last executing test programs: 2m25.965405108s ago: executing program 1 (id=316): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000000)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c008cdab39265379173d479126a853f6bc25495b2b055432a810346fc34945f46924f38b2444ea021e468c4"]) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r5, 0x4010ae68, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}]}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m25.497644155s ago: executing program 1 (id=321): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) read(r0, &(0x7f0000000040)=""/106, 0x6a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) 2m25.317388218s ago: executing program 1 (id=323): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) read(r0, &(0x7f0000000080)=""/191, 0xbf) ioctl$BLKRRPART(r0, 0x125f, 0x0) 2m25.183981249s ago: executing program 1 (id=325): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) 2m25.069227622s ago: executing program 1 (id=326): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000001240)={'veth0_macvtap\x00', 0x400}) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000100)={'virt_wifi0\x00'}) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000280)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x401, 0x0, 0xffffffffffffffff, 0x6, 0x1, 0x1, 0xc, 0x3, 0x2, 0xa597, 0x79, 0x200, 0x200, 0x2, 0x400, 0x7fffffff]}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 2m24.705036747s ago: executing program 1 (id=329): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x220340, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01111d22f82680fc7f94e226d20001dfffff0000e000000000008000"]) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x400, 0x0) read(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0xfffff000) (rerun: 64) 2m9.670528317s ago: executing program 32 (id=329): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x220340, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01111d22f82680fc7f94e226d20001dfffff0000e000000000008000"]) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x400, 0x0) read(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0xfffff000) (rerun: 64) 1m22.215126503s ago: executing program 3 (id=1113): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000380)={{0xffffffffffffffff, 0x3, 0x5, 0x1, 0xe}, 0x6, 0x9, 'id1\x00', 'timer1\x00', 0x0, 0x7, 0x9, 0x1, 0xd09}) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) mmap(&(0x7f00006b3000/0x3000)=nil, 0x3000, 0xc, 0x1010, r0, 0x76a70000) (async) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000080)={0xdddd0000, 0x14000}) 1m21.999162666s ago: executing program 3 (id=1118): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000280)={"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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1001, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0x59, 0x2, 0x2}, @fd, @fda={0x66646185, 0x2, 0x1, 0x3f}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x2a}) 1m21.563083383s ago: executing program 3 (id=1128): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000002c0)={{r5}, 0x2, &(0x7f0000000200)=[0x7f, 0x28d], 0x7}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x1ff}}, 0x30) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000380)={0x3, 0x0, [{0xa3e, 0x0, 0xc7e}, {0xa59, 0x0, 0x5}, {0x819, 0x0, 0xe57}]}) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000000000000090000000100d28c8aa200000000"]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 1m21.424772455s ago: executing program 3 (id=1131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x13, 0x4}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x291, 0x0, 0x10000}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000100)={0xa, 0x0, [{0x340, 0x1, 0x1, 0x0, @adapter={0x6, 0xfdce, 0xffffffffffffffff, 0x0, 0x7}}, {0x9, 0x4, 0x1, 0x0, @adapter={0x100000000, 0x1, 0xadc1, 0x40, 0x523d62a4}}, {0x100, 0x3, 0x0, 0x0, @sint={0x10001, 0x9}}, {0x10, 0x5, 0x0, 0x0, @adapter={0xffffffffffffff7a, 0x6, 0x600000000000, 0xc8c, 0x1}}, {0x4, 0x2, 0x0, 0x0, @msi={0x5, 0x2, 0x0, 0x1}}, {0x100, 0x1, 0x1, 0x0, @irqchip={0x0, 0x9}}, {0x2, 0x5, 0x1, 0x0, @irqchip={0x8, 0xff}}, {0x4, 0x4, 0x1, 0x0, @sint={0x0, 0x6}}, {0xc76, 0x3, 0x0, 0x0, @msi={0xb8, 0xfff, 0x8, 0x1}}, {0x5, 0x1, 0x1, 0x0, @irqchip={0x7fffffff, 0x1}}]}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb, 0x3356ab72a123cc95, r7, 0xd6013000) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x0, 0x6, 0x11, r4, 0x0) 1m21.035978601s ago: executing program 3 (id=1132): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40000000) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, 0x0) 1m20.974285862s ago: executing program 3 (id=1134): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f00000025c0)={0x2020}, 0x2043) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x33) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000140)={0x7, 0x401, 0x8, 0x8}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r6, 0x540b, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f000083b000/0x13000)=nil, 0x13000, 0x0, 0x13, r8, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r9, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x80010, r8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xaece, 0x2) read(r10, &(0x7f0000000040)=""/8, 0x8) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000200)) 1m5.864008193s ago: executing program 33 (id=1134): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f00000025c0)={0x2020}, 0x2043) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x33) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000140)={0x7, 0x401, 0x8, 0x8}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r6, 0x540b, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f000083b000/0x13000)=nil, 0x13000, 0x0, 0x13, r8, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r9, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x80010, r8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xaece, 0x2) read(r10, &(0x7f0000000040)=""/8, 0x8) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000200)) 53.587733551s ago: executing program 4 (id=1408): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x700, 0x12) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x7a) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0xfffffffffffffeec, 0x0, &(0x7f0000000140)="f3"}) close(r1) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x4) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0x7, 0x6, 0x3000000002, 0xffffffffffffffed]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x46000, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000011c0)={0x50, 0x0, &(0x7f0000000080)=[@exit_looper, @release={0x40046306, 0x1}, @clear_death={0x400c630f, 0x3}, @decrefs, @request_death={0x400c630e, 0x3}, @register_looper, @register_looper, @increfs_done={0x40106308, 0x1}], 0x1000, 0x0, &(0x7f00000001c0)="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"}) 53.108137028s ago: executing program 4 (id=1412): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x1b) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, 0x0) (async, rerun: 64) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) (async, rerun: 64) r2 = syz_clone(0x26822400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x3002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SMI(r5, 0xaeb7) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_SET_PIT(r4, 0x8048ae66, 0x0) (async, rerun: 64) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4a2002, 0x0) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f0000000140)=""/84) (async) ioctl$TIOCSPGRP(r6, 0x5410, &(0x7f0000000080)=r2) (async) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0200, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r0, 0x4068aea3, &(0x7f0000000240)) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r11, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r11, 0x40305829, &(0x7f0000000380)={0x0, 0x2, 0xfffffffffffffff9, 0xac}) (async) ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, &(0x7f0000000480)={0xa, 0x1, 0x7}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x17b, 0x0, 0x7}]}) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r7, 0x2000) (rerun: 64) 52.768457073s ago: executing program 4 (id=1415): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder1\x00', 0x800, 0x0) r1 = mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_clone3(&(0x7f0000000240)={0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000002c0), {}, &(0x7f0000000300)=""/192, 0xfffffffffffffe2a, &(0x7f00000001c0)=""/23, &(0x7f0000000200), 0x7}, 0x58) (async) syz_clone3(&(0x7f0000000240)={0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000002c0), {}, &(0x7f0000000300)=""/192, 0xfffffffffffffe2a, &(0x7f00000001c0)=""/23, &(0x7f0000000200), 0x7}, 0x58) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x7) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x7) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKCLOSEZONE(r5, 0x40101287, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r3, 0x4068aea3, &(0x7f0000000400)) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r6, 0x4008af7c, &(0x7f00000003c0)) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r3, 0x4068aea3, &(0x7f0000000140)={0xa4, 0x0, 0x1}) (async) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r3, 0x4068aea3, &(0x7f0000000140)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)=@x86={0xff, 0xbe, 0x55, 0x0, 0xffffffff, 0x2, 0x3, 0xe, 0x9, 0xdf, 0x7f, 0x3, 0x0, 0x4, 0xfffeedfe, 0xee, 0x7, 0x7, 0x0, '\x00', 0x0, 0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r7) (async) close(r7) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) write$cgroup_subtree(r7, 0x0, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r10, &(0x7f0000000600)=ANY=[@ANYBLOB="25030f003fff94", @ANYRES16], 0xffdd) r11 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r11, 0x4068aea3, &(0x7f0000000480)={0xc0, 0x0, 0x5000}) r12 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x6) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000480)=ANY=[]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000500)=[@free_buffer={0x40086303, r1}], 0xf2, 0x0, &(0x7f0000000540)="3e9c11c4847ff960667aa5e5f591a23bfcd56f53eff8329bed5a406d995b8a11fde021515da75ecc42ca340083cebb6f3b668b0b1db30ac1622792e175fdf352f6e3005452e78c20dfdaa980b4cc4c543b08310b1aabe702efca0680c02749d973b56966cf2a0a4f60de7a9cbfd3a21fcac77b284f037ac134bfff02c75041df3f816e4150032d5f48c4391511793da9f7cd02ab9ce1f8b9eb205a9131fe33d1721724a0ad7ab0bcb3bac5954f624f684b65f738df8adba3a530cf4ca907bf2a708111d0493d1c3f2b68480f2a20e6cb0b9d4e7384438b64a227b496706fc542883700"/242}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000500)=[@free_buffer={0x40086303, r1}], 0xf2, 0x0, &(0x7f0000000540)="3e9c11c4847ff960667aa5e5f591a23bfcd56f53eff8329bed5a406d995b8a11fde021515da75ecc42ca340083cebb6f3b668b0b1db30ac1622792e175fdf352f6e3005452e78c20dfdaa980b4cc4c543b08310b1aabe702efca0680c02749d973b56966cf2a0a4f60de7a9cbfd3a21fcac77b284f037ac134bfff02c75041df3f816e4150032d5f48c4391511793da9f7cd02ab9ce1f8b9eb205a9131fe33d1721724a0ad7ab0bcb3bac5954f624f684b65f738df8adba3a530cf4ca907bf2a708111d0493d1c3f2b68480f2a20e6cb0b9d4e7384438b64a227b496706fc542883700"/242}) 52.510338748s ago: executing program 4 (id=1418): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xc, 0x0, &(0x7f0000000000)=[@register_looper, @acquire_done={0x40106309, 0x2}], 0xfffffffffffffff4, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x80000001) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000040)={0xf97cff8c, 0x8, 'SE Linux', "5aa0a6e2ac92c9bcf5ef1953f4b1175d91c793524e443b1e1bb9c6c248638b3107a4f3c241200907c7dc1289ff0fde79a660cfe2be5c7ab3f379e5"}, 0xb) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x100000001) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000000)=[@exit_looper, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x3}, @enter_looper], 0x0, 0x0, 0x0}) 50.555482457s ago: executing program 4 (id=1418): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xc, 0x0, &(0x7f0000000000)=[@register_looper, @acquire_done={0x40106309, 0x2}], 0xfffffffffffffff4, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x80000001) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000040)={0xf97cff8c, 0x8, 'SE Linux', "5aa0a6e2ac92c9bcf5ef1953f4b1175d91c793524e443b1e1bb9c6c248638b3107a4f3c241200907c7dc1289ff0fde79a660cfe2be5c7ab3f379e5"}, 0xb) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x100000001) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000000)=[@exit_looper, @decrefs={0x40046307, 0x4}, @increfs={0x40046304, 0x3}, @enter_looper], 0x0, 0x0, 0x0}) 50.39920011s ago: executing program 4 (id=1436): unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x349900, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r0, 0x200000000000000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000180), 0x82, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000240)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x5}) syz_clone(0x1200200, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) read(r1, &(0x7f00000000c0)=""/40, 0x28) write$cgroup_freezer_state(r7, &(0x7f0000000080)='THAWED\x00', 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x45809000) read(r1, &(0x7f0000000040)=""/106, 0x6a) 35.30843356s ago: executing program 34 (id=1436): unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x349900, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r0, 0x200000000000000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000180), 0x82, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000240)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x5}) syz_clone(0x1200200, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) read(r1, &(0x7f00000000c0)=""/40, 0x28) write$cgroup_freezer_state(r7, &(0x7f0000000080)='THAWED\x00', 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x45809000) read(r1, &(0x7f0000000040)=""/106, 0x6a) 26.653980573s ago: executing program 5 (id=1690): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r1, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) (async) write$tcp_mem(r1, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) read(r0, &(0x7f0000000040)=""/106, 0x6a) 26.653792223s ago: executing program 5 (id=1691): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 26.650794343s ago: executing program 5 (id=1696): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x2020) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7) prctl$PR_SET_VMA(0x21, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='max=000000100']) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x3b8, 0x8002, 0x3e60, 0x1}]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x486, 0x0, 0x40000000}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000001c0)=@arm64={0x2, 0x8, 0x2, '\x00', 0x8005}) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000300)={0xe0001}) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000000)={0x140000, 0x0, [0x0, 0xfff, 0x1a, 0x80, 0x5, 0x8001, 0x7, 0x8]}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000100)={[0x8, 0x1, 0x8, 0x100, 0x948, 0x6, 0x7, 0x6, 0x5, 0x9, 0x0, 0x2, 0x70f2, 0x800, 0xffffffff7fffffff, 0x3], 0x8080000}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2042, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) (async) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x2020) (async) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7) (async) prctl$PR_SET_VMA(0x21, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='max=000000100']) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x3b8, 0x8002, 0x3e60, 0x1}]}) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x486, 0x0, 0x40000000}]}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000001c0)=@arm64={0x2, 0x8, 0x2, '\x00', 0x8005}) (async) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000300)={0xe0001}) (async) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000000)={0x140000, 0x0, [0x0, 0xfff, 0x1a, 0x80, 0x5, 0x8001, 0x7, 0x8]}) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000100)={[0x8, 0x1, 0x8, 0x100, 0x948, 0x6, 0x7, 0x6, 0x5, 0x9, 0x0, 0x2, 0x70f2, 0x800, 0xffffffff7fffffff, 0x3], 0x8080000}) (async) 26.391904696s ago: executing program 5 (id=1699): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0xc0800, 0x0) (async) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x127701, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 32) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x5, 0x0, [{0x391, 0x0, 0x6}, {0xb7b, 0x0, 0x7}, {0xa8e, 0x0, 0xff}, {0x840, 0x0, 0x3}, {0xa3d, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x43, 0xda1, 0x8, 0x2004cb, 0x0, 0x100001000000, 0xfffffffffffffffe, 0x1, 0x8000, 0x3], 0x3000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r4, 0x3, 0xbe4d, 0x37}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000100)=@arm64={0x7, 0x81, 0x80, '\x00', 0xb1d}) 26.362857907s ago: executing program 5 (id=1700): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000033c0), 0x2602, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000080)={0x0, 0x3a}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x20, 0x0}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x20, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x5}) (async) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x5}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x3, 0x2000002, 0x23}, @fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x3, 0x2000002, 0x23}, @fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 26.111573011s ago: executing program 5 (id=1706): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$tcp_mem(r2, &(0x7f0000000000)={0x401, 0x20, 0xffffffff, 0x20, 0x8}, 0x48) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="d0227922f1a785dde270a19e35c878656ed78425f7821bb4fd859d6710576b6f502573928cfddcb402053bb7059a8d0d0c14e508001285073687be43ee074282456f12354c7e6841d4cbddbea0b85ab3181d65bd0585bc1d726366c944b510bcfde0f111c4766c972e5269329a0b9e8cc2d2a0c2ddc6f42b166497fe252ba78a90b6c5ccddf92bc129f8b8761ac29949d042dc0504bc7620eb3632cc817ae8aa7911483ba601a3512a71bd564fe0945c5dfd338df9d708f21246079dbc8258de5ee04903c3a64778dd91e32583f1"], 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 11.10379073s ago: executing program 35 (id=1706): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$tcp_mem(r2, &(0x7f0000000000)={0x401, 0x20, 0xffffffff, 0x20, 0x8}, 0x48) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="d0227922f1a785dde270a19e35c878656ed78425f7821bb4fd859d6710576b6f502573928cfddcb402053bb7059a8d0d0c14e508001285073687be43ee074282456f12354c7e6841d4cbddbea0b85ab3181d65bd0585bc1d726366c944b510bcfde0f111c4766c972e5269329a0b9e8cc2d2a0c2ddc6f42b166497fe252ba78a90b6c5ccddf92bc129f8b8761ac29949d042dc0504bc7620eb3632cc817ae8aa7911483ba601a3512a71bd564fe0945c5dfd338df9d708f21246079dbc8258de5ee04903c3a64778dd91e32583f1"], 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 1.678566365s ago: executing program 2 (id=1995): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x597a80, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x45809000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009700)='/sys/kernel/oops_count', 0x40, 0xec) read$FUSE(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xa1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3}, {0x61}, {0x6}]}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, 0x0) read$FUSE(r0, 0x0, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x30) r8 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r8, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xfe, 0x3a, '/_', 0x3a, ':$@K-^{', 0x3a, './file0'}, 0x30) ioctl$KDMKTONE(r4, 0x4b30, 0x4) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xa0880, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r8, 0xc038943b, &(0x7f0000000280)={0x7, 0x30, '\x00', 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x1ff) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r11, 0x4008ae8a, &(0x7f0000000200)=ANY=[]) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0x2, 0xc214, 0x1}) 1.375872549s ago: executing program 2 (id=1999): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x202, 0x0, 0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x0, 0x4, 0x0, 0x8, 0x9, 0x10}, {0xcccff001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, 0x1, 0x7, 0x4}, {0x2000, 0xdddd0000, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0xb, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x5000, 0x0, 0x0, 0x7, 0xc, 0x0, 0x2, 0x0, 0x4, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2, 0x0, 0x10}, {0x8080000, 0x3000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1a, 0x26, 0x0, 0xfd}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x1, 0x70, 0x0, 0xdd00, 0x5000, [0xfffffffffffffffc, 0x0, 0x1]}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x87000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000014000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000730000400008000007"]) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x40}, {0x6}]}) read(r0, &(0x7f0000000000)=""/61, 0x3d) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x619, 0x0, 0x9}]}) read(r0, &(0x7f0000000040)=""/106, 0x6a) 1.372211299s ago: executing program 6 (id=2000): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder1\x00', 0x0, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pim6reg\x00', 0x2}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000780)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6, 0x7f}]}) ioctl$BLKCRYPTOGENERATEKEY(r1, 0xc030128a, &(0x7f0000000080)={&(0x7f0000000180)=""/65, 0x41}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000c401"]) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async, rerun: 32) r6 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x400000000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000000)=[@enter_looper, @free_buffer={0x40086303, r6}, @request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) 1.178921373s ago: executing program 7 (id=2003): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000004c0), 0x189080, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000100)={'\x00', 0xa, 0x1, 0x9}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000580)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x0, 0x1}, @fda={0x66646185, 0x4, 0x0, 0x11}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/108, 0x6c, 0x0, 0x34}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0xdfa, 0x0, &(0x7f0000001980)="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"}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008c02"]) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004c9, 0x7000, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x2], 0xffff1000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.125422083s ago: executing program 0 (id=2004): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) (async, rerun: 32) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)={"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"}) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0xd000, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0xdddd1000, 0x0, 0x0, 0x0, 0x6d, 0x7}, {0x5002, 0xd000, 0x0, 0x6, 0x4, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x100004, 0x0, 0xf}, {0x0, 0xffff1000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x3000, 0xeeee8000, 0x0, 0xfe, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x9}, {0x100000, 0x0, 0x9, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x6000}, {0x1, 0xfffe}, 0x20040021, 0x0, 0x4000, 0x0, 0xfffffffffffffffc, 0x0, 0xeeef0000, [0x0, 0x0, 0x0, 0x3]}) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x80000, 0x0, [0x80, 0x0, 0x8, 0x4, 0x3, 0x5, 0x400, 0x936b]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"]) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) close(r11) (async, rerun: 64) r12 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x180, 0x0) (async, rerun: 64) r13 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0xa41, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000780)={0xa0, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x3, 0x2, 0xd}, @flat=@handle={0x73682a85, 0x1103}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r12}, @fd={0x66642a85, 0x0, r13}, @fda={0x66646185, 0x0, 0x2, 0x23}}, &(0x7f0000000740)={0x0, 0x18, 0x30}}}], 0x9b, 0x0, &(0x7f0000000900)="8d7c9ae8dfcb794399ae8b54ffe080664b8d8baa7cf41814bfa41243612b0f5b14de4f8539a18924971a5d4be4186eb1d0a82d87fe967578396ae66841500bfec64ee23d6a2238b91e107ca95fd288541dd5466dfe952d2dea5266348d5e2bd8aa666c2936f94fd20cca32e16824382f27d1f9ba110dd5402d574080ebc96b24ce032145e2d485d78d65634f18948d3a4116b5da11f511551f8010"}) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) 1.051959555s ago: executing program 7 (id=2005): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te']) 1.051750335s ago: executing program 6 (id=2006): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x8002, 0x10) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) write$cgroup_pid(r0, &(0x7f0000002340), 0x12) read$FUSE(r0, &(0x7f0000002440)={0x2020}, 0x2020) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001']) 971.866036ms ago: executing program 6 (id=2007): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) (async) write$vga_arbiter(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='decodes m'], 0xf) (async) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xe0400, 0x0) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) 966.754186ms ago: executing program 7 (id=2008): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) close_range(r2, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x580, 0x0, 0xfffffffffffffffd}]}) mmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x3000001, 0x22052, r0, 0x2000) 739.903549ms ago: executing program 2 (id=2009): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x400000b2, 0x0, 0x74d}]}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008b04"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) read(r0, &(0x7f0000000000)=""/61, 0x3d) read(r0, &(0x7f0000000040)=""/106, 0x6a) 739.523579ms ago: executing program 6 (id=2010): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x5b, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b418709844294623"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x2) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x5b, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b418709844294623"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40082, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x2) (async) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 622.546371ms ago: executing program 7 (id=2011): prctl$PR_SET_SECCOMP(0x41, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0xffffffffffffffff}) mmap$binder(&(0x7f0000fe9000/0x14000)=nil, 0x14000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000fe9000/0x14000)=nil, 0x14000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x10003, 0x4, 0x3000, 0x2000, &(0x7f0000ffa000/0x2000)=nil}) 590.204891ms ago: executing program 0 (id=2012): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCEXCL(r0, 0x540c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x80000001, 0xf7f67e58, 0xdfffffff, 0x7f, 0xf}) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x80000001, 0xf7f67e58, 0xdfffffff, 0x7f, 0xf}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x7) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r3, 0x0, 0x0) (async) read(r3, 0x0, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000004900)=0xfffff4cc) ioctl$TIOCSBRK(r0, 0x5427) (async) ioctl$TIOCSBRK(r0, 0x5427) 451.912304ms ago: executing program 0 (id=2013): syz_clone3(&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x5c) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (rerun: 32) 451.629784ms ago: executing program 6 (id=2014): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xc52ee59dce608e68, 0x0, &(0x7f0000000040)=[@enter_looper], 0x18, 0x0, 0x0}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0x566afa30a48730) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000b40)={0x58, 0x0, &(0x7f0000000a80)=[@acquire_done={0x40106309, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x0, &(0x7f00000009c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/208, 0xd0, 0x2, 0x14}, @fd, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x38}}, 0x0}}], 0xa7, 0x0, &(0x7f0000000fc0)="80a289296205dcc5620700e76a07d991e84f31a147f91d2ce73dc0cb80c2e8c19e67135ade4f34119a7e420826efd0f177be2c15a630cd403e86e4a77b4a9478065aa00e0b913630d0a5ed92401880ed54d0fca037e2b4a71e1f80c814bd22ed55c9ee8cb33ef29c28c8a0b1973fd2abc43687b3907a58aafbaa625ccb36e9082cb66c5186669613684973dbd11fc37951f2e85993a0272ca9c06742ce7d08e55c6c1136675136"}) 342.785235ms ago: executing program 7 (id=2015): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x401c5820, &(0x7f0000000080)={'bridge_slave_1\x00', @remote}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x10004, 0x4, 0xdddd7002, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xaece, 0x2) read$FUSE(r9, &(0x7f0000000dc0)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 321.435306ms ago: executing program 2 (id=2016): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xe05, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac17c55ab77d0fd2b7318207e91fd536b9fb7c994a9ad0769020b45bc05965f6dffb15fd462bb2e49632c788cfeb74472be3d9eaf3284719df7187a354b3915df2661363052a24baf8cc101728d302f75878515b436d1fbdb3fc5fc88e8745c56b1bd79dc2cc7e7b5be814275a3edfc67e923d199c97fd6a8b2d11d2923b688471fe8c1e771545d17bad44fc5f7a91cf43ba91b4627c9554a333b6e8ee1c457b54c30bccbbabdfed6158fed6e548cd54ad7409e0a03fb2f685f8987e98ee687a09a730c2a757d3b1595a1146d57230e178284ef3fed5553bbd1e82bd418a13c03f944421d013d96182302122d01c432e24c43a9dff19658a3680167297367a1ee7f70e0968ce28ca2bc8b8525c41f8d4f9cdcaaa25b2d0fea854626eba2e86ecb31e9be7b8e704287fe45ad3f169d7f67e798b0de3bf70f485f81ba5e9aef1ec5782c4c609ffdc93a3bdfeeb7e7cd05ea7023895be4a3f78f188fdbd83ded6dcdf1d429c12b1b250284110295e3515bfb117119839f13057ea2366d3c4b75b28f60afe17b195d04ff58dd2f3382bb57152f2928f9a91bbcc42057777ba13becb4552419caa2ffc325219a6995f5d1e9a193a1aede859834ef765009d6c242ad918ecf3fe62c8dfe2ff309cbce740950cdd05c8e0b7f75aa21731be678552b2d0024a4b3815fb52f056ba37f3f466afab6b5728def0fdef93655524121927df3a39af0845df7612e9ccdae25f406ac0ad7a0e4f980398597ab2c2291d87a1ed618b9e392f1d055d5290be67b6cec9e7505c41025d2aa6e82a4f693042989b5f4a9abfe0ec51fd9dcb972a054b80ee6a460fd422eaa971e2cb759c72e676e2877c667c6ce002be1ce6ba8380e6dd691590c84ba68d26f3284280dcacd082b42bf5aac71467b3fcd5d68ab1bc26cf48fe770ccff5f14ff8afafb18d3127a6d989b7d77665a7a9bf4cb488621c904acd0b073396ad8509c9ddb02eb1d23510a52289a5f0d7edba66d4ef271b9c6acc3bfa996b55f6808650236b0001132ef85fc5070b69144ff5fdd8d64f6c3e0dd22711f69a940ebdb4ab5ff6240da3160049d2047e6713d47ad0db40ec543c095ad67c8cbe438fb875927c98e265498b3da8d4ca54bac0e6efe759a2d4d4190e9fc8835599da8237f472411a71236bb930d28a26f49062d270f4087a6a709c005eebc9740ed54dd005c787c44badac9c720b0d424d0ded9bb8c24c0e842deedf386fc7714a31268292d3bcc53b1cf24b156445c8bf64336f742b1ba836eba0ae4a5aaa9a6f35d4f81734e16bce965795d5b1255609d1860fe11c9c536db078af94772830ba000c13e1d9383e3d862fa07f2199da148632c036bc19f6014eeb206a3654d390c78911deeabebf128def61122754e0a4696db82666a018f8d2f44b5aadc12809ade8bed1b1ba2adbb6e3e82180e26748dc30a8eda0edb21fcaa702632ed3fb4e89550c3e0e1fd2b5ecf1983d85bf9569b231e28155756bd97f1220cbc2b5b1c02dab88ee4a8970d4833b9e51529895afe5029823576297d4a917602fe08df57e1d7f63d050877ddf8e82a5383e15f313171b2d5618a1549f3dfced0732b887508ca5e134124d0ed0bd4b767115d1530f73504387e0364d73a2d3b114fcb49219b1c15e066c455b01672e49499995454a502236f5a5007895d3d1d8843007352a3ccc3f71d3e801efd0a6ef922bf39ead16e01ec20ebff2b1ce7cfd0984b26225cb1359b36efe9ad2ae1f6de4862c0faaa52f4d0eb4c13960ceb4aeaa10ae61a09a5abdb0c61661962a0aab14d465a8ae6f45826e1e66428cf8572eb53c98160df6613a62bb611c63f1ffb7a795a889fc16670f6302fd36ee4247bdd4282f1afb6042c832a4b0857cecae0a7090d9b11ae46d9186c710c8dd12911db573493329bea2c743734d86a577cf27aa01e4fc6c91f1fa34bba173d20b97ed8bb4bad43692df90bfd2b193b9e8b93a95ec0d0d42217395d89db511d2e9bbeb3ef47b7b2d81ab54b5c8faa760ef5c0493af13a9327c9432521ed6bfcb9d778d25031da41a983027fe7d794c26326053d38172444307d88501cdd26c3fdeafdf5f599d3dcfd39972f28ec3fb1fb40982615f5d71d6693a8774df072576834c69b89f209b458fad4671f0108fdfc8548a6fcf76a843369a3bca4d2974221ed9af224d151fa8aa73276ba65ca3d8bc98d6504f16bcac30c697f68cb1625b4f2259ee0c694951752845fa11c20fc4dda369d53918c3746918692ee2cda958612808b841b8d36ef3933f5340e1fc8fb10ac2ae97da921f6a67806831356d515c7a32468dfd3385c1ae2008448e5750c3a3d5733b4a2486788550e6353e9b12cc09750d5b9dcd2aedba61d0520e99a51e880d3dd78a2b502029deac1860cf50885f8bf5119491c6b1e06492e98ca64e5e32afbb3b0630cb35b58640afc2188a232f77968c18d2d0e8f91c974edcb3198b4520f530acacb12017216338cc479de3651e8f15f1672397c730e3ca2a189ca4cc85f35dd46aeb67b6a2eb7268a653b190d8ba670490d50f761c1fa25f1954d8fe6bcb15dbc23698c945262b991e6245b9a25b12b13c87bf8a8a06f51784007abd06e01a0c03ee80b236fabb5b22ce797c4d8a739ac96dcf16c93f454463d3631c4cdd2dea6732a486015dc9937ee4e6efbfff46bdd8887094ca4bd94d995f411421c7ef07f949fcc10132f58b7c99a871780d92464594c930b80596baab77b0d68a05d71ca8a1888f3128f12aebac362c4d80870ab3d9f2e77d51f9af16472faff98dda1e0133c8bc2510345d5eb1d64bce64761f4cc39ac6655902338bf1335dc55393995af4447ed1aa4c50bfacd576842560abca3e6c74dcea6dd03d36f9e7f8bda2cf33e3b7da195fba79f5a60421e19910f1fef31b9fa52064ce9ee8c415746a3cab47a8ad8477e9f21e9ee804a85dc568439b95c01bbbc3fa16a8c26bd81b01b8849795b2370f591e2a8e175cd465a600a541839bc734271b4b3afb2303dc1cf12bee00080ad10658c97672ad023e89f23d9301b5dbf1a7ba6d6c2b8dbd300f05f36a095f188b56fd3ba8e871aaf22e2128696e7232cb22f4f5404a3d1256a11665caaead326faad340031cafb99edbceba7bac44c7d2720aedba9cb708dae55b192a1e31835fae8756f062c151f6778b1d93c2d1f8b479ae9bbe1255abcef9beaa95b558fbbc9a979d46580aa85b10f160b438bea64f23b8e605ce34d2b46bbf8bfbfa683b10f55b3d30c58675dd1a524495e5d42c7d02dc60b853e8b3ed2caf41cd24a8a1d044e27d48b2184bac00730f7c20a1ba2bb6b6a5381a3d359d8e721504bbbce18ee49031b48c278a5730f31fb83f6cf32ac98326b722d3e2d7b38a7b80b94a3eb2b69fb1aefc8c0bbe431191f0ed76141a8365621e4f7118dd4465b4642bdb0af21d30c8cfb1d5201852c0428b1983d91f706e814c1395888b1c2a3516ea20a93d868e27c3c9b68a9cda4befc389b57661a4ff37137628ec96bcb625fd10324625ac1589c2918c66f811a323a19ab30bcf28fc20b64176e319d58f74578093e32ba9f51b255693dda9514ff43f6ef6010143554305073e94be322daa024cb7efcf405ea4924bfa72633b766365fee1d59d1a94717450657ff3b72853785e91f94ca1502b129eafa718633bec1557fb1e0ae2887e6e8c0fdd9f3f99de03c0af7364781766520d90c15b0e2a4c43613089dbecc4dd68be74204809f0270370097642d54388ccbb54b58be8b5796eac48ef5f17752eaa7301f075faee593aae71ee0e0ca1f45a22e7cede3597f14a344796ceec33e98b3b89e031c0d757e83d5093322d9afc9898f80b2e9bb17bc8b2b164d048c1b912f6cd92979df629efcb94968cca6e65b9b078677698fa4937a2ec23edd00971a5505ecc65fe150d3d00a34e52cc64951937fc79014b0df8d2c9c35f06209f45556278fa7ecfc70a92eca165bbd493686fb4c0cd607cec994657149a61da2e09414944c557be54908197724174247194d435b25bf78ec4cc164a574662eb4d1e4d784a6ea0c71dd1a16e53a7b8a27fcec679346afe90a05e06b276fe972d5e1d3486e0452d0a9a1636ab9c517f371a0592ef34513a9a4e961cd79c86891f460becb57f41e22b2a72ae175e29344184cde0b2beae00f90a6a79dc689da4b4b1da0e9758854d404a9cbcf725c68b6f2de865b2b5e12124d09f8745208b5cc544522f7c8bcfceb907422502f1641b600a60a5aef28be5a92ff71755efaf29e23c8ca52ad945bbdc4d6e7502adee312ea8d9338a80671f36309026c0d9c2ceb14da0b8beb087853b8014d30372f0d58448530f1bed15c4caaf8a844853030aab1ba6de9891678a16a2d9b9889d4a367753f0aacda03ce6fae1f62b34a3317a704527e65b18dc3186f32c5caa2d82f058066274e145f3cfe0bb5d40a77f54fb0de584d5f50de29d1c3aa29acea2363ef5c1e0592ef94370936df0152871396c13a89e56086f381862edb6f4bec0d937e94a689a8c5c87a51e073fdaa935591bbccff359e0805ded9ac71e3b295fdd05bc2b03d7af58a393778c9dfdfd8101b3503c86a6d9e2fdeb215be40f90bb7360a04e111d743207a8742275ee7df2508b909ea4d3a7af7886d3f26aa58943edbbcbd686bf9cf9a78b43dd9792bca97cda65083404bd7ab227f68e18cd87541bf069bde649a0b9ef1346a748d794685339973d6b59dcbe74a3caf48f4628eedfcd6900c56746f017f0845fea8c95ac7b2a4ff90940f98a163afc082ef6de72f5fddf056e5fe2d42a173f7fd5f6100933a38fad6"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 199.813227ms ago: executing program 6 (id=2017): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='\t '], 0x8) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000300)={0x6666969}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 199.678487ms ago: executing program 0 (id=2018): openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, 0x0) 197.704008ms ago: executing program 2 (id=2019): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000003c0)={0x2, 0x0, 0x98, &(0x7f0000000300)={0x7f, 0x5, 0x4}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x5, 0x0, &(0x7f0000000500)="7da3644468"}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000580)={0x0, 0x7, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000980)={r2, 0x9, 0x6}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @release={0x40046306, 0x3}], 0x3, 0x0, &(0x7f0000000080)="f64c80"}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x48000) 141.732448ms ago: executing program 2 (id=2020): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x400002, 0x19) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r2, 0x400454e2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000280)='cpuacct.stat\x00', 0x0, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x606c) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x5210f0, 0x0) 137.963528ms ago: executing program 0 (id=2021): mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2010860, &(0x7f00000021c0)={[], [{@context={'context', 0x3d, 'staff_u'}}]}) 83.884969ms ago: executing program 7 (id=2022): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x0, 0x3}, {0x35}, {}, {}, {0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f00000000c0)='system_u:object_r:console_device_t:s0\x00', 0x26) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='decodes m'], 0xf) read(r1, &(0x7f0000000100)=""/113, 0x71) 0s ago: executing program 0 (id=2023): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009700)='/sys/kernel/oops_count', 0x40, 0x2) read$FUSE(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) kernel console output (not intermixed with test programs): rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 99.876434][ T3871] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 99.914895][ T3871] rust_binder: Error while translating object. [ 99.940128][ T3871] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.946446][ T3871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:938 [ 100.226669][ T3909] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:831 [ 100.227813][ T3909] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 100.250929][ T3904] rust_binder: Write failure EINVAL in pid:349 [ 100.319325][ T3913] input: syz0 as /devices/virtual/input/input73 [ 100.330875][ T3909] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:831 [ 100.356823][ T3913] cgroup: fork rejected by pids controller in /syz4 [ 100.732908][ T49] bridge_slave_1: left allmulticast mode [ 100.738692][ T49] bridge_slave_1: left promiscuous mode [ 100.749922][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.791494][ T49] bridge_slave_0: left allmulticast mode [ 100.800952][ T49] bridge_slave_0: left promiscuous mode [ 100.821050][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.962574][ T49] veth1_macvtap: left promiscuous mode [ 100.968141][ T49] veth0_vlan: left promiscuous mode [ 101.013243][ T36] kauditd_printk_skb: 1011 callbacks suppressed [ 101.013262][ T36] audit: type=1400 audit(1750348152.320:18845): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.076093][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 101.086621][ T4023] audit: audit_backlog=65 > audit_backlog_limit=64 [ 101.100208][ T289] audit: audit_lost=138 audit_rate_limit=0 audit_backlog_limit=64 [ 101.108132][ T36] audit: type=1400 audit(1750348152.330:18846): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.131512][ T4023] audit: audit_lost=139 audit_rate_limit=0 audit_backlog_limit=64 [ 101.139634][ T289] audit: backlog limit exceeded [ 101.146628][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 101.154124][ T4023] audit: backlog limit exceeded [ 101.159072][ T289] audit: audit_lost=140 audit_rate_limit=0 audit_backlog_limit=64 [ 101.172485][ T4024] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 101.248011][ T4024] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 101.294990][ T4024] rust_binder: Write failure EINVAL in pid:353 [ 101.332430][ T4021] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.360152][ T4021] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.380173][ T4021] bridge_slave_0: entered allmulticast mode [ 101.386611][ T4021] bridge_slave_0: entered promiscuous mode [ 101.418947][ T4021] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.447271][ T4021] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.457718][ T4021] bridge_slave_1: entered allmulticast mode [ 101.465075][ T4021] bridge_slave_1: entered promiscuous mode [ 101.647899][ T4021] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.655021][ T4021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.662349][ T4021] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.669419][ T4021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.749807][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.759507][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.779412][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.786516][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.814773][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.821972][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.922070][ T4021] veth0_vlan: entered promiscuous mode [ 102.057616][ T4021] veth1_macvtap: entered promiscuous mode [ 102.142688][ T4039] rust_binder: Error while translating object. [ 102.142718][ T4039] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 102.165312][ T4039] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:358 [ 102.194690][ T4042] random: crng reseeded on system resumption [ 102.368120][ T4042] geneve1: tun_chr_ioctl cmd 1074025672 [ 102.383716][ T4042] geneve1: ignored: set checksum enabled [ 102.563115][ T4055] rust_binder: Read failure Err(EAGAIN) in pid:847 [ 102.580683][ T4056] can0: slcan on ttyS3. [ 102.685791][ T4058] binder: Unknown parameter 'contextfs/binder0' [ 102.701219][ T4056] can0 (unregistered): slcan off ttyS3. [ 102.870255][ T4062] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 103.054207][ T4065] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 103.198569][ T4071] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 103.230501][ T4073] random: crng reseeded on system resumption [ 104.002835][ T4095] rust_binder: Read failure Err(EAGAIN) in pid:18 [ 104.285348][ T4113] binder: Unknown parameter '' [ 105.170348][ T4128] binder: Unknown parameter 'seclab l' [ 105.240551][ T4134] SELinux: security_context_str_to_sid (sytem_uGй audit_backlog_limit=64 [ 106.216473][ T4164] audit: audit_backlog=65 > audit_backlog_limit=64 [ 106.219622][ T36] audit: type=1400 audit(1750348157.380:21801): avc: denied { ioctl } for pid=1950 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.223238][ T4164] audit: audit_lost=143 audit_rate_limit=0 audit_backlog_limit=64 [ 106.256754][ T289] audit: audit_lost=144 audit_rate_limit=0 audit_backlog_limit=64 [ 106.264640][ T289] audit: backlog limit exceeded [ 106.312642][ T4164] SELinux: policydb string does not match my string SE Linux [ 106.330630][ T4164] SELinux: failed to load policy [ 106.525686][ T4166] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 106.525720][ T4166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:396 [ 107.570132][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 107.570322][ T984] Bluetooth: hci0: command 0x1003 tx timeout [ 107.690740][ T4200] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.790861][ T4206] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 108.051354][ T4214] SELinux: security_context_str_to_sid () failed with errno=-22 [ 108.072375][ T4216] rust_binder: Write failure EINVAL in pid:424 [ 108.168421][ T4222] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 108.441582][ T4235] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 108.512925][ T4240] binder: Unknown parameter 'consy"te' [ 108.562113][ T4240] binder: Unknown parameter 'consy"te' [ 108.569040][ T4240] binder: Unknown parameter 'consy"te' [ 108.591658][ T4240] binder: Unknown parameter 'consy"te' [ 108.611978][ T4240] binder: Unknown parameter 'consy"te' [ 108.631477][ T4240] binder: Unknown parameter 'consy"te' [ 108.661318][ T4240] binder: Unknown parameter 'consy"te' [ 108.668058][ T4240] binder: Unknown parameter 'consy"te' [ 108.691305][ T4240] binder: Unknown parameter 'consy"te' [ 108.711073][ T4240] binder: Unknown parameter 'consy"te' [ 108.717753][ T4240] binder: Unknown parameter 'consy"te' [ 108.751391][ T4240] binder: Unknown parameter 'consy"te' [ 108.758247][ T4240] binder: Unknown parameter 'consy"te' [ 108.766293][ T4240] binder: Unknown parameter 'consy"te' [ 108.783858][ T4240] binder: Unknown parameter 'consy"te' [ 108.792278][ T4240] binder: Unknown parameter 'consy"te' [ 108.799456][ T4240] binder: Unknown parameter 'consy"te' [ 108.807227][ T4240] binder: Unknown parameter 'consy"te' [ 108.814718][ T4240] binder: Unknown parameter 'consy"te' [ 108.822206][ T4240] binder: Unknown parameter 'consy"te' [ 108.829015][ T4240] binder: Unknown parameter 'consy"te' [ 108.836776][ T4240] binder: Unknown parameter 'consy"te' [ 108.867833][ T4240] binder: Unknown parameter 'consy"te' [ 108.899202][ T4240] binder: Unknown parameter 'consy"te' [ 108.906090][ T4240] binder: Unknown parameter 'consy"te' [ 108.913942][ T4240] binder: Unknown parameter 'consy"te' [ 108.914288][ T4251] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 108.921454][ T4240] binder: Unknown parameter 'consy"te' [ 108.935744][ T4252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:923 [ 108.937575][ T4240] binder: Unknown parameter 'consy"te' [ 108.958762][ T4240] binder: Unknown parameter 'consy"te' [ 108.978446][ T4240] binder: Unknown parameter 'consy"te' [ 108.987748][ T4240] binder: Unknown parameter 'consy"te' [ 109.017789][ T4240] binder: Unknown parameter 'consy"te' [ 109.032767][ T4240] binder: Unknown parameter 'consy"te' [ 109.123414][ T4254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:58 [ 109.198579][ T4259] binder: Unknown parameter 'stats1ecqzq\Imvj}w' [ 109.692700][ T4274] SELinux: security_context_str_to_sid () failed with errno=-22 [ 110.252467][ T4283] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 110.252492][ T4283] rust_binder: Read failure Err(EFAULT) in pid:444 [ 110.583018][ T4290] binder: Unknown parameter '4xv\H' [ 110.629100][ T4291] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 111.042827][ T36] kauditd_printk_skb: 3675 callbacks suppressed [ 111.042846][ T36] audit: type=1400 audit(1750348162.360:25476): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.160115][ T36] audit: type=1400 audit(1750348162.360:25477): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.193277][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 111.209979][ T289] audit: audit_lost=145 audit_rate_limit=0 audit_backlog_limit=64 [ 111.210936][ T4306] audit: audit_backlog=65 > audit_backlog_limit=64 [ 111.225450][ T1950] audit: audit_backlog=65 > audit_backlog_limit=64 [ 111.232077][ T36] audit: type=1400 audit(1750348162.360:25478): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.255298][ T289] audit: backlog limit exceeded [ 111.257604][ T4306] audit: audit_lost=146 audit_rate_limit=0 audit_backlog_limit=64 [ 111.261859][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 111.272018][ T4306] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 111.470806][ T4311] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 111.470842][ T4311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:458 [ 111.594131][ T4316] binder: Unknown parameter '' [ 111.616952][ T4316] random: crng reseeded on system resumption [ 111.700986][ T4316] Restarting kernel threads ... done. [ 111.776608][ T4318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:460 [ 111.779996][ T4318] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 111.810939][ T4320] input: syz1 as /devices/virtual/input/input77 [ 111.840135][ T4318] rust_binder: Write failure EINVAL in pid:460 [ 112.133014][ T4322] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 112.245894][ T4332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.285766][ T4332] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 112.301370][ T4334] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 112.327071][ T4332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:949 [ 112.328276][ T4332] rust_binder: Error while translating object. [ 112.352096][ T4332] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 112.358310][ T4332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:949 [ 112.369409][ T4334] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 112.759394][ T4352] input: syz0 as /devices/virtual/input/input78 [ 112.834153][ T4349] rust_binder: Write failure EINVAL in pid:953 [ 112.931665][ T4356] SELinux: security_context_str_to_sid () failed with errno=-22 [ 113.042262][ T4356] SELinux: ebitmap: truncated map [ 113.062070][ T4356] SELinux: failed to load policy [ 113.800249][ T4371] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.185070][ T4385] rust_binder: Got transaction with invalid offset. [ 114.185112][ T4385] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 114.228239][ T4385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:99 [ 114.320992][ T4394] rust_binder: Error while translating object. [ 114.355558][ T4394] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 114.370699][ T4394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:972 [ 114.466831][ T4398] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.652360][ T4407] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 114.652384][ T4407] rust_binder: Read failure Err(EFAULT) in pid:485 [ 114.722805][ T4410] rust_binder: Write failure EINVAL in pid:106 [ 114.831868][ T4421] input: syz1 as /devices/virtual/input/input79 [ 115.405912][ T4441] rust_binder: Write failure EFAULT in pid:113 [ 115.528431][ T4444] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 115.634599][ T4449] rust_binder: Got transaction with invalid offset. [ 115.650190][ T4449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 115.656985][ T4449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119 [ 115.762275][ T4453] SELinux: syz.4.1268 (4453) set checkreqprot to 1. This is no longer supported. [ 115.954032][ T4461] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 115.999419][ T4461] SELinux: failed to load policy [ 116.054913][ T49] bridge_slave_1: left allmulticast mode [ 116.060647][ T49] bridge_slave_1: left promiscuous mode [ 116.066298][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.079639][ T36] kauditd_printk_skb: 2828 callbacks suppressed [ 116.079656][ T36] audit: type=1400 audit(1750348167.390:28296): avc: denied { read write } for pid=293 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.141757][ T49] bridge_slave_0: left allmulticast mode [ 116.147447][ T49] bridge_slave_0: left promiscuous mode [ 116.182388][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.183136][ T36] audit: type=1400 audit(1750348167.400:28297): avc: denied { read write } for pid=4021 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.263121][ T36] audit: type=1400 audit(1750348167.400:28298): avc: denied { read write open } for pid=4021 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.331408][ T36] audit: type=1400 audit(1750348167.400:28299): avc: denied { ioctl } for pid=4021 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.435678][ T36] audit: type=1400 audit(1750348167.430:28300): avc: denied { read write open } for pid=293 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.488187][ T36] audit: type=1400 audit(1750348167.430:28301): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.518269][ T36] audit: type=1400 audit(1750348167.450:28302): avc: denied { read } for pid=4464 comm="syz.4.1272" name="binder1" dev="binder" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 116.529587][ T49] veth1_macvtap: left promiscuous mode [ 116.558572][ T36] audit: type=1400 audit(1750348167.450:28303): avc: denied { read open } for pid=4464 comm="syz.4.1272" path="/dev/binderfs/binder1" dev="binder" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 116.600160][ T49] veth0_vlan: left promiscuous mode [ 116.642995][ T36] audit: type=1400 audit(1750348167.450:28304): avc: denied { read } for pid=4464 comm="syz.4.1272" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 116.688543][ T36] audit: type=1400 audit(1750348167.450:28305): avc: denied { read open } for pid=4464 comm="syz.4.1272" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 116.903285][ T4466] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.924638][ T4466] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.940159][ T4466] bridge_slave_0: entered allmulticast mode [ 116.960698][ T4466] bridge_slave_0: entered promiscuous mode [ 116.985004][ T4466] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.020166][ T4466] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.046963][ T4466] bridge_slave_1: entered allmulticast mode [ 117.068368][ T4466] bridge_slave_1: entered promiscuous mode [ 117.155481][ T4498] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 117.155518][ T4498] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:515 [ 117.339268][ T4502] SELinux: ebitmap: truncated map [ 117.389318][ T4502] SELinux: failed to load policy [ 117.616807][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.623959][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.667186][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.674302][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.926917][ T4466] veth0_vlan: entered promiscuous mode [ 117.942699][ T4517] rust_binder: Write failure EINVAL in pid:1004 [ 118.011663][ T4466] veth1_macvtap: entered promiscuous mode [ 118.225175][ T4527] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 118.254436][ T4530] binder: Bad value for 'defcontext' [ 118.258031][ T4528] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 118.514272][ T4544] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 118.923102][ T4558] SELinux: failed to load policy [ 119.270572][ T4572] tun0: tun_chr_ioctl cmd 1074025676 [ 119.275918][ T4572] tun0: owner set to 0 [ 120.007469][ T4608] rust_binder: Write failure EINVAL in pid:553 [ 120.190244][ T4613] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 120.219075][ T4613] rust_binder: Error while translating object. [ 120.235416][ T4613] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 120.244580][ T4613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20 [ 120.901794][ T4628] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 121.933687][ T36] kauditd_printk_skb: 639 callbacks suppressed [ 121.933705][ T36] audit: type=1400 audit(1750348173.250:28912): avc: denied { read } for pid=4632 comm="syz.0.1322" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 121.976931][ T36] audit: type=1400 audit(1750348173.250:28913): avc: denied { read } for pid=4631 comm="syz.2.1324" name="binder0" dev="binder" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.001572][ T4639] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 122.002187][ T4633] binder: Bad value for 'defcontext' [ 122.021813][ T36] audit: type=1400 audit(1750348173.250:28914): avc: denied { read open } for pid=4631 comm="syz.2.1324" path="/dev/binderfs/binder0" dev="binder" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.082429][ T36] audit: type=1400 audit(1750348173.260:28915): avc: denied { ioctl } for pid=4631 comm="syz.2.1324" path="/dev/binderfs/binder0" dev="binder" ino=109 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.162661][ T36] audit: type=1400 audit(1750348173.260:28916): avc: denied { set_context_mgr } for pid=4631 comm="syz.2.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 122.172882][ T4649] audit: audit_backlog=65 > audit_backlog_limit=64 [ 122.190322][ T36] audit: type=1400 audit(1750348173.260:28917): avc: denied { ioctl } for pid=4631 comm="syz.2.1324" path="/dev/binderfs/binder0" dev="binder" ino=109 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.220762][ T4649] audit: audit_lost=162 audit_rate_limit=0 audit_backlog_limit=64 [ 122.230288][ T1950] audit: audit_backlog=65 > audit_backlog_limit=64 [ 122.233434][ T4650] audit: audit_backlog=65 > audit_backlog_limit=64 [ 122.278427][ T4650] rust_binder: Write failure EINVAL in pid:180 [ 122.322463][ T4659] rust_binder: Error while translating object. [ 122.341790][ T4659] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 122.349115][ T4655] SELinux: ebitmap: truncated map [ 122.378011][ T4659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:566 [ 122.379656][ T4655] SELinux: failed to load policy [ 122.499922][ T4665] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 122.499946][ T4665] rust_binder: Read failure Err(EFAULT) in pid:187 [ 123.290091][ T4705] kernel profiling enabled (shift: 17) [ 123.550112][ T4713] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 123.561194][ T4717] rust_binder: Read failure Err(EAGAIN) in pid:198 [ 123.570396][ T4713] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 123.818401][ T4734] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.821671][ T4734] rust_binder: Error in use_page_slow: ESRCH [ 123.940022][ T4734] rust_binder: use_range failure ESRCH [ 123.947324][ T4734] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 123.959519][ T4734] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 124.003421][ T4734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1049 [ 124.120425][ T4744] rust_binder: Write failure EINVAL in pid:54 [ 124.271178][ T4749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:54 [ 124.372722][ T4754] rust_binder: Error in use_page_slow: ESRCH [ 124.403414][ T4756] rust_binder: Write failure EFAULT in pid:211 [ 124.440613][ T4754] rust_binder: use_range failure ESRCH [ 124.447680][ T4752] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1051 [ 124.500106][ T4754] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 124.573982][ T4754] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 124.618133][ T4754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1051 [ 125.002078][ T4785] rust_binder: Write failure EINVAL in pid:63 [ 125.062073][ T4785] binder: Unknown parameter 'ce3ØoB@ \I]RnteUt' [ 125.417670][ T4801] binder: Unknown parameter ' $M֎' [ 125.518686][ T4806] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.763771][ T4820] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.819950][ T4823] rust_binder: Error while translating object. [ 125.844476][ T4823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 125.864858][ T4823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:76 [ 126.183073][ T4832] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.336902][ T4835] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 126.360467][ T4835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:237 [ 126.381552][ T4836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:237 [ 126.478912][ T4832] rust_binder: Error in use_page_slow: ESRCH [ 126.478943][ T4832] rust_binder: use_range failure ESRCH [ 126.561103][ T4839] rust_binder: Error in use_page_slow: ESRCH [ 126.566642][ T4839] rust_binder: use_range failure ESRCH [ 126.622655][ T4832] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 126.628183][ T4832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 126.634678][ T4844] random: crng reseeded on system resumption [ 126.735580][ T4839] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 126.735613][ T4839] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 126.799055][ T4832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1059 [ 126.840219][ T4839] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1059 [ 126.950105][ T36] kauditd_printk_skb: 1048 callbacks suppressed [ 126.950126][ T36] audit: type=1400 audit(1750348178.260:29961): avc: denied { read write open } for pid=4021 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.075964][ T36] audit: type=1400 audit(1750348178.260:29962): avc: denied { ioctl } for pid=4021 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.092413][ T4863] rust_binder: Error while translating object. [ 127.140618][ T36] audit: type=1400 audit(1750348178.270:29963): avc: denied { read } for pid=4859 comm="syz.5.1394" name="binder0" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 127.141589][ T4864] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 127.156976][ T36] audit: type=1400 audit(1750348178.270:29964): avc: denied { read open } for pid=4859 comm="syz.5.1394" path="/dev/binderfs/binder0" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 127.170111][ T4863] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 127.216750][ T36] audit: type=1400 audit(1750348178.330:29965): avc: denied { read write } for pid=1950 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.248907][ T4867] SELinux: failed to load policy [ 127.255413][ T4863] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:245 [ 127.297437][ T36] audit: type=1400 audit(1750348178.330:29966): avc: denied { read write open } for pid=1950 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.350159][ T36] audit: type=1400 audit(1750348178.330:29967): avc: denied { ioctl } for pid=1950 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.458158][ T36] audit: type=1400 audit(1750348178.370:29968): avc: denied { ioctl } for pid=4859 comm="syz.5.1394" path="/dev/binderfs/binder0" dev="binder" ino=31 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 127.530960][ T36] audit: type=1400 audit(1750348178.370:29969): avc: denied { set_context_mgr } for pid=4859 comm="syz.5.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 127.600147][ T36] audit: type=1400 audit(1750348178.370:29970): avc: denied { map } for pid=4859 comm="syz.5.1394" path="/dev/binderfs/binder0" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 127.646588][ T4885] binder: Unknown parameter '18446744073709551615' [ 127.870589][ T4897] random: crng reseeded on system resumption [ 127.978362][ T4899] cgroup: fork rejected by pids controller in /syz5 [ 128.007925][ T4908] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 128.007957][ T4908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251 [ 128.190990][ T4915] syz.4.1408: attempt to access beyond end of device [ 128.190990][ T4915] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 128.295539][ T12] bridge_slave_1: left allmulticast mode [ 128.301385][ T12] bridge_slave_1: left promiscuous mode [ 128.317470][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.327721][ T12] bridge_slave_0: left allmulticast mode [ 128.347366][ T12] bridge_slave_0: left promiscuous mode [ 128.363214][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.531681][ T12] veth1_macvtap: left promiscuous mode [ 128.557630][ T12] veth0_vlan: left promiscuous mode [ 128.953503][ T4927] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.000121][ T4927] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.007239][ T4927] bridge_slave_0: entered allmulticast mode [ 129.068034][ T4927] bridge_slave_0: entered promiscuous mode [ 129.099228][ T5041] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 129.099254][ T5041] rust_binder: Error while translating object. [ 129.101114][ T4927] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.107950][ T5041] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 129.140144][ T4927] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.142823][ T5041] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1076 [ 129.150042][ T4927] bridge_slave_1: entered allmulticast mode [ 129.150530][ T4927] bridge_slave_1: entered promiscuous mode [ 129.307308][ T12] bridge_slave_1: left allmulticast mode [ 129.313631][ T12] bridge_slave_1: left promiscuous mode [ 129.319373][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.320147][ T5046] rust_binder: Write failure EINVAL in pid:1078 [ 129.338621][ T12] bridge_slave_0: left allmulticast mode [ 129.360484][ T5046] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.363296][ T12] bridge_slave_0: left promiscuous mode [ 129.385569][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.600536][ T12] veth1_macvtap: left promiscuous mode [ 129.606101][ T12] veth0_vlan: left promiscuous mode [ 129.972238][ T5050] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.979322][ T5050] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.020139][ T5050] bridge_slave_0: entered allmulticast mode [ 130.030910][ T5066] rust_binder: Read failure Err(EAGAIN) in pid:648 [ 130.060596][ T5050] bridge_slave_0: entered promiscuous mode [ 130.104285][ T5050] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.133020][ T5050] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.150474][ T5050] bridge_slave_1: entered allmulticast mode [ 130.156907][ T5050] bridge_slave_1: entered promiscuous mode [ 130.427133][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.434258][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.471046][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.478222][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.609074][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.616168][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.658348][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.665548][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.746018][ T4927] veth0_vlan: entered promiscuous mode [ 130.754212][ T5080] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 130.794463][ T4927] veth1_macvtap: entered promiscuous mode [ 130.859885][ T5050] veth0_vlan: entered promiscuous mode [ 130.945040][ T5050] veth1_macvtap: entered promiscuous mode [ 131.116582][ T5085] SELinux: security_context_str_to_sid () failed with errno=-22 [ 131.205779][ T5090] rust_binder: Write failure EFAULT in pid:2 [ 131.214502][ T5090] SELinux: truncated policydb string identifier [ 131.258501][ T5090] SELinux: failed to load policy [ 131.391366][ T5099] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 131.797948][ T5129] rust_binder: Write failure EFAULT in pid:1112 [ 131.806318][ T5131] random: crng reseeded on system resumption [ 131.962371][ T36] kauditd_printk_skb: 704 callbacks suppressed [ 131.962391][ T36] audit: type=1400 audit(1750348183.280:30675): avc: denied { ioctl } for pid=5132 comm="syz.5.1444" path="/dev/binderfs/binder0" dev="binder" ino=22 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 131.962394][ T5133] rust_binder: Write failure EINVAL in pid:15 [ 132.083012][ T36] audit: type=1400 audit(1750348183.400:30676): avc: denied { read write } for pid=1950 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.113506][ T36] audit: type=1400 audit(1750348183.400:30677): avc: denied { read write open } for pid=1950 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.148780][ T36] audit: type=1400 audit(1750348183.400:30678): avc: denied { ioctl } for pid=1950 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.181341][ T36] audit: type=1400 audit(1750348183.420:30679): avc: denied { read } for pid=5135 comm="syz.0.1445" name="binder0" dev="binder" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.192758][ T5136] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 132.205529][ T36] audit: type=1400 audit(1750348183.420:30680): avc: denied { read open } for pid=5135 comm="syz.0.1445" path="/dev/binderfs/binder0" dev="binder" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.225915][ T5136] rust_binder: Error in use_page_slow: EBUSY [ 132.241508][ T36] audit: type=1400 audit(1750348183.420:30681): avc: denied { ioctl } for pid=5135 comm="syz.0.1445" path="/dev/binderfs/binder0" dev="binder" ino=61 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.274459][ T36] audit: type=1400 audit(1750348183.420:30682): avc: denied { set_context_mgr } for pid=5135 comm="syz.0.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 132.275997][ T5136] rust_binder: use_range failure EBUSY [ 132.295198][ T36] audit: type=1400 audit(1750348183.420:30683): avc: denied { ioctl } for pid=5135 comm="syz.0.1445" path="/dev/binderfs/binder0" dev="binder" ino=61 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.337050][ T5136] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 132.337075][ T5136] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 132.350272][ T36] audit: type=1400 audit(1750348183.500:30684): avc: denied { map } for pid=5135 comm="syz.0.1445" path="/dev/binderfs/binder0" dev="binder" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.358325][ T5136] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 132.394448][ T5136] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:663 [ 132.682641][ T5148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.832372][ T5158] __vm_enough_memory: pid: 5158, comm: syz.5.1451, bytes: 281474976845824 not enough memory for the allocation [ 133.050512][ T5166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:27 [ 133.072526][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 133.098239][ T12] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 133.506207][ T5182] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 176, size: 212) [ 133.506232][ T5182] rust_binder: Error while translating object. [ 133.526946][ T5182] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 133.533802][ T5182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:670 [ 134.004551][ T5195] input input90: cannot allocate more than FF_MAX_EFFECTS effects [ 134.563471][ T313] bridge_slave_1: left allmulticast mode [ 134.574471][ T313] bridge_slave_1: left promiscuous mode [ 134.591274][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.601428][ T313] bridge_slave_0: left allmulticast mode [ 134.607110][ T313] bridge_slave_0: left promiscuous mode [ 134.618355][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.718042][ T313] veth1_macvtap: left promiscuous mode [ 134.731128][ T313] veth0_vlan: left promiscuous mode [ 134.925281][ T5216] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.943069][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.955447][ T5216] bridge_slave_0: entered allmulticast mode [ 134.963773][ T5216] bridge_slave_0: entered promiscuous mode [ 134.972076][ T5216] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.979126][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.986654][ T5216] bridge_slave_1: entered allmulticast mode [ 134.992891][ T5216] bridge_slave_1: entered promiscuous mode [ 135.072649][ T5216] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.079725][ T5216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.087037][ T5216] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.090322][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 135.094077][ T5216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.105600][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.116884][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.124893][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.133181][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.137066][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.150531][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.158315][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.177255][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.186413][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.195336][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.203132][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.211607][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.219386][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.227231][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.235458][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.243321][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.252094][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.259932][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.267809][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.276031][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.278052][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.283829][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.290841][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.303009][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.305960][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.313035][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.320806][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.336092][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.343913][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.353406][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.361351][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.369418][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.378122][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.386042][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.394407][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.421869][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.430713][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.436693][ T5216] veth0_vlan: entered promiscuous mode [ 135.438962][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.453298][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.461349][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.472792][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.481516][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.486080][ T5216] veth1_macvtap: entered promiscuous mode [ 135.490878][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.513546][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.530118][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.543702][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.553617][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.562092][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.571106][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.579273][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.587354][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.595153][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.603892][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.612380][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.639045][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.648149][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.658477][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.668201][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.676800][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.685356][ T5234] rust_binder: Write failure EINVAL in pid:1134 [ 135.685816][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.720139][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.727976][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.738518][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.749241][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.758509][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.767053][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.775932][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.783985][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.794691][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.802535][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.811122][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.819751][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.827674][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.836139][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.843969][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.851939][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.859921][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.867979][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.876485][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.899335][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.909428][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.927304][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.937158][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.946063][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.954024][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.962213][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.971534][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.980390][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.988680][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 135.996620][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.005389][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.014167][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.022033][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.029868][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.037676][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.045882][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.054348][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.062130][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.069971][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.078048][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.085921][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.094898][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.103225][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.111233][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.119012][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.127022][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.135947][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.148105][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.155920][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.166419][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.175467][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.183287][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.191571][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.202663][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.210913][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.219308][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.227546][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.235522][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.243338][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.251379][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.259186][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.267141][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.274941][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.282742][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.290777][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.298560][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.306379][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.317540][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.325572][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.333421][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.341208][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.348965][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.356836][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.364606][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.372494][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.380534][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.388354][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.396908][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.410675][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.418475][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.426600][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.434654][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.440280][ T5267] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:25 [ 136.461754][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.482258][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.490149][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.497885][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.506456][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.514351][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.523562][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.532356][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.540215][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.547950][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.555706][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.563652][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.571686][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.579479][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.588689][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.597086][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.599174][ T5273] rust_binder: Write failure EFAULT in pid:27 [ 136.605093][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.619477][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.636727][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.644634][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.653525][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.661881][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.669976][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.679480][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.687393][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.695573][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.703522][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.711523][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.719328][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.727213][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.735233][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.743841][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.751755][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.759597][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.767472][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.775489][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.783350][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.791238][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.799899][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.807709][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.815548][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.825630][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.825688][ T5276] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.833476][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.851208][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.859322][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.870497][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.878549][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.891794][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.901304][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.909642][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.918494][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.926315][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.934129][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.942892][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.950789][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.958566][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.966437][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.974295][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 136.974547][ T36] kauditd_printk_skb: 638 callbacks suppressed [ 136.974558][ T36] audit: type=1400 audit(1750348188.300:31323): avc: denied { ioctl } for pid=5275 comm="syz.2.1491" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 136.982104][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 137.013027][ T36] audit: type=1400 audit(1750348188.300:31324): avc: denied { read } for pid=5275 comm="syz.2.1491" name="binder0" dev="binder" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 137.013063][ T36] audit: type=1400 audit(1750348188.300:31325): avc: denied { read open } for pid=5275 comm="syz.2.1491" path="/dev/binderfs/binder0" dev="binder" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 137.023622][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 137.044541][ T36] audit: type=1400 audit(1750348188.340:31326): avc: denied { ioctl } for pid=5275 comm="syz.2.1491" path="/dev/binderfs/binder0" dev="binder" ino=64 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 137.070691][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 137.076252][ T36] audit: type=1400 audit(1750348188.340:31327): avc: denied { set_context_mgr } for pid=5275 comm="syz.2.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 137.103043][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 137.137116][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 137.145485][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 137.153794][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 137.162354][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 137.172288][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 137.180804][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 137.188687][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 137.199864][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 137.201025][ T36] audit: type=1400 audit(1750348188.520:31328): avc: denied { read write } for pid=5290 comm="syz.0.1495" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 137.208636][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 137.238771][ T36] audit: type=1400 audit(1750348188.520:31329): avc: denied { read open } for pid=5290 comm="syz.0.1495" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 137.251166][ T36] audit: type=1400 audit(1750348188.560:31330): avc: denied { read write } for pid=5290 comm="syz.0.1495" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 137.262938][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 137.289373][ T36] audit: type=1400 audit(1750348188.560:31331): avc: denied { read open } for pid=5290 comm="syz.0.1495" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 137.294724][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 137.318733][ T36] audit: type=1400 audit(1750348188.610:31332): avc: denied { read } for pid=5290 comm="syz.0.1495" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 137.326285][ T31] hid-generic 0003:000F:FFFFF800.000A: unknown main item tag 0x0 [ 137.358386][ T31] hid-generic 0003:000F:FFFFF800.000A: hidraw0: USB HID v1020.00 Device [syz0] on syz1 [ 137.551243][ T5302] kvm: kvm [5300]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x882 [ 137.649054][ T5313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.650111][ T5313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.664187][ T5313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.664513][ T5313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.681153][ T5313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.681659][ T5313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.696964][ T5313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.697273][ T5313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.937422][ T5322] fido_id[5322]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 137.980551][ T5329] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 138.044980][ T5333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51 [ 138.263438][ T5343] binder: Bad value for 'stats' [ 138.562574][ T5355] SELinux: policydb version 905587468 does not match my version range 15-33 [ 138.581031][ T5355] SELinux: failed to load policy [ 138.606797][ T5358] SELinux: unknown common r [ 138.611725][ T5358] SELinux: failed to load policy [ 138.890299][ T5364] kvm: kvm [5363]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253 [ 139.247863][ T5374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.251586][ T5374] rust_binder: Error while translating object. [ 139.258115][ T5374] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 139.264646][ T5374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:67 [ 139.350498][ T5374] rust_binder: Error while translating object. [ 139.359609][ T5374] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 139.374037][ T5374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:67 [ 139.431160][ T5382] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 139.451680][ T5382] random: crng reseeded on system resumption [ 139.566281][ T5386] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 139.566317][ T5386] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1187 [ 139.781673][ T5395] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 139.950019][ T5404] binder: Bad value for 'stats' [ 139.977124][ T5407] binder: Unknown parameter 'seclbPl9' [ 140.558069][ T5429] __vm_enough_memory: pid: 5429, comm: syz.5.1542, bytes: 281474976845824 not enough memory for the allocation [ 140.618211][ T5432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1211 [ 141.007991][ T5450] input: syz0 as /devices/virtual/input/input92 [ 141.168115][ T5454] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 141.168143][ T5454] rust_binder: Error in use_page_slow: EBUSY [ 141.190973][ T5454] rust_binder: use_range failure EBUSY [ 141.196012][ T5455] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 141.205912][ T5454] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 141.208814][ T5455] rust_binder: Error in use_page_slow: EBUSY [ 141.224020][ T5455] rust_binder: use_range failure EBUSY [ 141.230024][ T5455] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 141.235581][ T5455] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 141.243350][ T5454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 141.258568][ T5454] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 141.268020][ T5455] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 141.281396][ T5455] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1219 [ 141.311029][ T5454] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:80 [ 141.435234][ T5464] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 141.478469][ T5467] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 141.993825][ T36] kauditd_printk_skb: 718 callbacks suppressed [ 141.993845][ T36] audit: type=1400 audit(1750348193.310:32051): avc: denied { read write } for pid=293 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.041356][ T36] audit: type=1400 audit(1750348193.350:32052): avc: denied { read write open } for pid=293 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.110174][ T36] audit: type=1400 audit(1750348193.350:32053): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.176406][ T36] audit: type=1400 audit(1750348193.390:32054): avc: denied { read write } for pid=4927 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.250144][ T36] audit: type=1400 audit(1750348193.390:32055): avc: denied { read write open } for pid=4927 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.260285][ T5501] rust_binder: Write failure EINVAL in pid:94 [ 142.280894][ T5502] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 142.289863][ T36] audit: type=1400 audit(1750348193.390:32056): avc: denied { ioctl } for pid=4927 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.327146][ T36] audit: type=1400 audit(1750348193.430:32057): avc: denied { read write } for pid=5492 comm="syz.2.1565" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 142.356712][ T36] audit: type=1400 audit(1750348193.430:32058): avc: denied { read open } for pid=5492 comm="syz.2.1565" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 142.381319][ T36] audit: type=1400 audit(1750348193.430:32059): avc: denied { read } for pid=5494 comm="syz.0.1566" name="binder0" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.405003][ T36] audit: type=1400 audit(1750348193.430:32060): avc: denied { read open } for pid=5494 comm="syz.0.1566" path="/dev/binderfs/binder0" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 142.544508][ T5504] random: crng reseeded on system resumption [ 142.937026][ T5526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154 [ 143.120332][ T5532] tap0: tun_chr_ioctl cmd 1074812118 [ 143.152181][ T5532] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:156 [ 143.252121][ T5539] SELinux: failed to load policy [ 143.271386][ T5539] rust_binder: Write failure EFAULT in pid:1246 [ 144.172615][ T5573] kvm: apic: phys broadcast and lowest prio [ 144.185026][ T5573] kvm: Disabled LAPIC found during irq injection [ 144.319327][ T5578] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 144.380130][ T5583] input: syz1 as /devices/virtual/input/input96 [ 144.436308][ T5587] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 144.440684][ T5587] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 144.460526][ T5587] rust_binder: Error while translating object. [ 144.479480][ T5587] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 144.489568][ T5587] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:164 [ 144.638738][ T5595] SELinux: policydb version 2070375218 does not match my version range 15-33 [ 144.656948][ T5595] SELinux: failed to load policy [ 144.678392][ T5597] random: crng reseeded on system resumption [ 144.704452][ T5598] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.706254][ T5598] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.720802][ T5597] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.751157][ T5601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.751593][ T5601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.755359][ T5597] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 144.771286][ T5600] rust_binder: Failed to allocate buffer. len:4256, is_oneway:true [ 144.782352][ T5598] rust_binder: Failed to allocate buffer. len:4256, is_oneway:true [ 144.799570][ T5600] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.057294][ T5619] can0: slcan on ptm0. [ 145.117884][ T5619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:149 [ 145.247689][ T5618] can0 (unregistered): slcan off ptm0. [ 145.265004][ T5623] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 145.460275][ T5633] serio: Serial port ttynull [ 145.503687][ T5631] SELinux: security_context_str_to_sid () failed with errno=-22 [ 145.761090][ T5649] random: crng reseeded on system resumption [ 146.277138][ T5678] binder: Unknown parameter '' [ 146.440674][ T5683] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.761928][ T5695] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.878430][ T5697] input: syz0 as /devices/virtual/input/input98 [ 146.956598][ T5693] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.000614][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.007750][ T5693] bridge_slave_0: entered allmulticast mode [ 147.015896][ T36] kauditd_printk_skb: 1125 callbacks suppressed [ 147.015913][ T36] audit: type=1400 audit(1750348198.330:33186): avc: denied { search } for pid=5704 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.040571][ T5693] bridge_slave_0: entered promiscuous mode [ 147.069635][ T5693] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.100221][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.107430][ T5693] bridge_slave_1: entered allmulticast mode [ 147.109014][ T36] audit: type=1400 audit(1750348198.370:33187): avc: denied { read } for pid=5704 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.135972][ T5693] bridge_slave_1: entered promiscuous mode [ 147.160588][ T5708] binder: Unknown parameter '' [ 147.216227][ T36] audit: type=1400 audit(1750348198.370:33188): avc: denied { read open } for pid=5704 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.283496][ T36] audit: type=1400 audit(1750348198.370:33189): avc: denied { search } for pid=5704 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.353574][ T36] audit: type=1400 audit(1750348198.370:33190): avc: denied { search } for pid=5704 comm="cmp" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.433377][ T36] audit: type=1400 audit(1750348198.370:33191): avc: denied { search } for pid=5704 comm="cmp" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.442815][ T5717] audit: audit_backlog=65 > audit_backlog_limit=64 [ 147.476421][ T5693] audit: audit_backlog=65 > audit_backlog_limit=64 [ 147.478563][ T36] audit: type=1400 audit(1750348198.370:33192): avc: denied { read } for pid=5704 comm="cmp" name="resolv.conf.can0.link" dev="tmpfs" ino=7494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.492626][ T5693] audit: audit_lost=165 audit_rate_limit=0 audit_backlog_limit=64 [ 147.674172][ T5713] random: crng reseeded on system resumption [ 147.736377][ T5719] rust_binder: Error while translating object. [ 147.736406][ T5719] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 147.754858][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.771533][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.790173][ T5719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1286 [ 147.820852][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.837136][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.035400][ T5693] veth0_vlan: entered promiscuous mode [ 148.186232][ T5693] veth1_macvtap: entered promiscuous mode [ 148.351021][ T5746] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.354562][ T5744] binder: Unknown parameter 'noninderfs/binder1' [ 148.422923][ T5745] rust_binder: Write failure EINVAL in pid:178 [ 148.785151][ T5760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 149.003317][ T5765] input: syz1 as /devices/virtual/input/input99 [ 149.011520][ T5769] binder: Unknown parameter 'iæS\Q1' [ 149.059296][ T5765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 149.439385][ T5774] rust_binder: Write failure EINVAL in pid:14 [ 149.483217][ T5774] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.500667][ T5774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:14 [ 149.530798][ T49] bridge_slave_1: left allmulticast mode [ 149.546407][ T49] bridge_slave_1: left promiscuous mode [ 149.553482][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.562273][ T49] bridge_slave_0: left allmulticast mode [ 149.567960][ T49] bridge_slave_0: left promiscuous mode [ 149.573924][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.692255][ T49] veth1_macvtap: left promiscuous mode [ 149.699577][ T49] veth0_vlan: left promiscuous mode [ 149.782801][ T5788] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:21 [ 149.793639][ T5789] rust_binder: Error in use_page_slow: ESRCH [ 149.815376][ T5789] rust_binder: use_range failure ESRCH [ 149.822203][ T5789] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 149.822561][ T5786] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 149.827830][ T5789] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 149.848490][ T5789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:21 [ 149.955654][ T5794] binder: Unknown parameter 'non' [ 150.011784][ T5794] input: syz1 as /devices/virtual/input/input100 [ 150.071806][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.078892][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.120186][ T5780] bridge_slave_0: entered allmulticast mode [ 150.130675][ T5780] bridge_slave_0: entered promiscuous mode [ 150.138157][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.145443][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.162368][ T5780] bridge_slave_1: entered allmulticast mode [ 150.180495][ T5780] bridge_slave_1: entered promiscuous mode [ 150.417128][ T5813] rust_binder: Write failure EFAULT in pid:1314 [ 150.498458][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.511845][ T5780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.519864][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.526986][ T5780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.669050][ T5824] kvm: kvm [5823]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x7 [ 150.701010][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.708397][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.736828][ T5822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197 [ 150.745594][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.761799][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.768009][ T5827] binder: Unknown parameter '00000000000000000004' [ 150.783468][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.790575][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.940559][ T5780] veth0_vlan: entered promiscuous mode [ 151.008678][ T5780] veth1_macvtap: entered promiscuous mode [ 151.072214][ T5836] rust_binder: Write failure EINVAL in pid:202 [ 151.077081][ T5836] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 151.120786][ T5836] SELinux: failed to load policy [ 151.246155][ T5842] random: crng reseeded on system resumption [ 151.288406][ T313] Bluetooth: hci0: Frame reassembly failed (-84) [ 151.332405][ T5842] input: syz0 as /devices/virtual/input/input101 [ 151.375825][ T5842] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 151.593581][ T5853] can0: slcan on ptm1. [ 151.619403][ T5854] binder: Unknown parameter '0x0000000000000000' [ 151.680892][ T5852] can0 (unregistered): slcan off ptm1. [ 151.832779][ T5865] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 152.026024][ T36] kauditd_printk_skb: 1006 callbacks suppressed [ 152.026041][ T36] audit: type=1400 audit(1750348203.340:34145): avc: denied { search } for pid=5876 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.061812][ T36] audit: type=1400 audit(1750348203.340:34146): avc: denied { read } for pid=5876 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.085800][ T36] audit: type=1400 audit(1750348203.340:34147): avc: denied { read open } for pid=5876 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.109843][ T36] audit: type=1400 audit(1750348203.340:34148): avc: denied { search } for pid=5876 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.133154][ T36] audit: type=1400 audit(1750348203.340:34149): avc: denied { search } for pid=5876 comm="cmp" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.156612][ T36] audit: type=1400 audit(1750348203.340:34150): avc: denied { search } for pid=5876 comm="cmp" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.213034][ T5880] audit: audit_backlog=65 > audit_backlog_limit=64 [ 152.222583][ T36] audit: type=1400 audit(1750348203.340:34151): avc: denied { read } for pid=5876 comm="cmp" name="resolv.conf.can0.link" dev="tmpfs" ino=7712 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.222623][ T5880] audit: audit_lost=184 audit_rate_limit=0 audit_backlog_limit=64 [ 152.247467][ T5880] audit: backlog limit exceeded [ 152.308889][ T5882] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 152.571003][ T5895] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 152.577089][ T5895] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 152.753148][ T5909] rust_binder: Write failure EINVAL in pid:213 [ 153.049003][ T5919] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 153.285582][ T5926] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 153.297770][ T5923] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 153.297802][ T5923] rust_binder: Error in use_page_slow: EBUSY [ 153.309738][ T5923] rust_binder: use_range failure EBUSY [ 153.316443][ T5923] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 153.322527][ T5923] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 153.331053][ T5923] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 153.340112][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 153.340835][ T5923] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:17 [ 153.352121][ T984] Bluetooth: hci0: command 0x1003 tx timeout [ 153.518885][ T5933] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 153.545547][ T5933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.594456][ T5938] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.810801][ T5937] kvm: kvm [5935]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400 [ 155.160147][ T5965] rust_binder: Error in use_page_slow: ESRCH [ 155.160177][ T5965] rust_binder: use_range failure ESRCH [ 155.180148][ T5965] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 155.210430][ T5965] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 155.264344][ T5965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:220 [ 155.384889][ T5983] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 155.449115][ T5983] rust_binder: Write failure EINVAL in pid:225 [ 156.442434][ T6024] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 156.487067][ T6027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:231 [ 156.783956][ T6038] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 156.833668][ T6038] SELinux: security_context_str_to_sid (syste_u) failed with errno=-22 [ 157.040102][ T36] kauditd_printk_skb: 1543 callbacks suppressed [ 157.040121][ T36] audit: type=1400 audit(1750348208.350:35608): avc: denied { setattr } for pid=5780 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.099364][ T5780] audit: audit_backlog=65 > audit_backlog_limit=64 [ 157.106163][ T5780] audit: audit_lost=214 audit_rate_limit=0 audit_backlog_limit=64 [ 157.115606][ T36] audit: type=1400 audit(1750348208.350:35609): avc: denied { setattr } for pid=5780 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.145402][ T5693] audit: audit_backlog=65 > audit_backlog_limit=64 [ 157.152599][ T5780] audit: backlog limit exceeded [ 157.158498][ T5780] audit: audit_backlog=65 > audit_backlog_limit=64 [ 157.166146][ T5780] audit: audit_lost=215 audit_rate_limit=0 audit_backlog_limit=64 [ 157.174974][ T36] audit: type=1400 audit(1750348208.350:35610): avc: denied { setattr } for pid=5780 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.177502][ T293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 157.258528][ T6053] random: crng reseeded on system resumption [ 157.380549][ T6053] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 157.380584][ T6053] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243 [ 157.400708][ T6054] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 157.409873][ T6054] rust_binder: Error in use_page_slow: EBUSY [ 157.434357][ T6053] input: syz1 as /devices/virtual/input/input107 [ 157.464302][ T6054] rust_binder: use_range failure EBUSY [ 157.464341][ T6054] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 157.469843][ T6054] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 157.490114][ T6054] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 157.499458][ T6054] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1362 [ 158.355444][ T6104] binder: Unknown parameter 'smackfshat' [ 158.417375][ T6101] rust_binder: Error in use_page_slow: ESRCH [ 158.417408][ T6101] rust_binder: use_range failure ESRCH [ 158.436894][ T6102] rust_binder: Error in use_page_slow: ESRCH [ 158.455572][ T6102] rust_binder: use_range failure ESRCH [ 158.472367][ T6101] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 158.500264][ T6101] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 158.510136][ T6102] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 158.532133][ T6102] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 158.540233][ T6102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:254 [ 158.555874][ T6101] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:254 [ 158.729338][ T6115] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 158.802121][ T6119] SELinux: security_context_str_to_sid () failed with errno=-22 [ 158.816458][ T6121] SELinux: security_context_str_to_sid () failed with errno=-22 [ 159.390101][ T6143] input: syz0 as /devices/virtual/input/input109 [ 160.078966][ T6162] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 160.298536][ T6174] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 160.417396][ T6174] binder: Bad value for 'defcontext' [ 160.669700][ T6192] rust_binder: Error in use_page_slow: ESRCH [ 160.669729][ T6192] rust_binder: use_range failure ESRCH [ 160.700123][ T6192] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 160.705645][ T6192] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 160.717075][ T6193] rust_binder: Write failure EINVAL in pid:1401 [ 160.804518][ T6192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1401 [ 160.851575][ T6202] input: syz1 as /devices/virtual/input/input111 [ 161.003269][ T6213] SELinux: policydb string length 14080 does not match expected length 8 [ 161.034652][ T6213] SELinux: failed to load policy [ 161.070545][ T6213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1404 [ 161.195022][ T6221] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 161.342055][ T6227] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 161.382939][ T6227] rust_binder: Error while translating object. [ 161.382986][ T6227] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 161.401217][ T6227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:308 [ 161.684642][ T6234] input: syz1 as /devices/virtual/input/input112 [ 161.973859][ T6250] random: crng reseeded on system resumption [ 162.051846][ T36] kauditd_printk_skb: 3132 callbacks suppressed [ 162.051865][ T36] audit: type=1400 audit(1750348213.370:38666): avc: denied { setattr } for pid=5780 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.127700][ T36] audit: type=1400 audit(1750348213.370:38667): avc: denied { setattr } for pid=5780 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.146089][ T5780] audit: audit_backlog=65 > audit_backlog_limit=64 [ 162.159642][ T6253] audit: audit_backlog=65 > audit_backlog_limit=64 [ 162.180087][ T36] audit: type=1400 audit(1750348213.370:38668): avc: denied { setattr } for pid=5780 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.190100][ T5780] audit: audit_lost=242 audit_rate_limit=0 audit_backlog_limit=64 [ 162.209137][ T36] audit: type=1400 audit(1750348213.370:38669): avc: denied { setattr } for pid=5780 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.211776][ T6253] audit: audit_lost=243 audit_rate_limit=0 audit_backlog_limit=64 [ 162.237960][ T6250] audit: audit_backlog=65 > audit_backlog_limit=64 [ 162.249154][ T5780] audit: backlog limit exceeded [ 162.260356][ T6253] binder: Unknown parameter 'conteyt' [ 162.331647][ T6250] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 162.471664][ T6260] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 162.495207][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.528690][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.542521][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.551111][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.562260][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.570843][ T6261] cgroup: fork rejected by pids controller in /syz6 [ 162.572433][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.586336][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.594939][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.603635][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.612288][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.622890][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.630764][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.638788][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.646649][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.654870][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.662721][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.670930][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.678771][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.687768][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.697744][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.711776][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.719701][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.728732][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.739922][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.760105][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.770899][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.783308][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.793456][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.803044][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.812406][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.825087][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.833810][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.843733][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.852867][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.861493][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.870114][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.877992][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.887315][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.896750][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.914405][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.931362][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.948249][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.965069][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.973621][ T49] bridge_slave_1: left allmulticast mode [ 162.982805][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 162.998640][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.006275][ T49] bridge_slave_1: left promiscuous mode [ 163.016735][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.020161][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.036927][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.054929][ T49] bridge_slave_0: left allmulticast mode [ 163.057147][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.069000][ T49] bridge_slave_0: left promiscuous mode [ 163.074781][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.080109][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.099758][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.120017][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.132786][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.143864][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.154274][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.162896][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.175714][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.184683][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.194474][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.204349][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.215787][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.225631][ T49] veth1_macvtap: left promiscuous mode [ 163.225687][ T49] veth0_vlan: left promiscuous mode [ 163.237925][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.245936][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.275686][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.294531][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.314741][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x6 [ 163.334948][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x7 [ 163.358130][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x7 [ 163.375935][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x7 [ 163.385405][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.396983][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.405596][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.420093][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.428926][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.438182][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.446720][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.456570][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.465211][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.483819][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.492389][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.501817][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.509572][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.520264][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.528167][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.539168][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.551009][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.559069][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.566880][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.582972][ T6377] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.590103][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.598062][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.606689][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.613967][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.621871][ T6377] bridge_slave_0: entered allmulticast mode [ 163.628449][ T6377] bridge_slave_0: entered promiscuous mode [ 163.630102][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.643905][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.649844][ T6377] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.651823][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.667347][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.671553][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.675126][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.690505][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.694491][ T6377] bridge_slave_1: entered allmulticast mode [ 163.698362][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.712271][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.717435][ T6377] bridge_slave_1: entered promiscuous mode [ 163.720028][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.720094][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.741994][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.749760][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.757623][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.766839][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.774660][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.782459][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.790845][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.798627][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.807233][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.830101][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.837930][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.852263][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.860654][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.868455][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.877196][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.889385][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.910235][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.918019][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.940102][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.959454][ T6377] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.960117][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.966580][ T6377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.981643][ T6377] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.982404][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 163.988682][ T6377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.017031][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.037234][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.050852][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.068795][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.089005][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.098503][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.099103][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.110106][ T6387] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 164.114280][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.116189][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.137923][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.153070][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.157400][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.160166][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.181216][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.185647][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.188364][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.197771][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.220580][ T6391] random: crng reseeded on system resumption [ 164.226668][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.254134][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.274553][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.291302][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.309261][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.325016][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x4 [ 164.350117][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.358876][ T6377] veth0_vlan: entered promiscuous mode [ 164.365448][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.380100][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.398023][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.418242][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.425579][ T6377] veth1_macvtap: entered promiscuous mode [ 164.438426][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.458625][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.468718][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.485118][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.505202][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.513044][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.521297][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.529068][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.536951][ T31] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 164.546174][ T31] hid-generic 0008:0000:FFFFFBFF.000B: hidraw0: HID v9.86 Device [syz0] on syz1 [ 165.016716][ T6404] fido_id[6404]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 165.099942][ T6410] input: syz0 as /devices/virtual/input/input113 [ 165.622056][ T6432] kvm: user requested TSC rate below hardware speed [ 165.829249][ T6441] SELinux: security_context_str_to_sid (sHtem_u) failed with errno=-22 [ 166.196517][ T6455] input: syz1 as /devices/virtual/input/input114 [ 166.532041][ T6462] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 166.640127][ T6464] kvm: kvm [6463]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 167.060950][ T36] kauditd_printk_skb: 3292 callbacks suppressed [ 167.060967][ T36] audit: type=1400 audit(1750348218.380:41854): avc: denied { setattr } for pid=5780 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.140517][ T6488] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 167.148289][ T6495] rust_binder: Write failure EINVAL in pid:39 [ 167.170099][ T36] audit: type=1400 audit(1750348218.380:41855): avc: denied { map } for pid=6489 comm="syz.6.1827" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.226174][ T5780] audit: audit_backlog=65 > audit_backlog_limit=64 [ 167.240089][ T5780] audit: audit_lost=280 audit_rate_limit=0 audit_backlog_limit=64 [ 167.248032][ T5780] audit: backlog limit exceeded [ 167.256290][ T36] audit: type=1400 audit(1750348218.380:41856): avc: denied { read } for pid=6489 comm="syz.6.1827" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.269583][ T6377] audit: audit_backlog=65 > audit_backlog_limit=64 [ 167.292616][ T5780] audit: audit_backlog=65 > audit_backlog_limit=64 [ 167.304062][ T6497] audit: audit_backlog=65 > audit_backlog_limit=64 [ 167.308782][ T6377] audit: audit_lost=281 audit_rate_limit=0 audit_backlog_limit=64 [ 167.511920][ T6503] rust_binder: Write failure EINVAL in pid:1464 [ 167.540618][ T6505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 167.579168][ T6503] input: syz1 as /devices/virtual/input/input116 [ 167.843237][ T6508] rust_binder: got new transaction with bad transaction stack [ 167.843265][ T6508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:364 [ 168.262544][ T6528] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 168.590228][ T6538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1477 [ 168.676143][ T6542] binder: Unknown parameter '00000000000000000000003' [ 168.966671][ T6559] binder: Unknown parameter 'dont_hash' [ 169.133222][ T6566] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 169.133248][ T6566] rust_binder: Read failure Err(EFAULT) in pid:64 [ 169.217484][ T6566] input input118: cannot allocate more than FF_MAX_EFFECTS effects [ 169.251167][ T6570] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.487027][ T6592] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.511431][ T6592] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 169.517938][ T6592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:386 [ 169.659417][ T6598] rust_binder: Write failure EINVAL in pid:68 [ 169.837149][ T6603] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.002064][ T6610] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 170.180787][ T6616] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.289810][ T6623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1512 [ 170.320245][ T6620] rust_binder: Write failure EINVAL in pid:74 [ 170.806843][ T6627] SELinux: failed to load policy [ 170.968330][ T313] bridge_slave_1: left allmulticast mode [ 170.975011][ T313] bridge_slave_1: left promiscuous mode [ 170.991058][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.030326][ T313] bridge_slave_0: left allmulticast mode [ 171.036337][ T313] bridge_slave_0: left promiscuous mode [ 171.050169][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.155612][ T6644] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.212202][ T313] veth1_macvtap: left promiscuous mode [ 171.238230][ T313] veth0_vlan: left promiscuous mode [ 171.417713][ T6633] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.435770][ T6633] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.463503][ T6633] bridge_slave_0: entered allmulticast mode [ 171.469921][ T6633] bridge_slave_0: entered promiscuous mode [ 171.527839][ T6633] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.541090][ T6633] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.556074][ T6633] bridge_slave_1: entered allmulticast mode [ 171.567612][ T6633] bridge_slave_1: entered promiscuous mode [ 171.574926][ T6669] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:95 [ 171.711287][ T6674] rust_binder: got new transaction with bad transaction stack [ 171.732696][ T6674] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97 [ 171.739206][ T6675] rust_binder: Read failure Err(EAGAIN) in pid:412 [ 171.794606][ T6677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1527 [ 171.903467][ T6680] rust_binder: Write failure EFAULT in pid:1529 [ 171.934263][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.947630][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.983763][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.990882][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.034297][ T6686] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.080103][ T36] kauditd_printk_skb: 2511 callbacks suppressed [ 172.080124][ T36] audit: type=1400 audit(1750348223.390:44330): avc: denied { sys_module } for pid=6633 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 172.144638][ T36] audit: type=1400 audit(1750348223.400:44331): avc: denied { sys_module } for pid=6633 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 172.195584][ T36] audit: type=1400 audit(1750348223.400:44332): avc: denied { sys_module } for pid=6633 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 172.218079][ T36] audit: type=1400 audit(1750348223.410:44333): avc: denied { sys_module } for pid=6633 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 172.238551][ T6633] veth0_vlan: entered promiscuous mode [ 172.246056][ T36] audit: type=1400 audit(1750348223.410:44334): avc: denied { sys_module } for pid=6633 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 172.293892][ T6633] audit: audit_backlog=65 > audit_backlog_limit=64 [ 172.300240][ T36] audit: type=1400 audit(1750348223.410:44335): avc: denied { sys_module } for pid=6633 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 172.301146][ T6633] audit: audit_lost=295 audit_rate_limit=0 audit_backlog_limit=64 [ 172.336204][ T6633] audit: backlog limit exceeded [ 172.336910][ T36] audit: type=1400 audit(1750348223.410:44336): avc: denied { sys_module } for pid=6633 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 172.385239][ T6633] veth1_macvtap: entered promiscuous mode [ 172.729009][ T6704] kvm: apic: phys broadcast and lowest prio [ 172.794832][ T6709] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:422 [ 173.128085][ T6725] rust_binder: Write failure EINVAL in pid:430 [ 173.326376][ T6739] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 173.524317][ T6742] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 173.544471][ T6742] rust_binder: Write failure EINVAL in pid:118 [ 173.620741][ T6748] rust_binder: Write failure EINVAL in pid:437 [ 173.630386][ T6748] rust_binder: Failed to allocate buffer. len:176, is_oneway:false [ 173.758185][ T6750] binder: Unknown parameter 'N5dҜn{7}THT`%' [ 173.845962][ T6752] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 173.845985][ T6752] rust_binder: Read failure Err(EFAULT) in pid:120 [ 174.003812][ T6763] rust_binder: Write failure EINVAL in pid:122 [ 174.031568][ T6763] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 174.075875][ T6768] rust_binder: Write failure EINVAL in pid:1548 [ 174.076916][ T6759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1548 [ 174.204214][ T6772] PM: Enabling pm_trace changes system date and time during resume. [ 174.204214][ T6772] PM: Correct system time has to be restored manually after resume. [ 174.279864][ T6772] kvm: kvm [6771]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6252 [ 174.365981][ T6783] binder: Unknown parameter 'defqZ- ' [ 174.516220][ T6788] rust_binder: Error while translating object. [ 174.516266][ T6788] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 174.531927][ T6788] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:454 [ 174.828435][ T6806] SELinux: security_context_str_to_sid () failed with errno=-22 [ 174.866729][ T6809] syz.0.1926 (6809) used obsolete PPPIOCDETACH ioctl [ 174.875570][ T6809] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 175.354389][ T6831] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 175.551746][ T6841] kvm: apic: phys broadcast and lowest prio [ 175.629704][ T6847] binder: Bad value for 'stats' [ 175.831281][ T6858] SELinux: failed to load policy [ 175.891913][ T6858] block device autoloading is deprecated and will be removed. [ 175.927092][ T6858] syz.6.1942: attempt to access beyond end of device [ 175.927092][ T6858] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 176.164892][ T6867] rust_binder: inc_ref_done called when no active inc_refs [ 176.164920][ T6867] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:481 [ 176.200772][ T6867] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 176.249460][ T6867] rust_binder: Read failure Err(EFAULT) in pid:481 [ 176.267337][ T6871] binder: Unknown parameter 'ccoem_' [ 176.334918][ T6878] binder: Bad value for 'max' [ 176.362392][ T6881] binder: Bad value for 'stats' [ 177.109770][ T36] kauditd_printk_skb: 872 callbacks suppressed [ 177.109790][ T36] audit: type=1400 audit(1750348228.420:45185): avc: denied { map } for pid=6906 comm="syz.2.1959" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 177.141856][ T6910] rust_binder: Write failure EFAULT in pid:493 [ 177.172773][ T36] audit: type=1400 audit(1750348228.420:45186): avc: denied { read } for pid=6906 comm="syz.2.1959" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 177.240139][ T36] audit: type=1400 audit(1750348228.460:45187): avc: denied { read } for pid=6905 comm="syz.0.1958" name="binder1" dev="binder" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 177.286890][ T36] audit: type=1400 audit(1750348228.460:45188): avc: denied { read open } for pid=6905 comm="syz.0.1958" path="/dev/binderfs/binder1" dev="binder" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 177.358688][ T36] audit: type=1400 audit(1750348228.460:45189): avc: denied { ioctl } for pid=6905 comm="syz.0.1958" path="/dev/binderfs/binder1" dev="binder" ino=86 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 177.414284][ T36] audit: type=1400 audit(1750348228.470:45190): avc: denied { map } for pid=6905 comm="syz.0.1958" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 177.465769][ T36] audit: type=1400 audit(1750348228.470:45191): avc: denied { read } for pid=6905 comm="syz.0.1958" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 177.506954][ T36] audit: type=1400 audit(1750348228.500:45192): avc: denied { read write } for pid=6633 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.570254][ T6926] audit: audit_backlog=65 > audit_backlog_limit=64 [ 177.578846][ T36] audit: type=1400 audit(1750348228.500:45193): avc: denied { read write open } for pid=6633 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.680564][ T6929] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 177.689234][ T6929] SELinux: failed to load policy [ 178.267662][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.290114][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.311153][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.330581][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.338028][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.355829][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.369813][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.386843][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.395124][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.405728][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.413731][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.422565][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.430948][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.438743][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.447441][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.456474][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.464726][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.473092][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.496257][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.504784][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.513987][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.522286][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.529774][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.541956][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.556187][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.566752][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.575603][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.596334][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.610167][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.633549][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.642621][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.650935][ T310] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 178.659894][ T310] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 178.671895][ T6963] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 178.671919][ T6963] rust_binder: Error while translating object. [ 178.703434][ T6963] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 178.709654][ T6963] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:507 [ 178.768155][ T6965] binder: Bad value for 'max' [ 178.895111][ T6972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:153 [ 179.048629][ T6979] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 179.088286][ T6985] SELinux: Context \MZ7})Q is not valid (left unmapped). [ 179.377451][ T6988] fido_id[6988]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 179.601329][ T7000] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 179.951765][ T7021] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 180.580453][ T7046] rust_binder: Write failure EFAULT in pid:75 [ 180.695758][ T7052] SELinux: security_context_str_to_sid (syteffff [ 180.695758][ T7052] cpu MHz : 2199.998 [ 180.695758][ T7052] cache size : 56320 KB [ 180.695758][ T7052] physical id : 0 [ 180.695758][ T7052] siblings : 2 [ 180.695758][ T7052] core id : 0 [ 180.695758][ T7052] cpu cores : 1 [ 180.695758][ T7052] apicid : 0 [ 180.695758][ T7052] initial apicid : 0 [ 180.695758][ T7052] fpu : yes [ 180.695758][ T7052] fpu_exception : yes [ 180.695758][ T7052] cpuid level : 13 [ 180.695758][ T7052] wp : yes [ 180.695758][ T7052] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 180.695758][ T7052] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapic_reg vid shadow_vmcs [ 180.695758][ T7052] bugs : cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf mds swapgs taa mmio_stale_data retblee [ 180.713699][ T7050] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 181.077804][ T7069] rust_binder: got new transaction with bad transaction stack [ 181.077828][ T7069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:175 [ 181.113688][ T7069] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.183267][ T7075] rust_binder: Error in use_page_slow: ESRCH [ 181.183296][ T7075] rust_binder: use_range failure ESRCH [ 181.220154][ T7075] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 181.243834][ T7075] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 181.282962][ T7075] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:82 [ 181.332881][ T7085] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:180 [ 181.581714][ T7095] rust_binder: Error while translating object. [ 181.610152][ T7095] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 181.616379][ T7095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:182 [ 181.649452][ T7098] ------------[ cut here ]------------ [ 181.664149][ T7098] WARNING: CPU: 1 PID: 7098 at mm/page_alloc.c:5157 __alloc_pages_noprof+0xe4/0x6c0 [ 181.673649][ T7098] Modules linked in: [ 181.677566][ T7098] CPU: 1 UID: 0 PID: 7098 Comm: syz.2.2020 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 181.691244][ T7098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.701420][ T7098] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 181.707355][ T7098] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d b4 7a ee 05 00 0f 85 c4 00 00 00 c6 05 a7 7a ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 181.727349][ T7098] RSP: 0018:ffffc90005b97680 EFLAGS: 00010246 [ 181.733504][ T7098] RAX: 0000000000000000 RBX: 1ffff92000b72ed4 RCX: 0000000000000000 [ 181.741620][ T7098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90005b97728 [ 181.749723][ T7098] RBP: ffffc90005b977a8 R08: ffffc90005b97727 R09: 0000000000000000 [ 181.757870][ T7098] R10: ffffc90005b97710 R11: fffff52000b72ee5 R12: ffffc90005b976c0 [ 181.765944][ T7098] R13: 0000000000000015 R14: dffffc0000000000 R15: 0000000000000000 [ 181.773985][ T7098] FS: 00007fe6406866c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 181.783072][ T7098] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.789689][ T7098] CR2: 0000200000006000 CR3: 000000013273e000 CR4: 00000000003526b0 [ 181.797837][ T7098] DR0: 0000000000000007 DR1: 000000000000009b DR2: 00040000ffffffff [ 181.806104][ T7098] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 181.814171][ T7098] Call Trace: [ 181.817565][ T7098] [ 181.820563][ T7098] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 181.826320][ T7098] ? __kasan_slab_alloc+0x73/0x90 [ 181.831417][ T7098] ? hashtab_init+0xdb/0x1f0 [ 181.836039][ T7098] ___kmalloc_large_node+0x9c/0x1d0 [ 181.841393][ T7098] ? ebitmap_read+0x21d/0x990 [ 181.846096][ T7098] ? hashtab_init+0xdb/0x1f0 [ 181.850804][ T7098] __kmalloc_large_node_noprof+0x1e/0xe0 [ 181.856469][ T7098] ? hashtab_init+0xdb/0x1f0 [ 181.861129][ T7098] __kmalloc_noprof+0x26d/0x450 [ 181.866019][ T7098] hashtab_init+0xdb/0x1f0 [ 181.870497][ T7098] ? policydb_read+0x86f/0x28c0 [ 181.875385][ T7098] symtab_init+0x44/0x70 [ 181.879660][ T7098] policydb_read+0x8fe/0x28c0 [ 181.884426][ T7098] ? kasan_save_alloc_info+0x40/0x50 [ 181.889742][ T7098] ? __cfi_policydb_read+0x10/0x10 [ 181.894964][ T7098] ? security_load_policy+0x128/0x12f0 [ 181.900501][ T7098] security_load_policy+0x162/0x12f0 [ 181.905831][ T7098] ? irqentry_exit+0x4a/0x60 [ 181.910479][ T7098] ? exc_page_fault+0x66/0xc0 [ 181.915194][ T7098] ? asm_exc_page_fault+0x2b/0x30 [ 181.920287][ T7098] ? __cfi_security_load_policy+0x10/0x10 [ 181.926049][ T7098] ? rep_movs_alternative+0x4a/0xa0 [ 181.931464][ T7098] sel_write_load+0x298/0x5e0 [ 181.936199][ T7098] ? futex_wait+0x288/0x540 [ 181.940825][ T7098] ? __cfi_sel_write_load+0x10/0x10 [ 181.946077][ T7098] ? __cfi_futex_wait+0x10/0x10 [ 181.950993][ T7098] ? bpf_lsm_file_permission+0xd/0x20 [ 181.956408][ T7098] ? __cfi_sel_write_load+0x10/0x10 [ 181.961783][ T7098] vfs_write+0x3c0/0xe80 [ 181.966082][ T7098] ? __cfi_vfs_write+0x10/0x10 [ 181.970981][ T7098] ? __kasan_check_write+0x18/0x20 [ 181.976228][ T7098] ? mutex_lock+0x92/0x1c0 [ 181.980713][ T7098] ? __cfi_mutex_lock+0x10/0x10 [ 181.985606][ T7098] ? __fget_files+0x2c5/0x340 [ 181.990348][ T7098] ksys_write+0x141/0x250 [ 181.994709][ T7098] ? xfd_validate_state+0x68/0x150 [ 181.999815][ T7098] ? __cfi_ksys_write+0x10/0x10 [ 182.004703][ T7098] ? __kasan_check_write+0x18/0x20 [ 182.009830][ T7098] ? fpregs_restore_userregs+0x11d/0x260 [ 182.015530][ T7098] __x64_sys_write+0x7f/0x90 [ 182.020261][ T7098] x64_sys_call+0x271c/0x2ee0 [ 182.024972][ T7098] do_syscall_64+0x58/0xf0 [ 182.029428][ T7098] ? clear_bhb_loop+0x35/0x90 [ 182.034215][ T7098] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 182.040162][ T7098] RIP: 0033:0x7fe63f78e929 [ 182.044602][ T7098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.064454][ T7098] RSP: 002b:00007fe640686038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 182.072940][ T7098] RAX: ffffffffffffffda RBX: 00007fe63f9b5fa0 RCX: 00007fe63f78e929 [ 182.080967][ T7098] RDX: 000000000000606c RSI: 0000200000000000 RDI: 0000000000000003 [ 182.088966][ T7098] RBP: 00007fe63f810b39 R08: 0000000000000000 R09: 0000000000000000 [ 182.097025][ T7098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.105090][ T7098] R13: 0000000000000000 R14: 00007fe63f9b5fa0 R15: 00007ffc70f1d368 [ 182.113147][ T7098] [ 182.116187][ T7098] ---[ end trace 0000000000000000 ]--- [ 182.122401][ T7098] SELinux: failed to load policy [ 182.174533][ T36] kauditd_printk_skb: 750 callbacks suppressed [ 182.174551][ T36] audit: type=1400 audit(1750348233.490:45924): avc: denied { read write } for pid=6377 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.260179][ T36] audit: type=1400 audit(1750348233.530:45925): avc: denied { read write open } for pid=6377 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.305207][ T36] audit: type=1400 audit(1750348233.530:45926): avc: denied { ioctl } for pid=6377 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.331888][ T36] audit: type=1400 audit(1750348233.560:45927): avc: denied { read write } for pid=6633 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.357132][ T36] audit: type=1400 audit(1750348233.560:45928): avc: denied { read write open } for pid=6633 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.410686][ T36] audit: type=1400 audit(1750348233.560:45929): avc: denied { ioctl } for pid=6633 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.437599][ T36] audit: type=1400 audit(1750348233.610:45930): avc: denied { read write } for pid=293 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.462725][ T36] audit: type=1400 audit(1750348233.610:45931): avc: denied { read write open } for pid=293 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.488821][ T36] audit: type=1400 audit(1750348233.610:45932): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1