last executing test programs: 1m36.302558015s ago: executing program 2 (id=1122): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)={[], [{@context={'context', 0x3d, 'system_u'}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000d, 0x32, 0xffffffffffffffff, 0x5e388000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0x8}, {0x6}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000019000048000000000000000800000000000000192c8666a8"]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000140)={0x10020, 0x3, 0x0, 0x2471}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x203, 0xe, 0x33327804, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x4, 0x2004cf, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x200], 0x10000, 0x304212}) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000100)={0x5, 0x23000000}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000b3000041000000000000000003000000"]) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) 1m36.247931356s ago: executing program 2 (id=1123): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x470742, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 1m36.209369447s ago: executing program 2 (id=1124): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x584, 0x0, 0x8}]}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) 1m36.046683549s ago: executing program 2 (id=1126): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x802, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0x1000, 0xeeef0000, 0xdddd0000, 0xb000], 0xdb, 0xc}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x80, 0xa, 0xb9, 0x1, 0x11, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x8000000000000006, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0xfffffffffffffffc, 0x0, 0x68ff, 0x9, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r10, 0x0) close(r10) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r11, 0xc008aec1, &(0x7f0000000d00)={"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"}) mmap(&(0x7f0000a5a000/0x1000)=nil, 0x1000, 0x0, 0x13, r9, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r7, 0x0) 1m35.680667575s ago: executing program 2 (id=1129): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x8002, 0x10) write$cgroup_pid(r2, 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000000)={0x10000, 0x140, 0x3c0, 0x0}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xa4b, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) close(r1) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1m35.440396519s ago: executing program 2 (id=1133): mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x9a0000, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x103183, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) (async) close(r1) (async) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$TUNGETDEVNETNS(r1, 0xff06, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600), 0x82811, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xffff0104, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x5002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0x9}, {0x0, 0x0, 0x0, 0x82}, {0x6000}, {0x1, 0xfffe}, 0x40000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, [0x0, 0x0, 0x0, 0x3]}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000300)={'veth1_virt_wifi\x00'}) (async) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000140)={0x3, 0x1, 0x4, 0xff, 0x6, 0x0, [{0x1, 0x7, 0x9, '\x00', 0x400}, {0xc94f, 0x40, 0x84, '\x00', 0x4}, {0x7ff, 0x9, 0x6, '\x00', 0x2400}, {0x2, 0x9, 0x100, '\x00', 0x2}, {0xc9, 0x8, 0x6, '\x00', 0x2080}, {0xb, 0xfffffffffffffffa, 0x4255, '\x00', 0x1200}]}) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f00000002c0)=""/10) (async) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) (async) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000100)) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x402, 0x0) 1m20.407003827s ago: executing program 32 (id=1133): mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x9a0000, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x103183, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) (async) close(r1) (async) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$TUNGETDEVNETNS(r1, 0xff06, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600), 0x82811, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xffff0104, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x5002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0x9}, {0x0, 0x0, 0x0, 0x82}, {0x6000}, {0x1, 0xfffe}, 0x40000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, [0x0, 0x0, 0x0, 0x3]}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000300)={'veth1_virt_wifi\x00'}) (async) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000140)={0x3, 0x1, 0x4, 0xff, 0x6, 0x0, [{0x1, 0x7, 0x9, '\x00', 0x400}, {0xc94f, 0x40, 0x84, '\x00', 0x4}, {0x7ff, 0x9, 0x6, '\x00', 0x2400}, {0x2, 0x9, 0x100, '\x00', 0x2}, {0xc9, 0x8, 0x6, '\x00', 0x2080}, {0xb, 0xfffffffffffffffa, 0x4255, '\x00', 0x1200}]}) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f00000002c0)=""/10) (async) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) (async) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000100)) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x402, 0x0) 1m2.283408384s ago: executing program 3 (id=1483): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000400)=0x1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=']) 1m1.976223089s ago: executing program 3 (id=1489): read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x100000, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=@other={'decodes', ' ', 'io+mem'}, 0xf) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x7) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000040)={[], [{@smackfsroot={'smackfsroot', 0x3d, '+#)-'}}]}) 1m1.840664951s ago: executing program 3 (id=1492): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f00000002c0)={0xed, 0x0, 0x40}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000002300)={@local}) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0x80}}) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, 0x1, 0x7, 0x4}, {0x2000, 0x5000, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0xc, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x5000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x2, 0x0, 0x0, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2}, {0x8080000, 0x3000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1a, 0x26, 0x0, 0xfd}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x8080000, 0x70, 0x0, 0xdd00, 0x5000, [0xfffffffffffffffc, 0x0, 0x1]}) ioctl$KVM_TRANSLATE(r9, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x87000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xfffffffe) prctl$PR_SET_VMA(0xd, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = ioctl$TUNGETDEVNETNS(r10, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r11, 0x8004b708, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) 1m1.395661337s ago: executing program 3 (id=1499): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x9, r0, 'id1\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r5, 0x4068aea3, &(0x7f0000000240)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1m1.217687611s ago: executing program 3 (id=1501): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x6) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x4) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x868]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x8a}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x80086601, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x61, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b2"}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x200) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4030ae7b, &(0x7f0000000080)={0xfffffffffffff000, 0x5, 0x1, 0x7, 0x3}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1m0.282036045s ago: executing program 3 (id=1516): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000020c0), 0xc0101, 0x0) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000830000c028"]) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x24240, 0x20) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009700)='/sys/kernel/oops_count', 0x40, 0x2) read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x28f}]}) (async, rerun: 32) ioctl$BLKRRPART(r0, 0x125f, 0x0) (rerun: 32) 45.128256135s ago: executing program 33 (id=1516): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000020c0), 0xc0101, 0x0) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000830000c028"]) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x24240, 0x20) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009700)='/sys/kernel/oops_count', 0x40, 0x2) read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x28f}]}) (async, rerun: 32) ioctl$BLKRRPART(r0, 0x125f, 0x0) (rerun: 32) 30.784763883s ago: executing program 5 (id=1832): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) (async) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa, 0x0, 0x32}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 30.616459015s ago: executing program 5 (id=1834): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x19) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x65, 0x0, &(0x7f0000000140)="6efa86ba44c4dcef07b59db7e9a27f48a6e930da91c08c993e71a416eb2235d1314cf41411de9aa874429c871656ff38656d42c237a569b22dc9923150d6eb5b381125c2173cdb022eb5d8fc7a7df730ad34e08a536eaca88d851d6505f7b2b6831911631a"}) 30.385018229s ago: executing program 5 (id=1837): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffa) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2011) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000000)=""/188, 0xbc) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r3, &(0x7f00000004c0)=""/92, 0x5c) 30.180447062s ago: executing program 5 (id=1839): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000880), 0x12) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x18, 0x0, &(0x7f0000000040)=[@enter_looper, @acquire_done={0x40106309, 0x3}], 0x50, 0x0, &(0x7f00000002c0)="8a3e4b14485bef8901593175bfe04ac0baae7c5651ec6005649a06817a9203cff0f36f848684f4120d8c0faf025780d0819e642ae6cc84fec79002d8167fe3494aac7fd28e23c066793738f2fe6defcb"}) 30.096528083s ago: executing program 5 (id=1842): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x8000000, 0xe0000, 0x9, 0x3, 0x0, [{0x2, 0x3, 0x5, '\x00', 0x7}, {0xd, 0x7, 0x96, '\x00', 0x3}, {0xff, 0xf2, 0x3, '\x00', 0x5}, {0x17, 0xf8, 0x4, '\x00', 0xf4}, {0x5, 0xd, 0x4, '\x00', 0x9}, {0x5b, 0xc, 0xb, '\x00', 0x8}, {0xb0, 0x1, 0x3, '\x00', 0x1}, {0x7, 0x5, 0x93, '\x00', 0xfd}, {0x1, 0x1, 0x5}, {0x75, 0x81, 0xd, '\x00', 0x7}, {0x0, 0x7, 0xb, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0x9}, {0x2, 0x26, 0x7b, '\x00', 0xb}, {0xb, 0x6, 0x3}, {0x5, 0x10, 0x22, '\x00', 0xc}, {0xe, 0x1, 0x8, '\x00', 0x82}, {0x5, 0x2, 0xa6, '\x00', 0x9}, {0xf, 0xd, 0x9, '\x00', 0x68}, {0x8, 0x5, 0xf2, '\x00', 0x1}, {0x5, 0x8, 0x1, '\x00', 0x3}, {0xc, 0x7, 0x0, '\x00', 0x7}, {0x6, 0xa1, 0x4}, {0xf9, 0x70, 0xe, '\x00', 0x1c}, {0x76, 0x1, 0xff, '\x00', 0x10}]}}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x0, @ioapic={0x100010000, 0x1, 0x0, 0x0, 0x0, [{0x6, 0x7, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x5, 0x6, 0x3, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x6}, {0x94, 0x5, 0x9, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x0, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xe}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0xff, 0xe2, '\x00', 0x6}, {0xf9, 0xd, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x6b35e9d94325c672, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(r7, &(0x7f0000000080)={0x2020}, 0x2020) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) openat(r2, &(0x7f00000020c0)='./cgroup/cgroup.procs\x00', 0x400000, 0x70) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 29.809118768s ago: executing program 5 (id=1846): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 14.788347206s ago: executing program 34 (id=1846): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 1.667706933s ago: executing program 4 (id=2172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"]) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_XSAVE(r6, 0x5000aea5, &(0x7f0000000b00)={[0x6, 0x109e, 0x480, 0xfffffff7, 0x0, 0x9, 0x8, 0x10, 0x4, 0x99d5, 0x280000, 0x562, 0x8, 0x7, 0x5, 0x10001, 0x100, 0x7, 0x0, 0x9, 0xe, 0x72ae465f, 0x7, 0xff, 0xfffffffd, 0xffffffff, 0x7, 0x9, 0x7f, 0xffffff4d, 0x31, 0x200, 0xd, 0x101, 0x8, 0x5, 0x401, 0xb, 0x101, 0x3, 0x0, 0x7, 0x8, 0x7, 0x3, 0x4, 0x200, 0x200, 0x2, 0x3, 0x81, 0x799f8230, 0x4, 0xfff, 0x8d4, 0x6, 0x30, 0x4, 0x10001, 0x200, 0x200, 0x3ff, 0x3, 0x8001, 0x0, 0x366d, 0x0, 0x0, 0x6, 0x5, 0x2, 0xfffffb68, 0x8, 0x4, 0x5, 0x8, 0xf88f, 0xf46c, 0xe, 0x400, 0x5, 0x9, 0x9, 0x3, 0xa64, 0x8, 0x4, 0x9f, 0x5, 0x0, 0x7, 0x40, 0x2, 0x4, 0x1ff, 0x6, 0x2, 0x7, 0x1, 0x5, 0x6, 0xec1, 0x10, 0x9, 0x8, 0xf716, 0x9, 0x101, 0x2, 0x2, 0x6f, 0x1, 0x70000000, 0x0, 0xc, 0x3, 0x7ff, 0x401, 0x8, 0xffffff00, 0xd2f, 0x6, 0xfffffffb, 0x10000, 0xffff04e6, 0xda29, 0x2, 0x8, 0x7, 0x6, 0x2, 0x7f, 0x9, 0x8, 0x2a8c, 0x9, 0x9, 0x6, 0x7, 0x9d, 0x6, 0xd, 0x200, 0x8000, 0x1, 0x6, 0x4, 0x4, 0x8, 0x1, 0x4, 0x8, 0xce, 0xcb8c, 0x80000001, 0x1, 0xdd1, 0x2, 0x7, 0x2, 0x8000, 0x8, 0x6f9, 0xe1f2, 0x8, 0x9, 0x8, 0x6c, 0x5, 0xfffffffb, 0x7, 0x5, 0x200, 0x0, 0x49a7, 0x6, 0x9, 0x8, 0x6, 0x3, 0x7fff, 0x4, 0x8, 0xc, 0x5, 0xc, 0x7, 0x2, 0x0, 0x5, 0x1, 0x1, 0x1000, 0xc2f, 0x3ff, 0xffffffff, 0xc2, 0x8, 0x6, 0x6, 0x5, 0x6, 0x10000, 0x8, 0x4, 0x5, 0xfffffffb, 0x9, 0x4, 0xff, 0x4, 0x8000, 0xffff, 0x6, 0x400, 0xf8d, 0x400, 0x1, 0x0, 0x5, 0x47c, 0x10, 0x2, 0x5, 0x3, 0x7, 0x8, 0xec41, 0x6, 0x6c4, 0xd62, 0xa89346f, 0x1, 0x8475, 0x3c, 0x40, 0xc1d, 0xb395, 0xb7e, 0x3, 0x9, 0xcc, 0x6, 0x5, 0xffffff1b, 0x5, 0x1000, 0x0, 0x4, 0x95, 0xb, 0xe71, 0x5, 0x8d0, 0xe678, 0x7fffffff, 0x14b8b8c6, 0x0, 0x6, 0x5, 0x2610d6ef, 0x4, 0x8, 0x3, 0x0, 0xfffffff7, 0x5, 0x1, 0x7f, 0x7fff, 0xffffffff, 0x4, 0xffff767b, 0x7, 0x7, 0x8, 0x5, 0x0, 0x2392, 0x7f, 0x0, 0x2, 0x1000, 0x650, 0x5, 0x9, 0xda, 0x6, 0x9, 0xfffffff2, 0x4, 0x5, 0x8, 0x80000001, 0x3, 0x1, 0x5, 0x4, 0x4, 0x1, 0xdb5, 0x5, 0x4, 0x6f6c, 0x800, 0xe, 0x7, 0x3, 0x4, 0x7, 0x6, 0x1, 0x7, 0x7, 0xffffffff, 0x6, 0x3, 0x8, 0x8, 0x8e, 0x8, 0x3, 0x8, 0x5, 0x31a2, 0x0, 0x8, 0x1, 0x8, 0x9, 0x6, 0x7f, 0xb, 0x7, 0x7, 0x0, 0x8, 0x9, 0x0, 0xfffffff8, 0x6, 0xffffffff, 0x9a, 0x10001, 0xffff, 0x8000, 0x9, 0x5, 0xb18e, 0x9, 0x459, 0x1, 0x3c96, 0x800, 0x7, 0x7, 0x4, 0x7, 0x5, 0x6a65, 0x0, 0x1, 0x1, 0x401, 0x242b, 0x1, 0xfff, 0x5, 0x7, 0x4, 0xfffffff7, 0x300000, 0x200, 0x0, 0x3, 0x6, 0x9, 0x483, 0x7ff, 0x4b71, 0x2, 0xfe000000, 0x2, 0x2, 0x5, 0x0, 0x8c3, 0x51, 0xfff, 0x4, 0x6, 0x3, 0x7ff, 0xaea5, 0xfffffffd, 0x2, 0x2, 0x2, 0x7, 0x6, 0x8001, 0x101, 0xd, 0x6b000, 0x8, 0x255, 0x1, 0x9, 0x1, 0x4, 0x3, 0xe5c, 0xf6, 0x4, 0x80000001, 0x0, 0x5, 0x400, 0xffffffff, 0x1, 0x2, 0x5, 0x3, 0x1, 0x4, 0x7, 0x0, 0xef11, 0x2, 0x4, 0x7, 0x1, 0x6, 0x4, 0x5, 0x72, 0x800, 0x0, 0x0, 0x3, 0x7b0, 0x3, 0x101, 0x80000001, 0xfffffff7, 0x3, 0x7, 0x9, 0x8, 0x9, 0x0, 0x2c00000, 0x3ff, 0xde, 0x0, 0x317eea0e, 0x3, 0x80000001, 0x5, 0x1, 0x5, 0xfe, 0x10000, 0x8, 0x365, 0x81b, 0x9, 0x1, 0x9, 0x9, 0x3, 0xfff, 0x6, 0x8, 0x6, 0x3, 0x5, 0x400, 0x6981, 0x8, 0x2, 0x401, 0xfe000000, 0x3, 0x5954, 0x7af, 0x2, 0x4, 0x1ff, 0x8, 0xffffff1c, 0xb6f7, 0x7, 0x0, 0x6051, 0x4, 0xad, 0x4, 0x28, 0x2, 0x6, 0xe, 0xffff, 0xf, 0x9, 0x6, 0x7a6, 0xe, 0xb, 0x400, 0x6, 0x4, 0xa3, 0x4, 0x1, 0x6, 0x800, 0x2, 0x285, 0x2, 0x70, 0xad39, 0x6, 0x3, 0x3, 0x2, 0xd, 0x10001, 0x96e, 0x8, 0x578, 0x9, 0x8, 0xffff, 0x39d2, 0x1, 0x9, 0x9, 0x4, 0x9, 0x5, 0x2, 0x1, 0x0, 0x5, 0xfffffffd, 0x4f972ec5, 0x0, 0x4, 0x2, 0xc, 0xf, 0x80000000, 0x2, 0x5, 0x2, 0x78f, 0x200, 0x2, 0x3, 0x9, 0x7, 0x3f, 0x5, 0x8, 0x80000000, 0x7fffffff, 0x68b, 0x80000000, 0x4, 0xfffff001, 0x93, 0x8, 0x2, 0x3d, 0x3, 0x3, 0x8, 0x3, 0x8001, 0x8, 0x4000000, 0x6, 0x7, 0x4, 0xb73, 0x0, 0xbcfd, 0x1ff, 0xffffffe6, 0x3, 0x4, 0x7, 0x4b, 0x3, 0x9, 0xc000000, 0x2, 0x7, 0x1ff, 0x3, 0x2, 0x803, 0x8, 0x7, 0x0, 0xad, 0x2757, 0x2, 0x10001, 0xf11, 0x9, 0x7, 0x8, 0x8, 0x1, 0x8, 0x283, 0x5, 0xa, 0x3, 0x40, 0x200, 0x5, 0x3, 0x1ad6, 0xe80b, 0xffffffff, 0x0, 0x3, 0x5, 0x1, 0x5, 0x10, 0x1, 0x54, 0xffffffff, 0x8, 0x4, 0x73b9, 0x80, 0x0, 0x10001, 0x7, 0x7, 0x3, 0x7f, 0x1, 0x9, 0xffffffc0, 0x9, 0x2, 0x1, 0xfffeffff, 0x1, 0x3, 0x4ff, 0xc9b7, 0x7fff, 0x0, 0x80000000, 0x82be, 0x5e, 0x10001, 0x6, 0x7, 0xc, 0x0, 0x4, 0x4, 0x4, 0x4, 0x7, 0xf, 0x0, 0x6, 0x1, 0x8, 0x3, 0x9, 0x4, 0x7, 0x10, 0x400, 0x4, 0x6, 0xfffffff8, 0x7, 0x1, 0x6, 0x1, 0x563240ed, 0xaf4, 0x401, 0x7, 0xffffffff, 0x6, 0xfffffffa, 0x0, 0x100, 0xd6a7, 0x10001, 0x0, 0x3, 0x7, 0x1, 0x19a3, 0xbdc, 0x6, 0x3, 0x4, 0x3, 0xfffffc00, 0x6, 0x30b747e5, 0xf1af, 0x1, 0xfffffff8, 0x1, 0x4, 0xb, 0x2, 0xffffffc0, 0x81, 0x588, 0x8, 0xef6d, 0x9, 0x0, 0x7, 0x7c, 0x2, 0x6, 0xfffffffc, 0x1, 0xffffffc0, 0xbe83, 0xa8, 0xfcba, 0x10001, 0x6, 0x0, 0x3, 0x6, 0x401, 0x0, 0x2, 0xc, 0x1, 0xffff, 0x6, 0x0, 0xffff, 0x419f, 0x3, 0x0, 0x6, 0xc, 0xd6, 0x10a, 0x0, 0x2, 0x5, 0xffff, 0x7c9d, 0x1, 0x9, 0x0, 0x2, 0xfffffffd, 0x6000, 0x4, 0x0, 0x101, 0x762, 0x400, 0x39a0, 0xd1fa, 0x1, 0x10000, 0x8, 0x8, 0x80000000, 0x1000, 0xc1e5, 0xce59, 0xfff, 0x1, 0xbd, 0x1, 0x10, 0x2, 0x4, 0x3, 0x9, 0xffffffc0, 0x10000, 0xab32, 0x9, 0x4, 0xffffffff, 0x8274, 0x1f0, 0x3, 0x2c3, 0x61, 0x5, 0x1ff, 0x3, 0x3, 0x401, 0x5, 0x80000001, 0xfffffff7, 0x1000, 0x1800, 0x651, 0x693b, 0x1, 0x80000001, 0x1, 0x2, 0x7f, 0x5, 0xfff, 0x48f, 0x2, 0x1000, 0x8, 0x0, 0x7, 0x9, 0x1, 0x7, 0xfffffffb, 0x10, 0x8, 0x7, 0x0, 0x8, 0x7, 0x8, 0x1, 0x9, 0xd, 0xfffffff8, 0x0, 0x5, 0x80000001, 0x6, 0x7, 0x2, 0x7ce4, 0x6, 0x4, 0x2, 0x4e, 0x7f02, 0xffff, 0x5, 0x70, 0x20e1, 0x200, 0x6, 0x4, 0xd088, 0x800000, 0x6, 0x7ff, 0x8, 0x2, 0x5, 0x10001, 0x287, 0x8, 0x4, 0x7, 0x6, 0x0, 0x7f, 0x1, 0x5f6e, 0x3, 0x9, 0x8, 0x1, 0x9, 0x7c7, 0x3, 0x4, 0xfffffffc, 0x7, 0x4, 0x2, 0x2, 0x1ac, 0x8, 0x101, 0x7ff, 0x10, 0x8, 0x8000, 0x6, 0x6d3, 0x8, 0x9, 0x0, 0x4, 0x1, 0x4, 0x2, 0x2, 0x9693, 0x5, 0x9, 0x1, 0x8, 0x8, 0x0, 0x3, 0x1, 0x0, 0x7, 0x9140, 0x0, 0xfffffff8, 0x6, 0x3, 0x8, 0x1, 0x9, 0x0, 0x8, 0xfd000, 0x200, 0x40, 0x4, 0x8000, 0x2, 0x926096c, 0x9, 0xd, 0x0, 0xaeb, 0xa20, 0x8, 0x1ff, 0xfffffffe, 0x39b, 0x4, 0x0, 0x5, 0x2, 0x5, 0x5, 0x2, 0xa, 0x5, 0x2dcc, 0xfe, 0x8000, 0x5, 0x800, 0x8, 0x8000, 0x0, 0x75ff, 0x1000, 0x9, 0x6, 0x1, 0xaf, 0x8, 0x7, 0x3, 0x8, 0x2b5ab7ea, 0x0, 0x1, 0x2, 0x7, 0xfffffffb, 0x2, 0x0, 0x7ff, 0xec, 0x6, 0x3ff, 0x9, 0x5, 0x9, 0x6, 0x1, 0x2, 0xfffffff7, 0x5, 0x701, 0x9, 0xb05, 0x3, 0x3ff, 0x0, 0x9, 0x8, 0x4, 0x20, 0x3, 0x9, 0x26ec, 0x40, 0x6, 0x267, 0x80000001, 0xff, 0x9, 0x1, 0x8, 0x100, 0x1ff, 0x8, 0xd, 0x7, 0x7, 0x7]}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000400)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5422) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0xc0200, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000080)=0x2) (async) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x7f) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) read$FUSE(r9, &(0x7f0000000e40)={0x2020}, 0x2020) (async) r10 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r11, &(0x7f0000000080)='syz0\x00', 0x1ff) (async) r12 = openat$cgroup(r11, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r12, &(0x7f0000000040), 0x2, 0x0) 1.372425008s ago: executing program 4 (id=2176): ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) mmap(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x3000001, 0x22052, 0xffffffffffffffff, 0x6000) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000004c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'veth0\x00', @random='Ti\x00'}) 1.24012792s ago: executing program 4 (id=2179): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000080)={0x3, 0x8}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x1802, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000000c0)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0x3, 0x8, 0x6}) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000180)={0x16}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000100)={{r2}, {@void, @max}}) 1.190907101s ago: executing program 4 (id=2180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x490, 0x0, 0x100000005}]}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x1002, 0x0) 1.084196212s ago: executing program 4 (id=2181): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001200), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001240)={'syz1\x00', {0x2, 0x1, 0x4, 0x1}, 0x56, [0xd, 0x6, 0x8, 0xfff, 0x9, 0x5, 0x3ff, 0x8000, 0xc, 0x9, 0x6, 0x1, 0x9, 0xb, 0x800, 0x1, 0x1000, 0x37, 0xfffffffa, 0x3, 0x7, 0x6, 0x4, 0x9, 0x1ff, 0xda73, 0x2, 0x6f4, 0x80000000, 0x1, 0x0, 0x1, 0xe, 0xd, 0xb6b5, 0x5, 0x7fffffff, 0x0, 0x8001, 0x80000000, 0x1, 0x4, 0x0, 0x3, 0x5, 0x7, 0x798f, 0x1, 0xfffffff8, 0x0, 0x8, 0x7ab0, 0x9, 0xb29e, 0xfc000000, 0x1, 0x1, 0x40, 0x2, 0x8, 0x10000, 0x804, 0x0, 0x6], [0x7, 0x3, 0x5, 0x6, 0x9, 0x7, 0x670aac11, 0xb, 0x6, 0x4e0, 0x5, 0x5fa5, 0xbf5f, 0x4, 0x3, 0x6, 0xfffff001, 0x3, 0xe0, 0x4, 0x2, 0x5, 0x3, 0x5, 0xff, 0x1, 0x219e4f4e, 0xfffff001, 0x3201, 0x40, 0x6, 0x59, 0x7, 0x1dd3006c, 0x2, 0x6, 0x1, 0x6, 0x3ff, 0x81, 0xbf2, 0x7, 0x10000, 0x1, 0x2, 0xffffffff, 0xffc00000, 0x8, 0x4, 0x5, 0xb, 0xff, 0x9, 0x2, 0x80, 0xe3e, 0x7, 0xad00, 0x9, 0x4, 0x5a83, 0xffffffff, 0xd37c, 0x8001], [0x5, 0x3, 0xfffffb13, 0x40c0, 0xb, 0x29, 0x48000, 0x4, 0x6, 0x635, 0x7, 0xbc4a, 0x1, 0x40, 0x3d5, 0x1, 0x401, 0x1, 0xfffffa44, 0x7, 0x2e6e, 0x5, 0x7, 0x3c91, 0x1, 0x1, 0x0, 0x2, 0x2, 0x5, 0x1, 0x8, 0x0, 0x8, 0x8, 0x800, 0x80000001, 0x9, 0x6, 0x7, 0x3, 0x80000001, 0x7fff, 0x7ec05b7c, 0x6, 0x9, 0x7, 0xfffffffa, 0x6, 0xe14, 0xc, 0x101, 0x5, 0x40, 0x8, 0x2, 0x4, 0x340000, 0xa808, 0xfffffffa, 0x3, 0xd, 0x1, 0x3ff], [0x6, 0xa14bb488, 0xa2d, 0x2, 0x9, 0x1, 0x6, 0x3, 0x4, 0x7, 0x300000, 0x4656, 0x6, 0x3a98, 0x7, 0x9, 0x7, 0xfffffffb, 0x47bd, 0x0, 0x48000000, 0x3, 0x401, 0xbe0, 0x2, 0x7, 0x8, 0x1, 0x1, 0x376, 0xffffffff, 0x8001, 0x2, 0x4, 0x72, 0x3, 0x2e, 0x0, 0x5, 0x5d1922ce, 0xa, 0x81, 0x5, 0x100, 0x8, 0x6, 0x6, 0xb87d, 0x6, 0x3, 0x5, 0x6, 0x5, 0x4, 0x2, 0x45, 0x2, 0x7, 0x4, 0x4, 0xc, 0xf203, 0xfffffff9, 0x16d5c38d]}, 0x45c) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c005968e0cb6a2529e66765e3a32b882aceb4abc78dfed2791c9726667668c885345f106e4d"]) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000140)={0x0, 0x4, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000380)=[@increfs_done, @register_looper, @release], 0x0, 0x0, 0x0}) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000000)=0x9) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x3}) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x486, 0x0, 0x6}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x5b, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b418709844294623"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 981.945874ms ago: executing program 0 (id=2184): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000002080)={0x3, 0xffffffffffffffff, 0x1}) ioctl$FIONCLEX(r4, 0x5450) (async) write$cgroup_int(r0, &(0x7f00000020c0)=0xe2d, 0x12) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000002100)={{0xb02b, 0x3}, 0x100, './file0\x00'}) (async) write$FUSE_IOCTL(r0, &(0x7f0000002240)={0x20, 0x0, r1, {0x9, 0x4, 0x9, 0x53c6}}, 0x20) write$FUSE_GETXATTR(r0, &(0x7f0000002280)={0x18, 0x0, 0x0, {0x1}}, 0x18) (async) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f00000022c0)) (async) write$UHID_INPUT(r0, &(0x7f0000002300)={0x8, {"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", 0x1000}}, 0x1006) (async) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000003340), 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000003380)={'syz0\x00', {0x7, 0x7, 0x6, 0x8}, 0x20, [0x400, 0x15c, 0x7, 0x13, 0x7b36eee6, 0x5e, 0x1, 0x55, 0x5, 0x2, 0x9, 0x9, 0x6e, 0xdf2, 0x3, 0x7, 0x8, 0x0, 0x56, 0xff800000, 0x0, 0x1, 0x2, 0x0, 0x4, 0x6, 0xffff4994, 0x3, 0x7fff, 0x9, 0x8, 0xffffffff, 0x9, 0xff, 0x9, 0x6, 0x5, 0xb, 0x5, 0xca8, 0x10, 0xc, 0x100, 0x7, 0xffffffff, 0x0, 0x2, 0x9, 0x7, 0x611, 0x845, 0x7, 0x2, 0xacec, 0x9, 0xffff0000, 0x3, 0x3, 0x3, 0x1000, 0x5, 0xe8f8, 0x80], [0xa, 0x80000001, 0x10, 0xa, 0x2ee6, 0x3, 0x6, 0x5, 0x3, 0x319b, 0x100, 0x4000000, 0xb, 0x0, 0x3, 0x80000000, 0x10000, 0x1, 0x5, 0x101, 0x5, 0x3, 0x0, 0x80000000, 0x1, 0x4, 0x0, 0x5535, 0xfffffffa, 0xe, 0xd, 0xa, 0x8, 0xbd11e7e, 0x9, 0x8, 0x8, 0x80, 0x0, 0x9, 0x4, 0x7, 0x3, 0x5, 0xfffffffe, 0x1, 0x0, 0x5, 0xb46, 0x5, 0x9, 0x3, 0x80, 0x1458, 0x3, 0xe, 0xc, 0x8, 0x1, 0x7, 0x1, 0x0, 0xffffffff, 0x8], [0x7fff, 0x7f, 0x4, 0x3ff, 0x8000, 0x7fffffff, 0x3, 0x736, 0x7, 0x3, 0x2, 0x401, 0x100, 0x73, 0x4ca, 0x4, 0x12000000, 0x60d3, 0x3, 0xc8c4, 0xfffffffb, 0x8001, 0xff, 0x1, 0x48ff, 0x6, 0x5, 0xdf, 0x5, 0xffffffff, 0xfffffffc, 0x59df670, 0x3, 0x1, 0x0, 0xa9f8, 0xffffff01, 0x1, 0xf0, 0xcc40, 0xa27, 0x0, 0x0, 0x347, 0x178, 0x4, 0x3ff, 0x3, 0xf94, 0xbe0b, 0x2, 0x796, 0x8d, 0x1, 0x9, 0x4, 0x2, 0xb1, 0x5, 0x3, 0x1, 0x800, 0x4d701d5c, 0x2], [0x8, 0x7, 0x7, 0xfe17, 0x1, 0x3, 0xff, 0x8, 0x7, 0x7, 0x1, 0x40000, 0x4, 0xe, 0x7, 0x3, 0x1, 0x4000, 0x2, 0x1, 0x8000, 0x2, 0x314d, 0x2, 0x8, 0x1, 0x6, 0x6, 0x0, 0x2, 0x3, 0x4, 0x7fffffff, 0x6, 0x5, 0x60aa1a21, 0x5f28, 0x0, 0xffffffff, 0x5, 0x3ff, 0x4, 0x3, 0xa, 0xef74, 0x9, 0x5, 0x80, 0x2, 0x0, 0x5, 0x5, 0x6, 0x8, 0x80000000, 0x9, 0x81, 0x1, 0x5, 0x800, 0x2, 0xcc, 0x0, 0xe16]}, 0x45c) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000003800)='/proc/sysvipc/sem\x00', 0x0, 0x0) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003840), 0x2, 0x0) write$FUSE_ATTR(r7, &(0x7f0000003880)={0x78, 0x0, r1, {0x9, 0x4, 0x0, {0x1, 0xfffffffffffff86a, 0xb647, 0x6, 0x9, 0x5, 0x1, 0xff, 0x3, 0xa000, 0xffff, r2, r3, 0x4, 0x7}}}, 0x78) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0x0) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003900), 0x2, 0x0) read$FUSE(r8, &(0x7f0000003940)={0x2020, 0x0, 0x0}, 0x2020) (async) ioctl$BTRFS_IOC_RM_DEV(r7, 0x5000940b, &(0x7f0000005980)={{r6}, "f984d0d95877ef8bbc445635ca1905a5e8026dee6955063233b50b6d4d006d0cf453798f459d1d59bd73e1cf92d92176ad0884d568fe0a7e66e28b2e2de95ab73000c6af0df68c1d08cfa52e4fd28d6ef64b06279e7126c07b0952bb3fe3b4bda0a43b3075f985c37f15d88904581b7d9da2e2fe16f780e43525203dce46a8ba848e27bb1e3c774c1936f4e5f2f1ef1cdd92af5944da5d006add2f887180118e6dfa83789a2b20c0d18935062d69049f99dba63d7bb88ac579eab6e716ef7e73cc60277cecd21976cabc71f421c7367d2bd87b4c38ac7809598b70832755fa69b58c8afe80a4b5a9237fc68a2d6dedd2f29bde606f1d0e0b1f266778747d4f073eabaa73709bbfc64d715fdc3d26ecc2bca89c72f8fbd5eef9b62c5a5a28d27612f8e50c699ba5b0c1c6647c00163c86c786652c6394447c54b81ef3fd84fea7a112c1d5c72586f2a895552bbd21ea5fcff7c805cd7f0591d90efe7140cc906035cee9debab08ee2da1739b82b82b023baa15c93aa6fb6751e8d64f30a2121f2bf181396cde4d9ba3324434f5b1ba1f571de5834d375e42a10d8def0241ad1dae993eaca480dada0d6cfb95084ca438f8e945e94d73e155decb1bb2a0c690dc98bf62a4858204a2d6f48005c4dc3e41dd92219e480b4042ab370ee1c4476d6be973eb12095a5da6797af39b766793fc6a10faeff644a72704b88f57afb32735271245e473d5d0369ab12268de4b36869cc4ce9893f07b4889e63c79ae1cfaada06bce957109061091776eb7ab02eb1d8d7465b9cbf20c48b7cd2e38d4787b3070a8adb512fbaabb8c787290d3547ea3037f0970050daac3c239587e0199c63e4e39fd1217cbd0ac2d52f44c98a46717862a3bc5334c1e2c298e68487b8988fa5773330a230c8c973e8005df6cd2b97cefb44ed7c94d762409dbf537039b5d3d2f6388e652b5f92edfab6072dc2b188c826efbb883c6fce29aa288af9333987e434c9c4d48e5d019573c53abf8227e6aa6c6df5403fd8057f529086cfa2f57e69ab00de3721f7001e60a756e00d3393b4514698f5fbf3a54545c637aa377708acc02587492b850b43f9808f22e4ffd10c2e1861d900c8227d5362fa3d7c632635c9f4c9d65c597e7e451058e961174dd5b2810921038999bb9588fa12cfab9867656244db4174c9e80a425d11fb3559a5a3e9ea4a6f3dc6cbde2e009e8a854e29dce164089c10a1faae8372c506055f208c8011c91c52ab0478018a9ff25dbd847148af25eeda71a489fc63849df41e562bdc60943775451d2b07f45b7bccd338e0bd19b4a21bca0bd5f3eb11922415a2c9be3d5ce430f16cfbf92747fa5212be960fce7538ca52a840e3e1b57ce35c4286915c6f4444d22023d7b844e0a41aa6c37f04c324199339a495dfe2eb44ebf0480335b1ac052211f63e987afade0e7c483c11e102a9947c14ff16bb747b0796411fba5f8740e3f7f4b5ab9b8cf1c95c035860bafa4af591c654be47006180ff57e2d8498a618431ef332c9d6038d5e51464a29ec6ddf1316ace40608b0f713a761362a925b3e51571ffbd59436f88cbc9013028a872a772de05bbe451f3ee1b75c66ba31050983f5e761d5395b0df65dd76d722597d5cc37a637b3acda33694cacce46e46b365ed766c8aaa0c51fc29e0072e904fe22e0ca5551429a265fd0a2878bd6a8f4f58eea05dd304aef608f9419bdfba19eef3c69c40c2b28d6ccb7461536203371b8dea8fc56b994d0b89d476b7338d380db8bb2180ce8670777215eab0fc989b875931f8f7061898be17e128d66960103ff31dc7fd6c5a2c82a7346c03c54d51d0d23ea59ff84af4fc603b5f06f448bd89d656bd2f742ec3739b35caf9989f92ffc948214d24613d7eca2b003519f9418b7fe4d8451339d0f3ed272cad599e926c2237f7a17978d893bc325ffe5d8d2e31f7de960022a159147cb6e42bdb30f0caf0fad5d84238477728b80f3e9cc8fd8ecfde50b65f7f6ae38692e7e697dbacf338f14b74764be6650a9bf70fa726e3109c6f30d47d85df66f69f12cb529dcd15ae0d3ba5f39faff18fd9eb8c815a7a304906711223d9090d1695795364fb0dc4f26bc826dfb40f4af03dbc117951dda8bf16e7f24a098e6c62b4b1d74b6a037d2be4c215db4a5243af53d204659eb465932f24e409993dad60e1a066324e9101abef17ef4566ad3e413d443b79fe17a37913228654742e513fe7ccbc75388d90aaf92e757454d2dd195fb5cebcbdb826386dde002f10a6286f122f35e7c6ff649d752371c00d18df7035633d8e5b4726e837360e5deef4df2afd511a5de4cd1129ec93419baf9222717f0f44e5d67ae65bb64f9420429ac776809be888272981bfbe117c53c0b840c89bf68a855eb89d24a3c08cd4015a579f81af59b8cdd9c8250d6fed2dc1f56831c0a143f4fa1075888d12f68944929d0d049f573091aa1370a87c8f66b88ae973f40b5176be7969886dcf4461ac5845dfba09a180bf0542963682719c565a8a9643bbdf679b4d3189d039d73f7eb0504dd8cc906ef4ed0c53348cf8e8b78f45a6a27c7f214c3d84c8472fdaa1d3d279b3a391a73eb019a58e08d88d1fa280b726b59eff4aae46454bcb7afcfce4cc44f3030fb267574512583165e419c7cebd0a97e99995f805f28264738fccec90bf14dd38298ae02c1a648dd62f5852eb541a8a0346621a6ea468e61b086f5f222e583b79a7e478d5442e7c0374f55dc165f377b6b5e2cab2a865980425b624b3a568f5484f2818cadbd41c443904ac95168aff7f0ce6e7ffd1a7bb0d928e86d5711e15eb7c73e5c400705d66542fd0bcbb561d433b1f2e1f7af1c05edb0ed09c117b5bdaa22c22b1b25bd3e14590471262e1d6c9b1c764cfa1b2c60a00f77cbc502aa90e0e7c35b1fc3fc4752d76ee703f2939654debe8243712c546b0d1f2c5a5db20f5e07b2f1030f0916e0e8eb01ec2b670b50af91b59d9bb75fa2296ae0fe26bd78cea6a4e2b71290ee056474f287c98c60775501bbdd8417c156e7e57752f9eaafe1be726f9b1e29953b8f5792bd2fd5818b227a283a52d87142ba487a42a3ce747797ef0ab189e965c8f5d423d3b8d0d0a36659d9f0eb10c7d33849c86307723ac9d7be22f4f1e8909c433cf0424dacb32d7ab703eb3120b2aa228f88cc014dc19dcf1b4f928bd3bfda94121a947f12e5ad053eecb1fb6bff18697c998333bf106cc6348afde38033db29cc61165ac71e56000e5bfd6561b60b647eb9fb2e3912f827fa12df5ae22b337c1ece4ee11cbec03088caa398951bbfe72098b7e43c89196de95fc95df8f55ac685cdb3899e6716b9ef599989dbfd5cfbbe7f6fd7dc01135cafe5eef103de69779f038a62527b6f385b780b54163e51fd5f79f7555645776693e28110cce74fe260d9c1bd11a2a1f6724abc2f91173f58cc7f3de758e005762404712ae051433cd253ecadfdae69127c435f6e3199358742987303f9dc0718daaaff73f16f197fb525991c861bc429580d5b1b49118d5b0c48f180113f5bdb8d88aa340e93b83f4134da64a17227cf76058610ed9446d08634f01836ad53e492932f99cba33e7e4592e8caaf1a7e99715f115763c28f3d6506c795af5c10e78cbc094f39a556462dd0229b2639d16697e72d4b0bcb442be975e0304fc4860e8cd8c1a96efa6eacf2ec4e29c8704b0c4fd10ee553e6a637d056e579474899e8e50a8f46c7e056616cd49d7d44671d99a9a9f11b51a3edd133541624f3436322836b3bf7ab7905c0d4636c8afbab1425f8e753ad6537e46f0ebb3783cc7fba64e78549b53671f02a5aa8aaa4e2a99f973bc1a0287a828aae2dd07aaa16cc451df53355f05c470daa79ca51ff64712108d4b83f07355856fee7082f83cc67ca3698f31b74b084a0d4fdb968c711ac51c603c7eb72a5414df0b993e898d9191a06ca278f7f76a69a1af459fdd0f8da13bdbe837e3061aedb8836b8aa6af578f22cbc6650f9e7f015cc2db7446458dcd6d7fb77ed3a01d3d7e5def9d1605cc3f8fca62a72f10ae65f56367de4f315ecc9b4eb4ed43da88763db4686100d4a25367f974dc49f192f0072a8e6a1ac979d58a834d27fe10cc344d51b5802d6904c8f17ac78f4e336952ffcaf724522e3c383ebed3703d1035b5026599c47991405190d85b2355c92b00e7a3cc244d5ead329a9be711f15b2936dae99ca8076a606063f7d1ab2a406d3fa29b1a832dd257604a085f0877c3eae345d14612fa844ebd7c4fb55c90bee853ab7d8b8c541366e6e4c814522ac8befdd6d542ba0c1b7171285da74e2cbd3e88e2054a631e647423b865a2995b108ac3ddca3675de7acfff2ee68bdf77faf7b1e80addfc52076c9925a3a17719a1b755b12051f376593a4b8545095abfbcdba13292ab95e82e274837ef23c3b609541b6e59b36961ba079d16c480ae89fd0d6f5a97e2f40bf27b8ceb7dea8a52851a86c7579707c5108a884d5544e21a996531972a53df3291061a3170ed9c3f0ae8ab119628fb294f769c210c4bed062cb62085312a7b600196f1168de8497993348f7eec1123b8c2e84cc0ea44dc7e6f608f4da833747c4ddc39fbfd97e360457e4b53d7dd7dd362088a8981bc1f822e5446f18b070ec2b536901c0bc4f033e33d2f44973003c81b0e0d355d1cafa692e8c1a3815fed0837b46ae4e477aad5d5e6e96abf0df4048a29c5030b9a029e2080646a7a70566c258de08d7a6a7b53cd8067a0588dd53819841003b4d559c321ecc5a48db7de65901f56abc2c4c18413d0bbaccbd035237abfc8b5da681aba2172f5cab3f89078ef5b4279fefb64b4a4eac6f3c62188a462819d58b1e3fa28d2877648a2cbdd4c53def80704d4188238d6e38f86c869e4fed196e494171dacee70dd0f7875782c881c11ead5f98ec78ea3f4d4ed922a500355feeb8a6a313b0b833cba0c572cec329772d00e1242ec4ba4ade1032861dd8116cdb4c28ce616c9977e154afc30ac0f9b47495cf1f92fb8e456ac8b5081a00307c668782e19ba5ee424d211bb7d62764da8a81d6f0d0ad0c9c3aa3f29675768981862b68fa2ea4315888585433ac75ceb74ce631412c58904c635b18d6bdabae20a2f42d6fa3a3b212be42be4e1e99f0069d817070021811fc39ae747c3f9d60247b35210f07fc39cb2c0f72eee9a979e782d5874c42b45e44fc00129d60b47ef8a2904dd735eac55d2d0d0c2749010fca641f929fc9ce02839969a964237869e643e115f93d55eda08753b1cb1980c4708860757cd260109de37c2e1d732332532d66b83838bd5fefe8bb7e19d1ccb8f407bd514bdb755924b9351141c3c77bbe5c814f12cdb527d3bd834e35bf2e49b483da25fccf1fe75a8153e45257f22acbc53944af826e6d96987d607b18236f51d5451c1a8adefee6210e33473404ac20e93edfaed7d6b5f176bdeb4a6b534a29316fa9af0e7698f68606203169dd0e674f58a82964019d0f5523dc05021114bff15f33309de776b65c2142eadfcf7ac36c6f4c7ad920a43c244fad450faae41e72b2bfde6c566ac0772cdeb3378c35da184c85a13e4aba94fca305796fc99277c0493803040de13f52b5ea6fb8e1420ff5b1652ec1e88a5ccc64d79fbd356dd492602d3e3a7a61a87d446703f2b57d4fce3ee2212ee98f7d4922f535ac68e769f30d2cf3727769bf1c4ad4085009e68e7f15fd03d8f3ecbdbed5e2f616f1b70c2ea9c2d7465b2350cc2a19ec759c37b80dc55bf0cba61dc"}) (async) r10 = openat$cgroup_ro(r6, &(0x7f0000006980)='io.stat\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f00000069c0)=r10) (async) ioctl$KVM_INTERRUPT(r10, 0x4004ae86, &(0x7f0000006a00)=0xa1) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000006a40)=0x1) (async) ioctl$EXT4_IOC_CHECKPOINT(r10, 0x4004662b, &(0x7f0000006a80)=0x4) r11 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000006ac0), 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r11, 0x4010942a, &(0x7f0000006b00)={0x1, 0xf}) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000006b40)="a39ebbcde829dbee318db508b39063372b0598da209de872df00589b3251dea357bfdb8dba6c610af721103f8f9b8e7ef8176216746e3d4b40b30e1173d2d59d919c36f252a64359da7e03340ad7c9cf015557b24d57d3e8b7d6bb065ea1b6189fa30d452ee37c486cc28721d096fc44a9e11b5c6c1eb777627584a166e80e7faed4493002d23fbbab47de5236d3a1cc01883422e60dc44013460362e9a5d3cd0a0214d0aee785c7666538b71d224418b1b5bd7b3a52467cbefa83844c9961bd85a70ed20b38b65ef275feef3276c3143ff9b56fd2af2f28fee3f98212d2d3f46cc41bdfa998288ef8538853419748462c0639ecbadd5725ac21abf2d3dbe558") write$FUSE_POLL(r5, &(0x7f0000006c40)={0x18, 0xfffffffffffffffe, r9, {0x2}}, 0x18) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x1) 952.565845ms ago: executing program 6 (id=2185): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x1}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x400240, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x8008770b, 0x0) 884.822175ms ago: executing program 1 (id=2186): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x14c860, &(0x7f0000000000)) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r4, 0xff0a, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0xfff, 0xf, 0x81, 0x0, 0x5}) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x9) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000000), 0x90075, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES64, @ANYRESOCT=r6]) 823.286867ms ago: executing program 6 (id=2187): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) read(r0, &(0x7f0000000000)=""/61, 0x3d) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000000c0)={0x3, 0x9}) read(r0, &(0x7f0000000040)=""/106, 0x6a) 819.746377ms ago: executing program 0 (id=2188): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) close(0x3) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x400, 0x0) read(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0xfffff000) 714.780958ms ago: executing program 6 (id=2189): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x3f) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000480)=0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0xab) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x80000000086) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x18, 0x0, &(0x7f0000000380)=[@free_buffer={0x40086303, r2}, @dead_binder_done], 0x14, 0x0, &(0x7f0000000400)="6f5c6a869b1f0c28cd0083d6bcebcbec3cee2d2f"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a040, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1, 0x3}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 652.894299ms ago: executing program 1 (id=2190): openat$rnullb(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000), 0xa) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) read$FUSE(r1, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) write$vga_arbiter(r4, &(0x7f0000000080)=@unlock_all, 0xb) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000540)=0x10001) 651.88244ms ago: executing program 0 (id=2191): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECUREBITS(0x1c, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder0\x00', 0x804, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000640)={@fda={0x66646185, 0x3, 0x2, 0xf}, @flat=@handle={0x73682a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0xb, 0x1}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}, 0x400}], 0x52, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3a9ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd160663a64318bc432f82ad210e45df98d795a638632681df1cb222612051f6129"}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$TIOCSPGRP(r3, 0x5410, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) ioctl(r8, 0x8, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x0, 0x300000a, 0x12, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x40, 0xfffffffe, 0x1, 0x4, 0x0, 0xffffffffffffffff}) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) syz_clone3(&(0x7f0000000480)={0x1118300, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000002c0), {0x30}, &(0x7f0000000200)=""/64, 0x40, &(0x7f0000000340)=""/62, &(0x7f0000000440)=[r5, r9], 0x2, {r10}}, 0x58) r12 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x4a003, 0x0) ioctl$BLKGETDISKSEQ(r12, 0x80081280, &(0x7f0000000600)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000700)={@fda={0x66646185, 0x0, 0x0, 0x29}, @ptr={0x70742a85, 0x0, &(0x7f00000006c0)=""/62, 0x3e, 0x2}, @fda={0x66646185, 0x2, 0x1, 0x28}}, &(0x7f0000000780)={0x0, 0x20, 0xfffffffffffffd2d}}}], 0x0, 0x0, &(0x7f00000002c0)}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 581.22921ms ago: executing program 1 (id=2192): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async, rerun: 64) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) (async, rerun: 32) mmap(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x7000001, 0x22052, r0, 0x2000) (async, rerun: 32) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x464081, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f00000000c0)=""/122) (async) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003340), 0x2406c0, 0x0) read$FUSE(r4, 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000180)=0x4) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r9, 0x4068aea3, &(0x7f0000000240)) (async) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r7, 0x4068aea3, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) (async) r15 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r15, &(0x7f0000000200)={0x28, 0x2, 0x0, {0x0, 0x8000000000000001, 0xffffffffffffffff}}, 0x28) (async) ioctl$KVM_SET_CPUID2(r14, 0x4008ae90, 0x0) (async) ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x581, 0x0, 0xe}]}) (async) mmap$KVM_VCPU(&(0x7f0000798000/0x3000)=nil, r2, 0x1000004, 0x2010, r11, 0x0) 557.183471ms ago: executing program 6 (id=2193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000200)={'team0\x00'}) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x487002, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x122, 0x0, 0x390}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x4, 0x0, 0x26}, @flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 404.761513ms ago: executing program 0 (id=2194): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008002"]) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x6) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x4) write$uinput_user_dev(r3, &(0x7f00000001c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x419], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xca90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x868]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) (async) ioctl$TCXONC(r1, 0x540a, 0x5) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x88, 0x0, &(0x7f0000000180)=[@increfs_done={0x40106308, 0x1}, @increfs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @exit_looper, @dead_binder_done, @request_death={0x400c630e, 0x2}, @release={0x40046306, 0x1}], 0x50, 0x0, &(0x7f0000000380)="e1c194c07314197567609163a955a737cfdca424e4fc4ea388b431c78b32749341c73f7b7c51446e6bbf7f1de6a8ca5eb7372e3b24ef390ae15b6574683711fa3caff8f4fb3d0ca15b91526634d34eb3"}) 404.205503ms ago: executing program 1 (id=2195): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$binderfs(&(0x7f0000000080), &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000100), 0x149052, &(0x7f00000001c0)={[{@max={'max', 0x3d, 0x9}}, {@max={'max', 0x3d, 0x2}}, {@max={'max', 0x3d, 0x6}}, {@max={'max', 0x3d, 0x6}}, {@stats}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_user={'subj_user', 0x3d, '/dev/kvm\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@audit}]}) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x400, 0x0) read(0xffffffffffffffff, 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close_range(r0, r4, 0x0) (async) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000033c0), 0x2602, 0x0) write$cgroup_int(r6, &(0x7f0000000580)=0x1, 0x12) (async) close(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x1, 0x100000001, 0x800000000, 0x3b, 0x0, 0x7, 0x2004cc, 0x5, 0x5b, 0x0, 0xcc2f117, 0x3, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0xc0086}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0xfffff000) 242.803396ms ago: executing program 6 (id=2196): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000380)={r2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) close(r0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1f5) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x10}], 0x6b, 0x0, &(0x7f0000000280)="27340dbe79e8af432ff4fa2360c88df5a04d8e7eeb14f8d0fab09d900a6bb5bc0f07887e054cb7693ae1fb57bdf9173c6f2dd3f6284401f0a87fa2166027d3eda04b0809ab53399e60c5169690bcaa67b7123d2729933e63d78255ba0d073c4c19e166677001adbe306baa"}) 215.652596ms ago: executing program 1 (id=2197): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f0000000140), 0x1000, &(0x7f00000000c0)={[], [{@euid_eq={'euid', 0x3d, r0}}]}) 120.800028ms ago: executing program 0 (id=2198): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000040)) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000100)={0xeeee8000, 0x3000, 0x8}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000140)={0x7a8, 0x3, 0x606e, 0x8, 0xbd, "9768e0f53fdf36d5607eae4b0e7b1c1796832e", 0x1, 0x42da2156}) ioctl$FICLONE(r1, 0x40049409, r0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x8080, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000001c0)) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x2600, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x7) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000240)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = openat$cgroup(r1, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) ioctl$BLKGETDISKSEQ(r1, 0x80081280, &(0x7f0000000340)) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x366, 0x4a9d9715, 0x4, 0xffff, 0x5, 0x0, [{0x9, 0x7, 0x6, '\x00', 0x209}, {0x5, 0x2, 0x6, '\x00', 0x1}, {0x9, 0x9, 0x8000000000000001, '\x00', 0x2000}, {0x8, 0x22decbf0, 0x0, '\x00', 0x1880}, {0x1000, 0x972, 0xd10, '\x00', 0x1988}]}) ioctl$KVM_CAP_SYNC_REGS(r1, 0x4068aea3, &(0x7f00000004c0)) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000540)={0xa3, 0x0, 0x5, 0x1ff, 0xd4}) write$selinux_attr(r1, &(0x7f0000000580)='system_u:object_r:tmpfs_t:s0\x00', 0x1d) ioctl$int_out(r4, 0x0, &(0x7f00000005c0)) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000600)=0x7) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000640)={0x8, 0x5, 0x2, 0xc, 0x7a0f, 0x1}) prctl$PR_SET_ENDIAN(0x14, 0x0) write$cgroup_devices(r1, &(0x7f0000000680)={'a', ' *:* ', 'wm\x00'}, 0x9) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f00000006c0)=""/147) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) 83.645089ms ago: executing program 1 (id=2199): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0xdddd1000, 0x1, 0x202, 0x0, 0x0, [{0x0, 0x3, 0x4, '\x00', 0x6}, {0x5, 0xfc, 0xc0}, {0x2, 0xec, 0x8, '\x00', 0x6}, {0xf7, 0xbb, 0x0, '\x00', 0xff}, {0xf, 0x5, 0x9}, {0xff, 0x5, 0x3b, '\x00', 0x7e}, {0x60, 0xc7, 0xaa, '\x00', 0x6}, {0x4, 0x0, 0xe9, '\x00', 0x8}, {0x85, 0x1, 0x4, '\x00', 0xff}, {0xfc, 0xf8, 0x8, '\x00', 0x2}, {0x7, 0xf, 0x7, '\x00', 0x3}, {0x6, 0x7, 0xea, '\x00', 0x99}, {0x2, 0x0, 0x7, '\x00', 0x2}, {0x4, 0x8, 0x1, '\x00', 0x5}, {0x6a, 0x9, 0x0, '\x00', 0x7f}, {0x8, 0x8, 0x8, '\x00', 0x5}, {0xb, 0x41, 0xf, '\x00', 0x7}, {0x0, 0xfd, 0xff, '\x00', 0x3}, {0x0, 0x3, 0xf, '\x00', 0x7}, {0x5, 0x81, 0x6, '\x00', 0x1}, {0x7f, 0x7, 0x9, '\x00', 0x5}, {0xfe, 0x7, 0xe6, '\x00', 0x8}, {0x7, 0x5, 0x5, '\x00', 0x6}, {0xb, 0x5, 0x7f, '\x00', 0x7}]}}) (async) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x8, 0xc4c}) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) read(r2, &(0x7f0000000000)=""/61, 0x3d) (async) read(r2, &(0x7f0000000040)=""/106, 0x6a) 62.994389ms ago: executing program 0 (id=2200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000200)=ANY=[]) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x41, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x45809000) read(r3, &(0x7f0000000040)=""/106, 0x6a) 754.02µs ago: executing program 6 (id=2201): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000030001c0"]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) read(r0, &(0x7f0000000040)=""/106, 0x6a) ioctl$FICLONE(r0, 0x40049409, r0) 0s ago: executing program 4 (id=2202): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x61, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b2"}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x30, r0, 0x96175000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r6]) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r6]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x0, 0x7, 0x0, 0x0, 0x1, 0x66, 0x80, 0x65, 0x4c, 0x8b, 0x22, 0x0, 0x7, 0x18, 0x8, 0x0, 0x7, 0x51, '\x00', 0x2}) kernel console output (not intermixed with test programs): ssive=1 [ 97.629978][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 97.671463][ T3993] audit: audit_backlog=65 > audit_backlog_limit=64 [ 97.679001][ T36] audit: type=1400 audit(1750324055.040:12425): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.702775][ T3993] audit: audit_lost=112 audit_rate_limit=0 audit_backlog_limit=64 [ 97.719700][ T289] audit: audit_lost=113 audit_rate_limit=0 audit_backlog_limit=64 [ 97.726297][ T3993] audit: backlog limit exceeded [ 97.750097][ T1943] audit: audit_backlog=65 > audit_backlog_limit=64 [ 97.851220][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.858336][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.887303][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.894407][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.197124][ T3970] veth0_vlan: entered promiscuous mode [ 98.277539][ T4009] SELinux: security_context_str_to_sid () failed with errno=-22 [ 98.281724][ T3970] veth1_macvtap: entered promiscuous mode [ 98.308386][ T4009] SELinux: security_context_str_to_sid () failed with errno=-22 [ 98.798629][ T4027] kvm: user requested TSC rate below hardware speed [ 99.629358][ T4048] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:536 [ 99.735098][ T4050] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 100.327108][ T4074] binder: Bad value for 'max' [ 100.352756][ T4075] binder: Bad value for 'max' [ 100.544418][ T4086] binder: Bad value for 'stats' [ 100.735194][ T4091] input: syz0 as /devices/virtual/input/input47 [ 100.756316][ T4091] input: failed to attach handler leds to device input47, error: -6 [ 101.161585][ T4100] input: syz0 as /devices/virtual/input/input48 [ 101.216738][ T4098] kvm: kvm [4097]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4000000000000001 [ 101.424522][ T4109] binder: Unknown parameter 'uid' [ 101.529958][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.537552][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.560776][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.587898][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.595367][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.624712][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.641987][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.656954][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.664423][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.696349][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.703804][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.712595][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.720080][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.729402][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.738609][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.746062][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.753550][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.761702][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.769770][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.783682][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.793060][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.801103][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.809221][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.817335][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.826883][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.834549][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.860631][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.876303][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.883767][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.892734][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.901247][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.910475][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.918553][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.926145][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.941600][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.950109][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.959641][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.969353][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.978549][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.986923][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 101.994577][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.004252][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.026321][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.033775][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.056502][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.064052][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.076307][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.090101][ T4129] random: crng reseeded on system resumption [ 102.096446][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.114742][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.126296][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.145070][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.153968][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.162340][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.170694][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.178844][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.186914][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.194336][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.202685][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.212240][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.220616][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.228859][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.237106][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.244525][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.256450][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.271011][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.283233][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.293615][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.311219][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.319572][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.335077][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.344553][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.356482][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.364584][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.373220][ T4137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:563 [ 102.379900][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.398460][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.408487][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.417286][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.424853][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.433549][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.441815][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.450498][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.458800][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.467651][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.475190][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.488755][ T36] kauditd_printk_skb: 2904 callbacks suppressed [ 102.488773][ T36] audit: type=1400 audit(1750324060.040:15300): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.505507][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.537357][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.546069][ T36] audit: type=1400 audit(1750324060.040:15301): avc: denied { read write } for pid=1943 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.556307][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.592313][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 102.595594][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.599061][ T36] audit: type=1400 audit(1750324060.040:15302): avc: denied { read write open } for pid=1943 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.599104][ T36] audit: type=1400 audit(1750324060.040:15303): avc: denied { ioctl } for pid=1943 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.613623][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.632282][ T289] audit: audit_lost=124 audit_rate_limit=0 audit_backlog_limit=64 [ 102.660334][ T4146] audit: audit_backlog=65 > audit_backlog_limit=64 [ 102.665161][ T289] audit: backlog limit exceeded [ 102.674939][ T4146] audit: audit_lost=125 audit_rate_limit=0 audit_backlog_limit=64 [ 102.680114][ T36] audit: type=1400 audit(1750324060.070:15304): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.700803][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.746108][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.755942][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.765332][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.773698][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.782029][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.790175][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.798400][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.805955][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.814400][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.822483][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.831517][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.839951][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.848611][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.856979][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.865197][ T4148] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 102.865236][ T4148] rust_binder: Error in use_page_slow: EBUSY [ 102.876647][ T4148] rust_binder: use_range failure EBUSY [ 102.882734][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.896994][ T4148] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 102.897019][ T4148] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 102.904767][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.926371][ T4148] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 102.926411][ T4148] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:574 [ 102.930949][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.955817][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.964170][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.973469][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.981562][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 102.997003][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.009747][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.021996][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.030391][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.038442][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.045919][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.061241][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.069524][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.077847][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.085535][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.094361][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.102833][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.110897][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.118916][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.126957][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.136862][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.144487][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.155456][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.163913][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.172192][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.180811][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.189006][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.197181][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.204950][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.213456][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.223325][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.231379][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.243324][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.251433][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.268023][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.275444][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.283842][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.292129][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.300129][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.308667][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.316299][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.323708][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.338414][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.346891][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.355882][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.365180][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.373368][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.381739][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.394580][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.403984][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.412475][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.420704][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.428906][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.436921][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.444342][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.452725][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.462741][ T4157] binder: Unknown parameter 'dh' [ 103.467768][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.475348][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.484895][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.493436][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.501630][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.509849][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.518043][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.525487][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.534122][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.542338][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.550944][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.559425][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.567711][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.577036][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.584454][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.599156][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.607346][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.614756][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.623675][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.636905][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.644512][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.653640][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.661811][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.670111][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.670198][ T4161] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 103.678251][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.695643][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.704094][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.712262][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.720412][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.728598][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.736021][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.744951][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.753237][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.764208][ T4163] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.764907][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.779848][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.788065][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.795481][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.805203][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.813449][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.823694][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.833217][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.841827][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.850064][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.858391][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.871670][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.880031][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.888208][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.895798][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.904409][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.913622][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.921844][ T45] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0 [ 103.932386][ T45] hid-generic 01FF:0004:0400.0006: hidraw0: HID v0.05 Device [syz0] on syz1 [ 103.943543][ T4133] Restarting kernel threads ... done. [ 104.068434][ T4170] kvm: user requested TSC rate below hardware speed [ 104.107574][ T4170] input: syz1 as /devices/virtual/input/input49 [ 104.183843][ T4175] binder: Bad value for 'stats' [ 104.481881][ T4181] rust_binder: Error while translating object. [ 104.481928][ T4181] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 104.489615][ T4176] fido_id[4176]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 104.495777][ T4181] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1075 [ 104.895311][ T4194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.935473][ T4194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.985289][ T4194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.064403][ T60] bridge_slave_1: left allmulticast mode [ 105.084602][ T60] bridge_slave_1: left promiscuous mode [ 105.086722][ T4205] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 105.090470][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.114581][ T60] bridge_slave_0: left allmulticast mode [ 105.126380][ T60] bridge_slave_0: left promiscuous mode [ 105.133115][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.149687][ T4207] input: syz0 as /devices/virtual/input/input50 [ 105.407909][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.440242][ T4202] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.458345][ T4202] bridge_slave_0: entered allmulticast mode [ 105.479717][ T4202] bridge_slave_0: entered promiscuous mode [ 105.488064][ T60] veth1_macvtap: left promiscuous mode [ 105.493613][ T60] veth0_vlan: left promiscuous mode [ 105.609606][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.620307][ T4202] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.628768][ T4202] bridge_slave_1: entered allmulticast mode [ 105.639719][ T4202] bridge_slave_1: entered promiscuous mode [ 106.021667][ T4236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:604 [ 106.130635][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.147059][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.174805][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.181906][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.298301][ T4247] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:57 [ 106.443880][ T4202] veth0_vlan: entered promiscuous mode [ 106.532683][ T4202] veth1_macvtap: entered promiscuous mode [ 107.001794][ T4269] input: syz0 as /devices/virtual/input/input51 [ 107.501802][ T36] kauditd_printk_skb: 2207 callbacks suppressed [ 107.501822][ T36] audit: type=1400 audit(1750324065.050:17397): avc: denied { read write } for pid=4202 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.533706][ T36] audit: type=1400 audit(1750324065.050:17398): avc: denied { read write open } for pid=4202 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.558920][ T36] audit: type=1400 audit(1750324065.050:17399): avc: denied { ioctl } for pid=4202 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.810975][ T36] audit: type=1400 audit(1750324067.360:17400): avc: denied { read } for pid=4270 comm="syz.0.1306" name="binder1" dev="binder" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.851625][ T4273] input: syz0 as /devices/virtual/input/input52 [ 109.886278][ T36] audit: type=1400 audit(1750324067.360:17401): avc: denied { read open } for pid=4270 comm="syz.0.1306" path="/dev/binderfs/binder1" dev="binder" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.931377][ T4284] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.939627][ T4277] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.946168][ T4277] audit: audit_lost=164 audit_rate_limit=0 audit_backlog_limit=64 [ 109.950490][ T4283] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.960591][ T3970] audit: audit_backlog=65 > audit_backlog_limit=64 [ 110.038140][ T4277] binder: Bad value for 'stats' [ 110.309462][ T4313] SELinux: policydb version 905587468 does not match my version range 15-33 [ 110.336345][ T4313] SELinux: failed to load policy [ 110.359742][ T4315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:628 [ 110.369094][ T4318] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.813036][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 110.941641][ T1135] udevd[1135]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 111.026593][ T1135] udevd[1135]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 111.073114][ T1135] udevd[1135]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 111.267001][ T4362] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.393911][ T4363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:102 [ 111.434533][ T4365] rust_binder: Write failure EINVAL in pid:13 [ 111.656932][ T4378] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.803585][ T4383] rust_binder: Error in use_page_slow: ESRCH [ 111.823439][ T4383] rust_binder: use_range failure ESRCH [ 111.843938][ T4383] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 111.861475][ T4383] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 111.877355][ T4389] input: syz1 as /devices/virtual/input/input56 [ 111.901526][ T4383] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1133 [ 112.118060][ T4395] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 112.236388][ T4394] kvm: user requested TSC rate below hardware speed [ 112.319971][ T4407] can0: slcan on ptm0. [ 112.411489][ T4408] kvm: apic: phys broadcast and lowest prio [ 112.565043][ T36] kauditd_printk_skb: 506 callbacks suppressed [ 112.565061][ T36] audit: type=1400 audit(1750324070.110:17895): avc: denied { search } for pid=4412 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.625589][ T4409] can0 (unregistered): slcan off ptm0. [ 112.660259][ T36] audit: type=1400 audit(1750324070.160:17896): avc: denied { map } for pid=4413 comm="syz.3.1349" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 112.762777][ T36] audit: type=1400 audit(1750324070.160:17897): avc: denied { read } for pid=4413 comm="syz.3.1349" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 112.788934][ T4423] audit: audit_backlog=65 > audit_backlog_limit=64 [ 112.795474][ T4423] audit: audit_lost=170 audit_rate_limit=0 audit_backlog_limit=64 [ 112.837227][ T4426] audit: audit_backlog=65 > audit_backlog_limit=64 [ 112.839954][ T4427] audit: audit_backlog=65 > audit_backlog_limit=64 [ 112.843974][ T4423] audit: backlog limit exceeded [ 112.858779][ T4423] audit: audit_backlog=65 > audit_backlog_limit=64 [ 112.868241][ T36] audit: type=1400 audit(1750324070.160:17898): avc: denied { ioctl } for pid=4413 comm="syz.3.1349" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 112.912281][ T4426] binder: Unknown parameter 'seclbel' [ 112.927625][ T4427] SELinux: security_context_str_to_sid (@) failed with errno=-22 [ 113.077430][ T4432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:666 [ 113.610265][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.671507][ T4453] rust_binder: Write failure EFAULT in pid:122 [ 113.900712][ T4464] cgroup: fork rejected by pids controller in /syz4 [ 114.327025][ T4587] rust_binder: Write failure EINVAL in pid:131 [ 114.370683][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.437506][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.458860][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.482231][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.492320][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.513764][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.532833][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.536379][ T60] bridge_slave_1: left allmulticast mode [ 114.542372][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.547224][ T60] bridge_slave_1: left promiscuous mode [ 114.566302][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.583909][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.586355][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.596578][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.616003][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.624095][ T60] bridge_slave_0: left allmulticast mode [ 114.635050][ T60] bridge_slave_0: left promiscuous mode [ 114.636612][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.650924][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.676357][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.699566][ T4602] binder: Bad value for 'max' [ 114.707263][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.715618][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.731200][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.753390][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.782472][ T60] veth1_macvtap: left promiscuous mode [ 114.786332][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.800210][ T60] veth0_vlan: left promiscuous mode [ 114.816300][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.826322][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.834197][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.877068][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.884552][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.915679][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.934570][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.947320][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.956104][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.965969][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 114.996305][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.016471][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.023932][ T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.038355][ T31] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.180155][ T4620] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 115.273327][ T4628] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 115.291319][ T4624] tap0: tun_chr_ioctl cmd 1074025678 [ 115.297223][ T4624] tap0: group set to 0 [ 115.301391][ T4628] rust_binder: Write failure EINVAL in pid:1155 [ 115.303589][ T4623] tap0: tun_chr_ioctl cmd 1074025678 [ 115.320630][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 115.340311][ T4623] tap0: group set to 0 [ 115.440062][ T4621] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.467672][ T4621] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.495023][ T4621] bridge_slave_0: entered allmulticast mode [ 115.513299][ T4635] fido_id[4635]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 115.518229][ T4621] bridge_slave_0: entered promiscuous mode [ 115.568928][ T4621] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.596007][ T4621] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.626302][ T4621] bridge_slave_1: entered allmulticast mode [ 115.634547][ T4638] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.635003][ T4638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:137 [ 115.645273][ T4621] bridge_slave_1: entered promiscuous mode [ 116.001378][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.008484][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.019330][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.026394][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.132057][ T4655] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.132925][ T4655] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 116.152274][ T31] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 116.180660][ T31] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.279318][ T4621] veth0_vlan: entered promiscuous mode [ 116.340624][ T4657] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 116.342388][ T4621] veth1_macvtap: entered promiscuous mode [ 116.354936][ T4657] rust_binder: Write failure EINVAL in pid:709 [ 116.364764][ T4661] fido_id[4661]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 117.014623][ T4695] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 117.143499][ T4711] input: syz1 as /devices/virtual/input/input60 [ 117.222835][ T4711] binder: Unknown parameter 'euid' [ 117.241787][ T4709] kvm: Disabled LAPIC found during irq injection [ 117.330913][ T4719] rust_binder: Write failure EFAULT in pid:168 [ 117.336926][ T927] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 117.349868][ T926] Bluetooth: hci0: command 0x1003 tx timeout [ 117.579157][ T36] kauditd_printk_skb: 1441 callbacks suppressed [ 117.579177][ T36] audit: type=1400 audit(1750324075.130:19172): avc: denied { read } for pid=4734 comm="syz.3.1409" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.585087][ T4737] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 117.585644][ T36] audit: type=1400 audit(1750324075.130:19173): avc: denied { read open } for pid=4734 comm="syz.3.1409" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.626313][ T4737] rust_binder: Read failure Err(EFAULT) in pid:1159 [ 117.713274][ T36] audit: type=1400 audit(1750324075.130:19174): avc: denied { ioctl } for pid=4734 comm="syz.3.1409" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.746199][ T36] audit: type=1400 audit(1750324075.130:19175): avc: denied { read } for pid=4735 comm="syz.1.1408" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 117.789640][ T36] audit: type=1400 audit(1750324075.130:19176): avc: denied { read open } for pid=4735 comm="syz.1.1408" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 117.825954][ T36] audit: type=1400 audit(1750324075.130:19177): avc: denied { ioctl } for pid=4735 comm="syz.1.1408" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 117.858299][ T36] audit: type=1400 audit(1750324075.170:19178): avc: denied { read write } for pid=1943 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.911499][ T36] audit: type=1400 audit(1750324075.170:19179): avc: denied { read write open } for pid=1943 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.947392][ T36] audit: type=1400 audit(1750324075.170:19180): avc: denied { ioctl } for pid=1943 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.005179][ T36] audit: type=1400 audit(1750324075.200:19181): avc: denied { read } for pid=4735 comm="syz.1.1408" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 118.107138][ T4752] serio: Serial port ttynull [ 118.420393][ T4774] rust_binder: Write failure EINVAL in pid:177 [ 118.948208][ T4793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.406979][ T4814] input: syz1 as /devices/virtual/input/input64 [ 119.568732][ T4824] rtc_cmos 00:00: Alarms can be up to one day in the future [ 119.614591][ T4823] rust_binder: Write failure EINVAL in pid:1174 [ 119.632642][ T4828] can0: slcan on ptm0. [ 119.643540][ T4823] input: syz0 as /devices/virtual/input/input65 [ 119.697841][ T4819] rtc_cmos 00:00: Alarms can be up to one day in the future [ 119.721674][ T4828] kvm: kvm [4827]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400 [ 119.755286][ T4828] rust_binder: Error while translating object. [ 119.755329][ T4828] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 119.791722][ T4828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:186 [ 119.957335][ T4847] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 120.006599][ T4827] can0 (unregistered): slcan off ptm0. [ 120.047924][ T306] rtc_cmos 00:00: Alarms can be up to one day in the future [ 120.087289][ T306] rtc_cmos 00:00: Alarms can be up to one day in the future [ 120.094959][ T306] rtc_cmos 00:00: Alarms can be up to one day in the future [ 120.151643][ T306] rtc_cmos 00:00: Alarms can be up to one day in the future [ 120.186266][ T306] rtc rtc0: __rtc_set_alarm: err=-22 [ 120.254397][ T4854] rust_binder: Error while translating object. [ 120.254439][ T4854] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 120.272258][ T4854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:775 [ 120.989943][ T4902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:783 [ 121.079556][ T4915] SELinux: security_context_str_to_sid () failed with errno=-22 [ 121.263408][ T4920] __vm_enough_memory: pid: 4920, comm: syz.0.1460, bytes: 4611686022722355200 not enough memory for the allocation [ 121.355589][ T4925] kvm: kvm [4923]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253 [ 121.421190][ T4931] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:208 [ 121.496809][ T4932] rust_binder: Write failure EINVAL in pid:69 [ 121.562662][ T4937] rust_binder: Write failure EINVAL in pid:210 [ 122.063388][ T4965] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 122.108964][ T4965] rust_binder: Write failure EINVAL in pid:74 [ 122.137086][ T4968] binder: Bad value for 'max' [ 122.406879][ T4976] binder: Bad value for 'defcontext' [ 122.577321][ T4982] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 122.634700][ T36] kauditd_printk_skb: 1583 callbacks suppressed [ 122.634716][ T36] audit: type=1400 audit(1750324080.180:20765): avc: denied { read write } for pid=4621 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.710451][ T36] audit: type=1400 audit(1750324080.210:20766): avc: denied { read write open } for pid=4621 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.755296][ T36] audit: type=1400 audit(1750324080.220:20767): avc: denied { ioctl } for pid=4621 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.787650][ T36] audit: type=1400 audit(1750324080.220:20768): avc: denied { read } for pid=4983 comm="syz.0.1478" name="binder1" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.873700][ T4991] binder: Bad value for 'max' [ 122.885686][ T36] audit: type=1400 audit(1750324080.220:20769): avc: denied { read open } for pid=4983 comm="syz.0.1478" path="/dev/binderfs/binder1" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.946276][ T36] audit: type=1400 audit(1750324080.220:20770): avc: denied { ioctl } for pid=4983 comm="syz.0.1478" path="/dev/binderfs/binder1" dev="binder" ino=38 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 123.012032][ T4999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:229 [ 123.026302][ T36] audit: type=1400 audit(1750324080.220:20771): avc: denied { set_context_mgr } for pid=4983 comm="syz.0.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 123.088095][ T5000] SELinux: security_context_str_to_sid () failed with errno=-22 [ 123.129105][ T36] audit: type=1400 audit(1750324080.230:20772): avc: denied { read } for pid=4983 comm="syz.0.1478" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 123.131087][ T5008] audit: audit_backlog=65 > audit_backlog_limit=64 [ 123.162129][ T4621] audit: audit_backlog=65 > audit_backlog_limit=64 [ 123.249104][ T5012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:88 [ 123.291376][ T5018] binder: Unknown parameter 'smackfsroot' [ 123.463036][ T5022] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 123.466952][ T5025] rust_binder: Write failure EFAULT in pid:90 [ 123.795350][ T5031] SELinux: policydb magic number 0x67632f2e does not match expected magic number 0xf97cff8c [ 123.893571][ T5031] SELinux: failed to load policy [ 123.911949][ T5040] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.086657][ T5048] input: syz0 as /devices/virtual/input/input69 [ 124.223062][ T5054] binder: Unknown parameter 'fowner' [ 124.288731][ T5056] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96 [ 124.522190][ T5064] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 124.582659][ T5068] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 124.616929][ T5070] rust_binder: Error while translating object. [ 124.630410][ T5070] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 124.653094][ T5070] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1232 [ 124.756309][ T5074] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 124.807437][ T5078] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 124.807478][ T5078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1236 [ 125.027163][ T5087] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 125.943516][ T5117] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.972236][ T5118] rust_binder: Failed to allocate buffer. len:168, is_oneway:false [ 126.782513][ T5131] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 127.117349][ T5146] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 127.465538][ T5160] rust_binder: Write failure EINVAL in pid:277 [ 127.503341][ T5161] can0: slcan on ptm0. [ 127.508522][ T5164] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 127.526274][ T5164] rust_binder: Error while translating object. [ 127.534948][ T5164] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 127.579397][ T5164] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:133 [ 127.636696][ T36] kauditd_printk_skb: 1866 callbacks suppressed [ 127.636716][ T36] audit: type=1400 audit(1750324085.190:22629): avc: denied { read } for pid=5163 comm="syz.4.1541" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 127.689828][ T5164] binder: Bad value for 'max' [ 127.704853][ T5164] rust_binder: Write failure EINVAL in pid:133 [ 127.747556][ T36] audit: type=1400 audit(1750324085.200:22630): avc: denied { setattr } for pid=1943 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.779665][ T36] audit: type=1400 audit(1750324085.200:22631): avc: denied { setattr } for pid=1943 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.820148][ T1943] audit: audit_backlog=65 > audit_backlog_limit=64 [ 127.827585][ T36] audit: type=1400 audit(1750324085.200:22632): avc: denied { setattr } for pid=1943 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.831924][ T5170] audit: audit_backlog=65 > audit_backlog_limit=64 [ 127.861054][ T36] audit: type=1400 audit(1750324085.200:22633): avc: denied { setattr } for pid=1943 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.866261][ T1943] audit: audit_lost=232 audit_rate_limit=0 audit_backlog_limit=64 [ 127.892632][ T5170] audit: audit_lost=233 audit_rate_limit=0 audit_backlog_limit=64 [ 127.896577][ T5162] can0 (unregistered): slcan off ptm0. [ 127.900760][ T1943] audit: backlog limit exceeded [ 128.920238][ T5207] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 129.087062][ T5211] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 129.095110][ T5211] rust_binder: Error in use_page_slow: EBUSY [ 129.136317][ T5211] rust_binder: use_range failure EBUSY [ 129.147050][ T5211] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 129.157010][ T5211] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 129.175634][ T5211] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 129.200972][ T5211] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:290 [ 130.105545][ T5243] rust_binder: Write failure EINVAL in pid:155 [ 130.179823][ T5251] binder: Bad value for 'max' [ 130.929398][ T5273] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 131.048626][ T5269] rust_binder: Write failure EINVAL in pid:1279 [ 131.470332][ T5285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:315 [ 131.639901][ T5288] binder: Binderfs stats mode cannot be changed during a remount [ 131.772555][ T5293] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 131.799396][ T5293] SELinux: failed to load policy [ 131.836621][ T5293] random: crng reseeded on system resumption [ 132.103553][ T5301] SELinux: unknown common r [ 132.154430][ T5301] SELinux: failed to load policy [ 132.382716][ T5307] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.424273][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.447122][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.454599][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.474179][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.484370][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.505301][ T5310] random: crng reseeded on system resumption [ 132.511459][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.526301][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.543898][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.561260][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.569571][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.580083][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.589201][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.599293][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.622626][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.635550][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.643151][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.650745][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.658177][ T36] kauditd_printk_skb: 2833 callbacks suppressed [ 132.658195][ T36] audit: type=1400 audit(1750324090.200:25451): avc: denied { setattr } for pid=1943 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.658266][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.664485][ T36] audit: type=1400 audit(1750324090.200:25452): avc: denied { setattr } for pid=1943 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.688112][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.745357][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.763273][ T5319] kvm: kvm [5317]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9 [ 132.772265][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.779774][ T36] audit: type=1400 audit(1750324090.240:25453): avc: denied { setattr } for pid=1943 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.804239][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.819897][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.821528][ T1943] audit: audit_backlog=65 > audit_backlog_limit=64 [ 132.829959][ T5319] audit: audit_backlog=65 > audit_backlog_limit=64 [ 132.840670][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.848119][ T36] audit: type=1400 audit(1750324090.240:25454): avc: denied { setattr } for pid=1943 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.856276][ T1943] audit: audit_lost=239 audit_rate_limit=0 audit_backlog_limit=64 [ 132.876300][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.888409][ T5319] audit: audit_lost=240 audit_rate_limit=0 audit_backlog_limit=64 [ 132.897506][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.905225][ T1943] audit: backlog limit exceeded [ 132.905440][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.917627][ T5319] audit: backlog limit exceeded [ 132.923572][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.931308][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.938898][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.954357][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.969581][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.997789][ T9] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.325276][ T5330] fido_id[5330]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 133.332736][ T5333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:179 [ 133.418106][ T5335] binder: Unknown parameter 'sQats' [ 133.847048][ T5337] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 133.856073][ T5349] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 133.969934][ T5337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:181 [ 134.391346][ T5359] binder: Unknown parameter 'fscontext?}' [ 134.482307][ T5359] SELinux: security_context_str_to_sid () failed with errno=-22 [ 134.867902][ T5374] SELinux: security_context_str_to_sid () failed with errno=-22 [ 135.184541][ T5387] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.194414][ T5387] rust_binder: Write failure EINVAL in pid:358 [ 135.441398][ T5399] input: syz1 as /devices/virtual/input/input76 [ 135.468621][ T5403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.606317][ T5406] rust_binder: Write failure EINVAL in pid:206 [ 135.711224][ T5406] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.741378][ T5410] rust_binder: got new transaction with bad transaction stack [ 135.758413][ T5410] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:367 [ 135.783859][ T5413] kvm: user requested TSC rate below hardware speed [ 135.979498][ T5419] rust_binder: Write failure EINVAL in pid:1317 [ 135.980018][ T5419] rust_binder: Write failure EINVAL in pid:1317 [ 135.989171][ T5419] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 136.939935][ T5457] kvm: kvm [5456]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x882 [ 137.288686][ T5472] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.335899][ T5474] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 137.463075][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.499547][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.516317][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.530578][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.538066][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.546302][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.556271][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.563783][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.572562][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.581063][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.589276][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.597729][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.605682][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.614251][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.622464][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.630590][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.638780][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.647048][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.654492][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.667252][ T36] kauditd_printk_skb: 3125 callbacks suppressed [ 137.667268][ T36] audit: type=1400 audit(1750324095.220:28568): avc: denied { setattr } for pid=1943 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.669772][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.674709][ T36] audit: type=1400 audit(1750324095.220:28569): avc: denied { setattr } for pid=1943 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.698072][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.726263][ T36] audit: type=1400 audit(1750324095.250:28570): avc: denied { setattr } for pid=1943 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.757439][ T5483] rust_binder: Write failure EINVAL in pid:1326 [ 137.763263][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.778168][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.788864][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.797258][ T36] audit: type=1400 audit(1750324095.250:28571): avc: denied { setattr } for pid=1943 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.822003][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.822303][ T1943] audit: audit_backlog=65 > audit_backlog_limit=64 [ 137.829473][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.836926][ T5486] audit: audit_backlog=65 > audit_backlog_limit=64 [ 137.849949][ T1943] audit: audit_lost=245 audit_rate_limit=0 audit_backlog_limit=64 [ 137.857847][ T36] audit: type=1400 audit(1750324095.260:28572): avc: denied { setattr } for pid=1943 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.858866][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.881439][ T1943] audit: backlog limit exceeded [ 137.893808][ T5486] audit: audit_lost=246 audit_rate_limit=0 audit_backlog_limit=64 [ 137.895038][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.909943][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.945548][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.954571][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.963532][ T45] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.973849][ T45] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 138.195071][ T5496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.233564][ T5498] fido_id[5498]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 138.494106][ T5513] SELinux: failed to load policy [ 138.528554][ T5515] block device autoloading is deprecated and will be removed. [ 138.780221][ T5523] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 138.807121][ T5522] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 138.896670][ T5522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.946303][ T5534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1344 [ 138.971890][ T5533] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 139.006288][ T5533] rust_binder: Error in use_page_slow: EBUSY [ 139.033090][ T5533] rust_binder: use_range failure EBUSY [ 139.043189][ T5533] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 139.056273][ T5533] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 139.084178][ T5533] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 139.104373][ T5533] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1344 [ 139.234099][ T5538] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.537088][ T5553] binder: Bad value for 'defcontext' [ 139.843207][ T5566] binder: Bad value for 'stats' [ 139.987495][ T5572] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 139.987538][ T5572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:427 [ 140.196912][ T5576] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 140.227368][ T5576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:429 [ 140.256200][ T5576] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 140.295230][ T5576] rust_binder: Read failure Err(EFAULT) in pid:429 [ 140.562485][ T12] bridge_slave_1: left allmulticast mode [ 140.596255][ T12] bridge_slave_1: left promiscuous mode [ 140.601956][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.634836][ T12] bridge_slave_0: left allmulticast mode [ 140.646273][ T12] bridge_slave_0: left promiscuous mode [ 140.652920][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.890008][ T12] veth1_macvtap: left promiscuous mode [ 140.895748][ T12] veth0_vlan: left promiscuous mode [ 141.213903][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.246258][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.251754][ T5612] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 141.271339][ T5580] bridge_slave_0: entered allmulticast mode [ 141.306857][ T5580] bridge_slave_0: entered promiscuous mode [ 141.314712][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.321827][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.329134][ T5580] bridge_slave_1: entered allmulticast mode [ 141.335650][ T5580] bridge_slave_1: entered promiscuous mode [ 141.390035][ T5609] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 141.458066][ T5614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:443 [ 141.625604][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.642063][ T5580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.649410][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.656559][ T5580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.734958][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.756902][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.774218][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.781345][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.802032][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.809167][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.010313][ T5580] veth0_vlan: entered promiscuous mode [ 142.082317][ T5580] veth1_macvtap: entered promiscuous mode [ 142.725237][ T36] kauditd_printk_skb: 1705 callbacks suppressed [ 142.725258][ T36] audit: type=1400 audit(1750324100.270:30235): avc: denied { read write } for pid=5580 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.772024][ T36] audit: type=1400 audit(1750324100.270:30236): avc: denied { read write open } for pid=5580 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.793943][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 142.808985][ T36] audit: type=1400 audit(1750324100.270:30237): avc: denied { ioctl } for pid=5580 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 142.837100][ T36] audit: type=1400 audit(1750324100.310:30238): avc: denied { read open } for pid=5650 comm="syz.4.1688" path="pid:[4026532296]" dev="nsfs" ino=4026532296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 142.861871][ T36] audit: type=1400 audit(1750324100.310:30239): avc: denied { read open } for pid=5650 comm="syz.4.1688" path="pid:[4026532296]" dev="nsfs" ino=4026532296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 142.914636][ T36] audit: type=1400 audit(1750324100.320:30240): avc: denied { read } for pid=5650 comm="syz.4.1688" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.976083][ T36] audit: type=1400 audit(1750324100.320:30241): avc: denied { read open } for pid=5650 comm="syz.4.1688" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.031104][ T36] audit: type=1400 audit(1750324100.320:30242): avc: denied { ioctl } for pid=5650 comm="syz.4.1688" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 143.058017][ T36] audit: type=1400 audit(1750324100.390:30243): avc: denied { read write } for pid=4621 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.060767][ T5668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.100114][ T5670] binder: Binderfs stats mode cannot be changed during a remount [ 143.112240][ T36] audit: type=1400 audit(1750324100.390:30244): avc: denied { read write open } for pid=4621 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.141676][ T5671] rust_binder: Error while translating object. [ 143.141733][ T5671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 143.142637][ T5669] binder: Bad value for 'stats' [ 143.152018][ T5671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:453 [ 143.298739][ T5681] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.438302][ T5685] input: syz1 as /devices/virtual/input/input79 [ 143.892370][ T5715] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.905238][ T5714] input: syz1 as /devices/virtual/input/input80 [ 144.301139][ T5734] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.387324][ T5739] rust_binder: got new transaction with bad transaction stack [ 144.404064][ T5739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:488 [ 144.563243][ T5746] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.776304][ T926] Bluetooth: hci0: command 0x1003 tx timeout [ 144.782453][ T927] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 144.944943][ T5762] binder: Bad value for 'defcontext' [ 145.270268][ T5775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.076304][ T5809] SELinux: failed to load policy [ 146.205245][ T5816] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 146.489106][ T5831] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:350 [ 146.645250][ T5836] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 146.733212][ T5837] rust_binder: Write failure EFAULT in pid:16 [ 146.733656][ T5837] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 146.746271][ T5837] rust_binder: Error in use_page_slow: EBUSY [ 146.763350][ T5837] rust_binder: use_range failure EBUSY [ 146.770418][ T5837] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 146.782410][ T5837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 146.810933][ T5837] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 146.831287][ T5837] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:16 [ 147.151920][ T5861] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.442107][ T5880] input: syz1 as /devices/virtual/input/input85 [ 147.688995][ T5894] random: crng reseeded on system resumption [ 147.763150][ T36] kauditd_printk_skb: 802 callbacks suppressed [ 147.763169][ T36] audit: type=1400 audit(1750324105.310:31047): avc: denied { ioctl } for pid=5893 comm="syz.5.1767" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 147.802814][ T5894] Restarting kernel threads ... done. [ 147.833052][ T36] audit: type=1400 audit(1750324105.330:31048): avc: denied { read } for pid=5899 comm="syz.0.1768" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 147.897278][ T36] audit: type=1400 audit(1750324105.330:31049): avc: denied { read open } for pid=5899 comm="syz.0.1768" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 147.953142][ T36] audit: type=1400 audit(1750324105.340:31050): avc: denied { ioctl } for pid=5899 comm="syz.0.1768" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 147.981836][ T5910] binder: Unknown parameter 'c:dtext' [ 147.998177][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.998471][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.043543][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.043686][ T5915] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 148.056744][ T36] audit: type=1400 audit(1750324105.340:31051): avc: denied { read } for pid=5899 comm="syz.0.1768" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 148.106708][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.107008][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.118832][ T5915] audit: audit_backlog=65 > audit_backlog_limit=64 [ 148.143398][ T5917] audit: audit_backlog=65 > audit_backlog_limit=64 [ 148.144665][ T36] audit: type=1400 audit(1750324105.340:31052): avc: denied { read open } for pid=5899 comm="syz.0.1768" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 148.156569][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.177820][ T5915] audit: audit_lost=261 audit_rate_limit=0 audit_backlog_limit=64 [ 148.186287][ T5917] audit: audit_lost=262 audit_rate_limit=0 audit_backlog_limit=64 [ 148.211818][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.212141][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.231792][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.258422][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.278982][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.316070][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.328125][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.337712][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.345270][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.354852][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.385335][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.397229][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.425889][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.446635][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.463814][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.490960][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.509652][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.536976][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.549848][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.563169][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.583656][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.592775][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.615954][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.623275][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.638341][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.656329][ T5913] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.879868][ T5943] random: crng reseeded on system resumption [ 148.963906][ T5943] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.474548][ T5965] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 149.509692][ T5965] SELinux: failed to load policy [ 149.515388][ T5967] binder: Unknown parameter 'ÿÿ' [ 149.739981][ T5984] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.853141][ T5986] rust_binder: Write failure EINVAL in pid:55 [ 150.134189][ T5994] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.336697][ T6005] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.488553][ T6005] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 150.608254][ T6010] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 150.657061][ T6014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61 [ 150.882908][ T6022] rust_binder: Error while translating object. [ 150.895917][ T6023] binfmt_misc: register: failed to install interpreter file ./file0 [ 150.911482][ T6022] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 150.911520][ T6022] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:392 [ 150.924306][ T6023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66 [ 151.047953][ T6026] SELinux: security policydb version 17 (MLS) not backwards compatible [ 151.066301][ T6026] SELinux: failed to load policy [ 151.198991][ T6029] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:70 [ 151.325127][ T6033] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 152.052925][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 152.073000][ T6058] kvm: user requested TSC rate below hardware speed [ 152.081502][ T6054] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 152.084346][ T6058] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 152.089061][ T6058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:73 [ 152.102536][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x7 [ 152.103784][ T6054] kernel profiling enabled (shift: 17) [ 152.146495][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x6 [ 152.190775][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.222554][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.246467][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.254370][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.268110][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.276012][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.283843][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.291740][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.300724][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.308617][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.316519][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.331222][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.340135][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.347987][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.356028][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.372202][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.390255][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.406329][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.426451][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.434364][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.442273][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.451090][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.459247][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.476346][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.484234][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.492745][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.500611][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.511089][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.518929][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.527277][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.535027][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.542835][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.555662][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.563528][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.571332][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.579226][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.587362][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.595147][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.602917][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.610697][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.618506][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.626464][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.634234][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.642073][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.649891][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.657817][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.665598][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.673386][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.681157][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.688928][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.696767][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.704598][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.712399][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.720424][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.728271][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.736011][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.743854][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.751708][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.759672][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.767479][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.775204][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.784358][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.792237][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.800011][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.807790][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.815556][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.824314][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.832201][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.840020][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.847895][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.855664][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.863438][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.871231][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.879015][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.886801][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.894711][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.902475][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.910256][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.918020][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.925757][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.933523][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.941300][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.949065][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.956928][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.964852][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.972645][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.973947][ T36] kauditd_printk_skb: 860 callbacks suppressed [ 152.973961][ T36] audit: type=1400 audit(1750324110.520:31872): avc: denied { read write } for pid=5580 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.980516][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 152.990189][ T36] audit: type=1400 audit(1750324110.540:31873): avc: denied { read write open } for pid=5580 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 153.011016][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.030485][ T36] audit: type=1400 audit(1750324110.540:31874): avc: denied { ioctl } for pid=5580 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 153.049433][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.062199][ T36] audit: type=1400 audit(1750324110.600:31875): avc: denied { read } for pid=6066 comm="syz.5.1821" name="binder0" dev="binder" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 153.078346][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.086851][ T36] audit: type=1400 audit(1750324110.600:31876): avc: denied { read open } for pid=6066 comm="syz.5.1821" path="/dev/binderfs/binder0" dev="binder" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 153.107956][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.140821][ T36] audit: type=1400 audit(1750324110.630:31877): avc: denied { ioctl } for pid=6066 comm="syz.5.1821" path="/dev/binderfs/binder0" dev="binder" ino=70 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 153.151893][ T6067] rust_binder: Write failure EINVAL in pid:82 [ 153.173394][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.174919][ T36] audit: type=1400 audit(1750324110.630:31878): avc: denied { set_context_mgr } for pid=6066 comm="syz.5.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 153.183528][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.188396][ T36] audit: type=1400 audit(1750324110.690:31879): avc: denied { map } for pid=6066 comm="syz.5.1821" path="/dev/binderfs/binder0" dev="binder" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 153.210013][ T6067] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 153.216109][ T36] audit: type=1400 audit(1750324110.690:31880): avc: denied { read } for pid=6066 comm="syz.5.1821" path="/dev/binderfs/binder0" dev="binder" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 153.239218][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.249950][ T36] audit: type=1400 audit(1750324110.700:31881): avc: denied { read } for pid=6066 comm="syz.5.1821" name="binder0" dev="binder" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 153.275201][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.310958][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.318805][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.326685][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.334715][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.342614][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.350814][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.358671][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.366460][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.374184][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.381958][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.389719][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.397478][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.405390][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.413237][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.421415][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.429193][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.436965][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.444697][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.452463][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.460248][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.468017][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.475761][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.483548][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.491323][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.499620][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.507437][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.515164][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.522983][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.530746][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.538511][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.546285][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.554004][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.561748][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.569509][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.577257][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.584987][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.592804][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.600593][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.608454][ T9] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 153.617509][ T9] hid-generic 0008:0000:FFFFFBFF.000B: hidraw0: HID v9.86 Device [syz0] on syz1 [ 153.694304][ T6070] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 153.701530][ T6070] rust_binder: Write failure EINVAL in pid:567 [ 153.827838][ T6076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:573 [ 154.011520][ T6080] fido_id[6080]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 154.056300][ T927] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 154.056686][ T926] Bluetooth: hci0: command 0x1003 tx timeout [ 154.287842][ T6094] binder: Unknown parameter '' [ 154.952055][ T6111] SELinux: failed to load policy [ 155.048343][ T6115] rust_binder: Read failure Err(EAGAIN) in pid:103 [ 155.359902][ T6128] binder: Unknown parameter '$b–' [ 155.787531][ T6142] input: syz0 as /devices/virtual/input/input88 [ 156.016018][ T6148] input: syz0 as /devices/virtual/input/input89 [ 156.018651][ T6149] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 156.797616][ T6176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:596 [ 156.871008][ T6181] binder: Unknown parameter 'f‰ž3Á GÇ1üdefcontext' [ 156.930934][ T6183] SELinux: security_context_str_to_sid () failed with errno=-22 [ 157.108456][ T6189] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 157.137547][ T6187] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.138216][ T6187] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.175368][ T9] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 157.206272][ T9] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 157.225190][ T9] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 157.246282][ T9] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 157.257342][ T9] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 157.275190][ T9] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 157.288414][ T6193] SELinux: security_context_str_to_sid () failed with errno=-22 [ 157.293671][ T9] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 157.312089][ T9] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 157.334287][ T9] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 157.334909][ T6193] input: syz0 as /devices/virtual/input/input93 [ 157.356282][ T9] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 157.377860][ T9] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 157.404404][ T9] hid-generic 009C:0008:0003.000C: unknown main item tag 0x0 [ 157.416280][ T9] hid-generic 009C:0008:0003.000C: hidraw0: HID v0.05 Device [syz1] on syz0 [ 157.684347][ T6200] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 157.697044][ T6200] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 157.762320][ T6198] fido_id[6198]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 157.781605][ T6206] rust_binder: Write failure EFAULT in pid:1511 [ 157.936232][ T6212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1516 [ 157.980641][ T36] kauditd_printk_skb: 1665 callbacks suppressed [ 157.980664][ T36] audit: type=1400 audit(1750324115.530:33547): avc: denied { setattr } for pid=5580 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.029413][ T6214] binder: Unknown parameter 'non' [ 158.054163][ T6214] tun0: tun_chr_ioctl cmd 1074025675 [ 158.061206][ T6214] tun0: persist disabled [ 158.066028][ T36] audit: type=1400 audit(1750324115.530:33548): avc: denied { setattr } for pid=5580 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.121443][ T36] audit: type=1400 audit(1750324115.530:33549): avc: denied { setattr } for pid=5580 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.167157][ T5580] audit: audit_backlog=65 > audit_backlog_limit=64 [ 158.169346][ T4621] audit: audit_backlog=65 > audit_backlog_limit=64 [ 158.173722][ T5580] audit: audit_lost=276 audit_rate_limit=0 audit_backlog_limit=64 [ 158.181374][ T36] audit: type=1400 audit(1750324115.530:33550): avc: denied { setattr } for pid=5580 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.215786][ T4621] audit: audit_lost=277 audit_rate_limit=0 audit_backlog_limit=64 [ 158.224609][ T4621] audit: backlog limit exceeded [ 158.231054][ T4621] audit: audit_backlog=65 > audit_backlog_limit=64 [ 158.515237][ T6225] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 158.757987][ T6233] random: crng reseeded on system resumption [ 159.929648][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 159.949262][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 159.965471][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 159.984622][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.006870][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.026144][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.043137][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.060083][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.076095][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.084324][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.092736][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.100955][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.111143][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.119570][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.128675][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.136948][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.144540][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.166540][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.178020][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.189924][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.201931][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.210086][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.219041][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.227623][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.235342][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.243898][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.252067][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.260237][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.268421][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.275968][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.284385][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.292535][ T64] hid-generic 0001:0000:0000.000D: unknown main item tag 0x0 [ 160.304088][ T64] hid-generic 0001:0000:0000.000D: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 160.567359][ T6283] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 160.567974][ T6283] rust_binder: Write failure EINVAL in pid:483 [ 160.692357][ T6284] fido_id[6284]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 160.722270][ T6288] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.777452][ T6288] rust_binder: got new transaction with bad transaction stack [ 160.802227][ T6288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1536 [ 161.115061][ T6301] kvm: user requested TSC rate below hardware speed [ 161.710738][ T6319] binder: Bad value for 'stats' [ 162.064082][ T6324] binder: Bad value for 'stats' [ 162.202076][ T6341] __vm_enough_memory: pid: 6341, comm: syz.0.1912, bytes: 281474976845824 not enough memory for the allocation [ 162.705762][ T6358] can0: slcan on ttyS3. [ 162.786341][ T6358] can0 (unregistered): slcan off ttyS3. [ 162.987607][ T36] kauditd_printk_skb: 2690 callbacks suppressed [ 162.987624][ T36] audit: type=1400 audit(1750324120.540:36202): avc: denied { setattr } for pid=5580 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.076251][ T36] audit: type=1400 audit(1750324120.570:36203): avc: denied { setattr } for pid=5580 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.156324][ T36] audit: type=1400 audit(1750324120.570:36204): avc: denied { setattr } for pid=5580 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.177506][ T6379] audit: audit_backlog=65 > audit_backlog_limit=64 [ 163.180120][ T5580] audit: audit_backlog=65 > audit_backlog_limit=64 [ 163.190670][ T6380] audit: audit_backlog=65 > audit_backlog_limit=64 [ 163.215766][ T6380] audit: audit_lost=291 audit_rate_limit=0 audit_backlog_limit=64 [ 163.216252][ T5580] audit: audit_lost=292 audit_rate_limit=0 audit_backlog_limit=64 [ 163.234163][ T36] audit: type=1400 audit(1750324120.570:36205): avc: denied { mounton } for pid=6372 comm="syz.0.1922" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.234884][ T6379] audit: audit_lost=293 audit_rate_limit=0 audit_backlog_limit=64 [ 163.573611][ T6387] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 163.573635][ T6387] rust_binder: Error while translating object. [ 163.616320][ T6387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 163.622721][ T6387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:669 [ 163.808793][ T6394] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 163.846515][ T6394] SELinux: failed to load policy [ 163.989448][ T6400] SELinux: security_context_str_to_sid () failed with errno=-22 [ 164.244011][ T6413] kvm: kvm [6412]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x8d4fee8a3a05 [ 164.946394][ T6448] binder: Bad value for 'stats' [ 164.967064][ T6447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:544 [ 164.968340][ T6450] binder: Bad value for 'stats' [ 165.238755][ T6460] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:546 [ 165.343983][ T6461] rust_binder: Error in use_page_slow: ESRCH [ 165.344010][ T6461] rust_binder: use_range failure ESRCH [ 165.353913][ T6464] rust_binder: Error in use_page_slow: ESRCH [ 165.359532][ T6464] rust_binder: use_range failure ESRCH [ 165.372033][ T6461] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 165.382584][ T6461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 165.403675][ T6464] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 165.417745][ T6461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:696 [ 165.425790][ T6464] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 165.436387][ T6464] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:696 [ 165.626673][ T6470] rust_binder: Write failure EINVAL in pid:552 [ 165.661235][ T6470] binder: Unknown parameter 'åê' [ 165.941770][ T6488] input: syz0 as /devices/virtual/input/input99 [ 165.973709][ T6490] rust_binder: Write failure EINVAL in pid:1582 [ 166.029348][ T6492] rust_binder: Write failure EINVAL in pid:1582 [ 166.104733][ T6496] rust_binder: Read failure Err(EAGAIN) in pid:556 [ 166.209282][ T6499] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 166.227498][ T6499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1587 [ 166.555681][ T6502] random: crng reseeded on system resumption [ 166.691329][ T6502] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1590 [ 166.972128][ T6510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:712 [ 167.237579][ T6522] rust_binder: Write failure EINVAL in pid:568 [ 167.239407][ T6520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.437379][ T6529] random: crng reseeded on system resumption [ 167.545657][ T6531] binder: Unknown parameter '' [ 167.623020][ T6534] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.675829][ T6533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:573 [ 167.821285][ T6536] binder: Bad value for 'stats' [ 167.996586][ T36] kauditd_printk_skb: 3443 callbacks suppressed [ 167.996605][ T36] audit: type=1400 audit(1750324125.550:39439): avc: denied { setattr } for pid=5580 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.045018][ T6540] binder: Unknown parameter 'ÿ' [ 168.087443][ T36] audit: type=1400 audit(1750324125.580:39440): avc: denied { setattr } for pid=5580 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.131924][ T5580] audit: audit_backlog=65 > audit_backlog_limit=64 [ 168.139227][ T36] audit: type=1400 audit(1750324125.580:39441): avc: denied { setattr } for pid=5580 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.149792][ T5580] audit: audit_lost=363 audit_rate_limit=0 audit_backlog_limit=64 [ 168.169565][ T3970] audit: audit_backlog=65 > audit_backlog_limit=64 [ 168.178123][ T3970] audit: audit_lost=364 audit_rate_limit=0 audit_backlog_limit=64 [ 168.181827][ T5580] audit: backlog limit exceeded [ 168.185950][ T3970] audit: backlog limit exceeded [ 168.186184][ T3970] audit: audit_backlog=65 > audit_backlog_limit=64 [ 168.247726][ T6542] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 168.286469][ T6544] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 168.286504][ T6544] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1608 [ 168.430821][ T6549] binder: Bad value for 'max' [ 168.433288][ T6552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:724 [ 168.706316][ T6562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1613 [ 168.779179][ T6566] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 168.816146][ T6568] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.859232][ T6571] rust_binder: Write failure EINVAL in pid:579 [ 168.947965][ T6577] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 168.991455][ T6577] random: crng reseeded on system resumption [ 169.028665][ T6577] Restarting kernel threads ... done. [ 169.064732][ T6577] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 169.137593][ T6586] rtc_cmos 00:00: Alarms can be up to one day in the future [ 169.432244][ T6600] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 169.457258][ T6600] SELinux: failed to load policy [ 169.518923][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 169.581835][ T6604] rust_binder: Write failure EFAULT in pid:737 [ 169.583175][ T6604] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 169.599612][ T6604] rust_binder: Read failure Err(EFAULT) in pid:737 [ 169.792941][ T6606] binder: Unknown parameter ' ' [ 169.949630][ T6612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.949952][ T6612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.982433][ T6612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.001307][ T6612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.574520][ T6632] rust_binder: Write failure EINVAL in pid:752 [ 170.589255][ T12] bridge_slave_1: left allmulticast mode [ 170.611714][ T12] bridge_slave_1: left promiscuous mode [ 170.617443][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.626779][ T12] bridge_slave_0: left allmulticast mode [ 170.632463][ T12] bridge_slave_0: left promiscuous mode [ 170.646340][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.776832][ T6634] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.783923][ T6634] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.791202][ T6634] bridge_slave_0: entered allmulticast mode [ 170.797835][ T6634] bridge_slave_0: entered promiscuous mode [ 170.804790][ T6634] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.811899][ T6634] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.819038][ T6634] bridge_slave_1: entered allmulticast mode [ 170.825231][ T6634] bridge_slave_1: entered promiscuous mode [ 170.836582][ T12] veth1_macvtap: left promiscuous mode [ 170.842141][ T12] veth0_vlan: left promiscuous mode [ 171.043625][ T6634] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.050701][ T6634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.058020][ T6634] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.065141][ T6634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.126122][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.133511][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.146474][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.153553][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.163836][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.171251][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.255927][ T6634] veth0_vlan: entered promiscuous mode [ 171.331799][ T6634] veth1_macvtap: entered promiscuous mode [ 171.576297][ T926] Bluetooth: hci0: command 0x1003 tx timeout [ 171.582514][ T927] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 171.640145][ T6655] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 171.640184][ T6655] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 171.771834][ T6668] input: syz1 as /devices/virtual/input/input103 [ 171.788228][ T6669] input: syz0 as /devices/virtual/input/input104 [ 172.169130][ T6683] kvm: kvm [6673]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253 [ 172.170601][ T6686] rust_binder: Write failure EINVAL in pid:772 [ 172.205916][ T6687] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.372873][ T6695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:618 [ 172.509831][ T6700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.611480][ T6702] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 172.623348][ T6704] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:621 [ 172.657934][ T6702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 172.952043][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 173.006575][ T36] kauditd_printk_skb: 2199 callbacks suppressed [ 173.006593][ T36] audit: type=1400 audit(1750324130.560:41600): avc: denied { write open } for pid=6718 comm="syz.6.2038" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 173.053504][ T36] audit: type=1400 audit(1750324130.570:41601): avc: denied { read write } for pid=4621 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.106246][ T36] audit: type=1400 audit(1750324130.570:41602): avc: denied { read write open } for pid=4621 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.206272][ T36] audit: type=1400 audit(1750324130.570:41603): avc: denied { ioctl } for pid=4621 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.264762][ T36] audit: type=1400 audit(1750324130.590:41604): avc: denied { mounton } for pid=6720 comm="syz.0.2039" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 173.344393][ T36] audit: type=1400 audit(1750324130.590:41605): avc: denied { mount } for pid=6720 comm="syz.0.2039" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 173.431620][ T36] audit: type=1400 audit(1750324130.630:41606): avc: denied { read } for pid=6724 comm="syz.4.2041" name="binder0" dev="binder" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 173.475935][ T6735] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 173.526251][ T36] audit: type=1400 audit(1750324130.630:41607): avc: denied { read open } for pid=6724 comm="syz.4.2041" path="/dev/binderfs/binder0" dev="binder" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 173.594528][ T36] audit: type=1400 audit(1750324130.630:41608): avc: denied { read } for pid=6724 comm="syz.4.2041" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 173.621288][ T6741] audit: audit_backlog=65 > audit_backlog_limit=64 [ 173.933359][ T6754] rust_binder: Write failure EINVAL in pid:632 [ 173.946609][ T6752] random: crng reseeded on system resumption [ 174.012494][ T6759] binder: Unknown parameter 'dont_hash$' [ 174.326167][ T6772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:800 [ 174.377394][ T6774] rust_binder: Error while translating object. [ 174.396255][ T6774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 174.405473][ T6774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:641 [ 174.547774][ T6776] binder: Bad value for 'stats' [ 174.679089][ T6779] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 175.016264][ T926] Bluetooth: hci0: command 0x1003 tx timeout [ 175.027404][ T927] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 175.309287][ T6805] geneve1: tun_chr_ioctl cmd 1074025672 [ 175.314915][ T6805] geneve1: ignored: set checksum enabled [ 175.324586][ T6807] geneve1: tun_chr_ioctl cmd 1074025673 [ 175.463893][ T6814] binder: Bad value for 'stats' [ 175.474368][ T6815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:660 [ 175.686716][ T6829] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.763635][ T6836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1666 [ 175.813730][ T6840] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 175.884635][ T6843] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.885010][ T6843] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.915285][ T6843] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.915587][ T6843] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.933110][ T6843] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.933415][ T6843] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.941287][ T6843] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.948866][ T6843] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.955856][ T6843] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.962126][ T6843] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.970861][ T6843] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.986547][ T6843] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.993096][ T6843] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.964217][ T6893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:820 [ 177.294279][ T6908] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 177.462401][ T6917] input: syz1 as /devices/virtual/input/input107 [ 177.761746][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 178.016363][ T36] kauditd_printk_skb: 1055 callbacks suppressed [ 178.016381][ T36] audit: type=1400 audit(1750324135.570:42662): avc: denied { set_context_mgr } for pid=6940 comm="syz.4.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 178.042984][ T36] audit: type=1400 audit(1750324135.570:42663): avc: denied { ioctl } for pid=6940 comm="syz.4.2108" path="/dev/binderfs/binder0" dev="binder" ino=181 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 178.071874][ T36] audit: type=1400 audit(1750324135.570:42664): avc: denied { map } for pid=6946 comm="syz.6.2109" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 178.098085][ T36] audit: type=1400 audit(1750324135.570:42665): avc: denied { read } for pid=6946 comm="syz.6.2109" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 178.128177][ T36] audit: type=1400 audit(1750324135.620:42666): avc: denied { read write } for pid=6949 comm="syz.1.2110" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.156188][ T6954] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 89) [ 178.156312][ T6954] rust_binder: Error while translating object. [ 178.183884][ T36] audit: type=1400 audit(1750324135.620:42667): avc: denied { read write open } for pid=6949 comm="syz.1.2110" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.188927][ T6954] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 178.190146][ T36] audit: type=1400 audit(1750324135.620:42668): avc: denied { map } for pid=6940 comm="syz.4.2108" path="/dev/binderfs/binder0" dev="binder" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 178.257235][ T6954] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1688 [ 178.286771][ T36] audit: type=1400 audit(1750324135.620:42669): avc: denied { read } for pid=6940 comm="syz.4.2108" path="/dev/binderfs/binder0" dev="binder" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 178.333728][ T36] audit: type=1400 audit(1750324135.650:42670): avc: denied { map } for pid=6949 comm="syz.1.2110" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.386432][ T36] audit: type=1400 audit(1750324135.650:42671): avc: denied { read } for pid=6940 comm="syz.4.2108" name="binder0" dev="binder" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 178.454678][ T6965] rust_binder: Error while translating object. [ 178.454704][ T6965] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 178.462893][ T6965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:698 [ 178.595809][ T6978] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.767264][ T6988] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:704 [ 178.882961][ T6990] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 179.048934][ T6998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:102 [ 179.283225][ T7004] binder: Bad value for 'defcontext' [ 179.306334][ T7007] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 179.315395][ T7012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:107 [ 179.331832][ T7008] rust_binder: Write failure EFAULT in pid:1698 [ 179.439616][ T7014] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.570033][ T7021] rust_binder: Write failure EINVAL in pid:113 [ 179.614636][ T7014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1702 [ 179.628594][ T7024] binder: Unknown parameter '' [ 179.755290][ T7027] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 179.755330][ T7027] rust_binder: Error in use_page_slow: EBUSY [ 179.791829][ T7027] rust_binder: use_range failure EBUSY [ 179.812673][ T7027] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 179.821963][ T7027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 179.841184][ T7027] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 179.858911][ T7035] SELinux: failed to load policy [ 179.875582][ T7027] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:115 [ 179.877697][ T7035] binder: Bad value for 'defcontext' [ 179.978137][ T7037] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 180.043176][ T7033] input: syz1 as /devices/virtual/input/input108 [ 180.532576][ T7055] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 181.360847][ T7077] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 181.400558][ T7077] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:720 [ 181.432988][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 181.502454][ T7089] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.504002][ T7089] rust_binder: Error in use_page_slow: ESRCH [ 181.511803][ T7089] rust_binder: use_range failure ESRCH [ 181.519068][ T7089] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 181.524645][ T7089] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 181.533557][ T7089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:873 [ 182.174732][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x4 [ 182.191621][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x2 [ 182.199161][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x3 [ 182.208569][ T305] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 182.254321][ T7103] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 182.320887][ T7105] fido_id[7105]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 182.582978][ T7109] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 182.583016][ T7109] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:735 [ 182.623881][ T7113] can0: slcan on ptm3. [ 182.677452][ T7113] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 182.677484][ T7113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144 [ 182.839078][ T7116] can0 (unregistered): slcan off ptm3. [ 183.037855][ T36] kauditd_printk_skb: 784 callbacks suppressed [ 183.037874][ T36] audit: type=1400 audit(1750324140.590:43456): avc: denied { remount } for pid=7127 comm="syz.6.2166" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 183.038080][ T7132] binder: Unknown parameter 'cont_u' [ 183.085967][ T36] audit: type=1400 audit(1750324140.630:43457): avc: denied { search } for pid=7133 comm="sed" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.153021][ T36] audit: type=1400 audit(1750324140.630:43458): avc: denied { read } for pid=7133 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.211600][ T36] audit: type=1400 audit(1750324140.670:43459): avc: denied { read open } for pid=7133 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.291299][ T36] audit: type=1400 audit(1750324140.670:43460): avc: denied { getattr } for pid=7133 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.376102][ T36] audit: type=1400 audit(1750324140.690:43461): avc: denied { search } for pid=7135 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.416298][ T36] audit: type=1400 audit(1750324140.690:43462): avc: denied { search } for pid=7135 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.473267][ T36] audit: type=1400 audit(1750324140.690:43463): avc: denied { search } for pid=7135 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.508229][ T926] Bluetooth: hci0: command 0x1003 tx timeout [ 183.514290][ T927] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 183.550516][ T7155] audit: audit_backlog=65 > audit_backlog_limit=64 [ 183.557141][ T7155] audit: audit_lost=380 audit_rate_limit=0 audit_backlog_limit=64 [ 183.611524][ T7157] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 183.662694][ T7160] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 183.831851][ T7169] binder: Unknown parameter 'contet' [ 183.969397][ T7174] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 184.025416][ T7174] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 184.053221][ T7174] input: syz0 as /devices/virtual/input/input111 [ 184.097965][ T7183] binder: Bad value for 'stats' [ 184.614532][ T7215] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 184.620960][ T7215] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 184.643965][ T7215] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:891 [ 184.690961][ T7215] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:891 [ 184.871804][ T7234] input: syz0 as /devices/virtual/input/input114 [ 185.176343][ T10] ================================================================== [ 185.184457][ T10] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0 [ 185.191335][ T10] Write of size 8 at addr 0000000000000098 by task kworker/0:1/10 [ 185.199247][ T10] [ 185.201585][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 185.201609][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.201621][ T10] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 185.201662][ T10] Call Trace: [ 185.201669][ T10] [ 185.201676][ T10] __dump_stack+0x21/0x30 [ 185.201696][ T10] dump_stack_lvl+0x10c/0x190 [ 185.201713][ T10] ? __cfi_dump_stack_lvl+0x10/0x10 [ 185.201731][ T10] print_report+0x3d/0x70 [ 185.201744][ T10] kasan_report+0x163/0x1a0 [ 185.201765][ T10] ? down_write+0x83/0x2a0 [ 185.201780][ T10] ? down_write+0x83/0x2a0 [ 185.201794][ T10] kasan_check_range+0x299/0x2a0 [ 185.201815][ T10] __kasan_check_write+0x18/0x20 [ 185.201830][ T10] down_write+0x83/0x2a0 [ 185.201844][ T10] ? __cfi_down_write+0x10/0x10 [ 185.201858][ T10] ? _raw_spin_lock+0x8c/0x120 [ 185.201874][ T10] ? __cfi__raw_spin_lock+0x10/0x10 [ 185.201892][ T10] ? mutex_unlock+0x8b/0x240 [ 185.201912][ T10] ? __cfi_mutex_unlock+0x10/0x10 [ 185.201932][ T10] rust_binderfs_remove_file+0x6c/0x110 [ 185.201956][ T10] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 185.201989][ T10] ? update_curr_dl_se+0x10c/0xb20 [ 185.202007][ T10] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 185.202023][ T10] ? update_curr+0x60d/0xc60 [ 185.202041][ T10] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 185.202071][ T10] ? update_load_avg+0x506/0x19a0 [ 185.202085][ T10] ? detach_entity_load_avg+0x7b0/0x7b0 [ 185.202105][ T10] ? dequeue_entity+0xa9c/0x1750 [ 185.202121][ T10] ? tg_unthrottle_up+0x980/0x980 [ 185.202136][ T10] ? kvm_sched_clock_read+0x15/0x30 [ 185.202150][ T10] ? sched_clock_noinstr+0xd/0x30 [ 185.202171][ T10] ? sched_clock+0x44/0x60 [ 185.202185][ T10] ? sched_clock_cpu+0x75/0x400 [ 185.202200][ T10] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 185.202216][ T10] ? sched_clock+0x44/0x60 [ 185.202230][ T10] ? __cfi_sched_clock_cpu+0x10/0x10 [ 185.202246][ T10] ? __kasan_check_write+0x18/0x20 [ 185.202262][ T10] ? __switch_to+0xc7b/0x1310 [ 185.202278][ T10] ? psi_group_change+0xb44/0x1130 [ 185.202294][ T10] ? __cfi___switch_to+0x10/0x10 [ 185.202311][ T10] ? _raw_spin_unlock+0x45/0x60 [ 185.202328][ T10] ? __switch_to_asm+0x3d/0x70 [ 185.202346][ T10] ? __schedule+0x1463/0x1f10 [ 185.202400][ T10] ? kick_pool+0xb9/0x550 [ 185.202421][ T10] process_scheduled_works+0x7d2/0x1020 [ 185.202442][ T10] worker_thread+0xc58/0x1250 [ 185.202463][ T10] kthread+0x2c7/0x370 [ 185.202482][ T10] ? __cfi_worker_thread+0x10/0x10 [ 185.202500][ T10] ? __cfi_kthread+0x10/0x10 [ 185.202519][ T10] ret_from_fork+0x64/0xa0 [ 185.202536][ T10] ? __cfi_kthread+0x10/0x10 [ 185.202554][ T10] ret_from_fork_asm+0x1a/0x30 [ 185.202574][ T10] [ 185.202580][ T10] ================================================================== [ 185.511269][ T10] Disabling lock debugging due to kernel taint [ 185.517693][ T10] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 185.525600][ T10] #PF: supervisor write access in kernel mode [ 185.531775][ T10] #PF: error_code(0x0002) - not-present page [ 185.537769][ T10] PGD 800000011ddf4067 P4D 800000011ddf4067 PUD 0 [ 185.544423][ T10] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 185.550584][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G B 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 185.565587][ T10] Tainted: [B]=BAD_PAGE [ 185.569935][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.580012][ T10] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ [ 185.596821][ T10] RIP: 0010:down_write+0x9a/0x2a0 [ 185.601880][ T10] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 9d 40 55 fc 4c 89 f7 be 08 00 00 00 e8 90 40 55 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 185.621602][ T10] RSP: 0018:ffffc900000a7500 EFLAGS: 00010256 [ 185.627698][ T10] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 185.635708][ T10] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900000a7520 [ 185.643718][ T10] RBP: ffffc900000a7598 R08: ffffc900000a7527 R09: 1ffff92000014ea4 [ 185.651805][ T10] R10: dffffc0000000000 R11: fffff52000014ea5 R12: dffffc0000000000 [ 185.659835][ T10] R13: 1ffff92000014ea0 R14: ffffc900000a7520 R15: 0000000000000000 [ 185.668059][ T10] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 185.677037][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.683640][ T10] CR2: 0000000000000098 CR3: 000000011c910000 CR4: 00000000003526b0 [ 185.691641][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000800 [ 185.699634][ T10] DR3: 0000000100000001 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 185.707631][ T10] Call Trace: [ 185.710932][ T10] [ 185.713880][ T10] ? __cfi_down_write+0x10/0x10 [ 185.718753][ T10] ? _raw_spin_lock+0x8c/0x120 [ 185.723540][ T10] ? __cfi__raw_spin_lock+0x10/0x10 [ 185.728764][ T10] ? mutex_unlock+0x8b/0x240 [ 185.733381][ T10] ? __cfi_mutex_unlock+0x10/0x10 [ 185.738446][ T10] rust_binderfs_remove_file+0x6c/0x110 [ 185.744050][ T10] _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860 [ 185.756852][ T10] ? update_curr_dl_se+0x10c/0xb20 [ 185.762004][ T10] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 185.768193][ T10] ? update_curr+0x60d/0xc60 [ 185.772902][ T10] ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10 [ 185.786312][ T10] ? update_load_avg+0x506/0x19a0 [ 185.791347][ T10] ? detach_entity_load_avg+0x7b0/0x7b0 [ 185.796900][ T10] ? dequeue_entity+0xa9c/0x1750 [ 185.801847][ T10] ? tg_unthrottle_up+0x980/0x980 [ 185.806897][ T10] ? kvm_sched_clock_read+0x15/0x30 [ 185.812122][ T10] ? sched_clock_noinstr+0xd/0x30 [ 185.817154][ T10] ? sched_clock+0x44/0x60 [ 185.821585][ T10] ? sched_clock_cpu+0x75/0x400 [ 185.826440][ T10] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 185.832508][ T10] ? sched_clock+0x44/0x60 [ 185.836926][ T10] ? __cfi_sched_clock_cpu+0x10/0x10 [ 185.842409][ T10] ? __kasan_check_write+0x18/0x20 [ 185.847610][ T10] ? __switch_to+0xc7b/0x1310 [ 185.852286][ T10] ? psi_group_change+0xb44/0x1130 [ 185.857485][ T10] ? __cfi___switch_to+0x10/0x10 [ 185.862458][ T10] ? _raw_spin_unlock+0x45/0x60 [ 185.867323][ T10] ? __switch_to_asm+0x3d/0x70 [ 185.872089][ T10] ? __schedule+0x1463/0x1f10 [ 185.876807][ T10] ? kick_pool+0xb9/0x550 [ 185.881148][ T10] process_scheduled_works+0x7d2/0x1020 [ 185.886708][ T10] worker_thread+0xc58/0x1250 [ 185.891397][ T10] kthread+0x2c7/0x370 [ 185.895468][ T10] ? __cfi_worker_thread+0x10/0x10 [ 185.900579][ T10] ? __cfi_kthread+0x10/0x10 [ 185.905174][ T10] ret_from_fork+0x64/0xa0 [ 185.909679][ T10] ? __cfi_kthread+0x10/0x10 [ 185.914276][ T10] ret_from_fork_asm+0x1a/0x30 [ 185.919043][ T10] [ 185.922148][ T10] Modules linked in: [ 185.926042][ T10] CR2: 0000000000000098 [ 185.930188][ T10] ---[ end trace 0000000000000000 ]--- [ 185.935660][ T10] RIP: 0010:down_write+0x9a/0x2a0 [ 185.940689][ T10] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 9d 40 55 fc 4c 89 f7 be 08 00 00 00 e8 90 40 55 fc 48 8b 44 24 20 b9 01 00 00 00 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03 [ 185.960305][ T10] RSP: 0018:ffffc900000a7500 EFLAGS: 00010256 [ 185.966460][ T10] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001 [ 185.974535][ T10] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900000a7520 [ 185.982504][ T10] RBP: ffffc900000a7598 R08: ffffc900000a7527 R09: 1ffff92000014ea4 [ 185.990571][ T10] R10: dffffc0000000000 R11: fffff52000014ea5 R12: dffffc0000000000 [ 185.998726][ T10] R13: 1ffff92000014ea0 R14: ffffc900000a7520 R15: 0000000000000000 [ 186.006731][ T10] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 186.015686][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.022381][ T10] CR2: 0000000000000098 CR3: 000000011c910000 CR4: 00000000003526b0 [ 186.030369][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000800 [ 186.038451][ T10] DR3: 0000000100000001 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 186.046430][ T10] Kernel panic - not syncing: Fatal exception [ 186.052744][ T10] Kernel Offset: disabled [ 186.057060][ T10] Rebooting in 86400 seconds..