last executing test programs: 54.738447138s ago: executing program 2 (id=522): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 54.62607166s ago: executing program 2 (id=525): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000200), 0x143102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000103, 0x0, 0x99f5}]}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r8, &(0x7f0000000080)=""/1, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000040)={0x10, 0x1, {0x52, 0x8001, 0x7f2, {}, {0x2, 0x5}, @const={0x7, {0x100, 0x959, 0xf3, 0x8}}}, {0x56, 0xbd94, 0x45, {0x4, 0x6}, {0x4, 0x610}, @rumble={0x134, 0xea}}}) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000001bc0)={0x0, 0x8000000000000001}) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x42c402, 0x0) ioctl$KVM_NMI(r9, 0xae9a) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000040)={{0x7, 0xf9, 0x8be, 0xffff}, 'syz0\x00', 0x2}) ioctl$UI_DEV_CREATE(r10, 0x5501) ioctl$UI_DEV_SETUP(r10, 0x405c5503, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x0, 0x0) 54.457791232s ago: executing program 2 (id=531): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d06}]}) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000005fc0)={0x2020}, 0x2020) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (rerun: 32) r8 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x3) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) r10 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) close_range(r13, r9, 0x0) (async, rerun: 32) ioctl$KVM_SET_GUEST_DEBUG(r13, 0x4048ae9b, &(0x7f0000000080)={0x1e0003, 0x0, [0x8, 0xff, 0xfffffffffffffffb, 0x3e00000000000000, 0x7fffffff, 0x7, 0x9, 0xa]}) (async, rerun: 32) ioctl$KVM_SET_REGS(r13, 0x4090ae82, &(0x7f0000000340)={[0x1, 0x80000000, 0x3, 0x1, 0x2000000001000, 0x2, 0x6, 0x5, 0x7dfffc, 0x800, 0x95a, 0xb81b, 0x9, 0x7fffffff, 0x0, 0x2], 0x80a0000, 0x2cf842}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer={0x40086303, r10}], 0x0, 0x0, 0x0}) (rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x7c, 0x0, &(0x7f0000000480)=[@free_buffer={0x40086303, r10}, @free_buffer={0x40086303, r8}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/4096, 0x1000, 0x0, 0x3d}, @flat=@weak_binder={0x77622a85, 0x20a, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/96, 0x60, 0x2, 0x23}}, &(0x7f0000000040)={0x0, 0x28, 0x40}}}, @clear_death, @clear_death], 0x0, 0x0, 0x0}) 54.205390796s ago: executing program 2 (id=538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000002c0)={0x0, 0xa, [@remote, @remote, @local, @dev, @link_local, @broadcast, @remote, @link_local, @random="db6576d74337", @random="bb8021e9da14"]}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0x4018aee2, &(0x7f0000000240)=""/90) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x5) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 53.965529428s ago: executing program 2 (id=545): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000001c0)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x294ac0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000200)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x27) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc018aec0, &(0x7f0000000040)={0x1, 0xffffffffffffffff, 0x1}) read(r1, &(0x7f0000000040)=""/235, 0xeb) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x701800, 0x0) ioctl$KVM_GET_REG_LIST(r9, 0xc008aeb0, &(0x7f0000000180)={0x4, [0x80000000, 0x15, 0x3, 0x7f]}) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r10, 0x40187013, &(0x7f0000000140)) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x30, r1, 0xb29e4000) r11 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r11, 0x5000940f, &(0x7f0000000540)={{r1}, "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"}) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) 53.80423246s ago: executing program 2 (id=550): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x100010, r0, 0xc5806000) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000100)=""/96) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0) (async) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2d, 'hugetlb'}, {0x2d, 'rlimit'}, {0x2b, 'io'}, {0x2b, 'hugetlb'}, {0x2d, 'cpuacct'}]}, 0x27) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$TIOCSBRK(r1, 0x5427) 38.753432913s ago: executing program 32 (id=550): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x100010, r0, 0xc5806000) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x84000, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000100)=""/96) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0) (async) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2d, 'hugetlb'}, {0x2d, 'rlimit'}, {0x2b, 'io'}, {0x2b, 'hugetlb'}, {0x2d, 'cpuacct'}]}, 0x27) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$TIOCSBRK(r1, 0x5427) 1.781614587s ago: executing program 0 (id=1264): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1ff) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x299, 0x0, 0x4}]}) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) read(r0, &(0x7f0000000040)=""/106, 0x6a) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1ff) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x299, 0x0, 0x4}]}) (async) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) (async) read(r0, &(0x7f0000000040)=""/106, 0x6a) (async) 1.703128028s ago: executing program 4 (id=1265): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000300)=&(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x6e0}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000000)={{r4, 0x4e95, 0x10000, 0x1, 0x9, 0x8, 0x7, 0x0, 0x2, 0xfff, 0x10, 0x4, 0x3, 0x5, 0x9}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001500)={0x44, 0x0, &(0x7f0000001380)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.58711767s ago: executing program 0 (id=1266): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_INIT(r1, 0x0, 0xfffffffffffffec0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x200, 0x20) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1.5096301s ago: executing program 3 (id=1267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000200)=0x1) close(0x3) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x5, &(0x7f0000000040)=[{0x1000, 0x4f, 0xac, 0x6}, {0x2, 0x3, 0xf, 0x200}, {0x4, 0xfb, 0xe, 0x100}, {0x8, 0x80, 0x6, 0x57fd}, {0x6, 0x0, 0x2, 0x97}]}) 1.508679691s ago: executing program 4 (id=1268): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x410000, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x100010, r1, 0x45809000) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000300)=@x86={0x3, 0x8, 0x2, 0x0, 0x0, 0x2, 0x2, 0xfc, 0xfd, 0x12, 0xfe, 0x0, 0x0, 0x4, 0xa, 0x0, 0x0, 0x0, 0x9, '\x00', 0x4, 0x8000000000002}) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x606c) read(r0, &(0x7f0000000040)=""/106, 0x6a) 1.508464691s ago: executing program 0 (id=1269): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) write$cgroup_devices(r2, &(0x7f00000002c0)=ANY=[], 0xffdd) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x0, 0x9}, {0x8, 0xa6f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x3, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r8, 0x0) write$selinux_load(r7, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "a5199fcdafdf3bb7cc4c8bc74a5ec2b0d07a2123b1ffffc2b5877ed2f506d04eb3c4c94cca1ae1060238c6ebf2a309079606000000000000167eaa250489cd9e7c133beb717a0e137489ab04"}, 0x5c) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000002c0)={[{0x2, 0x9, 0x0, 0xe, 0x85, 0x2, 0x6, 0x6, 0x9, 0x0, 0x6, 0x5, 0x80}, {0x1, 0x4, 0x2, 0x8, 0x7a, 0x10, 0x81, 0x6, 0x9, 0x4, 0x0, 0x4, 0x9}, {0x3, 0x7ad, 0x3, 0x0, 0x7f, 0x9, 0xfb, 0x0, 0x6, 0xe7, 0x2, 0xc1, 0x4}], 0x9}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000000100008004000000028811cbbeb63aed695731000000f601000001ff"]) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x65, 0x0, &(0x7f0000000140)="6efa86ba44c4dcef07b59db7e9a27f48a6e930da91c08c993e71a416eb2235d1314cf41411de9aa874429c871656ff38656d42c237a569b22dc9923150d6eb5b381125c2173cdb022eb5d8fc7a7df730ad34e08a536eaca88d851d6505f7b2b6831911631a"}) 1.351978082s ago: executing program 3 (id=1271): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000100)={0xdf, 0x0, 0x1000}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000e4d000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000091000040"]) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000000000)) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x498000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r5, 0x2000) 1.297673363s ago: executing program 4 (id=1272): ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000140)=0x3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x61, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b2"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) syz_clone3(&(0x7f0000000280)={0x243012400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.204102474s ago: executing program 4 (id=1273): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000240)={0x0, 0x8, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @remote, @remote]}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) (async) close_range(r2, r2, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x100000000) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x104, 0x0, &(0x7f0000000500)=[@acquire_done={0x40106309, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}, @fda={0x66646185, 0x3, 0x2, 0x6}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x1000}, @reply_sg={0x40486312, {0x80002, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x0, 0x8000000002}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/169, 0xa9, 0x0, 0x3b}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@weak_handle, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/97, 0x61, 0x1, 0x24}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x40}, @free_buffer], 0x0, 0x0, 0x0}) (rerun: 64) 1.167724855s ago: executing program 0 (id=1274): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r0, &(0x7f0000000040)=@access={'system_u:object_r:gpg_helper_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xfffffffffffffffc, 0x2b}, 0x4c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x1ff) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x43302, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) close(r3) mmap(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x0, 0x50, r2, 0x2000) 1.061493506s ago: executing program 0 (id=1275): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00001fb000/0x2000)=nil, 0x2000, 0x1000009, 0x4010, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) syz_clone3(&(0x7f00000013c0)={0x240040480, 0x0, &(0x7f00000011c0), 0x0, {0x25}, 0x0, 0x0, 0x0, &(0x7f0000001340)=[0x0], 0x1, {r3}}, 0x58) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3f) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x207, 0x0, 0x400}]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x2, 0x1, 0x6, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0x4e}, {0x4, 0x7}, {0x6000, 0x5}, 0x10, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)={0x5, 0x0, [{0x1b1, 0x0, 0x610}, {0x1fc, 0x0, 0x9}, {0x64d, 0x0, 0x5}, {0x98c, 0x0, 0x31}, {0x82b, 0x0, 0x8}]}) read$rfkill(r7, 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r8, 0x8004e500, &(0x7f0000000180)=r8) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) 1.019180927s ago: executing program 4 (id=1276): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0x1800000}, {}, {0x28}, {0xb1, 0x0, 0x0, 0x1ff}, {0x6}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) 833.390459ms ago: executing program 3 (id=1278): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0xffffffff) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x7, 0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000004c0)={0x4, 0x0, 0x7f}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r5, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r7, 0x0) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x4000) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r8, 0xb4807000) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x9) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRES8=r0]) 832.706379ms ago: executing program 4 (id=1279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x2, 0x3, 0xeffffdff, 0x0, [{0x0, 0x90}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0x7}, {0x77}, {0x0, 0x85, 0xbe}, {0x0, 0xc2}, {0x0, 0x2, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfa, '\x00', 0x42}, {0x0, 0x5}, {0x0, 0x50, 0x0, '\x00', 0x1}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x4e, 0x0, '\x00', 0xd}, {0x2, 0x2, 0x4, '\x00', 0x9}, {}, {0x1, 0xfd, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x70}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0x10, 0x83, 0xe, '\x00', 0x3}]}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x5, 0x3a, '/^', 0x3a, ']$@K-^{', 0x3a, './file0'}, 0x30) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 814.030309ms ago: executing program 1 (id=1280): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='1-2:5/', @ANYRESOCT], 0x31) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) close(0x3) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x10}], 0x6b, 0x0, &(0x7f0000000280)="27340dbe79e8af432ff4fa2360c88df5a04d8e7eeb14f8d0fab09d900a6bb5bc0f07887e054cb7693ae1fb57bdf9173c6f2dd3f6284401f0a87fa2166027d3eda04b0809ab53399e60c5169690bcaa67b7123d2729933e63d78255ba0d073c4c19e166677001adbe306baa"}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) 678.251081ms ago: executing program 1 (id=1281): ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000140)=0x3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x61, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b2"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) syz_clone3(&(0x7f0000000280)={0x243012400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 601.525142ms ago: executing program 3 (id=1282): openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x841, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(0x3) prctl$PR_SET_TIMERSLACK(0x1d, 0x8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100001fdbda61e06af12340000000e2fe0f00000000d94b"]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002400)={0x44, 0x0, &(0x7f0000002380)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000240)="eae7db1c"}) openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x841, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) close(0x3) (async) prctl$PR_SET_TIMERSLACK(0x1d, 0x8) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100001fdbda61e06af12340000000e2fe0f00000000d94b"]) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002400)={0x44, 0x0, &(0x7f0000002380)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000240)="eae7db1c"}) (async) 496.714974ms ago: executing program 1 (id=1283): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@weak_binder={0x77622a85, 0x81, 0x1}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}], 0xd9, 0x0, &(0x7f0000000340)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f613748409bc69ce5464f3770f5eb1a75e94932b0e57a5402fbc9223dcdb013f362a72178b5b3cb5b72a6159b62144860cd6d1151e43edc3a731da32edd231a0f752e9056f2a31d578bbd4a1440"}) 465.163954ms ago: executing program 3 (id=1284): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.current\x00', 0x26e1, 0x0) close(r1) syz_clone3(&(0x7f0000001ac0)={0x322004100, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000104000022000040"]) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x200, 0x20) ioctl$BLKRRPART(r4, 0x125f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.current\x00', 0x26e1, 0x0) (async) close(r1) (async) syz_clone3(&(0x7f0000001ac0)={0x322004100, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000104000022000040"]) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x200, 0x20) (async) ioctl$BLKRRPART(r4, 0x125f, 0x0) (async) 269.655986ms ago: executing program 1 (id=1285): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x489, 0x0, 0x1}]}) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=']) 194.972197ms ago: executing program 3 (id=1286): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x2}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 120.655888ms ago: executing program 1 (id=1287): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 69.552289ms ago: executing program 0 (id=1288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000000f70695000040"]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0xa, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000180)=0x7}) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@arm64={0x2, 0x8, 0x2, '\x00', 0x8005}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0xe0001}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x140000, 0x0, [0x0, 0xfff, 0x1a, 0x80, 0x5, 0x8001, 0x7, 0x8]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x45809000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009700)='/sys/kernel/oops_count', 0x40, 0x0) read$FUSE(r7, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0x8000000, 0x10c000}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r9, 0xc004ae0a, &(0x7f00000000c0)=""/8) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)) r10 = openat$binfmt_register(0xffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$binfmt_register(r10, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x3, 0x3a, '.^', 0x3a, '&]!/', 0x3a, './cgroup', 0x3a, [0x46, 0x46]}, 0x30) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r13, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x200000000002, 0x5, 0xfffffffffffffffd, 0x4002004c4, 0x1, 0x4, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xa2a, 0x1000000], 0x8080000, 0x1144}) 0s ago: executing program 1 (id=1289): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000040)=@x86={0x3b, 0x14, 0xe4, 0x0, 0x3, 0x8, 0x80, 0x91, 0xe, 0xf5, 0x1, 0x0, 0x0, 0x9, 0x5, 0x9, 0x9, 0x1, 0x7, '\x00', 0x80, 0x6d98}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2499) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001']) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. [ 23.367820][ T36] audit: type=1400 audit(1750330288.650:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.369413][ T281] cgroup: Unknown subsys name 'net' [ 23.390519][ T36] audit: type=1400 audit(1750330288.650:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.417970][ T36] audit: type=1400 audit(1750330288.680:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.418163][ T281] cgroup: Unknown subsys name 'devices' [ 23.617972][ T281] cgroup: Unknown subsys name 'hugetlb' [ 23.623607][ T281] cgroup: Unknown subsys name 'rlimit' [ 23.818479][ T36] audit: type=1400 audit(1750330289.100:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.841708][ T36] audit: type=1400 audit(1750330289.100:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.866605][ T36] audit: type=1400 audit(1750330289.100:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.877808][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.898521][ T36] audit: type=1400 audit(1750330289.180:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.924311][ T36] audit: type=1400 audit(1750330289.180:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.954547][ T36] audit: type=1400 audit(1750330289.230:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.980300][ T36] audit: type=1400 audit(1750330289.230:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.980464][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.797286][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.804383][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.811585][ T288] bridge_slave_0: entered allmulticast mode [ 24.818165][ T288] bridge_slave_0: entered promiscuous mode [ 24.824918][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.832187][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.839353][ T288] bridge_slave_1: entered allmulticast mode [ 24.845699][ T288] bridge_slave_1: entered promiscuous mode [ 24.984824][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.992052][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.999424][ T292] bridge_slave_0: entered allmulticast mode [ 25.005848][ T292] bridge_slave_0: entered promiscuous mode [ 25.017295][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.024356][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.031610][ T292] bridge_slave_1: entered allmulticast mode [ 25.038047][ T292] bridge_slave_1: entered promiscuous mode [ 25.059085][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.066201][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.073275][ T293] bridge_slave_0: entered allmulticast mode [ 25.079647][ T293] bridge_slave_0: entered promiscuous mode [ 25.093432][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.100568][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.107719][ T293] bridge_slave_1: entered allmulticast mode [ 25.113977][ T293] bridge_slave_1: entered promiscuous mode [ 25.137039][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.144094][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.151427][ T294] bridge_slave_0: entered allmulticast mode [ 25.157806][ T294] bridge_slave_0: entered promiscuous mode [ 25.164306][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.171385][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.178473][ T294] bridge_slave_1: entered allmulticast mode [ 25.184880][ T294] bridge_slave_1: entered promiscuous mode [ 25.250234][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.257940][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.265242][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.272489][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.363060][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.370155][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.377465][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.384514][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.394209][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.401488][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.408844][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.415932][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.424776][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.431862][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.439463][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.446657][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.472188][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.479807][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.488535][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.496103][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.503370][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.511123][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.518459][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.525988][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.541313][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.548417][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.560009][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.567102][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.597292][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.604416][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.612153][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.619215][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.646559][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.653697][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.663056][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.670141][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.680139][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.687221][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.706802][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.713875][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.758678][ T294] veth0_vlan: entered promiscuous mode [ 25.764856][ T293] veth0_vlan: entered promiscuous mode [ 25.775167][ T288] veth0_vlan: entered promiscuous mode [ 25.794647][ T292] veth0_vlan: entered promiscuous mode [ 25.804065][ T294] veth1_macvtap: entered promiscuous mode [ 25.812004][ T293] veth1_macvtap: entered promiscuous mode [ 25.821008][ T288] veth1_macvtap: entered promiscuous mode [ 25.844317][ T292] veth1_macvtap: entered promiscuous mode [ 25.878306][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.931902][ T310] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.931964][ T310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 25.978860][ T316] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.991121][ T317] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.021520][ T316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 26.045206][ T317] ======================================================= [ 26.045206][ T317] WARNING: The mand mount option has been deprecated and [ 26.045206][ T317] and is ignored by this kernel. Remove the mand [ 26.045206][ T317] option from the mount to silence this warning. [ 26.045206][ T317] ======================================================= [ 26.104687][ T317] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 26.213789][ T334] rust_binder: Error while translating object. [ 26.213820][ T334] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.220374][ T334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 26.222282][ T332] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 26.614405][ T350] SELinux: security_context_str_to_sid (sytesage_in_bytes) failed with errno=-22 [ 26.645598][ T349] SELinux: security_context_str_to_sid (sytesage_in_bytes) failed with errno=-22 [ 26.711339][ T356] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 26.734255][ T355] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 26.970297][ T376] input: syz0 as /devices/virtual/input/input4 [ 26.976871][ T380] syz.0.21: attempt to access beyond end of device [ 26.976871][ T380] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 27.139810][ T395] binder: Bad value for 'max' [ 27.182440][ T399] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 27.417412][ T415] SELinux: Context is not valid (left unmapped). [ 27.436342][ T417] random: crng reseeded on system resumption [ 27.502626][ T419] input: syz0 as /devices/virtual/input/input5 [ 27.551984][ T429] binder: Bad value for 'max' [ 27.559802][ T429] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 27.713924][ T433] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 27.768718][ T437] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.876864][ T439] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 27.943995][ T441] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 28.106882][ T444] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 28.106929][ T444] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 28.115051][ T444] rust_binder: Read failure Err(EFAULT) in pid:30 [ 28.412802][ T454] rust_binder: Error while translating object. [ 28.433259][ T454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 28.447303][ T454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:35 [ 28.482351][ T454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 28.541847][ T457] rust_binder: Write failure EFAULT in pid:37 [ 28.602428][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 28.602462][ T36] audit: type=1400 audit(1750330293.880:149): avc: denied { read } for pid=458 comm="syz.2.48" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.632510][ T36] audit: type=1400 audit(1750330293.880:150): avc: denied { open } for pid=458 comm="syz.2.48" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.663582][ T36] audit: type=1400 audit(1750330293.940:151): avc: denied { ioctl } for pid=458 comm="syz.2.48" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.691312][ T36] audit: type=1400 audit(1750330293.970:152): avc: denied { write } for pid=458 comm="syz.2.48" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.730443][ T466] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 28.732986][ T36] audit: type=1400 audit(1750330294.000:153): avc: denied { write } for pid=460 comm="syz.1.49" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.745776][ T465] binder: Bad value for 'max' [ 28.784819][ T470] binder: Unknown parameter '' [ 28.790508][ T470] binder: Unknown parameter '' [ 28.795776][ T470] binder: Unknown parameter '' [ 28.801262][ T470] binder: Unknown parameter '' [ 28.807617][ T36] audit: type=1400 audit(1750330294.090:154): avc: denied { mounton } for pid=468 comm="syz.1.52" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.853219][ T473] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 28.853474][ T474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 29.100213][ T495] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 29.137995][ T498] binder: Unknown parameter 'sats' [ 29.201620][ T502] kvm: Disabled LAPIC found during irq injection [ 29.223110][ T506] binder: Unknown parameter 'ma' [ 29.234388][ T507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47 [ 29.281891][ T502] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 29.300551][ T510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.365329][ T517] rust_binder: Write failure EFAULT in pid:69 [ 29.421258][ T36] audit: type=1400 audit(1750330294.700:155): avc: denied { load_policy } for pid=520 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 29.643516][ T526] input: syz1 as /devices/virtual/input/input11 [ 29.655723][ T36] audit: type=1400 audit(1750330294.930:156): avc: denied { write } for pid=524 comm="syz.3.72" name="pfkey" dev="proc" ino=4026532542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 29.695674][ T36] audit: type=1400 audit(1750330294.980:157): avc: denied { setcheckreqprot } for pid=531 comm="syz.3.74" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 29.758400][ T36] audit: type=1400 audit(1750330295.040:158): avc: denied { append } for pid=534 comm="syz.1.75" name="pfkey" dev="proc" ino=4026532362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 29.787629][ T535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 29.853415][ T542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52 [ 30.034575][ T554] binder: Unknown parameter '!' [ 30.034986][ T557] input: syz0 as /devices/virtual/input/input13 [ 30.064512][ T559] input: syz1 as /devices/virtual/input/input14 [ 30.089854][ T559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 30.106582][ T553] syz.1.81: attempt to access beyond end of device [ 30.106582][ T553] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 30.141270][ T564] rust_binder: Write failure EFAULT in pid:56 [ 30.309242][ T580] input: syz0 as /devices/virtual/input/input15 [ 30.381283][ T587] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:70 [ 30.507111][ T585] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 30.516615][ T585] rust_binder: Error in use_page_slow: EBUSY [ 30.532933][ T585] rust_binder: use_range failure EBUSY [ 30.543982][ T585] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 30.549926][ T585] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 30.557909][ T585] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 30.569600][ T585] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:87 [ 30.778407][ T598] rust_binder: Error in use_page_slow: ESRCH [ 30.786630][ T598] rust_binder: use_range failure ESRCH [ 30.792641][ T598] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 30.798176][ T598] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 30.806048][ T598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:78 [ 30.921170][ T600] tun0: tun_chr_ioctl cmd 1074025675 [ 30.935895][ T600] tun0: persist disabled [ 31.057240][ T611] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.109254][ T610] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 31.175610][ T611] rust_binder: Write failure EINVAL in pid:55 [ 31.342070][ T620] input: syz1 as /devices/virtual/input/input16 [ 31.460501][ T622] rust_binder: Got transaction with invalid offset. [ 31.460537][ T622] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.467454][ T622] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91 [ 31.653387][ T639] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 31.672103][ T639] rust_binder: Error in use_page_slow: EBUSY [ 31.685060][ T648] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 31.686397][ T639] rust_binder: use_range failure EBUSY [ 31.699488][ T639] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 31.705845][ T639] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 31.715013][ T639] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 31.737732][ T639] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:92 [ 31.868853][ T671] input: syz0 as /devices/virtual/input/input17 [ 31.928233][ T680] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.056201][ T695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 32.056371][ T694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:82 [ 32.106751][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.206408][ T724] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.206692][ T724] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 32.299880][ T731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:98 [ 32.475905][ T737] input: syz0 as /devices/virtual/input/input18 [ 32.494525][ T737] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 33.073745][ T745] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.093601][ T747] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.100423][ T747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121 [ 33.116509][ T750] binder: Unknown parameter 'cgroup.max.descendants' [ 33.320680][ T774] rust_binder: Error while translating object. [ 33.320715][ T774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 33.328020][ T774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:136 [ 33.352806][ T776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.362189][ T776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:138 [ 33.500527][ T790] binder: Bad value for 'defcontext' [ 33.506943][ T789] binder: Unknown parameter 'dont_hash' [ 33.622274][ T36] kauditd_printk_skb: 68 callbacks suppressed [ 33.622291][ T36] audit: type=1400 audit(1750330298.900:227): avc: denied { append } for pid=793 comm="syz.2.166" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 33.654611][ T799] binder: Bad value for 'stats' [ 33.661085][ T36] audit: type=1400 audit(1750330298.940:228): avc: denied { write } for pid=797 comm="syz.0.167" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.685089][ T36] audit: type=1400 audit(1750330298.940:229): avc: denied { map } for pid=797 comm="syz.0.167" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.707957][ T36] audit: type=1400 audit(1750330298.940:230): avc: denied { read } for pid=797 comm="syz.0.167" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 33.730755][ T36] audit: type=1400 audit(1750330298.940:231): avc: denied { open } for pid=797 comm="syz.0.167" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 33.767890][ T36] audit: type=1400 audit(1750330299.050:232): avc: denied { map } for pid=801 comm="syz.0.168" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 33.812954][ T36] audit: type=1400 audit(1750330299.090:233): avc: denied { write } for pid=807 comm="syz.2.170" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 33.847665][ T36] audit: type=1400 audit(1750330299.090:234): avc: denied { open } for pid=807 comm="syz.2.170" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 33.872605][ T36] audit: type=1400 audit(1750330299.110:235): avc: denied { read open } for pid=809 comm="syz.0.171" path="uts:[4026532403]" dev="nsfs" ino=4026532403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.903195][ T36] audit: type=1400 audit(1750330299.180:236): avc: denied { read write } for pid=812 comm="syz.2.172" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 33.905726][ T813] rtc_cmos 00:00: Alarms can be up to one day in the future [ 33.968662][ T812] rtc_cmos 00:00: Alarms can be up to one day in the future [ 34.039633][ T820] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 34.039725][ T820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:130 [ 34.048456][ T823] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.084929][ T826] tun0: tun_chr_ioctl cmd 1074025675 [ 34.097052][ T826] tun0: persist enabled [ 34.103062][ T827] tun0: tun_chr_ioctl cmd 1074025675 [ 34.110787][ T827] tun0: persist enabled [ 34.127706][ T833] binder: Unknown parameter '37+Us{^M9qJU4w' [ 34.176751][ T830] binder: Unknown parameter 'defcontext' [ 34.195664][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.202154][ T703] Bluetooth: hci0: command 0x1003 tx timeout [ 34.297068][ T849] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 34.297094][ T849] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 34.305759][ T849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:96 [ 34.505312][ T874] input: syz1 as /devices/virtual/input/input21 [ 34.515332][ T874] binder: Unknown parameter 's [ 34.515332][ T874] ' [ 34.523461][ T414] rtc_cmos 00:00: Alarms can be up to one day in the future [ 34.532598][ T414] rtc_cmos 00:00: Alarms can be up to one day in the future [ 34.541050][ T414] rtc_cmos 00:00: Alarms can be up to one day in the future [ 34.551601][ T414] rtc_cmos 00:00: Alarms can be up to one day in the future [ 34.559270][ T414] rtc rtc0: __rtc_set_alarm: err=-22 [ 34.807173][ T910] binder: Unknown parameter 'p<' [ 34.933661][ T917] binder: Bad value for 'defcontext' [ 35.118959][ T923] binder: Bad value for 'defcontext' [ 35.599570][ T936] syz.1.206 (936) used obsolete PPPIOCDETACH ioctl [ 35.800230][ T948] input: syz1 as /devices/virtual/input/input22 [ 36.001123][ T952] rust_binder: Failed to allocate buffer. len:65592, is_oneway:false [ 36.388412][ T964] rust_binder: Read failure Err(EAGAIN) in pid:182 [ 36.609959][ T976] binder: Bad value for 'stats' [ 36.932904][ T991] SELinux: ebitmap: truncated map [ 36.946531][ T991] SELinux: failed to load policy [ 36.986051][ T997] kvm: apic: phys broadcast and lowest prio [ 37.109366][ T1010] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 37.109394][ T1010] rust_binder: Read failure Err(EFAULT) in pid:203 [ 37.183485][ T1019] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:117 [ 37.280029][ T1033] PM: Enabling pm_trace changes system date and time during resume. [ 37.280029][ T1033] PM: Correct system time has to be restored manually after resume. [ 37.320327][ T1035] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 37.667456][ T1059] kvm: kvm [1058]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x882 [ 37.775801][ T1068] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.775828][ T1068] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223 [ 38.107863][ T1093] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 38.145657][ T1093] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 38.416812][ T1105] random: crng reseeded on system resumption [ 38.476552][ T1107] SELinux: policydb version -1747595209 does not match my version range 15-33 [ 38.485945][ T1107] SELinux: failed to load policy [ 38.672302][ T1110] deleting an unspecified loop device is not supported. [ 38.849234][ T1119] rust_binder: Write failure EINVAL in pid:228 [ 38.968848][ T1131] rust_binder: Write failure EINVAL in pid:219 [ 39.061532][ T1140] rust_binder: Read failure Err(EAGAIN) in pid:135 [ 39.062530][ T1143] rust_binder: Read failure Err(EAGAIN) in pid:135 [ 39.290977][ T1158] random: crng reseeded on system resumption [ 39.336194][ T1156] binder: Bad value for 'defcontext' [ 39.395246][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 39.395266][ T36] audit: type=1400 audit(1750330304.670:261): avc: denied { ioctl } for pid=1157 comm="syz.3.279" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 39.426508][ T1158] Restarting kernel threads ... done. [ 39.437524][ T36] audit: type=1400 audit(1750330304.720:262): avc: denied { write } for pid=1157 comm="syz.3.279" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 39.786392][ T1180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:246 [ 39.791844][ T1182] binder: Unknown parameter '' [ 39.871750][ T1192] binder: Unknown parameter '' [ 39.888763][ T1190] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.888798][ T1190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148 [ 39.946815][ T36] audit: type=1326 audit(1750330305.230:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1207 comm="syz.0.297" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efefd58e929 code=0x0 [ 39.990703][ T1212] binder: Unknown parameter 'dont_hash' [ 40.171532][ T1223] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 40.201137][ T1228] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:267 [ 40.241327][ T36] audit: type=1326 audit(1750330305.510:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1230 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21bf8e929 code=0x7ffc0000 [ 40.281085][ T36] audit: type=1326 audit(1750330305.510:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1230 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21bf8e929 code=0x7ffc0000 [ 40.313142][ T36] audit: type=1326 audit(1750330305.510:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1230 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd21bf8e929 code=0x7ffc0000 [ 40.336701][ T36] audit: type=1326 audit(1750330305.510:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1230 comm=BF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21bf8e929 code=0x7ffc0000 [ 40.375025][ T36] audit: type=1326 audit(1750330305.510:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1230 comm=BF exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd21bf8e929 code=0x7ffc0000 [ 40.398191][ T36] audit: type=1326 audit(1750330305.510:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1230 comm="$,@.-,$!" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd21bf8e929 code=0x7ffc0000 [ 40.467544][ T36] audit: type=1326 audit(1750330305.510:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1230 comm="$,@.-,$!" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd21bf8e929 code=0x7ffc0000 [ 40.473809][ T1239] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.493251][ T1239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:153 [ 40.640512][ T1270] binder: Unknown parameter '6dV!&dKk' [ 40.873366][ T1289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:289 [ 41.169451][ T1300] input: syz1 as /devices/virtual/input/input30 [ 41.383040][ T1327] binder: Bad value for 'stats' [ 41.483178][ T1343] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 41.495911][ T1342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:276 [ 41.630897][ T1360] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 41.653840][ T1360] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 41.760655][ T1371] input: syz0 as /devices/virtual/input/input32 [ 41.794652][ T1372] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 41.805536][ T1371] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 41.816087][ T1372] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 41.828222][ T1371] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 41.961699][ T1385] rust_binder: Write failure EFAULT in pid:312 [ 42.091410][ T1391] binder: Unknown parameter 'euid<00000000000000000000' [ 42.233643][ T1397] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:321 [ 42.354161][ T1415] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.389427][ T1419] KVM: debugfs: duplicate directory 1419-4 [ 42.416308][ T1421] input: syz1 as /devices/virtual/input/input34 [ 42.422673][ T1421] input: failed to attach handler leds to device input34, error: -6 [ 42.490244][ T1424] SELinux: security_context_str_to_sid (sytem_uGйz@tևEO.z!*z(r:'xY0j{k=9! VI֜6Y1ecqzq\Imvj}w=Fo']-^Lݘ{!wf9s`e^G}S,c^WޘqRrZ[1Ķɸűf) o|BpRɭpݛ- [ 42.490244][ T1424] ) failed with errno=-22 [ 42.610498][ T1438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:339 [ 42.610636][ T1437] SELinux: policydb magic number 0x44 does not match expected magic number 0xf97cff8c [ 42.629737][ T1437] SELinux: failed to load policy [ 42.680169][ T1444] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 42.841770][ T1458] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 42.853970][ T1458] rust_binder: Write failure EINVAL in pid:304 [ 42.886934][ T1464] SELinux: unknown common r [ 42.898147][ T1464] SELinux: failed to load policy [ 42.958702][ T1473] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.958730][ T1473] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.965611][ T1473] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.042781][ T1482] rust_binder: Write failure EINVAL in pid:315 [ 43.082933][ T1490] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 43.103601][ T1490] tap0: tun_chr_ioctl cmd 1074025678 [ 43.109500][ T1490] tap0: group set to 0 [ 43.397644][ T1510] cgroup: fork rejected by pids controller in /syz3 [ 43.465135][ T1543] binder: Unknown parameter 'seclacel' [ 43.481907][ T1551] SELinux: security_context_str_to_sid () failed with errno=-22 [ 43.572460][ T1586] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 43.596177][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.739089][ T1599] SELinux: failed to load policy [ 43.768735][ T1604] Bluetooth: hci1: Frame reassembly failed (-84) [ 43.775203][ T304] Bluetooth: hci1: Frame reassembly failed (-84) [ 43.797429][ T1607] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.897890][ T1617] binder: Unknown parameter '8%<.z}04Snec' [ 44.155184][ T1630] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 44.196778][ T1632] binder: Unknown parameter 'dont_hash' [ 44.308264][ T1639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:373 [ 44.321469][ T1642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:376 [ 44.366643][ T1647] input: syz1 as /devices/virtual/input/input37 [ 44.422476][ T1655] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 44.463395][ T1658] rust_binder: Error in use_page_slow: ESRCH [ 44.463417][ T1658] rust_binder: use_range failure ESRCH [ 44.469652][ T1658] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 44.475278][ T1658] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 44.483261][ T1658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:389 [ 44.540331][ T1660] binder: Unknown parameter 'appraise_type' [ 44.594735][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 44.594753][ T36] audit: type=1326 audit(1750330309.870:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1662 comm="syz.1.427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd21bf8e929 code=0x0 [ 44.677706][ T1677] rust_binder: Write failure EINVAL in pid:351 [ 44.991128][ T1697] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 45.115200][ T1701] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 45.132737][ T1702] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 45.625484][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.626543][ T1605] Bluetooth: hci0: command 0x1003 tx timeout [ 45.719703][ T36] audit: type=1326 audit(1750330311.000:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1723 comm="syz.2.444" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa82658e929 code=0x0 [ 45.785481][ T703] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 45.786109][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 45.841181][ T1728] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 46.225353][ T1746] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.231207][ T1746] rust_binder: Error in use_page_slow: ESRCH [ 46.237755][ T1746] rust_binder: use_range failure ESRCH [ 46.244066][ T1746] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 46.250107][ T1746] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 46.258649][ T1746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:373 [ 46.354265][ T1755] binder: Bad value for 'max' [ 46.402746][ T1764] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.456594][ T1770] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.530066][ T1772] can0: slcan on ptm0. [ 46.530674][ T1773] input: syz1 as /devices/virtual/input/input38 [ 46.546592][ T1772] rust_binder: got new transaction with bad transaction stack [ 46.547054][ T1772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:384 [ 46.563930][ T36] audit: type=1400 audit(1750330311.830:305): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 46.636428][ T1780] random: crng reseeded on system resumption [ 46.650347][ T36] audit: type=1400 audit(1750330311.840:306): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.699366][ T36] audit: type=1400 audit(1750330311.840:307): avc: denied { read } for pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=3293 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.757995][ T36] audit: type=1400 audit(1750330311.840:308): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3293 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.814892][ T36] audit: type=1400 audit(1750330311.840:309): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3293 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.853316][ T1791] input: syz1 as /devices/virtual/input/input39 [ 46.860036][ T1795] rust_binder: Error while translating object. [ 46.860063][ T1795] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 46.878556][ T1791] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 46.883524][ T1795] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:425 [ 46.909946][ T36] audit: type=1400 audit(1750330311.930:310): avc: denied { read } for pid=1781 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.955519][ T36] audit: type=1400 audit(1750330311.930:311): avc: denied { open } for pid=1781 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.981332][ T36] audit: type=1400 audit(1750330311.930:312): avc: denied { getattr } for pid=1781 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.205695][ T1810] binder: Unknown parameter 'dont_hash' [ 47.288399][ T1816] binder: Unknown parameter 'dont_hash' [ 47.361897][ T1769] can0 (unregistered): slcan off ptm0. [ 47.393351][ T1831] random: crng reseeded on system resumption [ 47.453590][ T1840] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 47.465865][ T1840] rust_binder: Write failure EINVAL in pid:350 [ 47.559678][ T1849] tun0: tun_chr_ioctl cmd 1074025676 [ 47.579028][ T1858] random: crng reseeded on system resumption [ 47.585502][ T1849] tun0: owner set to 0 [ 47.849647][ T1889] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.030839][ T1896] binder: Unknown parameter '93Ustatsh' [ 48.392377][ T1909] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 48.393590][ T1911] input: syz1 as /devices/virtual/input/input40 [ 48.412577][ T1911] SELinux: security_context_str_to_sid () failed with errno=-22 [ 48.464739][ T1921] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.518843][ T1922] input: syz1 as /devices/virtual/input/input41 [ 48.614862][ T1931] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:453 [ 48.626019][ T1933] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.640083][ T1933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:359 [ 48.735008][ T1942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:455 [ 48.812555][ T1953] SELinux: policydb string does not match my string SE Linux [ 48.830021][ T1953] SELinux: failed to load policy [ 48.835830][ T1954] binder: Bad value for 'stats' [ 48.912743][ T1959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 48.929362][ T1959] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 48.952608][ T1962] binder: Unknown parameter 'defcontextun' [ 49.159629][ T1968] rust_binder: Error while translating object. [ 49.159664][ T1968] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 49.166041][ T1968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:382 [ 49.265253][ T1979] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.274535][ T1979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:384 [ 49.285966][ T1979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:384 [ 49.398513][ T1982] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 49.552818][ T1997] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 49.568620][ T1997] rust_binder: Write failure EINVAL in pid:378 [ 49.569992][ T1997] input: syz0 as /devices/virtual/input/input44 [ 49.585944][ T1999] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 49.608011][ T1999] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 49.679711][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 49.679728][ T36] audit: type=1326 audit(1750330314.960:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2006 comm="syz.3.529" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe59f8e929 code=0x0 [ 49.740264][ T2010] input: syz1 as /devices/virtual/input/input45 [ 49.866164][ T2025] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.917895][ T2028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:416 [ 49.924766][ T2028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:416 [ 49.950142][ T36] audit: type=1400 audit(1750330315.230:333): avc: denied { map } for pid=2031 comm="syz.0.537" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.951012][ T2032] input: syz1 as /devices/virtual/input/input47 [ 49.963595][ T36] audit: type=1400 audit(1750330315.230:334): avc: denied { execute } for pid=2031 comm="syz.0.537" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 50.007234][ T2034] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.013397][ T2034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:385 [ 50.185078][ T2055] kvm: user requested TSC rate below hardware speed [ 50.280298][ T2069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:489 [ 50.282560][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.299273][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.309261][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.316774][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.324248][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.328678][ T2071] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 50.331731][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.332311][ T2071] rust_binder: Read failure Err(EFAULT) in pid:438 [ 50.339800][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.361283][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.368878][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.382813][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.395477][ T36] audit: type=1400 audit(1750330315.670:335): avc: denied { setattr } for pid=294 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.418883][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.435478][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.442935][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.465482][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.472950][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.495499][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.514796][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.522343][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.545540][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.553011][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.575475][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.589596][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.605518][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.613999][ T2088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:398 [ 50.625539][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.655478][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.673124][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.685484][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.705547][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.712998][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.735706][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.743151][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.750745][ T2095] rust_binder: Write failure EFAULT in pid:400 [ 50.759572][ T2095] binder: Bad value for 'max' [ 50.775475][ T305] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 50.799596][ T305] hid-generic 0001:0000:0000.0001: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 50.892643][ T2096] fido_id[2096]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 50.918205][ T2098] binder: Bad value for 'stats' [ 50.947067][ T2100] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.959450][ T2100] rust_binder: Write failure EINVAL in pid:457 [ 51.165258][ T2115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:411 [ 51.226039][ T2121] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 51.244885][ T2122] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 51.252439][ T2122] rust_binder: Write failure EINVAL in pid:494 [ 51.252640][ T2121] rust_binder: Write failure EINVAL in pid:494 [ 51.309113][ T2130] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:416 [ 51.331236][ T2130] tap0: tun_chr_ioctl cmd 2148553947 [ 51.399658][ T2134] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 51.455529][ T36] audit: type=1400 audit(1750330316.740:336): avc: denied { ioctl } for pid=2140 comm="syz.1.571" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 51.465163][ T2143] rust_binder: Write failure EFAULT in pid:476 [ 51.558799][ T2149] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.565147][ T2149] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:420 [ 51.608499][ T2147] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 51.619665][ T2147] rust_binder: Error in use_page_slow: EBUSY [ 51.636560][ T2147] rust_binder: use_range failure EBUSY [ 51.656828][ T2147] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 51.662396][ T2147] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 51.672115][ T2147] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 51.681752][ T2147] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:504 [ 51.960334][ T2164] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.988980][ T2164] rust_binder: Write failure EINVAL in pid:511 [ 51.989140][ T2166] rust_binder: Write failure EINVAL in pid:511 [ 52.089292][ T2155] rust_binder: Read failure Err(EFAULT) in pid:425 [ 52.365552][ T2190] tun0: tun_chr_ioctl cmd 1074025675 [ 52.384280][ T2190] tun0: persist enabled [ 52.395643][ T2190] tun0: tun_chr_ioctl cmd 1074025675 [ 52.400993][ T2190] tun0: persist enabled [ 52.405669][ T2190] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 52.558129][ T2208] binder: Unknown parameter 'eu' [ 52.680777][ T2199] rust_binder: Read failure Err(EFAULT) in pid:523 [ 52.778737][ T2226] binder: Unknown parameter '' [ 52.953351][ T2241] kvm: apic: phys broadcast and lowest prio [ 54.121168][ T2257] rust_binder: Read failure Err(EFAULT) in pid:504 [ 54.328455][ T2285] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 54.593711][ T288] cgroup: fork rejected by pids controller in /syz1 [ 54.655826][ T2302] binder: Bad value for 'max' [ 54.732933][ T2304] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 54.747223][ T2304] rust_binder: Write failure EINVAL in pid:514 [ 54.749465][ T36] audit: type=1326 audit(1750330320.030:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2303 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefd58e929 code=0x7ffc0000 [ 54.798124][ T304] bridge_slave_1: left allmulticast mode [ 54.814117][ T304] bridge_slave_1: left promiscuous mode [ 54.819556][ T36] audit: type=1326 audit(1750330320.030:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2303 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efefd58e929 code=0x7ffc0000 [ 54.822083][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.844063][ T36] audit: type=1326 audit(1750330320.030:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2303 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefd58e929 code=0x7ffc0000 [ 54.891081][ T304] bridge_slave_0: left allmulticast mode [ 54.903730][ T304] bridge_slave_0: left promiscuous mode [ 54.915504][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.945448][ T36] audit: type=1326 audit(1750330320.030:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2303 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efefd58e929 code=0x7ffc0000 [ 54.989224][ T36] audit: type=1326 audit(1750330320.030:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2303 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefd58e929 code=0x7ffc0000 [ 55.012773][ T36] audit: type=1326 audit(1750330320.030:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2303 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efefd58e929 code=0x7ffc0000 [ 55.037381][ T36] audit: type=1326 audit(1750330320.030:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2303 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefd58e929 code=0x7ffc0000 [ 55.060921][ T36] audit: type=1326 audit(1750330320.030:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2303 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efefd58e929 code=0x7ffc0000 [ 55.084547][ T36] audit: type=1326 audit(1750330320.030:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2303 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefd58e929 code=0x7ffc0000 [ 55.108169][ T36] audit: type=1400 audit(1750330320.270:346): avc: denied { mounton } for pid=2310 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 55.170790][ T304] veth1_macvtap: left promiscuous mode [ 55.176439][ T304] veth0_vlan: left promiscuous mode [ 55.278651][ T2310] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.285838][ T2310] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.294580][ T2310] bridge_slave_0: entered allmulticast mode [ 55.301546][ T2310] bridge_slave_0: entered promiscuous mode [ 55.326175][ T2310] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.326431][ T2313] SELinux: ebitmap: truncated map [ 55.337698][ T2310] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.340825][ T2313] SELinux: failed to load policy [ 55.358253][ T2310] bridge_slave_1: entered allmulticast mode [ 55.364832][ T2310] bridge_slave_1: entered promiscuous mode [ 55.444801][ T2310] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.451935][ T2310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.459297][ T2310] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.466375][ T2310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.533936][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.541524][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.554238][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.561365][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.576568][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.583679][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.628193][ T2310] veth0_vlan: entered promiscuous mode [ 55.642879][ T2310] veth1_macvtap: entered promiscuous mode [ 55.687136][ T2320] rust_binder: Write failure EINVAL in pid:494 [ 55.727970][ T2325] rust_binder: Read failure Err(EAGAIN) in pid:4 [ 55.734423][ T2325] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 55.840435][ T2329] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 55.840473][ T2329] rust_binder: Error in use_page_slow: EBUSY [ 55.851104][ T2329] rust_binder: use_range failure EBUSY [ 55.860361][ T2329] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 55.866385][ T2329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 55.874077][ T2329] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 55.887955][ T2329] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:8 [ 55.957630][ T2338] input: syz0 as /devices/virtual/input/input53 [ 55.978674][ T2336] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 55.978712][ T2336] rust_binder: Error in use_page_slow: EBUSY [ 55.992414][ T2336] rust_binder: use_range failure EBUSY [ 56.002054][ T2336] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 56.009618][ T2336] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 56.017569][ T2336] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 56.042705][ T2336] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:498 [ 56.396197][ T2358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:512 [ 56.692763][ T2372] rust_binder: Write failure EFAULT in pid:522 [ 56.773046][ T2376] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:24 [ 57.057183][ T2400] block device autoloading is deprecated and will be removed. [ 57.083522][ T2400] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.115589][ T2406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 57.267912][ T2415] binder: Bad value for 'defcontext' [ 57.333798][ T2421] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.334143][ T2421] random: crng reseeded on system resumption [ 57.438883][ T2424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:529 [ 58.048079][ T2449] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 58.105862][ T2449] binder: Bad value for 'max' [ 58.240693][ T2462] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 58.248891][ T2461] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 58.251009][ T2462] rust_binder: Write failure EINVAL in pid:532 [ 58.402038][ T2467] syz.1.680: attempt to access beyond end of device [ 58.402038][ T2467] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 58.422364][ T2467] binder: Unknown parameter 'RA$[^c97cٮj^g1 Xj-;a7XPDk#PwOȡŖ(a"jSSaɉ jΩO]2%.:\P' [ 58.482553][ T2470] SELinux: ebitmap: truncated map [ 58.509555][ T2470] SELinux: failed to load policy [ 58.540096][ T2475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:92 [ 58.601208][ T2480] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 58.626395][ T2480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:541 [ 59.064775][ T2486] binder: Unknown parameter '0xffffffffffffffff' [ 59.231422][ T2495] input: syz1 as /devices/virtual/input/input55 [ 59.724936][ T2517] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.726209][ T2517] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 59.756562][ T36] kauditd_printk_skb: 204 callbacks suppressed [ 59.756590][ T36] audit: type=1400 audit(1750330325.040:551): avc: denied { setattr } for pid=294 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.832202][ T36] audit: type=1400 audit(1750330325.040:552): avc: denied { setattr } for pid=294 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.889014][ T2520] audit: audit_backlog=65 > audit_backlog_limit=64 [ 59.896071][ T294] audit: audit_backlog=65 > audit_backlog_limit=64 [ 59.905505][ T2520] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 59.913286][ T2520] audit: backlog limit exceeded [ 59.913798][ T2310] audit: audit_backlog=65 > audit_backlog_limit=64 [ 59.925430][ T294] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 59.930212][ T36] audit: type=1400 audit(1750330325.040:553): avc: denied { setattr } for pid=294 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.933177][ T294] audit: backlog limit exceeded [ 60.340657][ T2545] binder: Bad value for 'stats' [ 60.935800][ T2557] kvm: user requested TSC rate below hardware speed [ 61.766787][ T2585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:595 [ 61.830448][ T2591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.877767][ T2593] rust_binder: Write failure EINVAL in pid:127 [ 62.482274][ T2613] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 62.501567][ T2613] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 62.748405][ T2621] SELinux: failed to load policy [ 62.796331][ T2623] binder: Unknown parameter '' [ 63.238258][ T2641] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 63.682321][ T2657] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.685116][ T2657] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.837351][ T2661] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.864303][ T2661] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.891198][ T2663] rust_binder: Write failure EINVAL in pid:579 [ 64.186322][ T2667] SELinux: failed to load policy [ 64.245634][ T2670] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 64.373066][ T2667] input: syz0 as /devices/virtual/input/input57 [ 64.437020][ T2667] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 64.694944][ T2682] random: crng reseeded on system resumption [ 64.765418][ T36] kauditd_printk_skb: 3240 callbacks suppressed [ 64.765436][ T36] audit: type=1400 audit(1750330330.040:3792): avc: denied { setattr } for pid=294 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.842345][ T36] audit: type=1400 audit(1750330330.050:3793): avc: denied { setattr } for pid=294 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.895112][ T36] audit: type=1400 audit(1750330330.050:3794): avc: denied { setattr } for pid=294 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.920071][ T36] audit: type=1400 audit(1750330330.050:3795): avc: denied { setattr } for pid=294 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.967888][ T294] audit: audit_backlog=65 > audit_backlog_limit=64 [ 64.974579][ T2688] audit: audit_backlog=65 > audit_backlog_limit=64 [ 64.985341][ T2688] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 64.985544][ T294] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 64.996098][ T2688] audit: backlog limit exceeded [ 65.007032][ T36] audit: type=1400 audit(1750330330.050:3796): avc: denied { setattr } for pid=294 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.319098][ T2704] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.497071][ T2713] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 65.622790][ T2704] rust_binder: Read failure Err(EFAULT) in pid:586 [ 65.625739][ T1311] bridge_slave_1: left allmulticast mode [ 65.645455][ T1311] bridge_slave_1: left promiscuous mode [ 65.675563][ T1311] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.694330][ T1311] bridge_slave_0: left allmulticast mode [ 65.700246][ T1311] bridge_slave_0: left promiscuous mode [ 65.707207][ T1311] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.848894][ T2727] rust_binder: Write failure EFAULT in pid:590 [ 65.876338][ T1311] veth1_macvtap: left promiscuous mode [ 65.888643][ T1311] veth0_vlan: left promiscuous mode [ 65.988110][ T2722] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.995206][ T2722] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.015527][ T2722] bridge_slave_0: entered allmulticast mode [ 66.022004][ T2722] bridge_slave_0: entered promiscuous mode [ 66.028359][ T2732] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.031935][ T2732] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.048277][ T2732] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.050653][ T2722] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.065597][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.074524][ T2722] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.082454][ T2722] bridge_slave_1: entered allmulticast mode [ 66.089019][ T2722] bridge_slave_1: entered promiscuous mode [ 66.333504][ T2722] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.340659][ T2722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.348026][ T2722] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.355080][ T2722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.426912][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.444005][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.482600][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.489725][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.528471][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.535594][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.699068][ T2722] veth0_vlan: entered promiscuous mode [ 66.755137][ T2722] veth1_macvtap: entered promiscuous mode [ 67.021020][ T2758] input: syz1 as /devices/virtual/input/input58 [ 67.386959][ T2781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 67.387436][ T2781] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.569490][ T2785] rust_binder: Error while translating object. [ 67.581588][ T2785] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.595438][ T2785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 67.990024][ T2791] rust_binder: Read failure Err(EFAULT) in pid:671 [ 68.105474][ T703] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.105498][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 68.383680][ T2813] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 68.407923][ T2807] binder: Unknown parameter 'sec' [ 68.476212][ T2806] geneve1: tun_chr_ioctl cmd 1074025672 [ 68.481834][ T2806] geneve1: ignored: set checksum enabled [ 68.562436][ T2820] kvm: apic: phys broadcast and lowest prio [ 68.717411][ T2830] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.071963][ T2844] rust_binder: Read failure Err(EAGAIN) in pid:28 [ 69.287484][ T2849] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.549189][ T2854] SELinux: failed to load policy [ 69.563660][ T2854] SELinux: policydb version -1509842413 does not match my version range 15-33 [ 69.579581][ T2854] SELinux: failed to load policy [ 69.587559][ T2854] binder: Unknown parameter 'bell' [ 69.733746][ T2860] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 69.733769][ T2860] rust_binder: Read failure Err(EFAULT) in pid:699 [ 69.779201][ T36] kauditd_printk_skb: 1000 callbacks suppressed [ 69.779222][ T36] audit: type=1400 audit(1750330335.060:4733): avc: denied { read write } for pid=2861 comm="syz.0.809" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 69.788694][ T2862] input: syz0 as /devices/virtual/input/input60 [ 69.806588][ T36] audit: type=1400 audit(1750330335.060:4734): avc: denied { read open } for pid=2861 comm="syz.0.809" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 69.845462][ T36] audit: type=1400 audit(1750330335.060:4735): avc: denied { map } for pid=2861 comm="syz.0.809" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 69.886716][ T36] audit: type=1400 audit(1750330335.060:4736): avc: denied { read } for pid=2861 comm="syz.0.809" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 69.920104][ T36] audit: type=1400 audit(1750330335.060:4737): avc: denied { read write } for pid=2861 comm="syz.0.809" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.960407][ T36] audit: type=1400 audit(1750330335.060:4738): avc: denied { read write open } for pid=2861 comm="syz.0.809" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.992402][ T36] audit: type=1400 audit(1750330335.070:4739): avc: denied { ioctl } for pid=2861 comm="syz.0.809" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.020793][ T36] audit: type=1400 audit(1750330335.070:4740): avc: denied { ioctl } for pid=2861 comm="syz.0.809" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.055339][ T36] audit: type=1400 audit(1750330335.070:4741): avc: denied { ioctl } for pid=2861 comm="syz.0.809" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.080455][ T36] audit: type=1400 audit(1750330335.140:4742): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=484 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.319720][ T2871] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 70.330181][ T2871] SELinux: failed to load policy [ 70.623845][ T2877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.775111][ T2886] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.792878][ T2886] rust_binder: Write failure EINVAL in pid:42 [ 70.881192][ T2888] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:707 [ 70.894184][ T2888] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.929584][ T2890] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.974404][ T2890] rust_binder: Error while translating object. [ 70.995534][ T2890] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 71.004019][ T2890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 71.140978][ T2894] rust_binder: Error while translating object. [ 71.174988][ T2894] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 71.192436][ T2894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:707 [ 71.637035][ T2912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.950821][ T2927] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:712 [ 72.162926][ T2933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.330238][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.367977][ T2942] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.681945][ T2949] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.683391][ T2949] SELinux: security_context_str_to_sid () failed with errno=-22 [ 72.851826][ T2952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.854474][ T2952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:615 [ 72.864832][ T2952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.876605][ T2953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 73.137616][ T2960] rust_binder: Error while translating object. [ 73.156929][ T2960] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.163167][ T2960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:615 [ 73.982544][ T2983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 74.031443][ T2986] rust_binder: Write failure EFAULT in pid:77 [ 74.288705][ T2987] rust_binder: Read failure Err(EFAULT) in pid:738 [ 74.345503][ T703] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.345515][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 74.795213][ T36] kauditd_printk_skb: 739 callbacks suppressed [ 74.795233][ T36] audit: type=1400 audit(1750330340.070:5482): avc: denied { read } for pid=3013 comm="syz.1.861" name="binder0" dev="binder" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 74.835483][ T36] audit: type=1400 audit(1750330340.070:5483): avc: denied { read open } for pid=3013 comm="syz.1.861" path="/dev/binderfs/binder0" dev="binder" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 74.867654][ T36] audit: type=1400 audit(1750330340.070:5484): avc: denied { ioctl } for pid=3013 comm="syz.1.861" path="/dev/binderfs/binder0" dev="binder" ino=55 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 74.896369][ T36] audit: type=1400 audit(1750330340.070:5485): avc: denied { set_context_mgr } for pid=3013 comm="syz.1.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 74.925440][ T36] audit: type=1400 audit(1750330340.090:5486): avc: denied { read write } for pid=2310 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.005437][ T36] audit: type=1400 audit(1750330340.090:5487): avc: denied { read write open } for pid=2310 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.085425][ T36] audit: type=1400 audit(1750330340.090:5488): avc: denied { ioctl } for pid=2310 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.154949][ T36] audit: type=1400 audit(1750330340.210:5489): avc: denied { read write } for pid=2310 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.203042][ T36] audit: type=1400 audit(1750330340.210:5490): avc: denied { read write open } for pid=2310 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.229236][ T36] audit: type=1400 audit(1750330340.210:5491): avc: denied { ioctl } for pid=2310 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.933105][ T3050] rust_binder: Read failure Err(EAGAIN) in pid:256 [ 76.044855][ T3055] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 76.329960][ T3069] SELinux: security_context_str_to_sid () failed with errno=-22 [ 76.433061][ T3071] binder: Bad value for 'max' [ 76.740630][ T3083] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 76.915463][ T3085] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.995768][ T3086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.098835][ T3092] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 77.240301][ T3097] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:661 [ 77.541347][ T3106] rust_binder: Error while translating object. [ 77.561912][ T3106] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 77.578495][ T3106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:274 [ 77.763899][ T3115] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 77.836772][ T3115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:667 [ 78.206966][ T3129] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.244008][ T3131] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 78.299760][ T3135] tun1: tun_chr_ioctl cmd 1074025676 [ 78.305437][ T3135] tun1: owner set to 0 [ 78.455701][ T3141] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 78.498345][ T3142] rust_binder: Write failure EINVAL in pid:110 [ 78.531095][ T3144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.599492][ T3146] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 78.804850][ T3154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:672 [ 78.912547][ T3156] binder: Bad value for 'stats' [ 79.066370][ T3161] __vm_enough_memory: pid: 3161, comm: syz.4.913, bytes: 70368744181760 not enough memory for the allocation [ 79.210378][ T3166] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 79.221321][ T3165] rust_binder: Write failure EINVAL in pid:282 [ 79.291078][ T3168] rust_binder: Error while translating object. [ 79.319913][ T3168] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 79.340061][ T3168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:121 [ 79.488319][ T3170] rust_binder: Error while translating object. [ 79.528228][ T3170] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.534499][ T3170] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:285 [ 79.691857][ T3189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.806915][ T36] kauditd_printk_skb: 788 callbacks suppressed [ 79.806936][ T36] audit: type=1400 audit(1750330345.060:6277): avc: denied { read write } for pid=2310 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.892002][ T36] audit: type=1400 audit(1750330345.090:6281): avc: denied { read write open } for pid=2310 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.970859][ T36] audit: type=1400 audit(1750330345.090:6282): avc: denied { ioctl } for pid=2310 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.995897][ T3206] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:683 [ 80.047212][ T36] audit: type=1400 audit(1750330345.130:6283): avc: denied { mounton } for pid=3188 comm="syz.0.922" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.133225][ T36] audit: type=1400 audit(1750330345.210:6284): avc: denied { read } for pid=3203 comm="syz.1.926" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 80.185481][ T36] audit: type=1400 audit(1750330345.210:6285): avc: denied { read open } for pid=3203 comm="syz.1.926" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 80.218918][ T3215] kvm: user requested TSC rate below hardware speed [ 80.249279][ T36] audit: type=1400 audit(1750330345.210:6286): avc: denied { read } for pid=3205 comm="syz.3.927" name="binder1" dev="binder" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 80.285468][ T36] audit: type=1400 audit(1750330345.210:6287): avc: denied { read open } for pid=3205 comm="syz.3.927" path="/dev/binderfs/binder1" dev="binder" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 80.313215][ T36] audit: type=1400 audit(1750330345.210:6288): avc: denied { read write } for pid=3205 comm="syz.3.927" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.336970][ T36] audit: type=1400 audit(1750330345.210:6289): avc: denied { read write open } for pid=3205 comm="syz.3.927" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 80.394465][ T3219] rust_binder: Read failure Err(EAGAIN) in pid:787 [ 80.394835][ T3217] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.486006][ T3223] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.702738][ T3237] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.739936][ T3237] rust_binder: Error while translating object. [ 80.763571][ T3237] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 80.785459][ T3237] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:692 [ 80.906049][ T3243] random: crng reseeded on system resumption [ 81.017188][ T3246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.089152][ T3246] kvm: Disabled LAPIC found during irq injection [ 81.151412][ T3246] rust_binder: Error while translating object. [ 81.151486][ T3246] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 81.156734][ T3252] rust_binder: Error in use_page_slow: ESRCH [ 81.178058][ T3246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:694 [ 81.182014][ T3252] rust_binder: use_range failure ESRCH [ 81.213623][ T3252] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 81.221517][ T3257] binder: Unknown parameter '01777777777777777777777' [ 81.240375][ T3252] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 81.240412][ T3252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:796 [ 81.417345][ T3263] binfmt_misc: register: failed to install interpreter file ./cgroup [ 81.912479][ T3283] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 81.912515][ T3283] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:806 [ 82.018316][ T3290] binder: Bad value for 'max' [ 82.498377][ T3309] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 82.500317][ T3309] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.606155][ T3318] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.612759][ T3315] kvm: kvm [3314]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 82.657824][ T3315] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.657859][ T3315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148 [ 82.838105][ T3327] binder: Unknown parameter 'dont_hash' [ 82.838871][ T3326] rust_binder: got new transaction with bad transaction stack [ 82.873494][ T3326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:820 [ 82.886786][ T3329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.595822][ T3355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:833 [ 83.727502][ T3358] kvm: kvm [3356]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4000000000000001 [ 83.929758][ T3366] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 84.024090][ T3368] rust_binder: Write failure EINVAL in pid:340 [ 84.224417][ T3374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.294274][ T3381] input: syz1 as /devices/virtual/input/input64 [ 84.334807][ T3382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:719 [ 84.427812][ T3382] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.819175][ T36] kauditd_printk_skb: 808 callbacks suppressed [ 84.819196][ T36] audit: type=1400 audit(1750330350.100:7098): avc: denied { read } for pid=3401 comm="syz.1.992" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.895440][ T36] audit: type=1400 audit(1750330350.130:7099): avc: denied { read open } for pid=3401 comm="syz.1.992" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.944113][ T36] audit: type=1400 audit(1750330350.130:7100): avc: denied { ioctl } for pid=3401 comm="syz.1.992" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.991031][ T36] audit: type=1400 audit(1750330350.150:7101): avc: denied { mounton } for pid=3405 comm="syz.0.993" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.034486][ T36] audit: type=1400 audit(1750330350.150:7102): avc: denied { read write } for pid=3401 comm="syz.1.992" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.058576][ T36] audit: type=1400 audit(1750330350.150:7103): avc: denied { read open } for pid=3401 comm="syz.1.992" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.083723][ T36] audit: type=1400 audit(1750330350.150:7104): avc: denied { ioctl } for pid=3401 comm="syz.1.992" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.109048][ T36] audit: type=1400 audit(1750330350.150:7105): avc: denied { ioctl } for pid=3401 comm="syz.1.992" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 85.137422][ T36] audit: type=1400 audit(1750330350.160:7106): avc: denied { read } for pid=3401 comm="syz.1.992" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 85.160877][ T36] audit: type=1400 audit(1750330350.160:7107): avc: denied { read open } for pid=3401 comm="syz.1.992" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 85.275933][ T3416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.333161][ T3419] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.333948][ T3416] rust_binder: got new transaction with bad transaction stack [ 85.355476][ T3416] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:723 [ 85.428186][ T3422] SELinux: policydb magic number 0x616e6572 does not match expected magic number 0xf97cff8c [ 85.465799][ T3422] SELinux: failed to load policy [ 85.708491][ T3445] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 85.708526][ T3445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:182 [ 85.853327][ T3452] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 86.052383][ T3463] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 86.076983][ T3450] rust_binder: Read failure Err(EFAULT) in pid:363 [ 86.449729][ T3495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 86.475457][ T3495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193 [ 86.562722][ T3505] SELinux: security_context_str_to_sid (0000000) failed with errno=-22 [ 86.604475][ T3507] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.638416][ T3510] rust_binder: Read failure Err(EAGAIN) in pid:374 [ 86.807257][ T3519] binder: Unknown parameter 'coj] vstem_u' [ 86.823364][ T3519] binder: Bad value for 'stats' [ 86.834866][ T3507] rust_binder: Read failure Err(EFAULT) in pid:749 [ 87.000080][ T3528] binder: Unknown parameter 'mAx' [ 87.317180][ T3541] binder: Unknown parameter 'dont_hash' [ 88.043525][ T3572] rust_binder: Write failure EFAULT in pid:766 [ 88.084081][ T3568] SELinux: failed to load policy [ 88.332802][ T3587] binder: Unknown parameter '' [ 88.516040][ T3600] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:897 [ 88.699381][ T3611] rust_binder: Write failure EINVAL in pid:900 [ 88.799179][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 88.816471][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 88.826626][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 88.836828][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 88.847885][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 88.857948][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 88.867976][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 88.877996][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 88.896708][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 88.915503][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 88.935359][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 88.945992][ T3618] SELinux: failed to load policy [ 88.954170][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 88.974023][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 88.983471][ T3618] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 89.003788][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 89.023592][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 89.046841][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 89.067148][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 89.079906][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 89.090030][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 89.102144][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 89.112281][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 89.122279][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 89.135513][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 89.156769][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 89.173170][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 89.194617][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 89.205175][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 89.231113][ T3620] SELinux: policydb version 1929785719 does not match my version range 15-33 [ 89.242061][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 89.266773][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 89.279120][ T3620] SELinux: failed to load policy [ 89.286469][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 89.308557][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 89.344316][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 89.367078][ T3615] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 89.452324][ T3626] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 89.506458][ T3628] random: crng reseeded on system resumption [ 89.672553][ T3636] binder: Unknown parameter 'dont_hash' [ 89.838847][ T36] kauditd_printk_skb: 819 callbacks suppressed [ 89.838866][ T36] audit: type=1400 audit(1750330355.120:7927): avc: denied { read write } for pid=3643 comm="syz.0.1072" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.897049][ T36] audit: type=1400 audit(1750330355.120:7928): avc: denied { read open } for pid=3643 comm="syz.0.1072" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.922942][ T3642] SELinux: ebitmap: truncated map [ 89.934614][ T3642] SELinux: failed to load policy [ 89.971035][ T36] audit: type=1400 audit(1750330355.130:7929): avc: denied { ioctl } for pid=3643 comm="syz.0.1072" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.015118][ T3654] input: syz0 as /devices/virtual/input/input68 [ 90.021487][ T36] audit: type=1400 audit(1750330355.130:7930): avc: denied { ioctl } for pid=3643 comm="syz.0.1072" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.057651][ T36] audit: type=1400 audit(1750330355.130:7931): avc: denied { ioctl } for pid=3643 comm="syz.0.1072" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.087024][ T36] audit: type=1400 audit(1750330355.130:7932): avc: denied { ioctl } for pid=3643 comm="syz.0.1072" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.123828][ T36] audit: type=1400 audit(1750330355.130:7933): avc: denied { ioctl } for pid=3643 comm="syz.0.1072" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.149077][ T36] audit: type=1400 audit(1750330355.130:7934): avc: denied { ioctl } for pid=3643 comm="syz.0.1072" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.174312][ T36] audit: type=1400 audit(1750330355.130:7935): avc: denied { ioctl } for pid=3643 comm="syz.0.1072" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.238231][ T293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 90.345575][ T3663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.698713][ T3681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:925 [ 90.732113][ T3681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:925 [ 90.824813][ T3686] random: crng reseeded on system resumption [ 90.962027][ T3696] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 90.964220][ T3696] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 91.085445][ T3701] rust_binder: Error while translating object. [ 91.104115][ T3701] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 91.129475][ T3701] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:242 [ 91.420234][ T3718] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 91.518133][ T3723] binder: Bad value for 'max' [ 91.873362][ T3739] rust_binder: Error while translating object. [ 91.873391][ T3739] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.879656][ T3739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:422 [ 91.891445][ T3740] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.003953][ T3746] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 92.718970][ T3781] rust_binder: Write failure EINVAL in pid:438 [ 92.772518][ T3786] SELinux: failed to load policy [ 92.889984][ T3789] Restarting kernel threads ... done. [ 92.957820][ T1311] bridge_slave_1: left allmulticast mode [ 92.963540][ T1311] bridge_slave_1: left promiscuous mode [ 92.990666][ T1311] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.009555][ T3797] input: syz1 as /devices/virtual/input/input70 [ 93.020755][ T1311] bridge_slave_0: left allmulticast mode [ 93.033207][ T1311] bridge_slave_0: left promiscuous mode [ 93.044604][ T3797] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 93.082305][ T1311] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.268981][ T1311] veth1_macvtap: left promiscuous mode [ 93.274580][ T1311] veth0_vlan: left promiscuous mode [ 93.512456][ T3815] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 93.597574][ T3818] SELinux: failed to load policy [ 93.694014][ T3814] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.708787][ T3814] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.723515][ T3814] bridge_slave_0: entered allmulticast mode [ 93.737347][ T3814] bridge_slave_0: entered promiscuous mode [ 93.745950][ T3814] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.753025][ T3814] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.781793][ T3814] bridge_slave_1: entered allmulticast mode [ 93.800633][ T3814] bridge_slave_1: entered promiscuous mode [ 94.168404][ T3814] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.175541][ T3814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.182863][ T3814] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.189990][ T3814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.352125][ T3847] input: syz0 as /devices/virtual/input/input71 [ 94.385756][ T3847] input: failed to attach handler leds to device input71, error: -6 [ 94.401591][ T1311] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.427014][ T1311] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.460292][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.467402][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.496763][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.503919][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.784963][ T3814] veth0_vlan: entered promiscuous mode [ 94.850864][ T36] kauditd_printk_skb: 903 callbacks suppressed [ 94.850884][ T36] audit: type=1400 audit(1750330360.130:8822): avc: denied { read write } for pid=2722 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.877122][ T3814] veth1_macvtap: entered promiscuous mode [ 94.915166][ T36] audit: type=1400 audit(1750330360.150:8823): avc: denied { sys_module } for pid=3814 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 94.965166][ T36] audit: type=1400 audit(1750330360.150:8824): avc: denied { sys_module } for pid=3814 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 95.021061][ T36] audit: type=1400 audit(1750330360.150:8825): avc: denied { sys_module } for pid=3814 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 95.059570][ T3875] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 95.081074][ T36] audit: type=1400 audit(1750330360.150:8826): avc: denied { read write open } for pid=2722 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.126005][ T36] audit: type=1400 audit(1750330360.170:8827): avc: denied { ioctl } for pid=2722 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.152120][ T36] audit: type=1400 audit(1750330360.230:8828): avc: denied { write } for pid=3873 comm="syz.4.1150" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 95.161728][ T3875] binder: Unknown parameter 'statsVrrgb{3Y:~' [ 95.176552][ T36] audit: type=1400 audit(1750330360.230:8829): avc: denied { write open } for pid=3873 comm="syz.4.1150" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 95.209841][ T36] audit: type=1400 audit(1750330360.240:8830): avc: denied { read } for pid=3873 comm="syz.4.1150" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 95.265444][ T36] audit: type=1400 audit(1750330360.240:8831): avc: denied { read open } for pid=3873 comm="syz.4.1150" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 95.743327][ T3910] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 97.186322][ T3972] input: syz0 as /devices/virtual/input/input74 [ 97.231345][ T3972] input: syz1 as /devices/virtual/input/input73 [ 97.285910][ T3972] SELinux: policydb version 51618937 does not match my version range 15-33 [ 97.294787][ T3972] SELinux: failed to load policy [ 97.436338][ T3971] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 97.721140][ T4001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:29 [ 97.827422][ T3988] rust_binder: Read failure Err(EFAULT) in pid:986 [ 98.054547][ T4015] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 98.326440][ T31] hid-generic 0000:0000:0000.0002: item fetching failed at offset 0/1 [ 98.364725][ T31] hid-generic 0000:0000:0000.0002: probe with driver hid-generic failed with error -22 [ 98.845886][ T4055] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 99.050203][ T4065] input: syz0 as /devices/virtual/input/input75 [ 99.458021][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.458344][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.469695][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.471607][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.479583][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.489913][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.494438][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.501596][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.509395][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.520885][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.522676][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.531192][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.538946][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.548822][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.552480][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.560513][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.573004][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.577495][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.584561][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.592493][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.607710][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.608064][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.614410][ T4080] rust_binder: Read failure Err(EFAULT) in pid:362 [ 99.615036][ T4086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.871060][ T36] kauditd_printk_skb: 980 callbacks suppressed [ 99.871082][ T36] audit: type=1400 audit(1750330365.150:9812): avc: denied { ioctl } for pid=4095 comm="syz.1.1222" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.925956][ T36] audit: type=1400 audit(1750330365.210:9813): avc: denied { read write } for pid=4098 comm="syz.4.1223" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.967174][ T36] audit: type=1400 audit(1750330365.210:9814): avc: denied { read write open } for pid=4098 comm="syz.4.1223" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 100.035419][ T36] audit: type=1400 audit(1750330365.210:9815): avc: denied { ioctl } for pid=4098 comm="syz.4.1223" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 100.095622][ T36] audit: type=1400 audit(1750330365.210:9816): avc: denied { ioctl } for pid=4098 comm="syz.4.1223" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 100.158604][ T36] audit: type=1400 audit(1750330365.220:9817): avc: denied { read write } for pid=4098 comm="syz.4.1223" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 100.215426][ T36] audit: type=1400 audit(1750330365.220:9818): avc: denied { read write open } for pid=4098 comm="syz.4.1223" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 100.260510][ T4112] rust_binder: Write failure EINVAL in pid:54 [ 100.285439][ T36] audit: type=1400 audit(1750330365.240:9819): avc: denied { read write } for pid=3814 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.346684][ T36] audit: type=1400 audit(1750330365.240:9820): avc: denied { read write open } for pid=3814 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.398749][ T4118] audit: audit_backlog=65 > audit_backlog_limit=64 [ 100.439997][ T4118] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 100.440036][ T4118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:912 [ 100.633782][ T4132] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 100.747637][ T4137] binder: Bad value for 'stats' [ 100.756522][ T4136] binder: Bad value for 'stats' [ 101.026679][ T4141] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 101.047190][ T4141] pim6reg0: linktype set to 769 [ 101.113204][ T4149] random: crng reseeded on system resumption [ 101.447110][ T4169] SELinux: failed to load policy [ 101.765654][ T109] SELinux: avc: seqno 2 < latest_notif 3 [ 101.982866][ T4203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:931 [ 102.562554][ T4240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:393 [ 102.741856][ T4247] SELinux: failed to load policy [ 102.829441][ T4249] SELinux: policydb version -845211227 does not match my version range 15-33 [ 102.861367][ T4249] SELinux: failed to load policy [ 102.945934][ T4254] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 102.975904][ T4254] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.390610][ T4269] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.618233][ T4290] rust_binder: Error while translating object. [ 103.618287][ T4290] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 103.624514][ T4290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:408 [ 103.975748][ T4309] SELinux: security_context_str_to_sid () failed with errno=-22 [ 104.160323][ T4315] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 104.237281][ T4313] binfmt_misc: register: failed to install interpreter file ./cgroup [ 104.310435][ T4317] ------------[ cut here ]------------ [ 104.315999][ T4317] WARNING: CPU: 0 PID: 4317 at mm/page_alloc.c:5157 __alloc_pages_noprof+0xe4/0x6c0 [ 104.325470][ T4317] Modules linked in: [ 104.329408][ T4317] CPU: 0 UID: 0 PID: 4317 Comm: syz.1.1289 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 104.343027][ T4317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.353175][ T4317] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 104.359159][ T4317] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d b4 7a ee 05 00 0f 85 c4 00 00 00 c6 05 a7 7a ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 104.379123][ T4317] RSP: 0018:ffffc900015e7680 EFLAGS: 00010246 [ 104.385330][ T4317] RAX: 0000000000000000 RBX: 1ffff920002bced4 RCX: 0000000000000000 [ 104.393422][ T4317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900015e7728 [ 104.401465][ T4317] RBP: ffffc900015e77a8 R08: ffffc900015e7727 R09: 0000000000000000 [ 104.409505][ T4317] R10: ffffc900015e7710 R11: fffff520002bcee5 R12: ffffc900015e76c0 [ 104.417572][ T4317] R13: 0000000000000013 R14: dffffc0000000000 R15: 0000000000000000 [ 104.425693][ T4317] FS: 00007fd45474f6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 104.434808][ T4317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.441463][ T4317] CR2: 0000200000002000 CR3: 000000013ad34000 CR4: 00000000003526b0 [ 104.449527][ T4317] DR0: 0000000000000008 DR1: 0000000000000008 DR2: 0000000000000006 [ 104.457842][ T4317] DR3: 0000000000000004 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.465975][ T4317] Call Trace: [ 104.469289][ T4317] [ 104.472272][ T4317] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 104.478076][ T4317] ? __kasan_slab_alloc+0x73/0x90 [ 104.483152][ T4317] ? hashtab_init+0xdb/0x1f0 [ 104.487866][ T4317] ___kmalloc_large_node+0x9c/0x1d0 [ 104.493173][ T4317] ? ebitmap_read+0x21d/0x990 [ 104.497950][ T4317] ? hashtab_init+0xdb/0x1f0 [ 104.502594][ T4317] __kmalloc_large_node_noprof+0x1e/0xe0 [ 104.508324][ T4317] ? hashtab_init+0xdb/0x1f0 [ 104.512966][ T4317] __kmalloc_noprof+0x26d/0x450 [ 104.517901][ T4317] hashtab_init+0xdb/0x1f0 [ 104.522361][ T4317] ? policydb_read+0x86f/0x28c0 [ 104.527290][ T4317] symtab_init+0x44/0x70 [ 104.531580][ T4317] policydb_read+0x8fe/0x28c0 [ 104.536353][ T4317] ? kasan_save_alloc_info+0x40/0x50 [ 104.541676][ T4317] ? __cfi_policydb_read+0x10/0x10 [ 104.546882][ T4317] ? security_load_policy+0x128/0x12f0 [ 104.552393][ T4317] security_load_policy+0x162/0x12f0 [ 104.557801][ T4317] ? irqentry_exit+0x4a/0x60 [ 104.562446][ T4317] ? exc_page_fault+0x66/0xc0 [ 104.567213][ T4317] ? asm_exc_page_fault+0x2b/0x30 [ 104.568705][ T4318] binder: Bad value for 'max' [ 104.572274][ T4317] ? __cfi_security_load_policy+0x10/0x10 [ 104.582755][ T4317] ? rep_movs_alternative+0x4a/0xa0 [ 104.588039][ T4317] sel_write_load+0x298/0x5e0 [ 104.592766][ T4317] ? futex_wait+0x288/0x540 [ 104.597359][ T4317] ? __cfi_sel_write_load+0x10/0x10 [ 104.602753][ T4317] ? __cfi_futex_wait+0x10/0x10 [ 104.607685][ T4317] ? bpf_lsm_file_permission+0xd/0x20 [ 104.613110][ T4317] ? __cfi_sel_write_load+0x10/0x10 [ 104.618400][ T4317] vfs_write+0x3c0/0xe80 [ 104.622691][ T4317] ? __cfi_vfs_write+0x10/0x10 [ 104.627564][ T4317] ? __kasan_check_write+0x18/0x20 [ 104.632728][ T4317] ? mutex_lock+0x92/0x1c0 [ 104.637240][ T4317] ? __cfi_mutex_lock+0x10/0x10 [ 104.642153][ T4317] ? __fget_files+0x2c5/0x340 [ 104.646924][ T4317] ksys_write+0x141/0x250 [ 104.651302][ T4317] ? xfd_validate_state+0x68/0x150 [ 104.656512][ T4317] ? __cfi_ksys_write+0x10/0x10 [ 104.661498][ T4317] ? __kasan_check_write+0x18/0x20 [ 104.666715][ T4317] ? fpregs_restore_userregs+0x11d/0x260 [ 104.672420][ T4317] __x64_sys_write+0x7f/0x90 [ 104.677113][ T4317] x64_sys_call+0x271c/0x2ee0 [ 104.681848][ T4317] do_syscall_64+0x58/0xf0 [ 104.686348][ T4317] ? clear_bhb_loop+0x35/0x90 [ 104.691092][ T4317] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 104.697066][ T4317] RIP: 0033:0x7fd45398e929 [ 104.701531][ T4317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.721244][ T4317] RSP: 002b:00007fd45474f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.729756][ T4317] RAX: ffffffffffffffda RBX: 00007fd453bb5fa0 RCX: 00007fd45398e929 [ 104.737816][ T4317] RDX: 0000000000002499 RSI: 0000200000000000 RDI: 0000000000000003 [ 104.745871][ T4317] RBP: 00007fd453a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 104.753887][ T4317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.761942][ T4317] R13: 0000000000000000 R14: 00007fd453bb5fa0 R15: 00007ffc89c40b98 [ 104.769989][ T4317] [ 104.773042][ T4317] ---[ end trace 0000000000000000 ]--- [ 104.782884][ T4317] SELinux: failed to load policy [ 104.915125][ T36] kauditd_printk_skb: 982 callbacks suppressed [ 104.915144][ T36] audit: type=1400 audit(1750330370.190:10783): avc: denied { read write } for pid=2722 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.962999][ T36] audit: type=1400 audit(1750330370.190:10784): avc: denied { read write open } for pid=2722 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.991314][ T36] audit: type=1400 audit(1750330370.190:10785): avc: denied { ioctl } for pid=2722 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.045490][ T36] audit: type=1400 audit(1750330370.310:10786): avc: denied { read write } for pid=292 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.070492][ T36] audit: type=1400 audit(1750330370.310:10787): avc: denied { read write open } for pid=292 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.112508][ T36] audit: type=1400 audit(1750330370.320:10788): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.217560][ T36] audit: type=1400 audit(1750330370.500:10789): avc: denied { read write } for pid=293 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.241847][ T36] audit: type=1400 audit(1750330370.500:10790): avc: denied { read write open } for pid=293 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.267452][ T36] audit: type=1400 audit(1750330370.500:10791): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1