last executing test programs: 1m53.42854985s ago: executing program 2 (id=2297): prctl$PR_SET_NAME(0xf, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) ioctl$BLKSSZGET(r0, 0x1268, &(0x7f0000000000)) 1m53.344556161s ago: executing program 2 (id=2299): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000830400"]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x7, 0x0, [{0xb4f, 0x0, 0x3}, {0x40000138, 0x0, 0x6}, {0x1be2, 0x0, 0x80000001}, {0x3bc, 0x0, 0x4}, {0xacd}, {0x901, 0x0, 0x7}, {0x614, 0x0, 0x8d}]}) mmap(&(0x7f00003b3000/0x4000)=nil, 0x4000, 0x1000007, 0x13, r0, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 1m53.184022413s ago: executing program 2 (id=2301): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000002080)={0x2}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x7a) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x297, 0x0, 0xe0}]}) close(0x3) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r7, &(0x7f0000002400)={0x2020}, 0x2020) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000020c0)=ANY=[@ANYRES64=0x0]) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002140)='./binderfs/custom0\x00', 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="cf00000000555c0000000000000000a79200000000080000ccf7ae7d55"]) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m53.161474064s ago: executing program 2 (id=2302): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xdc) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r5, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) write$ppp(r5, &(0x7f00000000c0)="e383ad0e4a", 0x5) read(r5, 0x0, 0x5d) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x12}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write(r6, &(0x7f0000000100)='\r', 0x1) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="6c3148b1be697b2b6d656d04"], 0xc) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x100}) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000001, 0x800000000, 0x3e, 0x0, 0x0, 0x2004cc, 0x5, 0x0, 0x0, 0xfffffffdfffffffc, 0xfffffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0xc0086}) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x9, 0x1, 0x3b}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 1m52.616772322s ago: executing program 2 (id=2305): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x2}], 0x6d, 0x0, &(0x7f0000000040)="fa00d7aa04c73639e5b273f0f54db7d6ac2a06fa6fd0b95a26f6cae269e8480eb0331c15838b00d921bccc6cf50c5117e4b31f4541c61eeec4da93632d84df7d8994d5f89303219c55e4ff2d942206823ef85c45450f6046d17cfdee32dc16ad4061344b1a4d17a242b95654ed"}) 1m51.743576015s ago: executing program 2 (id=2315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x165680, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2881, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x2004c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020000000, 0x6011, 0x1, 0x200000], 0x6000, 0x12002}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) read(r0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x511400, 0x0) ioctl$KVM_IRQ_LINE(r9, 0x4008ae61, &(0x7f00000004c0)={0x2, 0x66f04ba4}) unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r8, 0x8008330e, 0x0) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r10, 0xf504, 0x0) r11 = openat$cgroup_ro(r10, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r11, 0x82307201, &(0x7f0000000c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r12 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r12, 0x4004ae99, &(0x7f0000000040)) r13 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"]) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m36.706859375s ago: executing program 32 (id=2315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x165680, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2881, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x2004c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020000000, 0x6011, 0x1, 0x200000], 0x6000, 0x12002}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) read(r0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x511400, 0x0) ioctl$KVM_IRQ_LINE(r9, 0x4008ae61, &(0x7f00000004c0)={0x2, 0x66f04ba4}) unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r8, 0x8008330e, 0x0) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r10, 0xf504, 0x0) r11 = openat$cgroup_ro(r10, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r11, 0x82307201, &(0x7f0000000c00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r12 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r12, 0x4004ae99, &(0x7f0000000040)) r13 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"]) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 31.42408106s ago: executing program 0 (id=3280): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x5, 0x0, &(0x7f0000000500)="7da3644468"}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x50044) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000400)=0x4000) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000bc0)=""/4096, 0x1000, 0x1, 0x1a}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x15}, @fda={0x66646185, 0x8, 0x0, 0x1b}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 31.220053053s ago: executing program 0 (id=3281): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5d2f8911dfef22c2, 0x4000010, r0, 0x2000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r4 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000080)={0x80001, 0x0, [0x5, 0x5, 0x8, 0x3, 0x5, 0x81, 0x3, 0x10001]}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0x59, 0x2, 0x2}, @fd, @fda={0x66646185, 0x2, 0x1, 0x3f}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000050000e4004d564b04000000af"]) (async) r8 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000000180)={0x2020}, 0x2020) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) (async) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000080)={0x40002, 0x0, [0xb, 0x7, 0x4, 0x0, 0x7e8f, 0xfff, 0xa07, 0xdce7]}) write$binfmt_register(r8, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x5, 0x3a, '{&:@[', 0x3a, '', 0x3a, './file0'}, 0x2c) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000800500"]) (async) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000040)={0x43be, 0x0, 0x1}) 30.623723623s ago: executing program 0 (id=3285): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000009b00004000000000e431000000000000588bbdce1e0f5f"]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004c9, 0x7000, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x2], 0xffff1000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000000140)=0xffffffff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3f) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0000102, 0x0, 0x8000000000000002}]}) r11 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYRES16=r7]) ioctl$KVM_SET_NESTED_STATE(r15, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0xfffffffffffffe6d, {0xdddd0000, 0x100000}}, "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", "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"}) ioctl$KVM_GET_NESTED_STATE(r15, 0xc080aebe, &(0x7f0000000440)={{0x0, 0x0, 0x80}}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4040aea0, &(0x7f0000000180)=@x86={0x1, 0x5, 0xb, 0x0, 0x2, 0x6, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe2, 0x1, 0x29, 0x0, '\x00', 0x10, 0x6}) r16 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKDISCARD(r16, 0x1277, &(0x7f00000000c0)) 29.992324252s ago: executing program 0 (id=3291): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000280)={0x0, 0x0, {0xf, 0x8, 0x9, 0x7, 0x2, 0x2, 0x5, 0x66}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000380)={{0xffffffffffffffff, 0x3, 0x3, 0x1, 0xe}, 0x6, 0x9, 'id1\x00', 'timer1\x00', 0x0, 0x7, 0x0, 0x0, 0xd09}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000200)={{0x6, 0x1}, {0x3, 0xfffffff7}, 0x8000}) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0', 0x3a, [0x50, 0x4f, 0x46, 0x50, 0x43]}, 0x34) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f00000001c0)=[@request_death], 0x0, 0x0, 0x0}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001']) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000100)=@arm64) r6 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$RNDADDENTROPY(r6, 0x40085203, &(0x7f0000000480)=ANY=[@ANYRES64=r2]) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, &(0x7f00000002c0)={0xa, 0x0, 0xfd}) ioctl$KVM_X86_SET_MCE(r9, 0x4040ae9e, &(0x7f0000000000)={0xbc00000000000000}) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000140)={0x3, 0x0, {0x17, 0x28, 0x13, 0x8, 0x3, 0x8, 0x2, 0xac, 0x1}}) 29.933771833s ago: executing program 0 (id=3292): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000140)={0x5000, 0x8080000, 0x6c, 0x2, 0x2}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000000)={0x10000}) close(r4) read(r1, &(0x7f0000000000)=""/61, 0x3d) read(r1, &(0x7f0000000040)=""/106, 0x6a) 29.375776162s ago: executing program 0 (id=3301): openat$rnullb(0xffffffffffffff9c, 0x0, 0x200, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000), 0xa) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x1a35c3, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) (async) ioctl$BLKRRPART(r2, 0x125f, 0x0) read$FUSE(r1, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73797374656d5f75dd47d0b90b893a03ffdf"]) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73797374656d5f75dd47d0b90b893a03ffdf"]) ioctl$SIOCSIFHWADDR(r4, 0x40305839, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x10001, 0x12) (async) write$cgroup_int(r4, &(0x7f0000000080)=0x10001, 0x12) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x485, 0x0, 0xe26}]}) (async) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x485, 0x0, 0xe26}]}) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$vga_arbiter(r9, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) ioctl$BLKROSET(r8, 0x125d, &(0x7f0000000540)=0x10001) ioctl$BLKRRPART(r3, 0x125f, 0x0) (async) ioctl$BLKRRPART(r3, 0x125f, 0x0) 14.196943283s ago: executing program 33 (id=3301): openat$rnullb(0xffffffffffffff9c, 0x0, 0x200, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000), 0xa) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x1a35c3, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) (async) ioctl$BLKRRPART(r2, 0x125f, 0x0) read$FUSE(r1, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73797374656d5f75dd47d0b90b893a03ffdf"]) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73797374656d5f75dd47d0b90b893a03ffdf"]) ioctl$SIOCSIFHWADDR(r4, 0x40305839, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x10001, 0x12) (async) write$cgroup_int(r4, &(0x7f0000000080)=0x10001, 0x12) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x485, 0x0, 0xe26}]}) (async) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x485, 0x0, 0xe26}]}) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$vga_arbiter(r9, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) ioctl$BLKROSET(r8, 0x125d, &(0x7f0000000540)=0x10001) ioctl$BLKRRPART(r3, 0x125f, 0x0) (async) ioctl$BLKRRPART(r3, 0x125f, 0x0) 8.915807704s ago: executing program 4 (id=3509): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x8, r0, 'id0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x2, 0x3000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000380)=[@increfs_done], 0x0, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x400000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000040)=[@enter_looper, @free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x8, r0, 'id0\x00'}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x2, 0x3000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000380)=[@increfs_done], 0x0, 0x0, 0x0}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x400000000) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000040)=[@enter_looper, @free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) (async) 8.576041479s ago: executing program 4 (id=3519): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x294, 0x0, 0x7}]}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040)) mmap(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x3000001, 0x22052, r3, 0x2000) 8.43510282s ago: executing program 4 (id=3522): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x46000, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x4, 0x0) (async, rerun: 64) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async, rerun: 64) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) (async) read(r1, &(0x7f0000000040)=""/106, 0x6a) 8.220804414s ago: executing program 4 (id=3525): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x7) ioctl$TUNSETLINK(r2, 0x400454cd, 0x305) syz_clone(0x20180, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x14280, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xec) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) read(r3, &(0x7f0000000040)=""/106, 0x6a) 7.21379958s ago: executing program 4 (id=3532): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x1) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x802, 0x0) close(r2) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000140)=0x3) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000180)={0x8000, 0x8}) r3 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x2) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0xf8, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r3}, @clear_death={0x400c630f, 0x1}, @acquire_done, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r2}, @fd}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}, @acquire_done={0x40106309, 0x3}, @request_death, @enter_looper, @enter_looper, @free_buffer={0x40086303, r4}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x101}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/207, 0xcf, 0x0, 0x3b}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}, 0x40}], 0x8f, 0x0, &(0x7f0000000540)="a02b058b0a8c9379dd096422689650cbeace664bf4755f930cf4e50b545af7be4acc59a6f822e3718714ee9d4aa013cc6e223787a3abc562f102ee9c9239e34d11540db8fecd4b2c289c69e05c6e53aec2e26de7b574b55620f0cdeac438112fdc420630e86dfc5744718fd83d71367d4cc8e6739fcd46ecd0323b02f44024c3c0cae80f2582b0c4285c9aca83cc1f"}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000640)=0x3) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000680), 0xe1b0456ebf5f2b18, 0x0) ioctl$RTC_AIE_OFF(r5, 0x7002) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000006c0)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000700)={{0x0, 0x2, 0x5f2, 0x0, 0x5, 0x9, 0x10000, 0x400, 0xe4, 0x7fffffff, 0x1ff, 0x81, 0x5, 0x200, 0x2}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000780)={r6, 0x8}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001780)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x3, 0x1, 0xffffffffffffffff, 0x3, 0xeb, 0x1c5}, {0x7, 0x9, 0x7, 0x2, 0x5, 0x10001}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001a00), 0x1, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r7, 0x7709, 0x0) ioctl$ASHMEM_SET_NAME(r7, 0x41007701, &(0x7f0000001a40)='\x00') ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000001a80)={{0x2, 0x2, 0x3, 0x3, 0x3}, 0x5, 0x6, 'id1\x00', 'timer1\x00', 0x0, 0x897e, 0x20, 0x2, 0x4}) close(r5) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001e00)={0x60, 0x0, &(0x7f0000001c80)=[@register_looper, @acquire={0x40046305, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001bc0)={@ptr={0x70742a85, 0x0, &(0x7f0000001b80)=""/18, 0x12, 0x2, 0x8}, @fda={0x66646185, 0x6, 0x2, 0x1a}, @fda={0x66646185, 0x2, 0x0, 0x5}}, &(0x7f0000001c40)={0x0, 0x28, 0x48}}}, @request_death={0x400c630e, 0x1}], 0xe2, 0x0, &(0x7f0000001d00)="b25fedfcc48d0e9fa2b155bcfa4ae3754a19f876df3d4c23c62eda7cbdff613c87c0e07f5b4681b2b2cbb996b2256a6ff46d11041c707c3fd1ed141bd2b1dfc732f1140480b6964b39774418cf5cc8deca23785f3287f722597f72fb7bc5ea62d8e82e1bd945ddbdd529686eb4036feece993ecacc243ec808fb8383d05a70da9be17ef88a5bf9eed8be0d67cfe5f7583df4f8724635ac3f738fdf1687f8e49a41433cb00266edab2df615ce13bcde13215e891666b6bd3fff107f53d41a3fbe9995535391890ad0ad1e92b0c8dabff106860fd068e1783eae9406a886e42b489542"}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000001e40)={0x0, 0x6, 0x10, 0x0, 0x7fffffff}) ioctl$RTC_WIE_OFF(r1, 0x7010) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000001e80)=0x8) ioctl$RTC_AIE_OFF(r5, 0x7002) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000001ec0)={0x0, 0x8000, 0xffffff01, 0x7f, 0x79330efe}) 6.875284405s ago: executing program 4 (id=3539): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000002c0)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000180)=0x1) close(0x3) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r1, &(0x7f00000004c0)=""/92, 0x1001) 5.731645472s ago: executing program 3 (id=3554): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000280)={0x1, 0x2, 0x7f, 0x0, 0x6, "3d11ad18fa0ce2c290d7631fd6f18c0e4f93d3"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) close(0x3) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) ioctl$FICLONE(r3, 0x40049409, r4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x10}], 0x6b, 0x0, &(0x7f0000000280)="27340dbe79e8af432ff4fa2360c88df5a04d8e7eeb14f8d0fab09d900a6bb5bc0f07887e054cb7693ae1fb57bdf9173c6f2dd3f6284401f0a87fa2166027d3eda04b0809ab53399e60c5169690bcaa67b7123d2729933e63d78255ba0d073c4c19e166677001adbe306baa"}) 4.932145924s ago: executing program 3 (id=3562): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x0, 0x91, 0x0, 0x0, 0x5, 0x6, 0x9, 0x7f, 0x2, 0x0, 0x4, 0x9, 0x0, 0xfffffffd, 0x1, 0x1, 0x5, 0xd, 0x8, '\x00', 0xe, 0x7}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, 0x0) 4.802133206s ago: executing program 3 (id=3564): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_CPUID2(r1, 0xc008aec1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000280)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r7, 0xc008aeba, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x4, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x16a81, 0x0) syz_clone(0xf828a00, &(0x7f00000001c0)="a7021c4c0280a94091c20f3acdbe43ddef3f53f6a5845eed45e496d5768b9f42c357bb047a2fe7f2cf3635ddd681b7196a3463bfbfe4293d4c34a638840cf99f328e2544d0a2626eef09e2adf1d756b0ed2190a51b4d45948bce51c26f3d90fbb38d90cf9678b2484e49093a572151ca6e6aecf1dc5c9871075b81684c5fc76aef557c8385fc969da14e50f0c895029899e503db69c561fcb031acc21fa934e126fb07f003fad52addc453deb975d1d619dfb6c4d81a", 0xb6, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000440)="31e19a1c93578c2257ceb0099c3fac39a6218e46ea34c19fbb4e379e3209be51d0978f68137dbe6c286eff18d6aa98dbef558c34e82a4626f1036625b8fee159c3222cf0183d9168b01abecd667f079e5ccb0773e80f948b9dad7829948539463c79c83092cb2a8876a132d99145300b26b3b46136b15463a9089e876eeab7327daf901ee97a8950c081504a4df8158e64b88ba7dd727a26475bc49340bc7966b44cc64f7f53d4bb25d9abd485a2f3e5e931524e3de9db01e26e9820c3ebe5baacafa5b1a2404a345e6faa30fda781ece79f88c56c7dbddf70fbb15871b2f2df4d3517544a8a64aba615da98bae7b7c3f58e993b0e") ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xbf) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) 4.731993968s ago: executing program 3 (id=3565): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) syz_clone(0x22822400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) 4.57523661s ago: executing program 3 (id=3570): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x1000) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000150001c0"]) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) r6 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x400000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000040)=[@enter_looper, @free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) 4.181728656s ago: executing program 3 (id=3575): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000040)={0x0, r1, 'id1\x00'}) read$FUSE(r2, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000004140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r2, &(0x7f0000006180)={0xa0, 0x0, r3, {{0x2, 0x0, 0xfffffffffffffff8, 0x5, 0x5737, 0x2, {0x3, 0x9, 0x692, 0x100000000, 0x0, 0x710, 0x5, 0x3, 0x6, 0x6000, 0x45b215e5, r4, r6, 0x4, 0x7}}, {0x0, 0xd}}}, 0xa0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000006240)={0x0, 0x6, [0x2, 0x8000000000, 0xbe, 0x2, 0x8, 0x8]}) (async) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000006280)={'\x00', 0x1f, 0x3, 0x101}) (async, rerun: 32) unlinkat(r2, &(0x7f0000006300)='./file0\x00', 0x0) (async, rerun: 32) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000006380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)=""/60}) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) ioctl$FITHAW(r2, 0xc0045878) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000006400)) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000006440)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000006640)={{r2}, r7, 0x38, @unused=[0x7ff, 0x8, 0x7fffffff, 0x4], @subvolid=0xb03}) (async) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000007640)=0x5) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000007680)={0x30, 0x5, 0x0, {0x0, 0x3, 0x5dc96f54, 0xe72}}, 0x30) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r0, 0x4018aee3, &(0x7f0000007700)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f00000076c0)={0x0, 0x1}}) (async) write$FUSE_LSEEK(r2, &(0x7f0000007740)={0x18, 0x24, r5, {0x9}}, 0x18) (async) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000007780)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000007880)={{r2}, r9, 0x6, @inherit={0x88, &(0x7f00000077c0)={0x1, 0x8, 0x6, 0x2, {0x10, 0x6, 0xeee, 0x3, 0x1ff}, [0x6, 0x7, 0x800, 0x2, 0x6f, 0x4, 0xffffffff, 0x0]}}, @name="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"}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000008880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000008ac0)={0x1}) (async) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000008b00), 0x199a00, 0x0) ioctl$KDSKBLED(r10, 0x4b65, 0x8000000000000001) (async) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r10, 0xd000941e, &(0x7f0000008b40)={0x0, "6124816dee1595e2e4879d32a208dbb2"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000009b40)={{r1}, r8, 0x1c, @unused=[0x4, 0x1827e378, 0x3, 0xc000], @devid=r11}) 2.483714532s ago: executing program 1 (id=3592): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x585, 0x0, 0xff1}]}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c02, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x100) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x100010, r4, 0xa48a2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x100801f9, 0x1, 0xb94}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x9}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3}, {0x60, 0x20}, {0x6}]}) 2.270701885s ago: executing program 1 (id=3594): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='.\x00', 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x101200, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x439528b}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@x86={0x0, 0x40, 0x81, 0x0, 0xf43f, 0xb, 0x49, 0x7, 0x2, 0xfb, 0x3, 0xa4, 0x0, 0x4, 0x6bd, 0x2, 0x8, 0x1, 0x7, '\x00', 0x2, 0x5}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000680)={[0xe6, 0x55e, 0xffffffff, 0x4, 0xffffffffffffffff, 0x2000000000000004, 0x9, 0x100000000000009, 0x4, 0x80, 0x1, 0x794, 0x1, 0x18a1, 0xc976, 0x6], 0xeeee0000, 0x20200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x572, 0x0, 0x7}]}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/pids.max\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000006000/0x3000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000009000/0x3000)=nil, 0x0}, 0x68) write$cgroup_subtree(r8, &(0x7f0000000340)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x6) write$selinux_create(r1, &(0x7f0000000100)=@access={'system_u:object_r:crond_unit_file_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x1ffc00000000000}, 0x4c) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0xfffffffffffffffd) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000380)={{'\x00', 0x2}, {}, 0xc4, 0x0, 0x0, &(0x7f0000000180)='./cgroup/pids.max\x00', &(0x7f0000000280)='./cgroup/pids.max\x00', &(0x7f00000002c0)="a46d77fd41445da1104fa8bbc58e80bd02cf76ea591ee12a0c294c21ffa6e53a512413492df257993da532", 0x2b, 0x0, &(0x7f0000000580)={0x2, 0x193, {0x0, 0xc, 0xcb, "8366d71aa59d147afeba6ccaa6c9ca572c6c55f33d4f171c9c560263e327670dec294dc5f18ef2e30fb33151626dc6375f660858455a10a1e72a759f215abbc33fb670e80366a084fb9ac54900d0ae3af92934a89b4523ae642058146e6bcaa825857b9d2bc50fd103432f2bc672e612571280d30d285e835a1ee46bb9442607399bacdc1ec6b6a86377eefda10433cb0a427c5e71f0f2d9b1a5f02f4a32b18f84e46f2fc740e3eeb594cc771f85b46e71999194439080954b592acc3fa464c6204ac157b743c53915ea91", 0xbb, "c2a94ed157cca133210c5c0744802a7f81670c54f259d3b2bf2aee5caade1b541c412666fe56e4b32d634ad6aaf54bd48737261ed0cbce0d989f7768ec30ff9c5796138d2d07b379be5e220faf69b640ea3ab1feb70b85155d9b8acd5b1ffe7df1a6f25c08e49a2c8e2bddf978cb024158c946c55996256b08b96e0b5d53f0df619cb894d0b3797abae5ddabe0ca57474737c33dd76567f429da489ead5737b7f8fbff82ade021dde05329bcc0cb2508234c6e2de3e441c876680e"}, 0x5c, "ad823261251206a45d5f8d42012c90f812c18911b52aef7ad9d4060cf4748e283dac395de0c638f53fb17484a1dfc5d4d527e6ba0ad8efe14021e4ed399eae537b4ed7aa79539fd280a2932f098f10e19eb1e542897fabc8e72ce1e0"}, 0x1fb}) r10 = openat$cgroup_int(r9, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0) read$FUSE(r10, &(0x7f00000020c0)={0x2020}, 0x3a3) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x8) r12 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r12, &(0x7f0000000400)=ANY=[@ANYBLOB='target PCI:0:0:0.', @ANYRESOCT=r12, @ANYRESDEC=0x0], 0x13) ioctl$TCFLSH(r11, 0x80045438, 0x300000000000000) 1.491611347s ago: executing program 1 (id=3600): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)="854ce944910ddf0a109f62b42ebda1ce00b4197ebfe06f27f75bffc67e7afd9899a700db91843c2aa010f2d1b1e82a105b8f972eb15cd895c15f3e2fd3491d1eebd36cf6e6ec4ad328e2078c8e655a206e9a387d70ed85ab0087eeb46d989b6a8b3b5e6cfa396a79", 0x68}, 0x68) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x100010, r0, 0xa76d2000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x4102010, r0, 0x47174000) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000180)=').!\x00') r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000200)='/selinux/member\x00') mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000009, 0x10, r1, 0x14907000) close_range(r2, r1, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000240)) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1, 0x40010, r1, 0x5342a000) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f00000002c0)={'syz1\x00', {0x0, 0x6, 0x1000, 0x2}, 0x3, [0x9, 0x380, 0x9, 0x8, 0xffffffff, 0x9, 0x0, 0x1000000, 0x4a71, 0x7, 0x9, 0xffffffff, 0xa, 0xfc9, 0x4, 0x200, 0x5, 0x6, 0xa0, 0x7, 0x5, 0x6, 0x2, 0xbb, 0x7, 0x26, 0x9, 0x0, 0x3, 0x9, 0x100, 0x9c, 0x4, 0x1, 0x1ff, 0x7, 0x1ff, 0x0, 0x4, 0x0, 0x1ff, 0x4, 0x2, 0x7, 0x3, 0x1, 0x10, 0xa, 0x0, 0xaeed, 0x7, 0x9, 0x8000, 0xe, 0x7f, 0x6, 0x2, 0xb33, 0x2, 0xd, 0x80000000, 0x5, 0x9, 0x9bdf], [0x3, 0x4, 0x8, 0x8, 0x2, 0x3, 0x989b, 0x401, 0x8000, 0x0, 0x8, 0x3, 0x10001, 0x5, 0x1000, 0x0, 0x3ff, 0xf, 0x2, 0x9, 0xc, 0x2, 0x6, 0x7, 0x0, 0xb38e, 0x100, 0x9, 0xffffff81, 0x1, 0x68a3, 0xba, 0x5, 0x0, 0x40, 0xffffffff, 0x6, 0xfffffffe, 0xff, 0x0, 0x9, 0x2, 0x10000, 0x4, 0xfffffff9, 0x2, 0x200, 0x800, 0x7, 0x5, 0x7, 0xd, 0x0, 0xfffffffd, 0x8, 0x7, 0x4, 0x5, 0x7, 0x1, 0x7793e567, 0xe7f5, 0xfffffffa, 0xec8], [0x6, 0x400, 0x1, 0x0, 0x3, 0x200, 0x6, 0x8000, 0x6345, 0x1, 0x6, 0x5, 0xf3, 0xb18, 0x9, 0xd, 0x7, 0x8, 0x6, 0x5, 0x6, 0xed73, 0xfffffeff, 0x2, 0xe, 0x81, 0xffffffff, 0x8, 0xa, 0x3, 0xe, 0x7, 0x7, 0x5, 0x60cb, 0x6, 0x8, 0x8, 0x8, 0x8a, 0x5, 0x8, 0x8b7, 0x7, 0x1, 0x9, 0x7, 0x61, 0x4000, 0x0, 0x7, 0x0, 0x5, 0x7, 0xff, 0x10001, 0x800, 0x6, 0x4, 0xb4, 0xe, 0x1, 0x6, 0x8], [0x9, 0x80000001, 0x8, 0xa986, 0x6, 0x2, 0x200, 0x7, 0x5, 0x4, 0x4, 0xafcf, 0x5, 0xfffffff9, 0x8, 0x1, 0x6, 0x2e3c, 0x5, 0x4fbb7a97, 0x0, 0x6, 0x7fff, 0x40, 0x80000001, 0x1, 0x531, 0x1, 0x770b, 0xa4, 0xc, 0xff, 0x9a4, 0x28, 0x3, 0x7, 0x4, 0x379, 0x926, 0x3, 0x6, 0x6, 0x6, 0xfc, 0x4, 0x1, 0x6, 0x6, 0x800, 0x4, 0x7fffffff, 0x8, 0x0, 0x7, 0x9, 0x0, 0x6, 0x5, 0x6671, 0xff, 0x3, 0x8, 0xf, 0x3]}, 0x45c) write$selinux_load(r3, &(0x7f0000000740)={0xf97cff8c, 0x8, 'SE Linux', "42dcaa88108015f7a410a95184d428e536dab231769f67a0b1b4b6b912a54f1c92e6c9cf230e93f3427d0ff0fc24b97cc290e5a94512ba61d1d80fb24a6da89f305f6bcfa35698dfb14d29d441834e9acb1aacc1f0e6c16612db54e2ea695ca0d9712d2a16fac5c3795a4819a62535844b5b27c7660c8b59c70c7bad18a02e95488a93f6a1b0d09ed88b3390fbedfc722d2b1ad762c4cb3a1efa2ab644b6b92ec5c22126bfb9096932aa0b739f86b5a2d04a081fed3a7c51d3c8c1847898f0bf8a65f2da1be64eab30c22202e343a90a843cd45dfcb52d3e8ce6369d47f74a571d016d971de9"}, 0xf6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x2) close_range(r4, r0, 0x2) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000880)=0x8000) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) write$selinux_access(r3, &(0x7f0000000900)={'system_u:object_r:clock_device_t:s0', 0x20, 'unconfined', 0x20, 0x8}, 0x44) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write(r3, &(0x7f0000000980)="8308ad8729670eccf4b988f7949bab48192c20354f6f9f5d3c03e2553230dc571c893e8d1d736ef5e25441b764b6ca41f7d6ffb0826104d13e678c85e89f7112853459754d69649507113e0c57dfe1a3f9bf", 0x52) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000a00)={0x2, 0x40}) read$FUSE(r3, &(0x7f0000000a40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002a80)={0x50, 0x0, r6, {0x7, 0x2b, 0x8, 0x800, 0x628, 0xffff, 0x37, 0x1000, 0x0, 0x0, 0x8, 0x5}}, 0x50) r7 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r7) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000002b00)={{0x4, 0xbff}, {0x5, 0x8}, 0x35}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000002b40)={0xffff, 0x7, 0x4, 0x0, 0x0, [{{r0}, 0x4}, {{r2}, 0x7}, {{r5}, 0x18f4}, {{r3}, 0x4800000000000000}]}) 1.371925489s ago: executing program 1 (id=3602): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x16) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001000000020000008000d800f9ffffffaa0e000000000000"]) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000700)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x8400ae8e, &(0x7f0000000140)=@x86={0xc7, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0xff, 0x0, 0xc, 0xfc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x80d7}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x6) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x3f) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0011022, 0x0, 0x6}]}) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000380)={"f9bef8d1aaeadafa287efdb9450ae3e2d260489591c42ab93a0c7bca18e9a19fa8e6cd61e9f62f91123f1311f81f85b4044554cb6e3ca1b6d1fc011bd71bdda82f37ccfa5b87dd5dcd311dbbb67f240dc02c53b7eabf3651660ce801e3878538da8bb24e1dbc480dae36207bf6b7b946c7a8ec08468f9a75ec797b8c11807655272833a7c70ccfc9a8259e7a148eca4d16b6ff519973a20b65f91a7261cdd2440a5a0566d843fa334b0280f0aacc3b417322b9b56098dd842c44139da4bd1e2212a40ba043bd72b995b172b26b71d434e9f3bf74b4ed480b264e0e9d6f628732534db36bfb92ee6419fb244db44abf0cd9357755ce9c4c9a584e5eb89ffd10c8a6c3c6115265f25f798570751917cd7cfc2ca71729e268c3b30c05b3dfdb18cbbfd3036a889f5fefb0f9d56bf970bdbf2524f8e435b721c809e73a5fdafbf1594088ad1974908bf5fc752d564c1a4989a7d1e59564567d9b437442c5c1cfec93526395d18b1ecb18dedd713ced403a00a2cd27b2dc857808287ea88157b3c19075eb33f7cc60a6161a88ad37fb04d0ce0fda24176406391a5ac521299143bdf59a474a17272105e55e9870cec2942a6705993e821e54441c877a64450e739b1321ad17e1ed552e65654bbfcc8ebd1d64fc4e888609a90410f780fe5031c27737f2de05a7ddf00129eb746a2e990438d9bf6a3211779707d615d79111b3fe71c26433482306ce7563c11cdf6f8da283ae147311465af80ba5350e6d65438cd5a20ec155d78227e5336d504f8f1145f4b942180f7ba6e5c9a070d4e31289d4845229780e53713090e782a75b32729c10da28c1f2702dad57a37416fc138040064347a0a290803f51a619402d88d0a4b2bef39bf92696b6d7052459a78a258edfe2e66f2e10a80b168b483c90a1a1dd67c6d6c9b7a2336d1678131ca38552d9acff05dcd57f9f4164064b7781d8a8b5507e21edfe35d65d726bf24799535648cd04f3b7e85c3f6762f353a8f65afdc7ba63bc0eb65d7188cb1adee1d8d14c0413458d2ff65093d972ac3696fa12defc0f8dedf2309e1b80fc672205e6ccfc6b494233c4d00b5471cb52d896c73cddee40e5e51ee8a9bbe453a1a7d5b9832cacc5965220145504ccb2a157a7c1d9d718c0bf96cd350ac5ca330c827bedbff299774707f5840a0d954ae39c9421975d48e05d87a1ceddefbecae936e15ffb308364b69eefd345d6200cd128e48c162a4ebd026fefb7cc73e80204b21ff30d63e8707292f60682c6f6a587fff9c5a0fae24e0406df5363c7c9d31f72829b6a9d9237a84e83e22c33bf6313ee4072f09f9c6254d0eb7239d51cdda77b8e3d42a89449a3e1b6be8953a27651486383879490486fd11b6ac4e1b86f8a71fc294e0ebf572f4ef00582be189ee5a38c18d4d51cd3221fb1475a56cdf3cc7258bf8c559bf1a9"}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x10000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xff}, {0x0, 0x9, 0x80, '\x00', 0x1}, {0xfc, 0x12, 0x4, '\x00', 0xb9}, {0x11, 0xb}, {}, {0x0, 0x0, 0x4, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {}, {0x0, 0x8f, 0xf7, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x2, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x0, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0x48, 0x0, 0xd}, {0x0, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x2, 0x9}, {0x80, 0xff, 0x3, '\x00', 0x7}]}}) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000c40)) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x4052, r11, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000b00)=ANY=[@ANYBLOB="07000000000000000a000000dd1400000500000001000100000000080000000008000000000000000000000000000000000000800000000004000000010100000900000001010000000001000000000000000000000000000d000000010100000000000001040000080000000300000003000000000000000000000000000000000000400900000003000000400000006a100000030000001888000000000000000000000000000001000080000000000300000009000000ffff0000a0000000ffffff7f000000000000000000000000060000000a0000000000000006000000030000000300000081000000000000000000000000000000020000000500000006000000f30000000200000006000000ffffff7f000900"/288]) 752.138828ms ago: executing program 5 (id=3605): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x3}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000200)={0x2, 0xd3e, 0x389, 0x0, 0xe}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async) mmap(&(0x7f00001fb000/0x2000)=nil, 0x2000, 0x1000009, 0x4010, 0x0, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) 705.021468ms ago: executing program 5 (id=3606): ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 533.806601ms ago: executing program 5 (id=3607): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8cff7cf908"], 0x20) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2000, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001000), 0x8402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x45809000) read(r0, &(0x7f00000000c0)=""/99, 0x63) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000afb000/0x2000)=nil, 0x2000, 0x2000004, 0x10010, r2, 0x5e4e2000) 336.110364ms ago: executing program 5 (id=3608): prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000), 0xa) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) read$FUSE(r1, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$vga_arbiter(r5, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000540)=0x10001) ioctl$BLKRRPART(r3, 0x125f, 0x0) 335.722024ms ago: executing program 1 (id=3609): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000500)=[@acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) 238.565436ms ago: executing program 5 (id=3610): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000300)=@x86={0x3, 0x8, 0x2, 0x0, 0x0, 0x2, 0x2, 0xfc, 0xfd, 0x12, 0xfe, 0x0, 0x0, 0x4, 0xa, 0x0, 0x0, 0x0, 0x9, '\x00', 0x4, 0x8000000000002}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x606c) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x3, 0xffffff32) mkdirat(r4, &(0x7f0000000080)='./file0\x00', 0xf8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000000)={{0x2, 0x7, 0x6, 0x3, 0xffffffa3}}) 110.259438ms ago: executing program 5 (id=3611): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xa4b, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) close(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, &(0x7f00000001c0)}) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)=ANY=[]) 0s ago: executing program 1 (id=3612): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) close(0x3) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000340)='freezer.state\x00', 0x0, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x606c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x10}], 0x6b, 0x0, &(0x7f0000000280)="27340dbe79e8af432ff4fa2360c88df5a04d8e7eeb14f8d0fab09d900a6bb5bc0f07887e054cb7693ae1fb57bdf9173c6f2dd3f6284401f0a87fa2166027d3eda04b0809ab53399e60c5169690bcaa67b7123d2729933e63d78255ba0d073c4c19e166677001adbe306baa"}) kernel console output (not intermixed with test programs): allmulticast mode [ 171.423580][ T8410] bridge_slave_1: entered promiscuous mode [ 172.490515][ T8527] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 172.490543][ T8527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:108 [ 172.532386][ T36] kauditd_printk_skb: 861 callbacks suppressed [ 172.532405][ T36] audit: type=1400 audit(1750337960.940:32900): avc: denied { ioctl } for pid=8529 comm="syz.1.2531" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 172.576178][ T36] audit: type=1400 audit(1750337960.980:32901): avc: denied { set_context_mgr } for pid=8529 comm="syz.1.2531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 172.598826][ T36] audit: type=1400 audit(1750337960.980:32902): avc: denied { read } for pid=8521 comm="syz.3.2528" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 172.621982][ T36] audit: type=1400 audit(1750337960.980:32903): avc: denied { ioctl } for pid=8529 comm="syz.1.2531" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 172.649413][ T36] audit: type=1400 audit(1750337960.980:32904): avc: denied { read open } for pid=8521 comm="syz.3.2528" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 172.690900][ T36] audit: type=1400 audit(1750337960.980:32905): avc: denied { ioctl } for pid=8521 comm="syz.3.2528" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 172.723910][ T36] audit: type=1400 audit(1750337961.030:32906): avc: denied { map } for pid=8529 comm="syz.1.2531" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 172.760358][ T36] audit: type=1400 audit(1750337961.030:32907): avc: denied { read } for pid=8529 comm="syz.1.2531" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 172.785229][ T36] audit: type=1400 audit(1750337961.030:32908): avc: denied { read } for pid=8529 comm="syz.1.2531" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 172.808804][ T36] audit: type=1400 audit(1750337961.030:32909): avc: denied { read open } for pid=8529 comm="syz.1.2531" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 172.938789][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.945919][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.969429][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.976597][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.406962][ T8410] veth0_vlan: entered promiscuous mode [ 173.450281][ T8410] veth1_macvtap: entered promiscuous mode [ 173.754345][ T8561] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.166725][ T8574] SELinux: security_context_str_to_sid () failed with errno=-22 [ 174.250120][ T8582] input: syz1 as /devices/virtual/input/input189 [ 174.510794][ T8587] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 174.691514][ T13] bridge_slave_1: left allmulticast mode [ 174.697332][ T13] bridge_slave_1: left promiscuous mode [ 174.703024][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.771336][ T13] bridge_slave_0: left allmulticast mode [ 174.777440][ T13] bridge_slave_0: left promiscuous mode [ 174.783123][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.298856][ T8626] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 175.495772][ T13] veth1_macvtap: left promiscuous mode [ 175.501609][ T13] veth0_vlan: left promiscuous mode [ 175.627450][ T8639] rust_binder: Write failure EINVAL in pid:130 [ 175.666215][ T8642] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 175.673286][ T8642] rust_binder: Error while translating object. [ 175.696771][ T8642] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 175.706842][ T8642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:99 [ 175.787508][ T8580] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.804709][ T8580] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.811892][ T8580] bridge_slave_0: entered allmulticast mode [ 175.825224][ T8580] bridge_slave_0: entered promiscuous mode [ 175.834416][ T8580] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.841824][ T8580] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.851038][ T8580] bridge_slave_1: entered allmulticast mode [ 175.857580][ T8580] bridge_slave_1: entered promiscuous mode [ 176.219293][ T8658] binder: Bad value for 'stats' [ 177.159005][ T8689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:151 [ 177.159005][ T8688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:151 [ 177.170195][ T8689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 177.371531][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.385237][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.399902][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.407013][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.471361][ T8580] veth0_vlan: entered promiscuous mode [ 177.510552][ T8580] veth1_macvtap: entered promiscuous mode [ 177.639499][ T36] kauditd_printk_skb: 594 callbacks suppressed [ 177.639515][ T36] audit: type=1400 audit(1750337966.040:33504): avc: denied { read write } for pid=8222 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.671852][ T36] audit: type=1400 audit(1750337966.040:33505): avc: denied { read write open } for pid=8222 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.703166][ T36] audit: type=1400 audit(1750337966.040:33506): avc: denied { ioctl } for pid=8222 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.755377][ T36] audit: type=1400 audit(1750337966.100:33507): avc: denied { read } for pid=8697 comm="syz.4.2575" name="binder0" dev="binder" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 177.800464][ T36] audit: type=1400 audit(1750337966.100:33508): avc: denied { read open } for pid=8697 comm="syz.4.2575" path="/dev/binderfs/binder0" dev="binder" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 177.826771][ T36] audit: type=1400 audit(1750337966.110:33509): avc: denied { ioctl } for pid=8697 comm="syz.4.2575" path="/dev/binderfs/binder0" dev="binder" ino=61 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 177.852933][ T36] audit: type=1400 audit(1750337966.110:33510): avc: denied { set_context_mgr } for pid=8697 comm="syz.4.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 177.874021][ T36] audit: type=1400 audit(1750337966.130:33511): avc: denied { read } for pid=8697 comm="syz.4.2575" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 177.879394][ T8700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:56 [ 177.901662][ T8701] rust_binder: Failed to allocate buffer. len:152, is_oneway:true [ 177.915700][ T8701] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 177.926255][ T36] audit: type=1400 audit(1750337966.140:33512): avc: denied { read open } for pid=8697 comm="syz.4.2575" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 177.960649][ T36] audit: type=1400 audit(1750337966.140:33513): avc: denied { ioctl } for pid=8697 comm="syz.4.2575" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 178.040870][ T8707] input: syz1 as /devices/virtual/input/input190 [ 178.375637][ T8730] random: crng reseeded on system resumption [ 178.946649][ T8751] binder: Unknown parameter 'seÖiVÞ2A' [ 179.265159][ T8761] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 179.345175][ T8776] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 179.345202][ T8776] rust_binder: Error while translating object. [ 179.356489][ T8776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.363524][ T8776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 179.378359][ T8767] input: syz0 as /devices/virtual/input/input191 [ 179.611239][ T8788] binder: Bad value for 'defcontext' [ 179.945418][ T8810] rust_binder: Write failure EINVAL in pid:29 [ 179.949793][ T8810] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.958884][ T8810] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 180.073319][ T8813] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.081527][ T8812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.419514][ T8828] input: syz1 as /devices/virtual/input/input192 [ 180.543873][ T8828] SELinux: failed to load policy [ 180.614464][ T8828] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.621179][ T8828] rust_binder: inc_ref_done called when no active inc_refs [ 180.627763][ T8828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42 [ 180.639294][ T8830] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 180.649031][ T8830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:138 [ 180.812913][ T8837] can0: slcan on ttyS3. [ 180.935503][ T8845] binder: Unknown parameter '00000000000000000003' [ 181.041918][ T8840] can0 (unregistered): slcan off ttyS3. [ 181.200440][ T8851] input: syz1 as /devices/virtual/input/input193 [ 181.288196][ T8861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145 [ 181.422242][ T8875] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 181.472942][ T8877] binder: Unknown parameter 'co€˜¬Y8ø"ÿ_u' [ 181.830566][ T8891] SELinux: failed to load policy [ 182.140058][ T8905] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.301330][ T8909] binder: Unknown parameter '' [ 182.457604][ T8919] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 182.457639][ T8919] rust_binder: Error in use_page_slow: EBUSY [ 182.468639][ T8919] rust_binder: use_range failure EBUSY [ 182.486969][ T8919] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 182.509285][ T8919] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 182.531067][ T8919] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 182.550135][ T8919] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:192 [ 182.574794][ T8926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.594344][ T8925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161 [ 182.609901][ T8926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161 [ 182.671193][ T36] kauditd_printk_skb: 1106 callbacks suppressed [ 182.671210][ T36] audit: type=1400 audit(1750337971.080:34620): avc: denied { ioctl } for pid=8927 comm="syz.3.2637" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 182.714397][ T36] audit: type=1400 audit(1750337971.120:34621): avc: denied { ioctl } for pid=8927 comm="syz.3.2637" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 182.749021][ T36] audit: type=1400 audit(1750337971.150:34622): avc: denied { read write } for pid=8222 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.801108][ T36] audit: type=1400 audit(1750337971.150:34623): avc: denied { read write open } for pid=8222 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.849218][ T36] audit: type=1400 audit(1750337971.150:34624): avc: denied { ioctl } for pid=8222 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.875906][ T36] audit: type=1400 audit(1750337971.150:34625): avc: denied { read } for pid=8936 comm="syz.4.2639" name="binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 182.921287][ T36] audit: type=1400 audit(1750337971.150:34626): avc: denied { read open } for pid=8936 comm="syz.4.2639" path="/dev/binderfs/binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 182.979642][ T36] audit: type=1400 audit(1750337971.150:34627): avc: denied { ioctl } for pid=8936 comm="syz.4.2639" path="/dev/binderfs/binder0" dev="binder" ino=25 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 183.008067][ T36] audit: type=1400 audit(1750337971.150:34628): avc: denied { set_context_mgr } for pid=8936 comm="syz.4.2639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 183.034063][ T36] audit: type=1400 audit(1750337971.150:34629): avc: denied { map } for pid=8936 comm="syz.4.2639" path="/dev/binderfs/binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 183.066900][ T8949] binder: Unknown parameter 'dont_hash' [ 183.156724][ T8951] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 183.352825][ T8956] rust_binder: Write failure EINVAL in pid:174 [ 183.623166][ T8971] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 183.892229][ T8980] rust_binder: Write failure EINVAL in pid:179 [ 183.981410][ T8988] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 184.001776][ T8988] rust_binder: Read failure Err(EFAULT) in pid:184 [ 184.010877][ T8990] cgroup: fork rejected by pids controller in /syz0 [ 184.742388][ T455] bridge_slave_1: left allmulticast mode [ 184.748071][ T455] bridge_slave_1: left promiscuous mode [ 184.757943][ T455] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.801418][ T455] bridge_slave_0: left allmulticast mode [ 184.810979][ T455] bridge_slave_0: left promiscuous mode [ 184.816666][ T455] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.817110][ T9021] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 184.824010][ T9021] rust_binder: Read failure Err(EFAULT) in pid:210 [ 184.861858][ T9023] SELinux: unknown common r [ 184.874213][ T9023] SELinux: failed to load policy [ 184.925100][ T9027] rust_binder: Write failure EINVAL in pid:85 [ 185.058833][ T9034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.213071][ T9038] rust_binder: Error while translating object. [ 185.219582][ T9038] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 185.225780][ T9038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:219 [ 185.601434][ T455] veth1_macvtap: left promiscuous mode [ 185.616053][ T455] veth0_vlan: left promiscuous mode [ 185.651785][ T9056] rust_binder: Write failure EINVAL in pid:229 [ 185.667381][ T9060] binder: Unknown parameter 'dont_measure' [ 185.681187][ T9060] binder: Unknown parameter 'dont_measure' [ 185.840445][ T9068] SELinux: failed to load policy [ 185.848031][ T9069] SELinux: failed to load policy [ 185.999686][ T9078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:190 [ 186.068015][ T9085] binder: Unknown parameter 'sŽž rÕ' [ 186.103365][ T9011] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.111092][ T9011] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.122877][ T9011] bridge_slave_0: entered allmulticast mode [ 186.129307][ T9011] bridge_slave_0: entered promiscuous mode [ 186.152750][ T9011] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.159825][ T9011] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.181003][ T9011] bridge_slave_1: entered allmulticast mode [ 186.187125][ T9091] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.187402][ T9011] bridge_slave_1: entered promiscuous mode [ 186.211067][ T9091] kvm_intel: kvm [9089]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 186.551566][ T9108] SELinux: security_context_str_to_sid () failed with errno=-22 [ 186.804596][ T9121] binder: Unknown parameter 'defcontext01777777777777777777777' [ 186.896388][ T9115] binder: Unknown parameter 'uid<00000000000000060929' [ 187.036554][ T9134] rust_binder: Write failure EINVAL in pid:126 [ 187.543466][ T9160] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000000' [ 187.584424][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.591622][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.626094][ T455] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.633196][ T455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.686602][ T36] kauditd_printk_skb: 717 callbacks suppressed [ 187.686622][ T36] audit: type=1400 audit(1750337976.090:35347): avc: denied { sys_module } for pid=9011 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 187.724654][ T36] audit: type=1400 audit(1750337976.090:35348): avc: denied { sys_module } for pid=9011 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 187.758763][ T36] audit: type=1400 audit(1750337976.090:35349): avc: denied { sys_module } for pid=9011 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 187.816841][ T36] audit: type=1400 audit(1750337976.100:35350): avc: denied { read } for pid=9169 comm="syz.1.2712" name="binder0" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 187.819940][ T9011] veth0_vlan: entered promiscuous mode [ 187.845348][ T36] audit: type=1400 audit(1750337976.100:35351): avc: denied { read open } for pid=9169 comm="syz.1.2712" path="/dev/binderfs/binder0" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 187.948394][ T36] audit: type=1400 audit(1750337976.100:35352): avc: denied { read } for pid=9169 comm="syz.1.2712" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 187.952200][ T9011] veth1_macvtap: entered promiscuous mode [ 188.002841][ T9011] audit: audit_backlog=65 > audit_backlog_limit=64 [ 188.009491][ T9011] audit: audit_lost=90 audit_rate_limit=0 audit_backlog_limit=64 [ 188.017267][ T9011] audit: backlog limit exceeded [ 188.023621][ T9011] audit: audit_backlog=65 > audit_backlog_limit=64 [ 188.363592][ T9192] rust_binder: Error while translating object. [ 188.363630][ T9192] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 188.369888][ T9192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 189.247509][ T9231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:9 [ 189.325090][ T9229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 189.337543][ T9229] rust_binder: Write failure EINVAL in pid:162 [ 189.528069][ T9245] rust_binder: Read failure Err(EAGAIN) in pid:292 [ 189.536394][ T9247] rust_binder: Read failure Err(EAGAIN) in pid:292 [ 189.921664][ T9275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:165 [ 190.023735][ T9285] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 190.420816][ T9304] input: syz0 as /devices/virtual/input/input197 [ 190.796764][ T9310] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 190.877035][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.877616][ T9317] rust_binder: Error in use_page_slow: ESRCH [ 190.877679][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.884335][ T9317] rust_binder: use_range failure ESRCH [ 190.884361][ T9317] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 190.892353][ T9315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:321 [ 190.897510][ T9317] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 190.905321][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.912684][ T9317] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:321 [ 190.920233][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.945063][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.954712][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.961848][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.968734][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.975909][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.989216][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.996250][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.003141][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.010076][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.016910][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.023795][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.030605][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.037438][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.051264][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.060035][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.064582][ T9321] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 191.068233][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.083692][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.092084][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.111333][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.121333][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.128392][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.166529][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.175126][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.182554][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.189334][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.196188][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.218536][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.225425][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.248623][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.261716][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.269727][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.278809][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.287237][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.299353][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.308788][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.323063][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.330697][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.338939][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.346718][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.362017][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.368749][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.389210][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.403573][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.412540][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.419335][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.428341][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.435940][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.446934][ T9339] kvm: kvm [9338]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000004) [ 191.469111][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.469426][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.478553][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.487044][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.496531][ T9339] binder: Unknown parameter 'Hont_hash' [ 191.510298][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.510616][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.519747][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.528085][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.541323][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.549371][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.568381][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.577650][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.585285][ T9316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.642202][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 191.785476][ T9364] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.787155][ T9364] rust_binder: Write failure EFAULT in pid:185 [ 192.017426][ T9379] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.330316][ T9386] SELinux: security_context_str_to_sid () failed with errno=-22 [ 192.365739][ T9390] binder: Unknown parameter '00000000000000000000003' [ 192.516906][ T45] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz1 [ 192.696405][ T36] kauditd_printk_skb: 987 callbacks suppressed [ 192.696424][ T36] audit: type=1400 audit(1750337981.100:36338): avc: denied { read } for pid=9397 comm="syz.3.2781" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 192.739768][ T36] audit: type=1400 audit(1750337981.100:36339): avc: denied { read open } for pid=9397 comm="syz.3.2781" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 192.766359][ T36] audit: type=1400 audit(1750337981.100:36340): avc: denied { ioctl } for pid=9397 comm="syz.3.2781" path="/dev/binderfs/binder1" dev="binder" ino=17 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 192.823608][ T36] audit: type=1400 audit(1750337981.180:36341): avc: denied { read write } for pid=8222 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.850986][ T36] audit: type=1400 audit(1750337981.180:36342): avc: denied { read write open } for pid=8222 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.876667][ T36] audit: type=1400 audit(1750337981.180:36343): avc: denied { ioctl } for pid=8222 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.905622][ T36] audit: type=1400 audit(1750337981.250:36344): avc: denied { read } for pid=9405 comm="syz.4.2784" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 192.929296][ T36] audit: type=1400 audit(1750337981.250:36345): avc: denied { read open } for pid=9405 comm="syz.4.2784" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 192.952956][ T36] audit: type=1400 audit(1750337981.250:36346): avc: denied { ioctl } for pid=9405 comm="syz.4.2784" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 193.088621][ T36] audit: type=1400 audit(1750337981.490:36347): avc: denied { read } for pid=9408 comm="syz.0.2785" name="binder0" dev="binder" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 193.133041][ T9413] binder: Unknown parameter 'ÿ' [ 193.243459][ T9415] rust_binder: Write failure EINVAL in pid:190 [ 193.608029][ T9431] random: crng reseeded on system resumption [ 193.711295][ T354] Bluetooth: hci0: command 0x1003 tx timeout [ 193.717409][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 193.877191][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.880444][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.912108][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.912420][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.926487][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.926802][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.944826][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.945149][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.978633][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.978746][ T9451] rust_binder: Error in use_page_slow: ESRCH [ 193.978915][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.995644][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.998043][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.003366][ T9451] rust_binder: use_range failure ESRCH [ 194.007615][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.023265][ T9453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.023664][ T9453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.030501][ T9453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.042336][ T9451] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 194.046644][ T9451] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 194.054247][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.072136][ T9456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:336 [ 194.072850][ T9451] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:81 [ 194.078658][ T9453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.095124][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.115155][ T9453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.115459][ T9453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.132339][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.133012][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.142401][ T9453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.149189][ T9453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.164030][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.164328][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.178631][ T9453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.178939][ T9453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.201290][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.241343][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.241662][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.273590][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.273938][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.274736][ T9465] binder: Unknown parameter '>BA' [ 194.296508][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.300444][ T9456] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 194.303551][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.341375][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.341669][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.355609][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.367649][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.446065][ T9475] input: syz1 as /devices/virtual/input/input198 [ 194.461349][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.461664][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.479000][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.485690][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.494693][ T9473] binder: Bad value for 'defcontext' [ 194.551296][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.551605][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.567522][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.568257][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.605979][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.606300][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.630747][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.631964][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.638711][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.646467][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.667903][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.681019][ T9449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.999214][ T9498] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 195.130430][ T9496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.158865][ T9496] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 195.172772][ T9496] rust_binder: Write failure EINVAL in pid:90 [ 195.341463][ T9519] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.404553][ T9520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:220 [ 195.508507][ T9527] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.591687][ T9528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:95 [ 196.350872][ T9542] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 196.359975][ T9542] rust_binder: Error while translating object. [ 196.368966][ T9542] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 196.376432][ T9542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:353 [ 196.524701][ T9548] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 196.578378][ T9555] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.586671][ T9555] rust_binder: Error in use_page_slow: ESRCH [ 196.593464][ T9555] rust_binder: use_range failure ESRCH [ 196.599526][ T9555] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 196.616107][ T9555] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 196.624672][ T9555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:100 [ 196.771425][ T9562] binder: Bad value for 'max' [ 196.847490][ T9566] binder: Unknown parameter 'Âq' [ 197.167176][ T9580] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.167882][ T9581] rust_binder: inc_ref_done called when no active inc_refs [ 197.174553][ T9581] rust_binder: inc_ref_done called when no active inc_refs [ 197.209566][ T9577] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 197.491096][ T9597] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 197.541553][ T9609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 197.541581][ T9609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:361 [ 197.790370][ T36] kauditd_printk_skb: 813 callbacks suppressed [ 197.790387][ T36] audit: type=1400 audit(1750337986.190:37161): avc: denied { read } for pid=9618 comm="syz.1.2848" name="binder1" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 197.828860][ T36] audit: type=1400 audit(1750337986.190:37162): avc: denied { read open } for pid=9618 comm="syz.1.2848" path="/dev/binderfs/binder1" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 197.835423][ T9619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 197.853489][ T9619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:363 [ 197.854107][ T36] audit: type=1400 audit(1750337986.240:37163): avc: denied { read } for pid=9618 comm="syz.1.2848" name="binder1" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 197.923606][ T36] audit: type=1400 audit(1750337986.240:37164): avc: denied { read open } for pid=9618 comm="syz.1.2848" path="/dev/binderfs/binder1" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 197.949229][ T36] audit: type=1400 audit(1750337986.240:37165): avc: denied { ioctl } for pid=9618 comm="syz.1.2848" path="/dev/binderfs/binder1" dev="binder" ino=29 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 197.991179][ T36] audit: type=1400 audit(1750337986.240:37166): avc: denied { set_context_mgr } for pid=9618 comm="syz.1.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 198.013254][ T36] audit: type=1400 audit(1750337986.240:37167): avc: denied { map } for pid=9618 comm="syz.1.2848" path="/dev/binderfs/binder1" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 198.049357][ T36] audit: type=1400 audit(1750337986.240:37168): avc: denied { read } for pid=9618 comm="syz.1.2848" path="/dev/binderfs/binder1" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 198.101482][ T36] audit: type=1400 audit(1750337986.240:37169): avc: denied { ioctl } for pid=9618 comm="syz.1.2848" path="/dev/binderfs/binder1" dev="binder" ino=29 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 198.159496][ T36] audit: type=1400 audit(1750337986.240:37170): avc: denied { call } for pid=9618 comm="syz.1.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 198.190683][ T9637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.192942][ T9637] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 92) [ 198.199631][ T9637] rust_binder: Error while translating object. [ 198.211516][ T9637] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 198.217707][ T9637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129 [ 198.337565][ T9645] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.364378][ T9651] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.395460][ T9652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:367 [ 198.754360][ T9674] binfmt_misc: register: failed to install interpreter file ./bus/file0 [ 198.825714][ T9678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:260 [ 198.869541][ T9678] rust_binder: Read failure Err(EFAULT) in pid:260 [ 198.989661][ T9689] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 199.474408][ T9712] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.476900][ T9712] rust_binder: Error while translating object. [ 199.483568][ T9712] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 199.489852][ T9712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:268 [ 199.648175][ T9723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:366 [ 199.658710][ T9723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:366 [ 199.742210][ T9725] rust_binder: Write failure EFAULT in pid:276 [ 199.974142][ T9732] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 199.980398][ T9732] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:278 [ 200.271431][ T9742] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 200.280839][ T9744] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 200.285198][ T9742] input: syz1 as /devices/virtual/input/input201 [ 200.325552][ T9742] input: syz0 as /devices/virtual/input/input202 [ 200.425729][ T9746] rust_binder: Write failure EFAULT in pid:389 [ 200.425964][ T9748] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 200.445880][ T9748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:288 [ 200.533690][ T9750] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:369 [ 200.782095][ T9765] input: syz1 as /devices/virtual/input/input203 [ 200.807122][ T9765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:395 [ 200.986276][ T9768] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:397 [ 201.152703][ T9777] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:401 [ 201.399066][ T9786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 201.420687][ T9785] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.430242][ T9786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:407 [ 201.439052][ T9786] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.449378][ T9786] rust_binder: Read failure Err(EFAULT) in pid:407 [ 201.525335][ T9791] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 201.930024][ T9801] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 201.930121][ T9802] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 202.088176][ T9804] cgroup: fork rejected by pids controller in /syz4 [ 202.192083][ T9846] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.192430][ T9846] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.230063][ T9846] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.230398][ T9846] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.264835][ T9846] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.389324][ T9868] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.460682][ T9875] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 202.477541][ T9875] SELinux: failed to load policy [ 202.500787][ T9880] binder: Bad value for 'max' [ 202.600190][ T9891] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.624698][ T9891] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 202.636417][ T9891] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 202.654518][ T9891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:175 [ 202.791734][ T36] kauditd_printk_skb: 984 callbacks suppressed [ 202.791754][ T36] audit: type=1400 audit(1750337991.200:38156): avc: denied { map } for pid=9903 comm="syz.3.2926" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.831399][ T36] audit: type=1400 audit(1750337991.190:38155): avc: denied { read open } for pid=9903 comm="syz.3.2926" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 202.865533][ T36] audit: type=1400 audit(1750337991.200:38158): avc: denied { read } for pid=9903 comm="syz.3.2926" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 202.889979][ T9914] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 202.898951][ T36] audit: type=1400 audit(1750337991.200:38159): avc: denied { read open } for pid=9903 comm="syz.3.2926" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 202.923487][ T36] audit: type=1400 audit(1750337991.200:38157): avc: denied { read } for pid=9903 comm="syz.3.2926" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.950798][ T36] audit: type=1400 audit(1750337991.200:38160): avc: denied { map } for pid=9903 comm="syz.3.2926" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.974128][ T9914] tun0: tun_chr_ioctl cmd 1074025675 [ 202.981303][ T9914] tun0: persist enabled [ 202.986611][ T36] audit: type=1400 audit(1750337991.200:38161): avc: denied { read } for pid=9903 comm="syz.3.2926" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.022321][ T36] audit: type=1400 audit(1750337991.200:38162): avc: denied { map } for pid=9903 comm="syz.3.2926" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.058690][ T36] audit: type=1400 audit(1750337991.200:38163): avc: denied { read } for pid=9903 comm="syz.3.2926" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 203.083163][ T36] audit: type=1400 audit(1750337991.200:38164): avc: denied { read } for pid=9903 comm="syz.3.2926" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.118425][ T9914] tun0: tun_chr_ioctl cmd 1074025675 [ 203.123909][ T9914] tun0: persist enabled [ 203.132067][ T9916] rust_binder: Error while translating object. [ 203.132097][ T9916] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 203.143130][ T9916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:443 [ 203.243168][ T9920] binder: Bad value for 'stats' [ 203.373447][ T9929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.374203][ T9929] rust_binder: Read failure Err(EAGAIN) in pid:327 [ 203.393623][ T9929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.404178][ T9929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:327 [ 203.442108][ T9929] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 203.461930][ T9929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:327 [ 203.513829][ T9929] rust_binder: Error while translating object. [ 203.525334][ T9938] binder: Bad value for 'stats' [ 203.536713][ T9929] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 203.536748][ T9929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:327 [ 203.589147][ T9943] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.648990][ T9945] binfmt_misc: register: failed to install interpreter file ./bus/file0 [ 203.697909][ T9952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:456 [ 203.778796][ T9958] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.799206][ T9959] kvm: kvm [9953]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x1 [ 203.816558][ T9960] kvm: kvm [9953]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x1 [ 203.827025][ T9959] rust_binder: Write failure EINVAL in pid:458 [ 203.847344][ T9961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:184 [ 203.932156][ T9963] rust_binder: Failed to allocate buffer. len:64, is_oneway:true [ 203.941588][ T9963] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 203.958124][ T9963] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 203.966677][ T9963] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 203.977616][ T9963] rust_binder: Read failure Err(EFAULT) in pid:331 [ 204.932818][T10008] input: syz1 as /devices/virtual/input/input205 [ 205.385391][T10022] SELinux: security_context_str_to_sid () failed with errno=-22 [ 205.429707][T10042] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.646224][T10056] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.745134][T10060] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.869155][T10065] input: syz1 as /devices/virtual/input/input206 [ 206.264982][T10073] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 206.681329][T10079] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:468 [ 206.894153][T10093] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 206.949182][T10096] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 207.093813][T10103] rust_binder: Error while translating object. [ 207.100301][T10103] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 207.121521][T10103] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:480 [ 207.140298][T10103] rust_binder: Error while translating object. [ 207.151817][T10103] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 207.165055][T10103] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:480 [ 207.729936][T10116] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 207.740510][T10116] binder: Bad value for 'max' [ 207.800958][ T36] kauditd_printk_skb: 951 callbacks suppressed [ 207.800979][ T36] audit: type=1400 audit(1750337996.200:39116): avc: denied { ioctl } for pid=10122 comm="syz.4.2992" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 207.849068][ T36] audit: type=1400 audit(1750337996.210:39117): avc: denied { read } for pid=10124 comm="syz.0.2993" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 207.885308][ T36] audit: type=1400 audit(1750337996.210:39118): avc: denied { read open } for pid=10124 comm="syz.0.2993" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 207.927090][ T36] audit: type=1400 audit(1750337996.210:39119): avc: denied { ioctl } for pid=10124 comm="syz.0.2993" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 207.962242][ T36] audit: type=1400 audit(1750337996.220:39120): avc: denied { read } for pid=10124 comm="syz.0.2993" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 207.986662][ T36] audit: type=1400 audit(1750337996.220:39121): avc: denied { read open } for pid=10124 comm="syz.0.2993" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 208.011604][ T36] audit: type=1400 audit(1750337996.220:39122): avc: denied { ioctl } for pid=10124 comm="syz.0.2993" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 208.038063][T10131] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 208.038146][ T36] audit: type=1400 audit(1750337996.270:39123): avc: denied { read write } for pid=10124 comm="syz.0.2993" name="binder0" dev="binder" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 208.069785][ T36] audit: type=1400 audit(1750337996.270:39124): avc: denied { read write open } for pid=10124 comm="syz.0.2993" path="/dev/binderfs/binder0" dev="binder" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 208.108984][T10133] rust_binder: Write failure EFAULT in pid:481 [ 208.109598][ T36] audit: type=1400 audit(1750337996.270:39125): avc: denied { ioctl } for pid=10124 comm="syz.0.2993" path="/dev/binderfs/binder0" dev="binder" ino=35 ioctlcmd=0x620f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 208.345831][T10150] binder: Unknown parameter 'fowner' [ 208.397873][T10156] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 208.408518][T10157] binder: Bad value for 'max' [ 208.413433][T10156] SELinux: failed to load policy [ 209.006513][T10190] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 209.111227][T10205] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 209.129917][T10188] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 209.432464][T10224] SELinux: failed to load policy [ 209.517182][T10232] rust_binder: Write failure EINVAL in pid:485 [ 209.864324][T10251] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 209.991921][T10267] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 210.200085][T10279] rust_binder: Write failure EINVAL in pid:296 [ 210.382232][T10281] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 210.388537][T10281] rust_binder: Error in use_page_slow: EBUSY [ 210.399361][T10288] binder: Unknown parameter '0xffffffffffffffff' [ 210.414190][T10281] rust_binder: use_range failure EBUSY [ 210.414218][T10281] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 210.419714][T10281] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 210.429992][T10281] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 210.440940][T10281] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:411 [ 210.444086][T10286] input: syz1 as /devices/virtual/input/input208 [ 210.764130][T10300] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 210.764154][T10300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:527 [ 210.913195][T10307] input: syz0 as /devices/virtual/input/input210 [ 211.436586][T10337] input: syz1 as /devices/virtual/input/input216 [ 211.656566][T10340] rust_binder: Write failure EINVAL in pid:417 [ 211.656875][T10340] rust_binder: Write failure EINVAL in pid:417 [ 212.013235][T10362] rust_binder: Error in use_page_slow: ESRCH [ 212.013257][T10362] rust_binder: use_range failure ESRCH [ 212.019467][T10362] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 212.026169][T10362] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 212.036098][T10362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:538 [ 212.083854][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.093526][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.100388][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.107798][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.115067][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.130306][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.148041][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.155205][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.162088][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.169051][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.176377][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.183510][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.190638][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.198181][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.222327][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.229268][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.236494][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.243599][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.250499][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.258404][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.265477][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.291412][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.298558][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.305855][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.313065][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.319926][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.328672][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.335658][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.344654][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.353953][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.371106][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.391002][T10366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.451858][T10371] input: syz0 as /devices/virtual/input/input217 [ 212.817177][ T36] kauditd_printk_skb: 893 callbacks suppressed [ 212.817193][ T36] audit: type=1400 audit(1750338001.220:40019): avc: denied { read } for pid=10379 comm="syz.4.3075" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 212.846706][ T36] audit: type=1400 audit(1750338001.220:40020): avc: denied { read open } for pid=10379 comm="syz.4.3075" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 212.872988][ T36] audit: type=1400 audit(1750338001.280:40021): avc: denied { read write } for pid=10379 comm="syz.4.3075" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 212.897353][ T36] audit: type=1400 audit(1750338001.280:40022): avc: denied { read write open } for pid=10379 comm="syz.4.3075" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 212.924870][ T36] audit: type=1400 audit(1750338001.330:40023): avc: denied { read write } for pid=10379 comm="syz.4.3075" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 212.949399][ T36] audit: type=1400 audit(1750338001.350:40024): avc: denied { read write open } for pid=10379 comm="syz.4.3075" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 212.996424][ T36] audit: type=1400 audit(1750338001.400:40025): avc: denied { read write } for pid=10384 comm="syz.0.3076" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 213.024489][ T36] audit: type=1400 audit(1750338001.400:40026): avc: denied { read open } for pid=10384 comm="syz.0.3076" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 213.124701][ T36] audit: type=1400 audit(1750338001.530:40027): avc: denied { ioctl } for pid=10384 comm="syz.0.3076" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 213.367555][ T36] audit: type=1400 audit(1750338001.770:40028): avc: denied { read } for pid=10389 comm="syz.4.3077" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 213.443012][T10390] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.588620][T10400] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 213.595334][T10400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:539 [ 214.123071][T10412] tun0: tun_chr_ioctl cmd 1074025675 [ 214.137748][T10412] tun0: persist disabled [ 214.421103][T10417] rust_binder: Write failure EINVAL in pid:428 [ 214.494387][T10419] rust_binder: Error while translating object. [ 214.500739][T10419] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 214.507037][T10419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:560 [ 214.862692][T10441] binder: Bad value for 'defcontext' [ 215.123903][T10452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:348 [ 215.167774][T10458] input: syz1 as /devices/virtual/input/input221 [ 215.274684][T10457] tap0: tun_chr_ioctl cmd 1074025678 [ 215.280187][T10457] tap0: group set to 0 [ 215.352324][T10469] rust_binder: Write failure EFAULT in pid:548 [ 215.353304][T10469] rust_binder: Error while translating object. [ 215.359529][T10469] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 215.365834][T10469] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:548 [ 215.377382][T10470] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 215.473605][T10479] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 215.480074][T10479] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:553 [ 215.539969][T10481] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 215.691306][T10487] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 215.851402][T10491] kvm: kvm [10488]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 216.048052][T10496] rust_binder: Error while translating object. [ 216.048082][T10496] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 216.064294][T10496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:360 [ 216.282415][T10505] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 216.319718][T10509] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 216.319759][T10509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:364 [ 216.369438][T10509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:364 [ 216.377471][T10516] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 216.478106][T10518] rust_binder: Write failure EINVAL in pid:593 [ 216.877425][T10541] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 217.101470][T10551] rtc_cmos 00:00: Alarms can be up to one day in the future [ 217.161757][T10550] rtc_cmos 00:00: Alarms can be up to one day in the future [ 217.167996][T10553] binder: Bad value for 'max' [ 217.393624][T10562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:614 [ 217.567222][T10566] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 217.577302][T10566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:571 [ 217.653851][T10581] binder: Bad value for 'defcontext' [ 217.684882][T10583] binder: Unknown parameter 'dIVfQr¹úont_hash' [ 217.723843][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 217.731994][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 217.739528][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 217.749555][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 217.758055][ T45] rtc rtc0: __rtc_set_alarm: err=-22 [ 217.848004][ T36] kauditd_printk_skb: 748 callbacks suppressed [ 217.848023][ T36] audit: type=1400 audit(1750338006.250:40777): avc: denied { read } for pid=10589 comm="syz.1.3135" name="binder1" dev="binder" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 217.877341][ T36] audit: type=1400 audit(1750338006.250:40778): avc: denied { read open } for pid=10589 comm="syz.1.3135" path="/dev/binderfs/binder1" dev="binder" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 217.915610][ T36] audit: type=1400 audit(1750338006.320:40779): avc: denied { mounton } for pid=10592 comm="syz.3.3136" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.915789][T10593] binder: Unknown parameter 'dont_h!sh' [ 217.963675][ T36] audit: type=1400 audit(1750338006.370:40780): avc: denied { read } for pid=10594 comm="syz.3.3137" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 217.987296][ T36] audit: type=1400 audit(1750338006.370:40781): avc: denied { read open } for pid=10594 comm="syz.3.3137" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 218.011627][ T36] audit: type=1400 audit(1750338006.390:40782): avc: denied { read write } for pid=10594 comm="syz.3.3137" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 218.035975][ T36] audit: type=1400 audit(1750338006.390:40783): avc: denied { read write open } for pid=10594 comm="syz.3.3137" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 218.062811][ T36] audit: type=1400 audit(1750338006.470:40784): avc: denied { ioctl } for pid=10594 comm="syz.3.3137" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 218.113911][ T36] audit: type=1400 audit(1750338006.520:40785): avc: denied { write } for pid=10594 comm="syz.3.3137" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 218.136970][ T36] audit: type=1400 audit(1750338006.520:40786): avc: denied { write open } for pid=10594 comm="syz.3.3137" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 218.644788][T10624] rtc_cmos 00:00: Alarms can be up to one day in the future [ 218.851147][T10641] binder: Unknown parameter 'dont_hasl' [ 218.901795][T10623] rtc_cmos 00:00: Alarms can be up to one day in the future [ 219.705830][T10664] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 219.723938][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 219.771100][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 219.795234][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 219.812998][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 219.829171][ T45] rtc rtc0: __rtc_set_alarm: err=-22 [ 220.408794][T10688] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 220.408834][T10688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:490 [ 220.430345][T10688] input: syz0 as /devices/virtual/input/input223 [ 220.475438][T10688] input: syz0 as /devices/virtual/input/input224 [ 220.673983][T10697] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.701555][T10693] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 220.708186][T10693] rust_binder: Error in use_page_slow: EBUSY [ 220.718701][T10693] rust_binder: use_range failure EBUSY [ 220.724729][T10693] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 220.730241][T10693] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 220.738093][T10693] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 220.747557][T10693] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:640 [ 220.759988][T10700] rust_binder: Write failure EFAULT in pid:640 [ 221.102724][T10717] binder: Bad value for 'defcontext' [ 221.172437][T10727] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.176042][T10727] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 221.187251][T10730] binder: Bad value for 'stats' [ 221.202277][T10728] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4232, size: 4103) [ 221.202303][T10728] rust_binder: Error while translating object. [ 221.222132][T10728] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 221.228357][T10728] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:654 [ 221.306407][T10727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:408 [ 221.396887][T10741] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 221.413153][T10741] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:493 [ 221.448351][T10741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.500820][T10743] SELinux: ebitmap: truncated map [ 221.532928][T10743] SELinux: failed to load policy [ 221.609464][T10756] rust_binder: Write failure EINVAL in pid:500 [ 221.615183][T10755] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 221.621448][T10756] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:500 [ 221.797889][T10762] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 222.036018][T10772] input: syz1 as /devices/virtual/input/input227 [ 222.153916][T10774] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 222.185772][T10783] input: syz1 as /devices/virtual/input/input228 [ 222.374126][T10786] input: syz0 as /devices/virtual/input/input229 [ 222.571621][T10798] random: crng reseeded on system resumption [ 222.713027][T10800] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 222.713062][T10800] rust_binder: Error in use_page_slow: EBUSY [ 222.731243][T10800] rust_binder: use_range failure EBUSY [ 222.747564][T10800] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 222.757653][T10800] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 222.791643][T10800] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 222.813084][T10800] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:418 [ 222.958752][ T36] kauditd_printk_skb: 805 callbacks suppressed [ 222.958771][ T36] audit: type=1400 audit(1750338011.360:41592): avc: denied { read write } for pid=10807 comm="syz.0.3205" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 222.997462][ T36] audit: type=1400 audit(1750338011.360:41593): avc: denied { read open } for pid=10807 comm="syz.0.3205" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 223.023159][ T36] audit: type=1400 audit(1750338011.380:41594): avc: denied { map } for pid=10807 comm="syz.0.3205" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 223.049949][T10810] input: syz0 as /devices/virtual/input/input230 [ 223.058415][ T36] audit: type=1400 audit(1750338011.380:41595): avc: denied { read } for pid=10807 comm="syz.0.3205" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 223.086132][ T36] audit: type=1400 audit(1750338011.460:41596): avc: denied { read write } for pid=10809 comm="syz.0.3206" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 223.140961][ T36] audit: type=1400 audit(1750338011.460:41597): avc: denied { read write open } for pid=10809 comm="syz.0.3206" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 223.166891][ T36] audit: type=1400 audit(1750338011.460:41598): avc: denied { ioctl } for pid=10809 comm="syz.0.3206" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 223.199032][ T36] audit: type=1400 audit(1750338011.460:41599): avc: denied { ioctl } for pid=10809 comm="syz.0.3206" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 223.225087][T10810] SELinux: policydb table sizes (0,2) do not match mine (6,7) [ 223.227520][ T36] audit: type=1400 audit(1750338011.490:41600): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=628 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.237056][T10810] SELinux: failed to load policy [ 223.268746][ T36] audit: type=1400 audit(1750338011.490:41601): avc: denied { read open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=628 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.345983][T10819] binder: Bad value for 'defcontext' [ 223.407859][T10821] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 223.407884][T10821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:426 [ 223.459623][T10828] binder: Unknown parameter '"Y' [ 223.734466][T10835] binder: Unknown parameter '00000000000000000000003' [ 223.751639][T10835] binder: Unknown parameter '00000000000000000000003' [ 223.771182][T10835] binder: Unknown parameter '00000000000000000000003' [ 223.779716][T10835] binder: Unknown parameter '00000000000000000000003' [ 223.779716][T10836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:649 [ 223.780861][T10835] binder: Unknown parameter '00000000000000000000003' [ 223.804898][T10835] binder: Unknown parameter '00000000000000000000003' [ 223.813968][T10835] binder: Unknown parameter '00000000000000000000003' [ 223.840753][T10835] binder: Unknown parameter '00000000000000000000003' [ 223.948750][T10841] SELinux: failed to load policy [ 223.956793][T10841] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 223.956828][T10841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:687 [ 223.968696][T10843] binder: Bad value for 'stats' [ 223.986371][T10844] binder: Bad value for 'stats' [ 224.740514][T10881] binder: Bad value for 'stats' [ 224.793444][T10885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:444 [ 224.925614][T10896] binder: Unknown parameter 'noneaded' [ 224.944881][T10896] binder: Bad value for 'max' [ 225.017026][T10906] input: syz1 as /devices/virtual/input/input232 [ 225.049056][T10905] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 225.053157][T10905] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 225.253390][T10919] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 225.543926][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.560984][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.568505][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.580375][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.588203][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.596062][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.603510][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.611465][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.618858][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.626348][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.633975][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.641424][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.648788][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.656306][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.663747][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.671140][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.678516][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.685996][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.693516][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.700997][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.708417][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.715873][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.723569][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.731025][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.738597][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.746011][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.753630][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.761113][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.769591][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.777084][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.785627][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.793149][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.800966][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.808387][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.837618][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.840616][T10944] input: syz1 as /devices/virtual/input/input234 [ 225.845166][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.858934][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.867456][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.876095][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.891913][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.900641][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.908646][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.935842][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.943670][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.960986][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.968591][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.978471][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.986182][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 225.993997][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.001544][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.009479][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.016920][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.024438][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.032787][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.040244][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.048484][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.056075][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.063546][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.070973][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.078349][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.085807][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.094030][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.101509][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.108992][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.116494][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.123956][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.131408][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.138804][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.146254][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.153842][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.161445][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.168847][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.176541][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.184250][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.192334][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.199832][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.207343][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.214800][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.222265][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.229648][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.237328][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.244772][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.252339][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.259862][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.267715][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.275309][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.282771][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.290154][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.297607][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.305100][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.311348][T10959] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 226.312588][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.329568][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.337189][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.344732][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.355776][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.364344][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.372008][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.379977][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.388380][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.397173][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.404687][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.412233][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.419600][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.427083][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.434934][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.442587][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.450015][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.457534][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.465029][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.472488][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.479903][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.487333][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.494746][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.502228][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.509715][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.517468][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.524990][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.532558][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.540065][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.547575][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.554971][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.562462][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.569839][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.577241][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.584844][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.592268][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.599659][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.607054][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.614451][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.621833][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.629204][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.636610][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.644009][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.651423][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.658870][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.666290][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.674000][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.681519][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.689736][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.697262][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.704889][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.712312][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.719784][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.727364][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.734774][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.742204][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.750373][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.757777][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.765211][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.772733][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.780200][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.787602][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.795012][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.802412][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.809799][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.817189][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.824584][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.832143][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.840617][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.848618][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.856123][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.863621][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.871079][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.878935][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.886388][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.893906][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.901470][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.908990][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.916504][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.923944][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.931359][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.938769][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.946173][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.953596][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.960996][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.968369][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.975758][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.983171][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.990589][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 226.998039][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.005469][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.012925][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.020318][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.027814][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.035215][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.042700][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.050080][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.057505][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.064902][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.072325][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.079705][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.087363][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.094767][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.102186][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.109648][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.117050][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.124558][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.131960][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.139433][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.147619][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.155138][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.162567][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.169958][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.177364][ T306] hid-generic 01FF:0004:0400.0012: unknown main item tag 0x0 [ 227.185721][ T306] hid-generic 01FF:0004:0400.0012: hidraw0: HID v0.05 Device [syz0] on syz1 [ 227.340025][T10967] fido_id[10967]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 227.371491][T10977] rust_binder: Write failure EFAULT in pid:676 [ 227.522205][T10980] rust_binder: Write failure EINVAL in pid:460 [ 227.528966][T10986] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 227.597100][T10992] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 227.604044][T10991] rust_binder: inc_ref_done called when no active inc_refs [ 227.612226][T10991] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 227.619438][T10991] rust_binder: Read failure Err(EFAULT) in pid:563 [ 227.700759][T10997] rust_binder: Write failure EINVAL in pid:569 [ 227.797472][T11006] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 227.993512][ T36] kauditd_printk_skb: 755 callbacks suppressed [ 227.993528][ T36] audit: type=1400 audit(1750338016.400:42357): avc: denied { read } for pid=11015 comm="syz.4.3266" name="binder0" dev="binder" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 228.028024][T11016] rust_binder: Error while translating object. [ 228.030659][T11016] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 228.030823][ T36] audit: type=1400 audit(1750338016.400:42358): avc: denied { read open } for pid=11015 comm="syz.4.3266" path="/dev/binderfs/binder0" dev="binder" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 228.037985][T11016] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:733 [ 228.046566][ T36] audit: type=1400 audit(1750338016.420:42359): avc: denied { ioctl } for pid=11015 comm="syz.4.3266" path="/dev/binderfs/binder0" dev="binder" ino=201 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 228.122366][ T36] audit: type=1400 audit(1750338016.420:42360): avc: denied { set_context_mgr } for pid=11015 comm="syz.4.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 228.134790][T11018] block device autoloading is deprecated and will be removed. [ 228.151502][T11018] syz.0.3267: attempt to access beyond end of device [ 228.151502][T11018] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 228.169605][ T36] audit: type=1400 audit(1750338016.420:42361): avc: denied { map } for pid=11015 comm="syz.4.3266" path="/dev/binderfs/binder0" dev="binder" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 228.195478][T11018] input: syz0 as /devices/virtual/input/input236 [ 228.227203][T11018] syz.0.3267: attempt to access beyond end of device [ 228.227203][T11018] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 228.232657][ T36] audit: type=1400 audit(1750338016.420:42362): avc: denied { read } for pid=11015 comm="syz.4.3266" path="/dev/binderfs/binder0" dev="binder" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 228.282205][ T36] audit: type=1400 audit(1750338016.420:42363): avc: denied { ioctl } for pid=11015 comm="syz.4.3266" path="/dev/binderfs/binder0" dev="binder" ino=201 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 228.334073][ T36] audit: type=1400 audit(1750338016.420:42364): avc: denied { call } for pid=11015 comm="syz.4.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 228.354102][ T36] audit: type=1400 audit(1750338016.420:42365): avc: denied { transfer } for pid=11015 comm="syz.4.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 228.402493][T11032] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.404094][ T36] audit: type=1400 audit(1750338016.560:42366): avc: denied { read write } for pid=11019 comm="syz.3.3268" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 228.524099][T11044] binder: Unknown parameter 'ÿ' [ 228.622106][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 229.183777][T11062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:483 [ 229.379812][T11064] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false [ 229.395354][T11064] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 229.408831][T11064] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:485 [ 229.662801][T11073] KVM: debugfs: duplicate directory 11073-15 [ 229.691753][T11073] kvm: kvm [11067]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x7 [ 230.618447][T11100] binfmt_misc: register: failed to install interpreter file ./file0 [ 230.627191][T11100] rust_binder: Write failure EINVAL in pid:493 [ 230.670969][ T354] Bluetooth: hci0: command 0x1003 tx timeout [ 230.671260][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 230.749075][T11104] serio: Serial port ttynull [ 231.221550][T11134] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 232.001726][T11160] input: syz1 as /devices/virtual/input/input238 [ 232.671451][T11185] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.999718][T11203] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.001387][ T36] kauditd_printk_skb: 2234 callbacks suppressed [ 233.001406][ T36] audit: type=1400 audit(1750338021.410:44601): avc: denied { call } for pid=11200 comm="syz.3.3324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 233.033383][T11201] rust_binder: Error while translating object. [ 233.033420][T11201] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 233.039615][T11201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:641 [ 233.050272][ T36] audit: type=1400 audit(1750338021.410:44602): avc: denied { setattr } for pid=9011 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.088715][ T9011] audit: audit_backlog=65 > audit_backlog_limit=64 [ 233.095617][ T9011] audit: audit_lost=92 audit_rate_limit=0 audit_backlog_limit=64 [ 233.097482][ T36] audit: type=1400 audit(1750338021.410:44603): avc: denied { setattr } for pid=9011 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.104732][ T9011] audit: backlog limit exceeded [ 233.127051][ T36] audit: type=1400 audit(1750338021.410:44604): avc: denied { setattr } for pid=9011 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.134511][ T9011] audit: audit_backlog=65 > audit_backlog_limit=64 [ 233.155153][ T36] audit: type=1400 audit(1750338021.410:44605): avc: denied { setattr } for pid=9011 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.164745][ T9011] audit: audit_lost=93 audit_rate_limit=0 audit_backlog_limit=64 [ 233.619344][T11216] input: syz1 as /devices/virtual/input/input240 [ 233.837521][T11222] binder: Bad value for 'defcontext' [ 234.013002][T11230] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 234.243878][ T64] hid-generic 0002:0000:0FFF.0013: unknown main item tag 0x1 [ 234.270973][ T64] hid-generic 0002:0000:0FFF.0013: unknown main item tag 0x2 [ 234.278454][ T64] hid-generic 0002:0000:0FFF.0013: item fetching failed at offset 47/205 [ 234.301126][ T64] hid-generic 0002:0000:0FFF.0013: probe with driver hid-generic failed with error -22 [ 235.009093][T11262] input: syz0 as /devices/virtual/input/input242 [ 235.736310][T11277] binder: Unknown parameter 'euid' [ 237.321862][T11330] binder: Unknown parameter '00000000000000000000' [ 237.321972][T11326] KVM: debugfs: duplicate directory 11326-8 [ 237.373526][T11326] SELinux: policydb string length 1869181448 does not match expected length 8 [ 237.391108][T11326] SELinux: failed to load policy [ 237.404768][T11326] binder: Unknown parameter '/selinux/checkreqprot' [ 237.464297][T11337] binder: Unknown parameter '€' [ 237.767914][T11343] binder: Unknown parameter '0x0000000000000000' [ 238.016389][ T36] kauditd_printk_skb: 4647 callbacks suppressed [ 238.016409][ T36] audit: type=1400 audit(1750338026.420:49246): avc: denied { setattr } for pid=9011 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.062079][ T36] audit: type=1400 audit(1750338026.420:49247): avc: denied { setattr } for pid=9011 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.068232][T11351] rust_binder: Error while translating object. [ 238.104269][ T36] audit: type=1400 audit(1750338026.420:49248): avc: denied { setattr } for pid=9011 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.120596][T11351] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 238.133810][ T9011] audit: audit_backlog=65 > audit_backlog_limit=64 [ 238.159806][ T36] audit: type=1400 audit(1750338026.420:49249): avc: denied { setattr } for pid=9011 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.160974][ T9011] audit: audit_lost=96 audit_rate_limit=0 audit_backlog_limit=64 [ 238.191213][T11351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:677 [ 238.206209][ T9011] audit: backlog limit exceeded [ 238.232862][ T9011] audit: audit_backlog=65 > audit_backlog_limit=64 [ 238.235348][ T36] audit: type=1400 audit(1750338026.420:49250): avc: denied { setattr } for pid=9011 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.239583][ T9011] audit: audit_lost=97 audit_rate_limit=0 audit_backlog_limit=64 [ 238.625286][T11370] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 238.773856][T11374] rust_binder: Read failure Err(EAGAIN) in pid:686 [ 239.005929][T11379] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 239.401778][T11397] SELinux: failed to load policy [ 239.412562][T11397] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 239.552850][T11402] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 240.159941][T11414] input: syz1 as /devices/virtual/input/input244 [ 240.279083][T11421] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 240.455667][T11429] binder: Unknown parameter 'doj' [ 240.781430][T11449] binder: Unknown parameter 'seclabpl' [ 240.897867][T11452] rust_binder: got new transaction with bad transaction stack [ 240.897892][T11452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:718 [ 241.256397][T11468] rust_binder: Write failure EFAULT in pid:721 [ 241.407778][T11470] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.888251][T11481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:892 [ 242.556530][T11514] rust_binder: Read failure Err(EAGAIN) in pid:740 [ 242.652093][T11520] input: syz0 as /devices/virtual/input/input247 [ 243.021110][ T36] kauditd_printk_skb: 5038 callbacks suppressed [ 243.021130][ T36] audit: type=1400 audit(1750338031.430:54156): avc: denied { read open } for pid=11538 comm="syz.4.3437" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 243.088201][ T9011] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.095190][ T36] audit: type=1400 audit(1750338031.430:54157): avc: denied { setattr } for pid=9011 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.118560][ T9011] audit: audit_lost=142 audit_rate_limit=0 audit_backlog_limit=64 [ 243.128885][ T9011] audit: backlog limit exceeded [ 243.136528][ T9011] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.144005][ T36] audit: type=1400 audit(1750338031.430:54158): avc: denied { setattr } for pid=9011 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.152374][T11546] audit: audit_backlog=65 > audit_backlog_limit=64 [ 243.168625][ T9011] audit: audit_lost=143 audit_rate_limit=0 audit_backlog_limit=64 [ 243.185448][ T9011] audit: backlog limit exceeded [ 243.201239][T11549] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.203715][T11549] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 243.243953][T11549] rust_binder: Write failure EINVAL in pid:906 [ 243.302324][T11556] binder: Unknown parameter '00000000000000000000000' [ 243.338982][T11553] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 243.339019][T11553] rust_binder: Error in use_page_slow: EBUSY [ 243.357647][T11553] rust_binder: use_range failure EBUSY [ 243.370971][T11553] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 243.379493][T11553] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 243.400942][T11553] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 243.410442][T11553] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:746 [ 243.472146][T11562] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.694196][T11567] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 243.766277][T11567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:850 [ 243.877755][T11574] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 244.240776][T11584] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.243123][T11584] rust_binder: Error while translating object. [ 244.249728][T11584] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 244.266374][T11584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:924 [ 244.404891][T11586] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.532583][T11589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:926 [ 245.252040][T11611] input: syz0 as /devices/virtual/input/input248 [ 246.914835][T11656] input: syz0 as /devices/virtual/input/input249 [ 247.060977][T11664] input: syz1 as /devices/virtual/input/input250 [ 247.250427][T11668] binder: Unknown parameter ' ' [ 247.819996][T11670] SELinux: failed to load policy [ 247.825945][T11670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:903 [ 247.851257][ T12] bridge_slave_1: left allmulticast mode [ 247.866306][ T12] bridge_slave_1: left promiscuous mode [ 247.872019][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.891226][ T12] bridge_slave_0: left allmulticast mode [ 247.896872][ T12] bridge_slave_0: left promiscuous mode [ 247.902697][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.071008][ T36] kauditd_printk_skb: 2640 callbacks suppressed [ 248.071026][ T36] audit: type=1400 audit(1750338036.470:56740): avc: denied { read } for pid=11674 comm="syz.1.3478" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 248.101990][ T36] audit: type=1400 audit(1750338036.490:56741): avc: denied { read open } for pid=11674 comm="syz.1.3478" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 248.126035][ T36] audit: type=1400 audit(1750338036.490:56742): avc: denied { ioctl } for pid=11674 comm="syz.1.3478" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 248.152434][ T36] audit: type=1400 audit(1750338036.490:56743): avc: denied { ioctl } for pid=11674 comm="syz.1.3478" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 248.177320][ T36] audit: type=1400 audit(1750338036.490:56744): avc: denied { read write } for pid=11674 comm="syz.1.3478" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 248.202153][ T36] audit: type=1400 audit(1750338036.490:56745): avc: denied { read write open } for pid=11674 comm="syz.1.3478" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 248.230981][ T36] audit: type=1400 audit(1750338036.490:56746): avc: denied { ioctl } for pid=11674 comm="syz.1.3478" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 248.257019][ T36] audit: type=1400 audit(1750338036.490:56747): avc: denied { read write } for pid=11674 comm="syz.1.3478" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 248.258347][T11678] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 248.281530][ T36] audit: type=1400 audit(1750338036.490:56748): avc: denied { read write open } for pid=11674 comm="syz.1.3478" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 248.318764][ T36] audit: type=1400 audit(1750338036.490:56749): avc: denied { ioctl } for pid=11674 comm="syz.1.3478" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 248.581796][ T12] veth1_macvtap: left promiscuous mode [ 248.589423][ T12] veth0_vlan: left promiscuous mode [ 248.897244][T11708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:917 [ 249.002505][T11640] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.018947][T11640] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.026016][T11640] bridge_slave_0: entered allmulticast mode [ 249.032270][T11640] bridge_slave_0: entered promiscuous mode [ 249.039050][T11640] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.050931][T11640] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.058021][T11640] bridge_slave_1: entered allmulticast mode [ 249.066350][T11640] bridge_slave_1: entered promiscuous mode [ 249.119715][T11721] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.119894][T11722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.143095][T11699] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 249.181686][T11723] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 249.191684][T11722] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 250.085210][T11745] rust_binder: Read failure Err(EAGAIN) in pid:954 [ 250.897149][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.911127][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.915495][T11765] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 250.918524][T11765] rust_binder: Error while translating object. [ 250.929470][ T455] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.933139][T11765] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 250.935705][ T455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.942757][T11765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:810 [ 251.023860][T11640] veth0_vlan: entered promiscuous mode [ 251.072028][T11640] veth1_macvtap: entered promiscuous mode [ 251.148424][T11774] binder: Unknown parameter 'obj_role' [ 251.243204][T11778] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 251.243222][T11778] rust_binder: Error while translating object. [ 251.252043][T11778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 251.258315][T11778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:818 [ 251.827795][T11819] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 251.931413][T11828] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 251.939124][T11828] SELinux: failed to load policy [ 252.143188][T11845] binfmt_misc: register: failed to install interpreter file ./file0 [ 252.362458][T11862] rust_binder: Write failure EINVAL in pid:840 [ 252.582835][T11976] kvm: kvm [11975]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x3172 [ 253.103486][ T36] kauditd_printk_skb: 825 callbacks suppressed [ 253.103506][ T36] audit: type=1400 audit(1750338041.510:57575): avc: denied { read } for pid=11987 comm="syz.1.3530" name="binder0" dev="binder" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 253.108768][T11988] rust_binder: Error while translating object. [ 253.110519][ T36] audit: type=1400 audit(1750338041.510:57576): avc: denied { read open } for pid=11987 comm="syz.1.3530" path="/dev/binderfs/binder0" dev="binder" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 253.134481][T11988] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 253.141061][ T36] audit: type=1400 audit(1750338041.510:57577): avc: denied { ioctl } for pid=11987 comm="syz.1.3530" path="/dev/binderfs/binder0" dev="binder" ino=225 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 253.164245][T11988] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:953 [ 253.174862][ T36] audit: type=1400 audit(1750338041.510:57578): avc: denied { set_context_mgr } for pid=11987 comm="syz.1.3530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 253.232047][ T36] audit: type=1400 audit(1750338041.510:57579): avc: denied { map } for pid=11987 comm="syz.1.3530" path="/dev/binderfs/binder0" dev="binder" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 253.257495][ T36] audit: type=1400 audit(1750338041.510:57580): avc: denied { read } for pid=11987 comm="syz.1.3530" path="/dev/binderfs/binder0" dev="binder" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 253.282319][ T36] audit: type=1400 audit(1750338041.510:57581): avc: denied { read } for pid=11987 comm="syz.1.3530" name="binder1" dev="binder" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 253.307300][ T36] audit: type=1400 audit(1750338041.510:57582): avc: denied { read open } for pid=11987 comm="syz.1.3530" path="/dev/binderfs/binder1" dev="binder" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 253.335067][ T36] audit: type=1400 audit(1750338041.510:57583): avc: denied { ioctl } for pid=11987 comm="syz.1.3530" path="/dev/binderfs/binder0" dev="binder" ino=225 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 253.364348][ T36] audit: type=1400 audit(1750338041.510:57584): avc: denied { call } for pid=11987 comm="syz.1.3530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 253.704889][T12009] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 253.773353][T12008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:51 [ 253.782153][T12009] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 253.792045][T12008] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 253.802022][T12009] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51 [ 253.816716][T12008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51 [ 253.891126][T12016] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 253.952629][T12016] binder: Bad value for 'max' [ 254.112685][T12026] rust_binder: Error in use_page_slow: ESRCH [ 254.112711][T12026] rust_binder: use_range failure ESRCH [ 254.118837][T12025] rust_binder: Error in use_page_slow: ESRCH [ 254.132110][T12025] rust_binder: use_range failure ESRCH [ 254.141311][ T455] bridge_slave_1: left allmulticast mode [ 254.146769][T12026] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 254.146828][ T455] bridge_slave_1: left promiscuous mode [ 254.166746][T12026] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 254.166776][T12026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:850 [ 254.167566][ T455] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.190273][T12025] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 254.198817][T12025] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 254.225429][ T455] bridge_slave_0: left allmulticast mode [ 254.227908][T12025] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:850 [ 254.234994][ T455] bridge_slave_0: left promiscuous mode [ 254.257490][ T455] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.365644][T12035] rust_binder: Error while translating object. [ 254.365678][T12035] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 254.372354][T12035] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:971 [ 254.492198][T12044] input: syz0 as /devices/virtual/input/input254 [ 254.582716][T12042] deleting an unspecified loop device is not supported. [ 254.872370][ T455] veth1_macvtap: left promiscuous mode [ 254.877941][ T455] veth0_vlan: left promiscuous mode [ 254.961799][T12082] rust_binder: inc_ref_done called when no active inc_refs [ 255.176122][T12079] can0: slcan on ttyS3. [ 255.493172][T12014] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.513113][T12014] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.520669][T12014] bridge_slave_0: entered allmulticast mode [ 255.532075][T12083] can0 (unregistered): slcan off ttyS3. [ 255.538083][T12014] bridge_slave_0: entered promiscuous mode [ 255.541675][T12108] input: syz0 as /devices/virtual/input/input255 [ 255.545553][T12014] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.557535][T12014] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.571935][T12014] bridge_slave_1: entered allmulticast mode [ 255.578445][T12014] bridge_slave_1: entered promiscuous mode [ 255.936732][T12128] rust_binder: Write failure EINVAL in pid:102 [ 255.940015][T12124] rust_binder: Write failure EINVAL in pid:866 [ 256.072496][T12140] rust_binder: Write failure EINVAL in pid:1012 [ 256.371906][T12148] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 105) [ 256.378188][T12148] rust_binder: Error while translating object. [ 256.388856][T12148] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 256.395621][T12148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:108 [ 256.604995][T12154] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 256.733467][T12156] input: syz0 as /devices/virtual/input/input256 [ 256.910331][T12163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1018 [ 257.311326][ T455] bridge_slave_1: left allmulticast mode [ 257.329518][ T455] bridge_slave_1: left promiscuous mode [ 257.335268][ T455] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.369489][T12168] kvm: kvm [12167]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253 [ 257.380667][ T455] bridge_slave_0: left allmulticast mode [ 257.387317][ T455] bridge_slave_0: left promiscuous mode [ 257.393053][ T455] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.633537][T12179] kvm: user requested TSC rate below hardware speed [ 257.986527][T12191] rust_binder: Write failure EINVAL in pid:140 [ 258.002128][ T455] veth1_macvtap: left promiscuous mode [ 258.014103][ T455] veth0_vlan: left promiscuous mode [ 258.134946][ T36] kauditd_printk_skb: 715 callbacks suppressed [ 258.134962][ T36] audit: type=1400 audit(1750338046.540:58300): avc: denied { read } for pid=12198 comm="syz.5.3593" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 258.165191][ T36] audit: type=1400 audit(1750338046.540:58301): avc: denied { read open } for pid=12198 comm="syz.5.3593" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 258.202009][ T36] audit: type=1400 audit(1750338046.580:58302): avc: denied { read } for pid=12198 comm="syz.5.3593" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.226047][ T36] audit: type=1400 audit(1750338046.580:58303): avc: denied { read open } for pid=12198 comm="syz.5.3593" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.249862][ T36] audit: type=1400 audit(1750338046.580:58304): avc: denied { ioctl } for pid=12198 comm="syz.5.3593" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.274929][ T36] audit: type=1400 audit(1750338046.590:58305): avc: denied { ioctl } for pid=12198 comm="syz.5.3593" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 258.312137][ T36] audit: type=1400 audit(1750338046.720:58306): avc: denied { read write } for pid=12201 comm="syz.1.3594" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.336914][ T36] audit: type=1400 audit(1750338046.720:58307): avc: denied { ioctl open } for pid=12201 comm="syz.1.3594" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.361989][ T36] audit: type=1400 audit(1750338046.740:58308): avc: denied { ioctl } for pid=12201 comm="syz.1.3594" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.428952][ T36] audit: type=1400 audit(1750338046.830:58309): avc: denied { read write } for pid=11640 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.703474][T12152] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.710751][T12152] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.717849][T12152] bridge_slave_0: entered allmulticast mode [ 258.724525][T12152] bridge_slave_0: entered promiscuous mode [ 258.732542][T12152] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.739607][T12152] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.746738][T12152] bridge_slave_1: entered allmulticast mode [ 258.753018][T12152] bridge_slave_1: entered promiscuous mode [ 259.691556][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.698599][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.718285][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.725507][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.026112][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.033234][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.062871][T12014] veth0_vlan: entered promiscuous mode [ 260.080185][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.087468][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.151688][T12241] SELinux: policydb string does not match my string SE Linux [ 260.160736][T12241] SELinux: failed to load policy [ 260.182347][T12014] veth1_macvtap: entered promiscuous mode [ 260.397005][T12152] veth0_vlan: entered promiscuous mode [ 260.421379][T12248] SELinux: failed to load policy [ 260.503420][T12152] veth1_macvtap: entered promiscuous mode [ 260.596198][T12253] ------------[ cut here ]------------ [ 260.601873][T12253] WARNING: CPU: 0 PID: 12253 at mm/page_alloc.c:5157 __alloc_pages_noprof+0xe4/0x6c0 [ 260.611409][T12253] Modules linked in: [ 260.615327][T12253] CPU: 0 UID: 0 PID: 12253 Comm: syz.1.3612 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 260.628957][T12253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.639561][T12253] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 260.645553][T12253] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d b4 7a ee 05 00 0f 85 c4 00 00 00 c6 05 a7 7a ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 260.665330][T12253] RSP: 0018:ffffc900042775a0 EFLAGS: 00010246 [ 260.671606][T12253] RAX: 0000000000000000 RBX: 1ffff9200084eeb8 RCX: 0000000000000000 [ 260.679812][T12253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004277648 [ 260.687946][T12253] RBP: ffffc900042776c8 R08: ffffc90004277647 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 260.696042][T12253] R10: ffffc90004277630 R11: fffff5200084eec9 R12: ffffc900042775e0 [ 260.704054][T12253] R13: 0000000000000015 R14: dffffc0000000000 R15: 0000000000000000 [ 260.712186][T12253] FS: 00007f149f3546c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 260.721208][T12253] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.727911][T12253] CR2: 0000200000006000 CR3: 000000012f5ce000 CR4: 00000000003526b0 [ 260.735993][T12253] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000800 [ 260.744118][T12253] DR3: 0000000100000001 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 260.752325][T12253] Call Trace: [ 260.756340][T12253] [ 260.759306][T12253] ? do_syscall_64+0x58/0xf0 [ 260.764067][T12253] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 260.769954][T12253] ? hashtab_init+0xdb/0x1f0 [ 260.774658][T12253] ___kmalloc_large_node+0x9c/0x1d0 [ 260.779979][T12253] ? hashtab_init+0xdb/0x1f0 [ 260.784700][T12253] __kmalloc_large_node_noprof+0x1e/0xe0 [ 260.790365][T12253] ? hashtab_init+0xdb/0x1f0 [ 260.795051][T12253] __kmalloc_noprof+0x26d/0x450 [ 260.800015][T12253] hashtab_init+0xdb/0x1f0 [ 260.804502][T12253] ? common_read+0x16d/0x480 [ 260.809093][T12253] symtab_init+0x44/0x70 [ 260.813383][T12253] common_read+0x1de/0x480 [ 260.817814][T12253] ? __cfi_common_read+0x10/0x10 [ 260.822770][T12253] ? hashtab_init+0x105/0x1f0 [ 260.827549][T12253] policydb_read+0xaa8/0x28c0 [ 260.832333][T12253] ? kasan_save_alloc_info+0x40/0x50 [ 260.837650][T12253] ? __cfi_policydb_read+0x10/0x10 [ 260.842930][T12253] ? security_load_policy+0x128/0x12f0 [ 260.848462][T12253] security_load_policy+0x162/0x12f0 [ 260.853842][T12253] ? irqentry_exit+0x4a/0x60 [ 260.858461][T12253] ? exc_page_fault+0x66/0xc0 [ 260.863211][T12253] ? asm_exc_page_fault+0x2b/0x30 [ 260.868372][T12253] ? __cfi_security_load_policy+0x10/0x10 [ 260.874611][T12253] ? rep_movs_alternative+0x4a/0xa0 [ 260.879838][T12253] sel_write_load+0x298/0x5e0 [ 260.884708][T12253] ? futex_wait+0x288/0x540 [ 260.889240][T12253] ? __cfi_sel_write_load+0x10/0x10 [ 260.894618][T12253] ? __cfi_futex_wait+0x10/0x10 [ 260.899870][T12253] ? bpf_lsm_file_permission+0xd/0x20 [ 260.905347][T12253] ? __cfi_sel_write_load+0x10/0x10 [ 260.910606][T12253] vfs_write+0x3c0/0xe80 [ 260.914970][T12253] ? __cfi_vfs_write+0x10/0x10 [ 260.919780][T12253] ? __kasan_check_write+0x18/0x20 [ 260.925017][T12253] ? mutex_lock+0x92/0x1c0 [ 260.929489][T12253] ? __cfi_mutex_lock+0x10/0x10 [ 260.934626][T12253] ? __fget_files+0x2c5/0x340 [ 260.939363][T12253] ksys_write+0x141/0x250 [ 260.943724][T12253] ? xfd_validate_state+0x68/0x150 [ 260.949011][T12253] ? __cfi_ksys_write+0x10/0x10 [ 260.954126][T12253] ? __kasan_check_write+0x18/0x20 [ 260.959255][T12253] ? fpregs_restore_userregs+0x11d/0x260 [ 260.965230][T12253] __x64_sys_write+0x7f/0x90 [ 260.969839][T12253] x64_sys_call+0x271c/0x2ee0 [ 260.974663][T12253] do_syscall_64+0x58/0xf0 [ 260.979081][T12253] ? clear_bhb_loop+0x35/0x90 [ 260.983907][T12253] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 260.989799][T12253] RIP: 0033:0x7f149e58e929 [ 260.994343][T12253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.014431][T12253] RSP: 002b:00007f149f354038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 261.022904][T12253] RAX: ffffffffffffffda RBX: 00007f149e7b5fa0 RCX: 00007f149e58e929 [ 261.030931][T12253] RDX: 000000000000606c RSI: 0000200000000000 RDI: 0000000000000006 [ 261.039109][T12253] RBP: 00007f149e610b39 R08: 0000000000000000 R09: 0000000000000000 [ 261.047106][T12253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.055127][T12253] R13: 0000000000000000 R14: 00007f149e7b5fa0 R15: 00007ffd7821dc48 [ 261.063254][T12253] [ 261.066284][T12253] ---[ end trace 0000000000000000 ]--- [ 261.079429][T12253] SELinux: failed to load policy [ 263.761411][ T455] bridge_slave_1: left allmulticast mode [ 263.767158][ T455] bridge_slave_1: left promiscuous mode [ 263.772795][ T455] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.811842][ T455] bridge_slave_0: left allmulticast mode [ 263.817494][ T455] bridge_slave_0: left promiscuous mode [ 263.823198][ T455] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.891497][ T455] bridge_slave_1: left allmulticast mode [ 263.897150][ T455] bridge_slave_1: left promiscuous mode [ 263.902916][ T455] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.951342][ T455] bridge_slave_0: left allmulticast mode [ 263.956987][ T455] bridge_slave_0: left promiscuous mode [ 263.962645][ T455] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.981441][ T455] bridge_slave_1: left allmulticast mode [ 263.987278][ T455] bridge_slave_1: left promiscuous mode [ 263.992948][ T455] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.011350][ T455] bridge_slave_0: left allmulticast mode [ 264.017050][ T455] bridge_slave_0: left promiscuous mode [ 264.022831][ T455] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.041398][ T455] bridge_slave_1: left allmulticast mode [ 264.047043][ T455] bridge_slave_1: left promiscuous mode [ 264.052721][ T455] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.071351][ T455] bridge_slave_0: left allmulticast mode [ 264.077009][ T455] bridge_slave_0: left promiscuous mode [ 264.082685][ T455] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.161370][ T455] veth1_macvtap: left promiscuous mode [ 265.166871][ T455] veth0_vlan: left promiscuous mode [ 265.231209][ T455] veth1_macvtap: left promiscuous mode [ 265.236729][ T455] veth0_vlan: left promiscuous mode [ 265.261176][ T455] veth1_macvtap: left promiscuous mode [ 265.266786][ T455] veth0_vlan: left promiscuous mode [ 265.331229][ T455] veth1_macvtap: left promiscuous mode [ 265.336828][ T455] veth0_vlan: left promiscuous mode