last executing test programs: 1.914828031s ago: executing program 1 (id=871): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) close(r0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x296, 0x0, 0x1}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xc9, 0x0, 0xc}) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xc9, 0x0, 0xc}) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) (async) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000440)={[0x0, 0xff, 0xfffffffffffffffd, 0x0, 0x10000, 0x1, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000006c0)={{0x100000, 0x4, 0xc, 0x7, 0xb, 0x35, 0x0, 0x81, 0x0, 0x7f, 0xc, 0x8}, {0xeeee8000, 0x1000, 0x7, 0x8, 0x0, 0x2, 0x2, 0x7, 0x4, 0xff, 0x8, 0x2}, {0x100000, 0x0, 0x3, 0x5, 0x8, 0x1, 0x3, 0x9, 0x2, 0xff, 0x4, 0xff}, {0x1000, 0xeeef0000, 0xf, 0x5, 0xc, 0xa4, 0xb, 0x6d, 0x9, 0x1, 0x3, 0x80}, {0xdddd0000, 0x100000, 0xb, 0xf, 0x1, 0x9, 0xa6, 0x80, 0x5, 0x9, 0x8, 0x3}, {0xf000, 0x8000000, 0xd, 0x1, 0x7, 0x88, 0xf, 0x4, 0x7, 0x3, 0x3, 0x8}, {0x8000000, 0xffff1000, 0x0, 0x40, 0xf9, 0x8, 0x4, 0x6, 0x3, 0x83, 0x9b, 0x4}, {0x7d46bc715e501fe, 0x100000, 0x8, 0x3, 0x2, 0x5, 0x7, 0x1c, 0x9, 0x7, 0x3, 0x5}, {0x4}, {0x100000}, 0x1, 0x0, 0x2000, 0x80, 0x3, 0x2000, 0xf000, [0x100, 0x9, 0xf28, 0x200]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r11 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r11, &(0x7f0000000040)=@access={'system_u:object_r:ld_so_cache_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xfffffffffffffffd}, 0x48) (async) write$selinux_create(r11, &(0x7f0000000040)=@access={'system_u:object_r:ld_so_cache_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xfffffffffffffffd}, 0x48) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000140)={0xffffffff, 0xfffdb56e, 0xe14, 0x6, 0x7f}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) 1.652229435s ago: executing program 1 (id=875): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001640)={0x41, 0x0, 0x0, 0xa2, 0x0, &(0x7f0000000100)="2e872ecf9feef474253f5f8361fb433b0f3abf464de0dbbdbb5d046ca151e5ce0952d0e2440fdf0c089f00576056b4d0dab2f029ed2e37765f6a06665130f1deefc02b00000000d5a3f68c6d3bb7889ed9f103b66ac40ea3dad6d199a741c4b326ae4e5e90c63905c9fb7accff6ef379e4947b3d425217dc145eb6b92c1503e9982e723885af789f1290ed2d2250c7ac93aba4289538d4d09b4d5ba987a86a3ee461"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007401"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x3e, 0xfeb, 0x8cc, 0x5, 0xe, "3d980d311bf76259765fafda57afca538770fd"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8804"]) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000007, 0x30, r7, 0x4fd1b000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x226002, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xa4) write$vga_arbiter(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="6f00eeec579b4c480b856e"], 0xb) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x109802, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000003c0)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000380)={0x54, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r10}, @ptr={0x70742a85, 0x2, &(0x7f0000000240)=""/13, 0xd, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x2) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x5) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000580)={{0x1, 0x6000, 0xa, 0x3, 0xa0, 0x4c, 0x0, 0x5, 0x1, 0xd, 0x9a, 0x1}, {0x80a0000, 0xd000, 0xa, 0x6, 0x21, 0xf1, 0x8, 0x4, 0x2a, 0xc, 0x6, 0x7}, {0xd000, 0x3000, 0x0, 0x5, 0x4, 0xc, 0x9, 0x4, 0x6, 0x75, 0xa9, 0x3e}, {0x6000, 0x10000, 0x9, 0xce, 0xe9, 0x9, 0x2, 0x80, 0x5, 0x2, 0x80, 0x3}, {0xf000, 0xd000, 0xf, 0x0, 0x2, 0x6, 0x8, 0x9, 0x2, 0xb, 0x8, 0x2}, {0x8080000, 0x4000, 0x10, 0x7, 0x3, 0xfc, 0x1, 0xc, 0x0, 0x6, 0xfe, 0x3}, {0x10000, 0x8000000, 0x8, 0x6, 0x6, 0x7, 0xf0, 0x7, 0x8, 0x7f, 0xb5, 0x3}, {0x0, 0x0, 0xd, 0x7, 0xc0, 0x5, 0x3, 0x5, 0x4, 0x1, 0x81}, {0xdddd0000, 0x2}, {0x10000, 0x2f}, 0x5000a, 0x0, 0x3000, 0x0, 0x6, 0x0, 0xeca9d317ba6565c1, [0x6e, 0xc6, 0x0, 0x80000000]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) 1.467977328s ago: executing program 1 (id=879): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000e, 0x80010, 0xffffffffffffffff, 0x7895b000) read(0xffffffffffffffff, 0x0, 0x5b) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) mmap(&(0x7f00007d4000/0xd000)=nil, 0xd000, 0x2000006, 0x13, r0, 0x25fea000) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000005, 0x11, r1, 0x8ae9b000) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000140)) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xcd, 0x0, 0xfffffffffffffffe}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x619, 0x0, 0x9}]}) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f00000005c0)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f0000000640)=@attr_other={0x0, 0x1, 0x0, 0x0}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) 1.467217648s ago: executing program 3 (id=880): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x6200, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10010, 0xffffffffffffffff, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b40), 0x800, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000180)=ANY=[@ANYBLOB="b8f70000"]) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) (async) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f00000001c0)={0x1ff, 0x1c0, 0x100, &(0x7f0000000d00)=[0xe0b, 0x8e0, 0xffffffffffff7b3b, 0x3ff, 0xfffffffffffffffd, 0x7, 0x0, 0x8, 0x0, 0xd, 0x2, 0x7, 0x9, 0x8000000000000000, 0xfffffffffffeffff, 0x0, 0x7ff, 0x3, 0x4, 0x4, 0x9, 0x5, 0x113b041f800000, 0x5, 0x8, 0x3, 0x77fbebcd, 0x6, 0x81, 0xffffffff80000001, 0x3, 0x3, 0x1, 0x6, 0x5809, 0x8, 0x7fffffffffffffff, 0xb2, 0x1, 0x8, 0x0, 0x1000, 0x9a, 0x2, 0xfffffffffffffffa, 0x1, 0xff, 0x1, 0xd, 0x8, 0xd6, 0x7, 0x8, 0x6, 0xc, 0x8, 0x5, 0x7, 0x80000001, 0xc0, 0x800, 0x4, 0x7, 0x1464, 0x2, 0x9, 0x1, 0x511, 0x90, 0x9, 0x8, 0x9, 0xb, 0x604, 0x9, 0xfff, 0x3, 0x4, 0x3b, 0x4, 0x5, 0x3a31, 0xffffffffffffff67, 0x67, 0x1a, 0x6, 0x1, 0x3, 0xfe6, 0xa, 0x3, 0x3, 0x1ff, 0xa79, 0x8, 0x8, 0x3, 0x0, 0xffffffffffffff7f, 0x7bf, 0x5, 0xfffffffffffffff7, 0x7, 0x100000000, 0x7, 0x5, 0x8, 0x101, 0x2, 0x1b2, 0x4, 0x6, 0xcea8, 0x3ff, 0xd, 0x9be9, 0x8, 0x8, 0x3, 0x2ac2, 0xdc92, 0x0, 0xffffffffffff2522, 0xfffffffffffffffa, 0xea, 0x5, 0xf, 0x3]}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x4, 0x7, 0xd, 0xb9, 0x0, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x4, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0x1, 0x202}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000000c0)={0x2712, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) 1.30487363s ago: executing program 3 (id=883): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$TUNGETDEVNETNS(r4, 0xff09, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="01"]) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r9, 0x400454ca, &(0x7f0000000100)=ANY=[]) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x2}, {0x5002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x46, 0xe, 0x0, 0x3}, {0x8080000}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x3, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0x9}, {0x0, 0x0, 0x0, 0x82, 0x1, 0x0, 0x0, 0xe}, {0x6000, 0x8000}, {0x1, 0xfffe}, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1.177974782s ago: executing program 1 (id=886): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x8010aebc, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f00000001c0)) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000380)={0x2, 0x29000, 0x1}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000000)={0x7}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0xfffffffffffffffe) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4018aee2, &(0x7f0000000080)) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r7, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r10 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x10000, 0x0, 0x4002004c4, 0x1002, 0x0, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9], 0xeeee8000, 0x2000d0}) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0400000000000000160900000000000009000000000000009c010000000000000200000000000000f0020000000000000700000008000000850500000000000003"]) 1.042991584s ago: executing program 3 (id=887): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x4100c0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x8) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000040)) ioctl$FIOCLEX(r0, 0x5451) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) 1.009101235s ago: executing program 3 (id=889): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) 936.655176ms ago: executing program 3 (id=890): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) write(r0, &(0x7f0000000200)="bbdb99c61248df71810108f767558c13b44b5ad388fb9010bf5e6c172ba23e9923d36e85a61562641967f07350c5106cef2f5f7521480ed9bb21e3aad8044a0229fe79b5ebce0ec53ff51b7bb71c7ef63354a141a1175a5d73838de92212b50415851acc8cffa6d14d4982b957e8021f5eb8afd1a57f8fd33be3a7829ac14e2d19e069c73f6ff392d38c0174e2891c6c0ae8df5338d8", 0x96) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009700)='/sys/kernel/oops_count', 0x40, 0x2) prctl$PR_SET_MM_EXE_FILE(0x39, 0xd, 0xffffffffffffffff) (async) prctl$PR_SET_MM_EXE_FILE(0x39, 0xd, 0xffffffffffffffff) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="4e25470e0d2b9b6ffeea2ceb0d58531544b2dbd3258526b04296147105b66c057a4c50150000b78f73e64cbefb65969ca2a2965a1908da1adfd523289a395ea47e364bd299ee59ae5c03d70c"]) read$FUSE(r1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r6, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0x0, [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xeae2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x317, 0x0, 0x0, 0xfff, 0x71f], [0x0, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wake_unlock', 0x141882, 0x193) write(r7, &(0x7f0000001600)="d93f", 0x2) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) write$uinput_user_dev(r6, &(0x7f0000000380)={'syz0\x00', {0x1, 0xffff, 0x3, 0x2}, 0x1d, [0x5, 0x9, 0x6, 0x6, 0xff, 0x5, 0xfffffe00, 0x10000, 0x101, 0x9, 0xf31, 0x8, 0x6, 0x4, 0x5, 0x96, 0x4, 0x400, 0x1, 0xfffffffd, 0x8000, 0x5, 0x3, 0x1, 0x7, 0x7, 0x6d6e, 0x33, 0x1, 0xfffffe7d, 0x7, 0xffff, 0xffff0000, 0x3ff, 0xc7, 0xfffffff5, 0x4, 0x0, 0x8, 0x6, 0x7fffffff, 0x0, 0x95ea, 0x8, 0x984, 0x5f, 0x6, 0x7ff, 0x6, 0xf79, 0x6, 0xb, 0x8, 0x7fffffff, 0xfffffffa, 0x7ff, 0x7, 0xd, 0x401, 0x5, 0x2, 0x0, 0x3ff, 0x800], [0x3, 0x6, 0x59a, 0x24, 0x3, 0x0, 0x1, 0x7, 0xd7, 0x6, 0x9ad, 0x4, 0x9, 0xfff, 0x0, 0x8, 0x2, 0x1, 0x3, 0x7fffffff, 0xfffffff7, 0x7f, 0x7, 0x4, 0x8001, 0x4, 0x8, 0x2, 0x9, 0xfffffff8, 0x401, 0xfffffff9, 0x3, 0x2, 0x6, 0xe, 0xfe88, 0x5, 0x7fffffff, 0xfff, 0x1, 0x2, 0x6, 0x5, 0x5, 0xfffffff9, 0x1, 0x0, 0xfffffffb, 0x1000, 0x972e, 0x3ba4, 0x6d, 0x9, 0x8001, 0x6, 0x7, 0x4, 0x6, 0x800, 0x9, 0x4, 0x6, 0x6], [0x186, 0x8001, 0x10001, 0x4, 0x8, 0x10, 0x80000001, 0x9, 0x8b, 0x7, 0x1, 0x425, 0x3acb, 0x1000, 0x600, 0x80, 0xfffffff9, 0x5, 0x0, 0x55, 0x4, 0xfffffff9, 0xd, 0x3, 0x79, 0x6, 0xbfbef4b, 0xc0, 0xb, 0x81, 0x3, 0x3, 0x9, 0x4, 0x41988d7b, 0x1, 0xfffffffb, 0x2, 0x89, 0x1, 0x9, 0x7ff, 0x0, 0x7, 0x3, 0xfffffff7, 0x6, 0x8, 0x1, 0xff, 0x0, 0xe, 0x3, 0x800, 0x9, 0x4, 0x9858, 0x7fffffff, 0x6, 0x4, 0x1000, 0x40, 0x12, 0xc], [0x8001, 0x2, 0xb3d, 0x4, 0x3ff, 0x3, 0x928a, 0xa9, 0xf8, 0x6, 0x1, 0x7, 0x10000, 0x80000000, 0xffffffff, 0x1, 0xfffffff8, 0x6, 0x6, 0x2, 0x101, 0x64, 0x2, 0x80000001, 0xfff, 0x8, 0x9, 0xc, 0x3, 0x2, 0xd, 0xf59, 0x4, 0x101, 0x0, 0x8, 0x7b87, 0xffffffff, 0x5, 0xad68, 0x5, 0x7fffffff, 0x8, 0x0, 0x88000000, 0x366, 0x6, 0x7ff, 0x47, 0xfffffffb, 0xfffffffb, 0x641e, 0x9, 0x6, 0xffffd837, 0x1, 0x3, 0x2, 0xffffffff, 0x7ff, 0x9, 0x10001, 0x5, 0x5]}, 0x45c) (async) write$uinput_user_dev(r6, &(0x7f0000000380)={'syz0\x00', {0x1, 0xffff, 0x3, 0x2}, 0x1d, [0x5, 0x9, 0x6, 0x6, 0xff, 0x5, 0xfffffe00, 0x10000, 0x101, 0x9, 0xf31, 0x8, 0x6, 0x4, 0x5, 0x96, 0x4, 0x400, 0x1, 0xfffffffd, 0x8000, 0x5, 0x3, 0x1, 0x7, 0x7, 0x6d6e, 0x33, 0x1, 0xfffffe7d, 0x7, 0xffff, 0xffff0000, 0x3ff, 0xc7, 0xfffffff5, 0x4, 0x0, 0x8, 0x6, 0x7fffffff, 0x0, 0x95ea, 0x8, 0x984, 0x5f, 0x6, 0x7ff, 0x6, 0xf79, 0x6, 0xb, 0x8, 0x7fffffff, 0xfffffffa, 0x7ff, 0x7, 0xd, 0x401, 0x5, 0x2, 0x0, 0x3ff, 0x800], [0x3, 0x6, 0x59a, 0x24, 0x3, 0x0, 0x1, 0x7, 0xd7, 0x6, 0x9ad, 0x4, 0x9, 0xfff, 0x0, 0x8, 0x2, 0x1, 0x3, 0x7fffffff, 0xfffffff7, 0x7f, 0x7, 0x4, 0x8001, 0x4, 0x8, 0x2, 0x9, 0xfffffff8, 0x401, 0xfffffff9, 0x3, 0x2, 0x6, 0xe, 0xfe88, 0x5, 0x7fffffff, 0xfff, 0x1, 0x2, 0x6, 0x5, 0x5, 0xfffffff9, 0x1, 0x0, 0xfffffffb, 0x1000, 0x972e, 0x3ba4, 0x6d, 0x9, 0x8001, 0x6, 0x7, 0x4, 0x6, 0x800, 0x9, 0x4, 0x6, 0x6], [0x186, 0x8001, 0x10001, 0x4, 0x8, 0x10, 0x80000001, 0x9, 0x8b, 0x7, 0x1, 0x425, 0x3acb, 0x1000, 0x600, 0x80, 0xfffffff9, 0x5, 0x0, 0x55, 0x4, 0xfffffff9, 0xd, 0x3, 0x79, 0x6, 0xbfbef4b, 0xc0, 0xb, 0x81, 0x3, 0x3, 0x9, 0x4, 0x41988d7b, 0x1, 0xfffffffb, 0x2, 0x89, 0x1, 0x9, 0x7ff, 0x0, 0x7, 0x3, 0xfffffff7, 0x6, 0x8, 0x1, 0xff, 0x0, 0xe, 0x3, 0x800, 0x9, 0x4, 0x9858, 0x7fffffff, 0x6, 0x4, 0x1000, 0x40, 0x12, 0xc], [0x8001, 0x2, 0xb3d, 0x4, 0x3ff, 0x3, 0x928a, 0xa9, 0xf8, 0x6, 0x1, 0x7, 0x10000, 0x80000000, 0xffffffff, 0x1, 0xfffffff8, 0x6, 0x6, 0x2, 0x101, 0x64, 0x2, 0x80000001, 0xfff, 0x8, 0x9, 0xc, 0x3, 0x2, 0xd, 0xf59, 0x4, 0x101, 0x0, 0x8, 0x7b87, 0xffffffff, 0x5, 0xad68, 0x5, 0x7fffffff, 0x8, 0x0, 0x88000000, 0x366, 0x6, 0x7ff, 0x47, 0xfffffffb, 0xfffffffb, 0x641e, 0x9, 0x6, 0xffffd837, 0x1, 0x3, 0x2, 0xffffffff, 0x7ff, 0x9, 0x10001, 0x5, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 858.871327ms ago: executing program 2 (id=891): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0xfe76000) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0xfe76000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000840)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQeDM\x19\x1a@\xbd\xfc\"\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xfa\xa6c\x03\x13\xf5o\xa2\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x02\x00\x00\x00\x00\x00\x00\x00\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xce\xd3\xe2\t\xd5yr=\xd4M\xe2\xc5\xda<\xa5\xd5\x17\x10\xf7(\xde1\xe8\xdc%\xc0\xbe\x7f7\xdb\x85[\xac\x8d\x8d\xe2l\xbdGK\xbd') mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000080)=ANY=[@ANYBLOB="f2c67705301352a5446ca690ccd12b57390400000000000000871f12a2532ac667e815f70dead2669a9250fc861feeac6310102d3bf77ff8541ed5a30e3cc1eada46557daae28aa540365bbe956a81544433e8866bd6782cffdd21f2727d9a76acc6910b4211"]) 838.880547ms ago: executing program 2 (id=892): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) read(r3, &(0x7f0000000100)=""/29, 0x1d) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 808.062658ms ago: executing program 3 (id=893): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x52, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x408001, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@arm64={0x2, 0x8, 0x2, '\x00', 0x8005}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x5, 0x0, [{0x391, 0x0, 0x6}, {0xb7b, 0x0, 0x7}, {0xa8e, 0x0, 0xff}, {0x840, 0x0, 0x3}, {0xa3d, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x43, 0xda1, 0x8, 0x2004cb, 0x0, 0x100001000000, 0xfffffffffffffffe, 0x1, 0x8000, 0x3], 0x3000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil, 0xbcaaf1788315a778, &(0x7f0000000140)='\x9a\xb5\xbe1\x9cMP\xae\x93\x10\xb0\xcfv\xac\xdd\"\xd65\x01 \xef\x10\xd6%\xf4`cq\x1ddG\xd4BN\x15\xdaX\x03\xdc\xe9;hxX\xa1\xe7\xa3\rZ,\xbb\n\x92K\xd6\xc8\xf2\x97F&\xe0\xd3\xd3\x11 Y\x04\x82\x1a\xe5\x8d\xf4\xf1\xc7\x8eL\x03O\x9b\xf4\xa7\x04\n\xbc&\x1b\x88?\\~n*\x02\xef\xce\xe4\x9a|\xe1n\x86\x93\x92\xed\xc1\x1bv1\xbd\x85\xd1\xdbv>\x99\x82\x19\xf3\xe6\x17\'\xfc\x17\x8b\xf2\xba\xd8\xb2c\xeb\xffK\x9b\x1b\x0f\xf1\xa7[G\x89\xb7\x9dp#F1\x16\x8b\x11`\xcd[\x9c\xac\t)\xd8R\xc7\xac\xc8I?\xe4u\x8b\x81\xa3\xe4 \xfbt\xd5\\\x02\xab\x00E#o-v*\xff\xf0yTG\xca\'\xed.\x878\xc4\x81\x06\xe9\x7fL\xf6\xf0X\r\x1f\xaaq\xa5/\x91\xec\xc0,\x01Z\x91\xc3\x95\x14<\v>P\xe1\xff\x1d\x14\x9c\'\x95\x00\x00\x00\x00\xe6Jg\x8b\x85pT\x87\x89r\xd2\xafei\x84\x82O\xae\x80\xe2\xad\xac\xfa\xd8\xa4\xf6\x03\xb5\x18,\xc2\xae}\x11>\xce\xba\x8a0\a\x85g\xde\xde\xafT.\xa9V>o\xed\xca\xd6\xf0\x19\x90\xb4l\xff\x13\x14\xea;\x8f\x93wUoFE') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r6, 0x4068aea3, &(0x7f0000000040)={0xd5, 0x0, 0x1a}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000480)=ANY=[@ANYBLOB="060000000000000001000080090000000100000005000000090040e7000000008000000000000000000000000000000001"]) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r9, 0xae80, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x105000, 0x0) 748.647329ms ago: executing program 2 (id=895): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$vga_arbiter(r0, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2d64657669636573202b626c6b696f022b7069647320d2e70175098bc8c366081f37c6fcff75b8dd99e8bad7f1914e48c9fda37b7e9bb7d994956021abe0d7b7b4e4d17d31ef27a7a552d1612094e0f13e070208a9f6e9"], 0x16) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000340)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0xc, 0x0, &(0x7f0000000400)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, &(0x7f0000000500)}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x13, r5, 0xac6d4000) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0x6cf333}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 703.18801ms ago: executing program 2 (id=897): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6, 0x0, 0x0, 0x3}]}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000021c0)=[@dead_binder_done, @dead_binder_done, @request_death={0x400c630e, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={@fd, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd}, &(0x7f00000020c0)}}], 0xffffffffffffff95, 0x0, 0x0}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000240)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r2, 0x0, 0xffe3) r8 = openat$cgroup_int(r1, &(0x7f0000001180)='cpu.max.burst\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040), 0x12) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_PARENT(r9, 0xb702, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x1, 0x40}}, &(0x7f0000000280)={0x0, 0x18}}, 0x10}], 0x0, 0x0, 0x0}) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_INPUT(r10, &(0x7f0000000580)={0x8, {"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", 0x1000}}, 0x1006) 582.966971ms ago: executing program 0 (id=898): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x2}) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000001540), 0x40900, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x40187013, &(0x7f0000000140)={0x1, 0x0, {0x0, 0x0, 0x0, 0x15}}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x582, 0x0, 0x4348}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x52, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 439.581553ms ago: executing program 0 (id=899): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4602, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x132) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x1}) (async) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'veth1_to_team\x00', 0x400}) (async, rerun: 64) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x1060, 0x0, 0x0, 0x20000}) (rerun: 64) ioctl$BLKRRPART(r0, 0x125f, 0x0) 324.317355ms ago: executing program 2 (id=900): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000000)={[0xffffffffffffffff, 0x6, 0x0, 0xffff, 0x2, 0x0, 0xfff, 0x7, 0xfe, 0x8787, 0x0, 0x2, 0x81, 0x3, 0x400, 0x7], 0x2000, 0x2004}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000000c0)={0x190003, 0x0, [0x0, 0xfffffffffffffffa, 0xffffffffffffbdc1, 0x9, 0x400, 0x80000001, 0x373, 0x4]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0xd65b, 0x8, 0x4, 0x9, 0x3, 0x9, 0x1, 0x2, 0x1000, 0x200, 0x88b0, 0x1, 0x6, 0x1, 0x6d, 0xffffffffffffffff], 0xcccc4000, 0x11}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x4, 0x8, 0x3, 0x9, 0xb, 0x7, 0x3, 0xf00f51, 0x4, 0x10000, 0xb, 0x5, 0x4, 0x3, 0x2b52a51c, 0x4], 0xeeee8000, 0x200}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x20003, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000300)=0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x7b5b) ioctl$KVM_RUN(r1, 0xae80, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4010, r3, 0xf9074000) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)={'b', ' *:* ', 'rm\x00'}, 0x9) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000380)={{0xf7f76000, 0xdddd0000, 0x9, 0x0, 0x4, 0x1c, 0x5, 0x2, 0x2, 0x0, 0x40, 0x7}, {0x100000, 0x100000, 0x3, 0x1, 0x5, 0x5, 0x2, 0x4, 0x3, 0x5, 0x3f, 0x5}, {0xdddd1000, 0xdddd0000, 0x3, 0x6, 0x32, 0x6, 0x8, 0x9, 0x2, 0x8, 0x4, 0xc2}, {0x2, 0x100000, 0xf, 0x9, 0x2, 0x6, 0x4, 0x9, 0x11, 0x4, 0x0, 0x5}, {0x2000, 0xf000, 0x4, 0x2, 0xd7, 0x6, 0x4b, 0x3, 0x6, 0x4, 0x7, 0x86}, {0xdddd1000, 0xeeee8000, 0xa, 0x0, 0x7f, 0x0, 0xb, 0x1, 0x40, 0xf, 0xa}, {0x100000, 0xf000, 0xf, 0x0, 0xef, 0xf9, 0xac, 0x0, 0x1, 0xff, 0x1, 0x1f}, {0x4000, 0x1001, 0xf, 0x6, 0x4, 0x1, 0xe, 0x81, 0xa0, 0x9, 0x2, 0x9}, {0x100000, 0x5}, {0xdddd0000}, 0x40050023, 0x0, 0x5000, 0x2, 0x6, 0x100, 0x80a0000, [0x5, 0x1, 0x3, 0xc]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000004c0)={0x2710, 0x6, 0xf000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000500)={0x2, 0x0, [0x2, 0x8000000000000000, 0x200000, 0x80000, 0x24, 0x4, 0x5d, 0x9]}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x10, r1, 0xa921f000) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000580)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000006c0)={0x10004, 0x3, 0x2000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000700)={0x1, 0x0, @ioapic={0x80a0000, 0x6, 0xa, 0x5, 0x0, [{0x8, 0xdd, 0x9, '\x00', 0x3}, {0x2e, 0x2, 0x44, '\x00', 0x9}, {0x4, 0xf, 0x9, '\x00', 0xa3}, {0x9, 0x2, 0x16, '\x00', 0xfd}, {0x6, 0x5, 0x2, '\x00', 0xda}, {0xa, 0x2, 0xc, '\x00', 0x9}, {0x1, 0x1, 0x7, '\x00', 0x80}, {0xfa, 0x4, 0x5, '\x00', 0x45}, {0x0, 0x2, 0x6, '\x00', 0xf}, {0x7e, 0xc, 0x8, '\x00', 0x4}, {0x8, 0x9, 0x2, '\x00', 0x1}, {0xe, 0x7, 0x8, '\x00', 0x6}, {0x9, 0x5, 0x3, '\x00', 0x7}, {0x54, 0x1, 0x8, '\x00', 0x81}, {0x9, 0x7, 0x7, '\x00', 0x4}, {0x7, 0x7, 0x4, '\x00', 0x40}, {0x3, 0x8, 0x2, '\x00', 0x7f}, {0xc, 0x0, 0x3, '\x00', 0xb8}, {0x4, 0x7f, 0x0, '\x00', 0x1}, {0x3, 0xc, 0xd, '\x00', 0x3}, {0x8, 0x8, 0x4, '\x00', 0x7}, {0x4, 0x20, 0x3, '\x00', 0xa8}, {0x6, 0x8, 0x39, '\x00', 0x7}, {0x3, 0x49, 0xff, '\x00', 0x1}]}}) mount$binderfs(&(0x7f0000000940), &(0x7f0000000980)='./binderfs2\x00', &(0x7f00000009c0), 0x2000, &(0x7f0000000a00)={[{@stats}, {@stats}, {@max={'max', 0x3d, 0x5}}, {@stats}, {}, {}, {@max={'max', 0x3d, 0x8}}, {}, {}, {@max={'max', 0x3d, 0x1}}], [{@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@audit}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@flag='async'}, {@smackfstransmute={'smackfstransmute', 0x3d, '['}}]}) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r3, 0x4068aea3, &(0x7f0000000b80)={0xdb, 0x0, 0xa}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000c00)={[0x774, 0x1, 0x892a, 0xfff, 0xb53, 0x9, 0x8, 0x6, 0xffffffffffffffff, 0xc, 0x1, 0x4, 0x1, 0x3, 0x4], 0xeeee8000, 0x800}) 274.961426ms ago: executing program 0 (id=901): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a4"}) (async, rerun: 32) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xfffffffffffffffe) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 274.574136ms ago: executing program 2 (id=902): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x720, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) close(r2) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "a5199fcdafdf3bb7cc4c8bc74a5ec2b0d07a2123b1ffffc2b5877ed2f506d04eb3c4c94cca1ae1060238c6ebf2a309079606000000000000167eaa250489cd9e7c133beb717a0e137489ab04"}, 0x5c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='target PCI:', @ANYRES16], 0x13) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffe44, 0x0, &(0x7f0000000080)=[@increfs={0x40046304, 0x80001}], 0x0, 0x0, 0x0}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) 249.193776ms ago: executing program 0 (id=903): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x3000, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x2}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}], 0x9d, 0x0, &(0x7f0000000440)="86a26c9da618d909bce30b7cf1cd8e3cd67bebed2f51f050b192202dc79a841f2307e8a18d200c24f92523c2e73cd5d0392854de671d87310511c3173d65868163dae6dca81ce9330e7f8083114ca0336d334fce1f60203ec29a53e0f3109b5f95a1f5a20b1ee8f1d39b9660a40c44c98093ce8a73170e7bde42b3d6635738d31f142a3cc29ae231a13c3312602d24a87dd2633985828593c874478e39"}) 247.904047ms ago: executing program 1 (id=904): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f00000025c0)={'syz0\x00', {}, 0x40, [0x720], [], [0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000cf0800008c04"]) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xc4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x43403d0e, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x2000}) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000002080)={0xfffffffd}) 196.337998ms ago: executing program 0 (id=905): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000000000800700000009000000fd0d00008700000000000000000000c00c00000000000100337fbc4b0500000000000000"]) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x95) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r5, 0x0) 75.232179ms ago: executing program 1 (id=906): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, 0x0) 0s ago: executing program 0 (id=907): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7b, 0x40, 0x9, 0x10}, {0x10000, 0x0, 0xc, 0x8, 0x2, 0x0, 0x7, 0x0, 0x5, 0x7, 0x14, 0x6}, {0xeeef0000, 0xdddd0000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfc}, {0x5000, 0xd000, 0x0, 0xff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0xeeef0000, 0x9, 0x0, 0xfc, 0x4, 0x0, 0x3, 0x0, 0x3c}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0xbf, 0x2, 0x0, 0xa, 0x2}, {0xeeee0000, 0xdddd1000, 0xe, 0xfe, 0x0, 0x0, 0x3, 0x80, 0x0, 0xfc}, {0x2000, 0x0, 0xf, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0xdddd1000}, {0xdddd1000, 0xfbff}, 0xddf8ffdb, 0x0, 0xeeee8000, 0x430, 0x0, 0x2501, 0xdddd0000, [0x4, 0x0, 0x2]}) (async) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x4, 0x8080000, 0x5, 0xf7, 0xa}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r4, 0x0, 0xfdef) (async) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000040)=0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.11' (ED25519) to the list of known hosts. [ 21.779858][ T36] audit: type=1400 audit(1750398340.240:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.781327][ T281] cgroup: Unknown subsys name 'net' [ 21.802535][ T36] audit: type=1400 audit(1750398340.250:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.829884][ T36] audit: type=1400 audit(1750398340.270:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.830130][ T281] cgroup: Unknown subsys name 'devices' [ 22.012539][ T281] cgroup: Unknown subsys name 'hugetlb' [ 22.018171][ T281] cgroup: Unknown subsys name 'rlimit' [ 22.193947][ T36] audit: type=1400 audit(1750398340.660:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.217154][ T36] audit: type=1400 audit(1750398340.660:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.241988][ T36] audit: type=1400 audit(1750398340.660:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.253373][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.274265][ T36] audit: type=1400 audit(1750398340.740:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.299812][ T36] audit: type=1400 audit(1750398340.740:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.340283][ T36] audit: type=1400 audit(1750398340.810:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.340918][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.365878][ T36] audit: type=1400 audit(1750398340.810:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.197446][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.204646][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.211799][ T291] bridge_slave_0: entered allmulticast mode [ 23.218087][ T291] bridge_slave_0: entered promiscuous mode [ 23.226065][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.233180][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.240436][ T291] bridge_slave_1: entered allmulticast mode [ 23.246683][ T291] bridge_slave_1: entered promiscuous mode [ 23.307522][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.314687][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.321904][ T288] bridge_slave_0: entered allmulticast mode [ 23.328202][ T288] bridge_slave_0: entered promiscuous mode [ 23.334573][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.341757][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.349059][ T289] bridge_slave_0: entered allmulticast mode [ 23.355566][ T289] bridge_slave_0: entered promiscuous mode [ 23.362165][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.369222][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.376468][ T289] bridge_slave_1: entered allmulticast mode [ 23.382802][ T289] bridge_slave_1: entered promiscuous mode [ 23.397648][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.404739][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.411906][ T288] bridge_slave_1: entered allmulticast mode [ 23.418181][ T288] bridge_slave_1: entered promiscuous mode [ 23.525676][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.532855][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.540060][ T290] bridge_slave_0: entered allmulticast mode [ 23.546308][ T290] bridge_slave_0: entered promiscuous mode [ 23.552919][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.560013][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.567084][ T290] bridge_slave_1: entered allmulticast mode [ 23.573467][ T290] bridge_slave_1: entered promiscuous mode [ 23.644265][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.651351][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.669734][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.676840][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.684175][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.691238][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.711125][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.718194][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.725575][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.732645][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.772665][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.779738][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.787300][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.794385][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.816795][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.824659][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.832679][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.840229][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.847429][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.855226][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.863117][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.882353][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.889424][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.897262][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.904321][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.931159][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.938235][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.946190][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.953285][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.966968][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.974123][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.993920][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.000996][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.008809][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.015889][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.024376][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.031459][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.064581][ T291] veth0_vlan: entered promiscuous mode [ 24.085534][ T289] veth0_vlan: entered promiscuous mode [ 24.091942][ T291] veth1_macvtap: entered promiscuous mode [ 24.105593][ T290] veth0_vlan: entered promiscuous mode [ 24.136340][ T288] veth0_vlan: entered promiscuous mode [ 24.144045][ T290] veth1_macvtap: entered promiscuous mode [ 24.158561][ T289] veth1_macvtap: entered promiscuous mode [ 24.177881][ T288] veth1_macvtap: entered promiscuous mode [ 24.184857][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.262520][ T311] random: crng reseeded on system resumption [ 24.285236][ T316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.310600][ T314] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.328086][ T315] rust_binder: Error in use_page_slow: ESRCH [ 24.328119][ T315] rust_binder: use_range failure ESRCH [ 24.341800][ T315] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 24.350926][ T311] Restarting kernel threads ... [ 24.359095][ T315] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 24.367602][ T311] done. [ 24.380643][ T315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:2 [ 24.386331][ T314] binder: Unknown parameter 'nXI' [ 24.400978][ T311] binder: Bad value for 'stats' [ 24.406606][ T311] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 24.416363][ T311] rust_binder: Write failure EINVAL in pid:2 [ 24.570479][ T338] input: syz0 as /devices/virtual/input/input4 [ 24.590515][ T343] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12 [ 24.590552][ T343] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 24.599805][ T343] rust_binder: Read failure Err(EFAULT) in pid:12 [ 24.740293][ T352] kvm_intel: kvm [351]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x7626172670000ff [ 24.792083][ T361] binder: Bad value for 'max' [ 24.883684][ T367] input: syz1 as /devices/virtual/input/input5 [ 25.158316][ T381] can0: slcan on ttyS3. [ 25.253149][ T380] can0 (unregistered): slcan off ttyS3. [ 25.291338][ T398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:16 [ 25.315831][ T403] rust_binder: Write failure EINVAL in pid:18 [ 25.366694][ T403] rust_binder: Error while translating object. [ 25.366729][ T403] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 25.378280][ T403] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:18 [ 25.390549][ T413] SELinux: failed to load policy [ 25.409194][ T413] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 25.534552][ T432] rust_binder: Write failure EINVAL in pid:20 [ 25.548256][ T432] input: syz1 as /devices/virtual/input/input6 [ 25.661296][ T437] binder: Unknown parameter '/dev/net/tun' [ 25.771520][ T440] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.771557][ T440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 25.853851][ T445] ======================================================= [ 25.853851][ T445] WARNING: The mand mount option has been deprecated and [ 25.853851][ T445] and is ignored by this kernel. Remove the mand [ 25.853851][ T445] option from the mount to silence this warning. [ 25.853851][ T445] ======================================================= [ 25.898527][ T445] SELinux: security_context_str_to_sid (syste_uGй :3ҬeXh1{h [ 25.898527][ T445] eX) failed with errno=-22 [ 26.087659][ T459] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30 [ 26.091120][ T458] input: syz0 as /devices/virtual/input/input7 [ 26.110482][ T458] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 26.110507][ T458] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 26.118196][ T458] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 26.140253][ T462] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 26.322677][ T479] rust_binder: Write failure EINVAL in pid:23 [ 26.423715][ T484] binder: Unknown parameter 'dont_hash' [ 26.439076][ T487] binder: Unknown parameter 'dont_hash' [ 26.473192][ T492] SELinux: Context o}xd is not valid (left unmapped). [ 26.572425][ T500] rust_binder: Write failure EINVAL in pid:57 [ 26.642587][ T502] binder: Binderfs stats mode cannot be changed during a remount [ 26.680106][ T504] __vm_enough_memory: pid: 504, comm: syz.0.54, bytes: 281474976845824 not enough memory for the allocation [ 27.056287][ T516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 27.111100][ T36] kauditd_printk_skb: 88 callbacks suppressed [ 27.111119][ T36] audit: type=1400 audit(1750398345.580:162): avc: denied { write } for pid=524 comm="syz.2.62" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 27.183793][ T36] audit: type=1400 audit(1750398345.650:163): avc: denied { read write } for pid=527 comm="syz.1.63" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 27.210602][ T36] audit: type=1400 audit(1750398345.650:164): avc: denied { open } for pid=527 comm="syz.1.63" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 27.285171][ T534] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 27.390729][ T543] rust_binder: Write failure EFAULT in pid:71 [ 27.399009][ T543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:71 [ 27.486671][ T36] audit: type=1400 audit(1750398345.950:165): avc: denied { append } for pid=544 comm="syz.0.70" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.584511][ T549] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 27.612264][ T551] Bluetooth: hci0: Frame reassembly failed (-84) [ 27.618898][ T295] Bluetooth: hci0: Frame reassembly failed (-84) [ 27.907289][ T568] rust_binder: Error while translating object. [ 27.907325][ T568] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 27.912278][ T36] audit: type=1400 audit(1750398346.370:166): avc: denied { checkpoint_restore } for pid=564 comm="syz.3.77" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 27.914063][ T568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:75 [ 27.970152][ T565] syz.3.77: attempt to access beyond end of device [ 27.970152][ T565] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 28.038793][ T575] rust_binder: Write failure EINVAL in pid:37 [ 28.051862][ T577] rust_binder: Write failure EINVAL in pid:39 [ 28.058401][ T577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.065458][ T577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.072699][ T577] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 28.111134][ T36] audit: type=1400 audit(1750398346.580:167): avc: denied { map } for pid=581 comm="syz.2.83" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.143510][ T36] audit: type=1400 audit(1750398346.580:168): avc: denied { execute } for pid=581 comm="syz.2.83" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.167106][ T589] rust_binder: Write failure EFAULT in pid:46 [ 28.182716][ T596] binder: Unknown parameter 'defcontext01777777777777777777777' [ 28.512258][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.512309][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.518478][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.524728][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.530964][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.537073][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.543412][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.549586][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.555745][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.561953][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.568082][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.574237][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.580439][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.586567][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.592736][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.598871][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.607033][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.613551][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.620593][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.626719][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.633081][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.639202][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.645662][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.652014][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.658144][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.664545][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.676060][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.684043][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.684541][ T607] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.698918][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.705565][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.715333][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.722480][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.728876][ T604] rust_binder: Write failure EINVAL in pid:85 [ 28.770902][ T616] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:88 [ 28.829242][ T622] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:88 [ 29.595685][ T646] input: syz1 as /devices/virtual/input/input11 [ 29.629891][ T646] binder: Unknown parameter 'contf)kdܚ1s(em_u' [ 29.660062][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 29.660833][ T554] Bluetooth: hci0: command 0x1003 tx timeout [ 29.710758][ T659] rust_binder: Error while translating object. [ 29.710802][ T659] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.719326][ T659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 29.727154][ T661] rust_binder: Error while translating object. [ 29.736156][ T659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.738732][ T661] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 29.749599][ T659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.760962][ T661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:53 [ 29.775730][ T663] rust_binder: Error while translating object. [ 29.788607][ T663] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.808096][ T663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 29.828258][ T36] audit: type=1400 audit(1750398348.290:169): avc: denied { execute } for pid=666 comm="syz.1.107" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 29.890474][ T669] rust_binder: Error in use_page_slow: ESRCH [ 29.890498][ T669] rust_binder: use_range failure ESRCH [ 29.896565][ T669] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 29.906654][ T669] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 29.921212][ T669] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:114 [ 30.048143][ T36] audit: type=1400 audit(1750398348.510:170): avc: denied { ioctl } for pid=679 comm="syz.3.111" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 30.069382][ T682] input: syz1 as /devices/virtual/input/input13 [ 30.109088][ T684] input: syz1 as /devices/virtual/input/input14 [ 30.161162][ T695] rust_binder: Error in use_page_slow: ESRCH [ 30.161183][ T695] rust_binder: use_range failure ESRCH [ 30.167383][ T695] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 30.172959][ T695] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 30.181209][ T695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:58 [ 30.201661][ T697] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 30.219753][ T697] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 30.304810][ T704] SELinux: ebitmap: truncated map [ 30.310013][ T704] SELinux: failed to load policy [ 30.350661][ T709] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 30.350695][ T709] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:71 [ 30.393410][ T707] SELinux: security_context_str_to_sid () failed with errno=-22 [ 30.417151][ T36] audit: type=1400 audit(1750398348.880:171): avc: denied { setattr } for pid=720 comm="syz.0.124" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.527469][ T725] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 30.558210][ T728] rust_binder: Write failure EINVAL in pid:78 [ 30.559108][ T729] input: syz0 as /devices/virtual/input/input15 [ 30.607448][ T734] rust_binder: Write failure EFAULT in pid:80 [ 30.669479][ T746] rust_binder: Write failure EINVAL in pid:133 [ 30.711685][ T752] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 30.718042][ T752] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:82 [ 30.729505][ T752] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 30.738808][ T752] rust_binder: Read failure Err(EFAULT) in pid:82 [ 30.739987][ T757] rust_binder: Write failure EINVAL in pid:135 [ 30.754643][ T757] rust_binder: Got transaction with invalid offset. [ 30.761037][ T757] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.767697][ T757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135 [ 30.839039][ T768] rust_binder: Write failure EINVAL in pid:84 [ 30.880597][ T777] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.888646][ T778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144 [ 30.896922][ T777] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.907511][ T777] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.924775][ T777] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.126315][ T789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65 [ 31.202207][ T801] deleting an unspecified loop device is not supported. [ 31.207366][ T802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:98 [ 31.433167][ T820] binder: Bad value for 'max' [ 31.471633][ T815] binder: Unknown parameter 'processor : 0 [ 31.471633][ T815] vendor_id : GenuineIntel [ 31.471633][ T815] cpu family : 6 [ 31.471633][ T815] model : 79 [ 31.471633][ T815] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 31.471633][ T815] stepping : 0 [ 31.471633][ T815] microcode : 0xffffffff [ 31.471633][ T815] cpu MHz : 2199.998 [ 31.471633][ T815] cache size : 56320 KB [ 31.471633][ T815] physical id : 0 [ 31.471633][ T815] siblings : 2 [ 31.471633][ T815] core id : 0 [ 31.471633][ T815] cpu cores : 1 [ 31.471633][ T815] apicid : 0 [ 31.471633][ T815] initial apicid : 0 [ 31.471633][ T815] fpu : yes [ 31.471633][ T815] fpu_exception : yes [ 31.471633][ T815] cpuid level : 13 [ 31.471633][ T815] wp : yes [ 31.471633][ T815] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 31.471633][ T815] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 31.541369][ T835] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 31.714216][ T837] SELinux: security_context_str_to_sid () failed with errno=-22 [ 31.977638][ T850] cgroup: fork rejected by pids controller in /syz1 [ 32.149180][ T295] bridge_slave_1: left allmulticast mode [ 32.157746][ T295] bridge_slave_1: left promiscuous mode [ 32.163753][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.173264][ T295] bridge_slave_0: left allmulticast mode [ 32.178943][ T295] bridge_slave_0: left promiscuous mode [ 32.187233][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.300413][ T36] kauditd_printk_skb: 50 callbacks suppressed [ 32.300432][ T36] audit: type=1400 audit(1750398350.760:222): avc: denied { read } for pid=967 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.333173][ T36] audit: type=1400 audit(1750398350.760:223): avc: denied { open } for pid=967 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.336258][ T970] rust_binder: Error while translating object. [ 32.356896][ T36] audit: type=1400 audit(1750398350.760:224): avc: denied { mounton } for pid=967 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 32.357633][ T295] veth1_macvtap: left promiscuous mode [ 32.363126][ T36] audit: type=1400 audit(1750398350.760:225): avc: denied { sys_module } for pid=967 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 32.385280][ T970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.390138][ T36] audit: type=1400 audit(1750398350.800:226): avc: denied { call } for pid=969 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 32.412928][ T295] veth0_vlan: left promiscuous mode [ 32.430416][ T36] audit: type=1400 audit(1750398350.800:227): avc: denied { transfer } for pid=969 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 32.439209][ T970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193 [ 32.536105][ T967] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.552600][ T967] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.559700][ T967] bridge_slave_0: entered allmulticast mode [ 32.566645][ T967] bridge_slave_0: entered promiscuous mode [ 32.573601][ T967] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.585441][ T967] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.592742][ T967] bridge_slave_1: entered allmulticast mode [ 32.599144][ T967] bridge_slave_1: entered promiscuous mode [ 32.633348][ T979] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 32.658671][ T36] audit: type=1400 audit(1750398351.120:228): avc: denied { read write } for pid=980 comm="syz.3.179" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.660134][ T982] input: syz0 as /devices/virtual/input/input17 [ 32.666642][ T36] audit: type=1400 audit(1750398351.120:229): avc: denied { open } for pid=980 comm="syz.3.179" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.666677][ T36] audit: type=1400 audit(1750398351.120:230): avc: denied { ioctl } for pid=980 comm="syz.3.179" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.749449][ T36] audit: type=1400 audit(1750398351.210:231): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=451 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.797111][ T988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.836365][ T967] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.849903][ T967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.857250][ T967] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.864334][ T967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.864636][ T989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.876228][ T990] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.925449][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.939658][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.947385][ T992] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 32.956050][ T992] rust_binder: Write failure EINVAL in pid:204 [ 32.960649][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.973932][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.985971][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.993061][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.042675][ T967] veth0_vlan: entered promiscuous mode [ 33.054651][ T967] veth1_macvtap: entered promiscuous mode [ 33.138923][ T1009] binder: Unknown parameter '' [ 33.173301][ T1011] rust_binder: Error while translating object. [ 33.173329][ T1011] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 33.180823][ T1013] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 33.186785][ T1011] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:6 [ 33.214154][ T1013] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 33.253787][ T1013] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 33.264366][ T1016] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:167 [ 33.485915][ T1023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 33.538821][ T1025] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.548457][ T1025] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:207 [ 33.713388][ T1036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.738584][ T1038] rust_binder: Write failure EFAULT in pid:126 [ 33.806426][ T1042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 33.863419][ T1051] SELinux: Context is not valid (left unmapped). [ 33.880148][ T1054] rust_binder: Error in use_page_slow: ESRCH [ 33.880168][ T1054] rust_binder: use_range failure ESRCH [ 33.881252][ T1051] SELinux: security_context_str_to_sid () failed with errno=-22 [ 33.886267][ T1054] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 33.886283][ T1054] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 33.886309][ T1054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:217 [ 33.975123][ T1071] binder: Bad value for 'stats' [ 34.100120][ T1077] binder: Unknown parameter '' [ 34.322865][ T1095] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.322906][ T1095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 34.413379][ T1103] binder: Unknown parameter '' [ 34.566978][ T1115] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.638571][ T1119] random: crng reseeded on system resumption [ 34.880506][ T1128] block device autoloading is deprecated and will be removed. [ 34.916034][ T1135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:202 [ 34.972878][ T1143] rust_binder: Error while translating object. [ 34.982155][ T1143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.988350][ T1143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 35.253849][ T1164] rust_binder: Write failure EFAULT in pid:254 [ 35.272790][ T1174] binder: Unknown parameter 'coyBLV"i5ntext' [ 35.291551][ T1172] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 35.326739][ T1179] rust_binder: Error while translating object. [ 35.326770][ T1179] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 35.333157][ T1179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:211 [ 35.515048][ T1197] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.535880][ T1199] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.569418][ T1200] binder: Unknown parameter 'context' [ 35.593797][ T1202] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.614543][ T1205] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.622022][ T1205] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 35.628930][ T1205] rust_binder: Error while translating object. [ 35.641297][ T1205] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.649087][ T1205] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:160 [ 35.870360][ T1225] binder: Bad value for 'stats' [ 35.898546][ T1227] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.900300][ T1227] rust_binder: Error in use_page_slow: ESRCH [ 35.906731][ T1227] rust_binder: use_range failure ESRCH [ 35.912811][ T1227] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 35.918848][ T1227] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 35.927067][ T1227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:167 [ 35.963661][ T1229] random: crng reseeded on system resumption [ 36.025850][ T1229] Restarting kernel threads ... done. [ 36.074412][ T1243] can0: slcan on ttyS3. [ 36.087768][ T1239] binder: Bad value for 'max' [ 36.141035][ T1246] can0 (unregistered): slcan off ttyS3. [ 36.284669][ T1273] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.554593][ T1306] binder: Bad value for 'max' [ 36.663301][ T1312] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 36.665495][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.680761][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.688321][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.696029][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.705669][ T1310] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.705704][ T1310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:271 [ 36.707169][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.733794][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.744810][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.752408][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.759829][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.767487][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.775073][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.783279][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.799034][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.806712][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.814351][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.821919][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.829395][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.837062][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.844854][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.852653][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.860212][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.867628][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.875319][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.882862][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.890428][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.897847][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.905431][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.913034][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.920820][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.928565][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.936268][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.944162][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.952463][ T31] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 36.967402][ T1322] kernel profiling enabled (shift: 63) [ 36.973239][ T1322] profiling shift: 63 too large [ 36.995494][ T1323] fido_id[1323]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 37.095066][ T1339] rust_binder: Write failure EINVAL in pid:291 [ 37.111691][ T1341] rust_binder: Write failure EINVAL in pid:293 [ 37.118436][ T1341] rust_binder: Write failure EINVAL in pid:293 [ 37.268128][ T1361] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.443341][ T1370] binder: Unknown parameter '00000000000000000000000' [ 37.531189][ T1376] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.552537][ T1378] input: syz0 as /devices/virtual/input/input19 [ 37.850587][ T1420] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.046396][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 38.046416][ T36] audit: type=1326 audit(1750398356.510:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1434 comm="syz.1.313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e9a38e929 code=0x0 [ 38.153227][ T36] audit: type=1326 audit(1750398356.620:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1448 comm="syz.2.316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd719b8e929 code=0x0 [ 38.227494][ T36] audit: type=1326 audit(1750398356.690:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1453 comm="syz.3.318" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8e818e929 code=0x0 [ 38.368462][ T36] audit: type=1400 audit(1750398356.830:304): avc: granted { setsecparam } for pid=1462 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 38.412897][ T1465] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 38.430349][ T36] audit: type=1400 audit(1750398356.900:305): avc: denied { ioctl } for pid=1464 comm="syz.0.321" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 38.622360][ T36] audit: type=1400 audit(1750398357.090:306): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.646380][ T36] audit: type=1400 audit(1750398357.090:307): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.681496][ T36] audit: type=1400 audit(1750398357.090:308): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.715663][ T36] audit: type=1400 audit(1750398357.180:309): avc: denied { read } for pid=1466 comm="syz.0.322" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 38.750409][ T36] audit: type=1400 audit(1750398357.180:310): avc: denied { read open } for pid=1466 comm="syz.0.322" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 39.163562][ T1477] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.175146][ T1477] rust_binder: Error in use_page_slow: ESRCH [ 39.189824][ T1477] rust_binder: use_range failure ESRCH [ 39.209965][ T1477] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 39.216234][ T1477] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 39.235384][ T1477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:210 [ 39.625817][ T1502] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.632081][ T1503] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 39.748060][ T1511] binder: Bad value for 'max' [ 39.928740][ T1517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109 [ 39.938448][ T1517] rust_binder: Read failure Err(EFAULT) in pid:109 [ 39.940809][ T1522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.025361][ T1523] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.300241][ T1538] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 40.319514][ T1539] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 40.465542][ T1545] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.963931][ T1563] kvm: user requested TSC rate below hardware speed [ 41.276959][ T1575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:304 [ 41.328062][ T1575] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 41.400015][ T1575] SELinux: failed to load policy [ 41.525606][ T1583] rust_binder: Write failure EINVAL in pid:129 [ 41.583066][ T1586] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:351 [ 41.828045][ T1591] SELinux: failed to load policy [ 41.882723][ T1591] SELinux: policydb version 51618937 does not match my version range 15-33 [ 41.913842][ T1591] SELinux: failed to load policy [ 41.987195][ T1597] serio: Serial port ttynull [ 42.399574][ T1610] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 42.540876][ T1621] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.541718][ T1621] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 42.548198][ T1621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:358 [ 42.888896][ T1637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.926103][ T1637] rust_binder: Error in use_page_slow: ESRCH [ 42.969991][ T1637] rust_binder: use_range failure ESRCH [ 43.009799][ T1637] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 43.029984][ T1637] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 43.038048][ T1637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:360 [ 43.060564][ T36] kauditd_printk_skb: 693 callbacks suppressed [ 43.060583][ T36] audit: type=1400 audit(1750398361.530:1004): avc: denied { ioctl } for pid=1644 comm="syz.0.373" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 43.168624][ T36] audit: type=1400 audit(1750398361.610:1005): avc: denied { read write } for pid=290 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 43.258689][ T36] audit: type=1400 audit(1750398361.610:1006): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 43.291806][ T1649] rust_binder: Write failure EINVAL in pid:362 [ 43.339970][ T36] audit: type=1400 audit(1750398361.610:1007): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 43.418082][ T36] audit: type=1400 audit(1750398361.620:1008): avc: denied { read write } for pid=1638 comm="syz.1.372" name="binder1" dev="binder" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 43.509971][ T36] audit: type=1400 audit(1750398361.620:1009): avc: denied { read write open } for pid=1638 comm="syz.1.372" path="/dev/binderfs/binder1" dev="binder" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 43.589973][ T36] audit: type=1400 audit(1750398361.690:1010): avc: denied { read } for pid=1638 comm="syz.1.372" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 43.666530][ T1661] binder: Unknown parameter 'maxE179^w|:777777' [ 43.673999][ T36] audit: type=1400 audit(1750398361.690:1011): avc: denied { read open } for pid=1638 comm="syz.1.372" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 43.738994][ T36] audit: type=1400 audit(1750398361.690:1012): avc: denied { ioctl } for pid=1638 comm="syz.1.372" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 43.767118][ T1661] binder: Unknown parameter 'euid>18446744073709551615' [ 43.814374][ T1666] binder: Bad value for 'stats' [ 43.819975][ T36] audit: type=1400 audit(1750398361.700:1013): avc: denied { read write } for pid=1647 comm="syz.3.375" name="binder0" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 43.861687][ T1664] random: crng reseeded on system resumption [ 44.542842][ T1691] binder: Unknown parameter 'obj_role' [ 44.609486][ T1693] binder: Bad value for 'stats' [ 44.720971][ T1695] binder: Unknown parameter 'coyBLV"i5ntext' [ 44.822670][ T1695] binder: Unknown parameter '' [ 44.861817][ T1698] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.862259][ T1698] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.879902][ T1698] rust_binder: Failed to allocate buffer. len:18446744073709551216, is_oneway:false [ 44.886448][ T1698] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 44.939569][ T1698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:379 [ 45.046267][ T1705] rust_binder: Error while translating object. [ 45.055581][ T1705] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.073512][ T1705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:163 [ 45.331419][ T1712] binder: Unknown parameter 'defcontext01777777777777777777777' [ 46.025820][ T1728] binder: Unknown parameter '2 [ 46.025820][ T1728] /٣ǧdz' [ 46.045780][ T1734] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.048662][ T1734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:391 [ 46.215318][ T1741] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:175 [ 46.226652][ T1734] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.266893][ T1734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:391 [ 46.657904][ T1757] input: syz1 as /devices/virtual/input/input22 [ 47.070326][ T1772] SELinux: policydb string length 14080 does not match expected length 8 [ 47.090088][ T1772] SELinux: failed to load policy [ 47.253629][ T1768] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 47.316666][ T1784] rust_binder: Write failure EINVAL in pid:188 [ 48.021468][ T1805] binder: Bad value for 'stats' [ 48.072216][ T36] kauditd_printk_skb: 646 callbacks suppressed [ 48.072235][ T36] audit: type=1400 audit(1750398366.540:1627): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.161458][ T36] audit: type=1400 audit(1750398366.570:1628): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.263435][ T36] audit: type=1400 audit(1750398366.570:1629): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.343580][ T36] audit: type=1400 audit(1750398366.630:1630): avc: denied { execute } for pid=1808 comm="syz.1.423" path="/sys/kernel/kheaders.tar.xz" dev="sysfs" ino=4545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 48.423098][ T36] audit: type=1400 audit(1750398366.630:1631): avc: denied { read } for pid=1808 comm="syz.1.423" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 48.519957][ T36] audit: type=1400 audit(1750398366.630:1632): avc: denied { read open } for pid=1808 comm="syz.1.423" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 48.591461][ T36] audit: type=1400 audit(1750398366.630:1633): avc: denied { ioctl } for pid=1808 comm="syz.1.423" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 48.668116][ T36] audit: type=1400 audit(1750398366.670:1634): avc: denied { write } for pid=1810 comm="syz.0.424" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.680979][ T1829] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200 [ 48.726669][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 48.749995][ T36] audit: type=1400 audit(1750398366.670:1635): avc: denied { write open } for pid=1810 comm="syz.0.424" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.832409][ T1834] rust_binder: Write failure EINVAL in pid:200 [ 49.570224][ T1867] binder: Unknown parameter '00000000000000000000003' [ 49.840405][ T1879] binder: Unknown parameter '' [ 50.467332][ T1898] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.556377][ T1905] rust_binder: Write failure EINVAL in pid:419 [ 50.859833][ T1920] binder: Unknown parameter 'coyBLV"i5ntext' [ 51.254929][ T1935] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 51.279894][ T1937] random: crng reseeded on system resumption [ 51.440239][ T1942] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 51.630736][ T1953] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.388901][ T1988] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 52.420036][ T1988] rust_binder: Write failure EINVAL in pid:242 [ 52.555090][ T2007] binder: Bad value for 'stats' [ 53.081742][ T36] kauditd_printk_skb: 950 callbacks suppressed [ 53.081763][ T36] audit: type=1400 audit(1750398371.550:2584): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.136154][ T36] audit: type=1400 audit(1750398371.550:2585): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.167715][ T36] audit: type=1400 audit(1750398371.550:2586): avc: denied { read write } for pid=967 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.216068][ T2035] random: crng reseeded on system resumption [ 53.249478][ T36] audit: type=1400 audit(1750398371.550:2587): avc: denied { read write open } for pid=967 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.282009][ T36] audit: type=1400 audit(1750398371.550:2588): avc: denied { ioctl } for pid=967 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.308349][ T36] audit: type=1400 audit(1750398371.670:2589): avc: denied { read write } for pid=2034 comm="syz.2.492" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.339404][ T36] audit: type=1400 audit(1750398371.670:2590): avc: denied { read write open } for pid=2034 comm="syz.2.492" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.371700][ T36] audit: type=1400 audit(1750398371.680:2591): avc: denied { read write } for pid=967 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.400279][ T36] audit: type=1400 audit(1750398371.680:2592): avc: denied { append } for pid=2034 comm="syz.2.492" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 53.437684][ T36] audit: type=1400 audit(1750398371.680:2593): avc: denied { read write open } for pid=967 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.924333][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 53.939973][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 53.954185][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 53.976557][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.011010][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 54.031042][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.038508][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.059975][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.079982][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.087446][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.106115][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.123948][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.138270][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.162022][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.182000][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.206594][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.228939][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.239969][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.255105][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.279969][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.298499][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.317800][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.329969][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.342783][ T2090] random: crng reseeded on system resumption [ 54.349063][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.359873][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.379586][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.400003][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.415086][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.436487][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.445101][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.452661][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.460660][ T306] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.469900][ T306] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 54.528476][ T2097] binder: Unknown parameter 'fowner>00000000000000000000' [ 54.554258][ T2095] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 54.875515][ T2102] fido_id[2102]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 55.320738][ T2123] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:285 [ 55.699670][ T2149] binder: Unknown parameter ' ymax' [ 55.968811][ T2161] binder: Unknown parameter 'obj_role' [ 56.011257][ T2168] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.077028][ T2173] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:470 [ 56.334218][ T2179] serio: Serial port ttynull [ 56.413503][ T2179] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 56.453090][ T2179] rust_binder: Write failure EINVAL in pid:300 [ 56.484173][ T2181] input: syz0 as /devices/virtual/input/input24 [ 56.599466][ T2193] rust_binder: Read failure Err(EAGAIN) in pid:303 [ 56.982572][ T2202] binder: Unknown parameter '' [ 57.394876][ T2224] binder: Bad value for 'max' [ 57.692734][ T2240] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 57.813667][ T2238] binder: Bad value for 'defcontext' [ 57.873885][ T2248] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 57.965790][ T2250] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.981087][ T2250] rust_binder: Error in use_page_slow: ESRCH [ 57.987574][ T2250] rust_binder: use_range failure ESRCH [ 58.036470][ T2250] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 58.062978][ T2250] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 58.091519][ T2250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:486 [ 58.094681][ T36] kauditd_printk_skb: 619 callbacks suppressed [ 58.094704][ T36] audit: type=1400 audit(1750398376.560:3213): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.159433][ T36] audit: type=1400 audit(1750398376.580:3214): avc: denied { read write } for pid=2251 comm="syz.0.564" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 58.261849][ T36] audit: type=1400 audit(1750398376.580:3215): avc: denied { ioctl open } for pid=2251 comm="syz.0.564" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 58.307539][ T36] audit: type=1400 audit(1750398376.580:3216): avc: denied { ioctl } for pid=2251 comm="syz.0.564" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 58.380332][ T2266] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.384154][ T2266] rust_binder: Error while translating object. [ 58.386022][ T36] audit: type=1400 audit(1750398376.610:3217): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.402505][ T2270] audit: audit_backlog=65 > audit_backlog_limit=64 [ 58.422983][ T2266] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.429365][ T2266] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:488 [ 58.472153][ T2270] audit: audit_lost=13 audit_rate_limit=0 audit_backlog_limit=64 [ 58.489405][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 58.514735][ T290] audit: audit_backlog=65 > audit_backlog_limit=64 [ 58.517517][ T288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 58.689964][ T2284] input: syz0 as /devices/virtual/input/input25 [ 59.081219][ T2308] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4234274794 (67748396704 ns) > initial count (26801589552 ns). Using initial count to start timer. [ 59.152262][ T2312] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.184679][ T1002] bridge_slave_1: left allmulticast mode [ 59.190410][ T1002] bridge_slave_1: left promiscuous mode [ 59.196063][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.223744][ T1002] bridge_slave_0: left allmulticast mode [ 59.229443][ T1002] bridge_slave_0: left promiscuous mode [ 59.250042][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.417171][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.426650][ T2318] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 59.472104][ T2318] random: crng reseeded on system resumption [ 59.562787][ T1002] veth1_macvtap: left promiscuous mode [ 59.569487][ T2318] Restarting kernel threads ... done. [ 59.590147][ T1002] veth0_vlan: left promiscuous mode [ 59.991596][ T2334] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 59.991620][ T2334] rust_binder: Read failure Err(EFAULT) in pid:500 [ 60.072776][ T2329] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.108052][ T2341] binder: Unknown parameter 'fscontext?}' [ 60.124356][ T2329] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.149443][ T2329] bridge_slave_0: entered allmulticast mode [ 60.157644][ T2329] bridge_slave_0: entered promiscuous mode [ 60.181556][ T2329] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.190666][ T2329] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.197952][ T2329] bridge_slave_1: entered allmulticast mode [ 60.206197][ T2329] bridge_slave_1: entered promiscuous mode [ 60.363759][ T2349] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.366127][ T2349] rust_binder: Error while translating object. [ 60.373331][ T2349] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.379612][ T2349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:509 [ 60.422951][ T2329] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.439180][ T2329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.446519][ T2329] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.453678][ T2329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.531855][ T2353] input: syz1 as /devices/virtual/input/input26 [ 60.620732][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.631897][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.642185][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.649256][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.665252][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.672538][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.712346][ T2355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.728321][ T2355] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 60.734932][ T2355] rust_binder: Error while translating object. [ 60.745689][ T2355] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.764606][ T2355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:515 [ 60.834432][ T2329] veth0_vlan: entered promiscuous mode [ 60.883627][ T2329] veth1_macvtap: entered promiscuous mode [ 61.097385][ T2370] rust_binder: Write failure EINVAL in pid:2 [ 61.420161][ T554] Bluetooth: hci0: command 0x1003 tx timeout [ 61.432354][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.749523][ T2399] rust_binder: Got transaction with invalid offset. [ 61.749572][ T2399] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.771187][ T2399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 61.817589][ T2405] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.930958][ T2405] rust_binder: Error in use_page_slow: ESRCH [ 61.940634][ T2405] rust_binder: use_range failure ESRCH [ 61.970047][ T2405] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 61.975653][ T2405] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 62.016255][ T2405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:534 [ 62.192206][ T2425] input: syz0 as /devices/virtual/input/input27 [ 62.221975][ T2429] binder: Bad value for 'stats' [ 62.240804][ T2425] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.262146][ T2425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:538 [ 62.301296][ T2425] rust_binder: Error while translating object. [ 62.339983][ T2425] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.346208][ T2425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:538 [ 62.500075][ T2441] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 62.536366][ T2445] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.820882][ T2463] input: syz1 as /devices/virtual/input/input28 [ 62.943946][ T2463] rust_binder: inc_ref_done called when no active inc_refs [ 63.106563][ T2476] tap0: tun_chr_ioctl cmd 1074025677 [ 63.119668][ T2476] tap0: linktype set to 774 [ 63.125682][ T36] kauditd_printk_skb: 846 callbacks suppressed [ 63.125700][ T36] audit: type=1400 audit(1750398381.590:4057): avc: denied { map } for pid=2472 comm="syz.3.625" path="/dev/binderfs/binder0" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.174660][ T2474] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.176630][ T2474] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.212597][ T2474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:548 [ 63.213733][ T36] audit: type=1400 audit(1750398381.590:4058): avc: denied { read } for pid=2472 comm="syz.3.625" path="/dev/binderfs/binder0" dev="binder" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.349773][ T36] audit: type=1400 audit(1750398381.630:4059): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.448175][ T36] audit: type=1400 audit(1750398381.630:4060): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.519253][ T36] audit: type=1400 audit(1750398381.630:4061): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.555012][ T2487] audit: audit_backlog=66 > audit_backlog_limit=64 [ 63.557826][ T2497] audit: audit_backlog=66 > audit_backlog_limit=64 [ 63.571148][ T2491] audit: audit_backlog=66 > audit_backlog_limit=64 [ 63.577689][ T2491] audit: audit_lost=17 audit_rate_limit=0 audit_backlog_limit=64 [ 63.586080][ T2487] audit: audit_lost=18 audit_rate_limit=0 audit_backlog_limit=64 [ 63.698396][ T2503] binder: Unknown parameter '(ESEe' [ 64.113388][ T2523] random: crng reseeded on system resumption [ 64.254850][ T2533] rust_binder: Write failure EFAULT in pid:563 [ 64.525470][ T2540] rust_binder: Read failure Err(EAGAIN) in pid:567 [ 65.196492][ T2570] input: syz0 as /devices/virtual/input/input32 [ 65.890063][ T2596] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 66.030143][ T2590] __vm_enough_memory: pid: 2590, comm: syz.0.660, bytes: 281474976845824 not enough memory for the allocation [ 66.274847][ T2608] rust_binder: Write failure EINVAL in pid:69 [ 66.542375][ T2618] rust_binder: Write failure EINVAL in pid:74 [ 67.121788][ T2635] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.180627][ T2633] syz.1.674 (2633) used obsolete PPPIOCDETACH ioctl [ 67.221977][ T2633] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 67.242521][ T2633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:81 [ 67.300364][ T2646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:578 [ 67.667342][ T2660] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 67.686840][ T2660] rust_binder: Error while translating object. [ 67.709880][ T2660] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.722900][ T2660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:87 [ 67.731969][ T2658] kvm: emulating exchange as write [ 68.126296][ T2674] rust_binder: Write failure EFAULT in pid:581 [ 68.176422][ T36] kauditd_printk_skb: 765 callbacks suppressed [ 68.176443][ T36] audit: type=1400 audit(1750398386.640:4808): avc: denied { map } for pid=2675 comm="syz.1.686" path="/dev/binderfs/binder0" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.297483][ T36] audit: type=1400 audit(1750398386.640:4809): avc: denied { read } for pid=2675 comm="syz.1.686" path="/dev/binderfs/binder0" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.344685][ T36] audit: type=1400 audit(1750398386.760:4810): avc: denied { read write } for pid=2329 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.408084][ T36] audit: type=1400 audit(1750398386.760:4811): avc: denied { read write open } for pid=2329 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.472859][ T2688] rust_binder: Write failure EFAULT in pid:583 [ 68.499956][ T36] audit: type=1400 audit(1750398386.760:4812): avc: denied { ioctl } for pid=2329 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.574598][ T36] audit: type=1400 audit(1750398386.820:4813): avc: denied { read write } for pid=290 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.635711][ T36] audit: type=1400 audit(1750398386.820:4814): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.671201][ T2694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:99 [ 68.696208][ T2691] binder: Unknown parameter '{t' [ 68.709968][ T36] audit: type=1400 audit(1750398386.820:4815): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.750545][ T2696] audit: audit_backlog=65 > audit_backlog_limit=64 [ 68.762567][ T2700] audit: audit_backlog=65 > audit_backlog_limit=64 [ 69.099811][ T2708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:588 [ 69.231788][ T2717] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.744531][ T2730] binder: Bad value for 'max' [ 70.170655][ T2749] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.232623][ T2749] rust_binder: Got transaction with invalid offset. [ 70.239147][ T2749] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.268100][ T2749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:595 [ 70.468006][ T2758] SELinux: failed to load policy [ 70.527870][ T2766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.893318][ T2779] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.021677][ T2779] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.085490][ T2784] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.097516][ T2787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:601 [ 71.097598][ T2784] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:601 [ 71.376300][ T2795] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 71.475041][ T2799] binder: Unknown parameter 'dont_hash' [ 72.182703][ T2839] random: crng reseeded on system resumption [ 72.229248][ T2839] input: syz0 as /devices/virtual/input/input35 [ 72.236421][ T2840] rust_binder: Write failure EINVAL in pid:129 [ 72.477283][ T2849] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.507067][ T2849] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 72.507104][ T2849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:132 [ 72.950579][ T2866] tun0: tun_chr_ioctl cmd 1074025675 [ 72.989979][ T2866] tun0: persist disabled [ 73.036229][ T2867] binder: Unknown parameter 'fscontext "ned_u' [ 73.199456][ T36] kauditd_printk_skb: 758 callbacks suppressed [ 73.199476][ T36] audit: type=1400 audit(1750398391.660:5531): avc: denied { read } for pid=2877 comm="syz.2.751" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.250005][ T36] audit: type=1400 audit(1750398391.680:5532): avc: denied { read write } for pid=290 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.329497][ T36] audit: type=1400 audit(1750398391.680:5533): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.373882][ T36] audit: type=1400 audit(1750398391.680:5534): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.462709][ T2886] can0: slcan on ptm1. [ 73.476493][ T36] audit: type=1400 audit(1750398391.700:5535): avc: denied { read open } for pid=2877 comm="syz.2.751" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.518729][ T2886] input: syz0 as /devices/virtual/input/input36 [ 73.529472][ T36] audit: type=1400 audit(1750398391.710:5536): avc: denied { read write } for pid=2877 comm="syz.2.751" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.561254][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 73.590124][ T554] Bluetooth: hci0: unexpected event 0x0b length: 0 < 11 [ 73.621649][ T2884] can0 (unregistered): slcan off ptm1. [ 73.624828][ T36] audit: type=1400 audit(1750398391.710:5537): avc: denied { read write open } for pid=2877 comm="syz.2.751" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.651226][ T36] audit: type=1400 audit(1750398391.710:5538): avc: denied { ioctl } for pid=2877 comm="syz.2.751" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.676654][ T36] audit: type=1400 audit(1750398391.760:5539): avc: denied { map } for pid=2877 comm="syz.2.751" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.707474][ T2892] audit: audit_backlog=65 > audit_backlog_limit=64 [ 73.720513][ T2892] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.778637][ T2894] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.803415][ T2894] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 73.828505][ T2894] rust_binder: Error while translating object. [ 73.867106][ T2894] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.884477][ T2894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144 [ 73.931386][ T2901] input: syz0 as /devices/virtual/input/input37 [ 74.001270][ T2899] rust_binder: Got transaction with invalid offset. [ 74.001315][ T2899] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 74.007973][ T2899] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:600 [ 74.084185][ T2903] rust_binder: Write failure EFAULT in pid:640 [ 74.145660][ T2907] binder: Unknown parameter 'mag' [ 74.185551][ T2907] binder: Bad value for 'max' [ 74.351450][ T2917] binder: Bad value for 'context' [ 74.650316][ T2930] rust_binder: Write failure EFAULT in pid:649 [ 74.743881][ T2934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.771941][ T2934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 74.788352][ T2934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:652 [ 74.981515][ T2940] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.286416][ T2946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:615 [ 75.304200][ T2951] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.373811][ T2955] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.397643][ T2955] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.403659][ T2957] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.453384][ T2957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:660 [ 75.458521][ T2955] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 75.502452][ T2955] rust_binder: Error while translating object. [ 75.532152][ T2955] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.545143][ T2955] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159 [ 75.579968][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 75.580000][ T554] Bluetooth: hci0: command 0x1003 tx timeout [ 76.193461][ T2975] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.206264][ T2975] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 76.247502][ T2975] rust_binder: Write failure EINVAL in pid:170 [ 76.317778][ T2983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:664 [ 76.350815][ T2990] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.390853][ T2991] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 76.397638][ T2991] rust_binder: Error while translating object. [ 76.462627][ T2991] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.468866][ T2991] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:172 [ 76.619953][ T3009] input: syz0 as /devices/virtual/input/input39 [ 76.660034][ T3009] input: failed to attach handler leds to device input39, error: -6 [ 76.751315][ T3017] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.815970][ T3019] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.922052][ T3024] binder: Unknown parameter 'fscontext?}' [ 76.997632][ T3026] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 77.003003][ T3020] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:674 [ 77.170529][ T3030] binder: Unknown parameter 'fscontext?}' Stopping sshd: stopped /usr/sbin/sshd (pid 203) [ 77.517244][ T3035] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. OK Stopping crond: [ 77.575907][ T3035] rust_binder: Write failure EINVAL in pid:642 [ 77.852674][ T3052] random: crng reseeded on system resumption stopped /usr/sbin/crond (pid 193) OK [ 77.970507][ T3057] rust_binder: Write failure EINVAL in pid:186 [ 77.987811][ T3062] binder: Bad value for 'max' [ 78.202254][ T36] kauditd_printk_skb: 668 callbacks suppressed [ 78.202273][ T36] audit: type=1400 audit(1750398396.670:6203): avc: denied { read } for pid=3067 comm="syz.1.809" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.291372][ T36] audit: type=1400 audit(1750398396.700:6204): avc: denied { read open } for pid=3067 comm="syz.1.809" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.335804][ T3074] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 78.357685][ T36] audit: type=1400 audit(1750398396.700:6205): avc: denied { ioctl } for pid=3067 comm="syz.1.809" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.389802][ T3074] rust_binder: BINDER_SET_CONTEXT_MGR already set Stopping dhcpcd... [ 78.395424][ T3074] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 78.456441][ T36] audit: type=1400 audit(1750398396.710:6206): avc: denied { read } for pid=3067 comm="syz.1.809" name="binder1" dev="binder" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.501615][ T3084] binder: Binderfs stats mode cannot be changed during a remount stopped /sbin/dhcpcd (pid 147) [ 78.571992][ T36] audit: type=1400 audit(1750398396.710:6207): avc: denied { read open } for pid=3067 comm="syz.1.809" path="/dev/binderfs/binder1" dev="binder" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.672342][ T36] audit: type=1400 audit(1750398396.710:6208): avc: denied { read } for pid=3067 comm="syz.1.809" name="binder1" dev="binder" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.696445][ T3090] audit: audit_backlog=65 > audit_backlog_limit=64 [ 78.708694][ T3086] audit: audit_backlog=65 > audit_backlog_limit=64 [ 78.725386][ T3090] audit: audit_lost=42 audit_rate_limit=0 audit_backlog_limit=64 [ 78.739548][ T3086] audit: audit_lost=43 audit_rate_limit=0 audit_backlog_limit=64 [ 78.762472][ T3093] SELinux: policydb string SE Linup does not match my string SE Linux [ 78.840122][ T3093] SELinux: failed to load policy Stopping network: [ 79.390351][ T3114] binder: Unknown parameter 'dont_hash' [ 79.700484][ T3124] rust_binder: Write failure EFAULT in pid:663 [ 79.719198][ T3122] rust_binder: Write failure EFAULT in pid:691 [ 79.758664][ T3127] binder: Unknown parameter '' [ 79.896517][ T3134] rust_binder: Write failure EFAULT in pid:665 OK Stopping iptables: [ 79.937827][ T3136] rust_binder: BINDER_SET_CONTEXT_MGR already set OK [ 80.322792][ T3168] rust_binder: Write failure EINVAL in pid:696 [ 80.423774][ T3173] binder: Bad value for 'defcontext' [ 80.454476][ T3172] binder: Unknown parameter 'context' Stopping system message bus: [ 80.670796][ T3183] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 80.670824][ T3183] rust_binder: Error while translating object. [ 80.693139][ T3183] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.700963][ T3183] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:662 [ 80.937572][ T3195] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.691181][ T3213] rust_binder: Error while translating object. [ 81.697685][ T3213] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 81.745688][ T3215] rust_binder: Write failure EINVAL in pid:228 [ 81.780788][ T3213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:677 [ 81.918780][ T3218] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.995777][ T3221] rust_binder: Error in use_page_slow: ESRCH [ 82.071070][ T3221] rust_binder: use_range failure ESRCH [ 82.140635][ T3221] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 82.188891][ T3221] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 82.200984][ T3223] kvm: kvm [3222]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x7 done [ 82.256111][ T3221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:712 [ 83.072481][ T3270] tap0: tun_chr_ioctl cmd 2148553947 [ 83.221377][ T36] kauditd_printk_skb: 680 callbacks suppressed [ 83.221396][ T36] audit: type=1400 audit(1750398401.690:6872): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.288186][ T36] audit: type=1400 audit(1750398401.720:6873): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.334342][ T3286] input: syz1 as /devices/virtual/input/input44 [ 83.359968][ T36] audit: type=1400 audit(1750398401.720:6874): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.415828][ T36] audit: type=1400 audit(1750398401.740:6875): avc: denied { read } for pid=3283 comm="syz.1.865" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.489254][ T36] audit: type=1400 audit(1750398401.740:6876): avc: denied { read open } for pid=3283 comm="syz.1.865" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.549965][ T36] audit: type=1400 audit(1750398401.740:6877): avc: denied { ioctl } for pid=3283 comm="syz.1.865" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.592568][ T3292] audit: audit_backlog=65 > audit_backlog_limit=64 [ 83.599996][ T36] audit: type=1400 audit(1750398401.750:6878): avc: denied { write } for pid=3283 comm="syz.1.865" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.608121][ T3292] audit: audit_lost=49 audit_rate_limit=0 audit_backlog_limit=64 [ 83.653688][ T3292] audit: backlog limit exceeded Stopping klogd: [ 83.839317][ T3300] SELinux: security policydb version 17 (MLS) not backwards compatible [ 83.854494][ T3300] SELinux: failed to load policy [ 83.877225][ T3300] rust_binder: Write failure EINVAL in pid:697 [ 83.895317][ T3296] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.921696][ T3297] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. OK Stopping acpid: [ 84.053660][ T3313] binder: Unknown parameter '0x0000000000000000' [ 84.067989][ T3310] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 84.081029][ T3308] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 84.088195][ T3308] rust_binder: Write failure EINVAL in pid:691 [ 84.088259][ T3310] rust_binder: Write failure EINVAL in pid:691 [ 84.225411][ T3325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:695 [ 84.229750][ T3320] SELinux: failed to load policy [ 84.239728][ T3325] rust_binder: Write failure EINVAL in pid:695 [ 84.247452][ T3325] rust_binder: Error while translating object. [ 84.262026][ T3325] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 84.268679][ T3325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:695 [ 84.341403][ T3328] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 84.365349][ T3328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:259 [ 84.381566][ T3328] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 84.390746][ T3328] rust_binder: Read failure Err(EFAULT) in pid:259 [ 84.477642][ T3340] rust_binder: Error while translating object. [ 84.485346][ T3340] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 84.491583][ T3340] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:706 [ 84.720241][ T3357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:703 [ 84.761667][ T3359] binder: Unknown parameter 'defcontext01777777777777777777777' [ 84.950296][ T3373] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.951237][ T3373] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.130050][ T3384] rust_binder: Write failure EFAULT in pid:716 [ 85.168336][ T3384] rust_binder: Got transaction with invalid offset. [ 85.177358][ T3384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } OK Stopping syslogd: stopped /sbin/syslogd (pid 91) OK [ 85.185605][ T3384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:716 [ 85.542325][ T3409] input: syz0 as /devices/virtual/input/input47 umount: can't remount debugfs read-only [ 85.582020][ T3409] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 85.582615][ T3409] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.626120][ T3411] SELinux: failed to load policy [ 85.641778][ T3411] rust_binder: Error in use_page_slow: ESRCH [ 85.641800][ T3411] rust_binder: use_range failure ESRCH [ 85.647869][ T3411] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 85.653636][ T3411] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.10.11 closed by remote host. Sent SIGTERM to all processes [ 85.675995][ T3411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:720 [ 85.941630][ T13] bridge_slave_1: left allmulticast mode [ 85.956554][ T13] bridge_slave_1: left promiscuous mode [ 85.962234][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.969703][ T13] bridge_slave_0: left allmulticast mode [ 85.975390][ T13] bridge_slave_0: left promiscuous mode [ 85.981477][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.162304][ T13] veth1_macvtap: left promiscuous mode [ 86.167849][ T13] veth0_vlan: left promiscuous mode [ 86.533630][ T13] bridge_slave_1: left allmulticast mode [ 86.539296][ T13] bridge_slave_1: left promiscuous mode [ 86.545040][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.552599][ T13] bridge_slave_0: left allmulticast mode [ 86.558239][ T13] bridge_slave_0: left promiscuous mode [ 86.563830][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.571802][ T13] bridge_slave_1: left allmulticast mode [ 86.577439][ T13] bridge_slave_1: left promiscuous mode [ 86.583132][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.590555][ T13] bridge_slave_0: left allmulticast mode [ 86.596184][ T13] bridge_slave_0: left promiscuous mode [ 86.601826][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.609404][ T13] bridge_slave_1: left allmulticast mode [ 86.615113][ T13] bridge_slave_1: left promiscuous mode [ 86.620947][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.628425][ T13] bridge_slave_0: left allmulticast mode [ 86.634159][ T13] bridge_slave_0: left promiscuous mode [ 86.639763][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.854835][ T13] veth1_macvtap: left promiscuous mode [ 86.860397][ T13] veth0_vlan: left promiscuous mode [ 86.865787][ T13] veth1_macvtap: left promiscuous mode [ 86.871294][ T13] veth0_vlan: left promiscuous mode [ 86.876638][ T13] veth1_macvtap: left promiscuous mode [ 86.882150][ T13] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 87.915039][ T3419] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 87.921933][ T3419] ACPI: PM: Preparing to enter system sleep state S5 [ 87.928771][ T3419] kvm: exiting hardware virtualization [ 87.934302][ T3419] reboot: Power down serialport: VM disconnected.