310] usb 3-1: Manufacturer: syz [ 28.945687][ T310] usb 3-1: SerialNumber: syz [ 28.952552][ T36] audit: type=1400 audit(1787965674.960:177): avc: denied { ioctl } for pid=450 comm="syz.1.56" path="socket:[4716]" dev="sockfs" ino=4716 ioctlcmd=0x6e8a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.046091][ T456] tipc: Started in network mode [ 29.051246][ T456] tipc: Node identity , cluster identity 4711 [ 29.310281][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.354985][ T431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.364654][ T431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.384977][ T36] audit: type=1400 audit(1787965675.390:178): avc: denied { read } for pid=463 comm="syz.0.62" dev="nsfs" ino=4026532304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.406612][ T36] audit: type=1400 audit(1787965675.390:179): avc: denied { open } for pid=463 comm="syz.0.62" path="net:[4026532304]" dev="nsfs" ino=4026532304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.430796][ T36] audit: type=1400 audit(1787965675.410:180): avc: denied { read write } for pid=463 comm="syz.0.62" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.454711][ T36] audit: type=1400 audit(1787965675.420:181): avc: denied { open } for pid=463 comm="syz.0.62" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.481901][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 29.494560][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 29.516358][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.529010][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.542866][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 29.556472][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 29.565977][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.574820][ T310] usb 3-1: MIDIStreaming interface descriptor not found [ 29.590047][ T310] usb 3-1: USB disconnect, device number 3 [ 29.600583][ T10] usb 2-1: config 0 descriptor?? [ 29.617535][ T371] udevd[371]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.645594][ T36] audit: type=1400 audit(1787965675.650:182): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 29.704580][ T477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.68'. [ 29.766566][ T479] kvm: MWAIT instruction emulated as NOP! [ 29.925412][ T36] audit: type=1400 audit(1787965675.930:183): avc: denied { write } for pid=484 comm="syz.0.71" name="route" dev="proc" ino=4026532335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 30.070695][ T380] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.212234][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 30.218915][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 30.229947][ T494] tipc: Started in network mode [ 30.235513][ T494] tipc: Node identity , cluster identity 4711 [ 30.242296][ T10] usb 2-1: USB disconnect, device number 3 [ 30.244821][ T380] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.274873][ T380] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 30.298745][ T380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.310414][ T380] usb 4-1: config 0 descriptor?? [ 30.319447][ T36] audit: type=1400 audit(1787965676.320:184): avc: denied { read } for pid=495 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.348099][ T380] usb 4-1: bad CDC descriptors [ 30.467574][ T500] netlink: 'syz.2.77': attribute type 12 has an invalid length. [ 30.532875][ T310] usb 4-1: USB disconnect, device number 2 [ 30.601142][ T36] audit: type=1400 audit(1787965676.610:185): avc: denied { append } for pid=503 comm="syz.2.79" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 30.756225][ T509] syz.1.80 (509) used obsolete PPPIOCDETACH ioctl [ 31.010267][ T310] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.040273][ T380] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.170242][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 31.176899][ T310] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 31.184560][ T310] usb 2-1: can't read configurations, error -61 [ 31.211793][ T380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.223123][ T380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.233853][ T380] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 31.243366][ T380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.252550][ T380] usb 3-1: config 0 descriptor?? [ 31.330277][ T310] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 31.462465][ T538] Zero length message leads to an empty skb [ 31.470061][ T380] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 31.477919][ T380] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 31.485924][ T380] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 31.493820][ T380] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 31.500394][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 31.508354][ T380] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 31.510931][ T310] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 31.527020][ T310] usb 2-1: can't read configurations, error -61 [ 31.530788][ T380] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 31.547604][ T310] usb usb2-port1: attempt power cycle [ 31.640027][ T548] __nla_validate_parse: 5 callbacks suppressed [ 31.640048][ T548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.93'. [ 31.675972][ T380] playstation 0003:054C:0DF2.0001: Failed to retrieve feature with reportID 9: -71 [ 31.685784][ T380] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -71 [ 31.696736][ T380] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 31.709052][ T380] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 31.718613][ T380] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -71 [ 31.742265][ T380] usb 3-1: USB disconnect, device number 4 [ 31.771757][ T556] tipc: Started in network mode [ 31.776776][ T556] tipc: Node identity , cluster identity 4711 [ 31.859892][ T568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'. [ 31.889746][ T573] overlay: filesystem on ./file0 not supported as upperdir [ 31.903004][ T310] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 31.940913][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 31.955109][ T310] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 31.969152][ T310] usb 2-1: can't read configurations, error -61 [ 32.110308][ T310] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 32.125588][ T12] bridge_slave_1: left allmulticast mode [ 32.130981][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 32.135951][ T12] bridge_slave_1: left promiscuous mode [ 32.143385][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.153509][ T12] bridge_slave_0: left allmulticast mode [ 32.159389][ T12] bridge_slave_0: left promiscuous mode [ 32.161391][ T310] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 32.166865][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.180062][ T310] usb 2-1: can't read configurations, error -61 [ 32.188743][ T310] usb usb2-port1: unable to enumerate USB device [ 32.299030][ T12] veth1_macvtap: left promiscuous mode [ 32.306001][ T12] veth0_vlan: left promiscuous mode [ 32.396568][ T594] netlink: 'syz.2.113': attribute type 4 has an invalid length. [ 32.425721][ T600] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 32.436834][ T600] overlayfs: missing 'lowerdir' [ 32.476768][ T605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.116'. [ 32.506865][ T595] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.525837][ T595] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.550297][ T595] bridge_slave_0: entered allmulticast mode [ 32.580380][ T595] bridge_slave_0: entered promiscuous mode [ 32.592060][ T595] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.610327][ T595] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.619666][ T595] bridge_slave_1: entered allmulticast mode [ 32.626734][ T595] bridge_slave_1: entered promiscuous mode [ 32.739637][ T619] netlink: 'syz.3.121': attribute type 12 has an invalid length. [ 32.802705][ T595] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.811365][ T595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.821288][ T595] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.830316][ T595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.875747][ T623] netlink: 24 bytes leftover after parsing attributes in process `syz.3.123'. [ 32.887061][ T623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 32.926672][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.936742][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.977082][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.985361][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.012799][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.020918][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.048337][ T595] veth0_vlan: entered promiscuous mode [ 33.084454][ T595] veth1_macvtap: entered promiscuous mode [ 33.168483][ T631] tipc: Started in network mode [ 33.174144][ T631] tipc: Node identity , cluster identity 4711 [ 33.268516][ T645] process 'syz.2.131' launched './file0' with NULL argv: empty string added [ 33.280729][ T645] Invalid argument reading file caps for ./file0 [ 33.332987][ T654] mmap: syz.2.134 (654) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.380614][ T659] netlink: 'syz.4.135': attribute type 12 has an invalid length. [ 33.450060][ T669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.140'. [ 33.517531][ T677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.144'. [ 33.544102][ T681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.146'. [ 33.555025][ T681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 33.607859][ T685] overlayfs: empty lowerdir [ 33.637239][ T689] tipc: Started in network mode [ 33.642290][ T689] tipc: Node identity , cluster identity 4711 [ 33.759736][ T705] BUG: scheduling while atomic: syz.2.158/705/0x00000002 [ 33.768460][ T705] Modules linked in: [ 33.772469][ T705] CPU: 1 UID: 0 PID: 705 Comm: syz.2.158 Not tainted syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 33.772525][ T705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.772539][ T705] Call Trace: [ 33.772546][ T705] [ 33.772555][ T705] __dump_stack+0x21/0x30 [ 33.772593][ T705] dump_stack_lvl+0x140/0x1c0 [ 33.772625][ T705] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.772659][ T705] ? is_bpf_text_address+0x17b/0x1a0 [ 33.772698][ T705] dump_stack+0x19/0x20 [ 33.772733][ T705] __schedule_bug+0x12b/0x200 [ 33.772761][ T705] ? find_proxy_task+0x2460/0x2460 [ 33.772813][ T705] __schedule+0xb85/0x20b0 [ 33.772839][ T705] ? is_bpf_text_address+0x17b/0x1a0 [ 33.773047][ T705] ? kernel_text_address+0xa9/0xe0 [ 33.773083][ T705] ? __sched_text_start+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 33.773106][ T705] ? unwind_get_return_address+0x51/0x90 [ 33.773137][ T705] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 33.773164][ T705] ? arch_stack_walk+0x10a/0x170 [ 33.773188][ T705] ? __kasan_check_write+0x18/0x20 [ 33.773213][ T705] ? _raw_spin_lock_irq+0x93/0x120 [ 33.773250][ T705] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 33.773288][ T705] schedule+0xc5/0x240 [ 33.773320][ T705] schedule_preempt_disabled+0x14/0x30 [ 33.773351][ T705] rwsem_down_read_slowpath+0x88c/0x14c0 [ 33.773385][ T705] ? down_write_killable+0x2d0/0x2d0 [ 33.773415][ T705] ? __kasan_check_write+0x18/0x20 [ 33.773440][ T705] ? downgrade_write+0x390/0x470 [ 33.773478][ T705] ? call_rcu_nocb+0x694/0xc60 [ 33.773516][ T705] down_read+0x95/0xe0 [ 33.773554][ T705] ? __cfi_down_read+0x10/0x10 [ 33.773585][ T705] kernfs_find_and_get_ns+0x76/0x130 [ 33.773623][ T705] sysfs_unmerge_group+0x66/0x130 [ 33.773654][ T705] dpm_sysfs_remove+0x64/0xd0 [ 33.773690][ T705] device_del+0x241/0xcf0 [ 33.773725][ T705] ? __cfi_class_find_device+0x10/0x10 [ 33.773754][ T705] ? __cfi_device_del+0x10/0x10 [ 33.773790][ T705] ? __kasan_check_write+0x18/0x20 [ 33.773815][ T705] ? kobject_put+0x1cc/0x2a0 [ 33.773851][ T705] device_destroy+0xb0/0x100 [ 33.773874][ T705] ? __cfi_device_destroy+0x10/0x10 [ 33.773897][ T705] ? __kasan_check_write+0x18/0x20 [ 33.773924][ T705] android_device_destroy+0x118/0x180 [ 33.773961][ T705] gadgets_drop+0x1d/0x30 [ 33.773985][ T705] ? __cfi_gadgets_drop+0x10/0x10 [ 33.774008][ T705] configfs_rmdir+0x8b7/0x9b0 [ 33.774044][ T705] vfs_rmdir+0x3db/0x560 [ 33.774080][ T705] do_rmdir+0x29a/0x590 [ 33.774115][ T705] ? __cfi_do_rmdir+0x10/0x10 [ 33.774150][ T705] ? __kasan_check_write+0x18/0x20 [ 33.774176][ T705] __x64_sys_rmdir+0x4b/0x60 [ 33.774212][ T705] x64_sys_call+0xaf7/0x2ee0 [ 33.774235][ T705] do_syscall_64+0x57/0xf0 [ 33.774271][ T705] ? clear_bhb_loop+0x50/0xa0 [ 33.774301][ T705] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.774328][ T705] RIP: 0033:0x7f1f9cf9e159 [ 33.774351][ T705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.774372][ T705] RSP: 002b:00007f1f9df2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 33.774399][ T705] RAX: ffffffffffffffda RBX: 00007f1f9d225fa0 RCX: 00007f1f9cf9e159 [ 33.774418][ T705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 33.774433][ T705] RBP: 00007f1f9d035024 R08: 0000000000000000 R09: 0000000000000000 [ 33.774449][ T705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.774465][ T705] R13: 00007f1f9d226038 R14: 00007f1f9d225fa0 R15: 00007ffe36cae6b8 [ 33.774486][ T705] [ 33.775395][ T705] ------------[ cut here ]------------ [ 33.931032][ T310] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.957590][ T705] WARNING: CPU: 1 PID: 705 at lib/stackdepot.c:635 stack_depot_save_flags+0x266/0x800 [ 34.156986][ T705] Modules linked in: [ 34.161029][ T705] CPU: 1 UID: 0 PID: 705 Comm: syz.2.158 Tainted: G W syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 34.174694][ T705] Tainted: [W]=WARN [ 34.178637][ T705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.188826][ T705] RIP: 0010:stack_depot_save_flags+0x266/0x800 [ 34.195143][ T705] Code: 48 83 3d b4 f0 db 05 00 0f 84 00 04 00 00 48 c7 45 c0 00 00 00 00 48 89 d3 65 8b 05 cc 51 1e 7d 4d 89 d7 a9 00 00 f0 00 74 2d <0f> 0b 48 c7 45 c8 00 00 00 00 9c 8f 45 c8 4c 8b 6d c8 fa 48 c7 c7 [ 34.215121][ T705] RSP: 0018:ffffc9000d3df980 EFLAGS: 00010206 [ 34.221492][ T705] RAX: 000000007fffffff RBX: ffff8881f5b990d0 RCX: 00000000009990d0 [ 34.229778][ T705] RDX: ffff8881f5b990d0 RSI: 0000000000000001 RDI: 000000003eed3649 [ 34.238453][ T705] RBP: ffffc9000d3df9e0 R08: 00000000c14480d6 R09: 00000000d5c0b1a9 [ 34.246774][ T705] R10: 000000000000000d R11: ffffffff81759fc0 R12: 000000006d79990d [ 34.255140][ T705] R13: 0000000000000000 R14: ffffc9000d3df9f0 R15: 000000000000000d [ 34.263386][ T705] FS: 00007f1f9df2f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 34.272510][ T705] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.279139][ T705] CR2: 00007f1f9df0dff8 CR3: 0000000118cce000 CR4: 00000000003526b0 [ 34.287230][ T705] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 34.295305][ T705] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 34.303491][ T705] Call Trace: [ 34.306806][ T705] [ 34.309776][ T705] ? do_syscall_64+0x57/0xf0 [ 34.314472][ T705] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.320705][ T705] kasan_save_track+0x4f/0x80 [ 34.325531][ T705] ? kasan_save_track+0x3e/0x80 [ 34.330478][ T705] ? kasan_save_free_info+0x44/0x50 [ 34.335718][ T705] ? __kasan_slab_free+0x5f/0x80 [ 34.340778][ T705] ? kfree+0x158/0x440 [ 34.344977][ T705] ? gadget_info_attr_release+0xcb/0x130 [ 34.351332][ T705] ? config_item_put+0x178/0x240 [ 34.356930][ T705] ? configfs_rmdir+0x8e8/0x9b0 [ 34.362349][ T705] ? vfs_rmdir+0x3db/0x560 [ 34.367270][ T705] ? do_rmdir+0x29a/0x590 [ 34.371719][ T705] ? __x64_sys_rmdir+0x4b/0x60 [ 34.376662][ T705] ? x64_sys_call+0xaf7/0x2ee0 [ 34.381630][ T705] ? do_syscall_64+0x57/0xf0 [ 34.386286][ T705] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.392707][ T705] kasan_save_free_info+0x44/0x50 [ 34.397949][ T705] __kasan_slab_free+0x5f/0x80 [ 34.403503][ T705] kfree+0x158/0x440 [ 34.407436][ T705] ? gadget_info_attr_release+0xcb/0x130 [ 34.413215][ T705] ? __cfi_gadget_info_attr_release+0x10/0x10 [ 34.420111][ T705] gadget_info_attr_release+0xcb/0x130 [ 34.426370][ T705] config_item_put+0x178/0x240 [ 34.432273][ T705] ? __cfi_gadgets_drop+0x10/0x10 [ 34.437327][ T705] configfs_rmdir+0x8e8/0x9b0 [ 34.442733][ T705] vfs_rmdir+0x3db/0x560 [ 34.447046][ T705] do_rmdir+0x29a/0x590 [ 34.451322][ T705] ? __cfi_do_rmdir+0x10/0x10 [ 34.456047][ T705] ? __kasan_check_write+0x18/0x20 [ 34.461241][ T705] __x64_sys_rmdir+0x4b/0x60 [ 34.465875][ T705] x64_sys_call+0xaf7/0x2ee0 [ 34.470612][ T705] do_syscall_64+0x57/0xf0 [ 34.475137][ T705] ? clear_bhb_loop+0x50/0xa0 [ 34.479877][ T705] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.486543][ T705] RIP: 0033:0x7f1f9cf9e159 [ 34.491171][ T705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.511143][ T705] RSP: 002b:00007f1f9df2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 34.519835][ T705] RAX: ffffffffffffffda RBX: 00007f1f9d225fa0 RCX: 00007f1f9cf9e159 [ 34.528078][ T705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 34.536241][ T705] RBP: 00007f1f9d035024 R08: 0000000000000000 R09: 0000000000000000 [ 34.544404][ T705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.552565][ T705] R13: 00007f1f9d226038 R14: 00007f1f9d225fa0 R15: 00007ffe36cae6b8 [ 34.560763][ T705] [ 34.563951][ T705] ---[ end trace 0000000000000000 ]--- [ 34.577087][ T705] BUG: scheduling while atomic: syz.2.158/705/0x00000000 [ 34.584677][ T705] Modules linked in: [ 34.624214][ T705] CPU: 0 UID: 0 PID: 705 Comm: syz.2.158 Tainted: G W syzkaller #0 28bb5670a1b4a83370a1b0f1e6655e31af14d592 [ 34.624258][ T705] Tainted: [W]=WARN [ 34.624266][ T705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.624280][ T705] Call Trace: [ 34.624287][ T705] [ 34.624296][ T705] __dump_stack+0x21/0x30 [ 34.624332][ T705] dump_stack_lvl+0x140/0x1c0 [ 34.624364][ T705] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.624398][ T705] dump_stack+0x19/0x20 [ 34.624427][ T705] __schedule_bug+0x12b/0x200 [ 34.624453][ T705] ? find_proxy_task+0x2460/0x2460 [ 34.624477][ T705] ? unwind_get_return_address+0x51/0x90 [ 34.624508][ T705] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 34.624558][ T705] ? arch_stack_walk+0x10a/0x170 [ 34.624583][ T705] __schedule+0xb85/0x20b0 [ 34.624606][ T705] ? stack_depot_save_flags+0x38/0x800 [ 34.624637][ T705] ? __sched_text_start+0x10/0x10 [ 34.624658][ T705] ? __kasan_check_write+0x18/0x20 [ 34.624682][ T705] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 34.624716][ T705] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 34.624749][ T705] ? umount_tree+0xe18/0xfa0 [ 34.624769][ T705] ? free_nsproxy+0x52/0x290 [ 34.624801][ T705] ? __kasan_check_write+0x18/0x20 [ 34.624824][ T705] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 34.624859][ T705] schedule+0xc5/0x240 [ 34.624879][ T705] synchronize_rcu_expedited+0x50e/0x960 [ 34.624908][ T705] ? __cfi_synchronize_rcu_expedited+0x10/0x10 [ 34.624936][ T705] ? __cfi_autoremove_wake_function+0x10/0x10 [ 34.624964][ T705] ? __kasan_slab_free+0x6a/0x80 [ 34.624992][ T705] ? kfree+0x158/0x440 [ 34.625012][ T705] ? __put_mountpoint+0x1c6/0x230 [ 34.625040][ T705] ? shrink_dentry_list+0x4d5/0x500 [ 34.625062][ T705] ? __kasan_check_write+0x18/0x20 [ 34.625086][ T705] namespace_unlock+0x248/0x450 [ 34.625106][ T705] ? umount_tree+0xf29/0xfa0 [ 34.625126][ T705] ? umount_tree+0xfa0/0xfa0 [ 34.625146][ T705] ? __detach_mounts+0x610/0x610 [ 34.625168][ T705] put_mnt_ns+0xad/0xf0 [ 34.625192][ T705] free_nsproxy+0x52/0x290 [ 34.625224][ T705] exit_task_namespaces+0x99/0xe0 [ 34.625263][ T705] do_exit+0xa41/0x2850 [ 34.625292][ T705] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.625319][ T705] ? __cfi_do_exit+0x10/0x10 [ 34.625350][ T705] ? __kasan_check_write+0x18/0x20 [ 34.625373][ T705] ? _raw_spin_lock_irq+0x93/0x120 [ 34.625406][ T705] do_group_exit+0x21f/0x2f0 [ 34.625435][ T705] ? __kasan_check_write+0x18/0x20 [ 34.625458][ T705] ? recalc_sigpending+0x184/0x1d0 [ 34.625484][ T705] get_signal+0x134c/0x1490 [ 34.625518][ T705] arch_do_signal_or_restart+0xbc/0x700 [ 34.625540][ T705] ? putname+0x113/0x150 [ 34.625565][ T705] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 34.625588][ T705] ? do_rmdir+0x528/0x590 [ 34.625621][ T705] ? __kasan_check_write+0x18/0x20 [ 34.625646][ T705] syscall_exit_to_user_mode+0x57/0xb0 [ 34.625674][ T705] do_syscall_64+0x63/0xf0 [ 34.625706][ T705] ? clear_bhb_loop+0x50/0xa0 [ 34.625733][ T705] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.625758][ T705] RIP: 0033:0x7f1f9cf9e159 [ 34.625776][ T705] Code: Unable to access opcode bytes at 0x7f1f9cf9e12f. [ 34.625787][ T705] RSP: 002b:00007f1f9df2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 34.625812][ T705] RAX: 0000000000000000 RBX: 00007f1f9d225fa0 RCX: 00007f1f9cf9e159 [ 34.625828][ T705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 34.625842][ T705] RBP: 00007f1f9d035024 R08: 0000000000000000 R09: 0000000000000000 [ 34.625860][ T705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.625874][ T705] R13: 00007f1f9d226038 R14: 00007f1f9d225fa0 R15: 00007ffe36cae6b8 [ 34.625893][ T705] [ 35.092104][ T614] bridge_slave_1: left allmulticast mode [ 35.098034][ T614] bridge_slave_1: left promiscuous mode [ 35.104122][ T614] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.111845][ T614] bridge_slave_0: left allmulticast mode [ 35.117593][ T614] bridge_slave_0: left promiscuous mode [ 35.123394][ T614] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.252740][ T614] veth1_macvtap: left promiscuous mode [ 35.258281][ T614] veth0_vlan: left promiscuous mode [ 35.493987][ T614] bridge_slave_1: left allmulticast mode [ 35.499673][ T614] bridge_slave_1: left promiscuous mode [ 35.505446][ T614] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.513159][ T614] bridge_slave_0: left allmulticast mode [ 35.518918][ T614] bridge_slave_0: left promiscuous mode [ 35.525071][ T614] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.533036][ T614] bridge_slave_1: left allmulticast mode [ 35.538689][ T614] bridge_slave_1: left promiscuous mode [ 35.544596][ T614] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.553663][ T614] bridge_slave_0: left allmulticast mode [ 35.559582][ T614] bridge_slave_0: left promiscuous mode [ 35.565466][ T614] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.574243][ T614] bridge_slave_1: left allmulticast mode [ 35.580074][ T614] bridge_slave_1: left promiscuous mode [ 35.587019][ T614] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.594938][ T614] bridge_slave_0: left allmulticast mode [ 35.601079][ T614] bridge_slave_0: left promiscuous mode [ 35.606813][ T614] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.825475][ T614] veth1_macvtap: left promiscuous mode [ 35.831111][ T614] veth0_vlan: left promiscuous mode [ 35.837100][ T614] veth1_macvtap: left promiscuous mode [ 35.842706][ T614] veth0_vlan: left promiscuous mode [ 35.848365][ T614] veth1_macvtap: left promiscuous mode [ 35.854020][ T614] veth0_vlan: left promiscuous mode