last executing test programs: 3.315856372s ago: executing program 3 (id=456): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000140), 0x1034810, &(0x7f0000000000)={[], [{@dont_measure}]}) 3.315525242s ago: executing program 3 (id=457): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f00000000c0)={0x3, 0x3}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000100)) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000140)) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0x7, 0x9, 0x941, 0x4, 0x6}) ioctl$BLKROGET(r0, 0x125e, &(0x7f00000001c0)) ioctl$BLKSSZGET(r0, 0x1268, &(0x7f0000000200)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000240)={0x7556b6d650445058, 0x4ed}) ioctl$BLKGETNRZONES(r0, 0x80041285, &(0x7f0000000280)=0x9c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)={0x4, 0x0, [{0x40000001, 0x1, 0x0, 0x2, 0x78, 0xf26, 0xffffffff}, {0xd, 0xc52, 0x3, 0x9, 0x1000, 0x4, 0xab}, {0x80000019, 0xf9e, 0x0, 0x9, 0xa4, 0x80, 0x7}, {0x0, 0x800, 0x0, 0x200, 0x40, 0x6, 0x2}]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000003c0)={{r1}, 0x0, 0x4, @unused=[0x9, 0x7, 0x7, 0x5], @name="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"}) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000013c0)) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001400)) ioctl$BLKGETZONESZ(r0, 0x80041284, &(0x7f0000001440)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000001480)=0x1d) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000014c0), 0x20c002, 0x0) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000001500)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000001540)={@host}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000001580)={'veth1_virt_wifi\x00', @multicast}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001640)={{r0}, 0x0, 0x8, @inherit={0x58, &(0x7f00000015c0)={0x0, 0x2, 0x7fffffff, 0x4, {0x0, 0x276, 0x3, 0x6, 0x7}, [0x6, 0x80000000]}}, @name="080bc635ff2522ad58437d469adea7f847c180adea0680db6168d8b74b0ae31b7ab50a5c897c18c9a3d684bb2dc87b742aa3ef21ded4b7cb4f26c73e62e22a749530f518e06244988b3e5df7d2bd7d9b22d697ecb1f828751f6a42430c932cd1249d71be107b12753abd0e044928206dd31061d169e069edd867617470eb6f5f8cda7bdcc3d2013a33f4095f7bb6c1f4764bc2d1e03ac3e0a78dd81764d9a2b1f8477f75f190a6c585ab37520a7e2a72c934a9f1fafeb0c28c00575f60ca9c98bb9c1a62f8cc22ceff39ee9125cf35853a6d41b8af5e124e281813df1f9d2f0fbba203833aceefbf4274725f9c000eec47387df5373c51bf71ff2357473b6ad5b46d7eb5b684d8dd82b647106d904f612592535fa4866d375c13ad795125b607d85208d0d38b75d934b8fbc0f96095f06e4873df5af8d85fe7a27c4feeef61ae9d0f5ee0b0e8b1b3ce0bf027452b2e3cc049c0ff04b628c95d1743f516327c97ff0ba12f9688946626529c7951190e55b55f716f678fabdcb035ae4a327799dd82005d5419695a43b704b129f05cca7d3c6378c5d40686df3b9543aa5ae695aafa9e4e5864ba0d87989b574f652fd5440c2aa76ea7f8441f755e1463df713084eb467d4a4f3b2c249d0b51d76f7a5baa6d92977d94c1f61dc0db86bccfaee057dde249d95e6de56b0ab484e2206a7f3edc9e63fcbad5de42a6cf00ae90b956138902fdb646b0619f346d3582063658c7d5df502f167f98d3a487a91e9b1c8bc50a3469323d384cf55e699d4b53ee3c78b5409c875a77a216a7a5bca1fdd841b4bcbafc6852faa2fb46fb6234665cec87bc0616314aa9a2fce40e5f84f8b1873747877ec0242763800cdb5eded3be2ac45980b98b361663f5ceff0ae8833434880ac0bcfbeb80594eb235f0dc13aeebc48072223c28d134aa6a7f43140c1bd15fae327b5928199f121d998c1667d782b880918bff508d302cf2dbdf63e29100fae27de8b8eaba6e7edc83625d8bffde03954d17e62bb928058bfe7fc1c2dfdae885e96e5b4f96fc2912c93b017391a256a3a0b32913214e8df9e3cce8bcc21b77865c13548c609b64eede210b2dba2b204832f4f7b5f772ee9f8bcc964da3ce1464ef4149fc384e980d9318cfeed0a2c5324bed19904f86750d7248bce983fdf71bb9c4d7554936e58b190459a10bc588ed3aaf34a5a4ba14fb6a53a970d131a1f53abccdb6228624b32c1fcc154812adc99be72246915ec094b955af048ac6031662508c17abf098aecac003481824a2d07da016f4c3e041f02e84dfcc745c89d4df52d324da8403b55aa7883f3b5792a86e31801051e2fc29618fa349e36e82c322c12188e5f3567e8e54307cf1e7b65a54ec504795971eb48bce95d424dc6104f2a1315085fde00a3d28701e8c5d164bfeaf4361d67538bf567395e8093b9df5f1f817e321a9e72850333118920728a12ecabb4dd17f10c20242017d5d3e1766c57d4333e21b10f9f1633c10a84e3ca6fc6dd60bf2560e749350e87dce2880a77c244b8776bb91299255682768c1d9957eb67eac348cddb58bc89512f81f4e8beaf1f6e40643ee8130ec59dfc8980780456ad24d4ff62bac5d4abae9a00d1ce233cd245b9387bd293205a89e40037c44b3e9aa03b9c2983e6a6bbddb8acce15dcde5f31197bf273c5363eb3cb8fb188fea119c7cc7d7691214de9f3ac7739f1a272f55a773d1efd88740636274a7c7027daef738ebdbc2558876d764b17af1761650d8d1a1e34954a567e143c0e95dd3272eca02853067604d51358bf0ec0b49c758d75c00e893d24b6cda6c6ac2bc2f81f149a4134d9bc207b416c3188ce9a58ae6b476bb505b942560cd015c61d3647eaca8fd5ce7a70e78b2251cea90d3251557bd6c071c68d7af95c37a2025cb215aa5386cd503b575f57b112b43df4836a9d343de48997abcd697f54f3e1867817fe2a6ed57f4e37a4dc739fcaedcfdf7c28f670a9ce703bec52d388b8b653f68cf4d5e74e108942f72eeee2b9b371e36088a3ff43a9f4db243c30dc9a013b91b0d028a97cbabbb918ffcd3bc6d5af0534cb8c7bf03eb8a9531e1f4e74c743d3a014a75e7053465a82d3744ed2977be295309c5a32884898c158cbfef88544a6f162c449cb1e2d478d9853355a049bd3d26fa53a48789e5c107d69070e383957a7a4768293ffd12f561efb5bedbed86def0a2792f986acc2916383107aacee63e92db2e4a0dda04e662bb35f2ddbd66c606affd2efa3cf2e437e8d1b27901dcd2d558b893e23fdbbe4b447dccb5bd1abd1a72895915bc2c06a82793a3326b8177006520145d595b7dfed814538e567e2dfec315880867eed4dd8ad8e24aea83f964999a5960aa5b970eadaa07b30b0cbc8d1ad4d43073322784db1656ed75cd9dec863774801754d97ad8d605e8ef9fa30c03e691dbba2ceb7ee8db9c5574db36be1e0516b62e98e8e0ebca94f46956710726a5096ec35e97add5d584f1a5bc7213fe0d7f66c0c3f4f7d3674abc69b11855093edb5bd81f27dcc4c1ec51b9d9a84ec3771b7cf19bfaa0a71058e4829dbca9d0eedcfa2ed69935c4522a66a3ef038de8db650b5ac055a0ed9ce2819c45fc8e6aaccf2d572ea94e44fff5db3b918df5d0b2825e629d40366c74c19f844ba32badb5b97c7612272a25b1e88f72ec9bae63179ca7b07f34babeeaac2f1c110c5db5dcdc64b9ee81ddcbd970b461bbfcdaa7c07170b076668703a6c3731e1098502106a176c9820b2dd227cb2c7f2c6761c587a9d7e5e827a29607593636ab77712f65800dfad42b706f27151d50701e86b2f03e86bf357ab3b8e58978526c9dc52529a1febaec5d15197756fa34d126be669b871103f2d1869c0170bb0fdcc4fc53f2481fb37206b7049c085e7585be1be0a10a871669ae24b0812f46420d256015837a060787ccdb948f5dcc21bc9e061eb8f41160d703d079b27ba224cd430d528c03ea94e6d6e160dd2536cc0b5c29d3075eb202cf072e82999f3f9878b78848753a0b4323a417c7dd574434fec5ea94d6f4b78e6b7317e0e48dd61551dd3e2893af0673da956cebc6957b155aa4e88bffe9b669a0513c12beb72e1a27c2acd7d5bbae6295ad4f58b61fc44ff1e5f008b5e9e15287ce4fab9fdd88473d46daeb1f9d6603ec904f363939c4b8adacdc9244c2d96978d20385c2b56b9c7d6fe29b3af9a5749413048b9a2f74fc4bd037607f8a4c5951fb0ac0202b6207f15e41923acbfa432a77ac9cf2efe689adc84b34c87260738cedde8e0a85f8fd1991c202727cc4b302e797ff4cd7a42178cb43662c39a89fef68b8a62984c62392c4c4ac2726b76ff885d9a5fda4215e97e1411ad2f2c4ad88dea949ab998fe8e5616667ae6236d22aacccef6eeb591841c77aff64f12ca73ec44c281fc1d9e1f0a796d871d0238d28a0386a0b4a30c618dec61a8d9e09c6c87b8308ce4731c012e80e955b2d40e412ee953b0899f2bfa71c925f59341d4ba2cb19c31a55a40ff21c92a5c2325ff37ab2f300932e5075e3ebaaf187c64ee537a64f3ae26955d6c50a61b86ea97cc7ea559edcf5771727995717a30caaaa1bdb1b17aa4e0e4e85949cf13e01f553cf647ece328b4dab8f6f5324c83b12b1e26bcd0db4f6292591001ef7b0b4d56d349efc5d06a328d5691c9f44b240f83cfa2db69f7d89c52910bf3ef06d082af395fc04812ffd23b99749502a60333929aa417f21da16b9b4fd2394343362f1a537b340e34652090f14a7004108713579a0814e5c4e1fb52d663ea1ddfd7a6bf8b3731a59db85ece29680f7c64ecd8231fb90f819ebe5ad6ffe092531521e7732ef9daadc602d05143d1d3bbb16f40e3010ec41712edb47326b7730650899657841f0ba92f61b5f89a2d5ddb0689a7ac0ca679193d88d6943a15222133da08e3a297ba39215cf5d7fb07aae9661a224121c1826685c9324913fe9452fed5ebb0d3fc82b74cdca135d3f6a85a4a727e348da9db4296d101495e8d5493e4366a2159d72bb0347edbae2d33edcb03c738e3fe507a28120bc0fc453d8fe3b7eace56dd00d32423aadfec175e0f79e6ff75484459107c5a25a5f2baaf68be2652b2d7d5321ee1c14cafc4261c66ec8fda6c265322592ceedcb4a0629a56902b38436e97c88194ea825c3d7a63282070937220ae81b2cc0825f4b0f745a45a4ee7584f22980699e178f070b06df4a400345e224bbce46f387fabcedf99e84a36a782ae05abcb931df1934607333f22fc9fac50cb6063de2b1b7f4417a4a6cb52239be07e86aa0fb9e23be2f5b7f183ca1dca95502a4ffac605d011e91998943f18fe309250bad6270f686e3395c7ca589217c06b00ae2ee8f226f23505bfd2a67d986d7c28c91b5bd9c608978d3803ac50ab4884d44c2f5e5b04390a7de9f951ee5f055293ba57e7797d4365dabf0a24729560148eb24dd9149fb835611d235a0654a24e9c45f3950ef05ee9afd1a541e77dd0fe9212fa2123df08e427fbe1f7dd314f7032f82997115a0b322c8e91c42abc13016322896d86d4fd396e422ef0f342bb806ec9d5cbda619e359c585a5d7279e2e33a8a244b4d043052e9a147ea3f4eb1ad8fbb18c469009d095fae08c14a0f2cb61a919075095479b9e1510f0a935f27980d05f18679d9a8bc17210bb83a46ab998e1848ce14b92bc3980b06b5a190e99f2ad8160da65713f3ccd559f37ffbff4f6667cdc3db829f15b6ac2843eee99bef76a9cd90aeeac12f92d0c65c5e19a513f5420694327df01dc9be7beda5444dd03f1d6d7c54330f40a5574013743f70c6e50a402129c29131fa3dadd00033795ca7360f2a7a4a63aeedbb67a5c84ad25c29deecd4a6484eec4e33b5dbac08c7b82a424768fcd1fc3cc1f30fa930b12f9fea6b1a25580daf48c210368c82819913d49756343d62fc5b48e8392e664b8704a0db23fb61cd1c3d9e4a7ead105a4f25021c5b60fb012a5cb9d63112465591d3f6bca9f5890963276fefc93114a8a6f537af7c12d136cedcd201c1a27cc3fdb95ac91e178b3ad0ee50716fe300797943a027f9b1ce956999c83c1b4b03d3eca6739a1085a96536bddc070c01862e01ab1af985cf671189d244d998c7f04fb4fc4344c4e90ff30265c66e32e9f84e983bce050be8c01573b81f5d7899a83a94782039d3734c662c18d949965901a4c1d181cb215f9987f636f9c4863fe7d09e7a0ac62f01417c8f796eb061e53e35c6fb25353ac69abeefdc2441d01676f48dabf44990a27d35ec7a16cb44fdf83603c35a324293a2ab7379f7cc34b921f29617d622606ac3e5a85d686c324f73188a135aa47022ebc0b6bc0f338c561ae148d1380c3d7f4ff3f552489bce0e4385d5d4cc2043bb5f944b9fb601a3f3fd27ba1a27c10cf2f7de703d2f00f2c4e528545c832084f88919706d46bacee26cf36ca3ddd47336b5fee8534b00264a99b5816c619c5e7986467e865bd4d84610a2e41c4cab7e8f13d0db7b2353d43c1717e7b20234db4ec2a8af2986d2166d30a3e8164406c310a1fbe90bc326132a2a91d9cf40363779da5059e8fe233d165500f438395f8efcd228adacd31218752983b01523d856cdec129c224a351cbffed359bc4d2bd96d449accb98a903f755ab4c4ccb961c5e4d57c7691d166dec92d790cf8cd9a636c5633dd7db795ac44ec9b5f4d5dd"}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000002640)) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000026c0)={0x7fffffffffffffff, 0x18, '\x00', 0x1, &(0x7f0000002680)=[0x0, 0x0, 0x0]}) close(r3) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000004940)={0x5, 0x0, [{0xd000, 0x1000, &(0x7f0000002700)=""/4096}, {0xdddd1000, 0xbc, &(0x7f0000003700)=""/188}, {0x5000, 0xe3, &(0x7f00000037c0)=""/227}, {0xd000, 0x1000, &(0x7f00000038c0)=""/4096}, {0x3000, 0x56, &(0x7f00000048c0)=""/86}]}) write$cgroup_subtree(r2, &(0x7f0000004a00)={[{0x2d, 'cpu'}]}, 0x5) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000004a40), 0x2, 0x0) 3.181805774s ago: executing program 3 (id=459): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xd4440, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x30) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc2500, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e210c371303ed6a33f2ff8689b3f20e"]) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000880)={"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"}) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xbbc244b6f4d44d96, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xa) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f1ffffff210000400000000009"]) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 3.113734305s ago: executing program 2 (id=460): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x65, 0x0, &(0x7f0000000140)="6efa86ba44c4dcef07b59db7e9a27f48a6e930da91c08c993e71a416eb2235d1314cf41411de9aa874429c871656ff38656d42c237a569b22dc9923150d6eb5b381125c2173cdb022eb5d8fc7a7df730ad34e08a536eaca88d851d6505f7b2b6831911631a"}) 2.969893387s ago: executing program 3 (id=461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r2, &(0x7f00000010c0), 0x3fffff) (async) mmap(&(0x7f00003b3000/0x4000)=nil, 0x4000, 0x2000010, 0x10, r2, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$FIONCLEX(r1, 0x5450) syz_clone3(&(0x7f0000000500)={0x815e00, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0, {0x1c}, &(0x7f0000001140)=""/4096, 0x1000, &(0x7f00000003c0)=""/246, &(0x7f00000004c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) (async) r6 = getpid() (async) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000600)={0x80000000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x21}, &(0x7f00000001c0)=""/19, 0x13, &(0x7f0000000200)=""/237, &(0x7f0000000580)=[r5, r6], 0x2, {r7}}, 0x58) (async) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2d, 'net_prio'}]}, 0xa) (async) prctl$PR_GET_KEEPCAPS(0x7) (async) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0) 2.729551331s ago: executing program 2 (id=463): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x8) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x200400, &(0x7f0000000200)=ANY=[@ANYRES64=r0]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0) 2.723320221s ago: executing program 3 (id=464): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '/_', 0x3a, '\\x@K-^{', 0x3a, './file0'}, 0x30) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"]) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) 2.703273101s ago: executing program 2 (id=465): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001700), 0x42, 0x0) ioctl$PPPIOCGIDLE64(r2, 0x8010743f, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000000)={{}, {0x0, 0x7fffffff}, 0x0, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x61, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b2"}) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x4031, 0xffffffffffffffff, 0x9efbf000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 2.609561553s ago: executing program 3 (id=467): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"]) openat$binderfs(0xffffffffffffff9c, 0x0, 0x61e9c3dd54643cf7, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) 2.449950185s ago: executing program 2 (id=471): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)=0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x7) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x400c6314}], 0x0, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000ec8102"]) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x8}]}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"]) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000e3ffffffff02010040000000000000000000000000f9e69f725a73509e95a37888b8b64f7de60a7ccfb9f6d8ba1bfc4f0ad0301af1b1b24a334c71e1d2d47c9df21ad7f29dc6e920beb011349d7bcdaf00cca74fb8fbbdaf5efb8d91170b2c5003a43e3f"]) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) 1.609969497s ago: executing program 1 (id=478): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000006000/0x3000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000009000/0x3000)=nil, 0x0}, 0x68) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r1, 0x0, 0x5b) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000006000/0x3000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000009000/0x3000)=nil, 0x0}, 0x68) (async) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$selinux_user(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read(r1, 0x0, 0x5b) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) (async) 1.583966897s ago: executing program 1 (id=479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000001a6d00009802000000000000f6c181000000"]) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 1.471148159s ago: executing program 1 (id=480): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0308003c5c980128876360864668f82ffdd569d2f630b5e033ff11edf1c5ffc733d2acb165fe588cd568cd1f31b87b68b00ad86558"], 0xffdd) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 1.285914721s ago: executing program 1 (id=481): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000002240)={0x1, 0x0, [{0x40000102, 0x0, 0x3}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x102}) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$UHID_CREATE2(r4, 0x0, 0x3000000) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/wake_unlock', 0x2b0542, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) write$tcp_mem(r8, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000001020000000000000300000000000000"]) ioctl$SNDRV_TIMER_IOCTL_CREATE(r8, 0xc02054a5, &(0x7f0000000300)={0xbd, r3, 'id1\x00'}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETLINK(r11, 0x400454cd, 0x1) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r14, 0x8040ae9f, &(0x7f0000000240)) ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f0000000000)={0x10000000000000bf, 0x0, [{0x8d, 0x0, 0xffffffffffffff8f}]}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@x86={0xf, 0xfa, 0x2, 0x0, 0xb0, 0x2, 0xff, 0x9, 0xe8, 0x1, 0xf, 0x8, 0x0, 0x3b, 0xfffffffc, 0xd, 0x6, 0x5, 0x3, '\x00', 0xc, 0xa}) 879.927607ms ago: executing program 1 (id=482): read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x2}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x52, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f00000021c0)={[], [{@uid_gt={'uid>', r0}}, {@uid_lt={'uid<', r0}}, {@dont_appraise}, {@fsname}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@dont_measure}, {@fsname={'fsname', 0x3d, '%%\xbb.%/'}}]}) 381.852454ms ago: executing program 0 (id=486): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r7]) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYRES64=r5, @ANYRESHEX=r4]) (async) write$cgroup_subtree(r1, 0x0, 0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_test', 0x40802, 0x8) write$FUSE_IOCTL(r8, &(0x7f0000000040)={0x20, 0x0, 0x0, {0xbbc5, 0x0, 0x5, 0x7}}, 0x20) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r11, 0x0) (async) mmap$binder(&(0x7f0000fef000/0xe000)=nil, 0xe000, 0x1, 0x11, r0, 0x40) (async) r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000007009000000000000000000000000000068030000000003f20900000000000000400b0000000000000200000000000000"]) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) 286.119045ms ago: executing program 0 (id=487): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000000), 0x4820, &(0x7f0000000040)={[], [{@fowner_gt={'fowner>', 0xee00}}, {@flag='nomand'}]}) 269.553826ms ago: executing program 0 (id=488): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, 0x0) 231.952587ms ago: executing program 0 (id=489): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r0, &(0x7f0000005140)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004, 0x10001, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1], [0x2, 0x0, 0x0, 0x0, 0x0, 0x65e, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x533f30c6, 0x0, 0x0, 0x0, 0x5, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100004, 0x80000000, 0x0, 0xfffffffe, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3]}, 0x45c) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x45809000) read(r1, &(0x7f0000000040)=""/106, 0x6a) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000000c0)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) write$uinput_user_dev(r0, &(0x7f0000005140)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004, 0x10001, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1], [0x2, 0x0, 0x0, 0x0, 0x0, 0x65e, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x533f30c6, 0x0, 0x0, 0x0, 0x5, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100004, 0x80000000, 0x0, 0xfffffffe, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3]}, 0x45c) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x45809000) (async) read(r1, &(0x7f0000000040)=""/106, 0x6a) (async) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000000c0)) (async) 174.061697ms ago: executing program 2 (id=490): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) read(r0, &(0x7f0000000340)=""/72, 0x48) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$selinux_user(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) (async) read(r0, &(0x7f0000000340)=""/72, 0x48) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) (async) 139.434498ms ago: executing program 0 (id=491): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) write(r0, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read(r4, &(0x7f0000000080)=""/122, 0x7a) (async) read$FUSE(r4, &(0x7f0000000100)={0x2020}, 0x2020) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000140)=[@dead_binder_done], 0x0, 0x0, 0x0}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) (async) close(r1) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) 79.018669ms ago: executing program 2 (id=492): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"]) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001580)={0x4, 0x0, [{0xd000, 0xc0, &(0x7f00000000c0)=""/192}, {0xd000, 0xaa, &(0x7f0000001400)=""/170}, {0xd000, 0x5b, &(0x7f00000014c0)=""/91}, {0xf000, 0x0, 0x0}]}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) 26.009059ms ago: executing program 0 (id=493): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20, 0x1, 0x0, 0x0, 0xffffffff}}, 0x11c) close(r2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, 0x2}], 0xe2, 0x0, &(0x7f0000000240)="79ddccfdedbb7263e6534412574acc340b30061c2e76c9e31d24a21e2913fec268e7ae4d7b025fa5d2e7e2d93cc62f41bd501dfce84df08db078e004365e16b042dd6d50f21505595f80127e1a1bbede2c863eedce2a000000000000000000000000000019afcf960b37f7c679fdb700bd7ee80e59c6fe72b78ae217cebadcb5593178e90a7b67038eac4bd4cd077e2302726ad6db675cced501902abf7ca64558932781e8244a9e17c6193af658ee53c1baf96cccae4d2968d2187145f53ed621026881974f941f3c2a0641dd68d139dff868f9c58843cc8d456b6a871c7c68c554"}) 0s ago: executing program 1 (id=494): ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000000)=0x10000) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffffffff04a) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000240)={0x4, 0x8000, 0x0, 0x0, 0x1d}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xda0, 0x0, 0x7}]}) mmap(&(0x7f0000700000/0x4000)=nil, 0x4000, 0x1000009, 0x20010, r0, 0x49178000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. [ 20.454207][ T36] audit: type=1400 audit(1750310837.650:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.455401][ T281] cgroup: Unknown subsys name 'net' [ 20.477548][ T36] audit: type=1400 audit(1750310837.650:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.507536][ T36] audit: type=1400 audit(1750310837.680:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.507625][ T281] cgroup: Unknown subsys name 'devices' [ 20.648427][ T281] cgroup: Unknown subsys name 'hugetlb' [ 20.654141][ T281] cgroup: Unknown subsys name 'rlimit' [ 20.787760][ T36] audit: type=1400 audit(1750310837.990:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.811124][ T36] audit: type=1400 audit(1750310837.990:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.819309][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.836335][ T36] audit: type=1400 audit(1750310837.990:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.867748][ T36] audit: type=1400 audit(1750310838.040:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.893234][ T36] audit: type=1400 audit(1750310838.040:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.922517][ T36] audit: type=1400 audit(1750310838.120:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.948115][ T36] audit: type=1400 audit(1750310838.120:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.948254][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.176917][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.184076][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.191668][ T289] bridge_slave_0: entered allmulticast mode [ 22.198222][ T289] bridge_slave_0: entered promiscuous mode [ 22.204439][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.211534][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.218772][ T290] bridge_slave_0: entered allmulticast mode [ 22.224946][ T290] bridge_slave_0: entered promiscuous mode [ 22.233792][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.240860][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.248488][ T289] bridge_slave_1: entered allmulticast mode [ 22.254644][ T289] bridge_slave_1: entered promiscuous mode [ 22.260722][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.267770][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.274823][ T290] bridge_slave_1: entered allmulticast mode [ 22.281963][ T290] bridge_slave_1: entered promiscuous mode [ 22.318522][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.325581][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.332713][ T291] bridge_slave_0: entered allmulticast mode [ 22.339091][ T291] bridge_slave_0: entered promiscuous mode [ 22.352858][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.360273][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.367372][ T291] bridge_slave_1: entered allmulticast mode [ 22.373530][ T291] bridge_slave_1: entered promiscuous mode [ 22.379547][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.387084][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.394243][ T288] bridge_slave_0: entered allmulticast mode [ 22.400603][ T288] bridge_slave_0: entered promiscuous mode [ 22.417635][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.424766][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.432159][ T288] bridge_slave_1: entered allmulticast mode [ 22.438495][ T288] bridge_slave_1: entered promiscuous mode [ 22.575785][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.585522][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.593285][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.602443][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.627246][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.634847][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.642169][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.649243][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.663177][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.670342][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.677641][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.685373][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.708371][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.715432][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.722722][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.729957][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.753676][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.761149][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.768775][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.776031][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.783627][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.791277][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.798859][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.806047][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.827294][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.834689][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.842579][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.849709][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.857870][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.865025][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.875427][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.882586][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.918844][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.926480][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.935123][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.942198][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.950442][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.957505][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.965483][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.972583][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.002872][ T290] veth0_vlan: entered promiscuous mode [ 23.029299][ T289] veth0_vlan: entered promiscuous mode [ 23.044195][ T288] veth0_vlan: entered promiscuous mode [ 23.052995][ T290] veth1_macvtap: entered promiscuous mode [ 23.070393][ T288] veth1_macvtap: entered promiscuous mode [ 23.080744][ T289] veth1_macvtap: entered promiscuous mode [ 23.091389][ T291] veth0_vlan: entered promiscuous mode [ 23.124195][ T291] veth1_macvtap: entered promiscuous mode [ 23.135642][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.208853][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 23.248238][ T323] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.270354][ T324] ======================================================= [ 23.270354][ T324] WARNING: The mand mount option has been deprecated and [ 23.270354][ T324] and is ignored by this kernel. Remove the mand [ 23.270354][ T324] option from the mount to silence this warning. [ 23.270354][ T324] ======================================================= [ 23.319684][ T323] binder: Unknown parameter 'max4L00000000000000000009:\:resv_level:./file0:' [ 23.330132][ T324] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 23.331982][ T319] rust_binder: Write failure EFAULT in pid:2 [ 23.339749][ T325] binder: Unknown parameter 'dont_hash' [ 23.403849][ T332] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 23.455095][ T335] binder: Unknown parameter 'donv_hash' [ 23.697066][ T341] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 24.136971][ T347] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 24.137442][ T347] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.246142][ T363] input: syz0 as /devices/virtual/input/input5 [ 24.259879][ T363] input: failed to attach handler leds to device input5, error: -6 [ 24.285093][ T365] binder: Unknown parameter '>18446744073709551615' [ 24.312644][ T371] binder: Unknown parameter 'stats' [ 24.372462][ T379] input: syz1 as /devices/virtual/input/input7 [ 24.385296][ T379] binder: Unknown parameter 'deco|text' [ 24.650021][ T404] binder: Unknown parameter '0177777777777777777777718446744073709551615' [ 24.694315][ T409] kvm: kvm [408]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x882 [ 24.765136][ T415] input: syz1 as /devices/virtual/input/input8 [ 25.194996][ T424] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 25.286461][ T315] Bluetooth: hci0: command 0x1003 tx timeout [ 25.288255][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 25.342620][ T430] SELinux: policydb magic number 0x8646e69 does not match expected magic number 0xf97cff8c [ 25.362815][ T430] SELinux: failed to load policy [ 25.385824][ T440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 25.385978][ T440] rust_binder: Write failure EINVAL in pid:28 [ 25.433961][ T440] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.443505][ T440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 25.519188][ T454] rust_binder: Error while translating object. [ 25.529605][ T454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 25.535820][ T454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:54 [ 25.545740][ T36] kauditd_printk_skb: 78 callbacks suppressed [ 25.545756][ T36] audit: type=1400 audit(1750310842.740:152): avc: denied { read } for pid=455 comm="syz.2.46" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 25.563633][ T456] deleting an unspecified loop device is not supported. [ 25.616372][ T36] audit: type=1400 audit(1750310842.740:153): avc: denied { open } for pid=455 comm="syz.2.46" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 25.646748][ T36] audit: type=1400 audit(1750310842.750:154): avc: denied { write } for pid=455 comm="syz.2.46" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 25.672677][ T36] audit: type=1400 audit(1750310842.750:155): avc: denied { open } for pid=455 comm="syz.2.46" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 25.698542][ T456] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 25.704104][ T36] audit: type=1400 audit(1750310842.760:156): avc: denied { ioctl } for pid=455 comm="syz.2.46" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 25.778624][ T463] input: syz0 as /devices/virtual/input/input9 [ 25.850692][ T463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:31 [ 25.903800][ T36] audit: type=1400 audit(1750310843.100:157): avc: denied { ioctl } for pid=467 comm="syz.2.51" path="net:[4026532487]" dev="nsfs" ino=4026532487 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.957720][ T470] binder: Unknown parameter '0000000000000000000300000000000000000003' [ 26.016521][ T472] SELinux: policydb version 1337328799 does not match my version range 15-33 [ 26.025465][ T472] SELinux: failed to load policy [ 26.081172][ T472] SELinux: failed to load policy [ 26.127688][ T470] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:34 [ 26.128394][ T470] input: syz1 as /devices/virtual/input/input10 [ 26.163786][ T470] rust_binder: Write failure EINVAL in pid:34 [ 26.208040][ T483] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 26.452357][ T36] audit: type=1400 audit(1750310843.650:158): avc: denied { transfer } for pid=503 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 26.452365][ T504] rust_binder: Error while translating object. [ 26.472104][ T504] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 26.482292][ T504] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:49 [ 26.506709][ T509] rust_binder: Error while translating object. [ 26.517742][ T510] rust_binder: Write failure EINVAL in pid:51 [ 26.525256][ T509] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 26.533138][ T509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:51 [ 26.561531][ T515] tap0: tun_chr_ioctl cmd 1074025677 [ 26.568919][ T517] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 26.570932][ T515] tap0: linktype set to 776 [ 26.838831][ T543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 26.838863][ T543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:65 [ 26.848729][ T543] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 26.857858][ T543] rust_binder: Read failure Err(EFAULT) in pid:65 [ 26.913078][ T551] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.960927][ T570] binder: Unknown parameter 'm' [ 26.986474][ T36] audit: type=1400 audit(1750310844.180:159): avc: denied { execute } for pid=574 comm="syz.2.86" path="/selinux/enforce" dev="selinuxfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 27.015564][ T579] binder: Unknown parameter '01777777777777777777777' [ 27.069235][ T590] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.083249][ T36] audit: type=1400 audit(1750310844.280:160): avc: denied { checkpoint_restore } for pid=580 comm="syz.2.88" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 27.092322][ T594] Bluetooth: hci1: Frame reassembly failed (-84) [ 27.146958][ T46] Bluetooth: hci1: Frame reassembly failed (-84) [ 27.247960][ T611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:47 [ 27.292812][ T615] rust_binder: Write failure EINVAL in pid:49 [ 27.293067][ T616] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 27.357319][ T628] SELinux: security_context_str_to_sid (sytem_uGй033ҬeXh1{h [ 27.357319][ T628] ؈) failed with errno=-22 [ 27.357378][ T626] SELinux: security_context_str_to_sid (sytem_uGй033ҬeXh1{h [ 27.357378][ T626] ؈) failed with errno=-22 [ 27.415443][ T36] audit: type=1400 audit(1750310844.610:161): avc: denied { append } for pid=624 comm="syz.2.100" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 27.552841][ T635] binder: Unknown parameter 'obj_role' [ 27.947819][ T673] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 27.984833][ T681] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 27.993720][ T683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 28.119744][ T698] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 28.157827][ T701] SELinux: failed to load policy [ 28.250341][ T710] SELinux: failed to load policy [ 28.274707][ T718] random: crng reseeded on system resumption [ 28.355562][ T719] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.355596][ T719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 28.395049][ T723] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.405817][ T723] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 28.453398][ T725] SELinux: syz.2.128 (725) set checkreqprot to 1. This is no longer supported. [ 28.645560][ T738] rust_binder: Error while translating object. [ 28.645590][ T738] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 28.652904][ T738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:116 [ 28.680609][ T740] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 29.119242][ T762] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 29.126704][ T315] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 29.127854][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 29.239235][ T772] input: syz1 as /devices/virtual/input/input18 [ 29.248098][ T771] binder: Unknown parameter 'dont_hash' [ 29.253944][ T771] rust_binder: Write failure EINVAL in pid:125 [ 29.281950][ T775] SELinux: failed to load policy [ 29.293827][ T781] SELinux: policydb magic number 0x7e does not match expected magic number 0xf97cff8c [ 29.303905][ T781] SELinux: failed to load policy [ 29.327053][ T788] rust_binder: Error while translating object. [ 29.327094][ T788] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 29.333399][ T788] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:148 [ 29.487680][ T810] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 29.547209][ T815] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 29.576834][ T815] SELinux: failed to load policy [ 29.583719][ T814] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 29.594231][ T817] binder: Binderfs stats mode cannot be changed during a remount [ 29.602538][ T814] SELinux: failed to load policy [ 29.728464][ T823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:139 [ 29.762005][ T827] binder: Bad value for 'stats' [ 29.845436][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 29.852079][ T832] Bluetooth: hci0: Frame reassembly failed (-84) [ 29.863121][ T834] SELinux: failed to load policy [ 29.920349][ T836] input: syz1 as /devices/virtual/input/input20 [ 30.107070][ T856] input: syz0 as /devices/virtual/input/input22 [ 30.110181][ T858] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 30.132491][ T862] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 30.276497][ T879] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 30.476671][ T886] binder: Unknown parameter '' [ 30.509889][ T899] binder: Bad value for 'max' [ 30.554689][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 30.554703][ T36] audit: type=1400 audit(1750310847.750:183): avc: denied { ioctl } for pid=900 comm="syz.1.187" path="net:[4026532309]" dev="nsfs" ino=4026532309 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.602929][ T913] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 30.620518][ T916] binder: Bad value for 'max' [ 30.671392][ T918] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 30.688438][ T921] input: syz0 as /devices/virtual/input/input25 [ 30.774560][ T927] SELinux: ebitmap: truncated map [ 30.779783][ T927] sel_write_load: 1 callbacks suppressed [ 30.779794][ T927] SELinux: failed to load policy [ 30.794638][ T927] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 31.154055][ T963] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 31.257191][ T970] binder: Bad value for 'stats' [ 31.357154][ T973] PM: Enabling pm_trace changes system date and time during resume. [ 31.357154][ T973] PM: Correct system time has to be restored manually after resume. [ 31.618767][ T991] binder: Binderfs stats mode cannot be changed during a remount [ 31.795059][ T1011] rust_binder: Write failure EFAULT in pid:163 [ 31.819667][ T1016] SELinux: security_context_str_to_sid () failed with errno=-22 [ 31.846458][ T315] Bluetooth: hci0: command 0x1003 tx timeout [ 31.852597][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 31.986759][ T36] audit: type=1400 audit(1750310849.190:184): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 32.009191][ T1031] can0: slcan on ttyS3. [ 32.018926][ T1037] rust_binder: Error while translating object. [ 32.018954][ T1037] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 32.033539][ T1037] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:187 [ 32.037821][ T36] audit: type=1400 audit(1750310849.210:185): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.075456][ T36] audit: type=1400 audit(1750310849.210:186): avc: denied { read } for pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=1635 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.126685][ T36] audit: type=1400 audit(1750310849.210:187): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1635 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.138280][ T1047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:191 [ 32.150587][ T1031] can0 (unregistered): slcan off ttyS3. [ 32.168991][ T36] audit: type=1400 audit(1750310849.210:188): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1635 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.200788][ T36] audit: type=1400 audit(1750310849.320:189): avc: denied { map } for pid=1044 comm="syz.1.232" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.228481][ T36] audit: type=1400 audit(1750310849.370:190): avc: denied { read } for pid=1048 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.257820][ T36] audit: type=1400 audit(1750310849.370:191): avc: denied { open } for pid=1048 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.299319][ T36] audit: type=1400 audit(1750310849.370:192): avc: denied { getattr } for pid=1048 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.512655][ T1096] rust_binder: Read failure Err(EAGAIN) in pid:203 [ 32.539884][ T1103] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 32.543624][ T1100] rust_binder: Write failure EFAULT in pid:175 [ 32.544747][ T1098] SELinux: security_context_str_to_sid () failed with errno=-22 [ 32.596278][ T1110] input: syz0 as /devices/virtual/input/input30 [ 32.637491][ T1114] SELinux: security_context_str_to_sid () failed with errno=-22 [ 32.675864][ T1110] rust_binder: Error in use_page_slow: ESRCH [ 32.675877][ T1110] rust_binder: use_range failure ESRCH [ 32.686401][ T1110] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 32.691898][ T1110] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 32.706732][ T1110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:185 [ 32.718534][ T1118] binder: Unknown parameter '' [ 32.746480][ T1120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:212 [ 32.876463][ T1133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.008088][ T1139] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 33.031155][ T1139] SELinux: security_context_str_to_sid () failed with errno=-22 [ 33.034448][ T1141] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.092005][ T1142] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:190 [ 33.099215][ T1143] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.199105][ T1150] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:199 [ 33.346665][ T1164] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.366524][ T1168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:205 [ 33.385913][ T1172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:207 [ 33.529047][ T1188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.538822][ T1188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.634176][ T1205] rust_binder: Read failure Err(EAGAIN) in pid:219 [ 33.794776][ T1219] input: syz1 as /devices/virtual/input/input31 [ 33.821994][ T1226] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223 [ 34.072060][ T1254] binder: Unknown parameter '00000000000000000000000' [ 34.346868][ T1265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:236 [ 34.347574][ T1265] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.361292][ T1265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:236 [ 34.472358][ T1272] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 34.622645][ T1283] rust_binder: Write failure EINVAL in pid:249 [ 34.798229][ T1304] binder: Bad value for 'defcontext' [ 34.812542][ T315] Bluetooth: hci0: command 0x1003 tx timeout [ 34.818970][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.844210][ T1306] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 34.958542][ T1311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:220 [ 34.969440][ T1315] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 35.046722][ T1322] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 35.317637][ T1342] rust_binder: Error while translating object. [ 35.325675][ T1342] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 35.333963][ T1342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:279 [ 35.378762][ T1345] rust_binder: Error while translating object. [ 35.388339][ T1345] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.394656][ T1345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:235 [ 35.496429][ T1365] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.507507][ T1365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:286 [ 35.520655][ T1365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:286 [ 35.549235][ T1367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:231 [ 35.564608][ T36] kauditd_printk_skb: 122 callbacks suppressed [ 35.564624][ T36] audit: type=1400 audit(1750310852.760:315): avc: denied { read } for pid=1368 comm="syz.1.329" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.600765][ T1371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.608087][ T1370] input: syz0 as /devices/virtual/input/input32 [ 35.609487][ T36] audit: type=1400 audit(1750310852.800:316): avc: denied { open } for pid=1368 comm="syz.1.329" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.647041][ T36] audit: type=1400 audit(1750310852.810:317): avc: denied { ioctl } for pid=1368 comm="syz.1.329" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.673536][ T36] audit: type=1400 audit(1750310852.850:318): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=454 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.698292][ T36] audit: type=1400 audit(1750310852.850:319): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=454 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.727919][ T36] audit: type=1400 audit(1750310852.850:320): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=454 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.756076][ T36] audit: type=1400 audit(1750310852.870:321): avc: denied { read write } for pid=1369 comm="syz.0.330" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 35.788344][ T36] audit: type=1400 audit(1750310852.870:322): avc: denied { open } for pid=1369 comm="syz.0.330" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 35.812779][ T36] audit: type=1400 audit(1750310852.920:323): avc: denied { write } for pid=1372 comm="syz.2.331" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 35.837662][ T36] audit: type=1400 audit(1750310852.970:324): avc: denied { read } for pid=1377 comm="syz.0.332" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 36.074912][ T1398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:262 [ 36.139168][ T1406] rust_binder: Write failure EINVAL in pid:261 [ 36.191459][ T1411] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 36.209977][ T1413] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 36.220388][ T1411] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 36.230071][ T1412] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 36.474195][ T1431] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.532698][ T1432] input: syz0 as /devices/virtual/input/input33 [ 36.577907][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.591194][ T305] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 36.707931][ T1436] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 36.708092][ T1436] binder: Unknown parameter 'cL(Cfystem_u' [ 36.802504][ T1460] random: crng reseeded on system resumption [ 36.904740][ T1469] rust_binder: Write failure EINVAL in pid:273 [ 37.174682][ T1505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:332 [ 37.261003][ T1509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.415743][ T1519] binder: Bad value for 'stats' [ 37.508029][ T1522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.508062][ T1522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:338 [ 37.586765][ T1528] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 37.758920][ T1535] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 37.888484][ T1552] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.907572][ T1552] input: syz1 as /devices/virtual/input/input35 [ 38.144749][ T1571] rust_binder: Read failure Err(EAGAIN) in pid:252 [ 38.526178][ T1593] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 38.659165][ T1603] input: syz1 as /devices/virtual/input/input36 [ 38.972988][ T1613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:266 [ 39.040304][ T1628] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 39.060058][ T1625] rust_binder: Write failure EINVAL in pid:356 [ 39.614667][ T1671] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 39.731253][ T1672] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 39.929595][ T1693] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.939874][ T1694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:376 [ 39.979679][ T1697] rust_binder: Error while translating object. [ 39.996379][ T1697] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 40.016400][ T1697] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:356 [ 40.337399][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.619026][ T36] kauditd_printk_skb: 692 callbacks suppressed [ 40.619042][ T36] audit: type=1400 audit(1750310857.820:1017): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.653087][ T36] audit: type=1400 audit(1750310857.820:1018): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.707259][ T36] audit: type=1400 audit(1750310857.820:1019): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.735045][ T36] audit: type=1400 audit(1750310857.840:1020): avc: denied { read } for pid=1715 comm="syz.3.439" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 40.773642][ T36] audit: type=1400 audit(1750310857.840:1021): avc: denied { read open } for pid=1715 comm="syz.3.439" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 40.802846][ T36] audit: type=1400 audit(1750310857.840:1022): avc: denied { ioctl } for pid=1715 comm="syz.3.439" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 40.838063][ T36] audit: type=1400 audit(1750310857.850:1023): avc: denied { read } for pid=1715 comm="syz.3.439" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 40.862249][ T36] audit: type=1400 audit(1750310857.850:1024): avc: denied { read open } for pid=1715 comm="syz.3.439" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 40.889634][ T36] audit: type=1400 audit(1750310857.850:1025): avc: denied { ioctl } for pid=1715 comm="syz.3.439" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 40.918555][ T36] audit: type=1400 audit(1750310857.870:1026): avc: denied { read write } for pid=1715 comm="syz.3.439" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 41.306347][ T1733] rust_binder: Read failure Err(EAGAIN) in pid:288 [ 41.622603][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.657782][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.665553][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.673209][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.681801][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.689559][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.691738][ T1752] SELinux: security_context_str_to_sid () failed with errno=-22 [ 41.697262][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.713952][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.722395][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.730959][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.740777][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.748434][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.756151][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.763590][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.771435][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.779181][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.787852][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.795572][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.803783][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.811679][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.820402][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.831021][ T1764] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 41.832474][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.859645][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.867518][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.891450][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.903996][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.911642][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.920273][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.929375][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.935425][ T1773] kvm_intel: kvm [1772]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 41.936931][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.953433][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.961514][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.969017][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.977625][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.985115][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 41.992615][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.001183][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.009302][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.017083][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.024631][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.032495][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.039968][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.048238][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.055978][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.063531][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.070995][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.078578][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.086019][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.093538][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.100981][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.108472][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.115875][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.123452][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.131015][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.138717][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.146207][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.154824][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.162463][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.169941][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.177476][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.185608][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.193297][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.200924][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.208349][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.215903][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.223619][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.232445][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.239875][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.247430][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.254838][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.262928][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.270980][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.278455][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.285906][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.294955][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.302988][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.310761][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.318934][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.326896][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.334754][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.342490][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.350016][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.357768][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.365170][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.372798][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.380493][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.387963][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.395529][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.403025][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.410453][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.416479][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.418719][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.431996][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.440172][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.448167][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.455607][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.469040][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.519453][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.530307][ T1795] random: crng reseeded on system resumption [ 42.536000][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.545151][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.555782][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.563976][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.572323][ T305] hid-generic 0003:0040:0008.0002: unknown main item tag 0x0 [ 42.591930][ T305] hid-generic 0003:0040:0008.0002: hidraw0: USB HID v0.07 Device [syz0] on syz0 [ 42.839240][ T13] Bluetooth: hci0: Frame reassembly failed (-90) [ 42.859136][ T1810] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.885064][ T1810] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.935964][ T1810] rust_binder: Write failure EFAULT in pid:319 [ 42.971800][ T1814] fido_id[1814]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 43.016414][ T1816] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1531215282 (3062430564 ns) > initial count (1473793136 ns). Using initial count to start timer. [ 43.064960][ T1816] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 182) [ 43.064986][ T1816] rust_binder: Error while translating object. [ 43.106054][ T1816] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.123271][ T1816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:398 [ 43.335942][ T1823] input: syz1 as /devices/virtual/input/input39 [ 43.974390][ T1841] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.376870][ T1843] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.423026][ T1843] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.493307][ T1844] binder: Unknown parameter 'uid>00000000000000000000' [ 44.690215][ T1846] binder: Unknown parameter '' [ 44.817734][ T1851] rust_binder: Write failure EFAULT in pid:393 [ 44.886444][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.898784][ T315] Bluetooth: hci0: command 0x1003 tx timeout [ 44.907750][ T1858] binder: Unknown parameter 'fowner>00000000000000060928' [ 45.055239][ T1865] binder: Bad value for 'stats' [ 45.095490][ T1867] binder: Bad value for 'stats' [ 45.167198][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.174762][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.192854][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.201173][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.209724][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.217882][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.225933][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.241692][ T1880] rust_kernel: panicked at /syzkaller/managers/ci2-android-6-12-rust/kernel/rust/kernel/page_size_compat.rs:60:5: [ 45.241692][ T1880] attempt to add with overflow [ 45.244746][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.264129][ T1880] ------------[ cut here ]------------ [ 45.271225][ T1880] kernel BUG at rust/helpers/bug.c:7! [ 45.272225][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.278191][ T1880] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 45.291283][ T1880] CPU: 0 UID: 0 PID: 1880 Comm: syz.1.494 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 45.304653][ T1880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 45.314712][ T1880] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 45.320030][ T1880] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 c6 2b 0f 55 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 8c ef 46 d9 90 90 90 90 90 90 90 90 90 [ 45.339817][ T1880] RSP: 0018:ffffc9000d6f73f0 EFLAGS: 00010246 [ 45.345901][ T1880] RAX: 000000000000008c RBX: 1ffff92001adee80 RCX: ec1696156c682c00 [ 45.353860][ T1880] RDX: ffffc90001611000 RSI: 0000000000008462 RDI: 0000000000008463 [ 45.361823][ T1880] RBP: ffffc9000d6f73f0 R08: ffffc9000d6f70e7 R09: 1ffff92001adee1c [ 45.369964][ T1880] R10: dffffc0000000000 R11: fffff52001adee1d R12: 0000000000000000 [ 45.377932][ T1880] R13: dffffc0000000000 R14: ffffc9000d6f7420 R15: ffffc9000d6f7450 [ 45.385905][ T1880] FS: 00007fa83cdf76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 45.395010][ T1880] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.401671][ T1880] CR2: 00002000000083c0 CR3: 000000011e454000 CR4: 00000000003526b0 [ 45.409655][ T1880] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.417648][ T1880] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.425616][ T1880] Call Trace: [ 45.428889][ T1880] [ 45.431895][ T1880] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 45.439349][ T1880] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 45.447323][ T1880] ? kernel_text_address+0xa9/0xe0 [ 45.452428][ T1880] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 45.466057][ T1880] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 45.472309][ T1880] ? arch_stack_walk+0x10b/0x170 [ 45.477254][ T1880] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 45.484534][ T1880] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 45.492457][ T1880] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0 [ 45.502474][ T1880] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10 [ 45.514537][ T1880] _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0xe44/0xfb0 [ 45.527453][ T1880] ? mas_wr_store_type+0x8eb/0x1ad0 [ 45.532863][ T1880] ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10 [ 45.546027][ T1880] ? mas_preallocate+0x56e/0xc60 [ 45.550984][ T1880] ? __cfi_mas_preallocate+0x10/0x10 [ 45.556258][ T1880] ? kasan_save_alloc_info+0x40/0x50 [ 45.561602][ T1880] ? __asan_memset+0x39/0x50 [ 45.566202][ T1880] mmap_region+0x1371/0x1bd0 [ 45.570917][ T1880] ? __cfi_mmap_region+0x10/0x10 [ 45.576040][ T1880] ? __kasan_check_read+0x15/0x20 [ 45.581092][ T1880] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 45.587345][ T1880] ? file_mmap_ok+0x147/0x1a0 [ 45.592035][ T1880] do_mmap+0xb6d/0x13c0 [ 45.596270][ T1880] ? __cfi_do_mmap+0x10/0x10 [ 45.600849][ T1880] ? down_write_killable+0xe9/0x2d0 [ 45.606299][ T1880] ? __cfi_down_write_killable+0x10/0x10 [ 45.612116][ T1880] vm_mmap_pgoff+0x38f/0x4e0 [ 45.616801][ T1880] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 45.622171][ T1880] ? __fget_files+0x2c5/0x340 [ 45.626930][ T1880] ksys_mmap_pgoff+0x166/0x1e0 [ 45.631893][ T1880] __x64_sys_mmap+0x121/0x140 [ 45.636568][ T1880] x64_sys_call+0x13bf/0x2ee0 [ 45.641498][ T1880] do_syscall_64+0x58/0xf0 [ 45.645905][ T1880] ? clear_bhb_loop+0x35/0x90 [ 45.650576][ T1880] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.656467][ T1880] RIP: 0033:0x7fa83e78e929 [ 45.660892][ T1880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.681004][ T1880] RSP: 002b:00007fa83cdf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 45.689500][ T1880] RAX: ffffffffffffffda RBX: 00007fa83e9b5fa0 RCX: 00007fa83e78e929 [ 45.697638][ T1880] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000701000 [ 45.705606][ T1880] RBP: 00007fa83e810b39 R08: 0000000000000003 R09: 0000000000000000 [ 45.713576][ T1880] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 45.721632][ T1880] R13: 0000000000000000 R14: 00007fa83e9b5fa0 R15: 00007ffd72db18e8 [ 45.729615][ T1880] [ 45.732619][ T1880] Modules linked in: [ 45.736701][ T1880] ---[ end trace 0000000000000000 ]--- [ 45.737541][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.749734][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.757170][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.764565][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.768994][ T1880] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 45.772060][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.783020][ T1880] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 c6 2b 0f 55 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 8c ef 46 d9 90 90 90 90 90 90 90 90 90 [ 45.784651][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.805612][ T1880] RSP: 0018:ffffc9000d6f73f0 EFLAGS: 00010246 [ 45.811793][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.815944][ T1880] [ 45.817933][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.826295][ T1880] RAX: 000000000000008c RBX: 1ffff92001adee80 RCX: ec1696156c682c00 [ 45.835000][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.844091][ T1880] RDX: ffffc90001611000 RSI: 0000000000008462 RDI: 0000000000008463 [ 45.850515][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.859280][ T36] kauditd_printk_skb: 585 callbacks suppressed [ 45.859294][ T36] audit: type=1400 audit(1750310863.030:1612): avc: denied { read } for pid=1876 comm="syz.2.492" name="binder1" dev="binder" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.865821][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.873866][ T36] audit: type=1400 audit(1750310863.030:1613): avc: denied { read open } for pid=1876 comm="syz.2.492" path="/dev/binderfs/binder1" dev="binder" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.895309][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.904960][ T1880] RBP: ffffc9000d6f73f0 R08: ffffc9000d6f70e7 R09: 1ffff92001adee1c [ 45.928467][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.935618][ T36] audit: type=1400 audit(1750310863.030:1614): avc: denied { read write } for pid=1876 comm="syz.2.492" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.943049][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.950620][ T36] audit: type=1400 audit(1750310863.030:1615): avc: denied { read write open } for pid=1876 comm="syz.2.492" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.977484][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 45.982511][ T1880] R10: dffffc0000000000 R11: fffff52001adee1d R12: 0000000000000000 [ 46.007515][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 46.023136][ T1880] R13: dffffc0000000000 R14: ffffc9000d6f7420 R15: ffffc9000d6f7450 [ 46.031567][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 46.046267][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 46.053886][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 46.061449][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 46.069069][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 46.069118][ T36] audit: type=1400 audit(1750310863.030:1616): avc: denied { ioctl } for pid=1876 comm="syz.2.492" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.078094][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 46.102578][ T1880] FS: 00007fa83cdf76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 46.109479][ T305] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 46.119445][ T1880] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.129353][ T305] hid-generic 0001:0000:0000.0003: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 46.133097][ T36] audit: type=1400 audit(1750310863.100:1617): avc: denied { ioctl } for pid=1876 comm="syz.2.492" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.166771][ T1880] CR2: 000000110c326dc0 CR3: 000000011e454000 CR4: 00000000003526b0 [ 46.192836][ T1880] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.212212][ T1880] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.224993][ T1880] Kernel panic - not syncing: Fatal exception [ 46.231436][ T1880] Kernel Offset: disabled [ 46.235763][ T1880] Rebooting in 86400 seconds..