last executing test programs: 8m19.325792882s ago: executing program 1 (id=2311): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@unlock_all, 0xb) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 8m19.223754464s ago: executing program 1 (id=2312): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80002, 0x4) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 8m19.122849645s ago: executing program 1 (id=2318): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10000, 0x2, 0xdddd0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 8m19.024459157s ago: executing program 1 (id=2319): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x5b, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b418709844294623"}) (async) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000040)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedea, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000354000/0x2000)=nil, 0x2000, &(0x7f0000000680)='\xf3\x1d\xfa\xe5Gp\xa0(\xff\xaa\x1a^\x81\x01\x87\xb0\x82\x80\x9ci6N\x87s\xe5\x7f\x910JpO\xe2\xb2!\x8651\x9d\x92x\xdf,\x05\xc0\x00\x00\x00\x00\x17\x98Os\xb6\x84T\xb9\x99\xd4\x8f\x1e8 \xb9\x983Pf/F\x1e;w\xcf\x9f|86T\xb38\xa11=\xc7\xc4\x1d/\xc5\x1b\x92\xd8\xd9.\xdaf\a5\x85e}b\x04\a\x14\xfdf\xb7\x1fyK,\vd=\xf0_\xe6I\xdd\x83\xa7Cp \x10C\xe5\xaa\x15\xbd\xbd\v\xcf\r\xb3\xe1!\x8cVn4\x93\xd3\x1458\xa94\x122\x17\x0f\xe9\xe1BA?\xe2\xdd\xc2v\x85\x17\v\x83\xea?IFT\x11\x06\xb0\xee\x85:\bL\xf9\xae\x1e\xd8h\xf7\xcd\n\xaa9\xd5\xa4)\xf1H\xb2\x82D\x0f\x893\x01\xf1W\x99\xfah\vz\xb8M\xebZ\xe1\xab\xd8\xa72H\x15\xaeY\xfb\xb1\xe8\xffE\xc1WD\xc9\xb8\x15\xa6\x9eN7\x9d}(\xcb\xbd\x95\x10\x19\xd59\xef>d\xdbV\x80\xd0\xf6\xb4LI\xec\x89N\x88') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000354000/0x1000)=nil, 0x1036, &(0x7f0000000040)='smaps\x00') (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000400), 0x12) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[], 0x9) (async) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r7 = openat$kvm(0x0, &(0x7f0000000500), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r8, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x10000}) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r8, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) (async) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIDEDUPERANGE(r9, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000d2c610a808e0797d2174b8010000000100"]) (async) ioctl$FIBMAP(r6, 0x1, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x4000010, r0, 0xed771000) (async) ioctl$KVM_CAP_DISABLE_QUIRKS2(r6, 0x4068aea3, &(0x7f0000000980)={0xd5, 0x0, 0x40}) 8m18.885570759s ago: executing program 1 (id=2321): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) close(0x5) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) close(0x5) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 8m18.616768503s ago: executing program 1 (id=2326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7b) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='max=000000100']) 8m3.599217495s ago: executing program 32 (id=2326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7b) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='max=000000100']) 6m0.769895868s ago: executing program 2 (id=4472): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x806, 0x0) 6m0.590169951s ago: executing program 2 (id=4476): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r0, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r1}], 0xfffffffffffffeec, 0x0, &(0x7f0000000140)="f3"}) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000240)={0x2, 0x0, [{0x204, 0x0, 0x80000000}, {0xbb6, 0x0, 0x8}]}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x122, 0x0, 0xfffffffffffffffe}]}) openat$sndtimer(0xffffffffffffff9c, 0xffffffffffffffff, 0x2400c4) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x680, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x20000, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x0) ioctl$TCXONC(r9, 0x540a, 0x3) ioctl$TCSETSW2(r9, 0x5425, 0x0) write$selinux_attr(r2, 0x0, 0x0) close(r0) close(r0) 5m59.653796265s ago: executing program 2 (id=4489): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000a, 0x4010, r0, 0x45806000) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$KVM_RUN(r1, 0xae80, 0x0) 5m58.698898029s ago: executing program 2 (id=4511): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xe05, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x9, 0x7, 0x0, 0x4, 0x1, "66b0dfe34478f33d59a9e927350ead882ac562", 0x401, 0x9}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x200) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000001, 0x800000000, 0x3e, 0x0, 0x0, 0x2004cc, 0x5, 0x0, 0x0, 0xfffffffdfffffffc, 0xfffffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0xc0086}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 5m57.703913714s ago: executing program 2 (id=4522): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x10) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f00000002c0)={{0x0, 0x0, 0xfffffff8, 0x2, 0x8}, 0xb, 0x400, 'id1\x00', 'timer0\x00', 0x0, 0xfffffffffffff1d3, 0x2, 0x3ff, 0x8}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x40) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000021c0)=ANY=[@ANYBLOB="01000000000001003b53f8469f73a9df8c2b29ff170000000000000400f9dfd7168e"]) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r8, 0x4018aee2, &(0x7f00000003c0)=@attr_pmu_init) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) openat(r4, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80000, 0x14) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x0) 5m57.467735948s ago: executing program 2 (id=4528): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x186a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x1400, 0x0) 5m42.463870696s ago: executing program 33 (id=4528): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x186a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x1400, 0x0) 1.92630392s ago: executing program 4 (id=9625): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x200, 0x20) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x40047438, 0x110e22fff6) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$RTC_ALM_SET(r2, 0x80287010, 0xffffffffffffffff) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1.863573351s ago: executing program 5 (id=9627): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000040)=[@exit_looper], 0x5, 0x0, &(0x7f0000000000)="af07000000"}) 1.863331281s ago: executing program 5 (id=9628): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\a\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 1.836918301s ago: executing program 4 (id=9630): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) (fail_nth: 22) 1.727616783s ago: executing program 5 (id=9632): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) 1.402414138s ago: executing program 4 (id=9634): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x2b0003, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000040)={[{0x6b, 0x5, 0xff, 0x5, 0x81, 0xfb, 0x8, 0xd4, 0x8, 0x64, 0xcf, 0x7, 0xffffffffffffffff}, {0xfff, 0x7, 0x3, 0x4, 0x7, 0xf6, 0x2, 0x4, 0x2, 0x4, 0x4, 0x1, 0x9}, {0xb, 0x3, 0x4, 0x7f, 0x0, 0x4, 0x81, 0x2, 0xb, 0x1, 0x7f, 0x13, 0x9}], 0x40}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000440)={0x1, 0x0, [{0x80000001, 0x3fc, 0x6, 0x1, 0x394c102d, 0x4, 0x38000000}]}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) 1.241755481s ago: executing program 5 (id=9636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) 1.075718013s ago: executing program 4 (id=9638): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (fail_nth: 1) 1.013930344s ago: executing program 0 (id=9640): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003340), 0x40040, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000080)={{}, 0x2, 0x1, 0x4}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x15) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x3, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/83, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)={0x2, 0x0, [{0x8080000, 0xe2, &(0x7f0000000300)=""/223}, {0x100000, 0xffffff75, &(0x7f0000000400)=""/108}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x200000000000}) openat$snapshot(0xffffffffffffff9c, 0x0, 0x481, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x850, 0x0, &(0x7f0000001600)="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"}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) close(r7) 887.718056ms ago: executing program 5 (id=9641): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r6, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x5, 0x3a, '/^', 0x3a, ']$@K-^{', 0x3a, './file0'}, 0x30) write$binfmt_register(r6, &(0x7f0000000300)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x40, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, 'E', 0x3a, './file0', 0x3a, [0x43, 0x46]}, 0x4c) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101800, 0x10) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008e04"]) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r8, 0x40046205, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="6465636f646573206d65ae"], 0xc) mkdirat(r7, &(0x7f0000000080)='./file0\x00', 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r9, 0x2000) getpid() 715.553999ms ago: executing program 0 (id=9643): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x4441, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000180)={[{0x72f, 0x7, 0x8, 0x3, 0xff, 0x0, 0x53, 0x2, 0xc, 0x5e, 0x9, 0x7, 0x40}, {0x2, 0xb, 0x6, 0x1, 0x7, 0x2, 0x3, 0x1, 0x0, 0x0, 0x3, 0x80, 0xfff}, {0xfffffffd, 0x2, 0x20, 0xd, 0x8, 0x5, 0x9, 0x3, 0x8, 0x7f, 0x8, 0x4, 0x1}], 0x495b800}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000000)={0xc7}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, 0x0) 628.79912ms ago: executing program 0 (id=9646): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="e1c194c07314197567609163a955a737cfdca424e4fc4ea388b431c78b32749341c73f7b7c51446e6bbf7f1de6a8ca5eb7372e3b24ef390ae15b6574683711fa3caff8f4fb3d0ca15b91526634d34eb3"}) 495.510712ms ago: executing program 4 (id=9647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0x8b, 0x0, 0xfffffffffffffeff}]}) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f00000000c0), 0x21015, &(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="9fce869f83ca01e449b589accc67538b2cd43b3888916b292cacb6f29705226771bc63b39a791e4af91c9d866d8c71d7f97535a4", @ANYRESOCT=0x0, @ANYRES64, @ANYRES32=r0, @ANYBLOB="cea981be281cb33fe4497665975d643c07d64c139bd49ca24bcd77bd6aa30e8b229b3af45d617ec9d7d9bcc9e10be79a139ec59503ea81671a5cc1915327a1cd587571e99498323073489bbfe1649d061ea3bd52bf256d5938f04b7f1e4240f53521239905cb245fb46e30574b5db57295bf9d057cdac5556323c37ce8bb5a8f8c619430678cc5f4a34ecdfcec8ba572c419f85a54d82e33447b3444c42b8eb9b98997ea2839f7a7b84a04bb9e9f68894877641d1835dbae298e96abe1e0796383a0edd84cedd1fd8dec0ab1f31b67f0c3e452b3d03b4400a67822d2d91518fa46ed", @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES16=r0]) 495.007492ms ago: executing program 3 (id=9648): r0 = openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) read$ptp(r0, &(0x7f0000000180)=""/151, 0x97) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x200200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000440)={0x1, 0x0, [{0x48e, 0x0, 0x94}]}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) 491.885192ms ago: executing program 0 (id=9649): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) 407.611343ms ago: executing program 3 (id=9650): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0xc354955c4b7aeb58}) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) 359.562424ms ago: executing program 4 (id=9651): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000900)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$rfkill(r0, &(0x7f0000000c80), 0x8) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000140)) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000cc0)={0x3, 0x10001, @status={[0x8, 0x4, 0x7, 0x7fffffff, 0x1, 0x6]}, [0x12e, 0xdd98, 0x4, 0x0, 0x0, 0x7bc, 0xc, 0xffff, 0x3, 0x2a3b, 0x3, 0x80000000, 0xe352, 0x101, 0x7fffffffffffffff, 0xb, 0x5ab9, 0x7, 0x2, 0x39, 0x10, 0x5, 0x3, 0x1000, 0x1, 0x2, 0x6b60ebe, 0x401, 0x6, 0x200000000, 0x81, 0x2, 0x6bdf1f, 0x10001, 0x8, 0xcc9, 0x1ff, 0x81, 0xfffffffffffff44f, 0xb211, 0x0, 0x7, 0x7, 0x8, 0x2, 0x5, 0x904, 0x5, 0xd, 0x9, 0x1, 0xffffffffffffffff, 0x4, 0x1, 0xd19, 0xffffffff00000000, 0x8, 0x13, 0xfffffffffffffff8, 0x7, 0x4, 0x563f384d, 0x80, 0x4]}) (async) r2 = openat$cgroup(r1, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000100)={0x2b, 0x4, 0x0, {0x5, 0x6, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) (async) openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f00000005c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BLKSECDISCARD(r3, 0x127d, 0x0) (async, rerun: 32) mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000040)={[{@stats}]}) (rerun: 32) 347.753024ms ago: executing program 5 (id=9652): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f00000001c0)=0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000140)={0xeeef0000, 0x11c000, 0x1}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x10000}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0xb}, 0x0, [0x0, 0x3, 0x403, 0x100000, 0x8, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa9a4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x6cff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x351e, 0x0, 0xfffffffd, 0x0, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x1, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0xf) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r7, 0x4068aea3, &(0x7f0000000200)={0xa8, 0x0, 0x1}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) close(r11) 334.621864ms ago: executing program 3 (id=9653): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 266.998325ms ago: executing program 0 (id=9654): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)=""/6) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000080)={0x6, 0x0, [{0x80000019, 0x2, 0x1, 0x778, 0x0, 0x8, 0x2}, {0x80000000, 0xffffffff, 0x4, 0x9, 0x200, 0x2, 0x8}, {0xa, 0x4, 0x2, 0x9, 0x8, 0x7, 0x3}, {0x80000007, 0x101, 0x0, 0x5a629e9e, 0x8ae, 0x800, 0x8}, {0x80000019, 0x0, 0x2, 0xa, 0x4, 0x0, 0x4}, {0x80000007, 0x7ff, 0x7, 0x9, 0x1069, 0x5, 0x7}]}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x9, 0x2, 0xfffffffffffffffb, 0x9, 0x2, 0xc, 0x3, 0x4, 0x6, 0x400, 0x10000, 0x4, 0x100000000, 0x40, 0x4, 0x100000001], 0x80a0000, 0x3723669e8ef756a5}) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000240)={0x6, 0x0, [{0x80000008, 0x4, 0x1, 0x101, 0x0, 0x7, 0x8}, {0x80000019, 0x280000, 0x0, 0x101, 0x8, 0xd681, 0x3}, {0x40000003, 0x400, 0x0, 0x8001, 0x6, 0x0, 0x101}, {0x4, 0x8, 0x1, 0x40, 0x6, 0x5, 0xa654}, {0x4, 0xffffffff, 0x1, 0xffffffc0, 0xe668, 0x8, 0x5}, {0x0, 0x4956, 0x2, 0x0, 0xffff, 0x3, 0xb}]}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000340)={0x7, 0x0, [{0x80000008, 0x4, 0x5, 0x3, 0x6, 0x5, 0x10}, {0x80000007, 0x0, 0x2, 0x5, 0xc, 0x1, 0x200}, {0x6, 0x8, 0x6, 0x6, 0x1ff, 0x2, 0x4}, {0x8000000a, 0x4, 0x1, 0x5d, 0x7, 0x8, 0xfffffffb}, {0xa, 0x0, 0x0, 0x3, 0x1, 0x87, 0x4}, {0xc0000001, 0x800, 0x6, 0x39, 0x8, 0x8, 0x2e4000}, {0x1, 0x9, 0x2, 0x3, 0x2, 0x6, 0xfffffff7}]}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, &(0x7f00000004c0)={0xa4, 0x0, 0x1}) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000540)={0x5, 0xff}) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f00000005c0)=@arm64={0x5, 0x7, 0x3, '\x00', 0x4}) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f00000006c0)={0x2, &(0x7f0000000680)=[{0x0, 0x20, &(0x7f0000000600)="7d99cda77de82253230ddc0632de90104a782eddc81431a7bc6332039bcbc45e", 0x1, 0x3856b92b420483}, {0x401, 0x3d, &(0x7f0000000640)="afa473768fba4201cac2c96022d89dec769c79195db6e132ecbe067b8b96703160e11add3c35f532dab33d253fe9e49059812608d86af0f13bcbbab195", 0x1, 0x1}]}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x20010, r5, 0x2085e000) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000700)=0x6) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x400, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, &(0x7f0000000780)) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000800)={{0x2, 0x0, 0x80, {0x3000, 0x1000, 0x6}}, "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", "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"}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000002880)={0x200, r2, 'id1\x00'}) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, &(0x7f0000002900)={{0x0, 0x0, 0x80}}) write$selinux_attr(r4, &(0x7f0000004980)='system_u:object_r:usbmon_device_t:s0\x00', 0x25) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000049c0)={[0x57cfe9e8, 0x6, 0x0, 0x48, 0x7, 0x1, 0x8001, 0x401, 0x6, 0x8, 0x80000000, 0x0, 0x5550, 0x7, 0x6, 0x9], 0x1, 0x20005}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000004a80)={@local}) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f0000004ac0)={0xffff, 0x2, 0x31, 0xc, 0x35051ea0}) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000004b40)={0xd440, 0x4, 0x5, 0x5, 0x5, 0x0, [{0xd489, 0x1, 0x6, '\x00', 0xb08}, {0x5, 0x1d8, 0x0, '\x00', 0x2000}, {0x0, 0x1, 0xffffffffffffffff, '\x00', 0x308c}, {0x6, 0x4, 0xfffffffffffffff7, '\x00', 0x104}, {0xe, 0xa, 0xd, '\x00', 0x4}]}) 262.037005ms ago: executing program 3 (id=9655): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103403, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2c01, @ioapic={0x100010000, 0x1, 0x0, 0x0, 0x0, [{0x6, 0x7, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0xff}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd, '\x00', 0x2}, {0x8, 0x80, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x3, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x81, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 119.691708ms ago: executing program 0 (id=9656): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x61, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b2"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 96.762058ms ago: executing program 3 (id=9657): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000080)="01", 0x1) write$rfkill(r1, &(0x7f0000000040)={0x10, 0x4, 0x3, 0x1, 0x1}, 0x8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000000)='(\x0f\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x54, 0x0, &(0x7f0000000300)=[@increfs, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=9658): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x405c5503, &(0x7f0000000800)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}}) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): m_u:object_r:unlabeled_t tclass=dir permissive=1 [ 613.135997][ T36] audit: type=1400 audit(1750312633.699:129701): avc: denied { ioctl } for pid=27293 comm="syz.0.8546" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 613.166542][ T36] audit: type=1326 audit(1750312633.699:129702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27293 comm="syz.0.8546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4eed8e929 code=0x7ffc0000 [ 613.199765][ T36] audit: type=1326 audit(1750312633.699:129703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27293 comm="syz.0.8546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4eed8e929 code=0x7ffc0000 [ 613.231391][ T36] audit: type=1326 audit(1750312633.699:129704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27293 comm="syz.0.8546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa4eed8e929 code=0x7ffc0000 [ 613.236166][T27303] binder: Unknown parameter '0000000000000000000000318446744073709551615' [ 613.260854][ T36] audit: type=1326 audit(1750312633.699:129705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27293 comm="syz.0.8546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4eed8e929 code=0x7ffc0000 [ 613.296823][ T36] audit: type=1326 audit(1750312633.699:129706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27293 comm="syz.0.8546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa4eed8e929 code=0x7ffc0000 [ 613.327104][ T36] audit: type=1400 audit(1750312633.699:129707): avc: denied { mounton } for pid=27293 comm="syz.0.8546" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 613.386594][T27306] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 613.514523][T27313] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 613.664426][T27324] kvm: user requested TSC rate below hardware speed [ 613.683575][T27313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 613.717840][T27319] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 613.769414][T27329] rust_binder: Error while translating object. [ 613.778967][T27329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 613.786109][T27329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:682 [ 613.854808][T27332] can0: slcan on ttyS3. [ 613.929368][T27332] binder: Bad value for 'defcontext' [ 614.119739][T27339] input: syz0 as /devices/virtual/input/input518 [ 614.159731][T27331] can0 (unregistered): slcan off ttyS3. [ 614.567908][T27372] serio: Serial port ttynull [ 614.708899][T27384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 614.708930][T27384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:696 [ 615.541962][T27425] SELinux: policydb string SE«;Ê›4 does not match my string SE Linux [ 615.683430][T27425] SELinux: failed to load policy [ 615.913726][T27433] binder: Unknown parameter 'dont_hash' [ 615.930214][T27434] binder: Unknown parameter 'dont_hash' [ 616.097344][T27444] rust_binder: got new transaction with bad transaction stack [ 616.097368][T27444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1090 [ 616.171428][T27445] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 616.479620][T27456] input: syz1 as /devices/virtual/input/input520 [ 616.636210][T27466] binder: Unknown parameter ' ' [ 616.731622][T27470] binder: Unknown parameter '' [ 616.755482][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 616.771570][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 616.788054][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 616.816804][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 616.848340][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 616.879872][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 616.918782][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 616.945249][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 616.967553][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 616.979005][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 616.989946][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 616.999175][T27490] binder: Unknown parameter 'smackfshat' [ 617.000243][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 617.040070][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 617.061877][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 617.077882][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 617.092758][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 617.111934][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 617.129253][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 617.150321][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 617.168247][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 617.194880][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 617.206363][T27498] rust_binder: Error while translating object. [ 617.206406][T27498] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 617.215255][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 617.237869][T27498] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:720 [ 617.240548][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 617.263946][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 617.275212][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 617.289170][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 617.314692][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 617.334125][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 617.370687][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 617.397989][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 617.412148][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 617.425291][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 617.455254][T27481] binder: Unknown parameter 'È÷ïß…§¦ŠSöT‹`â“.»kòå¸BՆΞ'y‡3åY´©äÐSžÆq' [ 617.580468][T27516] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 617.580498][T27516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:729 [ 617.759142][T27532] binder: Bad value for 'stats' [ 618.011878][T27546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:733 [ 618.011908][ T36] kauditd_printk_skb: 1160 callbacks suppressed [ 618.011922][ T36] audit: type=1400 audit(1750312638.659:130868): avc: denied { read } for pid=27541 comm="syz.5.8609" name="binder0" dev="binder" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 618.012438][T27540] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:733 [ 618.032600][ T36] audit: type=1400 audit(1750312638.669:130869): avc: denied { ioctl } for pid=27539 comm="syz.3.8610" path="/dev/binderfs/binder0" dev="binder" ino=79 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 618.098624][ T36] audit: type=1400 audit(1750312638.669:130870): avc: denied { ioctl } for pid=27539 comm="syz.3.8610" path="/dev/binderfs/binder0" dev="binder" ino=79 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 618.130388][ T36] audit: type=1400 audit(1750312638.689:130871): avc: denied { read open } for pid=27541 comm="syz.5.8609" path="/dev/binderfs/binder0" dev="binder" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 618.159042][ T36] audit: type=1400 audit(1750312638.689:130872): avc: denied { read } for pid=27541 comm="syz.5.8609" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 618.188188][ T36] audit: type=1400 audit(1750312638.689:130873): avc: denied { read open } for pid=27541 comm="syz.5.8609" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 618.224329][ T36] audit: type=1400 audit(1750312638.689:130874): avc: denied { ioctl } for pid=27541 comm="syz.5.8609" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 618.256241][ T36] audit: type=1400 audit(1750312638.689:130875): avc: denied { ioctl } for pid=27541 comm="syz.5.8609" path="/dev/binderfs/binder0" dev="binder" ino=154 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 618.287841][ T36] audit: type=1400 audit(1750312638.689:130876): avc: denied { set_context_mgr } for pid=27541 comm="syz.5.8609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 618.312034][ T36] audit: type=1400 audit(1750312638.689:130877): avc: denied { map } for pid=27541 comm="syz.5.8609" path="/dev/binderfs/binder0" dev="binder" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 618.683768][T27560] input: syz0 as /devices/virtual/input/input522 [ 618.885727][T27571] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 618.897381][T27573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1125 [ 618.899863][T27572] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 618.914191][T27571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:85 [ 618.929845][T27572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:85 [ 619.755960][T27620] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 619.756011][T27620] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1130 [ 620.810150][T27671] binder: Unknown parameter 'Õb€ÿl4£m¨µqçwÇg' [ 620.905933][T27679] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 620.957360][T27679] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 620.957391][T27679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:771 [ 621.046409][T27681] SELinux: failed to load policy [ 621.406312][T27697] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 621.406342][T27697] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1150 [ 621.582934][T27705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:780 [ 621.950902][T27713] binder: Unknown parameter '0x0000000000000000' [ 622.025581][T27717] binder: Bad value for 'stats' [ 622.213818][T27726] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1159 [ 622.548013][T27742] SELinux: security_context_str_to_sid (syst<ÍkA£) failed with errno=-22 [ 622.574090][T27744] rust_binder: Error while translating object. [ 622.574146][T27744] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 622.599114][T27744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:139 [ 622.710593][T27747] binder: Unknown parameter 'deá·\méŒtext' [ 623.056942][ T36] kauditd_printk_skb: 1182 callbacks suppressed [ 623.056960][ T36] audit: type=1400 audit(1750312643.719:132060): avc: denied { read } for pid=27759 comm="syz.0.8683" name="binder0" dev="binder" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 623.096751][ T36] audit: type=1400 audit(1750312643.719:132061): avc: denied { read open } for pid=27759 comm="syz.0.8683" path="/dev/binderfs/binder0" dev="binder" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 623.132513][ T36] audit: type=1400 audit(1750312643.759:132062): avc: denied { ioctl } for pid=27759 comm="syz.0.8683" path="/dev/binderfs/binder0" dev="binder" ino=157 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 623.164450][ T36] audit: type=1400 audit(1750312643.759:132063): avc: denied { set_context_mgr } for pid=27759 comm="syz.0.8683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 623.218153][ T36] audit: type=1400 audit(1750312643.789:132064): avc: denied { map } for pid=27759 comm="syz.0.8683" path="/dev/binderfs/binder0" dev="binder" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 623.255400][ T36] audit: type=1400 audit(1750312643.789:132065): avc: denied { read } for pid=27759 comm="syz.0.8683" path="/dev/binderfs/binder0" dev="binder" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 623.325762][ T36] audit: type=1400 audit(1750312643.789:132066): avc: denied { ioctl } for pid=27759 comm="syz.0.8683" path="/dev/binderfs/binder0" dev="binder" ino=157 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 623.359529][ T36] audit: type=1400 audit(1750312643.789:132067): avc: denied { call } for pid=27759 comm="syz.0.8683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 623.386359][ T36] audit: type=1400 audit(1750312643.789:132068): avc: denied { transfer } for pid=27759 comm="syz.0.8683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 623.443417][ T36] audit: type=1400 audit(1750312643.789:132069): avc: denied { read write } for pid=27107 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 623.545745][T27781] rust_binder: Write failure EINVAL in pid:1180 [ 623.584868][T27780] binder: Unknown parameter '|T14Z#tÃühÏ4xƒÇj' [ 623.867691][T27802] binder: Unknown parameter 'subj_type' [ 624.239878][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.271348][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.285755][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.285757][T27831] binder: Bad value for 'stats' [ 624.297060][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.322441][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.351198][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.366513][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.379400][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.413422][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.438741][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.456229][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.479620][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.522366][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.548732][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.560983][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.583927][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.597065][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.627962][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.657561][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.686900][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.698997][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.712700][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.728302][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.746946][T27843] rust_binder: got new transaction with bad transaction stack [ 624.746971][T27843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1200 [ 624.758864][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.781843][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.794566][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.807297][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.820164][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.832567][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.852409][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.870302][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.882225][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.893136][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.904420][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.916595][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.931493][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.942106][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.954289][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.966060][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.978288][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 624.993161][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 625.007617][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 625.019882][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 625.032451][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 625.044914][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 625.060227][T27828] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 627.861544][T27847] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 627.903608][T27849] binder: Unknown parameter 'defcontext00000000000000000000004' [ 628.069096][ T36] kauditd_printk_skb: 407 callbacks suppressed [ 628.069118][ T36] audit: type=1400 audit(1750312648.709:132477): avc: denied { read write open } for pid=24633 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 628.142333][T27859] input: syz1 as /devices/virtual/input/input525 [ 628.183347][ T36] audit: type=1400 audit(1750312648.709:132478): avc: denied { ioctl } for pid=24633 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 628.264914][T27866] audit: audit_backlog=65 > audit_backlog_limit=64 [ 628.264966][T27869] audit: audit_backlog=65 > audit_backlog_limit=64 [ 628.289108][ T36] audit: type=1400 audit(1750312648.719:132479): avc: denied { ioctl } for pid=27846 comm="syz.0.8715" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 628.297588][ T94] audit: audit_backlog=65 > audit_backlog_limit=64 [ 628.321845][T27866] audit: audit_lost=1029 audit_rate_limit=0 audit_backlog_limit=64 [ 628.340019][T27869] audit: audit_lost=1030 audit_rate_limit=0 audit_backlog_limit=64 [ 628.341823][T27866] audit: backlog limit exceeded [ 628.355639][T27875] audit: audit_backlog=65 > audit_backlog_limit=64 [ 628.651042][T27891] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 628.753876][T27894] block device autoloading is deprecated and will be removed. [ 628.779976][T27898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:171 [ 628.800378][T27894] syz.5.8730: attempt to access beyond end of device [ 628.800378][T27894] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 628.828595][T27900] SELinux: failed to load policy [ 628.845020][T27900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:826 [ 628.863943][T27901] SELinux: failed to load policy [ 628.909202][T27902] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 629.182798][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.226932][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.246184][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.294814][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.320364][T27935] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 629.328209][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.362022][T27934] rust_binder: Error while translating object. [ 629.362065][T27934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 629.380802][T27934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:181 [ 629.410135][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.447929][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.472386][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.484620][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.496339][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.507282][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.517830][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.538111][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.568035][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.579887][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.590190][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.625040][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.655471][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.657459][T27944] rust_binder: Error while translating object. [ 629.665827][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.684802][T27944] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 629.684830][T27944] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1207 [ 629.712839][T27944] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 629.724233][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.740001][T27946] random: crng reseeded on system resumption [ 629.744920][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.757760][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.780109][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.792613][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.805073][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.819312][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.838447][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.852152][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.870093][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.891762][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.902857][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.913300][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.930322][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.960087][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 629.987812][T27929] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 630.760259][T27979] rust_binder: Error while translating object. [ 630.760299][T27979] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 630.772084][T27979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1230 [ 630.811972][T27985] SELinux: failed to load policy [ 631.044082][T27992] rust_binder: Write failure EFAULT in pid:841 [ 631.046078][T27992] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 631.187428][T27996] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 631.243382][T27998] rust_binder: Write failure EFAULT in pid:1223 [ 631.283034][T28001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1226 [ 631.334475][T28003] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 631.689417][T28022] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 631.699394][T28022] binder: Bad value for 'stats' [ 631.757677][T28025] SELinux: security_context_str_to_sid () failed with errno=-22 [ 631.816356][T28028] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 631.964765][T28037] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.108627][T28052] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1235 [ 632.142074][T28051] can0: slcan on ptm0. [ 632.158230][T28051] binder: Bad value for 'stats' [ 632.219666][T28050] can0 (unregistered): slcan off ptm0. [ 632.401411][T28059] binder: Unknown parameter 'ÿÿ' [ 632.617856][T28069] binder: Unknown parameter 'c' [ 632.710432][T18386] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x4 [ 632.719428][T18386] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x2 [ 632.728280][T18386] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 632.737342][T18386] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 632.750742][T18386] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 632.761234][T28081] binder: Unknown parameter 'ï' [ 632.767165][T18386] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 632.776041][T18386] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 632.784757][T18386] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 632.794956][T18386] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 632.803822][T18386] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 632.812924][T18386] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 632.833333][T18386] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 632.842195][T18386] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 632.850846][T18386] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 632.860051][T18386] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 632.868803][T18386] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 632.878366][T18386] hid-generic 0000:3000000:0000.0021: hidraw0: HID v0.00 Device [sy] on syz0 [ 632.895645][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 632.928172][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 632.947008][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 632.958091][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 632.967179][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 632.999175][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.019128][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.028049][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.049090][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.077704][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.086560][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.095332][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.105523][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.114300][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.127275][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.136474][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.146242][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.150640][T28095] fido_id[28095]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 633.155034][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.181333][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.189820][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.198855][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.206839][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.215804][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.225145][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.233626][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.241502][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.249685][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.257816][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.266141][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.274427][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.282994][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.286648][ T36] kauditd_printk_skb: 1059 callbacks suppressed [ 633.286667][ T36] audit: type=1400 audit(1750312653.949:133534): avc: denied { read write } for pid=23004 comm="syz-executor" name="loop0" dev="devtmpfs" ino=823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 633.290723][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.307753][ T36] audit: type=1400 audit(1750312653.949:133535): avc: denied { read write open } for pid=23004 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 633.363495][ T36] audit: type=1400 audit(1750312653.949:133536): avc: denied { ioctl } for pid=23004 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=823 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 633.366231][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.399008][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.406947][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.415293][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.423391][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.431291][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.437265][ T36] audit: type=1400 audit(1750312654.089:133537): avc: denied { read } for pid=28096 comm="syz.0.8795" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 633.439361][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.464465][ T36] audit: type=1400 audit(1750312654.089:133538): avc: denied { read open } for pid=28096 comm="syz.0.8795" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 633.485446][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.497807][ T36] audit: type=1400 audit(1750312654.129:133539): avc: denied { ioctl } for pid=28096 comm="syz.0.8795" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 633.511436][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.529757][ T36] audit: type=1400 audit(1750312654.129:133540): avc: denied { read write } for pid=27107 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 633.537471][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.596969][ T36] audit: type=1400 audit(1750312654.129:133541): avc: denied { read write open } for pid=27107 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 633.599124][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.624164][ T36] audit: type=1400 audit(1750312654.129:133542): avc: denied { ioctl } for pid=27107 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 633.668672][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.668774][ T36] audit: type=1400 audit(1750312654.159:133543): avc: denied { read write } for pid=28096 comm="syz.0.8795" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 633.687704][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.739154][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.746766][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.767159][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.775270][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.784188][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.792667][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.800595][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.808464][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.816084][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.834176][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.853875][T28116] rust_binder: Read failure Err(EAGAIN) in pid:240 [ 633.853912][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.874907][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.882897][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.897307][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.904870][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.913203][T28120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1257 [ 633.913273][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.931584][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.941214][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.955657][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.963838][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.972035][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.980650][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.989417][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 633.998762][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.008156][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.019319][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.028390][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.049128][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.059134][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.079114][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.088223][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.098479][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.108577][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.116309][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.127008][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.135958][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.144833][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.154438][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.169505][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.180471][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.209111][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.217409][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.236438][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.245547][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.253771][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.267784][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.287165][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.297843][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.306889][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.316692][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.325143][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.333350][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.362530][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.381101][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.397207][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.408250][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.417054][T28139] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 634.417185][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.432586][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.441194][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.449367][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.458381][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.466764][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.474548][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.482624][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.490436][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.498985][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.507073][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.515877][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.529557][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.537830][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.546934][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.555048][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.584168][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.592622][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.602434][T28141] binder: Unknown parameter 'smackfsdef' [ 634.602536][T18386] hid-generic 0007:0009:0003.0022: unknown main item tag 0x0 [ 634.617498][T28143] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 634.632779][T18386] hid-generic 0007:0009:0003.0022: hidraw0: HID v0.04 Device [syz1] on syz0 [ 634.670534][T28143] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 634.680472][T28143] rust_binder: Write failure EINVAL in pid:1266 [ 634.875206][T28149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 634.899613][T28149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 635.020847][T28154] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 635.227763][T28162] fido_id[28162]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 635.244514][T28167] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 635.268794][T28169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:260 [ 635.379257][T28174] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 635.398107][T28174] pim6reg0: linktype set to 769 [ 635.522506][T28177] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 635.808273][T28193] rust_binder: Error while translating object. [ 635.808323][T28193] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 635.831934][T28193] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:264 [ 635.850563][T28194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1266 [ 636.043938][T28204] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 636.265087][T28215] input: syz1 as /devices/virtual/input/input530 [ 636.391401][T28220] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 636.460196][T28223] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 637.325295][T28272] binder: Unknown parameter '‡' [ 637.365739][T28270] input: syz0 as /devices/virtual/input/input531 [ 638.020500][T28302] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 638.180859][T28311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:897 [ 638.217400][T28311] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 638.245519][T28311] rust_binder: Read failure Err(EFAULT) in pid:897 [ 638.294775][ T36] kauditd_printk_skb: 826 callbacks suppressed [ 638.294795][ T36] audit: type=1400 audit(1750312658.949:134370): avc: denied { read } for pid=28323 comm="syz.4.8871" name="binder0" dev="binder" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 638.334795][ T36] audit: type=1400 audit(1750312658.949:134371): avc: denied { read open } for pid=28323 comm="syz.4.8871" path="/dev/binderfs/binder0" dev="binder" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 638.365900][ T36] audit: type=1400 audit(1750312658.949:134372): avc: denied { read } for pid=28323 comm="syz.4.8871" name="binder1" dev="binder" ino=344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 638.390877][ T36] audit: type=1400 audit(1750312658.949:134373): avc: denied { read open } for pid=28323 comm="syz.4.8871" path="/dev/binderfs/binder1" dev="binder" ino=344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 638.413191][T28325] binder: Bad value for 'max' [ 638.425434][ T36] audit: type=1400 audit(1750312658.999:134374): avc: denied { ioctl } for pid=28323 comm="syz.4.8871" path="/dev/binderfs/binder0" dev="binder" ino=343 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 638.458278][ T36] audit: type=1400 audit(1750312658.999:134375): avc: denied { set_context_mgr } for pid=28323 comm="syz.4.8871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 638.479218][ T36] audit: type=1400 audit(1750312658.999:134376): avc: denied { ioctl } for pid=28323 comm="syz.4.8871" path="/dev/binderfs/binder0" dev="binder" ino=343 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 638.508346][ T36] audit: type=1400 audit(1750312659.039:134377): avc: denied { map } for pid=28323 comm="syz.4.8871" path="/dev/binderfs/binder0" dev="binder" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 638.534850][ T36] audit: type=1400 audit(1750312659.049:134378): avc: denied { read } for pid=28323 comm="syz.4.8871" path="/dev/binderfs/binder0" dev="binder" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 638.561829][ T36] audit: type=1400 audit(1750312659.049:134379): avc: denied { read } for pid=28323 comm="syz.4.8871" name="binder0" dev="binder" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 638.670806][T28327] rust_binder: Write failure EINVAL in pid:1287 [ 638.675340][T28332] binder: Bad value for 'max' [ 638.675473][T28330] binder: Bad value for 'max' [ 638.707957][T28331] kvm: kvm [28328]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000 [ 638.760448][T28331] rust_binder: Write failure EINVAL in pid:315 [ 638.776300][T28334] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 638.790555][T28334] SELinux: failed to load policy [ 638.815366][T28334] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 638.815400][T28334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:905 [ 638.960512][T28339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:907 [ 638.973572][T28339] rust_binder: Error in use_page_slow: ESRCH [ 638.982793][T28339] rust_binder: use_range failure ESRCH [ 638.988803][T28339] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 638.995093][T28339] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 639.003082][T28339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:907 [ 639.013551][T28339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:907 [ 639.051001][T28341] kvm: Disabled LAPIC found during irq injection [ 639.071333][ T8153] hid-generic C98F:0003:0000.0023: unknown main item tag 0x0 [ 639.078968][ T8153] hid-generic C98F:0003:0000.0023: unknown main item tag 0x0 [ 639.094005][T28341] rust_binder: Error in use_page_slow: ESRCH [ 639.094029][T28341] rust_binder: use_range failure ESRCH [ 639.100773][T28341] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 639.106351][T28341] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 639.115330][T28341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:317 [ 639.127101][ T8153] hid-generic C98F:0003:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz1 [ 639.357846][T28352] fido_id[28352]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 639.370395][T28359] SELinux: security_context_str_to_sid () failed with errno=-22 [ 639.411447][T28359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1293 [ 639.590252][T28366] rust_binder: Error while translating object. [ 639.610219][T28366] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 639.626815][T28366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1297 [ 640.100011][T28388] rust_binder: Error while translating object. [ 640.129820][T28388] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 640.136936][T28388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1301 [ 640.181418][T28402] kvm_intel: kvm [28400]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 640.536726][T28413] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 640.536757][T28413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:337 [ 640.686497][T28420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 640.729426][T28420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1354 [ 640.781837][T28424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:927 [ 641.004682][T28437] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 641.230833][T28444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:341 [ 641.512625][T28460] binder: Unknown parameter 'ÿ' [ 642.061725][T28479] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 642.081969][ T8153] hid-generic 009C:0008:0003.0024: unknown main item tag 0x0 [ 642.127147][ T8153] hid-generic 009C:0008:0003.0024: unknown main item tag 0x0 [ 642.159177][ T8153] hid-generic 009C:0008:0003.0024: unknown main item tag 0x0 [ 642.167547][ T8153] hid-generic 009C:0008:0003.0024: unknown main item tag 0x0 [ 642.176632][ T8153] hid-generic 009C:0008:0003.0024: unknown main item tag 0x0 [ 642.201712][ T8153] hid-generic 009C:0008:0003.0024: hidraw0: HID v0.05 Device [syz1] on syz0 [ 642.331383][T28487] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 642.440271][T28498] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 642.451059][T28494] fido_id[28494]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 642.546658][T28502] serio: Serial port ttynull [ 642.624383][T28502] random: crng reseeded on system resumption [ 642.722681][T28502] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 642.748251][T28513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1374 [ 642.830038][T28519] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 643.044914][T28530] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 643.067220][T28532] rust_binder: Read failure Err(EAGAIN) in pid:957 [ 643.307051][ T36] kauditd_printk_skb: 916 callbacks suppressed [ 643.307071][ T36] audit: type=1400 audit(1750312663.959:135296): avc: denied { read write } for pid=24633 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 643.405227][ T36] audit: type=1400 audit(1750312664.009:135297): avc: denied { mounton } for pid=28541 comm="syz.0.8943" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 643.469088][ T36] audit: type=1400 audit(1750312664.009:135298): avc: denied { read write open } for pid=24633 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 643.510577][ T36] audit: type=1400 audit(1750312664.009:135299): avc: denied { ioctl } for pid=24633 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 643.578271][ T36] audit: type=1400 audit(1750312664.019:135300): avc: denied { read } for pid=28545 comm="syz.5.8944" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 643.640539][ T36] audit: type=1400 audit(1750312664.019:135301): avc: denied { read open } for pid=28545 comm="syz.5.8944" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 643.673589][T28572] audit: audit_backlog=65 > audit_backlog_limit=64 [ 643.674124][T28573] audit: audit_backlog=65 > audit_backlog_limit=64 [ 643.690309][T28575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 643.698536][T28575] audit: audit_lost=1033 audit_rate_limit=0 audit_backlog_limit=64 [ 643.719273][T28577] input: syz1 as /devices/virtual/input/input533 [ 643.839876][T28583] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1355 [ 643.845639][T28587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 643.876683][T28589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 643.876942][T28589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 643.908084][T28589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 643.923484][T28589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 643.923769][T28589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 643.943530][T28596] rust_binder: Write failure EINVAL in pid:371 [ 643.948790][T28589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 644.149742][T28609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:972 [ 644.196823][T28618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:381 [ 644.520370][T28640] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 644.560420][T28640] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 644.567082][T28640] rust_binder: Error while translating object. [ 644.591003][T28640] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 644.598378][T28640] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:982 [ 645.152932][T28671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:989 [ 645.305368][T28674] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 645.325455][T28674] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1414 [ 645.423234][T28681] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 645.512635][T28688] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 646.013025][T28716] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 646.106769][T28725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1432 [ 646.600172][T28741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 646.658630][T28746] serio: Serial port ttynull [ 646.678662][T28745] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1438 [ 646.748240][T28751] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 646.927117][T28756] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 646.932276][T28760] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 646.947025][T28760] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 647.032953][T28765] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 647.063352][T28765] rust_binder: Write failure EINVAL in pid:1398 [ 647.385386][T28778] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 647.393054][T28778] rust_binder: Error while translating object. [ 647.408753][T28778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 647.429154][T28778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1445 [ 647.443947][T28778] binder: Unknown parameter '00000000000000000000007' [ 647.503480][T28783] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 647.716481][T28791] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 647.846174][T28803] kvm: apic: phys broadcast and lowest prio [ 647.863178][T28807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1414 [ 647.863209][T28807] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 647.889111][T28807] rust_binder: Read failure Err(EFAULT) in pid:1414 [ 647.944186][T28809] input: syz0 as /devices/virtual/input/input536 [ 648.013933][T28809] rust_binder: Read failure Err(EAGAIN) in pid:1455 [ 648.077127][T28819] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 648.126571][T28821] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 648.143557][T28823] rust_binder: Error while translating object. [ 648.163429][T28823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 648.183113][T28823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1019 [ 648.320027][ T36] kauditd_printk_skb: 1145 callbacks suppressed [ 648.320045][ T36] audit: type=1400 audit(1750312668.969:136319): avc: denied { read } for pid=28838 comm="syz.4.9042" name="binder1" dev="binder" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 648.368393][T28841] rust_binder: Got transaction with invalid offset. [ 648.368426][T28841] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 648.391269][T28841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1420 [ 648.402837][ T36] audit: type=1400 audit(1750312668.979:136320): avc: denied { read open } for pid=28838 comm="syz.4.9042" path="/dev/binderfs/binder1" dev="binder" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 648.459114][ T36] audit: type=1400 audit(1750312668.979:136321): avc: denied { read } for pid=28836 comm="syz.0.9040" name="binder0" dev="binder" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 648.484884][ T36] audit: type=1400 audit(1750312668.979:136322): avc: denied { read open } for pid=28836 comm="syz.0.9040" path="/dev/binderfs/binder0" dev="binder" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 648.510633][ T36] audit: type=1400 audit(1750312668.979:136323): avc: denied { read } for pid=28838 comm="syz.4.9042" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 648.534661][ T36] audit: type=1400 audit(1750312668.979:136324): avc: denied { read open } for pid=28838 comm="syz.4.9042" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 648.536158][T28847] input: syz0 as /devices/virtual/input/input537 [ 648.562164][ T36] audit: type=1400 audit(1750312668.979:136325): avc: denied { ioctl } for pid=28838 comm="syz.4.9042" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 648.591468][ T36] audit: type=1400 audit(1750312668.989:136326): avc: denied { read write } for pid=28834 comm="syz.5.9039" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 648.643644][ T36] audit: type=1400 audit(1750312668.989:136327): avc: denied { read write open } for pid=28834 comm="syz.5.9039" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 648.702195][ T36] audit: type=1400 audit(1750312668.989:136328): avc: denied { map } for pid=28834 comm="syz.5.9039" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 649.254952][T28869] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 649.300238][T28869] rust_binder: got new transaction with bad transaction stack [ 649.300263][T28869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:445 [ 649.631236][T28889] SELinux: security_context_str_to_sid () failed with errno=-22 [ 649.645601][T28887] serio: Serial port ttynull [ 650.017830][ T63] hid (null): unknown global tag 0xe [ 650.021008][T28907] rust_binder: Write failure EFAULT in pid:1487 [ 650.030865][ T63] hid (null): unknown global tag 0xe [ 650.066760][ T63] hid (null): unknown global tag 0xc [ 650.086522][ T63] hid (null): unknown global tag 0xe [ 650.100657][ T63] hid (null): invalid report_count 1654457135 [ 650.106926][ T63] hid (null): unknown global tag 0xe [ 650.122395][ T63] hid (null): report_id 3577794987 is invalid [ 650.137158][ T63] hid (null): invalid report_size 31387 [ 650.151086][ T63] hid (null): unknown global tag 0xe [ 650.162988][ T63] hid (null): unknown global tag 0xd [ 650.173853][ T63] hid (null): unknown global tag 0xc [ 650.185115][ T63] hid (null): unknown global tag 0xe [ 650.190669][ T63] hid (null): invalid report_count 36620 [ 650.196600][ T63] hid (null): invalid report_size 31091 [ 650.202415][ T63] hid (null): unknown global tag 0xd [ 650.208357][ T63] hid (null): unknown global tag 0xe [ 650.219241][ T63] hid (null): unknown global tag 0xe [ 650.232720][ T63] hid (null): unknown global tag 0xe [ 650.239624][ T63] hid (null): report_id 0 is invalid [ 650.253358][ T63] hid (null): global environment stack overflow [ 650.259769][ T63] hid (null): unknown global tag 0xd [ 650.265229][ T63] hid (null): invalid report_count -133464396 [ 650.281894][ T63] hid-generic 0000:000E:000F.0025: unknown main item tag 0xe [ 650.294768][ T63] hid-generic 0000:000E:000F.0025: unknown global tag 0xe [ 650.316275][ T63] hid-generic 0000:000E:000F.0025: item 0 1 1 14 parsing failed [ 650.327637][ T63] hid-generic 0000:000E:000F.0025: probe with driver hid-generic failed with error -22 [ 650.512955][T28935] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 650.553677][T28936] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 650.577453][T28938] binder: Unknown parameter 'defcontext01777777777777777777777' [ 650.597181][T28938] rust_binder: got new transaction with bad transaction stack [ 650.597205][T28938] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1051 [ 651.231390][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 651.312383][T28960] binder: Unknown parameter 'Ã76|Ž$ñmŸJñ' [ 651.443541][T28966] kvm: user requested TSC rate below hardware speed [ 651.564793][T28978] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 651.591282][T28980] binder: Bad value for 'defcontext' [ 651.649673][T28982] SELinux: security_context_str_to_sid () failed with errno=-22 [ 651.698158][T28984] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 651.722031][T28984] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 651.801230][T28994] binder: Unknown parameter '01777777777777777777777' [ 651.883873][T28997] SELinux: security_context_str_to_sid (syte000000000000009:\:resv_level:./file0:) failed with errno=-22 [ 652.020796][T29004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:478 [ 652.024903][T29004] rust_binder: Read failure Err(EFAULT) in pid:478 [ 652.157146][T29020] rust_binder: Write failure EINVAL in pid:1075 [ 652.250571][ T307] Bluetooth: hci1: Frame reassembly failed (-84) [ 652.268553][T29024] Bluetooth: hci1: Frame reassembly failed (-84) [ 652.284273][T29024] kvm: user requested TSC rate below hardware speed [ 652.552553][T29028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:489 [ 653.039966][T29044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 653.046398][T29044] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 653.070033][T29044] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:502 [ 653.084313][T29044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 653.089848][T29046] binder: Unknown parameter '00000000000000000000003' [ 653.156000][T29049] rust_binder: Write failure EINVAL in pid:504 [ 653.156743][T29051] rust_binder: Write failure EINVAL in pid:504 [ 653.230231][T29049] rust_binder: Write failure EFAULT in pid:504 [ 653.239911][T29049] binder: Unknown parameter '/dev/full' [ 653.239959][T29051] binder: Unknown parameter '/dev/full' [ 653.299192][ T935] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 653.330579][ T36] kauditd_printk_skb: 1038 callbacks suppressed [ 653.330598][ T36] audit: type=1400 audit(1750312673.989:137364): avc: denied { ioctl } for pid=29048 comm="syz.5.9113" path="/dev/binderfs/binder1" dev="binder" ino=560 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 653.438630][ T36] audit: type=1400 audit(1750312674.089:137365): avc: denied { read write } for pid=27107 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 653.468103][ T36] audit: type=1400 audit(1750312674.089:137366): avc: denied { read write open } for pid=27107 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 653.499797][ T36] audit: type=1400 audit(1750312674.089:137367): avc: denied { ioctl } for pid=27107 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 653.536452][ T36] audit: type=1400 audit(1750312674.119:137368): avc: denied { read write } for pid=29056 comm="syz.4.9114" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 653.565955][ T36] audit: type=1400 audit(1750312674.119:137369): avc: denied { read open } for pid=29056 comm="syz.4.9114" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 653.592085][ T36] audit: type=1400 audit(1750312674.179:137370): avc: denied { map } for pid=29056 comm="syz.4.9114" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 653.622578][ T36] audit: type=1400 audit(1750312674.179:137371): avc: denied { read } for pid=29056 comm="syz.4.9114" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 653.649177][ T36] audit: type=1400 audit(1750312674.219:137372): avc: denied { mounton } for pid=29058 comm="syz.0.9122" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 653.681442][ T36] audit: type=1400 audit(1750312674.219:137373): avc: denied { mount } for pid=29058 comm="syz.0.9122" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 653.950891][T29066] kvm: kvm [29065]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 654.009174][T29066] binder: Bad value for 'max' [ 654.259094][ T935] Bluetooth: hci1: command 0x1003 tx timeout [ 654.259467][ T52] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 654.906428][T29116] binder: Unknown parameter 'síàa"n' [ 654.922040][T29115] binder: Unknown parameter '?' [ 655.142158][T29129] binder: Bad value for 'max' [ 655.143310][T29121] binder: Bad value for 'max' [ 655.413065][T29138] SELinux: failed to load policy [ 655.542486][T29151] rust_binder: Error while translating object. [ 655.542599][T29151] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 655.554806][T29150] rust_binder: Error while translating object. [ 655.580373][T29151] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:543 [ 655.590055][T29150] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 655.605392][T29150] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:543 [ 655.645519][T29159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 656.447213][T29198] rust_binder: Write failure EFAULT in pid:1481 [ 656.460377][T29198] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 656.569918][T29201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:554 [ 656.941778][T29215] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:558 [ 656.980272][T29215] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 656.999108][T29215] rust_binder: Read failure Err(EFAULT) in pid:558 [ 657.748027][T29237] binder: Unknown parameter 'dont_hash' [ 657.979754][T29244] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 657.979787][T29244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1566 [ 658.052721][T29246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 658.101189][T29246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 658.188558][T29252] binder: Bad value for 'stats' [ 658.357119][ T36] kauditd_printk_skb: 1128 callbacks suppressed [ 658.357157][ T36] audit: type=1400 audit(1750312679.009:138502): avc: denied { read } for pid=29257 comm="syz.5.9183" name="binder0" dev="binder" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 658.413923][ T36] audit: type=1400 audit(1750312679.009:138503): avc: denied { read open } for pid=29257 comm="syz.5.9183" path="/dev/binderfs/binder0" dev="binder" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 658.444031][ T36] audit: type=1400 audit(1750312679.019:138504): avc: denied { read write } for pid=24633 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 658.499193][ T36] audit: type=1400 audit(1750312679.019:138505): avc: denied { read write open } for pid=24633 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 658.579191][ T36] audit: type=1400 audit(1750312679.019:138506): avc: denied { ioctl } for pid=24633 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 658.646993][ T36] audit: type=1400 audit(1750312679.049:138507): avc: denied { ioctl } for pid=29257 comm="syz.5.9183" path="/dev/binderfs/binder0" dev="binder" ino=577 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 658.679182][ T36] audit: type=1400 audit(1750312679.049:138508): avc: denied { set_context_mgr } for pid=29257 comm="syz.5.9183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 658.716908][ T36] audit: type=1400 audit(1750312679.059:138509): avc: denied { map } for pid=29257 comm="syz.5.9183" path="/dev/binderfs/binder0" dev="binder" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 658.753997][ T36] audit: type=1400 audit(1750312679.059:138510): avc: denied { read } for pid=29257 comm="syz.5.9183" path="/dev/binderfs/binder0" dev="binder" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 658.792026][ T36] audit: type=1400 audit(1750312679.059:138511): avc: denied { ioctl } for pid=29257 comm="syz.5.9183" path="/dev/binderfs/binder0" dev="binder" ino=577 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 658.821894][T29273] SELinux: failed to load policy [ 659.000502][T29288] rust_binder: Write failure EINVAL in pid:578 [ 659.500739][T29326] Restarting kernel threads ... done. [ 659.800111][T29338] rust_binder: Read failure Err(EAGAIN) in pid:589 [ 660.192383][T29362] binder: Bad value for 'defcontext' [ 660.722659][T29374] SELinux: ebitmap: truncated map [ 660.728872][T29374] SELinux: failed to load policy [ 660.783102][T29390] kvm: kvm [29389]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0xfff [ 660.795109][T29392] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 660.862136][T29397] binder: Unknown parameter '' [ 660.900807][T29395] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 661.004223][T29405] SELinux: security_context_str_to_sid () failed with errno=-22 [ 661.020640][T29405] rust_binder: Error while translating object. [ 661.021437][T29405] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 661.028474][T29405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1537 [ 661.653911][T29438] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 661.749107][T29444] input: syz1 as /devices/virtual/input/input540 [ 661.935688][T29453] rust_binder: Error while translating object. [ 661.935728][T29453] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 661.948400][T29453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1634 [ 662.559724][T29476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:619 [ 662.656944][T29486] rust_binder: Write failure EINVAL in pid:1549 [ 662.691442][T29486] SELinux: failed to load policy [ 662.724673][T29486] rust_binder: Error in use_page_slow: ESRCH [ 662.724697][T29486] rust_binder: use_range failure ESRCH [ 662.733816][T29486] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 662.759550][T29486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 662.776682][T29486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1549 [ 663.001359][T29498] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 663.030996][T29498] pim6reg0: linktype set to 769 [ 663.040663][T29498] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 663.127834][T29502] serio: Serial port ttynull [ 663.261613][T29507] rust_binder: Write failure EINVAL in pid:1646 [ 663.390635][ T36] kauditd_printk_skb: 837 callbacks suppressed [ 663.390652][ T36] audit: type=1400 audit(1750312684.049:139349): avc: denied { read write } for pid=24633 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 663.474912][ T36] audit: type=1400 audit(1750312684.049:139350): avc: denied { read write open } for pid=24633 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 663.516438][ T36] audit: type=1400 audit(1750312684.049:139351): avc: denied { ioctl } for pid=24633 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 663.578518][ T36] audit: type=1400 audit(1750312684.099:139352): avc: denied { read write } for pid=29516 comm="syz.5.9271" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 663.600494][T29525] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 663.611085][ T36] audit: type=1400 audit(1750312684.099:139353): avc: denied { read write open } for pid=29516 comm="syz.5.9271" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 663.629164][T29525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1173 [ 663.659568][T29527] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 663.671338][ T36] audit: type=1400 audit(1750312684.109:139354): avc: denied { mounton } for pid=29513 comm="syz.0.9268" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 663.713091][ T36] audit: type=1400 audit(1750312684.109:139355): avc: denied { read } for pid=29516 comm="syz.5.9271" name="binder0" dev="binder" ino=589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 663.742467][ T36] audit: type=1400 audit(1750312684.109:139356): avc: denied { read open } for pid=29516 comm="syz.5.9271" path="/dev/binderfs/binder0" dev="binder" ino=589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 663.777150][ T36] audit: type=1400 audit(1750312684.109:139357): avc: denied { mount } for pid=29513 comm="syz.0.9268" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 663.810384][ T36] audit: type=1400 audit(1750312684.109:139358): avc: denied { ioctl } for pid=29516 comm="syz.5.9271" path="/dev/binderfs/binder0" dev="binder" ino=589 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 663.912461][T29533] random: crng reseeded on system resumption [ 664.241044][T29553] kvm: user requested TSC rate below hardware speed [ 664.416206][T29569] rust_binder: Write failure EINVAL in pid:1184 [ 664.491901][T29571] input: syz0 as /devices/virtual/input/input544 [ 664.770239][T29571] kvm: user requested TSC rate below hardware speed [ 664.896227][T29591] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 665.093129][T29599] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 666.250127][T29644] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 666.281134][T29644] SELinux: failed to load policy [ 666.642570][T29666] rust_binder: Write failure EINVAL in pid:1591 [ 667.479993][T29700] input: syz0 as /devices/virtual/input/input546 [ 667.538185][T29703] kvm: user requested TSC rate below hardware speed [ 668.133837][T29740] kvm: user requested TSC rate below hardware speed [ 668.150799][T29736] kvm: Disabled LAPIC found during irq injection [ 668.163804][T29740] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1710 [ 668.264003][T29748] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 668.399159][T29752] SELinux: failed to load policy [ 668.406627][ T36] kauditd_printk_skb: 963 callbacks suppressed [ 668.406647][ T36] audit: type=1400 audit(1750312689.059:140318): avc: denied { read write } for pid=29757 comm="syz.0.9354" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 668.459137][T29761] audit: audit_lost=1080 audit_rate_limit=0 audit_backlog_limit=64 [ 668.493989][ T36] audit: type=1400 audit(1750312689.059:140319): avc: denied { read open } for pid=29757 comm="syz.0.9354" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 668.524822][ T36] audit: type=1400 audit(1750312689.059:140320): avc: denied { map } for pid=29757 comm="syz.0.9354" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 668.559088][T29761] audit: out of memory in audit_log_start [ 668.573877][ T36] audit: type=1400 audit(1750312689.059:140321): avc: denied { read } for pid=29757 comm="syz.0.9354" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 668.629125][ T36] audit: type=1400 audit(1750312689.109:140322): avc: denied { read } for pid=29751 comm="syz.3.9351" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 668.673301][ T36] audit: type=1400 audit(1750312689.109:140323): avc: denied { read open } for pid=29751 comm="syz.3.9351" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 668.718873][ T36] audit: type=1400 audit(1750312689.109:140324): avc: denied { read write } for pid=23001 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 668.773947][T29768] binder: Unknown parameter 'nXI' [ 668.818547][ T36] audit: type=1400 audit(1750312689.109:140325): avc: denied { read write open } for pid=23001 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 669.342589][T29781] SELinux: security_context_str_to_sid () failed with errno=-22 [ 669.454480][T29791] rust_binder: Error while translating object. [ 669.454506][T29791] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 669.470006][T29791] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1610 [ 670.408465][T29835] input: syz1 as /devices/virtual/input/input547 [ 671.299392][T29864] kvm: kvm [29863]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400 [ 671.787256][T29883] binder: Unknown parameter '' [ 672.164278][T29899] FAULT_INJECTION: forcing a failure. [ 672.164278][T29899] name failslab, interval 1, probability 0, space 0, times 0 [ 672.211256][T29899] CPU: 0 UID: 0 PID: 29899 Comm: syz.3.9396 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 672.211291][T29899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 672.211303][T29899] Call Trace: [ 672.211310][T29899] [ 672.211319][T29899] __dump_stack+0x21/0x30 [ 672.211344][T29899] dump_stack_lvl+0x10c/0x190 [ 672.211363][T29899] ? __cfi_dump_stack_lvl+0x10/0x10 [ 672.211384][T29899] ? skb_put+0x112/0x1f0 [ 672.211405][T29899] dump_stack+0x19/0x20 [ 672.211422][T29899] should_fail_ex+0x3d9/0x530 [ 672.211442][T29899] should_failslab+0xac/0x100 [ 672.211463][T29899] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 672.211485][T29899] ? sidtab_sid2str_get+0x139/0x370 [ 672.211507][T29899] kmemdup_noprof+0x31/0x80 [ 672.211523][T29899] sidtab_sid2str_get+0x139/0x370 [ 672.211542][T29899] security_sid_to_context_core+0x30d/0x5d0 [ 672.211561][T29899] security_sid_to_context+0x2e/0x50 [ 672.211577][T29899] avc_audit_post_callback+0x198/0x780 [ 672.211592][T29899] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 672.211607][T29899] ? __cfi_audit_log_format+0x10/0x10 [ 672.211622][T29899] ? audit_log_untrustedstring+0xea/0x100 [ 672.211635][T29899] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 672.211649][T29899] common_lsm_audit+0x147a/0x1860 [ 672.211664][T29899] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 672.211685][T29899] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 672.211700][T29899] ? __cfi_common_lsm_audit+0x10/0x10 [ 672.211715][T29899] ? avc_denied+0x112/0x180 [ 672.211731][T29899] slow_avc_audit+0x18d/0x1f0 [ 672.211746][T29899] ? __cfi_slow_avc_audit+0x10/0x10 [ 672.211762][T29899] ? avc_has_perm_noaudit+0x21c/0x360 [ 672.211779][T29899] avc_has_perm+0x1cd/0x220 [ 672.211797][T29899] ? __cfi_avc_has_perm+0x10/0x10 [ 672.211814][T29899] ? __kasan_check_write+0x18/0x20 [ 672.211832][T29899] ? proc_fail_nth_write+0x17e/0x210 [ 672.211850][T29899] selinux_mmap_file+0x1f3/0x320 [ 672.211873][T29899] ? __cfi_selinux_mmap_file+0x10/0x10 [ 672.211894][T29899] ? vfs_write+0x8ba/0xe80 [ 672.211914][T29899] security_mmap_file+0x2af/0x350 [ 672.211936][T29899] vm_mmap_pgoff+0x11d/0x4e0 [ 672.211956][T29899] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 672.211975][T29899] ? __fget_files+0x2c5/0x340 [ 672.211997][T29899] ksys_mmap_pgoff+0x166/0x1e0 [ 672.212017][T29899] __x64_sys_mmap+0x121/0x140 [ 672.212038][T29899] x64_sys_call+0x13bf/0x2ee0 [ 672.212059][T29899] do_syscall_64+0x58/0xf0 [ 672.212079][T29899] ? clear_bhb_loop+0x35/0x90 [ 672.212100][T29899] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 672.212122][T29899] RIP: 0033:0x7f8d10f8e929 [ 672.212138][T29899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.212152][T29899] RSP: 002b:00007f8d11d85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 672.212172][T29899] RAX: ffffffffffffffda RBX: 00007f8d111b6080 RCX: 00007f8d10f8e929 [ 672.212186][T29899] RDX: 000000000100000a RSI: 0000000000b36000 RDI: 0000200000000000 [ 672.212199][T29899] RBP: 00007f8d11d85090 R08: 0000000000000003 R09: 0000000045809000 [ 672.212222][T29899] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 672.212233][T29899] R13: 0000000000000001 R14: 00007f8d111b6080 R15: 00007ffcc6997a78 [ 672.212249][T29899] [ 673.412733][ T36] kauditd_printk_skb: 516 callbacks suppressed [ 673.412750][ T36] audit: type=1400 audit(1750312694.069:140840): avc: denied { read write } for pid=29930 comm="syz.3.9408" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 673.486861][ T36] audit: type=1400 audit(1750312694.079:140841): avc: denied { map } for pid=29922 comm="syz.5.9405" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 673.559079][ T36] audit: type=1400 audit(1750312694.079:140842): avc: denied { read } for pid=29922 comm="syz.5.9405" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 673.625062][ T36] audit: type=1400 audit(1750312694.109:140843): avc: denied { read open } for pid=29930 comm="syz.3.9408" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 673.667927][T29933] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 673.667962][T29933] rust_binder: Error in use_page_slow: EBUSY [ 673.685774][T29933] rust_binder: use_range failure EBUSY [ 673.693405][T29933] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 673.701147][ T36] audit: type=1400 audit(1750312694.119:140844): avc: denied { read } for pid=29930 comm="syz.3.9408" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 673.749120][T29933] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 673.749152][T29933] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 673.749430][T29935] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 673.785007][T29933] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1665 [ 673.791195][ T36] audit: type=1400 audit(1750312694.119:140845): avc: denied { read open } for pid=29930 comm="syz.3.9408" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 673.837254][ T36] audit: type=1400 audit(1750312694.119:140846): avc: denied { ioctl } for pid=29930 comm="syz.3.9408" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 673.863403][ T36] audit: type=1400 audit(1750312694.139:140847): avc: denied { read write } for pid=23004 comm="syz-executor" name="loop0" dev="devtmpfs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 673.910073][T29943] audit: audit_backlog=65 > audit_backlog_limit=64 [ 673.916925][T29943] audit: audit_lost=1082 audit_rate_limit=0 audit_backlog_limit=64 [ 673.982503][T29943] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 674.180007][T29951] rust_binder: Write failure EINVAL in pid:1673 [ 674.373284][T29960] input: syz0 as /devices/virtual/input/input548 [ 674.408257][T29960] input: failed to attach handler leds to device input548, error: -6 [ 674.831217][T29982] binder: Unknown parameter 'obj_role' [ 674.915357][T29989] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1682 [ 676.028483][T30014] rust_binder: Write failure EINVAL in pid:1306 [ 676.060260][T30014] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 676.531646][T30039] FAULT_INJECTION: forcing a failure. [ 676.531646][T30039] name failslab, interval 1, probability 0, space 0, times 0 [ 676.639108][T30039] CPU: 1 UID: 0 PID: 30039 Comm: syz.3.9442 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 676.639144][T30039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 676.639164][T30039] Call Trace: [ 676.639170][T30039] [ 676.639176][T30039] __dump_stack+0x21/0x30 [ 676.639200][T30039] dump_stack_lvl+0x10c/0x190 [ 676.639217][T30039] ? __cfi_dump_stack_lvl+0x10/0x10 [ 676.639235][T30039] ? skb_put+0x112/0x1f0 [ 676.639260][T30039] dump_stack+0x19/0x20 [ 676.639278][T30039] should_fail_ex+0x3d9/0x530 [ 676.639298][T30039] should_failslab+0xac/0x100 [ 676.639320][T30039] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 676.639341][T30039] ? sidtab_sid2str_get+0x139/0x370 [ 676.639363][T30039] kmemdup_noprof+0x31/0x80 [ 676.639381][T30039] sidtab_sid2str_get+0x139/0x370 [ 676.639403][T30039] security_sid_to_context_core+0x30d/0x5d0 [ 676.639430][T30039] security_sid_to_context+0x2e/0x50 [ 676.639450][T30039] avc_audit_post_callback+0x198/0x780 [ 676.639469][T30039] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 676.639486][T30039] ? __cfi_audit_log_format+0x10/0x10 [ 676.639503][T30039] ? audit_log_untrustedstring+0xea/0x100 [ 676.639519][T30039] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 676.639535][T30039] common_lsm_audit+0x147a/0x1860 [ 676.639551][T30039] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 676.639570][T30039] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 676.639587][T30039] ? __cfi_common_lsm_audit+0x10/0x10 [ 676.639604][T30039] ? avc_denied+0x112/0x180 [ 676.639622][T30039] slow_avc_audit+0x18d/0x1f0 [ 676.639639][T30039] ? __cfi_slow_avc_audit+0x10/0x10 [ 676.639658][T30039] ? avc_has_perm_noaudit+0x21c/0x360 [ 676.639676][T30039] avc_has_perm+0x1cd/0x220 [ 676.639693][T30039] ? __cfi_avc_has_perm+0x10/0x10 [ 676.639711][T30039] ? __kasan_check_write+0x18/0x20 [ 676.639729][T30039] ? proc_fail_nth_write+0x17e/0x210 [ 676.639747][T30039] selinux_mmap_file+0x1f3/0x320 [ 676.639770][T30039] ? __cfi_selinux_mmap_file+0x10/0x10 [ 676.639792][T30039] ? vfs_write+0x8ba/0xe80 [ 676.639813][T30039] security_mmap_file+0x2af/0x350 [ 676.639834][T30039] vm_mmap_pgoff+0x11d/0x4e0 [ 676.639854][T30039] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 676.639873][T30039] ? __fget_files+0x2c5/0x340 [ 676.639895][T30039] ksys_mmap_pgoff+0x166/0x1e0 [ 676.639915][T30039] __x64_sys_mmap+0x121/0x140 [ 676.639936][T30039] x64_sys_call+0x13bf/0x2ee0 [ 676.639957][T30039] do_syscall_64+0x58/0xf0 [ 676.639973][T30039] ? clear_bhb_loop+0x35/0x90 [ 676.639993][T30039] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 676.640013][T30039] RIP: 0033:0x7f8d10f8e929 [ 676.640027][T30039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 676.640040][T30039] RSP: 002b:00007f8d11d85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 676.640058][T30039] RAX: ffffffffffffffda RBX: 00007f8d111b6080 RCX: 00007f8d10f8e929 [ 676.640071][T30039] RDX: 000000000100000a RSI: 0000000000b36000 RDI: 0000200000000000 [ 676.640084][T30039] RBP: 00007f8d11d85090 R08: 0000000000000003 R09: 0000000045809000 [ 676.640097][T30039] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 676.640109][T30039] R13: 0000000000000001 R14: 00007f8d111b6080 R15: 00007ffcc6997a78 [ 676.640124][T30039] [ 677.133495][T30047] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 677.407060][T30060] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 677.628067][T30070] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1704 [ 678.036667][T30097] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 678.168919][T30104] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1718 [ 678.439095][ T36] kauditd_printk_skb: 865 callbacks suppressed [ 678.439113][ T36] audit: type=1400 audit(1750312699.089:141675): avc: denied { read } for pid=30117 comm="syz.5.9469" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 678.486193][T30122] binder: Unknown parameter 'ÿ' [ 678.529723][ T36] audit: type=1400 audit(1750312699.089:141676): avc: denied { read open } for pid=30117 comm="syz.5.9469" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 678.606844][T30129] rust_binder: Error while translating object. [ 678.606884][T30129] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 678.629180][ T36] audit: type=1400 audit(1750312699.089:141677): avc: denied { read } for pid=30117 comm="syz.5.9469" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 678.684165][T30129] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1814 [ 678.744361][ T36] audit: type=1400 audit(1750312699.089:141678): avc: denied { read open } for pid=30117 comm="syz.5.9469" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 678.834386][ T36] audit: type=1400 audit(1750312699.089:141679): avc: denied { read } for pid=30117 comm="syz.5.9469" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 678.903168][ T36] audit: type=1400 audit(1750312699.089:141680): avc: denied { read open } for pid=30117 comm="syz.5.9469" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 678.969076][ T36] audit: type=1400 audit(1750312699.089:141681): avc: denied { read } for pid=30117 comm="syz.5.9469" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 679.019082][ T36] audit: type=1400 audit(1750312699.089:141682): avc: denied { read open } for pid=30117 comm="syz.5.9469" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 679.042015][T30139] audit: audit_backlog=65 > audit_backlog_limit=64 [ 679.064490][ T36] audit: type=1400 audit(1750312699.089:141683): avc: denied { read } for pid=30117 comm="syz.5.9469" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 679.207378][T30146] binder: Bad value for 'stats' [ 679.285906][T30149] binder: Bad value for 'max' [ 679.404771][T30149] SELinux: policydb magic number 0x3 does not match expected magic number 0xf97cff8c [ 679.449154][T30149] SELinux: failed to load policy [ 679.657875][T30164] binder: Bad value for 'stats' [ 679.676667][T30165] binder: Bad value for 'stats' [ 680.041024][ T304] bridge_slave_1: left allmulticast mode [ 680.047468][ T304] bridge_slave_1: left promiscuous mode [ 680.059382][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.082979][ T304] bridge_slave_0: left allmulticast mode [ 680.093449][ T304] bridge_slave_0: left promiscuous mode [ 680.110242][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.376938][ T304] veth1_macvtap: left promiscuous mode [ 680.384456][ T304] veth0_vlan: left promiscuous mode [ 680.538175][T30170] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.553919][T30188] binder: Unknown parameter 'ÿ' [ 680.559253][T30170] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.579175][T30170] bridge_slave_0: entered allmulticast mode [ 680.586294][T30170] bridge_slave_0: entered promiscuous mode [ 680.601535][T30170] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.611072][T30170] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.629977][T30170] bridge_slave_1: entered allmulticast mode [ 680.638457][T30170] bridge_slave_1: entered promiscuous mode [ 680.948501][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.956349][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.986190][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.993314][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.153580][T30170] veth0_vlan: entered promiscuous mode [ 681.242290][T30170] veth1_macvtap: entered promiscuous mode [ 682.081233][T30238] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 682.200885][T30244] binder: Bad value for 'max' [ 682.396991][T30254] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 683.346307][T30286] binder: Unknown parameter 'mask' [ 683.425984][T30290] input: syz0 as /devices/virtual/input/input549 [ 683.439626][T30290] input: failed to attach handler leds to device input549, error: -6 [ 683.463340][ T36] kauditd_printk_skb: 651 callbacks suppressed [ 683.463356][ T36] audit: type=1400 audit(1750312704.119:142327): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=846 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 683.506039][ T36] audit: type=1400 audit(1750312704.119:142328): avc: denied { read open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=846 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 683.592086][ T36] audit: type=1400 audit(1750312704.119:142329): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=846 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 683.642892][T30297] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 683.652245][ T36] audit: type=1400 audit(1750312704.119:142330): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=846 ioctlcmd=0x4531 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 683.719108][ T36] audit: type=1400 audit(1750312704.119:142331): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=846 ioctlcmd=0x4535 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 683.761224][T30303] input: syz1 as /devices/virtual/input/input550 [ 683.805344][ T36] audit: type=1400 audit(1750312704.159:142332): avc: denied { read write } for pid=30170 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 683.859350][ T36] audit: type=1400 audit(1750312704.159:142333): avc: denied { read write open } for pid=30170 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 683.903276][T30307] audit: audit_backlog=65 > audit_backlog_limit=64 [ 683.928935][ T36] audit: type=1400 audit(1750312704.159:142334): avc: denied { ioctl } for pid=30170 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 683.932991][T30307] audit: audit_lost=1100 audit_rate_limit=0 audit_backlog_limit=64 [ 684.414839][T30325] rust_binder: Write failure EFAULT in pid:1361 [ 684.716639][T30337] FAULT_INJECTION: forcing a failure. [ 684.716639][T30337] name failslab, interval 1, probability 0, space 0, times 0 [ 684.780052][T30337] CPU: 1 UID: 0 PID: 30337 Comm: syz.5.9540 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 684.780082][T30337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 684.780093][T30337] Call Trace: [ 684.780099][T30337] [ 684.780106][T30337] __dump_stack+0x21/0x30 [ 684.780131][T30337] dump_stack_lvl+0x10c/0x190 [ 684.780150][T30337] ? __cfi_dump_stack_lvl+0x10/0x10 [ 684.780170][T30337] ? pointer+0xdd0/0xdd0 [ 684.780189][T30337] dump_stack+0x19/0x20 [ 684.780207][T30337] should_fail_ex+0x3d9/0x530 [ 684.780225][T30337] should_failslab+0xac/0x100 [ 684.780247][T30337] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 684.780267][T30337] ? sidtab_sid2str_get+0x139/0x370 [ 684.780290][T30337] kmemdup_noprof+0x31/0x80 [ 684.780321][T30337] sidtab_sid2str_get+0x139/0x370 [ 684.780341][T30337] security_sid_to_context_core+0x30d/0x5d0 [ 684.780362][T30337] security_sid_to_context+0x2e/0x50 [ 684.780382][T30337] avc_audit_post_callback+0x107/0x780 [ 684.780400][T30337] ? audit_log_format+0xdb/0x140 [ 684.780416][T30337] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 684.780433][T30337] ? __cfi_audit_log_format+0x10/0x10 [ 684.780450][T30337] ? audit_log_untrustedstring+0xea/0x100 [ 684.780467][T30337] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 684.780484][T30337] common_lsm_audit+0x147a/0x1860 [ 684.780501][T30337] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 684.780523][T30337] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 684.780540][T30337] ? __cfi_common_lsm_audit+0x10/0x10 [ 684.780556][T30337] ? avc_denied+0x112/0x180 [ 684.780574][T30337] slow_avc_audit+0x18d/0x1f0 [ 684.780590][T30337] ? __cfi_slow_avc_audit+0x10/0x10 [ 684.780608][T30337] ? avc_has_perm_noaudit+0x21c/0x360 [ 684.780626][T30337] avc_has_perm+0x1cd/0x220 [ 684.780642][T30337] ? __cfi_avc_has_perm+0x10/0x10 [ 684.780661][T30337] file_map_prot_check+0x6ca/0x8d0 [ 684.780684][T30337] ? avc_has_perm+0x1cd/0x220 [ 684.780701][T30337] ? ioctl_has_perm+0x4d0/0x4d0 [ 684.780722][T30337] ? __kasan_check_write+0x18/0x20 [ 684.780737][T30337] ? proc_fail_nth_write+0x17e/0x210 [ 684.780753][T30337] selinux_mmap_file+0x24a/0x320 [ 684.780776][T30337] ? __cfi_selinux_mmap_file+0x10/0x10 [ 684.780798][T30337] ? vfs_write+0x8ba/0xe80 [ 684.780819][T30337] security_mmap_file+0x2af/0x350 [ 684.780841][T30337] vm_mmap_pgoff+0x11d/0x4e0 [ 684.780861][T30337] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 684.780880][T30337] ? __fget_files+0x2c5/0x340 [ 684.780903][T30337] ksys_mmap_pgoff+0x166/0x1e0 [ 684.780922][T30337] __x64_sys_mmap+0x121/0x140 [ 684.780943][T30337] x64_sys_call+0x13bf/0x2ee0 [ 684.780964][T30337] do_syscall_64+0x58/0xf0 [ 684.780984][T30337] ? clear_bhb_loop+0x35/0x90 [ 684.781007][T30337] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 684.781029][T30337] RIP: 0033:0x7fb69598e929 [ 684.781044][T30337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.781058][T30337] RSP: 002b:00007fb69683f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 684.781078][T30337] RAX: ffffffffffffffda RBX: 00007fb695bb6080 RCX: 00007fb69598e929 [ 684.781092][T30337] RDX: 000000000100000a RSI: 0000000000b36000 RDI: 0000200000000000 [ 684.781105][T30337] RBP: 00007fb69683f090 R08: 0000000000000003 R09: 0000000045809000 [ 684.781118][T30337] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000002 [ 684.781130][T30337] R13: 0000000000000001 R14: 00007fb695bb6080 R15: 00007ffdc29e9ea8 [ 684.781146][T30337] [ 685.179317][T30342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33 [ 685.293225][T30346] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 685.312538][T30344] rust_binder: Write failure EFAULT in pid:35 [ 685.314612][T30344] binder: Unknown parameter 'secoª¬€ ´‚' [ 685.370075][T30348] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 685.441751][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 685.663744][T30366] FAULT_INJECTION: forcing a failure. [ 685.663744][T30366] name failslab, interval 1, probability 0, space 0, times 0 [ 685.697518][T30366] CPU: 1 UID: 0 PID: 30366 Comm: syz.4.9550 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 685.697551][T30366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 685.697562][T30366] Call Trace: [ 685.697570][T30366] [ 685.697578][T30366] __dump_stack+0x21/0x30 [ 685.697602][T30366] dump_stack_lvl+0x10c/0x190 [ 685.697622][T30366] ? __cfi_dump_stack_lvl+0x10/0x10 [ 685.697642][T30366] ? skb_put+0x112/0x1f0 [ 685.697663][T30366] dump_stack+0x19/0x20 [ 685.697682][T30366] should_fail_ex+0x3d9/0x530 [ 685.697701][T30366] should_failslab+0xac/0x100 [ 685.697722][T30366] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 685.697742][T30366] ? sidtab_sid2str_get+0x139/0x370 [ 685.697764][T30366] kmemdup_noprof+0x31/0x80 [ 685.697783][T30366] sidtab_sid2str_get+0x139/0x370 [ 685.697804][T30366] security_sid_to_context_core+0x30d/0x5d0 [ 685.697826][T30366] security_sid_to_context+0x2e/0x50 [ 685.697846][T30366] avc_audit_post_callback+0x198/0x780 [ 685.697864][T30366] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 685.697880][T30366] ? __cfi_audit_log_format+0x10/0x10 [ 685.697895][T30366] ? audit_log_untrustedstring+0xea/0x100 [ 685.697909][T30366] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 685.697926][T30366] common_lsm_audit+0x147a/0x1860 [ 685.697941][T30366] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 685.697962][T30366] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 685.697977][T30366] ? __cfi_common_lsm_audit+0x10/0x10 [ 685.697993][T30366] ? avc_denied+0x112/0x180 [ 685.698010][T30366] slow_avc_audit+0x18d/0x1f0 [ 685.698025][T30366] ? __cfi_slow_avc_audit+0x10/0x10 [ 685.698042][T30366] ? avc_has_perm_noaudit+0x21c/0x360 [ 685.698059][T30366] avc_has_perm+0x1cd/0x220 [ 685.698074][T30366] ? __cfi_avc_has_perm+0x10/0x10 [ 685.698091][T30366] file_map_prot_check+0x6ca/0x8d0 [ 685.698112][T30366] ? avc_has_perm+0x1cd/0x220 [ 685.698128][T30366] ? ioctl_has_perm+0x4d0/0x4d0 [ 685.698148][T30366] ? __kasan_check_write+0x18/0x20 [ 685.698164][T30366] ? proc_fail_nth_write+0x17e/0x210 [ 685.698182][T30366] selinux_mmap_file+0x24a/0x320 [ 685.698203][T30366] ? __cfi_selinux_mmap_file+0x10/0x10 [ 685.698223][T30366] ? vfs_write+0x8ba/0xe80 [ 685.698242][T30366] security_mmap_file+0x2af/0x350 [ 685.698258][T30366] vm_mmap_pgoff+0x11d/0x4e0 [ 685.698273][T30366] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 685.698288][T30366] ? __fget_files+0x2c5/0x340 [ 685.698312][T30366] ksys_mmap_pgoff+0x166/0x1e0 [ 685.698332][T30366] __x64_sys_mmap+0x121/0x140 [ 685.698354][T30366] x64_sys_call+0x13bf/0x2ee0 [ 685.698373][T30366] do_syscall_64+0x58/0xf0 [ 685.698393][T30366] ? clear_bhb_loop+0x35/0x90 [ 685.698415][T30366] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 685.698436][T30366] RIP: 0033:0x7f4cfbd8e929 [ 685.698451][T30366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.698466][T30366] RSP: 002b:00007f4cfcc5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 685.698485][T30366] RAX: ffffffffffffffda RBX: 00007f4cfbfb6080 RCX: 00007f4cfbd8e929 [ 685.698508][T30366] RDX: 000000000100000a RSI: 0000000000b36000 RDI: 0000200000000000 [ 685.698520][T30366] RBP: 00007f4cfcc5f090 R08: 0000000000000003 R09: 0000000045809000 [ 685.698532][T30366] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000002 [ 685.698544][T30366] R13: 0000000000000001 R14: 00007f4cfbfb6080 R15: 00007fffe5f74098 [ 685.698558][T30366] [ 686.289601][T30378] rust_binder: Error while translating object. [ 686.289641][T30378] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 686.312039][T30378] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1371 [ 686.502579][T30382] rust_binder: Write failure EFAULT in pid:1373 [ 686.533383][T30382] rust_binder: Write failure EFAULT in pid:1373 [ 686.541239][T30382] rust_binder: Write failure EFAULT in pid:1373 [ 686.742162][T30380] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.766946][T30380] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.774102][T30380] bridge_slave_0: entered allmulticast mode [ 686.789989][T30380] bridge_slave_0: entered promiscuous mode [ 686.806832][ T307] bridge_slave_1: left allmulticast mode [ 686.812852][ T307] bridge_slave_1: left promiscuous mode [ 686.818669][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.834750][ T307] bridge_slave_0: left allmulticast mode [ 686.847824][ T307] bridge_slave_0: left promiscuous mode [ 686.861643][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.980771][T30380] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.999101][T30380] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.018587][T30380] bridge_slave_1: entered allmulticast mode [ 687.025375][T30380] bridge_slave_1: entered promiscuous mode [ 687.043635][ T307] veth1_macvtap: left promiscuous mode [ 687.060101][ T307] veth0_vlan: left promiscuous mode [ 687.135659][T30397] random: crng reseeded on system resumption [ 687.262567][T30402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1380 [ 687.340950][T30380] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.342510][T30405] rust_binder: Write failure EFAULT in pid:1383 [ 687.353558][T30380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.353665][T30380] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.389491][T30380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.459187][ T935] Bluetooth: hci0: command 0x1003 tx timeout [ 687.459218][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 687.479358][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.506387][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.584693][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.592048][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.617249][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.625911][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.754093][T30380] veth0_vlan: entered promiscuous mode [ 687.800476][T30380] veth1_macvtap: entered promiscuous mode [ 687.851580][T30414] kvm: Disabled LAPIC found during irq injection [ 687.900469][T30414] input: syz1 as /devices/virtual/input/input554 [ 688.283039][T30430] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 688.391617][T30434] rust_binder: Write failure EFAULT in pid:1395 [ 688.470428][ T36] kauditd_printk_skb: 636 callbacks suppressed [ 688.470449][ T36] audit: type=1400 audit(1750312709.119:142940): avc: denied { read open } for pid=30435 comm="syz.5.9573" path="/dev/binderfs/binder0" dev="binder" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 688.535878][ T36] audit: type=1400 audit(1750312709.169:142941): avc: denied { ioctl } for pid=30435 comm="syz.5.9573" path="/dev/binderfs/binder0" dev="binder" ino=49 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 688.562600][ T36] audit: type=1400 audit(1750312709.179:142942): avc: denied { call } for pid=30435 comm="syz.5.9573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 688.598891][ T36] audit: type=1400 audit(1750312709.179:142943): avc: denied { read write } for pid=30435 comm="syz.5.9573" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 688.646039][ T36] audit: type=1400 audit(1750312709.179:142944): avc: denied { read write open } for pid=30435 comm="syz.5.9573" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 688.702625][T30443] rust_binder: Write failure EFAULT in pid:51 [ 688.726140][ T36] audit: type=1400 audit(1750312709.179:142945): avc: denied { mounton } for pid=30437 comm="syz.3.9574" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 688.830840][ T36] audit: type=1400 audit(1750312709.179:142946): avc: denied { ioctl } for pid=30435 comm="syz.5.9573" path="/dev/binderfs/binder0" dev="binder" ino=49 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 688.909357][T30450] audit: audit_backlog=65 > audit_backlog_limit=64 [ 688.909599][T30449] audit: audit_backlog=65 > audit_backlog_limit=64 [ 688.920553][ T36] audit: type=1400 audit(1750312709.179:142947): avc: denied { ioctl } for pid=30435 comm="syz.5.9573" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 689.087563][T30456] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 689.469656][T30478] input: syz0 as /devices/virtual/input/input555 [ 689.532722][ T12] bridge_slave_1: left allmulticast mode [ 689.563192][ T12] bridge_slave_1: left promiscuous mode [ 689.568874][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.594538][ T12] bridge_slave_0: left allmulticast mode [ 689.612767][ T12] bridge_slave_0: left promiscuous mode [ 689.630983][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.860263][T30494] random: crng reseeded on system resumption [ 689.895330][ T12] veth1_macvtap: left promiscuous mode [ 689.910145][ T12] veth0_vlan: left promiscuous mode [ 690.039355][T30485] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.054177][T30485] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.069080][T30485] bridge_slave_0: entered allmulticast mode [ 690.083287][T30485] bridge_slave_0: entered promiscuous mode [ 690.105420][T30485] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.121224][T30485] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.131699][T30485] bridge_slave_1: entered allmulticast mode [ 690.144632][T30485] bridge_slave_1: entered promiscuous mode [ 690.314221][T30485] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.321323][T30485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.328744][T30485] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.335842][T30485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.412889][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.429440][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.446671][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.454022][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.475383][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.482576][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.564356][T30506] binder: Bad value for 'defcontext' [ 690.704487][T30485] veth0_vlan: entered promiscuous mode [ 690.762350][T30485] veth1_macvtap: entered promiscuous mode [ 691.081926][T30525] binder: Bad value for 'stats' [ 691.433667][T30537] binder: Unknown parameter 'Àù6¬}µ;' [ 691.498465][T30540] FAULT_INJECTION: forcing a failure. [ 691.498465][T30540] name failslab, interval 1, probability 0, space 0, times 0 [ 691.546934][T30540] CPU: 0 UID: 0 PID: 30540 Comm: syz.5.9605 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 691.546969][T30540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 691.546981][T30540] Call Trace: [ 691.546987][T30540] [ 691.546995][T30540] __dump_stack+0x21/0x30 [ 691.547021][T30540] dump_stack_lvl+0x10c/0x190 [ 691.547040][T30540] ? __cfi_dump_stack_lvl+0x10/0x10 [ 691.547061][T30540] dump_stack+0x19/0x20 [ 691.547110][T30540] should_fail_ex+0x3d9/0x530 [ 691.547136][T30540] should_failslab+0xac/0x100 [ 691.547157][T30540] kmem_cache_alloc_noprof+0x42/0x3a0 [ 691.547180][T30540] ? vm_area_alloc+0x3f/0x1a0 [ 691.547206][T30540] vm_area_alloc+0x3f/0x1a0 [ 691.547225][T30540] mmap_region+0xb8f/0x1bd0 [ 691.547245][T30540] ? slow_avc_audit+0x18d/0x1f0 [ 691.547264][T30540] ? __cfi_mmap_region+0x10/0x10 [ 691.547285][T30540] ? __kasan_check_read+0x15/0x20 [ 691.547304][T30540] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 691.547330][T30540] ? file_mmap_ok+0x147/0x1a0 [ 691.547349][T30540] do_mmap+0xb6d/0x13c0 [ 691.547368][T30540] ? __cfi_do_mmap+0x10/0x10 [ 691.547386][T30540] ? down_write_killable+0xe9/0x2d0 [ 691.547405][T30540] ? __cfi_down_write_killable+0x10/0x10 [ 691.547422][T30540] vm_mmap_pgoff+0x38f/0x4e0 [ 691.547441][T30540] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 691.547458][T30540] ? __fget_files+0x2c5/0x340 [ 691.547477][T30540] ksys_mmap_pgoff+0x166/0x1e0 [ 691.547496][T30540] __x64_sys_mmap+0x121/0x140 [ 691.547517][T30540] x64_sys_call+0x13bf/0x2ee0 [ 691.547537][T30540] do_syscall_64+0x58/0xf0 [ 691.547556][T30540] ? clear_bhb_loop+0x35/0x90 [ 691.547576][T30540] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 691.547594][T30540] RIP: 0033:0x7f67f2f8e929 [ 691.547607][T30540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.547621][T30540] RSP: 002b:00007f67f3e0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 691.547641][T30540] RAX: ffffffffffffffda RBX: 00007f67f31b6080 RCX: 00007f67f2f8e929 [ 691.547660][T30540] RDX: 000000000100000a RSI: 0000000000b36000 RDI: 0000200000000000 [ 691.547673][T30540] RBP: 00007f67f3e0d090 R08: 0000000000000003 R09: 0000000045809000 [ 691.547685][T30540] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000002 [ 691.547697][T30540] R13: 0000000000000001 R14: 00007f67f31b6080 R15: 00007ffd4c69e538 [ 691.547711][T30540] [ 692.840721][T30579] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 693.318687][T30610] FAULT_INJECTION: forcing a failure. [ 693.318687][T30610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.395677][T30610] CPU: 0 UID: 0 PID: 30610 Comm: syz.4.9630 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 693.395712][T30610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 693.395724][T30610] Call Trace: [ 693.395731][T30610] [ 693.395739][T30610] __dump_stack+0x21/0x30 [ 693.395764][T30610] dump_stack_lvl+0x10c/0x190 [ 693.395784][T30610] ? __cfi_dump_stack_lvl+0x10/0x10 [ 693.395805][T30610] dump_stack+0x19/0x20 [ 693.395823][T30610] should_fail_ex+0x3d9/0x530 [ 693.395842][T30610] should_fail+0xf/0x20 [ 693.395859][T30610] should_fail_usercopy+0x1e/0x30 [ 693.395874][T30610] _copy_to_user+0x24/0xa0 [ 693.395896][T30610] simple_read_from_buffer+0xed/0x160 [ 693.395929][T30610] proc_fail_nth_read+0x19e/0x210 [ 693.395947][T30610] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 693.395964][T30610] ? bpf_lsm_file_permission+0xd/0x20 [ 693.395983][T30610] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 693.395999][T30610] vfs_read+0x278/0xb60 [ 693.396018][T30610] ? __cfi_do_mmap+0x10/0x10 [ 693.396036][T30610] ? __cfi_down_write_killable+0x10/0x10 [ 693.396052][T30610] ? __cfi_vfs_read+0x10/0x10 [ 693.396068][T30610] ? __kasan_check_write+0x18/0x20 [ 693.396087][T30610] ? mutex_lock+0x92/0x1c0 [ 693.396110][T30610] ? __cfi_mutex_lock+0x10/0x10 [ 693.396132][T30610] ? __fget_files+0x2c5/0x340 [ 693.396156][T30610] ksys_read+0x141/0x250 [ 693.396174][T30610] ? xfd_validate_state+0x68/0x150 [ 693.396194][T30610] ? __cfi_ksys_read+0x10/0x10 [ 693.396213][T30610] ? __kasan_check_write+0x18/0x20 [ 693.396231][T30610] ? fpregs_restore_userregs+0x11d/0x260 [ 693.396256][T30610] __x64_sys_read+0x7f/0x90 [ 693.396275][T30610] x64_sys_call+0x2638/0x2ee0 [ 693.396296][T30610] do_syscall_64+0x58/0xf0 [ 693.396317][T30610] ? clear_bhb_loop+0x35/0x90 [ 693.396340][T30610] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 693.396363][T30610] RIP: 0033:0x7f4cfbd8d33c [ 693.396378][T30610] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 693.396394][T30610] RSP: 002b:00007f4cfcc5f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 693.396414][T30610] RAX: ffffffffffffffda RBX: 00007f4cfbfb6080 RCX: 00007f4cfbd8d33c [ 693.396428][T30610] RDX: 000000000000000f RSI: 00007f4cfcc5f0a0 RDI: 0000000000000004 [ 693.396441][T30610] RBP: 00007f4cfcc5f090 R08: 0000000000000000 R09: 0000000045809000 [ 693.396454][T30610] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000002 [ 693.396466][T30610] R13: 0000000000000001 R14: 00007f4cfbfb6080 R15: 00007fffe5f74098 [ 693.396482][T30610] [ 693.578879][ T36] kauditd_printk_skb: 784 callbacks suppressed [ 693.578896][ T36] audit: type=1400 audit(1750312714.229:143728): avc: denied { read write } for pid=24633 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 693.783604][ T36] audit: type=1400 audit(1750312714.249:143729): avc: denied { read write } for pid=27107 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 693.809600][ T36] audit: type=1400 audit(1750312714.249:143730): avc: denied { read write open } for pid=27107 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 693.890867][ T36] audit: type=1400 audit(1750312714.249:143731): avc: denied { ioctl } for pid=27107 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 693.968502][ T36] audit: type=1400 audit(1750312714.269:143732): avc: denied { read } for pid=30617 comm="syz.4.9634" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 694.039202][ T36] audit: type=1400 audit(1750312714.269:143733): avc: denied { read open } for pid=30617 comm="syz.4.9634" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 694.078693][ T36] audit: type=1400 audit(1750312714.269:143734): avc: denied { ioctl } for pid=30617 comm="syz.4.9634" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 694.151598][ T36] audit: type=1400 audit(1750312714.379:143735): avc: denied { read write open } for pid=24633 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 694.172011][T30637] audit: audit_backlog=65 > audit_backlog_limit=64 [ 694.190131][T30631] audit: audit_backlog=65 > audit_backlog_limit=64 [ 694.506088][T30648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:57 [ 694.696387][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 694.774880][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 694.790323][T30664] input: syz0 as /devices/virtual/input/input557 [ 694.827667][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 694.852010][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 694.920225][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 694.962330][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 694.979950][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 694.991835][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 695.000447][T30675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1476 [ 695.012559][T30676] rust_kernel: panicked at drivers/android/binder/rust_binder.rs:288:5: [ 695.012559][T30676] attempt to add with overflow [ 695.024361][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 695.046833][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 695.054797][T30676] ------------[ cut here ]------------ [ 695.054810][T30676] kernel BUG at rust/helpers/bug.c:7! [ 695.066397][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 695.081999][T30676] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 695.088975][T30676] CPU: 0 UID: 0 PID: 30676 Comm: syz.0.9656 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 695.102618][T30676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 695.110164][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 695.112677][T30676] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 695.125854][T30676] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 13 ab ee da 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 59 6f a7 56 90 90 90 90 90 90 90 90 90 [ 695.145744][T30676] RSP: 0018:ffffc9000141c530 EFLAGS: 00010246 [ 695.151829][T30676] RAX: 0000000000000062 RBX: 1ffff920002838a8 RCX: d5f3dc191ad33a00 [ 695.157060][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 695.159808][T30676] RDX: ffffc90010350000 RSI: 000000000000b333 RDI: 000000000000b334 [ 695.159826][T30676] RBP: ffffc9000141c530 R08: ffffc9000141c227 R09: 1ffff92000283844 [ 695.159838][T30676] R10: dffffc0000000000 R11: fffff52000283845 R12: 0000000000000000 [ 695.191730][T30676] R13: dffffc0000000000 R14: ffffc9000141c560 R15: ffffc9000141c590 [ 695.196052][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 695.199840][T30676] FS: 00007f5e0c3d66c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 695.199865][T30676] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 695.199877][T30676] CR2: 00007ffcc6997cf8 CR3: 000000011c858000 CR4: 00000000003526b0 [ 695.199892][T30676] DR0: 0000000000000007 DR1: 000000000000009b DR2: 00040000ffffffff [ 695.199903][T30676] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 695.199915][T30676] Call Trace: [ 695.199922][T30676] [ 695.222416][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 695.223137][T30676] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 695.236813][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 695.239061][T30676] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 695.239096][T30676] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 695.239126][T30676] ? kasan_save_alloc_info+0x40/0x50 [ 695.239145][T30676] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 695.239166][T30676] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 695.239193][T30676] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 695.262501][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 695.269959][T30676] ? _RNvNtCs43vyB533jt3_6kernel5error9to_result+0x85/0x1f0 [ 695.269998][T30676] ? __cfi__RNvNtCs43vyB533jt3_6kernel5error9to_result+0x10/0x10 [ 695.270020][T30676] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0 [ 695.284017][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 695.292428][T30676] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10 [ 695.292467][T30676] ? security_secid_to_secctx+0xc6/0xe0 [ 695.292486][T30676] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x656e/0x6e00 [ 695.292648][T30676] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 695.312582][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 695.315658][T30676] ? is_bpf_text_address+0x17b/0x1a0 [ 695.324270][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 695.329507][T30676] ? is_bpf_text_address+0x17b/0x1a0 [ 695.329542][T30676] ? kernel_text_address+0xa9/0xe0 [ 695.329561][T30676] ? __kernel_text_address+0x11/0x40 [ 695.340440][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 695.345945][T30676] ? unwind_get_return_address+0x51/0x90 [ 695.374133][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 695.381207][T30676] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 695.381236][T30676] ? arch_stack_walk+0x10b/0x170 [ 695.394476][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 695.397902][T30676] ? stack_trace_save+0x9d/0xe0 [ 695.416347][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 695.420261][T30676] ? stack_depot_save_flags+0x38/0x800 [ 695.420288][T30676] ? __kasan_check_write+0x18/0x20 [ 695.420311][T30676] ? is_bpf_text_address+0x17b/0x1a0 [ 695.430957][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 695.434083][T30676] ? kernel_text_address+0xa9/0xe0 [ 695.445358][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 695.448182][T30676] _RNvMNtCshgDM7dBCdno_11rust_binder11transactionNtB2_11Transaction3new+0x331/0x2040 [ 695.455544][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 695.458568][T30676] ? __cfi__RNvMNtCshgDM7dBCdno_11rust_binder11transactionNtB2_11Transaction3new+0x10/0x10 [ 695.576096][T30676] ? stack_depot_save_flags+0x38/0x800 [ 695.581563][T30676] ? audit_log_end+0x1f1/0x240 [ 695.586342][T30676] ? kasan_save_track+0x4f/0x80 [ 695.591206][T30676] ? kasan_save_track+0x3e/0x80 [ 695.596046][T30676] ? kasan_save_alloc_info+0x40/0x50 [ 695.601326][T30676] ? __kasan_kmalloc+0x96/0xb0 [ 695.606089][T30676] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 695.612804][T30676] ? krealloc_noprof+0x8d/0x130 [ 695.617931][T30676] ? rust_helper_krealloc+0x33/0xd0 [ 695.623470][T30676] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 695.634146][T30676] ? _RINvMNtNtCs43vyB533jt3_6kernel4list3arcINtB3_7ListArcINtCshgDM7dBCdno_11rust_binder7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1U_EEBS_+0x79/0x3b0 [ 695.661092][T30676] ? _RINvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x81c/0xdd0 [ 695.673254][T30676] ? _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x1e8e/0x96a0 [ 695.682989][T30676] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 695.692367][T30676] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 695.701143][T30676] ? __se_sys_ioctl+0x132/0x1b0 [ 695.706117][T30676] ? __x64_sys_ioctl+0x7f/0xa0 [ 695.711008][T30676] ? x64_sys_call+0x1878/0x2ee0 [ 695.715945][T30676] ? do_syscall_64+0x58/0xf0 [ 695.720534][T30676] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 695.727047][T30676] ? kasan_save_alloc_info+0x40/0x50 [ 695.732600][T30676] ? __kasan_kmalloc+0x96/0xb0 [ 695.737738][T30676] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 695.744428][T30676] ? rust_helper_krealloc+0x33/0xd0 [ 695.750772][T30676] ? krealloc_noprof+0xfa/0x130 [ 695.756080][T30676] ? rust_helper_krealloc+0x33/0xd0 [ 695.761289][T30676] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0x91/0x100 [ 695.773003][T30676] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xbe/0x100 [ 695.784580][T30676] ? rust_helper_REFCOUNT_INIT+0x10/0x20 [ 695.791199][T30676] _RINvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x88e/0xdd0 [ 695.806107][T30676] ? __cfi__RINvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x10/0x10 [ 695.819324][T30676] ? __kasan_check_write+0x18/0x20 [ 695.825058][T30676] ? _raw_spin_lock+0x8c/0x120 [ 695.830481][T30676] ? __cfi__raw_spin_lock+0x10/0x10 [ 695.836056][T30676] ? __kasan_check_write+0x18/0x20 [ 695.841198][T30676] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x1e8e/0x96a0 [ 695.850864][T30676] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 695.860974][T30676] ? is_bpf_text_address+0x17b/0x1a0 [ 695.866514][T30676] ? kernel_text_address+0xa9/0xe0 [ 695.872411][T30676] ? __kernel_text_address+0x11/0x40 [ 695.877804][T30676] ? unwind_get_return_address+0x51/0x90 [ 695.883539][T30676] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 695.890134][T30676] ? arch_stack_walk+0x10b/0x170 [ 695.895202][T30676] ? stack_trace_save+0x9d/0xe0 [ 695.900154][T30676] ? stack_depot_save_flags+0x38/0x800 [ 695.905817][T30676] ? kasan_save_stack+0x4d/0x60 [ 695.910675][T30676] ? kasan_save_stack+0x3e/0x60 [ 695.915522][T30676] ? __kasan_record_aux_stack+0xb2/0xd0 [ 695.921766][T30676] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 695.927756][T30676] ? __call_rcu_common+0xcc/0x6f0 [ 695.933329][T30676] ? call_rcu+0x14/0x20 [ 695.938013][T30676] ? unwind_next_frame+0x3c2/0x750 [ 695.943459][T30676] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20 [ 695.952934][T30676] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20 [ 695.962398][T30676] ? __kernel_text_address+0x11/0x40 [ 695.967690][T30676] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 695.974915][T30676] ? is_bpf_text_address+0x17b/0x1a0 [ 695.980379][T30676] ? kernel_text_address+0xa9/0xe0 [ 695.985577][T30676] ? __kernel_text_address+0x11/0x40 [ 695.991108][T30676] ? unwind_get_return_address+0x51/0x90 [ 695.996729][T30676] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 696.002873][T30676] ? arch_stack_walk+0x10b/0x170 [ 696.007912][T30676] ? stack_depot_save_flags+0x38/0x800 [ 696.013509][T30676] ? kasan_save_track+0x4f/0x80 [ 696.018400][T30676] ? kasan_save_track+0x3e/0x80 [ 696.023539][T30676] ? kasan_save_alloc_info+0x40/0x50 [ 696.028872][T30676] ? __kasan_kmalloc+0x96/0xb0 [ 696.033701][T30676] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 696.040303][T30676] ? krealloc_noprof+0x8d/0x130 [ 696.045231][T30676] ? rust_helper_krealloc+0x33/0xd0 [ 696.050681][T30676] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 696.060310][T30676] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 696.070956][T30676] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20 [ 696.080331][T30676] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 696.089170][T30676] ? __se_sys_ioctl+0x132/0x1b0 [ 696.094018][T30676] ? __x64_sys_ioctl+0x7f/0xa0 [ 696.098875][T30676] ? do_syscall_64+0x58/0xf0 [ 696.103472][T30676] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 696.109690][T30676] ? __kasan_kmalloc+0x96/0xb0 [ 696.114998][T30676] ? kasan_save_alloc_info+0x40/0x50 [ 696.120372][T30676] ? __kasan_kmalloc+0x96/0xb0 [ 696.125132][T30676] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 696.132357][T30676] ? __asan_memset+0x39/0x50 [ 696.137192][T30676] ? _raw_spin_unlock+0x45/0x60 [ 696.142052][T30676] ? rust_helper_spin_unlock+0x19/0x30 [ 696.148402][T30676] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0xdfc/0x1440 [ 696.159024][T30676] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 696.169898][T30676] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 696.175868][T30676] ? common_lsm_audit+0x148c/0x1860 [ 696.181058][T30676] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 696.187115][T30676] ? slow_avc_audit+0x18d/0x1f0 [ 696.191969][T30676] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 696.201094][T30676] ? avc_denied+0x112/0x180 [ 696.205603][T30676] ? avc_has_extended_perms+0x895/0xdd0 [ 696.211144][T30676] ? avc_has_extended_perms+0x91a/0xdd0 [ 696.216683][T30676] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 696.226678][T30676] ? do_vfs_ioctl+0xeda/0x1e30 [ 696.233168][T30676] ? preempt_schedule_common+0x2d/0x60 [ 696.240758][T30676] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 696.248336][T30676] ? __cfi_preempt_schedule+0x10/0x10 [ 696.254715][T30676] ? preempt_schedule_thunk+0x1a/0x40 [ 696.261147][T30676] ? try_to_wake_up+0xe17/0x1aa0 [ 696.266731][T30676] ? ioctl_has_perm+0x384/0x4d0 [ 696.271747][T30676] ? has_cap_mac_admin+0xd0/0xd0 [ 696.277052][T30676] ? futex_wake+0x63a/0x900 [ 696.281648][T30676] ? __cfi_futex_wake+0x10/0x10 [ 696.286586][T30676] ? selinux_file_ioctl+0x6e0/0x1360 [ 696.291876][T30676] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 696.297524][T30676] ? do_futex+0x356/0x500 [ 696.301885][T30676] ? __cfi_do_futex+0x10/0x10 [ 696.306646][T30676] ? __fget_files+0x2c5/0x340 [ 696.311338][T30676] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 696.319937][T30676] ? __se_sys_ioctl+0x114/0x1b0 [ 696.324800][T30676] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 696.334011][T30676] __se_sys_ioctl+0x132/0x1b0 [ 696.338768][T30676] __x64_sys_ioctl+0x7f/0xa0 [ 696.343442][T30676] x64_sys_call+0x1878/0x2ee0 [ 696.348122][T30676] do_syscall_64+0x58/0xf0 [ 696.352628][T30676] ? clear_bhb_loop+0x35/0x90 [ 696.358256][T30676] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 696.364145][T30676] RIP: 0033:0x7f5e0dd8e929 [ 696.368548][T30676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.389284][T30676] RSP: 002b:00007f5e0c3d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 696.398758][T30676] RAX: ffffffffffffffda RBX: 00007f5e0dfb6080 RCX: 00007f5e0dd8e929 [ 696.408171][T30676] RDX: 0000200000000100 RSI: 00000000c0306201 RDI: 0000000000000004 [ 696.416765][T30676] RBP: 00007f5e0de10b39 R08: 0000000000000000 R09: 0000000000000000 [ 696.426132][T30676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.434707][T30676] R13: 0000000000000000 R14: 00007f5e0dfb6080 R15: 00007fff8e49dd08 [ 696.442682][T30676] [ 696.445855][T30676] Modules linked in: [ 696.451173][T30676] ---[ end trace 0000000000000000 ]--- [ 696.452720][T30658] binder: Binderfs stats mode cannot be changed during a remount [ 696.464553][T30676] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 696.472848][T30676] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 13 ab ee da 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 59 6f a7 56 90 90 90 90 90 90 90 90 90 [ 696.499134][T30676] RSP: 0018:ffffc9000141c530 EFLAGS: 00010246 [ 696.505490][T30676] RAX: 0000000000000062 RBX: 1ffff920002838a8 RCX: d5f3dc191ad33a00 [ 696.515624][T30676] RDX: ffffc90010350000 RSI: 000000000000b333 RDI: 000000000000b334 [ 696.544482][T30676] RBP: ffffc9000141c530 R08: ffffc9000141c227 R09: 1ffff92000283844 [ 696.568789][T30676] R10: dffffc0000000000 R11: fffff52000283845 R12: 0000000000000000 [ 696.599097][T30676] R13: dffffc0000000000 R14: ffffc9000141c560 R15: ffffc9000141c590 [ 696.609708][T30676] FS: 00007f5e0c3d66c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 696.619075][T30676] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 696.625946][T30676] CR2: 0000200000002400 CR3: 000000011c858000 CR4: 00000000003526b0 [ 696.641255][T30676] DR0: 0000000000000007 DR1: 000000000000009b DR2: 00040000ffffffff [ 696.649494][T30676] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 696.657701][T30676] Kernel panic - not syncing: Fatal exception [ 696.664015][T30676] Kernel Offset: disabled [ 696.668488][T30676] Rebooting in 86400 seconds..