last executing test programs: 1m4.536052894s ago: executing program 3 (id=161): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xda6, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac17c55ab77d0fd2b7318207e91fd536b9fb7c994a9ad0769020b45bc05965f6dffb15fd462bb2e49632c788cfeb74472be3d9eaf3284719df7187a354b3915df2661363052a24baf8cc101728d302f75878515b436d1fbdb3fc5fc88e8745c56b1bd79dc2cc7e7b5be814275a3edfc67e923d199c97fd6a8b2d11d2923b688471fe8c1e771545d17bad44fc5f7a91cf43ba91b4627c9554a333b6e8ee1c457b54c30bccbbabdfed6158fed6e548cd54ad7409e0a03fb2f685f8987e98ee687a09a730c2a757d3b1595a1146d57230e178284ef3fed5553bbd1e82bd418a13c03f944421d013d96182302122d01c432e24c43a9dff19658a3680167297367a1ee7f70e0968ce28ca2bc8b8525c41f8d4f9cdcaaa25b2d0fea854626eba2e86ecb31e9be7b8e704287fe45ad3f169d7f67e798b0de3bf70f485f81ba5e9aef1ec5782c4c609ffdc93a3bdfeeb7e7cd05ea7023895be4a3f78f188fdbd83ded6dcdf1d429c12b1b250284110295e3515bfb117119839f13057ea2366d3c4b75b28f60afe17b195d04ff58dd2f3382bb57152f2928f9a91bbcc42057777ba13becb4552419caa2ffc325219a6995f5d1e9a193a1aede859834ef765009d6c242ad918ecf3fe62c8dfe2ff309cbce740950cdd05c8e0b7f75aa21731be678552b2d0024a4b3815fb52f056ba37f3f466afab6b5728def0fdef93655524121927df3a39af0845df7612e9ccdae25f406ac0ad7a0e4f980398597ab2c2291d87a1ed618b9e392f1d055d5290be67b6cec9e7505c41025d2aa6e82a4f693042989b5f4a9abfe0ec51fd9dcb972a054b80ee6a460fd422eaa971e2cb759c72e676e2877c667c6ce002be1ce6ba8380e6dd691590c84ba68d26f3284280dcacd082b42bf5aac71467b3fcd5d68ab1bc26cf48fe770ccff5f14ff8afafb18d3127a6d989b7d77665a7a9bf4cb488621c904acd0b073396ad8509c9ddb02eb1d23510a52289a5f0d7edba66d4ef271b9c6acc3bfa996b55f6808650236b0001132ef85fc5070b69144ff5fdd8d64f6c3e0dd22711f69a940ebdb4ab5ff6240da3160049d2047e6713d47ad0db40ec543c095ad67c8cbe438fb875927c98e265498b3da8d4ca54bac0e6efe759a2d4d4190e9fc8835599da8237f472411a71236bb930d28a26f49062d270f4087a6a709c005eebc9740ed54dd005c787c44badac9c720b0d424d0ded9bb8c24c0e842deedf386fc7714a31268292d3bcc53b1cf24b156445c8bf64336f742b1ba836eba0ae4a5aaa9a6f35d4f81734e16bce965795d5b1255609d1860fe11c9c536db078af94772830ba000c13e1d9383e3d862fa07f2199da148632c036bc19f6014eeb206a3654d390c78911deeabebf128def61122754e0a4696db82666a018f8d2f44b5aadc12809ade8bed1b1ba2adbb6e3e82180e26748dc30a8eda0edb21fcaa702632ed3fb4e89550c3e0e1fd2b5ecf1983d85bf9569b231e28155756bd97f1220cbc2b5b1c02dab88ee4a8970d4833b9e51529895afe5029823576297d4a917602fe08df57e1d7f63d050877ddf8e82a5383e15f313171b2d5618a1549f3dfced0732b887508ca5e134124d0ed0bd4b767115d1530f73504387e0364d73a2d3b114fcb49219b1c15e066c455b01672e49499995454a502236f5a5007895d3d1d8843007352a3ccc3f71d3e801efd0a6ef922bf39ead16e01ec20ebff2b1ce7cfd0984b26225cb1359b36efe9ad2ae1f6de4862c0faaa52f4d0eb4c13960ceb4aeaa10ae61a09a5abdb0c61661962a0aab14d465a8ae6f45826e1e66428cf8572eb53c98160df6613a62bb611c63f1ffb7a795a889fc16670f6302fd36ee4247bdd4282f1afb6042c832a4b0857cecae0a7090d9b11ae46d9186c710c8dd12911db573493329bea2c743734d86a577cf27aa01e4fc6c91f1fa34bba173d20b97ed8bb4bad43692df90bfd2b193b9e8b93a95ec0d0d42217395d89db511d2e9bbeb3ef47b7b2d81ab54b5c8faa760ef5c0493af13a9327c9432521ed6bfcb9d778d25031da41a983027fe7d794c26326053d38172444307d88501cdd26c3fdeafdf5f599d3dcfd39972f28ec3fb1fb40982615f5d71d6693a8774df072576834c69b89f209b458fad4671f0108fdfc8548a6fcf76a843369a3bca4d2974221ed9af224d151fa8aa73276ba65ca3d8bc98d6504f16bcac30c697f68cb1625b4f2259ee0c694951752845fa11c20fc4dda369d53918c3746918692ee2cda958612808b841b8d36ef3933f5340e1fc8fb10ac2ae97da921f6a67806831356d515c7a32468dfd3385c1ae2008448e5750c3a3d5733b4a2486788550e6353e9b12cc09750d5b9dcd2aedba61d0520e99a51e880d3dd78a2b502029deac1860cf50885f8bf5119491c6b1e06492e98ca64e5e32afbb3b0630cb35b58640afc2188a232f77968c18d2d0e8f91c974edcb3198b4520f530acacb12017216338cc479de3651e8f15f1672397c730e3ca2a189ca4cc85f35dd46aeb67b6a2eb7268a653b190d8ba670490d50f761c1fa25f1954d8fe6bcb15dbc23698c945262b991e6245b9a25b12b13c87bf8a8a06f51784007abd06e01a0c03ee80b236fabb5b22ce797c4d8a739ac96dcf16c93f454463d3631c4cdd2dea6732a486015dc9937ee4e6efbfff46bdd8887094ca4bd94d995f411421c7ef07f949fcc10132f58b7c99a871780d92464594c930b80596baab77b0d68a05d71ca8a1888f3128f12aebac362c4d80870ab3d9f2e77d51f9af16472faff98dda1e0133c8bc2510345d5eb1d64bce64761f4cc39ac6655902338bf1335dc55393995af4447ed1aa4c50bfacd576842560abca3e6c74dcea6dd03d36f9e7f8bda2cf33e3b7da195fba79f5a60421e19910f1fef31b9fa52064ce9ee8c415746a3cab47a8ad8477e9f21e9ee804a85dc568439b95c01bbbc3fa16a8c26bd81b01b8849795b2370f591e2a8e175cd465a600a541839bc734271b4b3afb2303dc1cf12bee00080ad10658c97672ad023e89f23d9301b5dbf1a7ba6d6c2b8dbd300f05f36a095f188b56fd3ba8e871aaf22e2128696e7232cb22f4f5404a3d1256a11665caaead326faad340031cafb99edbceba7bac44c7d2720aedba9cb708dae55b192a1e31835fae8756f062c151f6778b1d93c2d1f8b479ae9bbe1255abcef9beaa95b558fbbc9a979d46580aa85b10f160b438bea64f23b8e605ce34d2b46bbf8bfbfa683b10f55b3d30c58675dd1a524495e5d42c7d02dc60b853e8b3ed2caf41cd24a8a1d044e27d48b2184bac00730f7c20a1ba2bb6b6a5381a3d359d8e721504bbbce18ee49031b48c278a5730f31fb83f6cf32ac98326b722d3e2d7b38a7b80b94a3eb2b69fb1aefc8c0bbe431191f0ed76141a8365621e4f7118dd4465b4642bdb0af21d30c8cfb1d5201852c0428b1983d91f706e814c1395888b1c2a3516ea20a93d868e27c3c9b68a9cda4befc389b57661a4ff37137628ec96bcb625fd10324625ac1589c2918c66f811a323a19ab30bcf28fc20b64176e319d58f74578093e32ba9f51b255693dda9514ff43f6ef6010143554305073e94be322daa024cb7efcf405ea4924bfa72633b766365fee1d59d1a94717450657ff3b72853785e91f94ca1502b129eafa718633bec1557fb1e0ae2887e6e8c0fdd9f3f99de03c0af7364781766520d90c15b0e2a4c43613089dbecc4dd68be74204809f0270370097642d54388ccbb54b58be8b5796eac48ef5f17752eaa7301f075faee593aae71ee0e0ca1f45a22e7cede3597f14a344796ceec33e98b3b89e031c0d757e83d5093322d9afc9898f80b2e9bb17bc8b2b164d048c1b912f6cd92979df629efcb94968cca6e65b9b078677698fa4937a2ec23edd00971a5505ecc65fe150d3d00a34e52cc64951937fc79014b0df8d2c9c35f06209f45556278fa7ecfc70a92eca165bbd493686fb4c0cd607cec994657149a61da2e09414944c557be54908197724174247194d435b25bf78ec4cc164a574662eb4d1e4d784a6ea0c71dd1a16e53a7b8a27fcec679346afe90a05e06b276fe972d5e1d3486e0452d0a9a1636ab9c517f371a0592ef34513a9a4e961cd79c86891f460becb57f41e22b2a72ae175e29344184cde0b2beae00f90a6a79dc689da4b4b1da0e9758854d404a9cbcf725c68b6f2de865b2b5e12124d09f8745208b5cc544522f7c8bcfceb907422502f1641b600a60a5aef28be5a92ff71755efaf29e23c8ca52ad945bbdc4d6e7502adee312ea8d9338a80671f36309026c0d9c2ceb14da0b8beb087853b8014d30372f0d58448530f1bed15c4caaf8a844853030aab1ba6de9891678a16a2d9b9889d4a367753f0aacda03ce6fae1f62b34a3317a704527e65b18dc3186f32c5caa2d82f058066274e145f3cfe0bb5d40a77f54fb0de584d5f50de29d1c3aa29acea2363ef5c1e0592ef94370936df0152871396c13a89e56086f381862edb6f4bec0d937e94a689a8c5c87a51e073fdaa935591bbccff359e0805ded9ac71e3b295fdd05bc2b03d7af58a393778c9dfdfd8101b3503c86a6d9e2fdeb215be40f90bb7360a04e111d743207a8742275ee7df2508b909ea4d3a7af7886d3f26aa58943edbbcbd686bf9cf9a78b43dd9792bca97cda6508340"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000030001c0"]) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d07, 0x0, 0x5}]}) read(0xffffffffffffffff, &(0x7f0000000080)=""/1, 0x1) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000300)={{0xc01, 0x40}, {0x4, 0x8}, 0x7, 0x1}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x4eee80, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@release], 0xca, 0x0, &(0x7f00000003c0)="4dd04e3647693f2378aa1da0298339d2f7b8e1a6fc25e9bf00e0a1ab5c98067b13b9a95f1bcd6755bc5698fb955f6d3fcd32a7889f4cde01385482fd62470ba3b8583131431ab912e65e004b10af4b1ced71835295516550f79328d746edc6b61faf403ffb1668650b674f13f0d1848eb20bde3fec37fdef5b908da7751c950b5ca20563868264704a55b6416a791c3cdc8d3cba7f2131962a871494363dda665c2070284a7fc3a26c347db9149ef8dd70da46d3c37e0699cf76685ccccdf3af9c463d00c6977e205d23"}) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100"/24]) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$KVM_CAP_X86_GUEST_MODE(r2, 0x4068aea3, &(0x7f0000001340)) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x410000, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_debug_messages', 0x1a1081, 0x18) write$khugepaged_scan(r11, &(0x7f0000000000), 0x8) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x4) 1m4.355121756s ago: executing program 3 (id=165): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x3, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xe, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, 0xfffffffe, 0x0, 0xffffffff, 0x2, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffeffffe, 0x0, 0x5], [0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x5b2bb47c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000240)={{0x5, 0x0, 0x3, 0x6}, 'syz0\x00', 0x3a}) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000003340), 0x40040, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100da7b7c132900feffffff00040000000001"]) close(0x3) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) 1m4.11972145s ago: executing program 3 (id=170): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read(r1, &(0x7f0000000280)=""/4096, 0x1000) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000000000005) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 1m4.11899283s ago: executing program 3 (id=172): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000003c0)={0x2, 0x0, 0x98, &(0x7f0000000300)={0x7f, 0x5, 0x4}}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xd, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x3}, @decrefs, @register_looper, @register_looper], 0x0, 0x0, &(0x7f00000002c0)}) 1m4.060064601s ago: executing program 3 (id=174): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000000)={0x4, 0x3, 0xffff, 0x10001, 0x9, "04000000cf13ef3024c7160000000000000093", 0xda4, 0x8}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x13) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x8) ioctl$KVM_SET_MSRS(r6, 0x5000aea5, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, &(0x7f00000001c0)=0x401) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000010100c0"]) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/wake_unlock', 0x153082, 0x1c) read$FUSE(r9, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000140)={0x2, 0x105000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x10a, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) 1m3.918589644s ago: executing program 3 (id=178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e210c371303ed6a33f2ff8689b3f20e"]) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x4205c0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000003c0)={"8f38e150d70ba0bd6040d6e22146f722", 0x0, 0x0, {0x80, 0x7f}, {0x2, 0x6}, 0x7, [0x3ff, 0xc, 0x3, 0x4, 0x0, 0x23ba, 0x101, 0x2, 0x152, 0x0, 0xffffffffffffff7f, 0x4, 0x100000000, 0x1, 0x0, 0xffffffffffffff32]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000cc0)={"daba72c628f077e062b6d049e9b0e946", 0x0, 0x0, {0x7, 0x8}, {0x3, 0x10001}, 0x0, [0x1, 0x242c1f96, 0x3, 0x0, 0x1, 0x2, 0x6, 0x9, 0x401, 0x4, 0x0, 0x9, 0x2, 0x40, 0x80000001, 0xa4]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000dc0)={"a8478b15bbd238325146fea3f18f8848", r2, r3, {0x6, 0x6}, {0xac, 0x4302}, 0x1, [0x7, 0xffffffffffff8001, 0x5, 0x1, 0x5, 0x1c4, 0x7, 0x3ff, 0x80000001, 0xffffffff80000000, 0x638000000000000, 0x98000000000000, 0x2b7, 0x1db2, 0x6, 0x3ff]}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000ec0)={0x4, 0x6, 0x4, 0x6c, 0x3, 0x0, [{0xfff, 0x5, 0x3, '\x00', 0x800}, {0x3a8b, 0x7fff0000000, 0x7, '\x00', 0x40a}, {0xc906cc8, 0x100, 0x9d73, '\x00', 0x4}]}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x720, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac17c55ab77d0fd2b7318207e91fd536b9fb7c994a9ad0769020b45bc05965f6dffb15fd462bb2e49632c788cfeb74472be3d9eaf3284719df7187a354b3915df2661363052a24baf8cc101728d302f75878515b436d1fbdb3fc5fc88e8745c56b1bd79dc2cc7e7b5be814275a3edfc67e923d199c97fd6a8b2d11d2923b688471fe8c1e771545d17bad44fc5f7a91cf43ba91b4627c9554a333b6e8ee1c457b54c30bccbbabdfed6158fed6e548cd54ad7409e0a03fb2f685f8987e98ee687a09a730c2a757d3b1595a1146d57230e178284ef3fed5553bbd1e82bd418a13c03f944421d013d96182302122d01c432e24c43a9dff19658a3680167297367a1ee7f70e0968ce28ca2bc8b8525c41f8d4f9cdcaaa25b2d0fea854626eba2e86ecb31e9be7b8e704287fe45ad3f169d7f67e798b0de3bf70f485f81ba5e9aef1ec5782c4c609ffdc93a3bdfeeb7e7cd05ea7023895be4a3f78f188fdbd83ded6dcdf1d429c12b1b250284110295e3515bfb117119839f13057ea2366d3c4b75b28f60afe17b195d04ff58dd2f3382bb57152f2928f9a91bbcc42057777ba13becb4552419caa2ffc325219a6995f5d1e9a193a1aede859834ef765009d6c242ad918ecf3fe62c8dfe2ff309cbce740950cdd05c8e0b7f75aa21731be678552b2d0024a4b3815fb52f056ba37f3f466afab6b5728def0fdef93655524121927df3a39af0845df7612e9ccdae25f406ac0ad7a0e4f980398597ab2c2291d87a1ed618b9e392f1d055d5290be67b6cec9e7505c41025d2aa6e82a4f693042989b5f4a9abfe0ec51fd9dcb972a054b80ee6a460fd422eaa971e2cb759c72e676e2877c667c6ce002be1ce6ba8380e6dd691590c84ba68d26f3284280dcacd082b42bf5aac71467b3fcd5d68ab1bc26cf48fe770ccff5f14ff8afafb18d3127a6d989b7d77665a7a9bf4cb488621c904acd0b073396ad8509c9ddb02eb1d23510a52289a5f0d7edba66d4ef271b9c6acc3bfa996b55f6808650236b0001132ef85fc5070b69144ff5fdd8d64f6c3e0dd22711f69a940ebdb4ab5ff6240da3160049d2047e6713d47ad0db40ec543c095ad67c8cbe438fb875927c98e265498b3da8d4ca54bac0e6efe759a2d4d4190e9fc8835599da8237f472411a71236bb930d28a26f49062d270f4087a6a709c005eebc9740ed54dd005c787c44badac9c720b0d424d0ded9bb8c24c0e842deedf386fc7714a31268292d3bcc53b1cf24b156445c8bf64336f742b1ba836eba0ae4a5aaa9a6f35d4f81734e16bce965795d5b1255609d1860fe11c9c536db078af94772830ba000c13e1d9383e3d862fa07f2199da148632c036bc19f6014eeb206a3654d390c78911deeabebf128def61122754e0a4696db82666a018f8d2f44b5aadc12809ade8bed1b1ba2adbb6e3e82180e26748dc30a8eda0edb21fcaa702632ed3fb4e89550c3e0e1fd2b5ecf1983d85bf9569b231e28155756bd97f1220cbc2b5b1c02dab88ee4a8970d4833b9e51529895afe5029823576297d4a917602fe08df57e1d7f63d050877ddf8e82a5383e15f313171b2d5618a1549f3dfced0732b887508ca5e134124d0ed0bd4b767115d1530f73504387e0364d73a2d3b114fcb49219b1c15e066c455b01672e49499995454a502236f5a5007895d3d1d8843007352a3ccc3f71d3e801efd0a6ef922bf39ead16e01ec20ebff2b1ce7cfd0984b26225cb1359b36efe9ad2ae1f6de4862c0faaa52f4d0eb4c13960ceb4aeaa10ae61a09a5abdb0c61661962a0aab14d465a8ae6f45826e1e66428cf8572eb53c98160df6613a62bb611c63f1ffb7a795a889fc16670f6302fd36ee4247bdd4282f1afb6042c832a4b0857cecae0a7090d9b11ae46d9186c710c8dd12911db573493329bea2c743734d86a577cf27aa01e4fc6c91f1fa34bba173d20b97ed8bb4bad43692df90bfd2b193b9e8b93a95ec0d0d42217395d89db511d2e9bbeb3ef47b7b2d81ab54b5c8faa760ef5c0493af13a9327c9432521ed6bfcb9d778d25031da41a983027fe7d794c26326053d38172444307d88501cdd26c3fdeafdf5f599d3dcfd39972f28ec3fb1fb40982615f5d71d6693a8774df072576834c69b89f209b458fad4671f0108fdfc8548a6fcf76a843369a3bca4d2974221ed9af224d151fa8aa73276ba65ca3d8bc98d6504f16bcac30c697f68cb1625b4f2259ee0c694951752845fa11c20fc4dda369d53918c3746918692ee2cda958612808b841b8d36ef3933f5340e1fc8fb10ac2ae97da921f6a67806831356d515c7a32468dfd3385c"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000240)={0xfff, 0x2e1, &(0x7f0000000300)="e8d55aebea0a33fa0774ff47802641f95b37c69b60c2df0fbd451f036f7ebcf97bbe856254a490859b119f779a92c7ccf16352c2455466a489fdc4b27b7db0a41db5ecd2ef77b20a7f9b1042bc8219a964f6001c4da20bc1bfd2bcd38c34312a56", 0x0, 0x61}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 48.734916478s ago: executing program 32 (id=178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e210c371303ed6a33f2ff8689b3f20e"]) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x4205c0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000003c0)={"8f38e150d70ba0bd6040d6e22146f722", 0x0, 0x0, {0x80, 0x7f}, {0x2, 0x6}, 0x7, [0x3ff, 0xc, 0x3, 0x4, 0x0, 0x23ba, 0x101, 0x2, 0x152, 0x0, 0xffffffffffffff7f, 0x4, 0x100000000, 0x1, 0x0, 0xffffffffffffff32]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000cc0)={"daba72c628f077e062b6d049e9b0e946", 0x0, 0x0, {0x7, 0x8}, {0x3, 0x10001}, 0x0, [0x1, 0x242c1f96, 0x3, 0x0, 0x1, 0x2, 0x6, 0x9, 0x401, 0x4, 0x0, 0x9, 0x2, 0x40, 0x80000001, 0xa4]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000dc0)={"a8478b15bbd238325146fea3f18f8848", r2, r3, {0x6, 0x6}, {0xac, 0x4302}, 0x1, [0x7, 0xffffffffffff8001, 0x5, 0x1, 0x5, 0x1c4, 0x7, 0x3ff, 0x80000001, 0xffffffff80000000, 0x638000000000000, 0x98000000000000, 0x2b7, 0x1db2, 0x6, 0x3ff]}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000ec0)={0x4, 0x6, 0x4, 0x6c, 0x3, 0x0, [{0xfff, 0x5, 0x3, '\x00', 0x800}, {0x3a8b, 0x7fff0000000, 0x7, '\x00', 0x40a}, {0xc906cc8, 0x100, 0x9d73, '\x00', 0x4}]}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x720, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000240)={0xfff, 0x2e1, &(0x7f0000000300)="e8d55aebea0a33fa0774ff47802641f95b37c69b60c2df0fbd451f036f7ebcf97bbe856254a490859b119f779a92c7ccf16352c2455466a489fdc4b27b7db0a41db5ecd2ef77b20a7f9b1042bc8219a964f6001c4da20bc1bfd2bcd38c34312a56", 0x0, 0x61}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 21.919944071s ago: executing program 4 (id=1524): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009800004000000000790096aff9f039384c7240bdddb4bec6462949219541afdc1f0000100000000018"]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000001300)=""/92, 0x80a0000}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x6, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_clone(0x802400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r1, 0x293f000) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) 21.881558162s ago: executing program 4 (id=1527): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x1b8d3, &(0x7f0000000180)={[{@max={'max', 0x3d, 0x6}}, {@stats}, {@stats}], [{@flag='mand'}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@subj_user}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@obj_type}]}) 21.791132763s ago: executing program 4 (id=1530): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) (async) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async, rerun: 64) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0xa0400, 0x0) (rerun: 64) read$ptp(r4, &(0x7f0000000180)=""/253, 0xfd) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10200, 0x4, 0x2000, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1001, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0x59, 0x2, 0x2}, @fd, @fda={0x66646185, 0x2, 0x1, 0x3f}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 21.755674364s ago: executing program 4 (id=1533): close(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xcd, 0x0, 0xfffffffffffffffe}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004800)={0x2020}, 0x2020) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000002c0)={0x0, 0x7, [@remote, @link_local, @broadcast, @remote, @link_local, @random="db6576d74337", @random="bb8021e9da14"]}) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=[@increfs], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x9, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xaf6f, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x2080, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@exit_looper, @release], 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305839, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x4}) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r8, 0xfffff000) 20.882829628s ago: executing program 4 (id=1565): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r1, &(0x7f0000000080)=""/93, 0xffffff6c) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000600)={'syz1\x00', {}, 0x0, [], [0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) read(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000cc0)={{0x3, 0x3, 0x1, 0x1, 0x9}}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$PPPIOCGIDLE64(r4, 0x8010743f, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) 20.74421932s ago: executing program 4 (id=1566): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x44cf0489f8ef9726, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 10.588130626s ago: executing program 0 (id=1590): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) mount$binderfs(&(0x7f00000021c0), &(0x7f0000002200)='./binderfs\x00', &(0x7f0000002240), 0x10, 0x0) 10.587639097s ago: executing program 1 (id=1591): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000c80)={"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"}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000000240)={0x400, 0x7, 0x3}}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x5, 0x2, 0xc, 0x3}]}) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000002000)=ANY=[@ANYBLOB='\t'], 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x80000000001) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r5}], 0xfffffffffffffeec, 0x0, &(0x7f0000000140)="f3"}) close(r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000080)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x2000009, 0x3a, '\\', 0x3a, 'resv_level', 0x3a, './file0'}, 0x32) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000400)={0x1c, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}, @enter_looper, @release, @acquire], 0x1000, 0x0, &(0x7f0000002040)="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"}) 10.587364237s ago: executing program 2 (id=1592): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x10010, 0xffffffffffffffff, 0x3bc5d000) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x181000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r3]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x80a0000, 0x10000, 0xf, 0x74, 0x75, 0xca, 0x4, 0x5, 0x1, 0x3, 0x9, 0x3}, {0x80a0000, 0xeeee0000, 0xa, 0x8, 0x0, 0x5, 0x4, 0x6, 0x9, 0xb7, 0xff, 0x8}, {0x2, 0x4, 0xa, 0x0, 0x7f, 0x8, 0x9, 0x9, 0x7, 0xa, 0x5}, {0x3000, 0xdddd2000, 0x4, 0xa6, 0x34, 0x5, 0x1, 0x8, 0x4, 0xa, 0x12, 0x9}, {0xf000, 0xdddd0000, 0x0, 0x7, 0x6, 0xd1, 0x7, 0x5, 0x3, 0x85, 0xa8, 0x8}, {0x2000, 0x2, 0xd, 0xfe, 0x9, 0x9, 0x7, 0x5, 0x0, 0x7f, 0x81, 0x2}, {0xdddd1000, 0x8000000, 0xf, 0x81, 0xfd, 0x2, 0x3, 0x7, 0x4, 0x4, 0x7, 0x8}, {0x1, 0xeeee0000, 0x0, 0x4, 0xff, 0x3, 0xc0, 0x5, 0xa, 0x7f, 0x1, 0x3a}, {0xf000}, {0x13002, 0x1}, 0xc0050010, 0x0, 0xf000, 0x20011, 0x6, 0x400, 0x2000, [0x41ab, 0x9, 0x8, 0x101]}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r3]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0xb55cbc099b415d1, 0x34, &(0x7f00000003c0)=""/52}]}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af04, &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f00000002c0)=[@free_buffer={0x40086315}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x810, r0, 0x42bc5000) 9.108229519s ago: executing program 0 (id=1593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) write$cgroup_int(r0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00\x00\x00\x00\x02') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00\x02\x00\x00\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x5) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x2ae9, 0x0, 0x2, 0x0, 0x1, 0x0, 0x9, 0x9, 0x6, 0x7, 0xffffffffffffffff, 0x5, 0x41, 0x90, 0xfffffffffffffffb, 0x5], 0xf000, 0x400}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000ac0)={0x2020}, 0x2020) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="cf00000000555c0000000000000000a79200000000080000ccf7ae7d55"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x3e, 0xfeb, 0x8cc, 0x5, 0xe, "3d980d311bf76259765fafda57afca538770fd"}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r10, 0x542f, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8804"]) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x7f) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x6, 0x2, 0x11}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 9.105352809s ago: executing program 1 (id=1594): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@handle={0x73682a85, 0x1b00, 0x1}, @fd, @fd}, &(0x7f0000000780)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x9, r0, 'id1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) mkdirat$cgroup(r1, &(0x7f00000001c0)='syz1\x00', 0x1ff) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={[{0x84, 0x5, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}]}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x3, 0x800000, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x6, 0x2, 0x5, 0x6, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x341840}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 9.088857909s ago: executing program 2 (id=1595): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r1, &(0x7f00000004c0)=""/92, 0x1001) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @fda={0x66646185, 0x3, 0x1, 0x3d}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/31, 0x1f, 0x1, 0x3a}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x10}], 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)="da735273f673fb86786a15b7068ad06ecb3ae077", 0x14, r1}, 0x68) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x4, 0x2, 0x5000, 0x1000, &(0x7f0000588000/0x1000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000580)={0x0, 0x0, @ioapic={0xdddd1000, 0x1, 0x548, 0xfffffffa, 0x0, [{0x1, 0x2, 0x6, '\x00', 0xc6}, {0x9, 0x2, 0x66}, {0x7f, 0x4, 0x2, '\x00', 0xf8}, {0x12, 0xf, 0xa6, '\x00', 0x8}, {0x3, 0x10, 0xff, '\x00', 0x3f}, {0x3, 0x6, 0xa, '\x00', 0xfa}, {0x8, 0x9, 0x6, '\x00', 0x3}, {0x4, 0x0, 0x8, '\x00', 0xfc}, {0x3, 0xae, 0x6, '\x00', 0x6}, {0x2, 0x7f, 0x5, '\x00', 0xc}, {0xbd, 0x6b, 0x91, '\x00', 0xf}, {0x0, 0x6, 0x80, '\x00', 0x8}, {0x4, 0x4, 0x2}, {0x0, 0x4, 0x34, '\x00', 0x7}, {0x7, 0xfd, 0x0, '\x00', 0x2}, {0x3, 0x3, 0x8, '\x00', 0x3}, {0x7, 0x3, 0x38, '\x00', 0x4}, {0xe4, 0x3, 0x30, '\x00', 0x8}, {0x2, 0x5, 0x0, '\x00', 0x2}, {0xc, 0xd, 0x7, '\x00', 0x9}, {0x6, 0x80, 0xf7, '\x00', 0x6}, {0x8, 0x7, 0x24, '\x00', 0x5}, {0x9, 0x5, 0x4, '\x00', 0x80}, {0x1, 0x6, 0x3, '\x00', 0x9}]}}) 7.436104935s ago: executing program 0 (id=1596): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x60) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x60) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB='context']) 7.435715775s ago: executing program 1 (id=1597): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x0, 0x0, 0x4, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000600)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xf495, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) read(r3, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) 7.435258665s ago: executing program 2 (id=1598): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x34}]}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000014c0)={"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"}) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) read(r4, &(0x7f0000000100)=""/148, 0x94) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000001440)={{'\x00', 0x1}, {0xb8}, 0x5, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000001300)="2bac9eca69e396cd28d5dfbe250b44f76b9b3e4c906978443fcb8b0c58904ed28dba28bbd42ac7e2d553ffee43455985822696abc370e7d16d362ae6a26836d7f0c8c9dcc87d9b0df2fa5b8814c2bb374575c37e22f346", 0x57, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="020000007c000000000000000c010000008a6e000000374a1ffc79256e8d1df5ceb180f43c274bedef9bed4a65f2280d9825bb4c4bb0e861268112b202669e23d84bb6bbe857b8411fe1b327d18c3a03176b5a7642dbd880a44131604e23eb93ac068d492cf173f20cb6f70bc9550c8b0a32d5b47207f253313811f53bae304d2e1c94e81e0000009859632281e8bb05775ae684f80ab010764db628c942c86167dd5c7e601e"], 0xa6}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000000)={&(0x7f0000000300)=""/4096, 0x1000}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x34}]}) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000014c0)={"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"}) (async) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) (async) read(r4, &(0x7f0000000100)=""/148, 0x94) (async) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) (async) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000001440)={{'\x00', 0x1}, {0xb8}, 0x5, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000001300)="2bac9eca69e396cd28d5dfbe250b44f76b9b3e4c906978443fcb8b0c58904ed28dba28bbd42ac7e2d553ffee43455985822696abc370e7d16d362ae6a26836d7f0c8c9dcc87d9b0df2fa5b8814c2bb374575c37e22f346", 0x57, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="020000007c000000000000000c010000008a6e000000374a1ffc79256e8d1df5ceb180f43c274bedef9bed4a65f2280d9825bb4c4bb0e861268112b202669e23d84bb6bbe857b8411fe1b327d18c3a03176b5a7642dbd880a44131604e23eb93ac068d492cf173f20cb6f70bc9550c8b0a32d5b47207f253313811f53bae304d2e1c94e81e0000009859632281e8bb05775ae684f80ab010764db628c942c86167dd5c7e601e"], 0xa6}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000000)={&(0x7f0000000300)=""/4096, 0x1000}) (async) 3.952032779s ago: executing program 0 (id=1599): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r1, &(0x7f0000000080)=""/93, 0xffffff6c) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000cc0)={{0x3, 0x3, 0x1, 0x1, 0x9}}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000400)={0x98, 0x0, &(0x7f0000000300)=[@increfs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r5}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fd, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/163, 0xa3, 0x2, 0x3a}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x400}], 0x4, 0x0, 0x0}) ioctl$PPPIOCGIDLE64(r4, 0x8010743f, &(0x7f0000000100)) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000000000004000040"]) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) 3.950582209s ago: executing program 1 (id=1600): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x4b301, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xffffffff, 0x3, 0xac, 0x8, 0x2, "e7732e9431a9e74e0fe4f9ca3fb352e74f4d01"}) write(r0, &(0x7f0000000300)="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", 0xc00) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000800)=ANY=[@ANYBLOB='1-'], 0x31) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x99) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/pids.max\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/pids.max\x00', 0x80, 0x1) unlinkat(r5, &(0x7f00000001c0)='./cgroup/pids.max\x00', 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/108, 0x6c) 3.949717809s ago: executing program 2 (id=1601): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffffffffffb) 2.029646238s ago: executing program 0 (id=1602): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x3f343000) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x4, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x5, 0x3, 0xffff1000, 0x1000, &(0x7f0000000000/0x1000)=nil}) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000001180)={{0x0, 0x0, 0x80}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x298}]}) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES64, @ANYRES64=r4, @ANYBLOB="7232d186b95d0ba7cb675e4a1075951f5517b87410c8910bcd076f2ef7d6d73f777a49ecd15bc90ef49ea1e2e1dc2a902f1edffbd1311b18a53f8fbbd2aaf80b301750a3a496648376645e0b13ac9bd68763eef074fbc736f2885d49419881fa944af104fa766f39cc128b41d8eb02065d799edfbcae46a2a14d12247b58d3f48b10c52c5adb4b95359d05bcb55887e235685b18dec927de0a9fa9666e5e3a33d476bb6143c0142aeab61e0830fa0a445b22fd801311d88ed5eeda981de595ee15c88ff10226e2acb2303fac", @ANYRES16=0x0, @ANYRESOCT, @ANYRESDEC=r9, @ANYRES8=r7], 0x27) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) 2.027571108s ago: executing program 1 (id=1603): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0x7, 0x2, 0x9, 0x9, "ea7174ddb80fc7000002f7ffffffffd2a2d975", 0x2, 0x4}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x2) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x580, 0x0, 0xfffffffffffffffd}]}) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r7, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x511400, 0x0) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f00000004c0)={0x2, 0x66f04ba4}) unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92, 0x80a0000}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x6, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 2.026530588s ago: executing program 2 (id=1604): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000c80)={"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"}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000340)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000000240)={0x400, 0x7, 0x3}}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x5, 0x2, 0xc, 0x3}]}) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000002000)=ANY=[@ANYBLOB='\t'], 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x80000000001) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r5}], 0xfffffffffffffeec, 0x0, &(0x7f0000000140)="f3"}) close(r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000080)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x2000009, 0x3a, '\\', 0x3a, 'resv_level', 0x3a, './file0'}, 0x32) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000400)={0x1c, 0x0, &(0x7f0000000380)=[@release={0x40046306, 0x1}, @enter_looper, @release, @acquire], 0x1000, 0x0, &(0x7f0000002040)="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"}) 909.99µs ago: executing program 0 (id=1605): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffffffd) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) mmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x2000008, 0x10, 0xffffffffffffffff, 0x4f64e000) r1 = syz_clone(0x40008000, &(0x7f0000002740), 0x0, 0x0, &(0x7f0000002840), 0x0) syz_clone3(&(0x7f00000029c0)={0x0, 0x0, 0x0, &(0x7f00000016c0), {0x4}, &(0x7f0000001700)=""/58, 0x3a, &(0x7f0000001740)=""/4096, &(0x7f0000002980)=[r1, 0x0], 0x2}, 0x58) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0}) 379.77µs ago: executing program 1 (id=1606): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x14b040, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101140, 0x0) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) (async, rerun: 32) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0xf8064d4b0bf50150, 0x0) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x5, 0x2, 0x2000, &(0x7f0000ed7000/0x2000)=nil}) (async) write(r2, &(0x7f0000000100)="334001cbf4089a0c621e8206ebeba8778cd72086aa2148d6bd751d44d80ebcc7", 0x20) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000200)=0x1) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) (async) ioctl$TUNSETPERSIST(r5, 0x400454c9, 0x1) (async, rerun: 64) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) (async, rerun: 64) ioctl$TUNGETVNETLE(r5, 0x400454cb, &(0x7f0000000980)) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) (async) close(0x3) (async) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x949902, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f00000000c0)={{0x1, 0xac}, {0xfffffffffffffffc}, 0x1, 0x6}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r7, 0x4068aea3, &(0x7f0000000080)={0xa8, 0x300}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 2 (id=1607): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000086"]) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xa70, 0x0, 0x3}]}) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xa70, 0x0, 0x3}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.55' (ED25519) to the list of known hosts. [ 18.724393][ T36] audit: type=1400 audit(1750398529.470:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.725450][ T282] cgroup: Unknown subsys name 'net' [ 18.727407][ T36] audit: type=1400 audit(1750398529.470:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.731017][ T36] audit: type=1400 audit(1750398529.470:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.731148][ T282] cgroup: Unknown subsys name 'devices' [ 18.811313][ T282] cgroup: Unknown subsys name 'hugetlb' [ 18.816934][ T282] cgroup: Unknown subsys name 'rlimit' [ 18.968343][ T36] audit: type=1400 audit(1750398529.710:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.991625][ T36] audit: type=1400 audit(1750398529.710:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 18.995756][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.016350][ T36] audit: type=1400 audit(1750398529.710:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 19.048008][ T36] audit: type=1400 audit(1750398529.780:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.073436][ T36] audit: type=1400 audit(1750398529.780:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.075477][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.099036][ T36] audit: type=1400 audit(1750398529.830:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.133444][ T36] audit: type=1400 audit(1750398529.830:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.897604][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.904685][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.911881][ T292] bridge_slave_0: entered allmulticast mode [ 19.918037][ T292] bridge_slave_0: entered promiscuous mode [ 19.929286][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.936343][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.943401][ T292] bridge_slave_1: entered allmulticast mode [ 19.949578][ T292] bridge_slave_1: entered promiscuous mode [ 19.974626][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.981683][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.988762][ T291] bridge_slave_0: entered allmulticast mode [ 19.994940][ T291] bridge_slave_0: entered promiscuous mode [ 20.004891][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.012004][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.019089][ T289] bridge_slave_0: entered allmulticast mode [ 20.025199][ T289] bridge_slave_0: entered promiscuous mode [ 20.034349][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.041420][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.048533][ T291] bridge_slave_1: entered allmulticast mode [ 20.054793][ T291] bridge_slave_1: entered promiscuous mode [ 20.063694][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.070751][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.077821][ T289] bridge_slave_1: entered allmulticast mode [ 20.083964][ T289] bridge_slave_1: entered promiscuous mode [ 20.130319][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.137357][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.144444][ T290] bridge_slave_0: entered allmulticast mode [ 20.150632][ T290] bridge_slave_0: entered promiscuous mode [ 20.164108][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.171198][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.178235][ T290] bridge_slave_1: entered allmulticast mode [ 20.184562][ T290] bridge_slave_1: entered promiscuous mode [ 20.291624][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.298662][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.305920][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.312933][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.325878][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.332922][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.340179][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.347187][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.358319][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.365364][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.372621][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.379644][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.406377][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.413434][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.420704][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.427713][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.452225][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.459741][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.467061][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.474390][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.481915][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.489228][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.496416][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.503643][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.530831][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.537857][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.545466][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.552499][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.567798][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.574837][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.583077][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.590102][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.597907][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.604939][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.612741][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.619776][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.627195][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.634224][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.652528][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.659578][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.696060][ T291] veth0_vlan: entered promiscuous mode [ 20.706321][ T290] veth0_vlan: entered promiscuous mode [ 20.723786][ T292] veth0_vlan: entered promiscuous mode [ 20.731824][ T291] veth1_macvtap: entered promiscuous mode [ 20.738449][ T289] veth0_vlan: entered promiscuous mode [ 20.753211][ T290] veth1_macvtap: entered promiscuous mode [ 20.769689][ T289] veth1_macvtap: entered promiscuous mode [ 20.776906][ T292] veth1_macvtap: entered promiscuous mode [ 20.813430][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 20.886365][ T317] binder: Unknown parameter 'processor : 0 [ 20.886365][ T317] vendor_id : GenuineIntel [ 20.886365][ T317] cpu family : 6 [ 20.886365][ T317] model : 79 [ 20.886365][ T317] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 20.886365][ T317] stepping : 0 [ 20.886365][ T317] microcode : 0xffffffff [ 20.886365][ T317] cpu MHz : 2200.198 [ 20.886365][ T317] cache size : 56320 KB [ 20.886365][ T317] physical id : 0 [ 20.886365][ T317] siblings : 2 [ 20.886365][ T317] core id : 0 [ 20.886365][ T317] cpu cores : 1 [ 20.886365][ T317] apicid : 0 [ 20.886365][ T317] initial apicid : 0 [ 20.886365][ T317] fpu : yes [ 20.886365][ T317] fpu_exception : yes [ 20.886365][ T317] cpuid level : 13 [ 20.886365][ T317] wp : yes [ 20.886365][ T317] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 20.886365][ T317] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 20.890686][ T318] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 21.080744][ T318] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 21.089764][ T337] rust_binder: Write failure EINVAL in pid:9 [ 21.091610][ T318] rust_binder: Write failure EINVAL in pid:2 [ 21.103708][ T330] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 21.109829][ T330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:11 [ 21.119444][ T330] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 21.129126][ T330] rust_binder: Read failure Err(EFAULT) in pid:11 [ 21.129644][ T338] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 21.150842][ T338] rust_binder: Write failure EINVAL in pid:7 [ 21.253897][ T340] SELinux: security_context_str_to_sid () failed with errno=-22 [ 21.690657][ T362] ======================================================= [ 21.690657][ T362] WARNING: The mand mount option has been deprecated and [ 21.690657][ T362] and is ignored by this kernel. Remove the mand [ 21.690657][ T362] option from the mount to silence this warning. [ 21.690657][ T362] ======================================================= [ 21.898530][ T375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 21.899475][ T375] rust_binder: Error while translating object. [ 21.906053][ T375] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 21.913942][ T375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:23 [ 21.944635][ T379] random: crng reseeded on system resumption [ 21.966795][ T381] rust_binder: got new transaction with bad transaction stack [ 21.966815][ T381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10 [ 21.992650][ T386] binder: Unknown parameter 'noninderfs/binder0' [ 22.017694][ T388] binder: Bad value for 'max' [ 22.100925][ T399] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 22.175384][ T402] binder: Bad value for 'defcontext' [ 22.393171][ T423] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 22.393207][ T423] rust_binder: Error in use_page_slow: EBUSY [ 22.403767][ T423] rust_binder: use_range failure EBUSY [ 22.409809][ T423] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 22.415627][ T423] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 22.423360][ T423] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 22.433059][ T423] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:26 [ 22.444891][ T432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26 [ 22.502398][ T438] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 22.511633][ T438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:31 [ 22.521251][ T438] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 22.535557][ T438] rust_binder: Read failure Err(EFAULT) in pid:31 [ 22.759249][ T464] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 22.766817][ T464] rust_binder: Write failure EINVAL in pid:39 [ 22.898080][ T486] rust_binder: Error while translating object. [ 22.904705][ T486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 22.911059][ T486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:57 [ 23.012230][ T492] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.021402][ T498] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.148945][ T496] rust_binder: Write failure EINVAL in pid:40 [ 23.155636][ T496] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 23.161821][ T496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:40 [ 23.180264][ T503] rust_binder: Error while translating object. [ 23.189377][ T503] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 23.195519][ T503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63 [ 23.310225][ T517] rust_binder: Write failure EINVAL in pid:61 [ 23.368117][ T521] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.669435][ T549] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.676038][ T549] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.688215][ T549] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 23.701786][ T549] rust_binder: Write failure EINVAL in pid:54 [ 23.738301][ T291] cgroup: fork rejected by pids controller in /syz3 [ 23.754733][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 23.780185][ T558] random: crng reseeded on system resumption [ 23.780995][ T36] kauditd_printk_skb: 81 callbacks suppressed [ 23.781009][ T36] audit: type=1400 audit(1750398534.530:155): avc: denied { append } for pid=557 comm="syz.0.86" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 23.804326][ T558] Restarting kernel threads ... done. [ 23.825136][ T558] binder: Unknown parameter 'processor : 0 [ 23.825136][ T558] vendor_id : GenuineIntel [ 23.825136][ T558] cpu family : 6 [ 23.825136][ T558] model : 79 [ 23.825136][ T558] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 23.825136][ T558] stepping : 0 [ 23.825136][ T558] microcode : 0xffffffff [ 23.825136][ T558] cpu MHz : 2200.198 [ 23.825136][ T558] cache size : 56320 KB [ 23.825136][ T558] physical id : 0 [ 23.825136][ T558] siblings : 2 [ 23.825136][ T558] core id : 0 [ 23.825136][ T558] cpu cores : 1 [ 23.825136][ T558] apicid : 0 [ 23.825136][ T558] initial apicid : 0 [ 23.825136][ T558] fpu : yes [ 23.825136][ T558] fpu_exception : yes [ 23.825136][ T558] cpuid level : 13 [ 23.825136][ T558] wp : yes [ 23.825136][ T558] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht sy' [ 23.914303][ T305] bridge_slave_1: left allmulticast mode [ 23.921226][ T305] bridge_slave_1: left promiscuous mode [ 23.926897][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.934816][ T305] bridge_slave_0: left allmulticast mode [ 23.941486][ T305] bridge_slave_0: left promiscuous mode [ 23.947132][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.004661][ T561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 24.034864][ T569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:83 [ 24.056523][ T574] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 24.065672][ T574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:88 [ 24.075273][ T574] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 24.084565][ T574] rust_binder: Read failure Err(EFAULT) in pid:88 [ 24.097977][ T305] veth1_macvtap: left promiscuous mode [ 24.110380][ T305] veth0_vlan: left promiscuous mode [ 24.166704][ T567] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.174846][ T567] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.177694][ T583] binder: Bad value for 'defcontext' [ 24.187269][ T567] bridge_slave_0: entered allmulticast mode [ 24.193761][ T567] bridge_slave_0: entered promiscuous mode [ 24.201774][ T567] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.208906][ T567] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.229050][ T567] bridge_slave_1: entered allmulticast mode [ 24.235313][ T567] bridge_slave_1: entered promiscuous mode [ 24.285140][ T36] audit: type=1400 audit(1750398535.030:156): avc: denied { create } for pid=567 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.290038][ T567] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.309089][ T36] audit: type=1400 audit(1750398535.030:157): avc: denied { write } for pid=567 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.312612][ T567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.333004][ T36] audit: type=1400 audit(1750398535.030:158): avc: denied { read } for pid=567 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.340182][ T567] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.367354][ T567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.387434][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.394804][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.410982][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.418035][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.425668][ T36] audit: type=1400 audit(1750398535.180:159): avc: denied { read append } for pid=594 comm="syz.0.98" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 24.449657][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.450166][ T36] audit: type=1400 audit(1750398535.180:160): avc: denied { open } for pid=594 comm="syz.0.98" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 24.456692][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.509159][ T567] veth0_vlan: entered promiscuous mode [ 24.521985][ T567] veth1_macvtap: entered promiscuous mode [ 24.564545][ T605] rust_binder: Write failure EINVAL in pid:2 [ 24.678965][ T617] rtc_cmos 00:00: Alarms can be up to one day in the future [ 24.679063][ T36] audit: type=1400 audit(1750398535.420:161): avc: denied { ioctl } for pid=616 comm="syz.0.106" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 24.939525][ T616] rtc_cmos 00:00: Alarms can be up to one day in the future [ 24.946432][ T36] audit: type=1400 audit(1750398535.690:162): avc: denied { write } for pid=626 comm="syz.3.108" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 25.208759][ T648] rust_binder: Write failure EINVAL in pid:65 [ 25.218008][ T650] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 25.224316][ T651] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 25.224574][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 25.231195][ T651] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 25.239300][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 25.246806][ T651] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:67 [ 25.256619][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 25.298134][ T655] binder: Unknown parameter 'Birsnc' [ 25.303784][ T36] audit: type=1326 audit(1750398536.040:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.0.117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ec758e929 code=0x0 [ 25.312536][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 25.335113][ T45] rtc rtc0: __rtc_set_alarm: err=-22 [ 25.682403][ T679] binder: Unknown parameter 'defcontext01777777777777777777777' [ 25.724721][ T681] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 25.733767][ T681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:89 [ 25.769055][ T556] Bluetooth: hci0: command 0x1003 tx timeout [ 25.769195][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 25.815868][ T688] binder: Unknown parameter 'processor : 0 [ 25.815868][ T688] vendor_id : GenuineIntel [ 25.815868][ T688] cpu family : 6 [ 25.815868][ T688] model : 79 [ 25.815868][ T688] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 25.815868][ T688] stepping : 0 [ 25.815868][ T688] microcode : 0xffffffff [ 25.815868][ T688] cpu MHz : 2200.198 [ 25.815868][ T688] cache size : 56320 KB [ 25.815868][ T688] physical id : 0 [ 25.815868][ T688] siblings : 2 [ 25.815868][ T688] core id : 0 [ 25.815868][ T688] cpu cores : 1 [ 25.815868][ T688] apicid : 0 [ 25.815868][ T688] initial apicid : 0 [ 25.815868][ T688] fpu : yes [ 25.815868][ T688] fpu_exception : yes [ 25.815868][ T688] cpuid level : 13 [ 25.815868][ T688] wp : yes [ 25.815868][ T688] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 25.815868][ T688] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 25.816663][ T690] binder: Unknown parameter 'processor : 0 [ 25.816663][ T690] vendor_id : GenuineIntel [ 25.816663][ T690] cpu family : 6 [ 25.816663][ T690] model : 79 [ 25.816663][ T690] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 25.816663][ T690] stepping : 0 [ 25.816663][ T690] microcode : 0xffffffff [ 25.816663][ T690] cpu MHz : 2200.198 [ 25.816663][ T690] cache size : 56320 KB [ 25.816663][ T690] physical id : 0 [ 25.816663][ T690] siblings : 2 [ 25.816663][ T690] core id : 0 [ 25.816663][ T690] cpu cores : 1 [ 25.816663][ T690] apicid : 0 [ 25.816663][ T690] initial apicid : 0 [ 25.816663][ T690] fpu : yes [ 25.816663][ T690] fpu_exception : yes [ 25.816663][ T690] cpuid level : 13 [ 25.816663][ T690] wp : yes [ 25.816663][ T690] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 25.816663][ T690] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 25.995860][ T703] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 26.154917][ T707] binder: Unknown parameter 'processor : 0 [ 26.154917][ T707] vendor_id : GenuineIntel [ 26.154917][ T707] cpu family : 6 [ 26.154917][ T707] model : 79 [ 26.154917][ T707] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 26.154917][ T707] stepping : 0 [ 26.154917][ T707] microcode : 0xffffffff [ 26.154917][ T707] cpu MHz : 2200.198 [ 26.154917][ T707] cache size : 56320 KB [ 26.154917][ T707] physical id : 0 [ 26.154917][ T707] siblings : 2 [ 26.154917][ T707] core id : 0 [ 26.154917][ T707] cpu cores : 1 [ 26.154917][ T707] apicid : 0 [ 26.154917][ T707] initial apicid : 0 [ 26.154917][ T707] fpu : yes [ 26.154917][ T707] fpu_exception : yes [ 26.154917][ T707] cpuid level : 13 [ 26.154917][ T707] wp : yes [ 26.154917][ T707] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 26.154917][ T707] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 26.311432][ T731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:97 [ 26.499724][ T741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.574686][ T752] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 26.603194][ T734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97 [ 26.847488][ T771] rust_binder: Write failure EFAULT in pid:143 [ 26.867071][ T771] rust_binder: Write failure EFAULT in pid:143 [ 26.876267][ T771] rust_binder: Write failure EFAULT in pid:143 [ 26.885279][ T36] audit: type=1400 audit(1750398537.630:164): avc: denied { mounton } for pid=766 comm="syz.3.151" path="/17/memory.events" dev="tmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 26.889154][ T771] rust_binder: Write failure EFAULT in pid:143 [ 26.930599][ T771] rust_binder: Write failure EFAULT in pid:143 [ 26.936790][ T771] rust_binder: Write failure EFAULT in pid:143 [ 26.959188][ T771] rust_binder: Write failure EFAULT in pid:143 [ 26.965384][ T771] rust_binder: Write failure EFAULT in pid:143 [ 26.980245][ T771] rust_binder: Write failure EFAULT in pid:143 [ 26.986534][ T771] rust_binder: Write failure EFAULT in pid:143 [ 26.992946][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.006668][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.013052][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.020096][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.026337][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.032763][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.039301][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.045509][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.051937][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.058136][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.066371][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.072707][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.078934][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.085360][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.091786][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.108758][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.119610][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.126460][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.134415][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.140794][ T776] tap0: tun_chr_ioctl cmd 2148553947 [ 27.152681][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.152723][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.158883][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.165368][ T771] rust_binder: Write failure EFAULT in pid:143 [ 27.171786][ T776] __vm_enough_memory: pid: 776, comm: syz.3.154, bytes: 281474976845824 not enough memory for the allocation [ 27.246211][ T780] input: syz0 as /devices/virtual/input/input6 [ 27.269732][ T780] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.270051][ T780] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 27.297500][ T786] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 27.389840][ T790] kvm: kvm [789]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x3072 [ 27.429316][ T792] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.438195][ T794] tap0: tun_chr_ioctl cmd 1074025677 [ 27.450179][ T794] tap0: linktype set to 774 [ 27.455060][ T794] rust_binder: Read failure Err(EAGAIN) in pid:95 [ 27.480355][ T796] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 27.486840][ T796] rust_binder: Error while translating object. [ 27.495559][ T796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.501767][ T796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:106 [ 27.537687][ T799] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 27.565064][ T803] input: syz1 as /devices/virtual/input/input8 [ 27.585458][ T803] input: syz0 as /devices/virtual/input/input9 [ 27.907385][ T834] rust_binder: Error while translating object. [ 27.907410][ T834] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.913791][ T834] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111 [ 28.060585][ T848] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:125 [ 28.106548][ T852] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:129 [ 28.120954][ T852] input: syz0 as /devices/virtual/input/input10 [ 28.187907][ T856] rust_binder: Write failure EINVAL in pid:153 [ 28.365335][ T877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.386365][ T879] rust_binder: Error while translating object. [ 28.392951][ T879] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.399646][ T879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127 [ 28.451721][ T881] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 28.469130][ T881] rust_binder: Error while translating object. [ 28.477774][ T881] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.485519][ T881] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134 [ 28.665374][ T896] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 28.714766][ T901] rust_binder: Write failure EINVAL in pid:173 [ 28.714857][ T900] rust_binder: Write failure EINVAL in pid:173 [ 28.896615][ T917] rust_binder: Error while translating object. [ 28.902864][ T917] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.909264][ T917] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 28.943194][ T921] rust_binder: Error while translating object. [ 28.953065][ T921] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.962188][ T921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:182 [ 28.981910][ T921] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.997569][ T923] rust_binder: Error while translating object. [ 28.997592][ T923] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.004359][ T923] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:182 [ 29.028854][ T927] rust_binder: inc_ref_done called when no active inc_refs [ 29.054638][ T927] rust_binder: Read failure Err(EAGAIN) in pid:144 [ 29.104806][ T919] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:139 [ 29.127536][ T938] binder: Bad value for 'stats' [ 29.153286][ T938] binder: Bad value for 'stats' [ 29.158296][ T938] binder: Bad value for 'stats' [ 29.164028][ T938] binder: Bad value for 'stats' [ 29.169229][ T938] binder: Bad value for 'stats' [ 29.174237][ T938] binder: Bad value for 'stats' [ 29.180939][ T938] binder: Bad value for 'stats' [ 29.185957][ T938] binder: Bad value for 'stats' [ 29.191120][ T938] binder: Bad value for 'stats' [ 29.196129][ T938] binder: Bad value for 'stats' [ 29.219520][ T938] binder: Bad value for 'stats' [ 29.225711][ T938] binder: Bad value for 'stats' [ 29.240850][ T938] binder: Bad value for 'stats' [ 29.245777][ T938] binder: Bad value for 'stats' [ 29.252811][ T938] binder: Bad value for 'stats' [ 29.269034][ T938] binder: Bad value for 'stats' [ 29.274002][ T938] binder: Bad value for 'stats' [ 29.278935][ T938] binder: Bad value for 'stats' [ 29.284268][ T938] binder: Bad value for 'stats' [ 29.296712][ T938] binder: Bad value for 'stats' [ 29.302909][ T938] binder: Bad value for 'stats' [ 29.307877][ T938] binder: Bad value for 'stats' [ 29.313786][ T938] binder: Bad value for 'stats' [ 29.320197][ T938] binder: Bad value for 'stats' [ 29.325418][ T938] binder: Bad value for 'stats' [ 29.330592][ T938] binder: Bad value for 'stats' [ 29.335518][ T938] binder: Bad value for 'stats' [ 29.340713][ T938] binder: Bad value for 'stats' [ 29.354281][ T938] binder: Bad value for 'stats' [ 29.361904][ T938] binder: Bad value for 'stats' [ 29.369375][ T938] binder: Bad value for 'stats' [ 29.374338][ T938] binder: Bad value for 'stats' [ 29.384005][ T938] binder: Bad value for 'stats' [ 29.389200][ T938] binder: Bad value for 'stats' [ 29.394113][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 29.394125][ T36] audit: type=1400 audit(1750398540.130:174): avc: denied { compute_member } for pid=948 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 29.394276][ T938] binder: Bad value for 'stats' [ 29.425897][ T938] binder: Bad value for 'stats' [ 29.433286][ T938] binder: Bad value for 'stats' [ 29.438880][ T938] binder: Bad value for 'stats' [ 29.447769][ T938] binder: Bad value for 'stats' [ 29.464872][ T938] binder: Bad value for 'stats' [ 29.469993][ T938] binder: Bad value for 'stats' [ 29.474950][ T938] binder: Bad value for 'stats' [ 29.488770][ T955] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 29.499140][ T938] binder: Bad value for 'stats' [ 29.504100][ T938] binder: Bad value for 'stats' [ 29.509384][ T938] binder: Bad value for 'stats' [ 29.514334][ T938] binder: Bad value for 'stats' [ 29.519799][ T938] binder: Bad value for 'stats' [ 29.524827][ T938] binder: Bad value for 'stats' [ 29.524823][ T955] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.524910][ T938] binder: Bad value for 'stats' [ 29.535236][ T955] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:201 [ 29.544367][ T938] binder: Bad value for 'stats' [ 29.559171][ T938] binder: Bad value for 'stats' [ 29.564535][ T938] binder: Bad value for 'stats' [ 29.571163][ T938] binder: Bad value for 'stats' [ 29.576112][ T938] binder: Bad value for 'stats' [ 29.583431][ T938] binder: Bad value for 'stats' [ 29.588405][ T938] binder: Bad value for 'stats' [ 29.593627][ T938] binder: Bad value for 'stats' [ 29.598586][ T938] binder: Bad value for 'stats' [ 29.606300][ T938] binder: Bad value for 'stats' [ 29.611711][ T938] binder: Bad value for 'stats' [ 29.616692][ T938] binder: Bad value for 'stats' [ 29.623476][ T938] binder: Bad value for 'stats' [ 29.628464][ T938] binder: Bad value for 'stats' [ 29.633596][ T938] binder: Bad value for 'stats' [ 29.638557][ T938] binder: Bad value for 'stats' [ 29.736536][ T36] audit: type=1400 audit(1750398540.480:175): avc: denied { relabelfrom } for pid=956 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 29.783950][ T36] audit: type=1400 audit(1750398540.510:176): avc: denied { relabelto } for pid=956 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 29.889534][ T36] audit: type=1400 audit(1750398540.640:177): avc: denied { write } for pid=978 comm="syz.1.221" name="pfkey" dev="proc" ino=4026532431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 29.976608][ T36] audit: type=1400 audit(1750398540.720:178): avc: denied { map } for pid=978 comm="syz.1.221" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.135568][ T36] audit: type=1326 audit(1750398540.880:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=988 comm="syz.1.225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa20398e929 code=0x0 [ 30.203878][ T996] binder: Bad value for 'defcontext' [ 30.241583][ T1002] rust_binder: Write failure EINVAL in pid:162 [ 30.588840][ T1032] cgroup: fork rejected by pids controller in /syz0 [ 30.623153][ T1032] binder: Unknown parameter 'nXIÿÿ' [ 30.870546][ T59] bridge_slave_1: left allmulticast mode [ 30.876249][ T59] bridge_slave_1: left promiscuous mode [ 30.882171][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.892142][ T59] bridge_slave_0: left allmulticast mode [ 30.904331][ T59] bridge_slave_0: left promiscuous mode [ 30.922475][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.972511][ T1038] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 31.009349][ T1038] rust_binder: Write failure EINVAL in pid:191 [ 31.123056][ T59] veth1_macvtap: left promiscuous mode [ 31.134916][ T59] veth0_vlan: left promiscuous mode [ 31.259351][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.266722][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.283055][ T1040] bridge_slave_0: entered allmulticast mode [ 31.290096][ T1057] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:169 [ 31.299498][ T1040] bridge_slave_0: entered promiscuous mode [ 31.324466][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.331774][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.346173][ T1040] bridge_slave_1: entered allmulticast mode [ 31.357283][ T1040] bridge_slave_1: entered promiscuous mode [ 31.370342][ T1055] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 31.424015][ T36] audit: type=1400 audit(1750398542.170:180): avc: denied { write } for pid=1058 comm="syz.1.246" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 31.449591][ T36] audit: type=1400 audit(1750398542.200:181): avc: denied { append } for pid=1058 comm="syz.1.246" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.454425][ T1059] rust_binder: Error while translating object. [ 31.487471][ T1059] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 31.505116][ T1059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:172 [ 31.546543][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.562636][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.572516][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.579562][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.615423][ T1040] veth0_vlan: entered promiscuous mode [ 31.628036][ T1040] veth1_macvtap: entered promiscuous mode [ 31.656707][ T1061] binder: Bad value for 'stats' [ 31.700568][ T1069] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 31.719751][ T1068] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 31.779145][ T1077] rust_binder: Write failure EINVAL in pid:2 [ 32.001603][ T36] audit: type=1400 audit(1750398542.750:182): avc: denied { setattr } for pid=1080 comm="syz.1.253" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 32.273384][ T1090] input: syz1 as /devices/virtual/input/input13 [ 32.304003][ T1090] binder: Unknown parameter '00000000000000000006' [ 32.504800][ T1102] rust_binder: Error while translating object. [ 32.504851][ T1102] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.529113][ T1102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217 [ 32.621788][ T1107] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.644129][ T1107] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.668400][ T1107] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.470648][ T1144] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 33.477097][ T1144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:24 [ 33.639858][ T1153] rust_binder: Error while translating object. [ 33.648944][ T1153] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.679030][ T1153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 33.752625][ T1155] tap0: tun_chr_ioctl cmd 1074025677 [ 33.779784][ T1155] tap0: linktype set to 776 [ 33.797863][ T36] audit: type=1400 audit(1750398544.540:183): avc: denied { attach_queue } for pid=1156 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 33.800392][ T1155] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 33.872010][ T1155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.890650][ T1155] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 34.409228][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 34.409244][ T36] audit: type=1326 audit(1750398545.160:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1161 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa20398e929 code=0x0 [ 34.464368][ T1171] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 34.478580][ T1168] SELinux: policydb version 1424520304 does not match my version range 15-33 [ 34.478601][ T36] audit: type=1400 audit(1750398545.220:186): avc: denied { load_policy } for pid=1167 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 34.507536][ T1168] SELinux: failed to load policy [ 34.568289][ T1182] binder: Unknown parameter 'processor : 0 [ 34.568289][ T1182] vendor_id : GenuineIntel [ 34.568289][ T1182] cpu family : 6 [ 34.568289][ T1182] model : 79 [ 34.568289][ T1182] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 34.568289][ T1182] stepping : 0 [ 34.568289][ T1182] microcode : 0xffffffff [ 34.568289][ T1182] cpu MHz : 2200.198 [ 34.568289][ T1182] cache size : 56320 KB [ 34.568289][ T1182] physical id : 0 [ 34.568289][ T1182] siblings : 2 [ 34.568289][ T1182] core id : 0 [ 34.568289][ T1182] cpu cores : 1 [ 34.568289][ T1182] apicid : 0 [ 34.568289][ T1182] initial apicid : 0 [ 34.568289][ T1182] fpu : yes [ 34.568289][ T1182] fpu_exception : yes [ 34.568289][ T1182] cpuid level : 13 [ 34.568289][ T1182] wp : yes [ 34.568289][ T1182] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 34.568289][ T1182] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 34.727702][ T1191] rust_binder: Write failure EINVAL in pid:41 [ 35.067961][ T1195] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:255 [ 35.209520][ T1198] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 35.218663][ T1198] rust_binder: Error while translating object. [ 35.231329][ T1198] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.237761][ T1198] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:258 [ 35.285531][ T1204] rust_binder: Write failure EINVAL in pid:262 [ 35.297914][ T1202] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:45 [ 35.309490][ T1206] rust_binder: Error while translating object. [ 35.340621][ T1206] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 35.346872][ T1206] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:211 [ 35.464196][ T1222] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.520244][ T1232] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 35.520497][ T36] audit: type=1400 audit(1750398546.260:187): avc: granted { setsecparam } for pid=1231 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 35.526741][ T1232] rust_binder: Error while translating object. [ 35.555438][ T1232] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.559038][ T36] audit: type=1400 audit(1750398546.260:188): avc: granted { setsecparam } for pid=1231 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 35.590754][ T1232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 35.623760][ T1234] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 35.658376][ T36] audit: type=1326 audit(1750398546.400:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1238 comm="syz.0.303" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50d6f8e929 code=0x0 [ 35.851614][ T1246] rust_binder: Write failure EFAULT in pid:225 [ 35.861100][ T36] audit: type=1326 audit(1750398546.610:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1245 comm="syz.1.305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa20398e929 code=0x0 [ 36.419165][ T1252] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 36.593449][ T1255] rust_binder: Read failure Err(EFAULT) in pid:280 [ 36.725425][ T1261] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 36.876773][ T1266] rust_binder: Write failure EINVAL in pid:290 [ 36.897413][ T1268] rust_binder: Write failure EFAULT in pid:292 [ 37.023762][ T1273] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:232 [ 37.104838][ T1282] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.122565][ T1283] rust_binder: Write failure EINVAL in pid:63 [ 37.169253][ T1287] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:299 [ 37.234166][ T1291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67 [ 37.268791][ T1293] rust_binder: Write failure EFAULT in pid:237 [ 37.369409][ T1305] random: crng reseeded on system resumption [ 37.405674][ T1305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243 [ 37.444581][ T36] audit: type=1400 audit(1750398548.190:191): avc: denied { read } for pid=1304 comm="syz.1.327" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 37.495138][ T1314] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.501137][ T36] audit: type=1400 audit(1750398548.190:192): avc: denied { open } for pid=1304 comm="syz.1.327" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 37.546805][ T1305] rust_binder: Write failure EINVAL in pid:243 [ 37.548941][ T1305] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext¶»y3tem_u' [ 37.552672][ T36] audit: type=1400 audit(1750398548.190:193): avc: denied { ioctl } for pid=1304 comm="syz.1.327" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 37.658850][ T1319] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 37.694380][ T1319] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.990170][ T1336] rust_binder: Write failure EINVAL in pid:99 [ 38.060834][ T1339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101 [ 38.158748][ T1341] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.168235][ T1341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:307 [ 38.214494][ T36] audit: type=1400 audit(1750398548.960:194): avc: denied { read write } for pid=1342 comm="syz.0.338" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 38.365051][ T1346] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 38.365082][ T1346] rust_binder: Error in use_page_slow: EBUSY [ 38.375685][ T1346] rust_binder: use_range failure EBUSY [ 38.381855][ T1346] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 38.387318][ T1346] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 38.395197][ T1346] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 38.404652][ T1346] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:246 [ 38.433345][ T1351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:249 [ 38.445714][ T1351] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 38.462450][ T1351] rust_binder: Write failure EINVAL in pid:249 [ 38.463197][ T1355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.493971][ T1358] SELinux: syz.1.343 (1358) set checkreqprot to 1. This is no longer supported. [ 38.543647][ T1363] binder: Binderfs stats mode cannot be changed during a remount [ 38.592602][ T1366] rust_binder: Error while translating object. [ 38.592627][ T1366] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.599720][ T1366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:259 [ 38.643076][ T1372] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 38.869944][ T1380] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 39.001502][ T1387] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.187472][ T1404] SELinux: security_context_str_to_sid (unconfined[u) failed with errno=-22 [ 39.222748][ T1407] rust_binder: Write failure EINVAL in pid:274 [ 39.360195][ T1420] KVM: debugfs: duplicate directory 1420-6 [ 39.688803][ T1435] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:134 [ 39.830086][ T1445] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.840243][ T1442] rust_binder: Error while translating object. [ 39.846702][ T1442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 39.862172][ T1442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:327 [ 40.139079][ T1466] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.188468][ T1470] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 40.202218][ T1470] rust_binder: Write failure EINVAL in pid:148 [ 40.248230][ T1474] SELinux: security_context_str_to_sid () failed with errno=-22 [ 40.286791][ T1478] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.286848][ T1478] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.294335][ T1477] binder: Unknown parameter '' [ 40.322953][ T1480] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.323320][ T1480] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 40.333407][ T1480] rust_binder: Error while translating object. [ 40.345639][ T1480] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.383524][ T1480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:337 [ 40.424467][ T1486] rust_binder: Write failure EFAULT in pid:339 [ 40.607329][ T1494] rust_binder: Error while translating object. [ 40.620125][ T1494] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 40.626322][ T1494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:158 [ 40.702384][ T1501] binder: Bad value for 'stats' [ 40.894428][ T1506] binder: Bad value for 'max' [ 40.943023][ T1510] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 40.943044][ T1510] rust_binder: Read failure Err(EFAULT) in pid:165 [ 40.968442][ T1510] kvm: kvm [1509]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x882 [ 40.990911][ T1508] input: syz0 as /devices/virtual/input/input18 [ 41.099809][ T1515] kvm: kvm [1514]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0xfff [ 41.108467][ T1516] kvm: kvm [1514]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0xfff [ 41.149967][ T1518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.150107][ T1518] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 41.166795][ T1518] rust_binder: Write failure EINVAL in pid:356 [ 41.167362][ T1520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.246160][ T1527] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.317666][ T1537] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:171 [ 41.542741][ T1550] binder: Unknown parameter 'subj_type' [ 41.605963][ T1556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 41.605984][ T1556] rust_binder: Read failure Err(EFAULT) in pid:177 [ 41.669612][ T1556] rust_binder: Got transaction with invalid offset. [ 41.676167][ T1556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.683909][ T1556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:177 [ 41.829593][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 41.829609][ T36] audit: type=1326 audit(1750398552.580:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1563 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d6f8e929 code=0x7ffc0000 [ 41.877427][ T36] audit: type=1326 audit(1750398552.610:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1563 comm="syz.0.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f50d6f8e929 code=0x7ffc0000 [ 41.901167][ T36] audit: type=1326 audit(1750398552.610:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1563 comm=BF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d6f8e929 code=0x7ffc0000 [ 41.924158][ T36] audit: type=1326 audit(1750398552.610:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1563 comm=BF exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f50d6f8e929 code=0x7ffc0000 [ 41.947232][ T36] audit: type=1326 audit(1750398552.610:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1563 comm="$,@.-,$!" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d6f8e929 code=0x7ffc0000 [ 41.970541][ T1566] binder: Bad value for 'max' [ 41.984825][ T36] audit: type=1326 audit(1750398552.610:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1563 comm="$,@.-,$!" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50d6f8e929 code=0x7ffc0000 [ 42.012039][ T36] audit: type=1326 audit(1750398552.610:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1563 comm="$,@.-,$!" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d6f8e929 code=0x7ffc0000 [ 42.035566][ T36] audit: type=1326 audit(1750398552.610:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1563 comm="$,@.-,$!" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50d6f8e929 code=0x7ffc0000 [ 42.058969][ T36] audit: type=1326 audit(1750398552.610:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1563 comm="$,@.-,$!" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d6f8e929 code=0x7ffc0000 [ 42.059298][ T1568] rust_binder: Failed copying remainder into alloc: EFAULT [ 42.094774][ T36] audit: type=1326 audit(1750398552.610:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1563 comm="$,@.-,$!" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50d6f8e929 code=0x7ffc0000 [ 42.100006][ T1568] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 42.125212][ T1568] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 42.133677][ T1568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:184 [ 42.184487][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.197454][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.204105][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.210459][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.216926][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.223556][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.230151][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.241101][ T1577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 42.248106][ T1577] rust_binder: Error while translating object. [ 42.257334][ T1577] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.263608][ T1577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 42.273205][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.289059][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.301182][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.310152][ T1580] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.316795][ T1580] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.323285][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.329948][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.336412][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.343044][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.349671][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.355895][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.362611][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.369199][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.375704][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.377478][ T1581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 42.382856][ T1583] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.397791][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.406423][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.419847][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.419870][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.426451][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.433269][ T1573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.457776][ T1585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:372 [ 42.560510][ T1593] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.877397][ T1613] rust_binder: Write failure EINVAL in pid:197 [ 43.174456][ T1618] input: syz1 as /devices/virtual/input/input21 [ 43.253308][ T59] bridge_slave_1: left allmulticast mode [ 43.259032][ T59] bridge_slave_1: left promiscuous mode [ 43.264627][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.272407][ T59] bridge_slave_0: left allmulticast mode [ 43.278288][ T59] bridge_slave_0: left promiscuous mode [ 43.284228][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.372732][ T1620] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.379868][ T1620] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.386980][ T1620] bridge_slave_0: entered allmulticast mode [ 43.393311][ T1620] bridge_slave_0: entered promiscuous mode [ 43.399685][ T1620] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.406712][ T1620] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.413997][ T1620] bridge_slave_1: entered allmulticast mode [ 43.420707][ T1620] bridge_slave_1: entered promiscuous mode [ 43.459267][ T1620] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.466339][ T1620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.473624][ T1620] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.480666][ T1620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.497169][ T59] veth1_macvtap: left promiscuous mode [ 43.502728][ T59] veth0_vlan: left promiscuous mode [ 43.546105][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.556095][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.565334][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.572406][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.582240][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.589297][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.618143][ T1638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:342 [ 43.618175][ T1638] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.629196][ T1638] rust_binder: Read failure Err(EFAULT) in pid:342 [ 43.636732][ T1620] veth0_vlan: entered promiscuous mode [ 43.657940][ T1620] veth1_macvtap: entered promiscuous mode [ 43.752498][ T1653] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.764571][ T1659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.772585][ T1659] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 43.779045][ T1659] rust_binder: Error while translating object. [ 43.791111][ T1659] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.797259][ T1659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:355 [ 43.836547][ T1666] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.854448][ T1669] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.861096][ T1669] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:393 [ 43.880423][ T1670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.904525][ T1675] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 43.918213][ T1675] rust_binder: Write failure EINVAL in pid:398 [ 43.977487][ T1699] binder: Unknown parameter '¯ëÀŠ' [ 43.994150][ T1699] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 43.994189][ T1699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:223 [ 44.003613][ T1699] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.012767][ T1699] rust_binder: Read failure Err(EFAULT) in pid:223 [ 44.079495][ T1702] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 44.082600][ T1661] rust_binder: Read failure Err(EFAULT) in pid:4 [ 44.086048][ T1702] rust_binder: Error while translating object. [ 44.086086][ T1702] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.107457][ T1702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:415 [ 44.263681][ T1711] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 44.269542][ T1709] __vm_enough_memory: pid: 1709, comm: syz.4.447, bytes: 281474976845824 not enough memory for the allocation [ 44.296549][ T1713] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 44.339144][ T1722] SELinux: unknown common r [ 44.343933][ T1722] SELinux: failed to load policy [ 44.349479][ T1722] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:425 [ 44.357805][ T1724] input: syz0 as /devices/virtual/input/input22 [ 44.373238][ T1724] input: failed to attach handler leds to device input22, error: -6 [ 44.429695][ T1729] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 44.436854][ T1729] rust_binder: Write failure EINVAL in pid:14 [ 44.555742][ T1746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:441 [ 44.583534][ T1753] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 44.600025][ T1753] rust_binder: Write failure EINVAL in pid:446 [ 44.690505][ T1767] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.775927][ T1775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.782745][ T1775] random: crng reseeded on system resumption [ 44.803347][ T1778] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 44.810866][ T1778] rust_binder: Write failure EINVAL in pid:455 [ 45.421262][ T1799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:234 [ 45.432898][ T1799] rust_binder: Read failure Err(EFAULT) in pid:234 [ 45.484184][ T1803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238 [ 45.620787][ T1812] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 45.630231][ T1812] rust_binder: Read failure Err(EFAULT) in pid:363 [ 45.647840][ T1816] binder: Bad value for 'max' [ 45.672691][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.672714][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.679672][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.686300][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.693325][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.700208][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.703615][ T1822] rust_binder: Write failure EFAULT in pid:246 [ 45.706772][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 45.717515][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.725470][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 45.725813][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.732132][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 45.738247][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.746331][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 45.757190][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.759379][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 45.763451][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.770470][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 45.776225][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.783613][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 45.795179][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.809651][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 45.815646][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.817782][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 45.822375][ T1827] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.829011][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 45.835465][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.852560][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.855224][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 45.859074][ T1827] rust_binder: Error in use_page_slow: ESRCH [ 45.865712][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 45.871664][ T1827] rust_binder: use_range failure ESRCH [ 45.877891][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 45.884986][ T1827] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 45.895404][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.895689][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 45.903405][ T1827] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 45.911401][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 45.916106][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.925984][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 45.931476][ T1827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:38 [ 45.938033][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 45.944059][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.957977][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 45.965939][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 45.972327][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 45.978508][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 45.984886][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 45.999414][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.005827][ T1832] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 46.012623][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.021550][ T1832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 46.027890][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.034011][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.037378][ T1832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:253 [ 46.052696][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.065921][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.072409][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.079154][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.085480][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.093089][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.099737][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.104829][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.113594][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.116685][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.120568][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.126536][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.132927][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.139772][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.145919][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.158184][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.164555][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.166889][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.171142][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.179603][ T1845] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 46.184560][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.189838][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.197464][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.203647][ T1845] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 46.210111][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.216674][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.228144][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.235587][ T1845] kvm: requested 122361 ns i8254 timer period limited to 200000 ns [ 46.236819][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.250571][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.252224][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.263971][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.270402][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.272037][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.276692][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.282839][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.289517][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.295566][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.302363][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.308327][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.318790][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.327200][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.333572][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.335232][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.341278][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.346138][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.354032][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.358742][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.365251][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.378231][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.384843][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.389967][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.391286][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.397273][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.403807][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.410341][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.416656][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.426251][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.432273][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.437568][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.468329][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.477987][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.484404][ T1820] rust_binder: Write failure EINVAL in pid:365 [ 46.498218][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.505851][ T1862] tap0: tun_chr_ioctl cmd 1074025677 [ 46.519915][ T1862] tap0: linktype set to 776 [ 46.549369][ T1862] SELinux: security_context_str_to_sid (uncon) failed with errno=-22 [ 46.634900][ T1870] __vm_enough_memory: pid: 1870, comm: syz.1.500, bytes: 281474976845824 not enough memory for the allocation [ 46.714641][ T1873] rust_binder: Write failure EFAULT in pid:49 [ 46.714688][ T1874] rust_binder: Write failure EFAULT in pid:49 [ 46.810405][ T1886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:273 [ 46.924121][ T1897] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.994822][ T1898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:386 [ 47.001867][ T1898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:386 [ 47.038202][ T1900] rust_binder: Write failure EINVAL in pid:53 [ 47.056605][ T1902] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 47.062729][ T1902] rust_binder: Error while translating object. [ 47.071476][ T1902] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.077648][ T1902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:55 [ 47.138694][ T1912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.215189][ T1913] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.222074][ T1913] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65 [ 47.343603][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 47.343619][ T36] audit: type=1326 audit(1750398558.090:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1924 comm="syz.2.519" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e95b8e929 code=0x0 [ 47.766661][ T1930] random: crng reseeded on system resumption [ 47.783025][ T1929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:389 [ 47.783246][ T1929] Restarting kernel threads ... done. [ 47.806401][ T1932] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.807242][ T1932] input: syz1 as /devices/virtual/input/input24 [ 47.821137][ T1932] rust_binder: Error while translating object. [ 47.821175][ T1932] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 47.827471][ T1932] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:392 [ 47.851882][ T1934] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 47.938932][ T1937] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.024392][ T1940] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.030939][ T1940] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.037382][ T1940] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.043838][ T1940] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.050315][ T1940] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.056763][ T1940] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.063206][ T1940] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.069678][ T1940] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.076293][ T1940] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.082790][ T1940] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.089235][ T1940] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.090549][ T1942] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.106284][ T1942] rust_binder: Error in use_page_slow: ESRCH [ 48.112979][ T1942] rust_binder: use_range failure ESRCH [ 48.116589][ T1946] input: syz0 as /devices/virtual/input/input25 [ 48.119199][ T1942] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 48.131058][ T1942] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 48.139438][ T1942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:397 [ 48.323721][ T1948] rust_binder: Write failure EINVAL in pid:75 [ 48.342861][ T1952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.349680][ T36] audit: type=1326 audit(1750398559.100:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1951 comm="syz.4.528" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f20b3f8e929 code=0x0 [ 49.151751][ T1993] input: syz0 as /devices/virtual/input/input26 [ 49.158036][ T1993] input: failed to attach handler leds to device input26, error: -6 [ 49.216125][ T36] audit: type=1400 audit(1750398559.960:227): avc: denied { view } for pid=2004 comm="syz.1.545" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 49.224546][ T2005] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:412 [ 49.235000][ T2005] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 49.256256][ T2005] rust_binder: Read failure Err(EFAULT) in pid:412 [ 49.289137][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.301926][ T556] Bluetooth: hci0: command 0x1003 tx timeout [ 49.424943][ T2024] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 49.434721][ T2024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.434787][ T2024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.435004][ T2029] binder: Bad value for 'max' [ 49.445114][ T2024] input: syz1 as /devices/virtual/input/input27 [ 49.460099][ T2029] binder: Bad value for 'max' [ 49.466324][ T2024] rust_binder: Error while translating object. [ 49.466345][ T2024] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.478408][ T2024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:285 [ 49.478483][ T2029] binder: Bad value for 'max' [ 49.502060][ T2029] binder: Bad value for 'max' [ 49.511163][ T2029] binder: Bad value for 'max' [ 49.515933][ T2029] binder: Bad value for 'max' [ 49.521024][ T2029] binder: Bad value for 'max' [ 49.525869][ T2029] binder: Bad value for 'max' [ 49.530853][ T2029] binder: Bad value for 'max' [ 49.535681][ T2029] binder: Bad value for 'max' [ 49.540659][ T2029] binder: Bad value for 'max' [ 49.551543][ T2033] cgroup: fork rejected by pids controller in /syz1 [ 49.559310][ T2029] binder: Bad value for 'max' [ 49.567777][ T2029] binder: Bad value for 'max' [ 49.577880][ T2029] binder: Bad value for 'max' [ 49.593826][ T2029] binder: Bad value for 'max' [ 49.603923][ T2029] binder: Bad value for 'max' [ 49.609264][ T2029] binder: Bad value for 'max' [ 49.614069][ T2029] binder: Bad value for 'max' [ 49.618845][ T2029] binder: Bad value for 'max' [ 49.623875][ T2029] binder: Bad value for 'max' [ 49.628689][ T2029] binder: Bad value for 'max' [ 49.633695][ T2029] binder: Bad value for 'max' [ 49.639162][ T2029] binder: Bad value for 'max' [ 49.643914][ T2029] binder: Bad value for 'max' [ 49.648684][ T2029] binder: Bad value for 'max' [ 49.653503][ T2029] binder: Bad value for 'max' [ 49.658249][ T2029] binder: Bad value for 'max' [ 49.663009][ T2029] binder: Bad value for 'max' [ 49.667799][ T2029] binder: Bad value for 'max' [ 49.674077][ T2029] binder: Bad value for 'max' [ 49.678861][ T2029] binder: Bad value for 'max' [ 49.679269][ T2046] __vm_enough_memory: pid: 2046, comm: syz.0.557, bytes: 281474976845824 not enough memory for the allocation [ 49.683756][ T2029] binder: Bad value for 'max' [ 49.700208][ T2029] binder: Bad value for 'max' [ 49.704973][ T2029] binder: Bad value for 'max' [ 49.709736][ T2029] binder: Bad value for 'max' [ 49.711664][ T2049] binder: Unknown parameter 'dont_hash' [ 49.714476][ T2029] binder: Bad value for 'max' [ 49.724954][ T2029] binder: Bad value for 'max' [ 49.729983][ T2029] binder: Bad value for 'max' [ 49.735959][ T2029] binder: Bad value for 'max' [ 49.740761][ T2029] binder: Bad value for 'max' [ 49.745516][ T2029] binder: Bad value for 'max' [ 49.750341][ T2029] binder: Bad value for 'max' [ 49.755126][ T2029] binder: Bad value for 'max' [ 49.761466][ T2029] binder: Bad value for 'max' [ 49.766211][ T2029] binder: Bad value for 'max' [ 49.771072][ T2029] binder: Bad value for 'max' [ 49.776040][ T2029] binder: Bad value for 'max' [ 49.780897][ T127] bridge_slave_1: left allmulticast mode [ 49.781408][ T2029] binder: Bad value for 'max' [ 49.789031][ T127] bridge_slave_1: left promiscuous mode [ 49.791461][ T2029] binder: Bad value for 'max' [ 49.799257][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.803490][ T2029] binder: Bad value for 'max' [ 49.813235][ T2029] binder: Bad value for 'max' [ 49.818010][ T2029] binder: Bad value for 'max' [ 49.825971][ T2029] binder: Bad value for 'max' [ 49.830705][ T127] bridge_slave_0: left allmulticast mode [ 49.836338][ T127] bridge_slave_0: left promiscuous mode [ 49.842087][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.851850][ T2029] binder: Bad value for 'max' [ 49.857427][ T2051] input: syz1 as /devices/virtual/input/input28 [ 49.886649][ T2029] binder: Bad value for 'max' [ 49.891530][ T2029] binder: Bad value for 'max' [ 49.909140][ T2029] binder: Bad value for 'max' [ 49.922100][ T2029] binder: Bad value for 'max' [ 49.927207][ T2029] binder: Bad value for 'max' [ 49.932097][ T2029] binder: Bad value for 'max' [ 49.936905][ T2029] binder: Bad value for 'max' [ 49.941802][ T2029] binder: Bad value for 'max' [ 49.951368][ T2029] binder: Bad value for 'max' [ 49.963857][ T2058] binder: Unknown parameter 'maxd000080000‰' [ 49.964849][ T2029] binder: Bad value for 'max' [ 49.975183][ T2029] binder: Bad value for 'max' [ 49.993155][ T127] veth1_macvtap: left promiscuous mode [ 49.998693][ T127] veth0_vlan: left promiscuous mode [ 50.065584][ T2063] random: crng reseeded on system resumption [ 50.105262][ T2059] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.112466][ T2059] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.119530][ T2059] bridge_slave_0: entered allmulticast mode [ 50.125717][ T2059] bridge_slave_0: entered promiscuous mode [ 50.132166][ T2059] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.139200][ T2059] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.146222][ T2059] bridge_slave_1: entered allmulticast mode [ 50.152532][ T2059] bridge_slave_1: entered promiscuous mode [ 50.189513][ T2059] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.196543][ T2059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.203803][ T2059] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.210846][ T2059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.237293][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.249287][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.260810][ T2072] input: syz0 as /devices/virtual/input/input30 [ 50.274268][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.281319][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.307213][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.314285][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.337748][ T2059] veth0_vlan: entered promiscuous mode [ 50.349977][ T2059] veth1_macvtap: entered promiscuous mode [ 50.409697][ T2091] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.530210][ T2102] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 50.581295][ T2104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.611534][ T2108] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.850553][ T2113] input: syz1 as /devices/virtual/input/input31 [ 50.869622][ T36] audit: type=1326 audit(1750398561.620:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2114 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883758e929 code=0x7ffc0000 [ 50.919189][ T2113] input: syz0 as /devices/virtual/input/input32 [ 50.927462][ T36] audit: type=1326 audit(1750398561.640:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2114 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883758e929 code=0x7ffc0000 [ 50.977175][ T36] audit: type=1326 audit(1750398561.640:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2114 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f883758e929 code=0x7ffc0000 [ 51.024675][ T36] audit: type=1326 audit(1750398561.650:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2114 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883758e929 code=0x7ffc0000 [ 51.074143][ T36] audit: type=1326 audit(1750398561.650:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2114 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883758e929 code=0x7ffc0000 [ 51.121760][ T36] audit: type=1326 audit(1750398561.650:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2114 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f883758e929 code=0x7ffc0000 [ 51.205015][ T36] audit: type=1326 audit(1750398561.650:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2114 comm="syz.1.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883758e929 code=0x7ffc0000 [ 51.210694][ T2122] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 51.281474][ T2121] binder: Bad value for 'max' [ 51.296458][ T2122] rust_binder: Write failure EINVAL in pid:15 [ 51.358263][ T2132] binder: Unknown parameter 'nXI' [ 51.400735][ T2136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.413355][ T2137] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.425276][ T2136] rust_binder: Error while translating object. [ 51.432011][ T2137] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.438273][ T2136] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 51.448089][ T2137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 51.458546][ T2136] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:120 [ 51.468220][ T2136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.504180][ T2137] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 4096) [ 51.504205][ T2137] rust_binder: Error while translating object. [ 51.538495][ T2137] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.558446][ T2137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 51.759372][ T2154] cgroup: fork rejected by pids controller in /syz4 [ 51.989066][ T2210] tun0: tun_chr_ioctl cmd 1074025675 [ 52.014157][ T2210] tun0: persist disabled [ 52.271479][ T59] Bluetooth: hci0: Frame reassembly failed (-84) [ 52.363409][ T36] kauditd_printk_skb: 71 callbacks suppressed [ 52.363424][ T36] audit: type=1400 audit(1750398563.110:306): avc: denied { read write } for pid=2059 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 52.393552][ T36] audit: type=1400 audit(1750398563.110:307): avc: denied { read } for pid=2274 comm="syz.1.610" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 52.416289][ T36] audit: type=1400 audit(1750398563.120:308): avc: denied { read } for pid=2274 comm="syz.1.610" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 52.439009][ T36] audit: type=1326 audit(1750398563.120:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2274 comm="syz.1.610" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f883758e929 code=0x0 [ 52.461683][ T36] audit: type=1400 audit(1750398563.180:310): avc: denied { read } for pid=2274 comm="syz.1.610" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 52.585681][ T36] audit: type=1400 audit(1750398563.330:311): avc: denied { read write } for pid=1620 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 52.610226][ T36] audit: type=1400 audit(1750398563.340:312): avc: denied { read } for pid=2277 comm="syz.4.611" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 52.633073][ T36] audit: type=1400 audit(1750398563.350:313): avc: denied { read write } for pid=1620 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 52.658440][ T36] audit: type=1400 audit(1750398563.360:314): avc: denied { read } for pid=2279 comm="syz.4.612" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 52.681141][ T36] audit: type=1400 audit(1750398563.360:315): avc: denied { read } for pid=2279 comm="syz.4.612" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 52.914262][ T2338] kernel profiling enabled (shift: 63) [ 52.919801][ T2338] profiling shift: 63 too large [ 52.982949][ T2355] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 53.014678][ T2364] kernel profiling enabled (shift: 63) [ 53.020188][ T2364] profiling shift: 63 too large [ 53.298212][ T2449] block device autoloading is deprecated and will be removed. [ 53.305828][ T2449] syz.4.672: attempt to access beyond end of device [ 53.305828][ T2449] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 54.328097][ T2576] syz.1.718: attempt to access beyond end of device [ 54.328097][ T2576] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 54.329052][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.347130][ T556] Bluetooth: hci0: command 0x1003 tx timeout [ 54.740933][ T2628] cgroup: fork rejected by pids controller in /syz2 [ 55.604488][ T2895] binfmt_misc: register: failed to install interpreter file ./file0 [ 57.503252][ T36] kauditd_printk_skb: 1789 callbacks suppressed [ 57.503267][ T36] audit: type=1400 audit(1750398568.260:2105): avc: denied { read write } for pid=1620 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 57.533645][ T36] audit: type=1400 audit(1750398568.260:2106): avc: denied { read } for pid=3235 comm="syz.4.937" name="binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 57.556259][ T36] audit: type=1400 audit(1750398568.260:2107): avc: denied { read write } for pid=1620 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 57.573410][ T3246] syz.4.942: attempt to access beyond end of device [ 57.573410][ T3246] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 57.580459][ T36] audit: type=1400 audit(1750398568.260:2108): avc: denied { read } for pid=3237 comm="syz.4.938" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 57.615918][ T36] audit: type=1400 audit(1750398568.260:2109): avc: denied { read } for pid=3237 comm="syz.4.938" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 57.638533][ T36] audit: type=1400 audit(1750398568.260:2110): avc: denied { read write } for pid=1620 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 57.645946][ T3260] audit: audit_backlog=65 > audit_backlog_limit=64 [ 57.663028][ T36] audit: type=1400 audit(1750398568.260:2111): avc: denied { read } for pid=3239 comm="syz.4.939" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 57.669776][ T3260] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 57.691641][ T36] audit: type=1400 audit(1750398568.260:2112): avc: denied { read } for pid=3239 comm="syz.4.939" name="binder0" dev="binder" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 58.870517][ T3494] can0: slcan on ttyS3. [ 58.910186][ T3494] can0 (unregistered): slcan off ttyS3. [ 59.953134][ T3590] can0: slcan on ttyS3. [ 60.074745][ T3581] can0 (unregistered): slcan off ttyS3. [ 61.019799][ T3705] tun0: tun_chr_ioctl cmd 1074025675 [ 61.035560][ T3705] tun0: persist enabled [ 61.047669][ T3705] tun0: tun_chr_ioctl cmd 1074025675 [ 61.065767][ T3705] tun0: persist enabled [ 61.100288][ T3705] tun0: tun_chr_ioctl cmd 1074025675 [ 61.114191][ T3705] tun0: persist disabled [ 62.509293][ T36] kauditd_printk_skb: 16449 callbacks suppressed [ 62.509309][ T36] audit: type=1400 audit(1750398573.260:18561): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 62.547969][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 62.555672][ T149] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 62.559218][ T3898] audit: audit_backlog=65 > audit_backlog_limit=64 [ 62.563766][ T149] audit: backlog limit exceeded [ 62.571988][ T1040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 62.574915][ T36] audit: type=1400 audit(1750398573.270:18562): avc: denied { read write } for pid=1620 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 62.606001][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 62.611310][ T1040] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 62.613599][ T149] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 66.112985][ T4299] binfmt_misc: register: failed to install interpreter file ./file0 [ 67.119493][ T4384] block device autoloading is deprecated and will be removed. [ 67.519035][ T36] kauditd_printk_skb: 32038 callbacks suppressed [ 67.519051][ T36] audit: type=1400 audit(1750398578.260:49733): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 67.524005][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 67.525403][ T36] audit: type=1400 audit(1750398578.260:49734): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 67.555136][ T1620] audit: audit_backlog=65 > audit_backlog_limit=64 [ 67.575254][ T1040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 67.597099][ T149] audit: audit_lost=294 audit_rate_limit=0 audit_backlog_limit=64 [ 67.597792][ T4448] audit: audit_backlog=65 > audit_backlog_limit=64 [ 67.615068][ T149] audit: backlog limit exceeded [ 67.617098][ T292] audit: audit_backlog=65 > audit_backlog_limit=64 [ 67.621078][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 68.702394][ T4635] tap0: tun_chr_ioctl cmd 2148553947 [ 71.259445][ T13] bridge_slave_1: left allmulticast mode [ 71.265207][ T13] bridge_slave_1: left promiscuous mode [ 71.271152][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.282359][ T13] bridge_slave_0: left allmulticast mode [ 71.288001][ T13] bridge_slave_0: left promiscuous mode [ 71.309069][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.500282][ T13] veth1_macvtap: left promiscuous mode [ 71.506027][ T13] veth0_vlan: left promiscuous mode [ 72.529047][ T36] kauditd_printk_skb: 37564 callbacks suppressed [ 72.529063][ T36] audit: type=1400 audit(1750398583.280:86224): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 72.556649][ T36] audit: type=1400 audit(1750398583.280:86225): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 72.577940][ T36] audit: type=1400 audit(1750398583.280:86226): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 72.599008][ T36] audit: type=1400 audit(1750398583.280:86227): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 72.602116][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 72.620043][ T36] audit: type=1400 audit(1750398583.280:86228): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 72.626960][ T149] audit: audit_lost=655 audit_rate_limit=0 audit_backlog_limit=64 [ 72.647506][ T36] audit: type=1400 audit(1750398583.280:86229): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 72.655321][ T149] audit: backlog limit exceeded [ 72.655682][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 77.539035][ T36] kauditd_printk_skb: 58722 callbacks suppressed [ 77.539051][ T36] audit: type=1400 audit(1750398588.280:144950): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 77.566710][ T36] audit: type=1400 audit(1750398588.290:144951): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 77.588133][ T36] audit: type=1400 audit(1750398588.290:144952): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 77.609529][ T36] audit: type=1400 audit(1750398588.290:144953): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 77.612314][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 77.630668][ T36] audit: type=1400 audit(1750398588.290:144954): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 77.630692][ T36] audit: type=1400 audit(1750398588.290:144955): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 77.630710][ T36] audit: type=1400 audit(1750398588.290:144956): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 77.630727][ T36] audit: type=1400 audit(1750398588.290:144957): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 77.630748][ T36] audit: type=1400 audit(1750398588.290:144958): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 82.549035][ T36] kauditd_printk_skb: 59188 callbacks suppressed [ 82.549051][ T36] audit: type=1400 audit(1750398593.290:204145): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 82.576823][ T36] audit: type=1400 audit(1750398593.300:204146): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 82.598157][ T36] audit: type=1400 audit(1750398593.300:204147): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 82.619545][ T36] audit: type=1400 audit(1750398593.300:204148): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 82.640903][ T36] audit: type=1400 audit(1750398593.300:204149): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 82.662254][ T36] audit: type=1400 audit(1750398593.300:204150): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 82.662425][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 82.683432][ T36] audit: type=1400 audit(1750398593.300:204151): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 82.690294][ T149] audit: audit_lost=658 audit_rate_limit=0 audit_backlog_limit=64 [ 82.711055][ T36] audit: type=1400 audit(1750398593.300:204152): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 87.558987][ T36] kauditd_printk_skb: 60394 callbacks suppressed [ 87.559004][ T36] audit: type=1400 audit(1750398598.300:263952): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 87.586660][ T36] audit: type=1400 audit(1750398598.310:263953): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 87.592245][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.607773][ T36] audit: type=1400 audit(1750398598.310:263954): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 87.614279][ T149] audit: audit_lost=857 audit_rate_limit=0 audit_backlog_limit=64 [ 87.635784][ T36] audit: type=1400 audit(1750398598.310:263955): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 87.643286][ T149] audit: backlog limit exceeded [ 87.664284][ T36] audit: type=1400 audit(1750398598.310:263956): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 87.669894][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.690205][ T36] audit: type=1400 audit(1750398598.310:263957): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 92.569094][ T36] kauditd_printk_skb: 59029 callbacks suppressed [ 92.569134][ T36] audit: type=1400 audit(1750398603.320:321014): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 92.596747][ T36] audit: type=1400 audit(1750398603.320:321015): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 92.618292][ T36] audit: type=1400 audit(1750398603.320:321016): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 92.639618][ T36] audit: type=1400 audit(1750398603.320:321017): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 92.661174][ T36] audit: type=1400 audit(1750398603.320:321018): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 92.682507][ T36] audit: type=1400 audit(1750398603.320:321019): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 92.682822][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 92.703729][ T36] audit: type=1400 audit(1750398603.320:321020): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 92.710548][ T149] audit: audit_lost=1516 audit_rate_limit=0 audit_backlog_limit=64 [ 92.731502][ T36] audit: type=1400 audit(1750398603.320:321021): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 92.850123][ T13] bridge_slave_1: left allmulticast mode [ 92.855773][ T13] bridge_slave_1: left promiscuous mode [ 92.861634][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.869701][ T13] bridge_slave_0: left allmulticast mode [ 92.875689][ T13] bridge_slave_0: left promiscuous mode [ 92.881685][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.890241][ T13] bridge_slave_1: left allmulticast mode [ 92.896121][ T13] bridge_slave_1: left promiscuous mode [ 92.902012][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.909656][ T13] bridge_slave_0: left allmulticast mode [ 92.915607][ T13] bridge_slave_0: left promiscuous mode [ 92.921575][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.929642][ T13] bridge_slave_1: left allmulticast mode [ 92.935546][ T13] bridge_slave_1: left promiscuous mode [ 92.941458][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.949409][ T13] bridge_slave_0: left allmulticast mode [ 92.955355][ T13] bridge_slave_0: left promiscuous mode [ 92.961277][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.521931][ T13] veth1_macvtap: left promiscuous mode [ 93.527701][ T13] veth0_vlan: left promiscuous mode [ 93.533146][ T13] veth1_macvtap: left promiscuous mode [ 93.538609][ T13] veth0_vlan: left promiscuous mode [ 93.544436][ T13] veth1_macvtap: left promiscuous mode [ 93.550234][ T13] veth0_vlan: left promiscuous mode [ 97.578999][ T36] kauditd_printk_skb: 59465 callbacks suppressed [ 97.579014][ T36] audit: type=1400 audit(1750398608.320:379802): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 97.606735][ T36] audit: type=1400 audit(1750398608.330:379803): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 97.628188][ T36] audit: type=1400 audit(1750398608.330:379804): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 97.649574][ T36] audit: type=1400 audit(1750398608.330:379805): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 97.670879][ T36] audit: type=1400 audit(1750398608.330:379806): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 97.692249][ T36] audit: type=1400 audit(1750398608.330:379807): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 97.692665][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 97.713506][ T36] audit: type=1400 audit(1750398608.330:379808): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 97.720234][ T149] audit: audit_lost=1745 audit_rate_limit=0 audit_backlog_limit=64 [ 97.741064][ T36] audit: type=1400 audit(1750398608.330:379809): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 102.588986][ T36] kauditd_printk_skb: 61243 callbacks suppressed [ 102.589003][ T36] audit: type=1400 audit(1750398613.330:440986): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 102.616627][ T36] audit: type=1400 audit(1750398613.340:440987): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 102.638033][ T36] audit: type=1400 audit(1750398613.340:440988): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 102.659321][ T36] audit: type=1400 audit(1750398613.340:440989): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 102.680711][ T36] audit: type=1400 audit(1750398613.340:440990): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 102.702047][ T36] audit: type=1400 audit(1750398613.340:440991): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 102.702456][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 102.723265][ T36] audit: type=1400 audit(1750398613.340:440992): avc: denied { read } for pid=149 comm="dhcp