last executing test programs: 149.525964ms ago: executing program 2 (id=3): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x40400) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r2}, 0x18) 118.372665ms ago: executing program 2 (id=6): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0xfffffffffffffe2f, 0x0}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x5d4}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x4, 0xb, 0xfffb, 0xb}, 0x0, 0x0}}) 64.926257ms ago: executing program 1 (id=2): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00000d2000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e7b000/0x4000)=nil, &(0x7f00001a5000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x3b6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x6145, 0x7721, 0x17, 0x0, 0x0) 30.328479ms ago: executing program 0 (id=1): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f00000005c0)={0xf, {"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", 0x1010}}, 0x1006) 13.13986ms ago: executing program 4 (id=5): mkdir(&(0x7f0000000600)='./file0\x00', 0x102) mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) openat(r0, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0) 0s ago: executing program 3 (id=4): r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1}, 0x6e) 0s ago: executing program 3 (id=10): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000340)=0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001800)={0x44, 0x0, &(0x7f0000001ac0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x51, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d61"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. [ 23.137850][ T30] audit: type=1400 audit(1789788769.232:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.138925][ T277] cgroup: Unknown subsys name 'net' [ 23.161425][ T30] audit: type=1400 audit(1789788769.232:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.189030][ T30] audit: type=1400 audit(1789788769.262:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.189195][ T277] cgroup: Unknown subsys name 'devices' [ 23.307187][ T277] cgroup: Unknown subsys name 'hugetlb' [ 23.312816][ T277] cgroup: Unknown subsys name 'rlimit' [ 23.419922][ T30] audit: type=1400 audit(1789788769.512:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.443327][ T30] audit: type=1400 audit(1789788769.512:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.468271][ T30] audit: type=1400 audit(1789788769.512:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.474490][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.500365][ T30] audit: type=1400 audit(1789788769.592:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.526270][ T30] audit: type=1400 audit(1789788769.592:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.534573][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.552454][ T30] audit: type=1400 audit(1789788769.622:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.586445][ T30] audit: type=1400 audit(1789788769.622:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.141146][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.148324][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.155868][ T285] device bridge_slave_0 entered promiscuous mode [ 24.163987][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.171221][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.178677][ T285] device bridge_slave_1 entered promiscuous mode [ 24.229005][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.236210][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.243473][ T286] device bridge_slave_0 entered promiscuous mode [ 24.253618][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.260873][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.268535][ T286] device bridge_slave_1 entered promiscuous mode [ 24.281155][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.288270][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.295838][ T288] device bridge_slave_0 entered promiscuous mode [ 24.305304][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.312501][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.320006][ T288] device bridge_slave_1 entered promiscuous mode [ 24.370219][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.377341][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.384848][ T289] device bridge_slave_0 entered promiscuous mode [ 24.394736][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.402362][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.409789][ T289] device bridge_slave_1 entered promiscuous mode [ 24.437956][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.445028][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.452631][ T287] device bridge_slave_0 entered promiscuous mode [ 24.462207][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.469335][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.476796][ T287] device bridge_slave_1 entered promiscuous mode [ 24.569844][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.577026][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.645097][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.652190][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.659492][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.666706][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.675343][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.682678][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.690076][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.697115][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.706384][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.713416][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.720695][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.727852][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.761518][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.768896][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.776401][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.783929][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.791548][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.798991][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.806359][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.814071][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.821607][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.859215][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.866867][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.874307][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.882683][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.891302][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.899666][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.907431][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.915793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.923948][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.931080][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.938549][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.946843][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.953871][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.961366][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.969528][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.976744][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.984069][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.000575][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.008777][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.015834][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.023456][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.031848][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.039121][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.072350][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.082069][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.090601][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.098797][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.107563][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.115548][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.123718][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.130780][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.138309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.147013][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.154061][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.161567][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.169861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.177860][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.186552][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.205709][ T287] device veth0_vlan entered promiscuous mode [ 25.213831][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.222411][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.230842][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.238078][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.245886][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.254051][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.262069][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.270361][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.278915][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.287221][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.295098][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.303596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.312078][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.319610][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.329511][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.338023][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.346342][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.353446][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.361745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.370081][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.384860][ T289] device veth0_vlan entered promiscuous mode [ 25.392216][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.400139][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.408602][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.416422][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.426686][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.434730][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.447407][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.455054][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.462754][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.471242][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.479406][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.487840][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.496044][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.504067][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.512347][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.519921][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.531570][ T287] device veth1_macvtap entered promiscuous mode [ 25.538914][ T285] device veth0_vlan entered promiscuous mode [ 25.546134][ T288] device veth0_vlan entered promiscuous mode [ 25.553258][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.561937][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.570407][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.586657][ T285] device veth1_macvtap entered promiscuous mode [ 25.599434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.608295][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.616513][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.624408][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.633875][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.642410][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.650690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.661185][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.669308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.680463][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.688072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.695637][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.703912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.714734][ T288] device veth1_macvtap entered promiscuous mode [ 25.722401][ T286] device veth0_vlan entered promiscuous mode [ 25.731192][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.739028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.747343][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.755811][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.763975][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.773164][ T289] device veth1_macvtap entered promiscuous mode [ 25.783838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.791927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.800541][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.809253][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.817543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.830442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.838837][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.857360][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.866443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.866663][ T285] request_module fs-gadgetfs succeeded, but still no fs? [ 25.874772][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.890380][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.901805][ T286] device veth1_macvtap entered promiscuous mode [ 25.912733][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.924256][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.933177][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.955713][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.964906][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.973928][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.983238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.008106][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.019696][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.057642][ T322] 9pnet_virtio: no channels available for device syz [ 26.111153][ T332] ------------[ cut here ]------------ [ 26.116907][ T332] kernel BUG at drivers/android/binder.c:1330! [ 26.123257][ T332] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 26.129686][ T332] CPU: 1 PID: 332 Comm: syz.3.10 Not tainted syzkaller #0 [ 26.137026][ T332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.147272][ T332] RIP: 0010:binder_inc_ref_for_node+0x10b3/0x11c0 [ 26.154080][ T332] Code: ff ff 48 89 df 41 89 f5 41 89 d7 41 89 ce e8 14 fa 10 fe 44 89 f1 4c 8b 75 c8 44 89 fa 44 89 ee e9 a3 fe ff ff e8 1d 84 d1 fd <0f> 0b 65 8b 05 bc cd 69 7c 41 89 c5 c1 e8 06 48 8d 3c c5 a8 59 e9 [ 26.175350][ T332] RSP: 0018:ffffc900078f7370 EFLAGS: 00010283 [ 26.181638][ T332] RAX: ffffffff83984383 RBX: 0000000000000000 RCX: 0000000000080000 [ 26.189638][ T332] RDX: ffffc90002b71000 RSI: 0000000000000036 RDI: 0000000000000037 [ 26.197643][ T332] RBP: ffffc900078f7410 R08: ffff88810c10383f R09: ffff88810c103830 [ 26.205749][ T332] R10: dffffc0000000000 R11: ffffed1021820708 R12: dffffc0000000000 [ 26.213921][ T332] R13: ffff88810c18f028 R14: ffff88810c18f010 R15: 0000000000000000 [ 26.222629][ T332] FS: 00007f69fc9076c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 26.231605][ T332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.238217][ T332] CR2: 0000200000004a80 CR3: 000000012a50a000 CR4: 00000000003506a0 [ 26.246504][ T332] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.254506][ T332] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.262508][ T332] Call Trace: [ 26.265806][ T332] [ 26.266807][ T60] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.268754][ T332] binder_thread_write+0x1497/0x6fe0 [ 26.281722][ T332] ? __kasan_check_write+0x14/0x20 [ 26.287114][ T332] ? binder_ioctl_get_freezer_info+0x470/0x470 [ 26.293382][ T332] ? finish_task_switch+0x16b/0x790 [ 26.298630][ T332] ? switch_mm_irqs_off+0x2f0/0x960 [ 26.303855][ T332] ? __schedule+0xbd7/0x14a0 [ 26.308481][ T332] ? release_firmware_map_entry+0x190/0x190 [ 26.314480][ T332] ? check_preempt_wakeup+0x725/0xbb0 [ 26.319890][ T332] ? __kasan_check_write+0x14/0x20 [ 26.325032][ T332] ? _copy_from_user+0x95/0xd0 [ 26.325426][ T306] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 26.329825][ T332] binder_ioctl_write_read+0x203/0x6700 [ 26.329853][ T332] ? schedule_preempt_disabled+0x20/0x20 [ 26.329873][ T332] ? ttwu_do_wakeup+0x100/0x470 [ 26.353535][ T332] ? preempt_schedule_thunk+0x16/0x18 [ 26.358917][ T332] ? try_to_wake_up+0x632/0x1150 [ 26.363855][ T332] ? __kasan_check_write+0x14/0x20 [ 26.368961][ T332] ? wake_up_q+0x106/0x1b0 [ 26.373389][ T332] ? futex_wake+0x64b/0x8f0 [ 26.377896][ T332] ? binder_has_work_ilocked+0x3e0/0x3e0 [ 26.383529][ T332] ? avc_has_extended_perms+0x869/0xed0 [ 26.389077][ T332] ? memcpy+0x56/0x70 [ 26.393145][ T332] ? avc_has_extended_perms+0x9d5/0xed0 [ 26.398691][ T332] ? __kasan_check_write+0x14/0x20 [ 26.403801][ T332] ? avc_flush+0x2b0/0x2b0 [ 26.408219][ T332] ? do_futex+0xdd3/0x2800 [ 26.412646][ T332] ? __kasan_check_write+0x14/0x20 [ 26.417755][ T332] ? _raw_spin_lock+0x94/0xf0 [ 26.422435][ T332] ? _raw_spin_trylock_bh+0x150/0x150 [ 26.427803][ T332] ? _raw_spin_unlock+0x4d/0x70 [ 26.432653][ T332] binder_ioctl+0x36c/0x1df0 [ 26.437249][ T332] ? vma_link+0x1a0/0x1f0 [ 26.441578][ T332] ? ioctl_has_perm+0x1b8/0x4f0 [ 26.446425][ T332] ? binder_poll+0x2d0/0x2d0 [ 26.451273][ T332] ? has_cap_mac_admin+0x370/0x370 [ 26.456391][ T332] ? selinux_file_ioctl+0x3ad/0x4c0 [ 26.461701][ T332] ? selinux_file_alloc_security+0x120/0x120 [ 26.467691][ T332] ? __fget_files+0x2e1/0x340 [ 26.472458][ T332] ? security_file_ioctl+0x84/0xa0 [ 26.477829][ T332] ? binder_poll+0x2d0/0x2d0 [ 26.482448][ T332] __se_sys_ioctl+0x121/0x1a0 [ 26.488968][ T332] __x64_sys_ioctl+0x7b/0x90 [ 26.493756][ T332] x64_sys_call+0x2f/0x9a0 [ 26.498449][ T332] do_syscall_64+0x4c/0xa0 [ 26.502950][ T332] ? clear_bhb_loop+0x50/0xa0 [ 26.507630][ T332] ? clear_bhb_loop+0x50/0xa0 [ 26.512315][ T332] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 26.518324][ T332] RIP: 0033:0x7f69fdeae159 [ 26.522758][ T332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.542465][ T332] RSP: 002b:00007f69fc907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 26.550899][ T332] RAX: ffffffffffffffda RBX: 00007f69fe135fa0 RCX: 00007f69fdeae159 [ 26.558969][ T332] RDX: 00002000000004c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 26.566942][ T332] RBP: 00007f69fdf4506b R08: 0000000000000000 R09: 0000000000000000 [ 26.574942][ T332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.583023][ T332] R13: 00007f69fe136038 R14: 00007f69fe135fa0 R15: 00007ffec858a608 [ 26.591086][ T332] [ 26.594113][ T332] Modules linked in: [ 26.598532][ T332] ---[ end trace fc40dc9a8c3882b2 ]--- [ 26.604788][ T332] RIP: 0010:binder_inc_ref_for_node+0x10b3/0x11c0 [ 26.611360][ T332] Code: ff ff 48 89 df 41 89 f5 41 89 d7 41 89 ce e8 14 fa 10 fe 44 89 f1 4c 8b 75 c8 44 89 fa 44 89 ee e9 a3 fe ff ff e8 1d 84 d1 fd <0f> 0b 65 8b 05 bc cd 69 7c 41 89 c5 c1 e8 06 48 8d 3c c5 a8 59 e9 [ 26.632421][ T332] RSP: 0018:ffffc900078f7370 EFLAGS: 00010283 [ 26.638546][ T332] RAX: ffffffff83984383 RBX: 0000000000000000 RCX: 0000000000080000 [ 26.646584][ T332] RDX: ffffc90002b71000 RSI: 0000000000000036 RDI: 0000000000000037 [ 26.654676][ T332] RBP: ffffc900078f7410 R08: ffff88810c10383f R09: ffff88810c103830 [ 26.662734][ T332] R10: dffffc0000000000 R11: ffffed1021820708 R12: dffffc0000000000 [ 26.670876][ T332] R13: ffff88810c18f028 R14: ffff88810c18f010 R15: 0000000000000000 [ 26.678874][ T332] FS: 00007f69fc9076c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 26.687840][ T332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.694419][ T332] CR2: 0000200000004a80 CR3: 000000012a50a000 CR4: 00000000003506a0 [ 26.702526][ T332] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.710517][ T332] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.718623][ T332] Kernel panic - not syncing: Fatal exception [ 26.724756][ T332] Kernel Offset: disabled [ 26.729095][ T332] Rebooting in 86400 seconds..