last executing test programs: 4m16.104538059s ago: executing program 0 (id=1356): prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0x7}) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) 4m16.08412992s ago: executing program 0 (id=1357): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x20) ioctl$TCSETAF(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "823af9032ae9da23"}) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x90301) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) mount$binderfs(&(0x7f00000021c0), &(0x7f0000002200)='./binderfs\x00', &(0x7f0000002240), 0x0, 0x0) read(r0, &(0x7f0000000080)=""/155, 0x9b) 4m15.932752832s ago: executing program 0 (id=1360): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x2, 0x3a, '/selinux/policy\x00', 0x3a, '/selinux/policy\x00', 0x3a, './file0', 0x3a, [0x46, 0x43, 0x4f, 0x4f, 0x46, 0x0, 0x43, 0x5c]}, 0x4f) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x63761469321c3ff0, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x50, 0x0, &(0x7f0000000340)=[@enter_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/184, 0xb8, 0x4, 0x1c}, @fda={0x66646185, 0x2, 0x2, 0x8}, @fda={0x66646185, 0x0, 0x2, 0x8}}, &(0x7f0000000200)={0x0, 0x28, 0x48}}}], 0xaa, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x408) write$FUSE_POLL(r0, &(0x7f0000000440)={0x18, 0xfffffffffffffff5, r1, {0x101}}, 0x18) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000662a000040000000000400000000000000"]) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$vga_arbiter(r7, &(0x7f0000000280)=ANY=[@ANYBLOB='tryl'], 0xc) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write(r8, &(0x7f0000000080)="01", 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom0\x00', 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 4m15.588658897s ago: executing program 0 (id=1362): prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x210002, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x210002, 0x0) (async) 4m15.498348689s ago: executing program 0 (id=1363): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4602, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000080)={0xd5, 0x0, 0x355c69cd7fd13100}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0xa, 0x0, 0x8, 0x8, 0x40, 0x2, 0x0, 0xc1, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x40, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xe6e42001, 0x0, 0x0, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0x11, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0x0, 0x6, 0x5, 0xfd, 0x3, 0x0, 0x0, 0xfe}, {0xeeef0000, 0xdddd0000, 0xe, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1, 0xfffffffffffffffe]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x410202, 0x142) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x1ff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000400)={0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) close(r6) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000100)) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x56, 0x20, 0xe}, 0x19) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000280)=0x10) 4m15.072023445s ago: executing program 0 (id=1366): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x143202, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffeffffffff7fb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000001000040"]) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x13, r0, 0x4758f000) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x503000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYRES8=r8]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r10, 0x80045400, &(0x7f0000000040)) mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wake_unlock', 0x141882, 0x193) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r12, 0x400455c8, 0x0) write(r11, &(0x7f0000001600)="d93f", 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008a04"]) write$ppp(r4, &(0x7f0000000080)="902814ef84ba0d39582beef28879afb690c3e5d9aebcd53b557a9d4918543c284ab7be0d4fb43e3744f33ac7724f6a61fe3a0e883bc3f19923044fc3c567e43c6cc8fb55d483432cceef5a48dfac41d393cca79ac3e8", 0x56) 4m0.004779117s ago: executing program 32 (id=1366): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x143202, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffeffffffff7fb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000001000040"]) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x13, r0, 0x4758f000) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x503000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYRES8=r8]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r10, 0x80045400, &(0x7f0000000040)) mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wake_unlock', 0x141882, 0x193) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r12, 0x400455c8, 0x0) write(r11, &(0x7f0000001600)="d93f", 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008a04"]) write$ppp(r4, &(0x7f0000000080)="902814ef84ba0d39582beef28879afb690c3e5d9aebcd53b557a9d4918543c284ab7be0d4fb43e3744f33ac7724f6a61fe3a0e883bc3f19923044fc3c567e43c6cc8fb55d483432cceef5a48dfac41d393cca79ac3e8", 0x56) 3m10.266883042s ago: executing program 4 (id=2175): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0xfeff) 3m10.124955444s ago: executing program 4 (id=2179): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x7d) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x48842, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') 3m9.975426967s ago: executing program 4 (id=2182): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x4b301, 0x0) write(r1, &(0x7f0000000300)="6e3a0ed5460b63402ab2195a3216bcb85c6c41dcae414e6b441abd66135b77d6f75f0ea999e2", 0x26) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000280)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x111f}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x130, 0x0, &(0x7f0000000680)=[@request_death, @decrefs={0x40046307, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@fda={0x66646185, 0x7, 0x5, 0x33}, @flat=@weak_binder={0x77622a85, 0x1, 0x3}, @fda={0x66646185, 0x8, 0x0, 0x21}}, &(0x7f0000000140)={0x0, 0x20, 0x38}}}, @increfs={0x40046304, 0x3}, @clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x2}, @dead_binder_done, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/89, 0x59, 0x1, 0x20}, @fda={0x66646185, 0x7, 0x2, 0x2f}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/36, 0x24, 0x2, 0x26}}, &(0x7f0000000400)={0x0, 0x28, 0x48}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@binder={0x73622a85, 0x1000, 0x2}, @fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x10a, 0x1}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}, @dead_binder_done], 0x0, 0x0, 0x0}) (async) close(r0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) (rerun: 64) 3m9.856412859s ago: executing program 4 (id=2186): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x195800, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) write$tcp_congestion(r1, &(0x7f0000000000)='dctcp\x00', 0x6) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x1}, @register_looper], 0x50, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) syz_clone3(&(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, &(0x7f0000002980)=[0x0], 0x1}, 0x58) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) 3m9.696854871s ago: executing program 4 (id=2193): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2440, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000100)={0x4b29241a6eaffd29, 0x8080000, 0x401, 0x1, 0x8001}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r7, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x4000, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x100000000000, 0x5]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x6, 0xffff, 0x0, 0xe18e, 0x5, 0x8, 0x1, 0x3, 0x2, 0x6fb4, 0x328, 0x6, 0x2, 0x7, 0x5, 0x4], 0xdddd1000, 0x40}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x4c) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r10, 0x40187013, &(0x7f0000000140)) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_freezer_state(r11, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r12, &(0x7f0000000040)='FROZEN\x00', 0x7) 3m9.577022263s ago: executing program 4 (id=2198): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x181, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x345}]}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000df000000170101c0002a03453bfdbbe034b3407a3566000000ed000080ffffffffde67845cc7553e8a0c3aa54b159a2ca4476a523a08b69776f02e521864a48aa08e8e570edba1e5b4ac8846f6e2e8bc882dd8b70ec82f72ff35a92418cfebb5237b705c805eae0b0ef166cd8b0f886d"]) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)={0x2}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x400c330d, &(0x7f0000000140)={0xc1b}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000080)={{0x1000, 0xeeee8000, 0xd, 0x10, 0x7, 0x0, 0x0, 0x2, 0x1, 0x5, 0x1, 0x2}, {0xeeee0000, 0x8080000, 0x9, 0x4, 0x1, 0x10, 0xcc, 0x1, 0x6, 0x0, 0x7, 0x6}, {0x5000, 0x0, 0x0, 0x8d, 0x9, 0x1, 0xff, 0x54, 0x1, 0x9, 0x80, 0x2}, {0xeeef0000, 0x4000, 0xa, 0x7, 0x6, 0x2, 0x5, 0xe, 0x80, 0x1, 0x0, 0x5}, {0xf000, 0x0, 0x3, 0x7, 0x7, 0x2, 0x7, 0x81, 0xc, 0x6, 0x3}, {0x100002, 0x2000, 0x3, 0x1, 0x0, 0x0, 0x8, 0x8, 0x4a, 0x2, 0xff, 0xb}, {0x4000, 0x1000, 0xb, 0x3, 0x6, 0x1, 0x3, 0xb, 0x1, 0x36, 0x8d, 0x6}, {0xeeee0000, 0x8080000, 0x6, 0x6, 0x3, 0x0, 0x3, 0x6, 0xc, 0xf, 0xa, 0x2}, {0x2000}, {0x6000, 0x4}, 0x0, 0x0, 0x2, 0x0, 0xe, 0x800, 0xeeef0000, [0x9, 0x4ae8, 0x3, 0x6]}) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f00000001c0)=@other={0xa0b, &(0x7f0000000000)=0x9}) 2m54.495407995s ago: executing program 33 (id=2198): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x181, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x345}]}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000df000000170101c0002a03453bfdbbe034b3407a3566000000ed000080ffffffffde67845cc7553e8a0c3aa54b159a2ca4476a523a08b69776f02e521864a48aa08e8e570edba1e5b4ac8846f6e2e8bc882dd8b70ec82f72ff35a92418cfebb5237b705c805eae0b0ef166cd8b0f886d"]) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)={0x2}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x400c330d, &(0x7f0000000140)={0xc1b}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000080)={{0x1000, 0xeeee8000, 0xd, 0x10, 0x7, 0x0, 0x0, 0x2, 0x1, 0x5, 0x1, 0x2}, {0xeeee0000, 0x8080000, 0x9, 0x4, 0x1, 0x10, 0xcc, 0x1, 0x6, 0x0, 0x7, 0x6}, {0x5000, 0x0, 0x0, 0x8d, 0x9, 0x1, 0xff, 0x54, 0x1, 0x9, 0x80, 0x2}, {0xeeef0000, 0x4000, 0xa, 0x7, 0x6, 0x2, 0x5, 0xe, 0x80, 0x1, 0x0, 0x5}, {0xf000, 0x0, 0x3, 0x7, 0x7, 0x2, 0x7, 0x81, 0xc, 0x6, 0x3}, {0x100002, 0x2000, 0x3, 0x1, 0x0, 0x0, 0x8, 0x8, 0x4a, 0x2, 0xff, 0xb}, {0x4000, 0x1000, 0xb, 0x3, 0x6, 0x1, 0x3, 0xb, 0x1, 0x36, 0x8d, 0x6}, {0xeeee0000, 0x8080000, 0x6, 0x6, 0x3, 0x0, 0x3, 0x6, 0xc, 0xf, 0xa, 0x2}, {0x2000}, {0x6000, 0x4}, 0x0, 0x0, 0x2, 0x0, 0xe, 0x800, 0xeeef0000, [0x9, 0x4ae8, 0x3, 0x6]}) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, &(0x7f00000001c0)=@other={0xa0b, &(0x7f0000000000)=0x9}) 2m51.824303276s ago: executing program 3 (id=2360): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x7a) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x7ffd, 0x7, 0x0, 0x1c, 0x5, 0x2, 0xd, 0x2, 0xf9, 0x1, 0x80, 0x9, 0x2}, {0x6, 0x80, 0x8, 0xc4, 0x9, 0x7, 0x8, 0x9, 0x7, 0xff, 0x0, 0x81}, {0xe2a5, 0xd, 0x11, 0x9, 0x2, 0x6, 0x9, 0x45, 0x7f, 0x6, 0x56, 0x7, 0x100}], 0x4}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x7, 0x8000, 0x100000040, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0xffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fffffff], 0x10000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x161b82, 0x0) write$cgroup_int(r4, &(0x7f0000000040), 0x12) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000180)='cgroup.freeze\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x8e, 0x0, &(0x7f0000000000)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba94247aa7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a44ab529989f78fb1e4a5148e4b3d1d7b8c1305ee4c97f8fde232cf2a3fe786ba47bf703508d41d6dca0f548323ec97789507965bf3e970a59b6b1fe99"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 2m50.840803181s ago: executing program 3 (id=2377): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_NMI(r3, 0xae9a) (async, rerun: 64) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x8, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x9, 0x20000000000000, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x8]}) (async) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)={"8022e64e74e6f67b82f0d8a62127912e8e0facb291d8f00126635901181631134a20c7ef49c18bc0bbece53852b95bb8302f6c2286d6b0fb5b13bbdd128c382cebf211c3853f6fb48ab335f3ac853cf7c64d4f27ece7c262cdabfa5660cde1d28dc3eab72b8cfa5b08d6129c86ca79bd9dc43c37e75246dcf04b3816fd90365c877a2c10e8ef4c444ecb4784a0afbf5e962e390bb1ad3bbce049ae51325e79f5ab8bfa80b35fff1da6833ec7fa9ebfc93da9e4b190e5e3a752eca97dc669a937e6ab654169108a38d414fb90e1b894494f314298428ef482b0009084c95e735b6b09ca2de115d77f6a657fb7da142c896f9dce212aa58af72879da88687ce4620501a4ba17e906a02662f902745e9f41b50874ce099ac0fc00ed05470d176364b1f30495b4a088bdde663172734fa8107e5fc0cd4fa60869c83a6669a4ea3040dbaa38f2571543d8521e37ab5aa5be850e3ade4b3682db01d94841077e9eb09e6de146aa0c8fc98fea7bb50efa589af6978ec8d970f908dc4676ea3d15b3b6ebe8ae56a6292704900e611367b278b6716b4d04279792aeb649688ac6bcb7a5e58cbab0c07c8916a7cef3bb0d6303523bad9c0ad5f3024dfbdf364792b75f0b01333336b3bf645fc40061edf7e042de07fc652ec4958373d9f3af542adc030334cc63caa85c8a2628bb1d257c746b2cc57798c23e30f2799f5f392f6af7a3d0cc47299928634afd54ce987c1951989ef81b39f5c7ba4cb2a74250f15261fedf3a25396b83199151ea4b406c2e1aa3135f2a77a8d75b75ef0b25efcdb3b031d8eaed29862173e93994f8d6e6e70df79978551804744eefa635c71d4b38da513f3ea8f48853322cfe5ef1b1ee632e0fcd3eae1993d883fc91f0f2437dce252b6ce5175e7d119afcb9c3c92baf3df6716ce61b54d0dd7dda2360a4c93e26f3eaa4a1637d108966074638697f5b374cf9ae6b32dce29da73fece352c94a1bdb45d6e0fe98533562ee5e55d2f2d3ce5c301ca9c5706a1d0605414f103878eb88169e6681297616b4e1c8c1a43a33f5d99b619962066e7c5698470772696f58dbed61d8507119769e30101f229e012a08b76c0d752cdb290d46f2504177164282fbd084a4817b5ed7448586bc3de1d30af5472e6b67d2ad120e1401ebdcc5358c8eff7e68f4a48aed32f55970a5a6a7c7dcba4887bc4bb1c7fde1610ed25f4f64f25a9f79fad21b5e558fcc97c120c0977a92f5471cc391edf228ff4bf7f9fc7b92737e32b3af48780cb96f5623b5f01dcd3cea45d72ccdb7a36682fd3094542726b24790534728f2c0b2757edc7599ccb170b2db42c9460c42082081ab86d9d5fc971b4d7987ee2c70ced65e08d74474763c6d6ec671c42f6acaa4ccbd2fe981121c04571c1794450b9650b0249f2a633e880ab386510ea86298112a2f01f0ac7f81ee"}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000040)={0x80000, 0x0, [0x80, 0x0, 0x8, 0x4, 0x3, 0x5, 0x400, 0x936b]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'ip_vti0\x00', 0x1000}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000040)='./file1\x00', 0x14a) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f00000005c0)={{0x0, 0x3000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x10}, {0x0, 0x80a0000, 0xc, 0x0, 0xfe, 0x0, 0x3, 0x0, 0x7}, {0x2000, 0x5000, 0x0, 0x0, 0x7, 0x2, 0x8, 0x0, 0x0, 0x0, 0xfe, 0xfd}, {0x8080000, 0x8000000, 0x0, 0x8, 0x0, 0xff, 0x6, 0x0, 0x0, 0x0, 0x4}, {0x5000, 0x1, 0xd, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x3c, 0x0, 0x13}, {0x2, 0x1000, 0x10, 0x0, 0x10, 0x3, 0x2, 0x0, 0xa2}, {0xdddd0002, 0xeeee0000, 0x8, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xff}, {0xeeee8000, 0xd000, 0x0, 0x0, 0x8, 0x8f, 0x7, 0xd4, 0x26, 0x4, 0xff, 0x9}, {0x80a0000, 0x4}, {0xdddd1000, 0x8}, 0x5df9ffc2, 0x0, 0x0, 0x4212a, 0x800, 0x3500, 0x4000, [0x3, 0x0, 0x1]}) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) (rerun: 32) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x2f, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000080)="55dd"}) (async, rerun: 32) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (rerun: 32) 2m50.680548594s ago: executing program 3 (id=2378): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x3000001, 0x22052, r0, 0x2000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9280, 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) 2m50.671773424s ago: executing program 3 (id=2379): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x3, 0x100000000, 0x0, 0xfffffffffffffff8, 0x100000, 0x0, 0x202004c8, 0x8000003, 0x7, 0x1, 0xfffffffffffffffe, 0x2000000000], 0x1000, 0x4000}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000440)={0xb6, 0x0, 0x100}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 2m50.456851167s ago: executing program 3 (id=2380): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x480000, 0x0) read(0xffffffffffffffff, 0x0, 0x5b) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) mmap(&(0x7f00007d4000/0xd000)=nil, 0xd000, 0x2000006, 0x13, 0xffffffffffffffff, 0x25fea000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x22000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000080)='-]\'.\\*\x00') ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000000000080ffffffff000000006f5e00000700000000000000080000807f0000d33755"]) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x8ae9b000) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000140)={{0x8080000, 0xeeee0000, 0xd, 0x5, 0x7f, 0x0, 0x9, 0xfc, 0xf7, 0x6, 0x8, 0xb2}, {0x3000, 0x8000000, 0xe, 0x7, 0x2, 0x5, 0x6, 0x9, 0x6, 0x4, 0x34, 0x65}, {0xe954b41d6d1b82af, 0x1, 0x3, 0x3, 0x9, 0xf, 0x6, 0x1, 0x40, 0x3, 0x2, 0x9}, {0x0, 0xeeee8000, 0x3, 0x8, 0xb6, 0x4c, 0xd4, 0x4, 0xa, 0xfe, 0x81, 0x8}, {0x6000, 0xe6e74002, 0xd, 0x0, 0x8, 0x3, 0x43, 0xb, 0x7f, 0x8d, 0x10, 0xf8}, {0x3000, 0xdddd0000, 0xa, 0xc7, 0x16, 0x7, 0x6, 0xa, 0x81, 0xff, 0x80}, {0x1, 0xeeef0000, 0x8, 0x6, 0x1, 0x9, 0xff, 0x8, 0x77, 0x3, 0x92, 0x9}, {0xffff1000, 0x8080000, 0x4, 0x4, 0xf4, 0x1, 0x5, 0x0, 0xb4, 0x4, 0xb, 0x9}, {0x4, 0x7}, {0x0, 0x8000}, 0x0, 0x0, 0xeeee8000, 0x1, 0xc, 0xc900, 0x1000, [0x8001, 0x2, 0x3, 0x1]}) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r3, 0x0) 2m50.24550051s ago: executing program 3 (id=2382): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000003c0)={0x2, 0x0, 0x98, &(0x7f0000000300)={0x7f, 0x5, 0x4}}) ioctl$BLKSSZGET(r0, 0x1268, &(0x7f0000000000)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKPG(r0, 0x1269, &(0x7f00000003c0)={0x2, 0x0, 0x98, &(0x7f0000000300)={0x7f, 0x5, 0x4}}) (async) ioctl$BLKSSZGET(r0, 0x1268, &(0x7f0000000000)) (async) 2m35.571531726s ago: executing program 5 (id=2516): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0xfffffffffffffff3, r0, 'id1\x00'}) read$rfkill(r3, &(0x7f00000001c0), 0xfffffdb7) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r4, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0xc2a4a000) 2m35.211591572s ago: executing program 5 (id=2519): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x100010, r1, 0xa48a2000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="f3ff0000000000000102000000000000e516e203"]) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xc9, 0x0, 0xc}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x174}]}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0x1, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r5, 0x2000001, 0x80010, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x1, 0x11, r0, 0x1) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000c00)={0x0, 0xfffffffffffffffa, 0x8}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000091}]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001000)={0xc, 0x4, {0x80000000, @struct={0x3, 0x3}, 0x0, 0x0, 0xfffffffffffffff1, 0x1, 0x80000001, 0x8000, 0x0, @struct={0x5, 0x4}, 0x0, 0x4, [0x7fffffff, 0x1, 0x9, 0x8, 0x9, 0x7]}, {0x0, @struct={0x556, 0x8}, r7, 0x4, 0x8, 0x6, 0x8, 0x7, 0x2, @usage=0x8000, 0x8d7, 0x81, [0x4, 0x524, 0xfffffffffffff020, 0xff, 0x5, 0x370]}, {0xe, @struct={0x1, 0x8}, 0x0, 0x5, 0x3, 0x0, 0x8, 0x2, 0x470, @struct={0x7ff, 0x1}, 0x2, 0x7f, [0x40, 0x4, 0x101, 0x5, 0x5, 0x3]}, {0x60000000000, 0xf, 0xfffffffffffffffc}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 2m35.210958441s ago: executing program 34 (id=2382): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000003c0)={0x2, 0x0, 0x98, &(0x7f0000000300)={0x7f, 0x5, 0x4}}) ioctl$BLKSSZGET(r0, 0x1268, &(0x7f0000000000)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BLKPG(r0, 0x1269, &(0x7f00000003c0)={0x2, 0x0, 0x98, &(0x7f0000000300)={0x7f, 0x5, 0x4}}) (async) ioctl$BLKSSZGET(r0, 0x1268, &(0x7f0000000000)) (async) 2m34.780328358s ago: executing program 5 (id=2523): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x1a0, 0x0, 0x100000005}]}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000480)={0x4, &(0x7f00000004c0)=[{0x2d, 0x0, 0x2}, {}, {}, {0x6}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) read(r0, &(0x7f0000000280)=""/112, 0x70) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) (async) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x8000) (async) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x12, r4, 0x4d75c000) 2m34.401605694s ago: executing program 5 (id=2526): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x0, 0x0, 0x16}, @flat=@binder={0x73622a85, 0xa, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) 2m34.315782256s ago: executing program 5 (id=2528): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000180)=0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) read$FUSE(r5, &(0x7f0000001440)={0x2020}, 0x2020) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000040)=0x5) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te']) 2m34.082766929s ago: executing program 5 (id=2530): ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100000001) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x2000000, 0x12, 0xffffffffffffffff, 0x2546c000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000001500)='\x00\x00\b\x00\xff\xff\xf7\xff\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q\x00\x00\x00\x00\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a\x00\x80\xff\xff\xff\xff\xff\xff\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xc3\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a\xde]X1`d\x9d\x9e\xd0\n\xa1\xa9\x8cO\xb8p\"\xe7\xdb\xab\x0eAW&+\xe8\xf7p\v\x01\\\x98\xeey\xc4c\x18\x91\xd9\x00\x1c\xf0.\x9f\x1e?\xea\xea\'0\"\x94\xd1\xd3P\xa8\xc5wP`\xa6\xd5Q\x11\xc3o\x04\vat\xb9}\x83g\xca\xfe\xf4\xe6;\x18\xb9\xe7<\xcf\x96~\x0f\xb0\xd3\x1bl\x9e\xc2\xc6\xcc\xbe\x8c#\xd0\x9f\x050\x1csf\x84\x06Z\xf4\xd2!\a\x8a\xc8\xbe\xdb\xf6y\x94Z\xed0\xdbZ\x9b8~\xc0\xbbU\xd5I\x14\xb6\xeb\xa7V\x00\x18A%') 2m18.959781772s ago: executing program 35 (id=2530): ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100000001) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x2000000, 0x12, 0xffffffffffffffff, 0x2546c000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000001500)='\x00\x00\b\x00\xff\xff\xf7\xff\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q\x00\x00\x00\x00\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a\x00\x80\xff\xff\xff\xff\xff\xff\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xc3\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a\xde]X1`d\x9d\x9e\xd0\n\xa1\xa9\x8cO\xb8p\"\xe7\xdb\xab\x0eAW&+\xe8\xf7p\v\x01\\\x98\xeey\xc4c\x18\x91\xd9\x00\x1c\xf0.\x9f\x1e?\xea\xea\'0\"\x94\xd1\xd3P\xa8\xc5wP`\xa6\xd5Q\x11\xc3o\x04\vat\xb9}\x83g\xca\xfe\xf4\xe6;\x18\xb9\xe7<\xcf\x96~\x0f\xb0\xd3\x1bl\x9e\xc2\xc6\xcc\xbe\x8c#\xd0\x9f\x050\x1csf\x84\x06Z\xf4\xd2!\a\x8a\xc8\xbe\xdb\xf6y\x94Z\xed0\xdbZ\x9b8~\xc0\xbbU\xd5I\x14\xb6\xeb\xa7V\x00\x18A%') 3.184713081s ago: executing program 1 (id=4564): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/reserved_size', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x1f22, 0x12) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0d80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1000, 0x40000000000002}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000280)={0xa, {0x0, 0x8, 0x71}}, 0xa) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) ioctl$TIOCGICOUNT(r4, 0x5409, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000001c0)={0x10200, 0x2, 0xc285bc67d7bba7bc, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.648739629s ago: executing program 6 (id=4581): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x0, &(0x7f0000000080)=[{0x57ec, 0xf7, 0xf7, 0x7}]}) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) (async) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) (async, rerun: 64) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) (async, rerun: 64) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) 2.502870391s ago: executing program 6 (id=4585): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200400, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0xfffffffffffffffe) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 2.415201083s ago: executing program 6 (id=4587): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x240840, 0x2) write$cgroup_type(r2, &(0x7f0000000200), 0x9) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000340), 0x12) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, &(0x7f0000000080)=0xeeee8000) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, &(0x7f0000000280)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000000240)={0x8, 0x5}}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r8, 0xc018ae85, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r10, 0x40045436, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/pids.max\x00', 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r12) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r12, 0xff01, 0x0) close_range(r11, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$BLKRRPART(r0, 0x125f, 0x0) 2.280429155s ago: executing program 1 (id=4590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x0, 0x3a}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000140), 0x21000, 0x0) 2.134410907s ago: executing program 6 (id=4593): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xd, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 2.021420799s ago: executing program 6 (id=4596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x6a) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xa70, 0x0, 0x3}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000b50b0e"]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 1.899856061s ago: executing program 7 (id=4598): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x4d0ec431d62e726d, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) (async) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x9, 0x79331cf3, 0x64b0f137, 0x6, 0x81, 0x3}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f00000000c0)) (async) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000100)={0xc1, 0x0, 0x1}) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_async', 0x800, 0xd4) ioctl$KVM_CAP_HYPERV_SEND_IPI(r2, 0x4068aea3, &(0x7f00000001c0)) (async) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x3, 0xb, 0x7, 0x4, 0x0, 0xa5, 0x1f, 0x7, 0x4, 0x4, 0x4, 0x7, 0x48d9}, {0x8, 0x4, 0x5b, 0x3, 0x8c, 0x1, 0x3, 0x51, 0xbf, 0x8, 0x2, 0x7, 0x8}, {0x3, 0x8, 0x0, 0x4, 0x40, 0x9, 0x80, 0x3, 0x1, 0x3, 0x4c, 0x5, 0x3}], 0x3}) (async) r3 = openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000300)={0xfffffe01, 0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) r5 = openat$cgroup(r3, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000400)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x8002, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f0000000480)={0x2}) (async, rerun: 64) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f00000004c0)={0x4, 0xd7b, 0x9, 0x7fffffffffffffff, 0xe2b5a7d1, 0x4}) (rerun: 64) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000500)={0x8, 0x2, 0x8, 0x7, 0xa8b}) (async) r8 = openat$cgroup_subtree(r6, &(0x7f0000000540), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000580)={[{0x2d, 'freezer'}, {0x2b, 'perf_event'}, {0x2b, 'rdma'}, {0x2d, 'net'}, {0x2b, 'devices'}]}, 0x29) (async) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r9, 0x80049370, &(0x7f0000000600)) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r3, 0x4068aea3, &(0x7f0000000640)={0x9f, 0x0, 0x1}) (async, rerun: 64) openat$cgroup_procs(r1, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) (async, rerun: 64) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700), 0x258182, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r10, 0x40047211, &(0x7f0000000740)=0x21) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000780)={0x0, 0x4, 0x10002, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) r11 = openat$cgroup_int(r1, &(0x7f00000007c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r11) 1.877888591s ago: executing program 2 (id=4599): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x2040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r3, 0x4068aea3, &(0x7f0000000240)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x2, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000000009000000000000a3a26a9d2b000000000f00000000000000570902400000000028000000000000005203000000000000000000000000000024020000000000008100000000000000ff030000000000000002000000040000000100c000000000080000000000000000000000b40000000000"]) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') close(r5) 1.851385791s ago: executing program 7 (id=4600): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0]) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.log\x00', 0x0, 0xb0) mkdirat$cgroup(r1, &(0x7f00000003c0)='syz1\x00', 0x1ff) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x1}, @register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000740)=ANY=[@ANYRES16=r2]) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SET_MM_EXE_FILE(0x39, 0xd, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SMI(r8, 0xaeb7) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000007980), 0xe0040, 0x0) read(r9, 0x0, 0x12) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f0000000280)={{0x0, 0xfffffffffffffff9, 0x2, 0x8577, 0x3e, 0x100000002, 0x11, 0x1, 0x8, 0x9, 0x2, 0x10001, 0x4, 0x7fffffff, 0xfffffffffffffff9}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000000340)={{r10, 0x6, 0x7f, 0x300000000, 0x6, 0x1, 0x1, 0x101, 0xfffffffd, 0x44d, 0x8, 0x8, 0x7, 0x3, 0x6}, 0x8, [0x0]}) mount$binderfs(&(0x7f0000000400), &(0x7f0000000440)='./binderfs\x00', &(0x7f0000000480), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6d61783d303030303030303030303030301e303030303030303030342c6d61783d3030301e303030303030303030303030303030303336312c73746174733d676c6f62616c2c73746174733d676c6f62616c2c66756e633d504f4c4943595f434845434b2c00"]) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000001c0)={[0x5, 0x6, 0x8, 0x0, 0x10003, 0x0, 0x8, 0xffe, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xffff1000, 0x2011c0}) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x58, 0x0, &(0x7f00000008c0)=[@dead_binder_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x1, &(0x7f0000000680)=""/134, 0x86, 0x1, 0x38}, @fda={0x66646185, 0x8, 0x2, 0x3f}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000880)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x1000000, 0x0}) 1.768593443s ago: executing program 6 (id=4601): mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x2280040, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 1.768162283s ago: executing program 2 (id=4602): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d0e, &(0x7f0000000340)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006680)={0x2020}, 0x2020) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) 1.765834493s ago: executing program 1 (id=4603): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x6, 0x3, 0xf1, 0x0, 0x3, 0x9, 0x52, 0x6, 0xc, 0x4, 0x5, 0xfb, 0x4}, {0x4, 0x8001, 0x0, 0xb, 0xff, 0x0, 0x81, 0xe, 0xe, 0x2f, 0x0, 0x0, 0x7}, {0x5, 0x0, 0x7, 0x10, 0xd6, 0x6, 0x4, 0x7f, 0x4, 0xfa, 0x81, 0x7, 0x7f}], 0xffff1093}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x3, 0x100000000, 0x0, 0xfffffffffffffff8, 0x100000, 0x0, 0x202004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe, 0x2000000000, 0x1f, 0x0, 0x9], 0x0, 0x4000}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x80, 0x3, 0x3, 0x1000007, 0x1000, 0xffffffff}}) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYRES64=r0]) 1.681422414s ago: executing program 7 (id=4604): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1000, 0x8000000001}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) write(r3, &(0x7f00000001c0)="1e906565dbccd2fa1cf7a66d8c66ec9e911b06501c4a1ded9927f0b7cce5ae0742dbadd38d4e4e897c6e64c53dca19a10959d25959f4a305aecfbccc28c2af3951793351c7bc0056a93f96b2d3c35005c6d547aac44aad8f260c3d94faf98911a3fa82b4586b2c894db1c721cbb184b0cf0b", 0x72) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xff, 0xe0, 0x6, '\x00', 0x161e}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r4, 0x0) (async) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r4, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x2, 0x2}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0xfffffffffffffed6, 0x0, 0x0}) 1.680396054s ago: executing program 2 (id=4605): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={@fda={0x66646185, 0x8, 0x1, 0x16}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @fda={0x66646185, 0x9, 0x1, 0x38}}, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffd98}}, 0x40}, @register_looper], 0x0, 0x0, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000000)) 1.614983065s ago: executing program 7 (id=4606): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000002100)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f00000061c0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e17000/0xa000)=nil, 0xa000, &(0x7f0000000000)=',,\x00\te\xcf\xad\x06\x8c-\xc6\xe4w\xd7\xbc\xef\r\xa0orc\xf6F\xe3\xce\xdc\xb7\x1a@\xa5\xfeo+lx\x92&\xb6\b\x82') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e17000/0xa000)=nil, 0xa000, &(0x7f0000000000)=',,\x00\te\xcf\xad\x06\x8c-\xc6\xe4w\xd7\xbc\xef\r\xa0orc\xf6F\xe3\xce\xdc\xb7\x1a@\xa5\xfeo+lx\x92&\xb6\b\x82') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, &(0x7f0000000380)='cache=mmap') ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000e, 0x110, r0, 0x4d75c000) 1.136573172s ago: executing program 7 (id=4607): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3d}]}) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x810, 0xffffffffffffffff, 0x1ca6e000) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r1, 0x293f000) 1.135919792s ago: executing program 1 (id=4608): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x6}]}) ioctl$BLKSECDISCARD(r1, 0x127d, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x8, 0x12, r0, 0xffffe000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 1.135216663s ago: executing program 2 (id=4609): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000099}]}) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffa) mmap(&(0x7f00006ff000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) read(r3, &(0x7f0000000000)=""/175, 0xfffffe14) 625.42319ms ago: executing program 7 (id=4610): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x1c02, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'veth1_to_batadv\x00', @random="3383250a551d"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x954, 0xd, 0x0, 0x8, 0x9, 0x5, 0x3, 0x3, 0x3, 0xff, 0x0, 0x2, 0x6, 0xc, 0x1, 0x82], 0x80a0000, 0x20003}) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xcd, 0x0, 0xfffffffffffffffe}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000002404"]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 619.118371ms ago: executing program 1 (id=4611): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000540)=[@acquire, @release], 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0x36) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x4, 0x6000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x8, 0x9, 0x10}, {0x0, 0xd000, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfe}, {0xffff1000, 0x5000, 0xa, 0x3, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xf, 0x6, 0x0, 0x0, 0x83}, {0xeeef0000, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x28, 0x5, 0x0, 0x3}, {0x80a0000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x8000000, 0x0, 0xfffffffffffffff8, 0xd801, 0x3000, [0x3, 0x0, 0x1]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r8, 0xc018ae85, &(0x7f0000000040)={0x6000, 0xdddd0000, 0x5, 0x5, 0x7f}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x9ab, 0x0, 0x3}]}) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_int(r10, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) write$vga_arbiter(r4, &(0x7f0000000240)=@unlock_all, 0xb) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="b39f0100000000000000004d566501000000000000000000"]) write$vga_arbiter(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='trylock m'], 0xf) 618.16834ms ago: executing program 2 (id=4612): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) syz_clone3(0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d00}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000030100c000"/24]) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x30000, 0x0) (async) ioctl$UI_BEGIN_FF_ERASE(r8, 0xc00c55ca, &(0x7f0000000040)={0x10}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 540.53µs ago: executing program 1 (id=4613): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000e40)={0x1, &(0x7f0000000e00)=[{0x6, 0xfb}]}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1000000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000380)={0x120, 0x0, &(0x7f0000000700)=[@enter_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000600)=""/193, 0xc1, 0x2, 0x1b}, @fd={0x66642a85, 0x0, r7}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000440)={0x0, 0x28, 0x40}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/254, 0xfe, 0x1, 0x2f}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/60, 0x3c, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x28, 0x50}}}, @increfs, @dead_binder_done, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x101, 0x1}, @flat=@weak_binder={0x77622a85, 0x100, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/40, 0x28, 0x1, 0x31}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x400}, @register_looper, @acquire_done={0x40106309, 0x1}, @acquire_done={0x40106309, 0x1}], 0x1000, 0x0, &(0x7f0000000a40)="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"}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af25, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000a00)={0x1}) 0s ago: executing program 2 (id=4614): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x400000f4, 0x0, 0x1ff}]}) (async) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xffffffc1) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}) (async, rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xfffffffffffffffc) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000"]) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) (async, rerun: 32) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (rerun: 32) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x80000000000) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x17b, 0x0, 0xffffffffffffffff}]}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x40010, r3, 0x0) (async) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') (async) ioctl$ASHMEM_SET_NAME(r3, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xf3\xd9$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') kernel console output (not intermixed with test programs): 701] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 247.322724][ T9699] input input130: cannot allocate more than FF_MAX_EFFECTS effects [ 247.747148][ T9718] SELinux: policydb magic number 0x65677568 does not match expected magic number 0xf97cff8c [ 247.757499][ T9718] SELinux: failed to load policy [ 247.948383][ T9724] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1266 [ 247.996173][ T9722] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 248.033883][ T9722] rust_binder: Error in use_page_slow: EBUSY [ 248.035901][ T9728] binder: Unknown parameter '_6ec' [ 248.083148][ T9722] rust_binder: use_range failure EBUSY [ 248.083181][ T9722] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 248.100581][ T9722] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 248.114217][ T9722] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 248.163410][ T9722] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:545 [ 248.371692][ T9744] rust_binder: Error while translating object. [ 248.418403][ T9744] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 248.449598][ T9744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254 [ 248.786745][ T9766] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 248.927776][ T9758] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 249.168882][ T36] kauditd_printk_skb: 795 callbacks suppressed [ 249.168901][ T36] audit: type=1400 audit(1750405020.550:61590): avc: denied { read write } for pid=8714 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.241621][ T36] audit: type=1400 audit(1750405020.580:61591): avc: denied { read write open } for pid=8714 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.318038][ T36] audit: type=1400 audit(1750405020.580:61592): avc: denied { ioctl } for pid=8714 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.373177][ T36] audit: type=1400 audit(1750405020.580:61593): avc: denied { read } for pid=9777 comm="syz.7.2855" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 249.414555][ T36] audit: type=1400 audit(1750405020.580:61594): avc: denied { read open } for pid=9777 comm="syz.7.2855" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 249.493178][ T36] audit: type=1400 audit(1750405020.590:61595): avc: denied { read write } for pid=9777 comm="syz.7.2855" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 249.537070][ T36] audit: type=1400 audit(1750405020.590:61596): avc: denied { read write open } for pid=9777 comm="syz.7.2855" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 249.564554][ T1983] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 249.573153][ T36] audit: type=1400 audit(1750405020.600:61597): avc: denied { read write } for pid=9775 comm="syz.1.2854" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.575440][ T1983] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 249.609381][ T36] audit: type=1400 audit(1750405020.600:61598): avc: denied { read write open } for pid=9775 comm="syz.1.2854" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.633671][ T1983] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 249.641094][ T1983] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 249.663674][ T36] audit: type=1400 audit(1750405020.600:61599): avc: denied { read write } for pid=9775 comm="syz.1.2854" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 249.683209][ T1983] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 249.714183][ T1983] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 250.035436][ T9808] SELinux: security_context_str_to_sid (unconfi=J) failed with errno=-22 [ 250.077033][ T9814] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 250.201884][ T9815] fido_id[9815]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 250.550613][ T9825] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1299 [ 250.551311][ T9830] binder: Bad value for 'stats' [ 250.659098][ T9830] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 250.739329][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 250.812156][ T9836] rust_binder: Got transaction with invalid offset. [ 250.812205][ T9836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 250.831909][ T9836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:274 [ 250.865115][ T9833] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 250.885206][ T9833] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:570 [ 251.070192][ T9848] kvm: kvm [9847]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253 [ 251.232443][ T9851] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 89) [ 251.232470][ T9851] rust_binder: Error while translating object. [ 251.271820][ T9851] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 251.281667][ T9851] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1306 [ 251.553517][ T9868] rust_binder: Error while translating object. [ 251.569859][ T9868] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 251.583396][ T9868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:580 [ 251.863909][ T9877] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 251.873078][ T9877] rust_binder: Error while translating object. [ 251.930302][ T9877] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 251.965035][ T9877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:585 [ 252.059887][ T9890] rust_binder: Write failure EINVAL in pid:1318 [ 252.269917][ T9897] rust_binder: Write failure EINVAL in pid:589 [ 252.300535][ T9895] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 252.504398][ T9905] rust_binder: Write failure EINVAL in pid:593 [ 252.783139][ T5595] Bluetooth: hci0: command 0x1003 tx timeout [ 252.786571][ T1541] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 252.840902][ T9915] rust_binder: Write failure EINVAL in pid:1329 [ 253.663869][ T9945] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 253.675090][ T9945] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 253.728991][ T9945] rust_binder: Read failure Err(EFAULT) in pid:278 [ 253.784999][ T9947] rust_binder: Error while translating object. [ 253.819402][ T9947] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 253.843126][ T9947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:278 [ 254.118345][ T9956] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:282 [ 254.206274][ T36] kauditd_printk_skb: 675 callbacks suppressed [ 254.206296][ T36] audit: type=1400 audit(1750405025.590:62260): avc: denied { read write } for pid=8714 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 254.317228][ T36] audit: type=1400 audit(1750405025.640:62261): avc: denied { read write open } for pid=8714 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 254.403143][ T36] audit: type=1400 audit(1750405025.640:62262): avc: denied { ioctl } for pid=8714 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 254.480617][ T9963] audit: audit_backlog=65 > audit_backlog_limit=64 [ 254.488669][ T9965] audit: audit_backlog=65 > audit_backlog_limit=64 [ 254.493142][ T36] audit: type=1400 audit(1750405025.700:62263): avc: denied { mounton } for pid=9960 comm="syz.6.2914" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.505572][ T9966] audit: audit_backlog=65 > audit_backlog_limit=64 [ 254.528480][ T9962] audit: audit_backlog=65 > audit_backlog_limit=64 [ 254.541784][ T9963] audit: audit_lost=241 audit_rate_limit=0 audit_backlog_limit=64 [ 254.561516][ T9962] audit: audit_lost=242 audit_rate_limit=0 audit_backlog_limit=64 [ 254.768348][ T9969] rust_binder: validate_parent_fixup: fixup_min_offset=73, parent_offset=52 [ 254.768373][ T9969] rust_binder: Error while translating object. [ 254.791627][ T9969] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 254.807507][ T9969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:290 [ 254.859573][ T9971] rust_binder: Write failure EFAULT in pid:613 [ 254.911945][ T9972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:290 [ 254.927543][ T9974] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 255.466358][ T9996] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 255.493197][ T9996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:196 [ 255.528545][ T9998] binder: Unknown parameter 'non' [ 255.544240][T10003] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:620 [ 255.558804][T10003] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 89) [ 255.590434][T10003] rust_binder: Error while translating object. [ 255.633172][T10003] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 255.642412][T10003] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:620 [ 255.814686][T10015] rust_binder: Write failure EFAULT in pid:199 [ 256.208206][T10032] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 256.223701][T10034] rust_binder: Error while translating object. [ 256.243894][T10029] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 256.246642][T10034] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 256.313209][T10034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1348 [ 256.545259][T10043] rust_binder: Write failure EFAULT in pid:634 [ 256.561530][T10043] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:634 [ 256.649599][T10045] rust_binder: Error while translating object. [ 256.682585][T10045] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 256.719525][T10045] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:208 [ 256.935467][T10062] rust_binder: Error while translating object. [ 256.963416][T10059] rust_binder: Error while translating object. [ 256.986587][T10059] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 256.992807][T10059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:314 [ 257.015792][T10063] rust_binder: Write failure EFAULT in pid:215 [ 257.044784][T10062] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 257.051015][T10062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:314 [ 257.233471][T10076] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 257.283534][T10080] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 257.450294][T10087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:646 [ 257.517840][T10087] rust_binder: Write failure EFAULT in pid:646 [ 257.625554][T10097] rust_binder: Error while translating object. [ 257.633217][T10097] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 257.639575][T10097] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1364 [ 257.733530][T10100] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1366 [ 257.958654][T10113] binder: Unknown parameter 'fsconted_u2/>' [ 258.047706][T10116] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 258.156242][T10118] rust_binder: Error in use_page_slow: ESRCH [ 258.156264][T10118] rust_binder: use_range failure ESRCH [ 258.162356][T10118] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 258.194113][T10118] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 258.233470][T10118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:228 [ 258.243647][T10123] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:652 [ 258.295571][T10123] rust_binder: Error while translating object. [ 258.310101][T10123] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 258.330298][T10123] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:652 [ 258.448084][T10135] rust_binder: Error while translating object. [ 258.458473][T10135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 258.464745][T10135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:654 [ 258.565968][T10137] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 258.611142][T10141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238 [ 258.614469][T10141] rust_binder: Error while translating object. [ 258.623927][T10141] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 258.651961][T10141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238 [ 258.833144][T10150] kvm_intel: kvm [10142]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 258.985056][T10159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 258.985368][T10159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 258.992145][T10159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 259.213149][ T36] kauditd_printk_skb: 1065 callbacks suppressed [ 259.213170][ T36] audit: type=1400 audit(1750405030.590:63323): avc: denied { read write open } for pid=4995 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 259.243641][T10170] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:334 [ 259.287969][T10173] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 259.293126][ T36] audit: type=1400 audit(1750405030.590:63324): avc: denied { ioctl } for pid=4995 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 259.324288][T10173] rust_binder: Write failure EINVAL in pid:1387 [ 259.337181][T10169] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 259.354933][T10169] rust_binder: Error in use_page_slow: EBUSY [ 259.393190][T10169] rust_binder: use_range failure EBUSY [ 259.403237][T10169] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 259.432698][ T36] audit: type=1400 audit(1750405030.610:63325): avc: denied { read } for pid=10167 comm="syz.6.2976" name="binder0" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 259.440539][T10169] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 259.525016][T10169] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 259.553160][ T36] audit: type=1400 audit(1750405030.610:63326): avc: denied { read open } for pid=10167 comm="syz.6.2976" path="/dev/binderfs/binder0" dev="binder" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 259.553221][T10169] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:243 [ 259.577864][ T36] audit: type=1400 audit(1750405030.610:63327): avc: denied { read } for pid=10165 comm="syz.2.2975" name="binder1" dev="binder" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 259.608802][T10187] audit: audit_backlog=65 > audit_backlog_limit=64 [ 259.640548][T10187] audit: audit_lost=245 audit_rate_limit=0 audit_backlog_limit=64 [ 259.643762][T10185] audit: audit_backlog=65 > audit_backlog_limit=64 [ 259.649427][T10181] audit: audit_backlog=65 > audit_backlog_limit=64 [ 259.662799][T10181] audit: audit_lost=246 audit_rate_limit=0 audit_backlog_limit=64 [ 259.798359][ T31] hid (null): global environment stack underflow [ 259.804880][ T31] hid (null): report_id 3190462898 is invalid [ 259.811107][ T31] hid (null): unknown global tag 0xc [ 259.818291][ T31] hid (null): unknown global tag 0xc [ 259.856900][ T31] hid-generic 09AA:0004:0009.000A: global environment stack underflow [ 259.870541][T10199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:675 [ 259.884252][ T31] hid-generic 09AA:0004:0009.000A: item 0 1 1 11 parsing failed [ 259.910303][ T31] hid-generic 09AA:0004:0009.000A: probe with driver hid-generic failed with error -22 [ 259.926654][T10197] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 259.926689][T10197] rust_binder: Error in use_page_slow: EBUSY [ 259.943175][T10197] rust_binder: use_range failure EBUSY [ 259.949550][T10197] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 259.962708][T10197] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 259.979774][T10197] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 260.033704][T10197] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:246 [ 260.045959][T10202] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 260.126978][T10204] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 260.460828][T10217] rust_binder: Write failure EINVAL in pid:1392 [ 260.504795][T10217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1392 [ 260.929384][T10233] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:262 [ 261.118649][T10240] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 261.372138][ T31] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 261.398378][ T31] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 261.642890][T10258] rust_binder: Write failure EINVAL in pid:269 [ 261.646297][T10258] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 190) [ 261.658119][T10258] rust_binder: Error while translating object. [ 261.688040][T10258] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 261.711939][T10258] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:269 [ 261.995452][T10268] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 262.013225][T10268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:687 [ 262.041592][T10268] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 262.075095][T10268] rust_binder: Read failure Err(EFAULT) in pid:687 [ 262.101648][T10269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 262.124563][T10268] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 262.149859][T10271] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 262.169921][T10271] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:274 [ 262.193756][T10269] SELinux: policydb table sizes (0,7) do not match mine (8,7) [ 262.194902][T10271] rust_binder: Write failure EFAULT in pid:274 [ 262.212743][T10269] SELinux: failed to load policy [ 262.271148][T10269] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 262.418858][T10277] rust_binder: Write failure EFAULT in pid:361 [ 262.478884][T10279] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 262.870722][T10290] random: crng reseeded on system resumption [ 263.021787][T10290] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 263.483038][T10315] rust_binder: Read failure Err(EAGAIN) in pid:371 [ 263.735290][T10328] rust_binder: Write failure EINVAL in pid:287 [ 263.780897][T10331] rust_binder: Write failure EINVAL in pid:702 [ 263.950591][T10337] rust_binder: Error while translating object. [ 263.995723][T10337] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 264.002322][T10337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:705 [ 264.223632][ T36] kauditd_printk_skb: 695 callbacks suppressed [ 264.223653][ T36] audit: type=1400 audit(1750405035.610:64016): avc: denied { ioctl } for pid=10344 comm="syz.1.3033" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 264.324767][ T36] audit: type=1400 audit(1750405035.610:64017): avc: denied { read write open } for pid=9202 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 264.371025][ T36] audit: type=1400 audit(1750405035.610:64018): avc: denied { ioctl } for pid=9202 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 264.402851][ T36] audit: type=1400 audit(1750405035.660:64019): avc: denied { read write } for pid=10350 comm="syz.2.3035" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 264.430118][ T36] audit: type=1400 audit(1750405035.660:64020): avc: denied { read write open } for pid=10350 comm="syz.2.3035" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 264.458640][ T36] audit: type=1400 audit(1750405035.660:64021): avc: denied { ioctl } for pid=10350 comm="syz.2.3035" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 264.485837][T10356] rust_binder: Write failure EINVAL in pid:1430 [ 264.523123][ T36] audit: type=1400 audit(1750405035.660:64022): avc: denied { read } for pid=10351 comm="syz.7.3036" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 264.585124][ T36] audit: type=1400 audit(1750405035.660:64023): avc: denied { read open } for pid=10351 comm="syz.7.3036" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 264.655225][ T4995] audit: audit_backlog=65 > audit_backlog_limit=64 [ 264.661788][ T4995] audit: audit_lost=249 audit_rate_limit=0 audit_backlog_limit=64 [ 264.825423][T10371] SELinux: failed to load policy [ 264.857192][T10371] __vm_enough_memory: pid: 10371, comm: syz.2.3041, bytes: 281474976845824 not enough memory for the allocation [ 264.895765][ T2940] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 264.914845][ T2940] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 265.176634][T10391] binder: Unknown parameter 'non' [ 265.192507][T10382] fido_id[10382]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 265.784013][T10419] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 265.800770][T10419] rust_binder: Write failure EINVAL in pid:311 [ 265.997111][T10428] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 266.025987][T10428] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 266.092220][T10434] binder: Bad value for 'defcontext' [ 266.125682][T10431] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 266.139757][T10431] rust_binder: Write failure EINVAL in pid:724 [ 266.270143][T10440] SELinux: security_context_str_to_sid () failed with errno=-22 [ 266.323155][T10444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:316 [ 266.323201][T10444] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 266.347703][T10444] rust_binder: Read failure Err(EFAULT) in pid:316 [ 266.439135][T10448] binder: Unknown parameter 'defcontext01777777777777777777777' [ 266.721993][T10462] SELinux: failed to load policy [ 266.769320][T10466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1452 [ 266.771147][T10466] rust_binder: Error while translating object. [ 266.781145][T10466] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 266.787411][T10466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1452 [ 266.805275][T10469] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 267.083455][T10477] rust_binder: Write failure EFAULT in pid:731 [ 267.323445][T10486] rust_binder: Write failure EFAULT in pid:424 [ 267.440144][T10486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 267.653797][T10499] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 267.716220][T10499] binder: Unknown parameter 'coyBLV"i5ntext' [ 268.066110][T10514] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 268.075660][T10514] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 268.087273][T10514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:336 [ 268.102525][T10514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:336 [ 268.305189][T10525] binder: Unknown parameter 'defcontext01777777777777777777777' [ 268.306601][T10523] rust_binder: Got transaction with invalid offset. [ 268.364887][T10523] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 268.371541][T10523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:339 [ 268.514906][T10535] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 268.620685][T10537] PM: Enabling pm_trace changes system date and time during resume. [ 268.620685][T10537] PM: Correct system time has to be restored manually after resume. [ 268.778188][T10539] SELinux: security_context_str_to_sid (sytem_uGйQv) failed with errno=-22 [ 268.843994][T10541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 268.848596][T10541] rust_binder: Error while translating object. [ 268.873184][T10541] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 268.879401][T10541] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:438 [ 269.135871][T10558] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.233631][ T36] kauditd_printk_skb: 854 callbacks suppressed [ 269.233652][ T36] audit: type=1400 audit(1750405040.620:64868): avc: denied { write } for pid=10557 comm="syz.6.3102" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 269.280502][ T36] audit: type=1400 audit(1750405040.620:64869): avc: denied { write open } for pid=10557 comm="syz.6.3102" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 269.333157][ T36] audit: type=1400 audit(1750405040.620:64870): avc: denied { ioctl } for pid=10557 comm="syz.6.3102" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 269.359918][ T36] audit: type=1400 audit(1750405040.630:64871): avc: denied { read } for pid=10557 comm="syz.6.3102" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 269.408226][ T36] audit: type=1400 audit(1750405040.630:64872): avc: denied { read open } for pid=10557 comm="syz.6.3102" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 269.493257][T10564] rust_binder: Write failure EINVAL in pid:347 [ 269.500967][ T36] audit: type=1400 audit(1750405040.630:64873): avc: denied { ioctl } for pid=10557 comm="syz.6.3102" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 269.560933][ T36] audit: type=1400 audit(1750405040.780:64874): avc: denied { read write } for pid=7840 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 269.621349][ T36] audit: type=1400 audit(1750405040.780:64875): avc: denied { read write open } for pid=7840 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 269.690148][ T36] audit: type=1400 audit(1750405040.780:64876): avc: denied { ioctl } for pid=7840 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 269.717287][ T36] audit: type=1400 audit(1750405040.800:64877): avc: denied { read } for pid=10560 comm="syz.2.3103" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.981901][T10575] rust_binder: inc_ref_done called when no active inc_refs [ 269.985081][T10576] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.184997][T10586] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.211305][T10586] rust_binder: Error in use_page_slow: ESRCH [ 270.249088][T10586] rust_binder: use_range failure ESRCH [ 270.273176][T10586] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 270.295110][T10586] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 270.314385][T10586] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:444 [ 270.604657][T10600] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 270.687398][T10605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:448 [ 271.034848][T10614] binder: Bad value for 'max' [ 271.053622][T10616] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1472 [ 271.056151][T10616] binder: Unknown parameter 'non' [ 271.082763][T10616] binder: Unknown parameter 'non' [ 271.104487][T10616] binder: Unknown parameter 'non' [ 271.110842][T10616] binder: Unknown parameter 'non' [ 271.118122][T10616] binder: Unknown parameter 'non' [ 271.130909][T10616] binder: Unknown parameter 'non' [ 271.139848][T10616] binder: Unknown parameter 'non' [ 271.146771][T10616] binder: Unknown parameter 'non' [ 271.152970][T10616] binder: Unknown parameter 'non' [ 271.160142][T10616] binder: Unknown parameter 'non' [ 271.167111][T10616] binder: Unknown parameter 'non' [ 271.174035][T10616] binder: Unknown parameter 'non' [ 271.185774][T10616] binder: Unknown parameter 'non' [ 271.198795][T10616] binder: Unknown parameter 'non' [ 271.213213][T10616] binder: Unknown parameter 'non' [ 271.224111][T10619] rust_binder: Write failure EINVAL in pid:377 [ 271.233316][T10616] binder: Unknown parameter 'non' [ 271.247837][T10616] binder: Unknown parameter 'non' [ 271.254006][T10616] binder: Unknown parameter 'non' [ 271.260058][T10616] binder: Unknown parameter 'non' [ 271.266480][T10616] binder: Unknown parameter 'non' [ 271.272429][T10616] binder: Unknown parameter 'non' [ 271.280206][T10616] binder: Unknown parameter 'non' [ 271.286233][T10616] binder: Unknown parameter 'non' [ 271.292190][T10616] binder: Unknown parameter 'non' [ 271.304393][T10616] binder: Unknown parameter 'non' [ 271.310888][T10616] binder: Unknown parameter 'non' [ 271.323156][T10616] binder: Unknown parameter 'non' [ 271.336547][T10616] binder: Unknown parameter 'non' [ 271.352984][T10616] binder: Unknown parameter 'non' [ 271.364761][T10616] binder: Unknown parameter 'non' [ 271.384575][T10616] binder: Unknown parameter 'non' [ 271.390719][T10616] binder: Unknown parameter 'non' [ 271.402249][T10616] binder: Unknown parameter 'non' [ 271.408974][T10616] binder: Unknown parameter 'non' [ 271.415307][T10616] binder: Unknown parameter 'non' [ 271.421967][T10616] binder: Unknown parameter 'non' [ 271.429312][T10616] binder: Unknown parameter 'non' [ 271.435475][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 271.435685][T10616] binder: Unknown parameter 'non' [ 271.448109][T10616] binder: Unknown parameter 'non' [ 271.454346][T10616] binder: Unknown parameter 'non' [ 271.460655][T10616] binder: Unknown parameter 'non' [ 271.466936][T10616] binder: Unknown parameter 'non' [ 271.473263][T10616] binder: Unknown parameter 'non' [ 271.479514][T10616] binder: Unknown parameter 'non' [ 271.485846][T10616] binder: Unknown parameter 'non' [ 271.492137][T10616] binder: Unknown parameter 'non' [ 271.493371][T10622] Bluetooth: hci0: Frame reassembly failed (-84) [ 271.498594][T10616] binder: Unknown parameter 'non' [ 271.509805][T10616] binder: Unknown parameter 'non' [ 271.516170][T10616] binder: Unknown parameter 'non' [ 271.528461][T10616] binder: Unknown parameter 'non' [ 271.538416][T10626] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.538766][T10626] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.547094][T10616] binder: Unknown parameter 'non' [ 271.561850][T10626] rust_binder: Write failure EINVAL in pid:451 [ 271.564902][T10627] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.572386][T10616] binder: Unknown parameter 'non' [ 271.600657][T10616] binder: Unknown parameter 'non' [ 271.614373][T10616] binder: Unknown parameter 'non' [ 271.630327][T10616] binder: Unknown parameter 'non' [ 271.637035][T10616] binder: Unknown parameter 'non' [ 271.643329][T10616] binder: Unknown parameter 'non' [ 271.651492][T10616] binder: Unknown parameter 'non' [ 271.661379][T10616] binder: Unknown parameter 'non' [ 271.667114][T10633] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 271.668290][T10616] binder: Unknown parameter 'non' [ 271.699351][T10616] binder: Unknown parameter 'non' [ 271.714352][T10616] binder: Unknown parameter 'non' [ 271.720595][T10616] binder: Unknown parameter 'non' [ 271.727959][T10616] binder: Unknown parameter 'non' [ 271.734190][T10616] binder: Unknown parameter 'non' [ 272.109276][T10644] rust_binder: Write failure EFAULT in pid:1485 [ 272.731005][T10652] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 273.503119][ T1541] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 273.503147][ T5595] Bluetooth: hci0: command 0x1003 tx timeout [ 273.816277][T10669] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 273.818463][T10669] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 273.900039][T10671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:464 [ 273.996078][T10674] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 274.008837][T10675] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 274.016341][T10676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 274.035525][T10674] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 274.061803][T10675] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 274.078761][T10678] rust_binder: Error while translating object. [ 274.095814][T10678] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 274.113158][T10678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:387 [ 274.139791][T10671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:464 [ 274.196541][T10683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 274.207879][T10683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:794 [ 274.347479][ T36] kauditd_printk_skb: 964 callbacks suppressed [ 274.347499][ T36] audit: type=1400 audit(1750405045.730:65842): avc: denied { read write } for pid=7840 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.404973][ T36] audit: type=1400 audit(1750405045.770:65843): avc: denied { read write open } for pid=7840 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.462653][ T36] audit: type=1400 audit(1750405045.770:65844): avc: denied { ioctl } for pid=7840 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.517697][ T36] audit: type=1400 audit(1750405045.820:65845): avc: denied { read } for pid=10686 comm="syz.2.3143" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 274.549220][T10689] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 274.549246][T10689] rust_binder: Error while translating object. [ 274.578233][T10689] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 274.578917][T10687] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 274.590151][T10689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:392 [ 274.613129][ T36] audit: type=1400 audit(1750405045.820:65846): avc: denied { read open } for pid=10686 comm="syz.2.3143" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 274.614579][T10687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:797 [ 274.625897][ T36] audit: type=1400 audit(1750405045.830:65847): avc: denied { ioctl } for pid=10686 comm="syz.2.3143" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 274.686530][ T36] audit: type=1400 audit(1750405045.830:65848): avc: denied { read write } for pid=9202 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.712445][ T36] audit: type=1400 audit(1750405045.830:65849): avc: denied { read write open } for pid=9202 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.740210][ T36] audit: type=1400 audit(1750405045.830:65850): avc: denied { ioctl } for pid=9202 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.766928][ T36] audit: type=1400 audit(1750405045.890:65851): avc: denied { read } for pid=10688 comm="syz.7.3144" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 274.963650][T10696] rust_binder: Write failure EFAULT in pid:394 [ 275.082729][T10701] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 275.246774][T10704] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 275.253012][T10706] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 275.259710][T10706] rust_binder: Read failure Err(EFAULT) in pid:803 [ 275.266862][T10704] rust_binder: Error in use_page_slow: ESRCH [ 275.282197][T10704] rust_binder: use_range failure ESRCH [ 275.288859][T10704] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 275.306158][T10704] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 275.321577][T10704] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:472 [ 275.383056][T10712] SELinux: policydb version 905587468 does not match my version range 15-33 [ 275.442532][T10712] SELinux: failed to load policy [ 275.669608][T10723] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 275.686162][T10723] random: crng reseeded on system resumption [ 276.584385][T10755] rust_binder: Error while translating object. [ 276.584428][T10755] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 276.602052][T10755] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1491 [ 276.664880][T10755] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 277.073552][T10776] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.085568][T10776] input: syz0 as /devices/virtual/input/input139 [ 277.102154][T10778] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 277.353177][T10790] rust_binder: Error in use_page_slow: ESRCH [ 277.353200][T10790] rust_binder: use_range failure ESRCH [ 277.365294][T10790] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 277.365319][T10790] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 277.377547][T10789] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 277.399418][T10789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1503 [ 277.404823][T10790] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:423 [ 277.591626][T10805] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.728669][T10808] SELinux: failed to load policy [ 277.788954][T10815] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 277.790702][T10815] rust_binder: Error in use_page_slow: ESRCH [ 277.799880][T10815] rust_binder: use_range failure ESRCH [ 277.800856][T10817] kvm: Disabled LAPIC found during irq injection [ 277.807638][T10815] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 277.832415][T10815] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 277.844104][T10817] rust_binder: Write failure EINVAL in pid:1511 [ 277.868017][T10815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:497 [ 278.161087][T10828] kvm_intel: kvm [10823]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xe01f0003 [ 278.191724][T10831] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 278.619452][T10847] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 278.643178][T10847] rust_binder: Write failure EINVAL in pid:1522 [ 278.699500][T10859] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 279.114588][T10875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:444 [ 279.354493][ T36] kauditd_printk_skb: 825 callbacks suppressed [ 279.354514][ T36] audit: type=1400 audit(1750405050.740:66677): avc: denied { read } for pid=10886 comm="syz.2.3209" name="binder0" dev="binder" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 279.403173][ T36] audit: type=1400 audit(1750405050.780:66678): avc: denied { read open } for pid=10886 comm="syz.2.3209" path="/dev/binderfs/binder0" dev="binder" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 279.423165][T10889] input: syz1 as /devices/virtual/input/input141 [ 279.429099][T10887] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 279.443219][T10887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:853 [ 279.462040][ T36] audit: type=1400 audit(1750405050.780:66679): avc: denied { ioctl } for pid=10886 comm="syz.2.3209" path="/dev/binderfs/binder0" dev="binder" ino=111 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 279.503174][ T36] audit: type=1400 audit(1750405050.780:66680): avc: denied { set_context_mgr } for pid=10886 comm="syz.2.3209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 279.524160][ T36] audit: type=1400 audit(1750405050.780:66681): avc: denied { ioctl } for pid=10886 comm="syz.2.3209" path="/dev/binderfs/binder0" dev="binder" ino=111 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 279.551803][ T36] audit: type=1400 audit(1750405050.780:66682): avc: denied { read } for pid=10886 comm="syz.2.3209" name="binder0" dev="binder" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 279.585137][ T36] audit: type=1400 audit(1750405050.780:66683): avc: denied { read open } for pid=10886 comm="syz.2.3209" path="/dev/binderfs/binder0" dev="binder" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 279.661897][ T36] audit: type=1400 audit(1750405050.790:66684): avc: denied { read } for pid=10888 comm="syz.7.3210" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 279.697356][T10892] rust_binder: Write failure EFAULT in pid:453 [ 279.710702][ T36] audit: type=1400 audit(1750405050.790:66685): avc: denied { read open } for pid=10888 comm="syz.7.3210" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 279.777020][T10895] binder: Unknown parameter 'up.clone_children' [ 279.810387][ T36] audit: type=1400 audit(1750405050.790:66686): avc: denied { ioctl } for pid=10888 comm="syz.7.3210" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 279.900294][T10901] rust_binder: Error while translating object. [ 279.900328][T10901] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 279.915597][T10903] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 279.925080][T10901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:459 [ 280.009793][T10909] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 280.118767][T10914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.128570][T10915] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 280.150508][T10915] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 280.180163][T10915] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:517 [ 280.339212][ T5817] Bluetooth: hci0: Frame reassembly failed (-84) [ 280.817536][T10939] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:473 [ 281.035925][T10943] binder: Bad value for 'stats' [ 281.049662][T10947] binder: Unknown parameter 'context' [ 281.185361][T10953] binder: Unknown parameter 'fscontesHnconfined_u' [ 281.263394][T10955] rust_binder: Write failure EFAULT in pid:1547 [ 281.294741][T10955] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 281.634998][T10969] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 281.746748][T10972] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 281.746786][T10972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1549 [ 282.166111][T10985] binder: Unknown parameter 'd' [ 282.383171][ T1541] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 282.483945][T10993] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 282.505709][T10993] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false [ 282.512185][T10993] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 282.533510][T10993] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:522 [ 282.893914][T11000] random: crng reseeded on system resumption [ 283.191715][T11016] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.246334][T11016] binder: Bad value for 'defcontext' [ 283.288072][T11016] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 283.323142][T11016] rust_binder: Write failure EINVAL in pid:493 [ 283.635779][T11026] rust_binder: Error while translating object. [ 283.663164][T11026] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 283.669539][T11026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:496 [ 283.744781][T11032] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 283.988060][T11036] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 284.374763][ T36] kauditd_printk_skb: 859 callbacks suppressed [ 284.374782][ T36] audit: type=1400 audit(1750405055.760:67546): avc: denied { read write } for pid=4995 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.455955][ T36] audit: type=1400 audit(1750405055.790:67547): avc: denied { read write open } for pid=4995 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.493861][T11056] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1579 [ 284.505411][T11059] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 284.531820][ T36] audit: type=1400 audit(1750405055.790:67548): avc: denied { ioctl } for pid=4995 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.619292][ T36] audit: type=1400 audit(1750405055.800:67549): avc: denied { read write } for pid=8714 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.683747][ T36] audit: type=1400 audit(1750405055.800:67550): avc: denied { read write open } for pid=8714 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.712787][T11062] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 284.723114][ T36] audit: type=1400 audit(1750405055.800:67551): avc: denied { ioctl } for pid=8714 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.761880][T11065] rust_binder: Error while translating object. [ 284.761922][T11065] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 284.783403][T11065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1585 [ 284.810067][ T36] audit: type=1400 audit(1750405055.820:67552): avc: denied { read } for pid=11053 comm="syz.1.3268" name="binder0" dev="binder" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 284.893128][ T36] audit: type=1400 audit(1750405055.820:67553): avc: denied { read open } for pid=11053 comm="syz.1.3268" path="/dev/binderfs/binder0" dev="binder" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 284.926329][ T36] audit: type=1400 audit(1750405055.820:67554): avc: denied { ioctl } for pid=11053 comm="syz.1.3268" path="/dev/binderfs/binder0" dev="binder" ino=104 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 284.952943][ T36] audit: type=1400 audit(1750405055.820:67555): avc: denied { set_context_mgr } for pid=11053 comm="syz.1.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 285.007977][T11058] rust_binder: Write failure EFAULT in pid:544 [ 285.325040][T11075] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 285.339065][T11075] SELinux: failed to load policy [ 285.399582][T11075] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.431357][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 285.449650][T11075] rust_binder: Error in use_page_slow: ESRCH [ 285.449671][T11075] rust_binder: use_range failure ESRCH [ 285.469081][T11075] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 285.499390][T11075] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 285.523161][T11075] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:547 [ 285.605460][T11083] input: syz1 as /devices/virtual/input/input147 [ 285.785124][T11088] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 285.994424][T11097] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 285.994465][T11097] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1606 [ 286.006313][T11097] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 286.025762][T11097] rust_binder: Read failure Err(EFAULT) in pid:1606 [ 286.122929][T11102] rust_binder: Error while translating object. [ 286.133108][T11102] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 286.139348][T11102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1608 [ 286.214756][T11106] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 286.227827][T11106] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 286.245890][T11106] rust_binder: Write failure EINVAL in pid:514 [ 286.443387][T11111] input: syz0 as /devices/virtual/input/input148 [ 286.473722][T11114] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:518 [ 286.569622][T11119] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 286.596067][T11118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:893 [ 286.609271][T11118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:893 [ 286.663470][T11121] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 286.718524][T11121] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 286.949575][T11132] rust_binder: Write failure EFAULT in pid:1619 [ 287.091264][T11138] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 287.103754][T11138] pim6reg0: linktype set to 769 [ 287.124395][T11138] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 287.285188][T11136] rust_binder: Read failure Err(EFAULT) in pid:903 [ 287.390515][T11146] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 287.451414][T11148] rust_binder: Write failure EFAULT in pid:1628 [ 287.503202][ T5595] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 287.515626][ T1541] Bluetooth: hci0: command 0x1003 tx timeout [ 287.603890][T11156] input: syz0 as /devices/virtual/input/input150 [ 287.620235][T11151] SELinux: failed to load policy [ 287.679197][T11159] rust_binder: Write failure EINVAL in pid:549 [ 287.699987][T11151] rust_binder: Error while translating object. [ 287.728624][T11151] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 287.748665][T11151] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:907 [ 288.219256][T11201] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 288.235270][T11201] rust_binder: Write failure EINVAL in pid:534 [ 288.284536][T11176] cgroup: fork rejected by pids controller in /syz6 [ 288.395439][T11216] rust_binder: Read failure Err(EAGAIN) in pid:915 [ 288.786672][T11232] rust_binder: Write failure EINVAL in pid:917 [ 288.807280][T11232] rust_binder: Write failure EINVAL in pid:917 [ 288.873158][T11233] rust_binder: Write failure EFAULT in pid:1639 [ 288.920650][T11239] SELinux: policydb version -1634910782 does not match my version range 15-33 [ 288.959001][T11239] SELinux: failed to load policy [ 289.079015][T11244] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 289.117498][T11244] rust_binder: Error while translating object. [ 289.134022][T11244] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 289.153146][T11244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:921 [ 289.243824][T11248] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:595 [ 289.256620][T11250] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 289.265301][T11248] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 289.272198][T11248] rust_binder: Read failure Err(EFAULT) in pid:595 [ 289.383665][ T36] kauditd_printk_skb: 760 callbacks suppressed [ 289.383686][ T36] audit: type=1400 audit(1750405060.770:68316): avc: denied { load_policy } for pid=11252 comm="syz.1.3323" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 289.383722][T11253] SELinux: policydb string length 1952804360 does not match expected length 8 [ 289.459366][ T36] audit: type=1400 audit(1750405060.840:68317): avc: denied { read write } for pid=8714 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.468326][T11253] SELinux: failed to load policy [ 289.506686][T11259] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 289.535236][T11259] rust_binder: Error in use_page_slow: ESRCH [ 289.558262][ T36] audit: type=1400 audit(1750405060.840:68318): avc: denied { read write open } for pid=8714 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.593203][T11259] rust_binder: use_range failure ESRCH [ 289.593234][T11259] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 289.598736][T11261] rust_binder: Write failure EFAULT in pid:598 [ 289.629663][ T36] audit: type=1400 audit(1750405060.840:68319): avc: denied { ioctl } for pid=8714 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 289.653124][T11259] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 289.710260][ T36] audit: type=1400 audit(1750405060.890:68320): avc: denied { read } for pid=11257 comm="syz.2.3324" name="binder0" dev="binder" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 289.723137][T11259] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:923 [ 289.754368][T11270] FAULT_INJECTION: forcing a failure. [ 289.754368][T11270] name failslab, interval 1, probability 0, space 0, times 0 [ 289.781846][ T36] audit: type=1400 audit(1750405060.890:68321): avc: denied { read open } for pid=11257 comm="syz.2.3324" path="/dev/binderfs/binder0" dev="binder" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 289.808920][T11270] CPU: 0 UID: 0 PID: 11270 Comm: syz.7.3326 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 289.808953][T11270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.808978][T11270] Call Trace: [ 289.808985][T11270] [ 289.808995][T11270] __dump_stack+0x21/0x30 [ 289.809025][T11270] dump_stack_lvl+0x10c/0x190 [ 289.809050][T11270] ? __cfi_dump_stack_lvl+0x10/0x10 [ 289.809077][T11270] ? kstrtouint_from_user+0xfb/0x150 [ 289.809100][T11270] ? x64_sys_call+0xe69/0x2ee0 [ 289.809126][T11270] dump_stack+0x19/0x20 [ 289.809149][T11270] should_fail_ex+0x3d9/0x530 [ 289.809171][T11270] should_failslab+0xac/0x100 [ 289.809200][T11270] __kmalloc_noprof+0x69/0x450 [ 289.809223][T11270] ? __kasan_check_write+0x18/0x20 [ 289.809245][T11270] ? kernfs_fop_write_iter+0x16f/0x4d0 [ 289.809266][T11270] ? proc_fail_nth_write+0x17e/0x210 [ 289.809287][T11270] kernfs_fop_write_iter+0x16f/0x4d0 [ 289.809308][T11270] vfs_write+0x694/0xe80 [ 289.809333][T11270] ? __cfi_kernfs_fop_write_iter+0x10/0x10 [ 289.809365][T11270] ? __cfi_vfs_write+0x10/0x10 [ 289.809387][T11270] ? __cfi_mutex_lock+0x10/0x10 [ 289.809409][T11270] ksys_write+0x141/0x250 [ 289.809433][T11270] ? __cfi_ksys_write+0x10/0x10 [ 289.809458][T11270] ? __kasan_check_read+0x15/0x20 [ 289.809480][T11270] __x64_sys_write+0x7f/0x90 [ 289.809514][T11270] x64_sys_call+0x271c/0x2ee0 [ 289.809540][T11270] do_syscall_64+0x58/0xf0 [ 289.809567][T11270] ? clear_bhb_loop+0x35/0x90 [ 289.809599][T11270] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 289.809628][T11270] RIP: 0033:0x7f653338e929 [ 289.809659][T11270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.809679][T11270] RSP: 002b:00007f653425d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 289.809702][T11270] RAX: ffffffffffffffda RBX: 00007f65335b6160 RCX: 00007f653338e929 [ 289.809719][T11270] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000004 [ 289.809733][T11270] RBP: 00007f653425d090 R08: 0000000000000000 R09: 0000000000000000 [ 289.809747][T11270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.809760][T11270] R13: 0000000000000000 R14: 00007f65335b6160 R15: 00007ffe9e0bc7c8 [ 289.809778][T11270] [ 289.809857][ T36] audit: type=1400 audit(1750405060.890:68322): avc: denied { ioctl } for pid=11257 comm="syz.2.3324" path="/dev/binderfs/binder0" dev="binder" ino=111 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 290.076070][T11268] input: syz1 as /devices/virtual/input/input152 [ 290.082745][ T36] audit: type=1400 audit(1750405060.900:68323): avc: denied { ioctl } for pid=11252 comm="syz.1.3323" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 290.163914][ T36] audit: type=1400 audit(1750405060.910:68324): avc: denied { read } for pid=11257 comm="syz.2.3324" name="binder0" dev="binder" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 290.193123][ T36] audit: type=1400 audit(1750405060.910:68325): avc: denied { read open } for pid=11257 comm="syz.2.3324" path="/dev/binderfs/binder0" dev="binder" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 290.383739][T11280] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 290.545463][T11285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 290.596963][T11285] rust_binder: Error while translating object. [ 290.643182][T11285] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 290.662986][T11285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:604 [ 290.663593][T11292] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:604 [ 291.045016][T11304] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 291.090357][T11304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:612 [ 291.476066][T11316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 291.522808][T11318] tun0: tun_chr_ioctl cmd 1074025675 [ 291.554854][T11318] tun0: persist enabled [ 291.573500][T11318] tun0: tun_chr_ioctl cmd 1074025675 [ 291.582706][T11318] tun0: persist enabled [ 291.635251][T11316] KVM: debugfs: duplicate directory 11316-11 [ 291.750313][T11324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 291.779129][T11327] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 291.787965][T11326] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 292.176499][T11340] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 292.204064][T11344] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 292.209663][T11340] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 242) [ 292.210753][T11344] rust_binder: Write failure EINVAL in pid:1663 [ 292.217822][T11340] rust_binder: Error while translating object. [ 292.234639][T11340] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 292.240932][T11340] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:955 [ 292.594664][T11352] rust_binder: Write failure EFAULT in pid:963 [ 292.774518][T11358] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 292.780790][T11358] rust_binder: Read failure Err(EFAULT) in pid:565 [ 292.941063][T11360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 292.949708][T11360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 292.958134][T11360] rust_binder: Error in use_page_slow: ESRCH [ 292.964694][T11360] rust_binder: use_range failure ESRCH [ 292.970902][T11360] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 292.976449][T11360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 292.985504][T11360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:619 [ 293.052392][T11364] rust_binder: Write failure EFAULT in pid:621 [ 293.076422][T11364] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 293.190154][T11367] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 293.319018][T11372] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:623 [ 293.458911][T11377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 293.495831][T11377] rust_binder: Write failure EINVAL in pid:966 [ 293.614741][T11383] binder: Bad value for 'stats' [ 293.854217][T11390] SELinux: policydb version 776821497 does not match my version range 15-33 [ 293.893174][T11390] SELinux: failed to load policy [ 294.121439][T11397] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 294.121467][T11397] rust_binder: Error while translating object. [ 294.142441][T11397] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 294.152530][T11397] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:974 [ 294.204007][ T13] bridge_slave_1: left allmulticast mode [ 294.224147][ T1541] Bluetooth: hci0: command 0x1003 tx timeout [ 294.230236][ T5595] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 294.248279][ T13] bridge_slave_1: left promiscuous mode [ 294.275667][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.303706][ T13] bridge_slave_0: left allmulticast mode [ 294.309440][ T13] bridge_slave_0: left promiscuous mode [ 294.345099][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.396626][ T36] kauditd_printk_skb: 703 callbacks suppressed [ 294.396644][ T36] audit: type=1400 audit(1750405065.780:69029): avc: denied { read } for pid=11402 comm="syz.1.3372" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 294.450430][ T36] audit: type=1400 audit(1750405065.810:69030): avc: denied { read open } for pid=11402 comm="syz.1.3372" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 294.475234][ T36] audit: type=1400 audit(1750405065.810:69031): avc: denied { ioctl } for pid=11402 comm="syz.1.3372" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 294.522210][ T36] audit: type=1400 audit(1750405065.900:69032): avc: denied { sys_module } for pid=11400 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 294.544056][ T36] audit: type=1400 audit(1750405065.900:69033): avc: denied { sys_module } for pid=11400 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 294.566012][ T36] audit: type=1400 audit(1750405065.900:69034): avc: denied { sys_module } for pid=11400 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 294.587835][ T36] audit: type=1400 audit(1750405065.900:69035): avc: denied { read open } for pid=11402 comm="syz.1.3372" path="mnt:[4026532295]" dev="nsfs" ino=4026532295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 294.613975][ T36] audit: type=1400 audit(1750405065.900:69036): avc: denied { ioctl } for pid=11402 comm="syz.1.3372" path="mnt:[4026532295]" dev="nsfs" ino=4026532295 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 294.682144][ T36] audit: type=1400 audit(1750405065.900:69037): avc: denied { read } for pid=11402 comm="syz.1.3372" name="binder0" dev="binder" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 294.723560][ T36] audit: type=1400 audit(1750405065.900:69038): avc: denied { read open } for pid=11402 comm="syz.1.3372" path="/dev/binderfs/binder0" dev="binder" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 294.758932][ T13] veth1_macvtap: left promiscuous mode [ 294.764628][ T13] veth0_vlan: left promiscuous mode [ 294.815716][T11400] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.822771][T11400] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.829918][T11400] bridge_slave_0: entered allmulticast mode [ 294.841371][T11400] bridge_slave_0: entered promiscuous mode [ 294.849201][T11400] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.856775][T11400] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.865015][T11418] binder: Unknown parameter '0x0000000000000003' [ 294.873184][T11400] bridge_slave_1: entered allmulticast mode [ 294.880130][T11400] bridge_slave_1: entered promiscuous mode [ 294.968460][T11420] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 294.968487][T11420] rust_binder: Error while translating object. [ 294.981972][T11420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 294.999219][T11420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:588 [ 295.071185][T11423] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 295.157683][T11400] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.164800][T11400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.242218][T11428] SELinux: policydb magic number 0x65677568 does not match expected magic number 0xf97cff8c [ 295.293527][T11428] SELinux: failed to load policy [ 295.310748][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.391523][T11433] binder: Unknown parameter 'hash' [ 295.401190][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.408314][ T5817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.446635][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.453745][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.514031][T11436] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 295.552057][ T305] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 295.566726][T11439] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 295.575123][T11437] rust_binder: Write failure EFAULT in pid:1674 [ 295.593051][T11440] rust_binder: Write failure EFAULT in pid:1674 [ 295.600116][ T305] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 295.633913][ T305] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 295.641333][ T305] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 295.649782][ T305] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 295.659678][ T305] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 295.707920][T11400] veth0_vlan: entered promiscuous mode [ 295.797259][T11400] veth1_macvtap: entered promiscuous mode [ 296.003928][T11452] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 296.013502][T11452] rust_binder: Write failure EINVAL in pid:1684 [ 296.025837][T11453] rust_binder: Write failure EFAULT in pid:2 [ 296.033738][T11454] rust_binder: Write failure EFAULT in pid:2 [ 296.261613][T11459] rust_binder: Write failure EFAULT in pid:5 [ 296.554372][T11472] random: crng reseeded on system resumption [ 296.607298][T11481] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 296.733477][T11484] rust_binder: Error while translating object. [ 296.743843][T11482] rust_binder: Write failure EINVAL in pid:7 [ 296.744512][T11484] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 296.756415][T11484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1703 [ 296.873193][T11487] kvm: apic: phys broadcast and lowest prio [ 296.942728][T11490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 296.944179][T11490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:998 [ 297.127292][T11496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 297.153105][T11496] rust_binder: Read failure Err(EFAULT) in pid:1709 [ 297.389900][T11508] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.482821][T11512] rust_binder: Error while translating object. [ 297.496128][T11512] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 297.510013][T11512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1008 [ 297.702471][T11522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 297.711926][T11522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:601 [ 297.950876][T11534] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.290993][T11553] kvm: kvm [11552]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x7 [ 298.324007][T11553] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.407332][T11553] rust_binder: Error in use_page_slow: ESRCH [ 298.420383][T11553] rust_binder: use_range failure ESRCH [ 298.431899][T11553] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 298.442229][T11553] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 298.457902][T11553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1023 [ 298.531569][T11559] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 298.540836][T11559] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 298.550722][T11559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:615 [ 298.729297][T11568] rust_binder: Write failure EINVAL in pid:617 [ 298.862128][T11569] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.895483][T11569] rust_binder: Got transaction with invalid offset. [ 298.908450][T11569] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 298.933562][T11569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1025 [ 298.989393][T11573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 299.002970][T11573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 299.037351][T11573] rust_binder: Error while translating object. [ 299.059401][T11573] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 299.083124][T11573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 299.092024][T11577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 299.148270][T11577] rust_binder: Write failure EINVAL in pid:1028 [ 299.178272][T11577] rust_binder: Error in use_page_slow: ESRCH [ 299.185734][T11577] rust_binder: use_range failure ESRCH [ 299.191815][T11577] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 299.197437][T11577] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 299.205535][T11577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1028 [ 299.430573][ T36] kauditd_printk_skb: 914 callbacks suppressed [ 299.430594][ T36] audit: type=1400 audit(1750405070.810:69953): avc: denied { read } for pid=11595 comm="syz.1.3430" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 299.521289][ T36] audit: type=1400 audit(1750405070.850:69954): avc: denied { read open } for pid=11595 comm="syz.1.3430" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 299.570574][ T7840] audit: audit_backlog=65 > audit_backlog_limit=64 [ 299.573360][T11602] audit: audit_backlog=65 > audit_backlog_limit=64 [ 299.593110][ T36] audit: type=1400 audit(1750405070.850:69955): avc: denied { read } for pid=11595 comm="syz.1.3430" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 299.602228][ T4995] audit: audit_backlog=65 > audit_backlog_limit=64 [ 299.624488][ T7840] audit: audit_lost=253 audit_rate_limit=0 audit_backlog_limit=64 [ 299.632375][ T7840] audit: backlog limit exceeded [ 299.636613][T11602] audit: audit_lost=254 audit_rate_limit=0 audit_backlog_limit=64 [ 299.643363][T11600] audit: audit_backlog=65 > audit_backlog_limit=64 [ 299.681031][T11602] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 299.733563][ T5817] Bluetooth: hci0: Frame reassembly failed (-84) [ 299.787842][T11610] rust_binder: Read failure Err(EAGAIN) in pid:633 [ 299.920060][T11617] rust_binder: Write failure EINVAL in pid:1737 [ 299.990580][T11619] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 300.115014][T11626] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 300.142920][T11627] input: syz0 as /devices/virtual/input/input154 [ 300.158486][T11626] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false [ 300.158512][T11626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 300.169578][T11626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1041 [ 300.188463][T11627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1741 [ 300.224906][T11626] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 300.289717][T11627] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 300.402864][T11633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1045 [ 300.532397][T11638] rust_binder: Error while translating object. [ 300.551365][T11639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1047 [ 300.559579][T11638] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 300.579606][T11638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1743 [ 300.664393][T11644] binder: Bad value for 'stats' [ 300.685198][T11647] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 300.793387][T11657] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.053872][T11666] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 301.116900][T11668] binder: Bad value for 'defcontext' [ 301.171759][T11674] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.195062][T11674] SELinux: failed to load policy [ 301.210395][T11674] rust_binder: Error while translating object. [ 301.210443][T11674] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 301.218394][T11674] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1062 [ 301.389975][T11680] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.447699][T11680] rust_binder: Error while translating object. [ 301.458760][T11680] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 301.465880][T11680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 301.522747][T11686] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.550297][T11686] rust_binder: Error in use_page_slow: ESRCH [ 301.556840][T11686] rust_binder: use_range failure ESRCH [ 301.562849][T11686] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 301.569288][T11686] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 301.580607][T11686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:50 [ 301.711284][T11694] __vm_enough_memory: pid: 11694, comm: syz.6.3464, bytes: 281474976845824 not enough memory for the allocation [ 301.743440][ T5595] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 301.903836][T11700] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 301.914993][T11700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.949925][T11700] rust_binder: Error while translating object. [ 301.963163][T11700] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 301.972348][T11700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:636 [ 302.082524][T11710] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.136572][T11711] input: syz1 as /devices/virtual/input/input156 [ 302.335833][T11718] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.338402][T11718] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.349606][T11718] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 152, size: 91) [ 302.356320][T11718] rust_binder: Error while translating object. [ 302.368128][T11718] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 302.376749][T11718] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:639 [ 302.480593][T11720] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.651870][T11725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67 [ 302.725403][T11732] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.754536][T11732] rust_binder: Write failure EINVAL in pid:646 [ 302.782554][T11731] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.803387][T11731] rust_binder: Error in use_page_slow: ESRCH [ 302.809882][T11731] rust_binder: use_range failure ESRCH [ 302.823107][T11731] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 302.835185][T11731] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 302.847650][T11734] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.857073][T11731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:69 [ 302.866903][T11734] rust_binder: Write failure EINVAL in pid:648 [ 303.078499][T11738] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 303.097359][T11738] rust_binder: Error while translating object. [ 303.112698][T11738] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 303.120224][T11738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:650 [ 303.280955][T11750] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.464894][T11765] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.476885][T11765] rust_binder: Error in use_page_slow: ESRCH [ 303.483428][T11765] rust_binder: use_range failure ESRCH [ 303.489508][T11765] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 303.513096][T11765] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 303.519102][T11768] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 303.526110][T11765] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:661 [ 303.704142][T11773] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 303.884558][T11781] rust_binder: Write failure EINVAL in pid:666 [ 303.908431][T11781] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 303.914717][T11781] rust_binder: Read failure Err(EFAULT) in pid:666 [ 303.967695][T11786] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.981229][T11786] input: syz0 as /devices/virtual/input/input157 [ 304.000801][T11786] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 304.000822][T11786] rust_binder: Read failure Err(EFAULT) in pid:668 [ 304.208721][T11798] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.234578][T11798] input: syz1 as /devices/virtual/input/input159 [ 304.259798][T11798] rust_binder: Error while translating object. [ 304.259853][T11798] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 304.274634][T11798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:673 [ 304.469392][ T36] kauditd_printk_skb: 923 callbacks suppressed [ 304.469415][ T36] audit: type=1400 audit(1750405075.850:70865): avc: denied { read write } for pid=11400 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 304.509421][ T36] audit: type=1400 audit(1750405075.870:70866): avc: denied { read write open } for pid=11400 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 304.541398][ T36] audit: type=1400 audit(1750405075.870:70867): avc: denied { ioctl } for pid=11400 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 304.568712][ T36] audit: type=1400 audit(1750405075.960:70868): avc: denied { read } for pid=11809 comm="syz.6.3504" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 304.592584][ T36] audit: type=1400 audit(1750405075.960:70869): avc: denied { read open } for pid=11809 comm="syz.6.3504" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 304.617556][ T36] audit: type=1400 audit(1750405075.980:70870): avc: denied { ioctl } for pid=11809 comm="syz.6.3504" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 304.710029][ T36] audit: type=1400 audit(1750405075.980:70871): avc: denied { read write } for pid=4995 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 304.783869][T11817] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1074291459 [ 304.801304][ T36] audit: type=1400 audit(1750405075.980:70872): avc: denied { read write open } for pid=4995 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 304.851036][T11817] rust_binder: Write failure EINVAL in pid:1073 [ 304.873113][ T36] audit: type=1400 audit(1750405075.980:70873): avc: denied { ioctl } for pid=4995 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 304.913624][T11820] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.974448][ T36] audit: type=1400 audit(1750405076.030:70874): avc: denied { read write } for pid=7840 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.072905][T11820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 305.078106][T11820] rust_binder: Error while translating object. [ 305.103516][T11820] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 305.112363][T11820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 305.186239][T11829] rust_binder: Write failure EFAULT in pid:680 [ 305.197221][T11832] serio: Serial port ttynull [ 305.261814][T11835] binder: Unknown parameter 'nI' [ 305.349339][T11840] rust_binder: Write failure EFAULT in pid:682 [ 305.391809][T11842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.451560][T11842] random: crng reseeded on system resumption [ 305.510194][T11846] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.604400][T11851] rust_binder: got new transaction with bad transaction stack [ 305.610944][T11851] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 305.663247][T11853] kvm_intel: kvm [11852]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 306.203706][T11861] rust_binder: Error while translating object. [ 306.203742][T11861] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 306.217734][T11861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1814 [ 306.585552][ T9202] cgroup: fork rejected by pids controller in /syz7 [ 306.634395][T11876] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 306.636123][T11876] rust_binder: Error while translating object. [ 306.642592][T11876] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 306.670987][T11873] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 306.693188][T11876] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1082 [ 306.778708][T11880] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 306.812378][T11879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:97 [ 306.864055][ T12] bridge_slave_1: left allmulticast mode [ 306.884944][ T12] bridge_slave_1: left promiscuous mode [ 306.896475][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.913748][ T12] bridge_slave_0: left allmulticast mode [ 306.927032][ T12] bridge_slave_0: left promiscuous mode [ 306.932782][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.079723][ T12] veth1_macvtap: left promiscuous mode [ 307.085289][ T12] veth0_vlan: left promiscuous mode [ 307.188825][T11877] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.207645][T11877] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.224256][T11877] bridge_slave_0: entered allmulticast mode [ 307.230975][T11877] bridge_slave_0: entered promiscuous mode [ 307.241173][T11877] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.249103][T11877] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.257037][T11877] bridge_slave_1: entered allmulticast mode [ 307.264557][T11877] bridge_slave_1: entered promiscuous mode [ 307.308187][T11899] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1096 [ 307.344845][T11888] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.387083][T11888] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.394446][T11888] bridge_slave_0: entered allmulticast mode [ 307.402902][T11888] bridge_slave_0: entered promiscuous mode [ 307.429558][T11888] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.438784][T11888] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.453986][T11888] bridge_slave_1: entered allmulticast mode [ 307.460228][T11888] bridge_slave_1: entered promiscuous mode [ 307.627186][T11905] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.643450][T11877] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.657130][T11877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.664473][T11877] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.671532][T11877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.710293][T11910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.744266][T11910] rust_binder: Error in use_page_slow: ESRCH [ 307.750775][T11910] rust_binder: use_range failure ESRCH [ 307.756901][T11910] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 307.762481][T11910] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 307.778055][T11910] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:100 [ 308.020608][T11888] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.036720][T11888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.044050][T11888] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.051088][T11888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.061342][ T12] bridge_slave_1: left allmulticast mode [ 308.067041][ T12] bridge_slave_1: left promiscuous mode [ 308.072719][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.080286][ T12] bridge_slave_0: left allmulticast mode [ 308.086391][ T12] bridge_slave_0: left promiscuous mode [ 308.092010][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.171181][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.178473][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.186432][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.193986][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.235133][ T12] veth1_macvtap: left promiscuous mode [ 308.240654][ T12] veth0_vlan: left promiscuous mode [ 308.370108][T11924] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 308.429520][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.443077][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.459275][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.466358][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.484302][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.491359][ T5817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.499799][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.506975][ T5817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.527366][T11924] rust_binder: Error while translating object. [ 308.527401][T11924] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 308.543381][T11924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:107 [ 308.645496][T11877] veth0_vlan: entered promiscuous mode [ 308.666619][T11888] veth0_vlan: entered promiscuous mode [ 308.721316][T11888] veth1_macvtap: entered promiscuous mode [ 308.738850][T11877] veth1_macvtap: entered promiscuous mode [ 308.829067][T11928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1114 [ 308.831283][T11928] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 309.310434][T11953] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 309.318541][T11953] rust_binder: Error in use_page_slow: ESRCH [ 309.329980][T11950] binder: Bad value for 'max' [ 309.340860][T11953] rust_binder: use_range failure ESRCH [ 309.340891][T11953] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 309.347005][T11953] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 309.363150][T11953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:110 [ 309.478556][ T36] kauditd_printk_skb: 750 callbacks suppressed [ 309.478577][ T36] audit: type=1400 audit(1750405080.860:71610): avc: denied { read } for pid=11958 comm="syz.7.3548" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 309.529697][T11961] rust_binder: Error while translating object. [ 309.529735][T11961] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 309.545709][T11959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 309.563208][T11961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 309.586225][ T36] audit: type=1400 audit(1750405080.900:71611): avc: denied { read write } for pid=11960 comm="syz.1.3549" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 309.683127][ T36] audit: type=1400 audit(1750405080.900:71612): avc: denied { read write open } for pid=11960 comm="syz.1.3549" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 309.720270][ T7840] cgroup: fork rejected by pids controller in /syz2 [ 309.739846][ T36] audit: type=1400 audit(1750405080.910:71613): avc: denied { read open } for pid=11958 comm="syz.7.3548" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 309.809226][ T36] audit: type=1400 audit(1750405080.910:71614): avc: denied { ioctl } for pid=11958 comm="syz.7.3548" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 309.846126][ T36] audit: type=1400 audit(1750405080.910:71615): avc: denied { ioctl } for pid=11960 comm="syz.1.3549" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 309.884956][ T36] audit: type=1400 audit(1750405080.910:71616): avc: denied { set_context_mgr } for pid=11960 comm="syz.1.3549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 309.940524][ T36] audit: type=1400 audit(1750405080.910:71617): avc: denied { map } for pid=11960 comm="syz.1.3549" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 309.968015][ T36] audit: type=1400 audit(1750405080.910:71618): avc: denied { read } for pid=11960 comm="syz.1.3549" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 309.997934][ T36] audit: type=1400 audit(1750405080.910:71619): avc: denied { ioctl } for pid=11960 comm="syz.1.3549" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 310.224123][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.224414][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.231209][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.237997][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.244855][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.259194][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.273622][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.284647][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.310456][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.334041][T11983] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 310.354807][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.373457][T11983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:17 [ 310.380291][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.402831][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.407212][T11989] binder: Bad value for 'stats' [ 310.412120][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.421012][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.428618][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.435813][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.442466][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.449413][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.456480][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.463388][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.470190][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.477398][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.484507][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.491289][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.498433][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.503624][T11989] binder: Unknown parameter 'processor : 0 [ 310.503624][T11989] vendor_id : GenuineIntel [ 310.503624][T11989] cpu family : 6 [ 310.503624][T11989] model : 70x0000000000000000' [ 310.505481][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.530142][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.536924][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.550041][ T12] bridge_slave_1: left allmulticast mode [ 310.557400][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.562311][ T12] bridge_slave_1: left promiscuous mode [ 310.570781][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.574806][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.581734][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.588848][T11982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.596396][ T12] bridge_slave_0: left allmulticast mode [ 310.608743][ T12] bridge_slave_0: left promiscuous mode [ 310.614589][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.688895][T11994] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 41) [ 310.688921][T11994] rust_binder: Error while translating object. [ 310.719805][T11994] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 310.721647][T11996] SELinux: failed to load policy [ 310.740972][T11994] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20 [ 310.755368][ T12] veth1_macvtap: left promiscuous mode [ 310.772009][ T12] veth0_vlan: left promiscuous mode [ 310.803783][T11996] binder: Unknown parameter 'coyBLV"i5ntext' [ 311.000818][T12007] SELinux: failed to load policy [ 311.030877][T12009] random: crng reseeded on system resumption [ 311.137144][T11984] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.144261][T11984] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.144779][T12017] rust_binder: Write failure EFAULT in pid:33 [ 311.151335][T11984] bridge_slave_0: entered allmulticast mode [ 311.169873][T11984] bridge_slave_0: entered promiscuous mode [ 311.177870][T11984] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.185019][T11984] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.192159][T11984] bridge_slave_1: entered allmulticast mode [ 311.199158][T11984] bridge_slave_1: entered promiscuous mode [ 311.253922][T12005] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 152, size: 4096) [ 311.253949][T12005] rust_binder: Error while translating object. [ 311.273113][T12005] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 311.279444][T12005] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:24 [ 311.323482][T12020] input: syz0 as /devices/virtual/input/input161 [ 311.411446][T12020] rust_binder: Write failure EINVAL in pid:35 [ 311.414319][T12020] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 311.421384][T12020] rust_binder: Read failure Err(EFAULT) in pid:35 [ 311.460052][T12020] rust_binder: Write failure EINVAL in pid:35 [ 311.605401][T11984] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.618628][T11984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.625966][T11984] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.633027][T11984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.784496][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.802217][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.833680][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.840748][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.856011][T12035] SELinux: failed to load policy [ 311.868659][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.874389][T12035] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 311.875769][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.081029][T11984] veth0_vlan: entered promiscuous mode [ 312.222711][T11984] veth1_macvtap: entered promiscuous mode [ 312.239849][T12040] input: syz1 as /devices/virtual/input/input162 [ 312.297485][T12051] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 312.588295][T12064] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 312.614129][T12064] rust_binder: Error while translating object. [ 312.620592][T12064] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 312.644303][T12070] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:151 [ 312.654582][T12064] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 312.667144][T12069] rust_binder: Error while translating object. [ 312.686331][T12069] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 312.692549][T12069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 312.764048][T12074] input: syz1 as /devices/virtual/input/input163 [ 312.908234][T12081] rust_binder: Read failure Err(EAGAIN) in pid:46 [ 313.178331][T12091] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 313.248971][T12091] rust_binder: Error in use_page_slow: ESRCH [ 313.282446][T12091] rust_binder: use_range failure ESRCH [ 313.293131][T12091] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 313.309087][T12091] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 313.326993][T12091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:159 [ 313.908591][T12113] binder: Bad value for 'max' [ 314.306334][T12128] rust_binder: Write failure EFAULT in pid:71 [ 314.528305][ T36] kauditd_printk_skb: 951 callbacks suppressed [ 314.528326][ T36] audit: type=1400 audit(1750405085.910:72571): avc: denied { read write } for pid=11984 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.620765][ T36] audit: type=1400 audit(1750405085.910:72572): avc: denied { read write open } for pid=11984 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.623992][T12142] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 314.648462][ T36] audit: type=1400 audit(1750405085.910:72573): avc: denied { ioctl } for pid=11984 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.657059][T12140] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 314.681572][ T36] audit: type=1400 audit(1750405085.920:72574): avc: denied { read } for pid=12138 comm="syz.1.3604" name="binder0" dev="binder" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 314.719182][T12146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 314.720673][T12140] rust_binder: Error while translating object. [ 314.766571][T12140] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 314.791313][T12140] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 314.820030][ T36] audit: type=1400 audit(1750405085.920:72575): avc: denied { read open } for pid=12138 comm="syz.1.3604" path="/dev/binderfs/binder0" dev="binder" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 314.861616][T12151] audit: audit_backlog=65 > audit_backlog_limit=64 [ 314.870988][T12150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 314.888561][T12151] audit: audit_lost=265 audit_rate_limit=0 audit_backlog_limit=64 [ 314.890496][T11984] audit: audit_backlog=65 > audit_backlog_limit=64 [ 314.904056][T12150] audit: audit_lost=266 audit_rate_limit=0 audit_backlog_limit=64 [ 314.953927][T12151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 315.254145][T12169] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1048577 [ 315.268419][T12169] rust_binder: Write failure EINVAL in pid:61 [ 315.327110][T12171] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 315.357349][T12171] rust_binder: Error while translating object. [ 315.372480][T12171] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 315.393099][T12171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63 [ 315.514611][T12176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:85 [ 315.569541][T12180] rust_binder: Write failure EINVAL in pid:65 [ 315.726638][T12188] SELinux: security_context_str_to_sid () failed with errno=-22 [ 315.813559][T12190] kvm: Disabled LAPIC found during irq injection [ 315.862846][T12190] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 316.028933][T12201] binder: Bad value for 'defcontext' [ 316.265090][T12212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:81 [ 316.271291][T12210] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 316.293133][T12210] rust_binder: Read failure Err(EFAULT) in pid:29 [ 316.375542][T12217] __vm_enough_memory: pid: 12217, comm: syz.6.3629, bytes: 274877911040 not enough memory for the allocation [ 316.423270][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 316.435646][T12223] __vm_enough_memory: pid: 12223, comm: syz.6.3629, bytes: 274877911040 not enough memory for the allocation [ 316.646384][T12232] rust_binder: Write failure EINVAL in pid:191 [ 316.709742][T12236] tap0: tun_chr_ioctl cmd 1074812118 [ 316.762487][T12236] rust_binder: Write failure EFAULT in pid:36 [ 316.767144][T12237] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 316.773737][T12236] rust_binder: Write failure EINVAL in pid:36 [ 316.893835][T12242] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 316.902746][T12242] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 316.909245][T12242] rust_binder: Read failure Err(EFAULT) in pid:198 [ 317.289310][T12251] tap0: tun_chr_ioctl cmd 1074025678 [ 317.301287][T12251] tap0: group set to 0 [ 317.429884][T12254] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 317.434804][T12254] rust_binder: Error while translating object. [ 317.441274][T12254] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 317.447528][T12254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:210 [ 317.539724][T12256] rust_binder: Write failure EINVAL in pid:87 [ 317.625807][T12262] binder: Binderfs stats mode cannot be changed during a remount [ 317.862847][T12274] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 317.894752][T12276] rust_binder: Write failure EFAULT in pid:218 [ 317.955605][T12275] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 318.061304][T12280] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:220 [ 318.156438][T12285] SELinux: ebitmap: truncated map [ 318.170682][T12285] SELinux: failed to load policy [ 318.179715][T12285] rust_binder: Error in use_page_slow: ESRCH [ 318.179730][T12285] rust_binder: use_range failure ESRCH [ 318.186344][T12285] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 318.191813][T12285] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 318.203137][T12285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:42 [ 318.215567][T12285] rust_binder: Error in use_page_slow: ESRCH [ 318.234226][T12285] rust_binder: use_range failure ESRCH [ 318.247453][T12285] rust_binder: Failed to allocate buffer. len:48, is_oneway:false [ 318.258384][T12285] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 318.280418][T12285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:42 [ 318.385810][T12290] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 318.408571][T12290] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 318.415108][T12290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:226 [ 318.463337][ T1541] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 318.479587][ T5595] Bluetooth: hci0: command 0x1003 tx timeout [ 318.499758][T12292] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 318.574488][T12299] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 318.584438][T12299] rust_binder: Error while translating object. [ 318.590985][T12299] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 318.605363][T12299] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:233 [ 318.674104][T12303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 318.720285][T12303] kvm: kvm [12302]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x3032 [ 318.823141][T12303] rust_binder: Error while translating object. [ 318.823187][T12303] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 318.853144][T12303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:235 [ 319.011797][T12311] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 319.053168][T12311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:101 [ 319.063019][T12313] rust_binder: Write failure EINVAL in pid:45 [ 319.242176][T12318] rust_binder: Write failure EFAULT in pid:47 [ 319.493373][T12323] SELinux: security_context_str_to_sid () failed with errno=-22 [ 319.586012][ T36] kauditd_printk_skb: 1252 callbacks suppressed [ 319.586031][ T36] audit: type=1400 audit(1750405090.970:73812): avc: denied { read write } for pid=11400 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 319.642398][ T36] audit: type=1400 audit(1750405090.970:73813): avc: denied { read write } for pid=11877 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 319.745444][ T36] audit: type=1400 audit(1750405090.970:73814): avc: denied { read write open } for pid=11877 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 319.813598][T12341] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 319.827983][ T36] audit: type=1400 audit(1750405090.970:73815): avc: denied { ioctl } for pid=11877 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 319.889690][ T36] audit: type=1400 audit(1750405090.970:73816): avc: denied { read write } for pid=12326 comm="syz.7.3667" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 319.943097][ T36] audit: type=1400 audit(1750405090.970:73817): avc: denied { read open } for pid=12326 comm="syz.7.3667" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 320.012780][ T36] audit: type=1400 audit(1750405090.970:73818): avc: denied { ioctl } for pid=12326 comm="syz.7.3667" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 320.099333][ T36] audit: type=1400 audit(1750405090.970:73819): avc: denied { ioctl } for pid=12326 comm="syz.7.3667" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 320.123528][T12358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:115 [ 320.153358][T12360] audit: audit_backlog=65 > audit_backlog_limit=64 [ 320.183976][T11400] audit: audit_backlog=65 > audit_backlog_limit=64 [ 320.200578][T12358] rust_binder: Error in use_page_slow: ESRCH [ 320.200600][T12358] rust_binder: use_range failure ESRCH [ 320.233222][T12358] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 320.238745][T12358] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 320.288589][T12358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:115 [ 320.353623][T12367] binder: Bad value for 'defcontext' [ 320.515699][T12375] binder: Unknown parameter 'defcontextct<&I~qCqNj)<.3ru [ 320.515699][T12375] G8hɏSDY_.r audit_backlog_limit=64 [ 325.099815][T11888] audit: audit_backlog=65 > audit_backlog_limit=64 [ 325.107619][ T36] audit: type=1400 audit(1750405096.020:74534): avc: denied { ioctl } for pid=12615 comm="syz.7.3727" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 325.443343][T12647] kvm: user requested TSC rate below hardware speed [ 325.476279][T12653] random: crng reseeded on system resumption [ 325.653404][T12659] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 325.653429][T12659] rust_binder: Error while translating object. [ 325.662170][T12659] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 325.685001][T12664] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.703908][T12659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 325.771328][T12668] can0: slcan on ptm0. [ 325.804532][T12664] rust_binder: Error while translating object. [ 325.804584][T12664] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 325.814961][T12664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:163 [ 325.864980][T12667] can0 (unregistered): slcan off ptm0. [ 325.962849][ T306] Bluetooth: hci0: Frame reassembly failed (-84) [ 325.969297][T12678] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 325.978429][T12680] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.981075][T12678] binder: Unknown parameter '0x0000000000000003' [ 326.152954][T12684] binder: Unknown parameter 'context' [ 326.198964][T12688] binder: Unknown parameter 'CPi_' [ 326.412310][T12692] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.472489][T12690] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 326.489434][T12690] rust_binder: Error in use_page_slow: EBUSY [ 326.515413][T12690] rust_binder: use_range failure EBUSY [ 326.531553][T12690] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 326.545667][T12690] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 326.556770][T12690] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 326.568816][T12690] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:18 [ 326.805730][T12716] input: syz1 as /devices/virtual/input/input168 [ 326.857115][T12716] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.917954][T12724] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:171 [ 327.028519][T12728] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 327.060359][T12730] rust_binder: Write failure EFAULT in pid:134 [ 327.251201][T12742] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 327.336597][T12741] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 327.336631][T12741] rust_binder: Error in use_page_slow: EBUSY [ 327.349198][T12741] rust_binder: use_range failure EBUSY [ 327.355276][T12741] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 327.360940][T12741] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 327.370984][T12741] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 327.380390][T12741] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:34 [ 327.512061][T12750] binder: Bad value for 'max' [ 327.720981][T12762] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 327.793377][T12768] binder: Bad value for 'max' [ 327.818558][T12770] SELinux: failed to load policy [ 327.904638][T12772] rust_binder: Write failure EINVAL in pid:160 [ 327.988731][ T1541] Bluetooth: hci0: command 0x1003 tx timeout [ 328.000973][ T5595] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 328.143170][T12786] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 328.574219][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 328.634786][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 328.681764][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 328.709143][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 328.729309][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 328.752485][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 328.778062][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 328.813203][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 328.836596][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 328.853484][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 328.864530][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 328.876023][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 328.889216][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 328.900405][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 328.913931][T12819] binder: Bad value for 'max' [ 328.919845][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 328.934169][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 328.945833][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 328.970150][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 328.990337][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 329.015489][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 329.043114][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 329.076074][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 329.098436][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 329.115972][T12821] input: syz0 as /devices/virtual/input/input170 [ 329.139915][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 329.184693][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 329.212825][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 329.241324][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 329.244271][T12826] rust_binder: Write failure EINVAL in pid:64 [ 329.266986][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 329.288644][T12806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 329.302249][T12826] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 329.302270][T12826] rust_binder: Read failure Err(EFAULT) in pid:64 [ 329.319906][T12826] rust_binder: Write failure EINVAL in pid:64 [ 329.623090][ T36] kauditd_printk_skb: 912 callbacks suppressed [ 329.623112][ T36] audit: type=1400 audit(1750405101.000:75437): avc: denied { read write open } for pid=11888 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 329.692322][ T36] audit: type=1400 audit(1750405101.000:75438): avc: denied { ioctl } for pid=11888 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 329.781889][ T36] audit: type=1400 audit(1750405101.070:75439): avc: denied { read } for pid=12835 comm="syz.6.3797" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 329.863233][ T36] audit: type=1400 audit(1750405101.070:75440): avc: denied { read open } for pid=12835 comm="syz.6.3797" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 329.864391][T12841] rust_binder: Write failure EINVAL in pid:174 [ 329.905411][T12843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:193 [ 329.914678][ T36] audit: type=1400 audit(1750405101.110:75441): avc: denied { ioctl } for pid=12835 comm="syz.6.3797" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 329.990748][T12848] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:198 [ 330.016017][ T36] audit: type=1400 audit(1750405101.110:75442): avc: denied { read } for pid=12836 comm="syz.7.3796" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 330.078224][ T36] audit: type=1400 audit(1750405101.110:75443): avc: denied { read open } for pid=12836 comm="syz.7.3796" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 330.134517][T12848] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:198 [ 330.144184][T12848] rust_binder: Write failure EINVAL in pid:198 [ 330.183034][ T36] audit: type=1400 audit(1750405101.130:75444): avc: denied { read } for pid=12835 comm="syz.6.3797" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 330.221722][T12852] rust_binder: Write failure EFAULT in pid:179 [ 330.221722][T12853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:70 [ 330.264535][T11984] audit: audit_backlog=65 > audit_backlog_limit=64 [ 330.265798][T12855] audit: audit_backlog=65 > audit_backlog_limit=64 [ 330.502165][T12868] binder: Unknown parameter 'fscontext?}' [ 330.591712][T12870] binder: Bad value for 'stats' [ 330.889324][T12883] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.891539][T12883] rust_binder: Error while translating object. [ 330.903130][T12883] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 330.909324][T12883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:203 [ 330.945852][T12884] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.961452][T12885] rust_binder: Error while translating object. [ 330.968181][T12885] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 330.987529][T12885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:203 [ 331.241402][T12892] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 331.260646][T12892] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 331.315015][ T12] bridge_slave_1: left allmulticast mode [ 331.343469][T12898] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 331.349791][ T12] bridge_slave_1: left promiscuous mode [ 331.363717][T12898] rust_binder: Error while translating object. [ 331.363757][T12898] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 331.369961][T12898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:212 [ 331.374399][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.436487][ T12] bridge_slave_0: left allmulticast mode [ 331.442180][ T12] bridge_slave_0: left promiscuous mode [ 331.473200][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.529966][T12902] SELinux: security_context_str_to_sid (syste_uGй :d.w4Co؂+PXBܺys audit_backlog_limit=64 [ 335.333102][ T36] audit: type=1400 audit(1750405106.080:76286): avc: denied { read } for pid=13039 comm="syz.1.3863" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 335.357248][T12897] audit: audit_lost=286 audit_rate_limit=0 audit_backlog_limit=64 [ 335.538446][T13066] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 335.600164][T13073] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 335.783390][T13081] binder: Bad value for 'stats' [ 335.824190][T13078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30 [ 335.824769][T13078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30 [ 335.982575][T13087] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 336.003821][T13087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:266 [ 336.078891][T13094] kvm: kvm [13093]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 336.287955][T13101] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.312553][T13101] rust_binder: Error while translating object. [ 336.341759][T13104] binder: Bad value for 'max' [ 336.343847][T13101] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 336.373130][T13101] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:113 [ 336.450591][T13105] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 336.501904][T13105] SELinux: failed to load policy [ 336.655218][T13115] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.703802][T13117] can0: slcan on ptm0. [ 336.763538][T13117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 336.867240][T13116] can0 (unregistered): slcan off ptm0. [ 336.889941][T13125] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 336.913189][T13125] pim6reg0: linktype set to 769 [ 337.017182][T13128] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 337.171202][T13132] rust_binder: Write failure EFAULT in pid:39 [ 337.262711][T13135] rust_binder: Write failure EINVAL in pid:273 [ 337.483897][T13147] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 337.580362][T13152] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 337.580390][T13152] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 337.603149][T13152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:120 [ 337.742377][T13158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:279 [ 337.843165][T13160] rust_binder: Write failure EINVAL in pid:279 [ 337.978864][T13165] tun0: tun_chr_ioctl cmd 1074025675 [ 338.007360][T13165] tun0: persist enabled [ 338.022332][T13165] tun0: tun_chr_ioctl cmd 1074025675 [ 338.035358][T13165] tun0: persist enabled [ 338.061194][T13165] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.123018][T13165] rust_binder: Error while translating object. [ 338.139478][T13165] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 338.155042][T13165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:48 [ 338.168341][T13174] binder: Unknown parameter 'context' [ 338.189746][T13178] tun0: tun_chr_ioctl cmd 1074025675 [ 338.206691][T13178] tun0: persist disabled [ 338.442614][T13187] binder: Bad value for 'stats' [ 338.656077][T13199] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.658379][T13199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134 [ 338.759436][T13205] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.774561][T13202] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:282 [ 339.157484][T13211] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 339.513309][T13221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:295 [ 339.524603][T13223] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 339.537818][T13223] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 339.573242][T13223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:137 [ 339.582668][T13223] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 339.616648][T13227] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 339.628797][T13223] rust_binder: Read failure Err(EFAULT) in pid:137 [ 339.669854][ T36] kauditd_printk_skb: 980 callbacks suppressed [ 339.669874][ T36] audit: type=1400 audit(1750405111.050:77257): avc: denied { read write } for pid=12575 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 339.714042][T13232] rust_binder: Write failure EFAULT in pid:298 [ 339.772205][ T36] audit: type=1400 audit(1750405111.100:77258): avc: denied { read write open } for pid=12575 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 339.839331][ T36] audit: type=1400 audit(1750405111.100:77259): avc: denied { ioctl } for pid=12575 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 339.915918][ T36] audit: type=1400 audit(1750405111.100:77260): avc: denied { ioctl } for pid=13225 comm="syz.7.3915" path="/dev/binderfs/binder0" dev="binder" ino=58 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 339.960414][T13234] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 339.975111][T13246] audit: audit_backlog=65 > audit_backlog_limit=64 [ 339.981761][T13234] rust_binder: Write failure EINVAL in pid:285 [ 339.990867][T13246] audit: audit_lost=290 audit_rate_limit=0 audit_backlog_limit=64 [ 340.005030][ T36] audit: type=1400 audit(1750405111.120:77261): avc: denied { read } for pid=13231 comm="syz.2.3917" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 340.022648][T12575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 340.038591][T13247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 340.048276][T13246] audit: backlog limit exceeded [ 340.054650][T13246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.104190][T13251] input: syz1 as /devices/virtual/input/input174 [ 340.336469][T13261] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.353809][T13258] kvm: user requested TSC rate below hardware speed [ 340.359640][T13264] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 340.459189][T13270] binder: Unknown parameter 'rw(' [ 340.710895][T13276] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 340.943787][T13286] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:297 [ 340.969712][T13286] rust_binder: Error while translating object. [ 340.994504][T13286] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 341.010908][T13286] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:297 [ 341.218139][T13290] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 341.613664][T13305] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 341.704814][T13309] input: syz0 as /devices/virtual/input/input175 [ 341.765101][T13309] input: failed to attach handler leds to device input175, error: -6 [ 341.879483][T13316] rust_binder: Error while translating object. [ 341.879535][T13316] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 341.894999][T13316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:306 [ 341.966457][T13320] binder: Unknown parameter '/sys/power/disk000000000001' [ 342.015614][T13320] binder: Unknown parameter '/sys/power/disk000000000001' [ 342.023787][T13318] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 342.148674][T13327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:312 [ 342.303489][T13335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97 [ 342.354565][T13335] binder: Unknown parameter '9S}V#v \yRXwy 9ts\k0F25΋8Ո>tz׸~2ӳB#C)/O(VD' [ 342.619631][T13342] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 342.619665][T13342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:99 [ 342.696302][T13347] binder: Unknown parameter '' [ 342.823668][T13351] binder: Unknown parameter '' [ 342.962446][T13357] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 343.050645][T13354] binder: Unknown parameter '00000000000000000003' [ 343.371047][T13377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 343.397921][T13380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 343.431002][T13383] rust_binder: got new transaction with bad transaction stack [ 343.453091][T13383] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181 [ 343.521676][T13385] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 343.553111][T13385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:319 [ 344.250524][T13419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 344.277900][T13420] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 344.346837][T13422] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 344.693775][ T36] kauditd_printk_skb: 929 callbacks suppressed [ 344.693798][ T36] audit: type=1400 audit(1750405116.080:78187): avc: denied { read } for pid=13434 comm="syz.6.3976" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 344.738678][ T36] audit: type=1400 audit(1750405116.080:78188): avc: denied { read open } for pid=13434 comm="syz.6.3976" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 344.772515][ T36] audit: type=1400 audit(1750405116.090:78189): avc: denied { ioctl } for pid=13434 comm="syz.6.3976" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 344.828738][ T36] audit: type=1400 audit(1750405116.200:78190): avc: denied { read } for pid=13433 comm="syz.2.3975" name="binder0" dev="binder" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 344.890743][ T36] audit: type=1400 audit(1750405116.200:78191): avc: denied { read open } for pid=13433 comm="syz.2.3975" path="/dev/binderfs/binder0" dev="binder" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 344.919293][ T36] audit: type=1400 audit(1750405116.200:78192): avc: denied { ioctl } for pid=13433 comm="syz.2.3975" path="/dev/binderfs/binder0" dev="binder" ino=98 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 345.010013][ T36] audit: type=1400 audit(1750405116.210:78193): avc: denied { read } for pid=13433 comm="syz.2.3975" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 345.080399][ T36] audit: type=1400 audit(1750405116.210:78194): avc: denied { read open } for pid=13433 comm="syz.2.3975" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 345.144611][ T36] audit: type=1400 audit(1750405116.220:78195): avc: denied { ioctl } for pid=13433 comm="syz.2.3975" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 345.191926][ T36] audit: type=1400 audit(1750405116.250:78196): avc: denied { read write } for pid=12575 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 345.253611][T13451] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 345.387403][T13452] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 345.449769][T13460] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 345.568966][T13466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:352 [ 345.598889][T13470] rust_binder: Error while translating object. [ 345.618135][T13470] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 345.627782][T13466] SELinux: failed to load policy [ 345.650794][T13470] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:346 [ 345.727949][T13474] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 345.746644][T13475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 345.747013][T13466] rtc_cmos 00:00: Alarms can be up to one day in the future [ 345.783209][T13474] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 345.783247][T13474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:206 [ 345.809504][T13474] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 345.993909][T13463] rtc_cmos 00:00: Alarms can be up to one day in the future [ 346.200614][T13493] rust_binder: Write failure EINVAL in pid:210 [ 346.385366][T13500] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 346.411140][T13500] rust_binder: Error in use_page_slow: EBUSY [ 346.424009][T13500] rust_binder: use_range failure EBUSY [ 346.430031][T13500] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 346.438089][T13502] rust_binder: Error while translating object. [ 346.448677][T13500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 346.470827][T13502] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 346.483106][T13500] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 346.490003][T13502] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:357 [ 346.524970][T13500] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:357 [ 346.589074][T13506] rust_binder: Error while translating object. [ 346.608028][T13506] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 346.614250][T13506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:358 [ 346.864926][T13526] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 346.924716][T13522] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 346.931183][T13522] rust_binder: Error while translating object. [ 346.945276][ T305] rtc_cmos 00:00: Alarms can be up to one day in the future [ 346.973505][ T305] rtc_cmos 00:00: Alarms can be up to one day in the future [ 346.983929][T13522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 346.983962][T13522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:362 [ 346.984394][T13533] rust_binder: Write failure EFAULT in pid:362 [ 346.996372][ T305] rtc_cmos 00:00: Alarms can be up to one day in the future [ 347.052679][ T305] rtc_cmos 00:00: Alarms can be up to one day in the future [ 347.070184][ T305] rtc rtc0: __rtc_set_alarm: err=-22 [ 347.084424][T13530] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 347.098015][T13532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 347.424571][T13555] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 347.444834][T13553] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 347.479104][T13557] rust_binder: Failed to allocate buffer. len:168, is_oneway:false [ 347.534743][T13553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:371 [ 347.545938][T13559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:370 [ 347.790225][T13572] rust_binder: Write failure EINVAL in pid:372 [ 347.923558][T13577] rust_binder: Write failure EFAULT in pid:143 [ 348.063107][T13589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 348.125214][T13589] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 348.169294][T13593] rust_binder: Write failure EINVAL in pid:152 [ 348.169722][T13593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:152 [ 348.254638][T13590] rust_binder: Write failure EFAULT in pid:379 [ 348.582357][T13615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:382 [ 348.649972][T13611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:381 [ 348.704643][T13617] rust_binder: Write failure EFAULT in pid:163 [ 348.846876][T13628] binder: Unknown parameter 'defcontext01777777777777777777777' [ 348.881943][T13628] binder: Unknown parameter 'mask' [ 348.931683][T13630] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.014900][T13633] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 349.090673][T13635] binder: Bad value for 'max' [ 349.095403][T13641] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.208821][T13646] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.256519][T13651] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.364451][T13657] rust_binder: Got transaction with invalid offset. [ 349.377303][T13657] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 349.390783][T13659] binder: Bad value for 'max' [ 349.404947][T13657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:179 [ 349.422122][T13659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.434095][T13659] rust_binder: Error while translating object. [ 349.442213][T13659] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 349.453096][T13659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:244 [ 349.597103][T13667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:393 [ 349.685509][T13672] rust_binder: Write failure EINVAL in pid:246 [ 349.710799][ T36] kauditd_printk_skb: 1245 callbacks suppressed [ 349.710819][ T36] audit: type=1400 audit(1750405121.090:79442): avc: denied { read write } for pid=12575 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.756271][ T36] audit: type=1400 audit(1750405121.090:79443): avc: denied { read write open } for pid=12575 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.814490][ T36] audit: type=1400 audit(1750405121.090:79444): avc: denied { ioctl } for pid=12575 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.863115][ T36] audit: type=1400 audit(1750405121.140:79445): avc: denied { read } for pid=13674 comm="syz.6.4045" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 349.910613][ T36] audit: type=1400 audit(1750405121.140:79446): avc: denied { read open } for pid=13674 comm="syz.6.4045" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 349.971951][ T36] audit: type=1400 audit(1750405121.170:79447): avc: denied { ioctl } for pid=13674 comm="syz.6.4045" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 349.995184][T13682] audit: audit_backlog=65 > audit_backlog_limit=64 [ 349.998740][T13685] audit: audit_backlog=65 > audit_backlog_limit=64 [ 350.010616][T13681] audit: audit_backlog=65 > audit_backlog_limit=64 [ 350.017266][T13681] audit: audit_lost=293 audit_rate_limit=0 audit_backlog_limit=64 [ 350.509471][T13709] rust_binder: Error while translating object. [ 350.509505][T13709] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 350.534805][T13709] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:409 [ 350.586471][T13714] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 350.701188][T13713] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:396 [ 350.810615][T13723] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.827172][T13723] rust_binder: Error in use_page_slow: ESRCH [ 350.834769][T13723] rust_binder: use_range failure ESRCH [ 350.840894][T13723] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 350.861218][T13723] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 350.870205][T13723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:271 [ 350.938281][T13726] input: syz1 as /devices/virtual/input/input178 [ 351.198703][T13730] KVM: debugfs: duplicate directory 13730-13 [ 354.715677][ T36] kauditd_printk_skb: 964 callbacks suppressed [ 354.715698][ T36] audit: type=1400 audit(1750405126.100:80404): avc: denied { read write } for pid=12575 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 354.757357][ T36] audit: type=1400 audit(1750405126.130:80405): avc: denied { read write } for pid=14116 comm="syz.2.4205" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 354.786073][ T36] audit: type=1400 audit(1750405126.130:80406): avc: denied { read write } for pid=14116 comm="syz.2.4205" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 354.822184][ T36] audit: type=1400 audit(1750405126.130:80407): avc: denied { read write } for pid=14116 comm="syz.2.4205" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 354.846777][ T36] audit: type=1400 audit(1750405126.130:80408): avc: denied { read write } for pid=14116 comm="syz.2.4205" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 354.899913][ T36] audit: type=1400 audit(1750405126.130:80409): avc: denied { read write } for pid=14116 comm="syz.2.4205" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 354.924745][ T36] audit: type=1400 audit(1750405126.130:80410): avc: denied { read write } for pid=14116 comm="syz.2.4205" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 354.948179][ T36] audit: type=1400 audit(1750405126.130:80411): avc: denied { read write } for pid=14116 comm="syz.2.4205" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 354.972537][ T36] audit: type=1400 audit(1750405126.130:80412): avc: denied { read write } for pid=14116 comm="syz.2.4205" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 354.996321][ T36] audit: type=1400 audit(1750405126.130:80413): avc: denied { read write } for pid=14116 comm="syz.2.4205" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 355.623620][T14198] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 355.949651][ T306] Bluetooth: hci0: Frame reassembly failed (-84) [ 357.983144][ T1541] Bluetooth: hci0: command 0x1003 tx timeout [ 357.989291][ T5595] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 358.061218][T14426] nr0: tun_chr_ioctl cmd 1074025672 [ 358.066534][T14426] nr0: ignored: set checksum enabled [ 359.660842][T14584] block device autoloading is deprecated and will be removed. [ 359.696014][T14584] syz.7.4367: attempt to access beyond end of device [ 359.696014][T14584] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 359.739490][T14584] serio: Serial port ttynull [ 359.773967][ T36] kauditd_printk_skb: 836 callbacks suppressed [ 359.773985][ T36] audit: type=1400 audit(1750405131.160:81250): avc: denied { read } for pid=14588 comm="syz.2.4369" name="binder0" dev="binder" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 359.829865][ T36] audit: type=1400 audit(1750405131.190:81251): avc: denied { read } for pid=14577 comm="syz.7.4367" name="binder0" dev="binder" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 359.873121][ T36] audit: type=1400 audit(1750405131.200:81252): avc: denied { read } for pid=14588 comm="syz.2.4369" name="binder0" dev="binder" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 359.923096][ T36] audit: type=1400 audit(1750405131.260:81253): avc: denied { read write } for pid=11984 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 359.953099][ T36] audit: type=1400 audit(1750405131.260:81254): avc: denied { read write } for pid=12575 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 359.990284][ T36] audit: type=1400 audit(1750405131.340:81255): avc: denied { read write } for pid=14590 comm="syz.6.4370" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 360.033217][ T36] audit: type=1400 audit(1750405131.340:81256): avc: denied { read } for pid=14590 comm="syz.6.4370" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 360.073095][ T36] audit: type=1400 audit(1750405131.370:81257): avc: denied { read } for pid=14591 comm="syz.2.4371" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 360.123086][ T36] audit: type=1400 audit(1750405131.370:81258): avc: denied { read } for pid=14591 comm="syz.2.4371" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 360.163079][ T36] audit: type=1400 audit(1750405131.370:81259): avc: denied { read write } for pid=12575 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 362.187256][T14811] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 362.210011][ T306] Bluetooth: hci0: Frame reassembly failed (-84) [ 362.959374][T14851] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:516 [ 363.066606][T14862] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:649 [ 363.076757][T14861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:649 [ 363.439427][T14871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:756 [ 363.467751][T14871] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 363.477495][T14871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:756 [ 363.715949][T14874] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 363.979935][T14888] rust_binder: Write failure EFAULT in pid:763 [ 364.053143][T14890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:660 [ 364.190631][T14896] rust_binder: Write failure EINVAL in pid:662 [ 364.223131][ T1541] Bluetooth: hci0: command 0x1003 tx timeout [ 364.233150][ T5595] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 364.401286][T14904] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 364.547193][T14907] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 364.562109][T14904] rust_binder: Error in use_page_slow: ESRCH [ 364.562151][T14904] rust_binder: use_range failure ESRCH [ 364.589230][T14904] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 364.608891][T14904] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 364.639894][T14904] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:664 [ 364.767916][T14917] rust_binder: Write failure EINVAL in pid:493 [ 364.795310][ T36] kauditd_printk_skb: 793 callbacks suppressed [ 364.795332][ T36] audit: type=1400 audit(1750405136.180:82053): avc: denied { read write } for pid=14916 comm="syz.2.4482" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 364.852824][T14921] rust_binder: Write failure EINVAL in pid:668 [ 364.943338][ T36] audit: type=1400 audit(1750405136.180:82054): avc: denied { read write open } for pid=14916 comm="syz.2.4482" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 365.007984][ T36] audit: type=1400 audit(1750405136.180:82055): avc: denied { ioctl } for pid=14916 comm="syz.2.4482" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 365.089434][T14925] rust_binder: Write failure EFAULT in pid:773 [ 365.112852][ T36] audit: type=1400 audit(1750405136.180:82056): avc: granted { setsecparam } for pid=14916 comm="syz.2.4482" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 365.169254][ T36] audit: type=1400 audit(1750405136.200:82057): avc: denied { read } for pid=14920 comm="syz.7.4483" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 365.255243][ T36] audit: type=1400 audit(1750405136.200:82058): avc: denied { read open } for pid=14920 comm="syz.7.4483" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 365.318061][ T36] audit: type=1400 audit(1750405136.200:82059): avc: denied { ioctl } for pid=14920 comm="syz.7.4483" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 365.385097][ T36] audit: type=1400 audit(1750405136.230:82060): avc: denied { read } for pid=14920 comm="syz.7.4483" name="binder1" dev="binder" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 365.473733][ T36] audit: type=1400 audit(1750405136.230:82061): avc: denied { read open } for pid=14920 comm="syz.7.4483" path="/dev/binderfs/binder1" dev="binder" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 365.519465][T14938] audit: audit_backlog=65 > audit_backlog_limit=64 [ 365.528104][T14936] binder: Unknown parameter '' [ 365.540848][T14938] rust_binder: Write failure EINVAL in pid:674 [ 365.835078][T14948] binder: Unknown parameter 'cw' [ 365.883295][T14952] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 366.207465][T14964] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:499 [ 366.217365][T14960] random: crng reseeded on system resumption Stopping sshd: stopped /usr/sbin/sshd (pid 201) OK Stopping crond: stopped /usr/sbin/crond (pid 193) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 147) Stopping network: OK Stopping iptables: [ 366.378528][T14960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:499 [ 368.463306][T15118] can0: slcan on ptm0. FAIL [ 368.573958][T15117] can0 (unregistered): slcan off ptm0. Stopping system message bus: done [ 369.813415][ T36] kauditd_printk_skb: 654 callbacks suppressed [ 369.813440][ T36] audit: type=1400 audit(1750405141.200:82681): avc: denied { read } for pid=15222 comm="syz.7.4582" name="binder0" dev="binder" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 369.860032][ T36] audit: type=1400 audit(1750405141.200:82682): avc: denied { read } for pid=15226 comm="syz.2.4583" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 369.943088][ T36] audit: type=1400 audit(1750405141.200:82683): avc: denied { read } for pid=15226 comm="syz.2.4583" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 370.013082][ T36] audit: type=1400 audit(1750405141.200:82684): avc: denied { read } for pid=15226 comm="syz.2.4583" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 370.066157][ T36] audit: type=1400 audit(1750405141.240:82685): avc: denied { read write } for pid=12575 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 370.129961][ T36] audit: type=1400 audit(1750405141.240:82686): avc: denied { read } for pid=15222 comm="syz.7.4582" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 370.213085][ T36] audit: type=1400 audit(1750405141.240:82687): avc: denied { read write } for pid=11984 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 370.283083][ T36] audit: type=1400 audit(1750405141.270:82688): avc: denied { read } for pid=15222 comm="syz.7.4582" name="binder0" dev="binder" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 370.346650][ T36] audit: type=1400 audit(1750405141.290:82689): avc: denied { read write } for pid=11888 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 370.424624][ T36] audit: type=1400 audit(1750405141.310:82690): avc: denied { read append } for pid=15231 comm="syz.2.4584" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 370.849399][ T5817] bridge_slave_1: left allmulticast mode [ 370.855209][ T5817] bridge_slave_1: left promiscuous mode [ 370.860895][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.875384][ T5817] bridge_slave_0: left allmulticast mode [ 370.891208][ T5817] bridge_slave_0: left promiscuous mode [ 370.898360][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.134599][ T5817] veth1_macvtap: left promiscuous mode [ 371.140173][ T5817] veth0_vlan: left promiscuous mode Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 91) OK umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.0.124 closed by remote host. Sent SIGTERM to all processes [ 373.295836][ T5817] bridge_slave_1: left allmulticast mode [ 373.301490][ T5817] bridge_slave_1: left promiscuous mode [ 373.307136][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.314610][ T5817] bridge_slave_0: left allmulticast mode [ 373.320245][ T5817] bridge_slave_0: left promiscuous mode [ 373.325902][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.575375][ T5817] veth1_macvtap: left promiscuous mode [ 373.580898][ T5817] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 374.564311][ T5817] bridge_slave_1: left allmulticast mode [ 374.569981][ T5817] bridge_slave_1: left promiscuous mode [ 374.575645][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.583155][ T5817] bridge_slave_0: left allmulticast mode [ 374.588830][ T5817] bridge_slave_0: left promiscuous mode [ 374.594511][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.602290][ T5817] bridge_slave_1: left allmulticast mode [ 374.608013][ T5817] bridge_slave_1: left promiscuous mode [ 374.613665][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.621564][ T5817] bridge_slave_0: left allmulticast mode [ 374.627300][ T5817] bridge_slave_0: left promiscuous mode [ 374.632898][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.974428][ T5817] veth1_macvtap: left promiscuous mode [ 374.979950][ T5817] veth0_vlan: left promiscuous mode [ 374.987061][ T5817] veth1_macvtap: left promiscuous mode [ 374.992548][ T5817] veth0_vlan: left promiscuous mode [ 375.093969][T15333] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 375.101075][T15333] ACPI: PM: Preparing to enter system sleep state S5 [ 375.113124][T15333] kvm: exiting hardware virtualization [ 375.118639][T15333] reboot: Power down serialport: VM disconnected.