last executing test programs: 21.408101963s ago: executing program 2 (id=389): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000040)={{0x3, 0x9}, 0x100, './file0\x00'}) ioctl$FIONCLEX(r0, 0x5450) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xb8c) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$BLKCRYPTOIMPORTKEY(r1, 0xc0401289, &(0x7f0000000280)={&(0x7f00000001c0)="f142b042025ffc505d6567bf101ec7f62a", 0x11, &(0x7f0000000200)=""/97, 0x61}) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f00000002c0)) (async) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) (async, rerun: 32) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000780)={{}, {0xa}, 0x132, 0x0, 0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000400)="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", 0x122, 0x0, &(0x7f0000000540)={0x2, 0x1cb, {0x0, 0xc, 0xe2, "ea2275667eed90f3c305ce102f0c5ade711e782bdffc735be347ec90bf71b7aa87217a353ede70871001b1c37a1270ebce93f11a8a06164b862983d9b787cab43e544dad5f8ac9ac08ca5ef10dbdea6db091f074c83a9c21194ce6412ce12b112f00c251d28561aa6ca2285a3bcb90c43ed66427226e336fb8d0b7b3cb917824bbe75b6b9290d7cb10487db2003e62a039e6d2616e226b586adc6012327bfc665b78709907493df5650d9710edcceca7eb10298e77dcae440201671cc2e49dac9bf46992760ac8c267898a2763eead47fb59affb78e4e671a00e29ba1b87ad9da5a4", 0xdc, "95c3f8d1e81cdd3056b649b458cc059131cdcca91721d433f685c09d8f3b02983e2b470f57390f455df63551df272a1e65f3ca5d16ad31318b66ef29563c37f9c8b8278ecd2770b048382337b20b9a2cb2ae59b12e191e20d74b8f985abbf715ccb3a8a1f1b06212193411b0e8c4dc803f5fca904149d42900ddc95f491e5b9c5e53b3962a7ba4af4d549d7b96e2625d5fa28f003835b673c4bdee1378d7f2d9164f367fc9c69f8c8ac4097a9e9153c18ad26645741f306485302df64fc698cbdaacaeecbed88cbe0c1a998cb17e08cc007573dbb88a64286e81929d"}, 0x40, "5a5f9e2f817ade03590b068d13c1bbaa886835dd6e368991a5c67dc9fc57abe20ed5e843473d4e1a4fd6427409e3e14a3e3d75b939690949f56e8f117cafdb9e"}, 0x217}) (async, rerun: 32) read$FUSE(r3, &(0x7f0000000800)={0x2020}, 0x2020) (async) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000002840)={0x5, 0x4}) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000002880)={r2}) (async) write$binfmt_register(r3, &(0x7f00000028c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x0, 0x3a, ',{\'\xfd{,\'', 0x3a, '/dev/rnullb0\x00', 0x3a, './file0', 0x3a, [0x50, 0x46]}, 0x3d) (async) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000002d00)={0x3, 0x1, 0x1e, 0x20, 0xa5, &(0x7f0000002900)}) (async) close_range(r3, r3, 0x2) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000002d40)={0x2}) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc00c6211, &(0x7f0000002d80)) ioctl$BLKPG(r3, 0x1269, &(0x7f0000002e80)={0x3, 0x0, 0x98, &(0x7f0000002dc0)={0x2, 0x8, 0x4}}) (async) write$binfmt_register(r3, &(0x7f0000002ec0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x7, 0x3a, ',.\x00', 0x3a, '/selinux/avc/hash_stats\x00', 0x3a, './file0/file0', 0x3a, [0x43, 0x4f, 0x46, 0x46, 0x43, 0x13]}, 0x4e) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000002f40)={0x0, 0x1, [0xfffffffffffffffb, 0x8, 0x80000000, 0x1849, 0x7, 0x4]}) (async, rerun: 64) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000002f80)={0x7, 0x200, [{0xfffffffc, 0x0, 0xffff}, {0x3, 0x0, 0x5}, {0x8220, 0x0, 0x22}, {0x6, 0x0, 0x8}, {0x401, 0x0, 0xffffffff}, {0xa6, 0x0, 0x3}, {0x3, 0x0, 0x4}]}) (async, rerun: 64) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000003000), 0x80001, 0x0) ioctl$BLKRESETZONE(r4, 0x40101283, &(0x7f0000003040)={0x80000000, 0xfffffffffffffff7}) (async, rerun: 32) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000003080)=0x2) (rerun: 32) ioctl$KVM_CAP_HYPERV_SEND_IPI(r3, 0x4068aea3, &(0x7f00000030c0)) (async) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000003140)={0xa8, 0x0, 0x1}) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f00000031c0)={0x3, 0xffffffffffffffff, 'id0\x00'}) 21.326302814s ago: executing program 2 (id=390): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)=0x1) 21.301947224s ago: executing program 2 (id=391): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x90, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000000), 0x0, 0x1, 0x38}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/177, 0xb1, 0x0, 0x1c}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x0, 0x3}, @fda={0x66646185, 0x9, 0x1, 0x31}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}, 0x1000}], 0xe0, 0x0, &(0x7f00000006c0)="3dc90f0349550ea753c93d37c71536641369091e68268e9f27e92fa9aef2504abe1a86ab9e984ff013226f9d4c1b5385248ef09bd745151daf7ce93a5aa697bea60973357fad9564dea867a3fce43a38ed17acd7f1b2f57902b32419916e183037a97edab674e6d73de700f19ea77728ef116e564bd0e2808a94cbbea876011a361407f2753ec69502e9a78211378ccbcde9f889bfab68ad940a53afaf437df02177f5e3438dd8147d39b6c70eec4d541f09ba91d448122881677df067e5c314f314d98a79879eeec202e87b4064c02af0daac47fd24c4085193fffbbb4e390c"}) (async) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x2002) openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs2/binder1\x00', 0x802, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x10a, 0x2}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x3, 0x0, &(0x7f00000007c0)=""/129, &(0x7f0000000880)=""/137, &(0x7f0000000500)=""/101, 0x8080000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) (async, rerun: 64) ioctl$TUNSETLINK(r3, 0x400454cd, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x5) 21.159989976s ago: executing program 2 (id=393): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) write$cgroup_subtree(r2, &(0x7f0000000180)={[{0x2d, 'memory'}, {0x2b, 'rlimit'}, {0x2b, 'hugetlb'}, {0x2b, 'net_cls'}, {0x2b, 'hugetlb'}, {0x2b, 'freezer'}]}, 0x34) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x78, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}, @clear_death={0x400c630f, 0x1}, @increfs_done={0x40106308, 0x1}], 0x5a, 0x0, &(0x7f0000000000)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac25dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) 21.139251547s ago: executing program 2 (id=394): prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x300000c, 0x4f832, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4}) close(0x5) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) prctl$PR_GET_NAME(0x10, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@x86={0x2, 0x4, 0x3, 0x0, 0x7, 0x0, 0x4, 0xf, 0x81, 0x8, 0x8, 0x2, 0x0, 0x3, 0xa, 0x9, 0x57, 0xb3, 0xd, '\x00', 0x1, 0xc3d2}) ioctl$KVM_GET_MP_STATE(r6, 0x8004ae98, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x4, &(0x7f00000001c0)=""/64, 0x40, 0x0, 0x32}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 20.857659511s ago: executing program 2 (id=400): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500), 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) 5.865230801s ago: executing program 32 (id=400): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500), 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) 4.492881631s ago: executing program 4 (id=636): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x402080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x65) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000080)) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x4) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x284100, 0x83) ioctl$BLKROGET(r2, 0x125e, &(0x7f00000001c0)) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000200)) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000240)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x7) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x101280, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{0x0, 0xf, 0x7, 0xffff4ece}, {0x4, 0x54, 0x0, 0xce}, {0x9, 0x81, 0x7, 0x9}]}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000400)=0xa) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x402000, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000004c0)={0x4, &(0x7f0000000480)=[{0x1, 0x4, 0x7, 0x3}, {0xd, 0x3, 0x7, 0x1}, {0x1, 0x4, 0x2, 0x9b}, {0xf001, 0x6d, 0x6, 0x8}]}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kheaders.tar.xz', 0x24000, 0x21) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000001680)={0x1, 0x0, &(0x7f0000000540)=""/4096, &(0x7f0000001540)=""/252, &(0x7f0000001640)=""/53, 0xffff1000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000016c0)={0x10000, 0x0, 0x1}) r6 = openat$cgroup_ro(r2, &(0x7f0000001700)='cpuset.effective_cpus\x00', 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000001780)={0x1, 0x0, [{0x80000000, 0x0, 0x4187241573f3e311, 0x7ff, 0xffff2f6b, 0xa7f, 0x5}]}) read$FUSE(r0, &(0x7f00000017c0)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000003800)) openat$kvm(0xffffffffffffff9c, &(0x7f0000003840), 0x260000, 0x0) 3.480464757s ago: executing program 4 (id=645): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0xa8002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r7 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000054d564b0000000001000000000000d0"]) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r11, 0x4010ae42, &(0x7f0000008a00)={0x1fe, 0x0, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000300)={0x101ff, 0x5, 0xdddd1000, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r12 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FITHAW(r12, 0xc0045878) (async) r13 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000000000000500b0000000000000b000000000000006909000000000000010000000000805b08000000000000030000000000000000"]) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r14 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r14, 0xc0389424, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 3.041719934s ago: executing program 3 (id=646): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x2, 0x1000, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x16, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2.828549227s ago: executing program 3 (id=649): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000240)={{}, {}, 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000400), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000008b020000000000001a00000000000000363619fc75f71157c9f926913fd597075ef300ac1ea420e366332e677b6475f252c1ea7ed3d77b89980bbd0fb36f80c1fba86d500bcb2f194ef16b32d8af7e19f5e668eb7e8c8c2616db6ca5db4d915d8010ad30593a4c3fbeb531a14cab71f47cb27bd55d958ecbc895d5b04d78c26b8061272edaf97d01a9de9fd7c3d8524f171c2513df5f6180246528025e54e0ac7a05c14fb2c8213a08afe94d3e9f1968117012aed8c28b688566f800bf112d1de72022a57dc8b11546526e25ad952adaf4958d8da275fb1484e0f1d3d4659ae06addae58bbc25827515b5c216c"]) syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0x8, 0x6, '\x00', 0x1f8630ad}) ioctl$KVM_SET_GUEST_DEBUG(r10, 0x4048ae9b, &(0x7f0000000080)={0x1e0003, 0x0, [0x8, 0xff, 0xfffffffffffffffb, 0x3e00000000000000, 0x7fffffff, 0x7, 0x9, 0xa]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x8010, 0xffffffffffffffff, 0xcef9d000) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f00000001c0)={0x5000, 0x300000}) syz_clone(0x802400, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r12 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r12, 0x40087703, 0xffffffc1) ioctl$ASHMEM_SET_NAME(r12, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') 2.828154237s ago: executing program 4 (id=650): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x53, 0x0, &(0x7f0000000400)="892a7863af87409b1b8fe4e183cc4e2c2eddca324f8c2a61fb078c81d7272d92b902bf051aacb6decd83ec368991a0d7599c3ce3f7bed9d8078ba649896475d964ddb0c6d4d498b0ef80a3f6170b75654851be"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/disk', 0xa0042, 0x182) write$tcp_mem(r1, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007401"]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) 1.94026636s ago: executing program 3 (id=656): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000100)={0x0, 0x4}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001580)={0x4, 0x0, [{0xd000, 0xc0, &(0x7f00000000c0)=""/192}, {0xd000, 0xaa, &(0x7f0000001400)=""/170}, {0xd000, 0x5b, &(0x7f00000014c0)=""/91}, {0xf000, 0x0, 0x0}]}) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0000001000000000000']) 1.854597701s ago: executing program 4 (id=658): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x141080, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0xe43986f95b0e4309}) ioctl$TUNGETSNDBUF(r2, 0x400454dc, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x4f38ab93bd3886c1, 0x2) ioctl$BLKRRPART(r1, 0x125f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xb1b81000) 1.414466799s ago: executing program 3 (id=662): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x58, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b418709844"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000c00)={0x1, 0x0, [{0x3a, 0x0, 0x2}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0xfffffffffffffffd) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f00000002c0)=[@free_buffer={0x40086315}], 0x0, 0x0, 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r7, 0x400454ce, 0xf97ad6f95ad21833) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.34988687s ago: executing program 0 (id=663): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000400), 0x48) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB='-'], 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000000020000000000000000"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f00000001c0), 0x12) r14 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r14, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$BLKRRPART(r10, 0x125f, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000000000000050000000000000000000000030000000000f100ffffffff"]) ioctl$KVM_IRQ_LINE_STATUS(r9, 0xc008ae67, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 893.574257ms ago: executing program 0 (id=665): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@arm64={0xf4, 0xa, 0x7, '\x00', 0x8000000000000001}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0xe0001}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000000c0)=ANY=[]) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008c04"]) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4602, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x90800, 0x0) ioctl$BLKPG(r7, 0x1269, &(0x7f00000003c0)={0x2, 0x0, 0x0, 0x0}) ioctl$BLKRRPART(r6, 0x125f, 0x0) 791.386298ms ago: executing program 1 (id=666): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a\x00\x00\x00\x00\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 758.134788ms ago: executing program 0 (id=667): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x6e8882, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x2000, 0x5000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000340)=[@increfs, @request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) 678.57815ms ago: executing program 1 (id=668): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x50b080, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x141040, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x240, 0x0, 0x8}]}) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r2, &(0x7f0000000200), 0x48) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write(r5, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008a04"]) (async) ioctl$TCSBRKP(r5, 0x5425, 0x10) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f00000001c0)=ANY=[@ANYBLOB='nXI']) 677.85161ms ago: executing program 0 (id=669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000024c0)=ANY=[@ANYBLOB="010000000000000086010008000000000300000000000000cc75480d4552c288832bdad0635429bf22aee2863d907d99dcb545af47865996cdbe339a8ab27ff9a5411bb7d1b779d97081505693084e980e7399bc53d2ea3aa5497678"]) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r5, 0x400454a4, &(0x7f00000000c0)) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x49de, 0x3, 0x2, 0x7ff, 0x0, "03880d17f2cf8baf"}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000002540)={0x12714, 0x0, 0xd2a570fffe60de16, 0x2000, &(0x7f0000701000/0x2000)=nil}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x1, 0xdb30, 0x3, 0x200, 0x4, 0x6, 0x5c, 0xfd1, 0x7, 0xc0000000000000, 0x6, 0x0, 0xfffffffffffffff9, 0x4, 0xe, 0x25d9], 0x3000, 0x1000}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x47, 0x0, 0x0, 0x0, 0x2004cc, 0x8000000, 0x0, 0x10000000, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x5]}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0xb}, 0x0, [0xc, 0x3, 0x403, 0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa9a4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff0, 0x4, 0x80000000, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x8, 0x7, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xffeffffc, 0x0, 0x3f460ac7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x0, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x200000, 0x1000, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd33, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x8000000, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0xf) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r8, 0x5501) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r9, 0x0) openat(r9, &(0x7f0000000000)='./file0\x00', 0x40000, 0xc0) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x4) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000000440)={{0x0, 0x0, 0x80, {0x2000, 0x0, 0x1}}, "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", "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"}) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d61783d30303030303030833030303030303030303030303030302c00"]) 620.031971ms ago: executing program 4 (id=670): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x48) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x17) (async) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[]) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) (async) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) ioctl$BINDER_CTL_ADD(r7, 0xc1086201, &(0x7f0000000040)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r6, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) 589.242681ms ago: executing program 1 (id=671): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) read$FUSE(r1, &(0x7f0000001140)={0x2020}, 0x2020) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x3) write$cgroup_int(r3, &(0x7f0000000280), 0x12) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000bc0)=""/4096, 0x1000, 0x1, 0x1a}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x15}, @fda={0x66646185, 0x8, 0x0, 0x1b}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 491.851963ms ago: executing program 1 (id=672): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000082}]}) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001180), 0x802, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000400)={0x54, 0x0, &(0x7f0000000300)=[@increfs, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92, 0x80a0000}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000640)={[0xa, 0x7, 0x8000, 0x7, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41847}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r9, 0x4018aee2, &(0x7f0000000240)=""/90) (async) ioctl$VT_DISALLOCATE(r8, 0x5608) 403.275614ms ago: executing program 4 (id=673): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101140, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) write(r2, &(0x7f0000000100)="97", 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000200)=0x1) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) close(0x3) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x949902, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f00000000c0)={{0x1, 0xac}, {0xfffffffffffffffc}, 0x1, 0x6}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r6, 0x2000) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0000001000000000000']) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x242000, 0x0) openat(r7, &(0x7f0000000080)='./file0\x00', 0x0, 0x146) 353.049265ms ago: executing program 3 (id=674): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000480)={0xe, 0x1, 0x7}) ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc00c6211, &(0x7f0000000200)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000000000007b01"]) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x2a0048, &(0x7f00000000c0)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030303031332c73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030303030362c7375626a5f747970653d2923ab2c6f626a5f726f6c653d62653d62696e646572002c66736d616769633d3078383030303030303030303030303030302c646566636f6e746578743d726f6f742c00"/175]) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) 281.655086ms ago: executing program 0 (id=675): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x63761469321c3ff0, 0x1}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000640)=[@acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={@flat=@handle={0x73682a85, 0x1, 0x1}, @fda={0x66646185, 0x3, 0x1, 0x19}, @flat=@handle={0x73682a85, 0x101, 0x3}}, &(0x7f00000001c0)}}, @dead_binder_done, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/138, 0x0, 0x2, 0x2a}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/27, 0x0, 0x1000001, 0x13}, @fda={0x66646185, 0x2, 0x0, 0x2a}}, &(0x7f00000004c0)}, 0x40}, @acquire_done={0x40106309, 0x3}], 0xd4, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe4721000b0000a942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b"}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x101340, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000002c0)=ANY=[@ANYBLOB="040000000000000028ffffffffc9f9098307ffff516cff00e2030000000000000000003f1f9b0a000000000000"]) (async) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, 0x0) (async) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000082, 0x0, 0x90000000}]}) (async) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000180)={0x2000}) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000080)) 174.457467ms ago: executing program 1 (id=676): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$UHID_INPUT(r1, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000100)={{r0}, 0x1, &(0x7f0000000000)=[0x33e9], 0x1, 0x12, 0x1}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x80040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x6, 0xfffffffffffffffd, 0x2bf9, 0x1, 0x2, 0x0, 0x400, 0x5, 0x0, 0x6, 0x2, 0x0, 0x2, 0x6, 0x0, 0x4], 0x2000, 0x2c0242}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000300)={0x1, 0x0, [{0x2, 0xfffffff0, 0x0, 0x80000000, 0x3f0, 0x8001, 0xe}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$cgroup_freezer_state(r1, &(0x7f00000011c0), 0x2, 0x0) 173.647218ms ago: executing program 0 (id=677): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000140)={0x8000000, 0x4000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000080)={0xeeef0000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f00000000c0)={0x6000, 0x7000}) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) r9 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r9, &(0x7f0000002000)=ANY=[@ANYBLOB='\t'], 0x1) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x54, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r10}, @ptr={0x70742a85, 0x2, &(0x7f0000000240)=""/13, 0xffffffffffffffe1, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) 109.518708ms ago: executing program 1 (id=678): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000240)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x0, 0x3000, 0x1000, &(0x7f00006cd000/0x1000)=nil}) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000001180)=""/4096) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000200)={0xe4a1, 0x8001}) (async) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x301140, 0x0) read(r5, &(0x7f0000000040)=""/106, 0x6a) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd, 0x80010, r2, 0xa40000) (async) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r4, 0x4068aea3, &(0x7f0000000140)={0xc5, 0x0, r2}) 0s ago: executing program 3 (id=679): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x98, 0x0, &(0x7f0000000300)=[@increfs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fd, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/163, 0xa3, 0x2, 0x3a}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x400}], 0x4, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.74' (ED25519) to the list of known hosts. [ 26.646034][ T36] audit: type=1400 audit(1750361129.880:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.647864][ T282] cgroup: Unknown subsys name 'net' [ 26.674284][ T36] audit: type=1400 audit(1750361129.880:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.706070][ T36] audit: type=1400 audit(1750361129.920:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.706323][ T282] cgroup: Unknown subsys name 'devices' [ 26.898621][ T282] cgroup: Unknown subsys name 'hugetlb' [ 26.906363][ T282] cgroup: Unknown subsys name 'rlimit' [ 27.042543][ T36] audit: type=1400 audit(1750361130.270:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.070864][ T36] audit: type=1400 audit(1750361130.270:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.101965][ T36] audit: type=1400 audit(1750361130.270:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.115366][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.141942][ T36] audit: type=1400 audit(1750361130.370:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 27.174121][ T36] audit: type=1400 audit(1750361130.370:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.234809][ T36] audit: type=1400 audit(1750361130.470:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.265041][ T36] audit: type=1400 audit(1750361130.470:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.265132][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.264821][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.275029][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.285244][ T291] bridge_slave_0: entered allmulticast mode [ 28.293283][ T291] bridge_slave_0: entered promiscuous mode [ 28.313060][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.322252][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.330308][ T291] bridge_slave_1: entered allmulticast mode [ 28.337617][ T291] bridge_slave_1: entered promiscuous mode [ 28.376742][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.387798][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.398440][ T290] bridge_slave_0: entered allmulticast mode [ 28.406378][ T290] bridge_slave_0: entered promiscuous mode [ 28.415715][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.425513][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.434418][ T289] bridge_slave_0: entered allmulticast mode [ 28.445449][ T289] bridge_slave_0: entered promiscuous mode [ 28.457160][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.466185][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.475679][ T290] bridge_slave_1: entered allmulticast mode [ 28.484739][ T290] bridge_slave_1: entered promiscuous mode [ 28.492580][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.501713][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.513263][ T289] bridge_slave_1: entered allmulticast mode [ 28.522106][ T289] bridge_slave_1: entered promiscuous mode [ 28.584371][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.594631][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.605307][ T292] bridge_slave_0: entered allmulticast mode [ 28.613940][ T292] bridge_slave_0: entered promiscuous mode [ 28.634904][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.643596][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.654952][ T292] bridge_slave_1: entered allmulticast mode [ 28.662193][ T292] bridge_slave_1: entered promiscuous mode [ 28.831919][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.839138][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.848620][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.856724][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.900080][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.909620][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.918517][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.926592][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.943889][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.955304][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.964915][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.974992][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.998467][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.006650][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.016017][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.023977][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.056518][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.066020][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.075580][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.085054][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.095425][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.103802][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.112226][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.120505][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.142715][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.150473][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.171137][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.180198][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.201101][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.208883][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.237182][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.246738][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.257647][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.268220][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.277606][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.285625][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.314845][ T290] veth0_vlan: entered promiscuous mode [ 29.327590][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.335472][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.349458][ T290] veth1_macvtap: entered promiscuous mode [ 29.368179][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.376824][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.389470][ T292] veth0_vlan: entered promiscuous mode [ 29.436793][ T292] veth1_macvtap: entered promiscuous mode [ 29.448567][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.465612][ T291] veth0_vlan: entered promiscuous mode [ 29.480974][ T289] veth0_vlan: entered promiscuous mode [ 29.519059][ T309] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.554098][ T289] veth1_macvtap: entered promiscuous mode [ 29.571291][ T291] veth1_macvtap: entered promiscuous mode [ 29.654263][ T315] binder: Unknown parameter 'fscontext?}' [ 29.666810][ T316] block device autoloading is deprecated and will be removed. [ 29.706534][ T316] binder: Binderfs stats mode cannot be changed during a remount [ 29.723079][ T316] ======================================================= [ 29.723079][ T316] WARNING: The mand mount option has been deprecated and [ 29.723079][ T316] and is ignored by this kernel. Remove the mand [ 29.723079][ T316] option from the mount to silence this warning. [ 29.723079][ T316] ======================================================= [ 29.812343][ T329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7 [ 29.891831][ T333] SELinux: Context \MZr})QN'd: is not valid (left unmapped). [ 29.963553][ T336] input: syz1 as /devices/virtual/input/input4 [ 30.053641][ T339] serio: Serial port ttynull [ 30.118673][ T342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:8 [ 30.120129][ T339] SELinux: failed to load policy [ 30.135392][ T344] input: syz0 as /devices/virtual/input/input5 [ 30.150562][ T344] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 30.200329][ T346] kvm: user requested TSC rate below hardware speed [ 30.210744][ T346] rust_binder: Write failure EINVAL in pid:12 [ 30.232700][ T350] rust_binder: Write failure EFAULT in pid:8 [ 30.298623][ T351] kernel profiling enabled (shift: 8) [ 30.302899][ T355] rust_binder: Error while translating object. [ 30.325481][ T355] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.334357][ T355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12 [ 30.400002][ T359] binder: Unknown parameter 'defcontext00000000000000000000003' [ 30.463841][ T364] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.464101][ T364] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 30.566759][ T368] rust_binder: Error while translating object. [ 30.576782][ T368] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.599397][ T368] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 30.615700][ T368] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:17 [ 30.651914][ T373] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.674462][ T373] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 30.761104][ T384] binder: Unknown parameter 'doLash' [ 30.846831][ T393] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 30.933188][ T399] input: syz0 as /devices/virtual/input/input6 [ 31.064740][ T404] binder: Unknown parameter ':yІ(_<񑣭5R<Jp-ʭ廾Xcy6hԇw䋅źi>_ࡶҊnvcYA#>*/oTh2\4^>OMTm' [ 31.164408][ T406] __vm_enough_memory: pid: 406, comm: syz.2.34, bytes: 281474976845824 not enough memory for the allocation [ 31.183978][ T406] __vm_enough_memory: pid: 406, comm: syz.2.34, bytes: 281474976845824 not enough memory for the allocation [ 31.365898][ T413] rust_binder: Write failure EINVAL in pid:27 [ 31.375604][ T418] binder: Bad value for 'max' [ 31.612517][ T421] rust_binder: Error while translating object. [ 31.612557][ T421] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 31.619876][ T421] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:31 [ 31.647218][ T423] binfmt_misc: register: failed to install interpreter file ./file0 [ 31.713621][ T425] rust_binder: Failed copying remainder into alloc: EFAULT [ 31.713648][ T425] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 31.723637][ T425] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 31.734308][ T425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:35 [ 31.843039][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 31.843058][ T36] audit: type=1400 audit(1750361135.070:139): avc: granted { setsecparam } for pid=430 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 31.870429][ T435] __vm_enough_memory: pid: 435, comm: syz.2.44, bytes: 281474976845824 not enough memory for the allocation [ 31.884967][ T36] audit: type=1400 audit(1750361135.070:140): avc: denied { ioctl } for pid=430 comm="syz.2.44" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.928309][ T36] audit: type=1400 audit(1750361135.090:141): avc: denied { read write } for pid=436 comm="syz.3.46" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 31.957547][ T36] audit: type=1400 audit(1750361135.090:142): avc: denied { open } for pid=436 comm="syz.3.46" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 31.985317][ T36] audit: type=1400 audit(1750361135.140:143): avc: denied { ioctl } for pid=436 comm="syz.3.46" path="net:[4026532303]" dev="nsfs" ino=4026532303 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.108615][ T36] audit: type=1400 audit(1750361135.340:144): avc: denied { write } for pid=440 comm="syz.3.48" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 32.144109][ T439] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 32.146236][ T36] audit: type=1400 audit(1750361135.370:145): avc: denied { append } for pid=440 comm="syz.3.48" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.154256][ T439] pim6reg0: linktype set to 769 [ 32.208153][ T36] audit: type=1400 audit(1750361135.440:146): avc: denied { map } for pid=443 comm="syz.3.49" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 32.287029][ T36] audit: type=1400 audit(1750361135.440:147): avc: denied { execute } for pid=443 comm="syz.3.49" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 32.328842][ T453] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.328890][ T453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 32.349168][ T36] audit: type=1400 audit(1750361135.470:148): avc: denied { append } for pid=438 comm="syz.2.47" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 32.408619][ T10] hid (null): unknown global tag 0xc [ 32.417346][ T10] hid (null): bogus close delimiter [ 32.443189][ T461] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.448396][ T10] hid (null): report_id 2605 is invalid [ 32.471638][ T461] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false [ 32.471669][ T461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 32.485190][ T10] hid-generic 0001:FFFFFFF7:0037.0001: unknown global tag 0xc [ 32.511717][ T461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:25 [ 32.541419][ T10] hid-generic 0001:FFFFFFF7:0037.0001: item 0 4 1 12 parsing failed [ 32.568961][ T10] hid-generic 0001:FFFFFFF7:0037.0001: probe with driver hid-generic failed with error -22 [ 32.571579][ T468] rust_binder: Error while translating object. [ 32.582236][ T468] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 32.590343][ T468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:40 [ 32.636797][ T472] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.673472][ T472] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 32.701931][ T472] rust_binder: Write failure EINVAL in pid:28 [ 32.900715][ T485] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 32.920460][ T485] rust_binder: Write failure EINVAL in pid:45 [ 33.062617][ T497] rust_binder: Write failure EFAULT in pid:31 [ 33.129739][ T503] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 33.148463][ T503] rust_binder: Write failure EINVAL in pid:35 [ 33.176371][ T507] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.204109][ T511] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.231363][ T507] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.246818][ T509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 33.266201][ T509] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.295829][ T509] rust_binder: Read failure Err(EFAULT) in pid:49 [ 33.325653][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.345442][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.355142][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.367567][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.376984][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.386819][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.404964][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.416451][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.431554][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.441158][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.450164][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.460173][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.469288][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.478321][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.488923][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.498792][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.507853][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.518194][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.527961][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.536904][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.546401][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.556379][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.566397][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.576654][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.585522][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.595873][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.605279][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.613786][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.623008][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.632009][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.641464][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.650976][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.665870][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.675543][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.689340][ T525] rust_binder: Error while translating object. [ 33.689385][ T525] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 33.693609][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.700483][ T525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:54 [ 33.722785][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.743894][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.754177][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.764068][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.765684][ T532] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 33.773309][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.799437][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.809151][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.822586][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.832944][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.846533][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.856617][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.865218][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.882769][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.912119][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.924579][ T542] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 33.924589][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.924619][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.962061][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.974235][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.985191][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 33.995415][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.007840][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.016797][ T545] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 34.017416][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.027774][ T545] rust_binder: Write failure EINVAL in pid:63 [ 34.037822][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.055942][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.065868][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.075274][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.084482][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.095369][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.107003][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.118166][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.127929][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.137086][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.150206][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.156157][ T547] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 34.162665][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.174522][ T547] rust_binder: Error while translating object. [ 34.183656][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.206988][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.218167][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.227022][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.235963][ T547] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.236013][ T547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65 [ 34.250292][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.250338][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.290248][ T551] SELinux: security_context_str_to_sid () failed with errno=-22 [ 34.302814][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.332812][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.342844][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.353308][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.370430][ T556] rust_binder: Write failure EINVAL in pid:70 [ 34.375073][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.395356][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.395962][ T560] SELinux: security_context_str_to_sid () failed with errno=-22 [ 34.405888][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.423480][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.432761][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.448325][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.459789][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.471491][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.491330][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.501485][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.520626][ T569] binder: Bad value for 'stats' [ 34.522680][ T571] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.526679][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.549751][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.559634][ T575] rust_binder: Write failure EINVAL in pid:73 [ 34.570949][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.586934][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.595874][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.608744][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.626379][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.636249][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.649209][ T581] binder: Bad value for 'max' [ 34.654261][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.669063][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.677902][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.694712][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.705167][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.714572][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.724152][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.733714][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.745016][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.754869][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.765231][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.774448][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.786611][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.797534][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.807032][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.816240][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.825653][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.834976][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.845520][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.856243][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.865829][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.879494][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.891542][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.901202][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.910382][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.919380][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.930138][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.940547][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.950348][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.960151][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.974192][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.983797][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 34.992958][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.006417][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.015425][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.031369][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.040551][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.050305][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.058911][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.067643][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.076064][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.076221][ T598] random: crng reseeded on system resumption [ 35.085072][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.085106][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.085132][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.085159][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.085185][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.085210][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.085237][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.085263][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.085290][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.174502][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.183997][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.192999][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.204107][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.215387][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.226872][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.236969][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.246947][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.256981][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.265661][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.275295][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.284346][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.293234][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.302627][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.312797][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.322693][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.332412][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.341562][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.352419][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.361665][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.370892][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.380996][ T312] hid-generic 0008:0000:FFFFFBFF.0002: unknown main item tag 0x0 [ 35.394615][ T312] hid-generic 0008:0000:FFFFFBFF.0002: hidraw0: HID v9.86 Device [syz0] on syz1 [ 35.408034][ T601] Restarting kernel threads ... done. [ 35.419306][ T604] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1531215282 (3062430564 ns) > initial count (1473793136 ns). Using initial count to start timer. [ 35.447407][ T609] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 35.489630][ T605] fido_id[605]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 35.561183][ T619] input: syz1 as /devices/virtual/input/input9 [ 35.573879][ T618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.631398][ T625] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 35.672877][ T630] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.679092][ T632] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.689421][ T632] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:73 [ 35.767283][ T644] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 35.792824][ T647] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.801422][ T647] kvm: kvm [645]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 35.927979][ T659] SELinux: unknown common r [ 35.933687][ T659] SELinux: failed to load policy [ 36.004058][ T292] cgroup: fork rejected by pids controller in /syz2 [ 36.040215][ T670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.044152][ T670] rust_binder: Write failure EINVAL in pid:63 [ 36.205877][ T13] bridge_slave_1: left allmulticast mode [ 36.220154][ T674] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.220443][ T674] rust_binder: Write failure EINVAL in pid:65 [ 36.235426][ T13] bridge_slave_1: left promiscuous mode [ 36.263618][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.277255][ T13] bridge_slave_0: left allmulticast mode [ 36.286691][ T13] bridge_slave_0: left promiscuous mode [ 36.293410][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.521491][ T13] veth1_macvtap: left promiscuous mode [ 36.536113][ T13] veth0_vlan: left promiscuous mode [ 36.595180][ T699] SELinux: security_context_str_to_sid () failed with errno=-22 [ 36.672200][ T710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.673708][ T710] rust_binder: Write failure EINVAL in pid:76 [ 36.768571][ T690] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.786009][ T690] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.794835][ T690] bridge_slave_0: entered allmulticast mode [ 36.804187][ T690] bridge_slave_0: entered promiscuous mode [ 36.814958][ T690] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.837518][ T690] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.847631][ T690] bridge_slave_1: entered allmulticast mode [ 36.855393][ T690] bridge_slave_1: entered promiscuous mode [ 36.998768][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 36.998789][ T36] audit: type=1400 audit(1750361140.230:168): avc: denied { create } for pid=690 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.039584][ T690] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.050887][ T690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.059733][ T690] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.067958][ T690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.077403][ T723] binder: Bad value for 'max' [ 37.107280][ T36] audit: type=1400 audit(1750361140.260:169): avc: denied { write } for pid=690 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.173885][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.184829][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.186149][ T36] audit: type=1400 audit(1750361140.260:170): avc: denied { read } for pid=690 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.197020][ T729] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:122 [ 37.231239][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.251616][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.275852][ T36] audit: type=1400 audit(1750361140.420:171): avc: denied { setattr } for pid=728 comm="syz.3.140" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.280422][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.315814][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.340771][ T731] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 37.340813][ T731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:124 [ 37.421109][ T690] veth0_vlan: entered promiscuous mode [ 37.493949][ T690] veth1_macvtap: entered promiscuous mode [ 37.506084][ T36] audit: type=1400 audit(1750361140.740:172): avc: denied { write } for pid=735 comm="syz.3.142" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.534477][ T738] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.548212][ T36] audit: type=1400 audit(1750361140.760:173): avc: denied { remove_name } for pid=735 comm="syz.3.142" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.586299][ T738] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 37.586336][ T738] rust_binder: Error while translating object. [ 37.621382][ T738] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.629408][ T36] audit: type=1400 audit(1750361140.760:174): avc: denied { unlink } for pid=735 comm="syz.3.142" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.630291][ T738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 37.711111][ T751] binder: Bad value for 'max' [ 37.746996][ T756] binder: Bad value for 'max' [ 38.009966][ T774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.011256][ T774] rust_binder: Write failure EINVAL in pid:91 [ 38.043565][ T36] audit: type=1400 audit(1750361141.270:175): avc: denied { append } for pid=775 comm="syz.0.153" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.080624][ T36] audit: type=1400 audit(1750361141.270:176): avc: denied { read } for pid=775 comm="syz.0.153" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 38.141417][ T36] audit: type=1400 audit(1750361141.270:177): avc: denied { open } for pid=775 comm="syz.0.153" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 38.196614][ T781] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 38.321689][ T785] binder: Bad value for 'stats' [ 38.503525][ T805] rust_binder: Error while translating object. [ 38.503570][ T805] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 38.517032][ T805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:21 [ 38.537834][ T805] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.568446][ T803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144 [ 38.668167][ T813] SELinux: security_context_str_to_sid () failed with errno=-22 [ 38.930611][ T825] random: crng reseeded on system resumption [ 39.149550][ T844] input: syz0 as /devices/virtual/input/input11 [ 39.377670][ T853] binder: Unknown parameter 'coyBLV"i5ntext' [ 39.403833][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.449695][ T859] rust_binder: Write failure EFAULT in pid:48 [ 40.156327][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 40.174155][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 40.451681][ T881] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 40.731686][ T895] binder: Bad value for 'defcontext' [ 41.251587][ T911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 41.252167][ T911] rust_binder: Error while translating object. [ 41.269709][ T911] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.279737][ T911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 41.307282][ T913] binder: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 41.399864][ T918] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.400481][ T918] rust_binder: Error while translating object. [ 41.410297][ T918] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.425350][ T871] Bluetooth: hci0: command 0x1003 tx timeout [ 41.426359][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.444157][ T918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71 [ 41.730499][ T934] syz.0.200: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 41.772588][ T934] CPU: 1 UID: 0 PID: 934 Comm: syz.0.200 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 41.772616][ T934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 41.772635][ T934] Call Trace: [ 41.772642][ T934] [ 41.772652][ T934] __dump_stack+0x21/0x30 [ 41.772691][ T934] dump_stack_lvl+0x10c/0x190 [ 41.772714][ T934] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.772739][ T934] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 41.772768][ T934] dump_stack+0x19/0x20 [ 41.772790][ T934] warn_alloc+0x1bc/0x2a0 [ 41.773812][ T934] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.773852][ T934] ? __cfi_warn_alloc+0x10/0x10 [ 41.773914][ T934] ? __get_vm_area_node+0x1dc/0x3a0 [ 41.773932][ T934] ? __vcalloc_noprof+0x3a/0x50 [ 41.773954][ T934] __vmalloc_node_range_noprof+0x68e/0x1420 [ 41.773978][ T934] ? __se_sys_ioctl+0x132/0x1b0 [ 41.774003][ T934] ? __x64_sys_ioctl+0x7f/0xa0 [ 41.774027][ T934] ? x64_sys_call+0x1878/0x2ee0 [ 41.774054][ T934] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 41.774076][ T934] ? __vcalloc_noprof+0x3a/0x50 [ 41.774097][ T934] __vmalloc_noprof+0xfe/0x1d0 [ 41.774117][ T934] ? __vcalloc_noprof+0x3a/0x50 [ 41.774141][ T934] ? __cfi___vmalloc_noprof+0x10/0x10 [ 41.774159][ T934] ? mutex_lock+0x92/0x1c0 [ 41.774176][ T934] ? __cfi_mutex_lock+0x10/0x10 [ 41.774195][ T934] __vcalloc_noprof+0x3a/0x50 [ 41.774218][ T934] kvm_set_memslot+0x4c6/0x13f0 [ 41.774243][ T934] ? __kasan_kmalloc+0x96/0xb0 [ 41.774274][ T934] __kvm_set_memory_region+0x87c/0xb80 [ 41.774303][ T934] kvm_set_memory_region+0x2f/0x50 [ 41.774330][ T934] kvm_vm_ioctl+0x9ad/0xb80 [ 41.774354][ T934] ? should_fail+0xf/0x20 [ 41.774376][ T934] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 41.774401][ T934] ? ioctl_has_perm+0x1aa/0x4d0 [ 41.774432][ T934] ? __asan_memcpy+0x5a/0x80 [ 41.774454][ T934] ? ioctl_has_perm+0x3e0/0x4d0 [ 41.774532][ T934] ? __cfi_futex_wait+0x10/0x10 [ 41.774552][ T934] ? vhost_dev_ioctl+0x2c4/0x1060 [ 41.774579][ T934] ? selinux_file_ioctl+0x6e0/0x1360 [ 41.774609][ T934] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 41.774635][ T934] ? __kasan_check_write+0x18/0x20 [ 41.774654][ T934] ? mutex_unlock+0x8b/0x240 [ 41.774671][ T934] ? do_futex+0x309/0x500 [ 41.774697][ T934] ? __cfi_do_futex+0x10/0x10 [ 41.774725][ T934] ? vhost_vsock_dev_ioctl+0x2ec/0xdb0 [ 41.774746][ T934] ? __fget_files+0x2c5/0x340 [ 41.774774][ T934] ? bpf_lsm_file_ioctl+0xd/0x20 [ 41.774795][ T934] ? security_file_ioctl+0x34/0xd0 [ 41.774823][ T934] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 41.774847][ T934] __se_sys_ioctl+0x132/0x1b0 [ 41.774887][ T934] __x64_sys_ioctl+0x7f/0xa0 [ 41.774917][ T934] x64_sys_call+0x1878/0x2ee0 [ 41.774944][ T934] do_syscall_64+0x58/0xf0 [ 41.774970][ T934] ? clear_bhb_loop+0x35/0x90 [ 41.775002][ T934] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.775032][ T934] RIP: 0033:0x7f5b2558e929 [ 41.775060][ T934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.775078][ T934] RSP: 002b:00007f5b23bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.775100][ T934] RAX: ffffffffffffffda RBX: 00007f5b257b6080 RCX: 00007f5b2558e929 [ 41.775116][ T934] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000005 [ 41.775130][ T934] RBP: 00007f5b25610b39 R08: 0000000000000000 R09: 0000000000000000 [ 41.775143][ T934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.775155][ T934] R13: 0000000000000000 R14: 00007f5b257b6080 R15: 00007fff667348b8 [ 41.775180][ T934] [ 41.775238][ T934] Mem-Info: [ 42.220669][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 42.222089][ T857] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 42.244181][ T934] active_anon:5043 inactive_anon:0 isolated_anon:0 [ 42.244181][ T934] active_file:17686 inactive_file:2182 isolated_file:0 [ 42.244181][ T934] unevictable:2 dirty:1310 writeback:0 [ 42.244181][ T934] slab_reclaimable:6340 slab_unreclaimable:70115 [ 42.244181][ T934] mapped:24913 shmem:163 pagetables:754 [ 42.244181][ T934] sec_pagetables:0 bounce:0 [ 42.244181][ T934] kernel_misc_reclaimable:0 [ 42.244181][ T934] free:1537898 free_pcp:2259 free_cma:0 [ 42.484332][ T934] Node 0 active_anon:20248kB inactive_anon:0kB active_file:70744kB inactive_file:8728kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99692kB dirty:5240kB writeback:0kB shmem:652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4400kB pagetables:3068kB sec_pagetables:24kB all_unreclaimable? no [ 42.543155][ T934] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966004kB mlocked:0kB bounce:0kB free_pcp:5792kB local_pcp:5728kB free_cma:0kB [ 42.605907][ T934] lowmem_reserve[]: 0 3921 3921 [ 42.618917][ T934] Normal free:3194272kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20128kB inactive_anon:0kB active_file:70744kB inactive_file:8728kB unevictable:0kB writepending:5240kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:2040kB local_pcp:576kB free_cma:0kB [ 42.662872][ T934] lowmem_reserve[]: 0 0 0 [ 42.672757][ T934] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 42.697969][ T934] Normal: 167*4kB (ME) 752*8kB (UME) 789*16kB (UME) 358*32kB (ME) 354*64kB (UME) 47*128kB (UM) 10*256kB (UME) 4*512kB (ME) 10*1024kB (UME) 9*2048kB (UME) 757*4096kB (M) = 3193388kB [ 42.699121][ T946] binder: Unknown parameter 'non' [ 42.721704][ T934] 20027 total pagecache pages [ 42.728195][ T946] binder: Unknown parameter 'non' [ 42.733203][ T934] 0 pages in swap cache [ 42.743648][ T934] Free swap = 124996kB [ 42.748709][ T934] Total swap = 124996kB [ 42.761035][ T934] 2097051 pages RAM [ 42.765573][ T934] 0 pages HighMem/MovableOnly [ 42.771795][ T934] 351520 pages reserved [ 42.778006][ T934] 0 pages cma reserved [ 42.788842][ T952] binder: Unknown parameter 'fscontext?}' [ 42.806952][ T12] bridge_slave_1: left allmulticast mode [ 42.813356][ T12] bridge_slave_1: left promiscuous mode [ 42.836157][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.838796][ T934] Memory allocations: [ 42.855425][ T12] bridge_slave_0: left allmulticast mode [ 42.863724][ T934] 0 B 0 init/main.c:1370 func:do_initcalls [ 42.871722][ T12] bridge_slave_0: left promiscuous mode [ 42.881117][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.890944][ T934] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 42.911885][ T934] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 42.926365][ T934] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 42.946220][ T934] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 42.973901][ T934] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 42.986958][ T934] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 43.014306][ T934] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 43.030036][ T934] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 43.048623][ T934] 0 B 0 init/initramfs.c:101 func:find_link [ 43.061184][ T12] veth1_macvtap: left promiscuous mode [ 43.069181][ T12] veth0_vlan: left promiscuous mode [ 43.241398][ T973] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.251582][ T973] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.261586][ T973] bridge_slave_0: entered allmulticast mode [ 43.269638][ T984] input: syz1 as /devices/virtual/input/input13 [ 43.276617][ T973] bridge_slave_0: entered promiscuous mode [ 43.289611][ T986] input: syz0 as /devices/virtual/input/input14 [ 43.302821][ T973] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.312679][ T973] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.323886][ T973] bridge_slave_1: entered allmulticast mode [ 43.335172][ T973] bridge_slave_1: entered promiscuous mode [ 43.426263][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 43.426281][ T36] audit: type=1401 audit(1750361146.660:189): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 43.436897][ T989] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124 [ 43.494195][ T989] rust_binder: Error while translating object. [ 43.506779][ T973] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.528251][ T973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.538697][ T973] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.547157][ T973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.548512][ T36] audit: type=1400 audit(1750361146.780:190): avc: denied { setattr } for pid=988 comm="syz.1.216" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 43.561824][ T989] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.593230][ T989] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124 [ 43.656789][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.676983][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.683101][ T1001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:127 [ 43.685580][ T1004] binder: Unknown parameter 'fscontext?}' [ 43.721782][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.729940][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.748307][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.758088][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.835466][ T973] veth0_vlan: entered promiscuous mode [ 43.874844][ T973] veth1_macvtap: entered promiscuous mode [ 44.056761][ T1024] SELinux: ebitmap: truncated map [ 44.080985][ T1024] SELinux: failed to load policy [ 44.405764][ T1055] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 44.572313][ T1059] rust_binder: Write failure EINVAL in pid:14 [ 44.589240][ T1061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.606865][ T1061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 44.649427][ T36] audit: type=1400 audit(1750361147.880:191): avc: denied { execute } for pid=1064 comm="syz.2.241" path="/selinux/mls" dev="selinuxfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 44.649782][ T1067] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214 [ 44.666021][ T36] audit: type=1400 audit(1750361147.880:192): avc: denied { compute_member } for pid=1065 comm="syz.3.242" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 44.776503][ T36] audit: type=1400 audit(1750361148.000:193): avc: denied { execute } for pid=1073 comm="syz.2.243" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 44.819055][ T1072] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 45.445129][ T1108] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.455743][ T1108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:32 [ 45.628333][ T1124] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 45.665601][ T1124] rust_binder: Read failure Err(EFAULT) in pid:232 [ 45.831057][ T1134] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.840957][ T1134] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 45.849194][ T1134] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 45.860067][ T1134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:147 [ 45.893459][ T1136] binder: Unknown parameter 'fscontext?}' [ 45.911545][ T1137] binder: Unknown parameter 'fscontext?}' [ 45.918301][ T1139] binder: Unknown parameter 'obj_type' [ 46.000591][ T1141] binder: Bad value for 'stats' [ 46.035156][ T1145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:153 [ 46.035629][ T1145] rust_binder: Error while translating object. [ 46.049043][ T1145] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.057686][ T1145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:153 [ 46.124595][ T1150] geneve1: tun_chr_ioctl cmd 1074025672 [ 46.146365][ T1150] geneve1: ignored: set checksum enabled [ 46.308143][ T1168] rust_binder: Error in use_page_slow: ESRCH [ 46.308163][ T1168] rust_binder: use_range failure ESRCH [ 46.315609][ T1168] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 46.322702][ T1168] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 46.333558][ T1168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:160 [ 46.645940][ T1187] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.684660][ T1192] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 46.704671][ T1192] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 46.821474][ T1203] binder: Unknown parameter 'staglobal' [ 46.844710][ T1205] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.845509][ T1205] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 46.853238][ T1205] rust_binder: Error while translating object. [ 46.869146][ T1205] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.879486][ T1205] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 47.106013][ T1219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.120607][ T1219] rust_binder: Error while translating object. [ 47.128730][ T1219] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 47.138603][ T1219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:51 [ 47.231319][ T36] audit: type=1326 audit(1750361150.460:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1228 comm="syz.2.295" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58acf8e929 code=0x0 [ 47.279158][ T36] audit: type=1326 audit(1750361150.470:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1228 comm="syz.2.295" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58acf8e929 code=0x0 [ 47.337575][ T36] audit: type=1400 audit(1750361150.560:196): avc: denied { write } for pid=1231 comm="syz.0.296" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 47.423701][ T1239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.678469][ T36] audit: type=1326 audit(1750361150.910:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1245 comm="syz.1.300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63f538e929 code=0x0 [ 47.732771][ T1251] binder: Unknown parameter 'coyBLV"i5ntext' [ 47.744868][ T1251] SELinux: security_context_str_to_sid () failed with errno=-22 [ 47.788327][ T1259] input: syz1 as /devices/virtual/input/input15 [ 47.821396][ T1263] __vm_enough_memory: pid: 1263, comm: syz.3.308, bytes: 281474976845824 not enough memory for the allocation [ 47.965721][ T1277] binder: Unknown parameter 'coyBLV"i5ntext' [ 48.239266][ T1298] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.239302][ T1298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:288 [ 48.607465][ T1313] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 48.640144][ T1313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:295 [ 48.734255][ T1325] binder: Unknown parameter '0x0000000000000000' [ 48.808481][ T1335] binder: Unknown parameter '' [ 48.843235][ T1343] rust_binder: Write failure EINVAL in pid:193 [ 48.911597][ T36] audit: type=1400 audit(1750361152.140:198): avc: denied { write } for pid=1347 comm="syz.0.336" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 48.941965][ T1348] input: syz0 as /devices/virtual/input/input16 [ 48.978173][ T1355] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 49.054037][ T36] audit: type=1400 audit(1750361152.280:199): avc: denied { associate } for pid=1357 comm="syz.2.341" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 49.177968][ T1369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197 [ 49.394593][ T1382] binder: Bad value for 'stats' [ 50.051885][ T1423] __vm_enough_memory: pid: 1423, comm: syz.0.362, bytes: 281474976845824 not enough memory for the allocation [ 50.481132][ T36] audit: type=1400 audit(1750361153.710:200): avc: denied { map } for pid=1437 comm="syz.0.367" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.576005][ T1448] SELinux: security_context_str_to_sid () failed with errno=-22 [ 50.586237][ T1446] binder: Unknown parameter 'ZE&m ت4נaoc\Oc3O ŁS6' [ 50.628193][ T1455] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.629469][ T1455] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 50.647307][ T1455] rust_binder: Error while translating object. [ 50.660719][ T1455] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.668482][ T1455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:208 [ 50.709434][ T1455] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.737353][ T1455] rust_binder: Error in use_page_slow: ESRCH [ 50.753072][ T1455] rust_binder: use_range failure ESRCH [ 50.760715][ T1455] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 50.769841][ T1455] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 50.779716][ T1455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:208 [ 50.934333][ T1467] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 51.032700][ T1477] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 51.042452][ T1477] SELinux: failed to load policy [ 51.048765][ T1477] binder: Bad value for 'stats' [ 51.150099][ T36] audit: type=1326 audit(1750361154.380:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1478 comm="syz.0.382" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b2558e929 code=0x0 [ 51.180535][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.180566][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.202762][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.212050][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.228306][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.236474][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.244237][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.253663][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.267240][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.278294][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.308949][ T1490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.309528][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.336148][ T1490] rust_binder: Error in use_page_slow: ESRCH [ 51.343661][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.347393][ T1490] rust_binder: use_range failure ESRCH [ 51.354275][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.362213][ T1490] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 51.369265][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.377405][ T1490] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 51.387930][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.394832][ T1490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:213 [ 51.404950][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.428083][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.438610][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.449528][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.458757][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.468208][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.480741][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.493396][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.504434][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.516433][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.525914][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.543459][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.551686][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.559181][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.569302][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.588273][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.604769][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.616423][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.627497][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.642180][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.656680][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.665166][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.673326][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.684306][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.692327][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.707721][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.723296][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.736205][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.753534][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.762344][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.770012][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.781374][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.789342][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.799273][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.809705][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.821344][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.829946][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.839949][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.848090][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.861222][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.871081][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.880686][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.889074][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.898699][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.906901][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.914905][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.923067][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.932823][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.947662][ T1482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.049224][ T36] audit: type=1400 audit(1750361155.270:202): avc: denied { setattr } for pid=973 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.430429][ T1548] binder: Bad value for 'max' [ 52.585875][ T1559] input: syz0 as /devices/virtual/input/input21 [ 52.617558][ T1563] binder: Unknown parameter 'defcontext01777777777777777777777' [ 52.852099][ T1562] rust_binder: Read failure Err(EFAULT) in pid:237 [ 52.941102][ T1580] SELinux: failed to load policy [ 53.226864][ T1585] tap0: tun_chr_ioctl cmd 2148553947 [ 53.245926][ T1585] rust_binder: Write failure EFAULT in pid:245 [ 53.361047][ T1590] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 53.584620][ T1599] rust_binder: Write failure EFAULT in pid:330 [ 53.641025][ T1606] input: syz1 as /devices/virtual/input/input22 [ 53.656664][ T1602] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 53.656693][ T1602] rust_binder: Error while translating object. [ 53.669396][ T1602] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.677883][ T1602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:250 [ 53.794225][ T1612] SELinux: policydb string length 54272 does not match expected length 8 [ 53.819189][ T1612] SELinux: failed to load policy [ 53.839865][ T1614] rust_binder: Write failure EFAULT in pid:335 [ 53.857139][ T1616] kvm: kvm [1615]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x3 [ 54.115540][ T1621] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 54.120199][ T1621] binder: Bad value for 'stats' [ 54.407187][ T1632] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 54.407218][ T1632] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 54.434555][ T1632] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 54.473003][ T1632] PM: Enabling pm_trace changes system date and time during resume. [ 54.473003][ T1632] PM: Correct system time has to be restored manually after resume. [ 54.539745][ T1632] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.555611][ T1632] rust_binder: Error while translating object. [ 54.566043][ T1632] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 54.573712][ T1632] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:345 [ 54.588531][ T1635] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 54.603889][ T1635] rust_binder: Error in use_page_slow: EBUSY [ 54.616442][ T1635] rust_binder: use_range failure EBUSY [ 54.624887][ T1635] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 54.642235][ T1635] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 54.661001][ T1635] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 54.704270][ T1635] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:260 [ 54.904401][ T1638] kvm: apic: phys broadcast and lowest prio [ 54.917784][ T1648] input input23: cannot allocate more than FF_MAX_EFFECTS effects [ 54.980221][ T1653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:266 [ 55.157982][ T1655] binder: Unknown parameter 'coyBLV"i5ntext' [ 55.245855][ T36] audit: type=1326 audit(1750361158.470:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1654 comm="syz.0.442" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b2558e929 code=0x0 [ 55.306678][ T1659] rust_binder: Write failure EFAULT in pid:269 [ 55.397526][ T1661] rust_binder: Error while translating object. [ 55.406459][ T1661] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.415274][ T1661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:353 [ 55.486447][ T1666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:271 [ 55.506751][ T1668] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 55.580398][ T1670] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 55.580432][ T1670] rust_binder: Error while translating object. [ 55.609295][ T1672] rust_binder: Failed to allocate buffer. len:4216, is_oneway:true [ 55.620572][ T1672] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 55.631458][ T1670] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.645327][ T1672] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:360 [ 55.658333][ T1670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:273 [ 55.723865][ T1677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:362 [ 55.737718][ T1674] rust_binder: validate_parent_fixup: new_min_offset=18014398509482014, sg_entry.length=64 [ 55.748419][ T1674] rust_binder: Error while translating object. [ 55.762050][ T1674] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.770048][ T1674] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:275 [ 55.926286][ T1686] random: crng reseeded on system resumption [ 55.977335][ T1681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 55.977374][ T1681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:365 [ 55.995917][ T1681] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 56.035801][ T1681] rust_binder: Read failure Err(EFAULT) in pid:365 [ 56.171479][ T1692] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 56.192400][ T1692] rust_binder: Read failure Err(EFAULT) in pid:368 [ 56.312744][ T36] audit: type=1326 audit(1750361159.540:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1699 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2558e929 code=0x7ffc0000 [ 56.316220][ T1700] binder: Unknown parameter 'context' [ 56.335844][ T36] audit: type=1326 audit(1750361159.540:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1699 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2558e929 code=0x7ffc0000 [ 56.432846][ T36] audit: type=1326 audit(1750361159.540:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1699 comm="syz.0.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5b2558e929 code=0x7ffc0000 [ 56.604816][ T1713] binder: Unknown parameter 'euid<00000000000000000000' [ 56.706965][ T1715] binder: Binderfs stats mode cannot be changed during a remount [ 56.746270][ T36] audit: type=1400 audit(1750361159.980:207): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.885058][ T1719] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 57.519084][ T36] audit: type=1326 audit(1750361160.750:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1745 comm="syz.3.476" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bd5d8e929 code=0x0 [ 57.574688][ T1751] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 57.634608][ T1754] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 57.793250][ T1759] input: syz1 as /devices/virtual/input/input24 [ 57.855785][ T1762] input: syz0 as /devices/virtual/input/input25 [ 58.281639][ T1780] input: syz0 as /devices/virtual/input/input26 [ 58.371117][ T1780] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 58.416567][ T1780] SELinux: failed to load policy [ 58.597121][ T1793] rust_binder: Write failure EINVAL in pid:402 [ 58.603664][ T1793] rust_binder: Write failure EINVAL in pid:402 [ 58.706240][ T1801] binder: Bad value for 'stats' [ 58.752789][ T1801] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:406 [ 58.800615][ T1804] SELinux: policydb version -845203035 does not match my version range 15-33 [ 58.835891][ T1804] SELinux: failed to load policy [ 58.999846][ T1813] kvm: kvm [1812]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x72ee2af0afdec401 [ 59.122599][ T1815] rust_binder: Write failure EINVAL in pid:410 [ 59.123225][ T1815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:410 [ 59.245275][ T1823] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 59.247592][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.279350][ T1821] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 59.290401][ T1823] SELinux: failed to load policy [ 59.303699][ T1823] rust_binder: Write failure EFAULT in pid:414 [ 59.604896][ T1837] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 59.624245][ T1837] rust_binder: Write failure EINVAL in pid:315 [ 59.931577][ T1843] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 59.932617][ T1845] rust_binder: Write failure EINVAL in pid:427 [ 59.963894][ T1845] rust_binder: Write failure EINVAL in pid:427 [ 59.967096][ T1843] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 60.166987][ T36] audit: type=1400 audit(1750361163.400:209): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 60.192537][ T1848] can0: slcan on ptm1. [ 60.270217][ T1847] can0 (unregistered): slcan off ptm1. [ 60.557181][ T1866] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1531215282 (3062430564 ns) > initial count (1473793136 ns). Using initial count to start timer. [ 60.557246][ T1867] __vm_enough_memory: pid: 1867, comm: syz.3.516, bytes: 281474976845824 not enough memory for the allocation [ 61.046092][ T1872] binder: Bad value for 'defcontext' [ 61.096283][ T1874] binder: Unknown parameter 'fscontext?}' [ 61.104534][ T1874] binder: Unknown parameter 'fsuuid' [ 61.256203][ T857] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.263196][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 61.478072][ T1907] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:446 [ 61.554642][ T1913] input: syz0 as /devices/virtual/input/input27 [ 61.576774][ T36] audit: type=1400 audit(1750361164.800:210): avc: denied { append } for pid=1911 comm="syz.1.530" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.649299][ T1922] binder: Binderfs stats mode cannot be changed during a remount [ 61.685671][ T1931] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 61.877082][ T1945] input: syz1 as /devices/virtual/input/input29 [ 61.978014][ T1947] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 61.978041][ T1947] rust_binder: Read failure Err(EFAULT) in pid:461 [ 62.010142][ T1947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:461 [ 62.104611][ T1956] syz.3.543 (1956) used obsolete PPPIOCDETACH ioctl [ 62.105821][ T36] audit: type=1326 audit(1750361165.330:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1953 comm="syz.1.542" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63f538e929 code=0x0 [ 62.579036][ T1962] input: syz1 as /devices/virtual/input/input31 [ 62.976027][ T1976] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 62.976059][ T1976] rust_binder: Read failure Err(EFAULT) in pid:377 [ 63.459096][ T2011] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 63.522314][ T2011] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 63.642888][ T2021] binder: Bad value for 'stats' [ 63.683266][ T2024] binder: Bad value for 'max' [ 63.753643][ T2026] input: syz1 as /devices/virtual/input/input32 [ 63.946522][ T2039] rust_binder: Write failure EFAULT in pid:476 [ 64.108871][ T2053] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.126555][ T2053] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 64.165874][ T2053] rust_binder: Write failure EINVAL in pid:483 [ 64.166259][ T2053] binder: Unknown parameter 'nons ' [ 64.186432][ T36] audit: type=1326 audit(1750361167.420:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2058 comm="syz.1.580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63f538e929 code=0x0 [ 64.253474][ T2061] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 64.253503][ T2061] rust_binder: Error while translating object. [ 64.285900][ T2060] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.290592][ T2061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.303533][ T2061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:412 [ 64.326665][ T2064] can0: slcan on ptm0. [ 64.353624][ T36] audit: type=1400 audit(1750361167.580:213): avc: denied { read } for pid=149 comm="dhcpcd" name="n16" dev="tmpfs" ino=3741 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.405014][ T2064] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:520 [ 64.405098][ T36] audit: type=1400 audit(1750361167.580:214): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=3741 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.446706][ T36] audit: type=1400 audit(1750361167.580:215): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=3741 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.499248][ T36] audit: type=1400 audit(1750361167.660:216): avc: denied { search } for pid=2066 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.543408][ T36] audit: type=1400 audit(1750361167.750:217): avc: denied { read } for pid=2074 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.587000][ T2065] can0 (unregistered): slcan off ptm0. [ 64.606808][ T36] audit: type=1400 audit(1750361167.750:218): avc: denied { open } for pid=2074 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.688971][ T36] audit: type=1400 audit(1750361167.750:219): avc: denied { getattr } for pid=2074 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.755995][ T2081] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 64.787102][ T2081] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 65.026221][ T2104] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 65.099553][ T2108] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.102937][ T2108] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 65.219869][ T2119] SELinux: security_context_str_to_sid () failed with errno=-22 [ 65.358633][ T2121] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:535 [ 65.377887][ T2126] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:420 [ 65.545646][ T2135] rust_binder: Write failure EFAULT in pid:502 [ 65.740798][ T2145] random: crng reseeded on system resumption [ 65.766316][ T2152] rust_binder: Read failure Err(EAGAIN) in pid:506 [ 65.884189][ T2157] rust_binder: Write failure EINVAL in pid:511 [ 65.895611][ T2158] rust_binder: Write failure EINVAL in pid:426 [ 66.078180][ T2170] kvm: kvm [2169]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x882 [ 66.208175][ T2177] rust_binder: Write failure EINVAL in pid:519 [ 66.209267][ T2184] rust_binder: Write failure EINVAL in pid:519 [ 66.330890][ T2189] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:523 [ 66.618350][ T2200] can0: slcan on ptm0. [ 66.637981][ T36] kauditd_printk_skb: 50 callbacks suppressed [ 66.638003][ T36] audit: type=1400 audit(1750361169.870:270): avc: denied { append } for pid=2199 comm="syz.1.616" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 66.693875][ T36] audit: type=1400 audit(1750361169.880:271): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 66.729718][ T36] audit: type=1400 audit(1750361169.880:272): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.783891][ T36] audit: type=1400 audit(1750361169.880:273): avc: denied { read } for pid=149 comm="dhcpcd" name="n17" dev="tmpfs" ino=3937 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.829522][ T36] audit: type=1400 audit(1750361169.880:274): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=3937 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.862879][ T36] audit: type=1400 audit(1750361169.880:275): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=3937 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.915861][ T36] audit: type=1400 audit(1750361170.010:276): avc: denied { read } for pid=2206 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.958705][ T2199] can0 (unregistered): slcan off ptm0. [ 66.980827][ T36] audit: type=1400 audit(1750361170.010:277): avc: denied { open } for pid=2206 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.094961][ T36] audit: type=1400 audit(1750361170.010:278): avc: denied { getattr } for pid=2206 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.172783][ T36] audit: type=1400 audit(1750361170.270:279): avc: denied { write } for pid=2205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.335307][ T2249] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 67.343942][ T305] bridge_slave_1: left allmulticast mode [ 67.374221][ T305] bridge_slave_1: left promiscuous mode [ 67.388976][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.398879][ T305] bridge_slave_0: left allmulticast mode [ 67.412004][ T305] bridge_slave_0: left promiscuous mode [ 67.424501][ T2258] SELinux: policydb version -1096017193 does not match my version range 15-33 [ 67.429169][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.437004][ T2258] SELinux: failed to load policy [ 67.589115][ T2266] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.603628][ T305] veth1_macvtap: left promiscuous mode [ 67.619599][ T305] veth0_vlan: left promiscuous mode [ 67.766743][ T2251] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.778862][ T2251] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.788932][ T2251] bridge_slave_0: entered allmulticast mode [ 67.800177][ T2251] bridge_slave_0: entered promiscuous mode [ 67.812254][ T2251] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.822051][ T2251] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.836558][ T2251] bridge_slave_1: entered allmulticast mode [ 67.844781][ T2251] bridge_slave_1: entered promiscuous mode [ 67.923390][ T2251] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.933389][ T2251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.945476][ T2251] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.955641][ T2251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.995697][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.006618][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.016726][ T2279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:463 [ 68.029752][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.054337][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.066170][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.074544][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.119768][ T2283] kvm: kvm [2282]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xaf [ 68.137211][ T2251] veth0_vlan: entered promiscuous mode [ 68.158936][ T2251] veth1_macvtap: entered promiscuous mode [ 68.238330][ T2288] random: crng reseeded on system resumption Stopping sshd: stopped /usr/sbin/sshd (pid 202) OK [ 69.192380][ T2323] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 69.358283][ T2326] input: syz0 as /devices/virtual/input/input36 [ 69.488121][ T2326] input: failed to attach handler leds to device input36, error: -6 Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: [ 69.958666][ T2353] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 70.131097][ T2364] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15 OK Stopping iptables: OK Stopping system message bus: [ 70.246258][ T2371] rust_binder: Write failure EINVAL in pid:15 done [ 70.556247][ T2382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:476 [ 70.723657][ T2387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:480 [ 70.773467][ T2387] rust_binder: Error while translating object. [ 70.823928][ T2387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.862717][ T2387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:480 [ 70.899722][ T2391] rust_binder: Write failure EFAULT in pid:480 [ 71.024994][ T2394] SELinux: policydb version -1007128907 does not match my version range 15-33 [ 71.120381][ T2394] SELinux: failed to load policy [ 71.124723][ T2396] binder: Bad value for 'max' [ 71.146535][ T2394] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 71.178151][ T2403] binder: Bad value for 'max' [ 71.216341][ T2394] SELinux: failed to load policy Stopping klogd: OK [ 71.391038][ T2413] binder: Unknown parameter 'defcontext01777777777777777777777' Stopping acpid: [ 71.607641][ T2423] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 71.630888][ T2425] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.723226][ T2423] rust_binder: Write failure EINVAL in pid:569 [ 71.745536][ T2423] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 71.772902][ T2423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:569 [ 71.947068][ T2430] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 72.027800][ T2430] rust_binder: Error while translating object. [ 72.076638][ T2430] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.097652][ T2430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:491 [ 72.257225][ T2438] binder: Unknown parameter 'nXI' [ 72.344109][ T2441] input: syz0 as /devices/virtual/input/input37 [ 72.379707][ T2448] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 72.386479][ T2441] binder: Bad value for 'max' [ 72.450031][ T2450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:500 [ 72.486861][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 72.486881][ T36] audit: type=1400 audit(1750361175.720:339): avc: denied { write } for pid=2454 comm="syz.4.673" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK [ 72.658534][ T2465] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.658574][ T2465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:573 [ 72.697799][ T2461] binder: Bad value for 'stats' umount: can't remount debugfs read-only umount: can't remount sysfs read-only umount: devtmpfs busy - remounted read-only umount: can't re[ 72.949747][ T2482] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:577 mount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.74 closed by remote host. [ 72.949792][ T2482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 72.997582][ T36] audit: type=1400 audit(1750361176.190:340): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[1827]" dev="pipefs" ino=1827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 73.024321][ T2482] rust_binder: Read failure Err(EFAULT) in pid:577 [ 73.259788][ T305] bridge_slave_1: left allmulticast mode [ 73.274219][ T305] bridge_slave_1: left promiscuous mode [ 73.280924][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.290127][ T305] bridge_slave_0: left allmulticast mode [ 73.305875][ T305] bridge_slave_0: left promiscuous mode [ 73.313073][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.499789][ T305] veth1_macvtap: left promiscuous mode [ 73.506628][ T305] veth0_vlan: left promiscuous mode [ 73.770991][ T305] bridge_slave_1: left allmulticast mode [ 73.777343][ T305] bridge_slave_1: left promiscuous mode [ 73.783533][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.791873][ T305] bridge_slave_0: left allmulticast mode [ 73.797738][ T305] bridge_slave_0: left promiscuous mode [ 73.803629][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.812273][ T305] bridge_slave_1: left allmulticast mode [ 73.818113][ T305] bridge_slave_1: left promiscuous mode [ 73.823884][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.832662][ T305] bridge_slave_0: left allmulticast mode [ 73.839164][ T305] bridge_slave_0: left promiscuous mode [ 73.845690][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.853765][ T305] bridge_slave_1: left allmulticast mode [ 73.860105][ T305] bridge_slave_1: left promiscuous mode [ 73.867120][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.875417][ T305] bridge_slave_0: left allmulticast mode [ 73.882366][ T305] bridge_slave_0: left promiscuous mode [ 73.888813][ T305] bridge0: port 1(bridge_slave_0) entered disabled state Sent SIGKILL to all processes [ 74.202776][ T305] veth1_macvtap: left promiscuous mode [ 74.208736][ T305] veth0_vlan: left promiscuous mode Requesting syst[ 74.214930][ T305] veth1_macvtap: left promiscuous mode em poweroff [ 74.222006][ T305] veth0_vlan: left promiscuous mode [ 74.228844][ T305] veth1_macvtap: left promiscuous mode [ 74.234497][ T305] veth0_vlan: left promiscuous mode [ 75.216239][ T2483] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 75.223625][ T2483] ACPI: PM: Preparing to enter system sleep state S5 [ 75.231008][ T2483] kvm: exiting hardware virtualization [ 75.236997][ T2483] reboot: Power down serialport: VM disconnected.