last executing test programs: 312.896618ms ago: executing program 2 (id=3): syslog(0x4, &(0x7f00000000c0)=""/197, 0xc5) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x400002, 0xffffffffffffffff, 0x20000}) r2 = open(0x0, 0x400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000004c0)='./file0\x00', 0x80000800) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r7 = openat$incfs(r6, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0xc058671e, &(0x7f00000000c0)) sendfile(r4, r4, 0x0, 0x80000004) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000040) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 282.971048ms ago: executing program 1 (id=2): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) 224.733948ms ago: executing program 0 (id=1): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x0, 0x1, 0x3, 0x1, 0x9}}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x30, r3, 0x701, 0x70bd25, 0x25dfdbfd, {0xb}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async, rerun: 32) r6 = dup3(r5, r4, 0x0) (rerun: 32) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x80) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) (async) r9 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r6, 0x4008af14, &(0x7f0000000340)={0x2, 0x3}) (async, rerun: 64) r10 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) bind$tipc(r10, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) r11 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r11, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41, 0x20000}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x20000040) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f00000001c0)=[@enter_looper, @release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfffffffffffffe46, 0x0, 0x0, 0x0}, 0x40}, @enter_looper, @clear_death={0x400c630f, 0x1}, @decrefs={0x40046307, 0x1}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={@flat=@weak_binder={0x77622a85, 0x10b, 0x1}, @fd, @fda={0x66646185, 0x3, 0x1, 0x31}}, &(0x7f00000000c0)}, 0x1000}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r7}, @flat=@handle={0x73682a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000940)=""/4096, 0x0, 0x2, 0x3f}}, &(0x7f0000000180)}, 0x1400}, @free_buffer={0x40086303, r9}], 0x5, 0x0, &(0x7f0000000780)="1f4e60867a"}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, &(0x7f0000000480)=[@exit_looper, @increfs_done, @register_looper, @release={0x40046306, 0x2}, @free_buffer={0x40086303, r9}], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) (async, rerun: 32) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) (rerun: 32) 223.864168ms ago: executing program 1 (id=5): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000340), 0xb, 0x0, &(0x7f0000000200)={0x77359400}, &(0x7f00000003c0)=0xfffffffd, 0x1) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x8, &(0x7f0000000440)=""/4096) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20082}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20082}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) syz_open_dev$MSR(&(0x7f00000001c0), 0x8c0, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8c0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, &(0x7f0000000280)=[0x5, 0x0, 0x0, 0x8, 0x6, 0x8, 0xa4, 0x2]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x9, 0x0, &(0x7f0000000000)=[@register_looper, @decrefs={0x40046307, 0xfffffffd}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x9, 0x0, &(0x7f0000000000)=[@register_looper, @decrefs={0x40046307, 0xfffffffd}], 0x0, 0x0, 0x0}) 204.495338ms ago: executing program 3 (id=4): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f612300020100000005fe060c10880008001e00fff3c00e", 0x24}], 0x19e}, 0x20048840) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x5, 0x2, 0x2d}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@weak_handle={0x77682a85, 0x1101, 0x3}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 116.036509ms ago: executing program 0 (id=6): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x682080, 0x152) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000040)='\x92\x00') 115.608819ms ago: executing program 3 (id=7): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='maps\x00') pread64(r2, &(0x7f0000000000)=""/13, 0xd, 0x4) (async, rerun: 32) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) (rerun: 32) 110.561789ms ago: executing program 0 (id=8): r0 = getpid() capget(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000100)={0x400, 0x5, 0x5, 0x6, 0x6, 0x6612}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r2 = syz_pidfd_open(r0, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000200)='fdinfo/3\x00') r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) dup(r6) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r8, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) read$eventfd(r5, &(0x7f0000000040), 0xfffffe15) getpid() (async) capget(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000100)={0x400, 0x5, 0x5, 0x6, 0x6, 0x6612}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) (async) syz_pidfd_open(r0, 0x0) (async) pidfd_getfd(r2, r2, 0x0) (async) setns(r3, 0x66020000) (async) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000200)='fdinfo/3\x00') (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) dup(r6) (async) socket(0x2, 0x2, 0x1) (async) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') (async) preadv(r8, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) (async) read$eventfd(r5, &(0x7f0000000040), 0xfffffe15) (async) 82.147739ms ago: executing program 3 (id=9): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c142, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xf21e2c00, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x101, 0x4000) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xbd) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) signalfd4(r5, &(0x7f0000000180)={[0x80]}, 0x8, 0x80000) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) r6 = geteuid() mount$cgroup(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0x800000, &(0x7f0000001400)={[{@name={'name', 0x3d, 'syz'}}, {@cpuset_v2_mode}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@measure}, {@obj_type}, {@uid_gt={'uid>', r6}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev\x86\x84sbmon#\x00'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'overlay\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/rnullb0\x00'}}, {@dont_appraise}]}) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) write(r0, &(0x7f0000000400)="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", 0xfffffcf1) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r7) keyctl$set_timeout(0xf, r7, 0x8) 0s ago: executing program 0 (id=10): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x0) (async) ftruncate(r2, 0x3) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts. [ 26.283750][ T36] audit: type=1400 audit(1762817544.410:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.285266][ T283] cgroup: Unknown subsys name 'net' [ 26.306535][ T36] audit: type=1400 audit(1762817544.410:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.333941][ T36] audit: type=1400 audit(1762817544.440:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.334031][ T283] cgroup: Unknown subsys name 'devices' [ 26.498370][ T283] cgroup: Unknown subsys name 'hugetlb' [ 26.504093][ T283] cgroup: Unknown subsys name 'rlimit' [ 26.680401][ T36] audit: type=1400 audit(1762817544.810:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.703625][ T36] audit: type=1400 audit(1762817544.810:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.728503][ T36] audit: type=1400 audit(1762817544.810:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.739904][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.760642][ T36] audit: type=1400 audit(1762817544.890:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.786106][ T36] audit: type=1400 audit(1762817544.890:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.826720][ T36] audit: type=1400 audit(1762817544.960:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.852449][ T36] audit: type=1400 audit(1762817544.960:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.852926][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.720600][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.727732][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.734941][ T291] bridge_slave_0: entered allmulticast mode [ 27.741294][ T291] bridge_slave_0: entered promiscuous mode [ 27.749725][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.756846][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.763936][ T291] bridge_slave_1: entered allmulticast mode [ 27.770352][ T291] bridge_slave_1: entered promiscuous mode [ 27.846384][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.853444][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.860625][ T290] bridge_slave_0: entered allmulticast mode [ 27.867059][ T290] bridge_slave_0: entered promiscuous mode [ 27.879893][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.887049][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.894242][ T293] bridge_slave_0: entered allmulticast mode [ 27.900720][ T293] bridge_slave_0: entered promiscuous mode [ 27.907035][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.914110][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.921264][ T290] bridge_slave_1: entered allmulticast mode [ 27.927773][ T290] bridge_slave_1: entered promiscuous mode [ 27.940913][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.948098][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.955273][ T293] bridge_slave_1: entered allmulticast mode [ 27.961696][ T293] bridge_slave_1: entered promiscuous mode [ 27.986125][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.993211][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.000474][ T292] bridge_slave_0: entered allmulticast mode [ 28.006895][ T292] bridge_slave_0: entered promiscuous mode [ 28.013426][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.020691][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.027827][ T292] bridge_slave_1: entered allmulticast mode [ 28.034243][ T292] bridge_slave_1: entered promiscuous mode [ 28.189017][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.196121][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.225026][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.232127][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.239458][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.246535][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.266879][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.273948][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.281304][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.288384][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.299168][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.306254][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.313556][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.320897][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.354094][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.361691][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.369659][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.376993][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.384203][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.391704][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.399666][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.420602][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.427714][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.449771][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.456872][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.467448][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.474528][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.490310][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.497405][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.505027][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.512117][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.548228][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.555413][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.563465][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.570569][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.578879][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.585960][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.601222][ T292] veth0_vlan: entered promiscuous mode [ 28.622259][ T291] veth0_vlan: entered promiscuous mode [ 28.646021][ T290] veth0_vlan: entered promiscuous mode [ 28.658438][ T292] veth1_macvtap: entered promiscuous mode [ 28.679137][ T291] veth1_macvtap: entered promiscuous mode [ 28.689978][ T290] veth1_macvtap: entered promiscuous mode [ 28.711571][ T292] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.738931][ T293] veth0_vlan: entered promiscuous mode [ 28.760048][ T293] veth1_macvtap: entered promiscuous mode [ 28.840560][ T341] rust_binder: 2: no such ref 0 [ 28.863992][ T348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=348 comm=syz.3.4 [ 28.877327][ T348] rust_binder: Error while translating object. [ 28.877378][ T348] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.883602][ T348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 28.902758][ T334] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.946406][ T359] rust_binder: Write failure EFAULT in pid:4 [ 28.946568][ T356] rust_binder: Write failure EFAULT in pid:4 [ 28.954026][ T355] rust_binder: Write failure EFAULT in pid:4 [ 28.956280][ T362] capability: warning: `syz.0.8' uses 32-bit capabilities (legacy support in use) [ 28.991573][ T364] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 29.107847][ T292] ------------[ cut here ]------------ [ 29.113444][ T292] WARNING: CPU: 0 PID: 292 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 29.122923][ T292] Modules linked in: [ 29.127015][ T292] CPU: 0 UID: 0 PID: 292 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 29.138745][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 29.148934][ T292] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 29.154638][ T292] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 29.174702][ T292] RSP: 0018:ffffc9000b63fb68 EFLAGS: 00010293 [ 29.181353][ T292] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff888122608000 [ 29.189554][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.197669][ T292] RBP: ffffc9000b63fb90 R08: ffff888128a6ec3f R09: 1ffff1102514dd87 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 29.205811][ T292] R10: dffffc0000000000 R11: ffffed102514dd88 R12: 0000000000000000 [ 29.213821][ T292] R13: dffffc0000000000 R14: ffff888128a6eba0 R15: ffff888128a7fcc0 [ 29.221909][ T292] FS: 000055556222b500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 29.230939][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.237609][ T292] CR2: 000055556224e4e8 CR3: 0000000102bf6000 CR4: 00000000003526b0 [ 29.245656][ T292] Call Trace: [ 29.248969][ T292] [ 29.251944][ T292] ovl_do_remove+0x7b8/0xcf0 [ 29.256668][ T292] ? ovl_set_redirect+0x780/0x780 [ 29.261740][ T292] ? down_write+0xe9/0x2a0 [ 29.266232][ T292] ? __cfi_down_write+0x10/0x10 [ 29.271128][ T292] ovl_rmdir+0x1e/0x30 [ 29.275237][ T292] vfs_rmdir+0x3dd/0x560 [ 29.279669][ T292] incfs_kill_sb+0x109/0x230 [ 29.284307][ T292] deactivate_locked_super+0xd5/0x2a0 [ 29.289819][ T292] deactivate_super+0xb8/0xe0 [ 29.294597][ T292] cleanup_mnt+0x3f1/0x480 [ 29.299111][ T292] __cleanup_mnt+0x1d/0x40 [ 29.303676][ T292] task_work_run+0x1e0/0x250 [ 29.308372][ T292] ? __cfi_task_work_run+0x10/0x10 [ 29.313614][ T292] ? __x64_sys_umount+0x126/0x170 [ 29.318927][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 29.324358][ T292] ? __kasan_check_read+0x15/0x20 [ 29.329566][ T292] resume_user_mode_work+0x36/0x50 [ 29.334818][ T292] syscall_exit_to_user_mode+0x64/0xb0 [ 29.340545][ T292] do_syscall_64+0x64/0xf0 [ 29.345111][ T292] ? clear_bhb_loop+0x50/0xa0 [ 29.349886][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.355857][ T331] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.355868][ T292] RIP: 0033:0x7f1cee1909f7 [ 29.367817][ T292] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 29.387529][ T292] RSP: 002b:00007ffce3dac0b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 29.396104][ T292] RAX: 0000000000000000 RBX: 00007f1cee211d7d RCX: 00007f1cee1909f7 [ 29.404200][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce3dac170 [ 29.412253][ T292] RBP: 00007ffce3dac170 R08: 0000000000000000 R09: 0000000000000000 [ 29.420348][ T292] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffce3dad260 [ 29.428432][ T292] R13: 00007f1cee211d7d R14: 0000000000007173 R15: 00007ffce3dae330 [ 29.436553][ T292] [ 29.439628][ T292] ---[ end trace 0000000000000000 ]--- [ 29.445458][ T292] ------------[ cut here ]------------ [ 29.450990][ T292] WARNING: CPU: 1 PID: 292 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 29.460366][ T292] Modules linked in: [ 29.464311][ T292] CPU: 1 UID: 0 PID: 292 Comm: syz-executor Tainted: G W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 29.477970][ T292] Tainted: [W]=WARN [ 29.481902][ T292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 29.492037][ T292] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 29.497788][ T292] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 29.517543][ T292] RSP: 0018:ffffc9000b63fb68 EFLAGS: 00010293 [ 29.523693][ T292] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff888122608000 [ 29.531720][ T292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.539780][ T292] RBP: ffffc9000b63fb90 R08: ffff888128a6ec3f R09: 1ffff1102514dd87 [ 29.547810][ T292] R10: dffffc0000000000 R11: ffffed102514dd88 R12: 0000000000000000 [ 29.555905][ T292] R13: dffffc0000000000 R14: ffff888128a6eba0 R15: ffff888128a7fcc0 [ 29.563923][ T292] FS: 000055556222b500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 29.572925][ T292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.579591][ T292] CR2: 00007ffe3ac4df5c CR3: 0000000102bf6000 CR4: 00000000003526b0 [ 29.585432][ T353] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.587647][ T292] Call Trace: [ 29.598393][ T292] [ 29.601355][ T292] ovl_do_remove+0x7b8/0xcf0 [ 29.606025][ T292] ? ovl_set_redirect+0x780/0x780 [ 29.611109][ T292] ? down_write+0xe9/0x2a0 [ 29.615606][ T292] ? __cfi_down_write+0x10/0x10 [ 29.620493][ T292] ovl_rmdir+0x1e/0x30 [ 29.624612][ T292] vfs_rmdir+0x3dd/0x560 [ 29.628959][ T292] incfs_kill_sb+0x1a0/0x230 [ 29.633618][ T292] deactivate_locked_super+0xd5/0x2a0 [ 29.639163][ T292] deactivate_super+0xb8/0xe0 [ 29.643895][ T292] cleanup_mnt+0x3f1/0x480 [ 29.648404][ T292] __cleanup_mnt+0x1d/0x40 [ 29.652881][ T292] task_work_run+0x1e0/0x250 [ 29.657568][ T292] ? __cfi_task_work_run+0x10/0x10 [ 29.662724][ T292] ? __x64_sys_umount+0x126/0x170 [ 29.667851][ T292] ? __cfi___x64_sys_umount+0x10/0x10 [ 29.673294][ T292] ? __kasan_check_read+0x15/0x20 [ 29.678454][ T292] resume_user_mode_work+0x36/0x50 [ 29.683633][ T292] syscall_exit_to_user_mode+0x64/0xb0 [ 29.689179][ T292] do_syscall_64+0x64/0xf0 [ 29.693666][ T292] ? clear_bhb_loop+0x50/0xa0 [ 29.698435][ T292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.704395][ T292] RIP: 0033:0x7f1cee1909f7 [ 29.708903][ T292] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 29.728759][ T292] RSP: 002b:00007ffce3dac0b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 29.737393][ T292] RAX: 0000000000000000 RBX: 00007f1cee211d7d RCX: 00007f1cee1909f7 [ 29.745545][ T292] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce3dac170 [ 29.753579][ T292] RBP: 00007ffce3dac170 R08: 0000000000000000 R09: 0000000000000000 [ 29.761654][ T292] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffce3dad260 [ 29.769717][ T292] R13: 00007f1cee211d7d R14: 0000000000007173 R15: 00007ffce3dae330 [ 29.777799][ T292] [ 29.780856][ T292] ---[ end trace 0000000000000000 ]--- [ 29.867103][ T46] bridge_slave_1: left allmulticast mode [ 29.872830][ T46] bridge_slave_1: left promiscuous mode [ 29.881959][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.890073][ T46] bridge_slave_0: left allmulticast mode [ 29.903914][ T46] bridge_slave_0: left promiscuous mode [ 29.909826][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.058470][ T46] veth1_macvtap: left promiscuous mode [ 30.064126][ T46] veth0_vlan: left promiscuous mode [ 30.360079][ T46] bridge_slave_1: left allmulticast mode [ 30.365803][ T46] bridge_slave_1: left promiscuous mode [ 30.371418][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.379121][ T46] bridge_slave_0: left allmulticast mode [ 30.384791][ T46] bridge_slave_0: left promiscuous mode [ 30.390637][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.398376][ T46] bridge_slave_1: left allmulticast mode [ 30.404024][ T46] bridge_slave_1: left promiscuous mode [ 30.409758][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.417350][ T46] bridge_slave_0: left allmulticast mode [ 30.422994][ T46] bridge_slave_0: left promiscuous mode [ 30.428999][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.436857][ T46] bridge_slave_1: left allmulticast mode [ 30.442513][ T46] bridge_slave_1: left promiscuous mode [ 30.448387][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.456257][ T46] bridge_slave_0: left allmulticast mode [ 30.461906][ T46] bridge_slave_0: left promiscuous mode [ 30.467664][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.771596][ T46] veth1_macvtap: left promiscuous mode [ 30.777294][ T46] veth0_vlan: left promiscuous mode [ 30.782962][ T46] veth1_macvtap: left promiscuous mode [ 30.788630][ T46] veth0_vlan: left promiscuous mode [ 30.794334][ T46] veth1_macvtap: left promiscuous mode [ 30.799952][ T46] veth0_vlan: left promiscuous mode