last executing test programs: 20.864150499s ago: executing program 0 (id=623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0308003c5c980128876360864668f82ffdd569d2f630b5e033ff11edf1c5ffc733d2acb165fe588cd568cd1f31b87b68b00ad888ca"], 0xffdd) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r1, 0x0, 0xfffffdef) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000500)={0x0, 0x0, 0x1, [0xfffffffffffffffd, 0xffff, 0x9, 0x100000000, 0x3], [0x1, 0xdd28, 0xc572, 0xa, 0x800, 0x10, 0x7, 0xffffffff, 0x46c4, 0x100000000, 0x0, 0x2, 0x100, 0xe9, 0xfffffffffffffff9, 0x8000000000000000, 0x4cab, 0x100, 0x9, 0xf7f9, 0x0, 0x3, 0x10000, 0x1, 0x7, 0x3, 0x6, 0x6, 0xa895, 0x6, 0x80000000, 0x9, 0x5489, 0x6a, 0x2, 0x8001, 0x3, 0x2, 0xfffffffffffffffa, 0x8, 0x9, 0x4, 0xec1d, 0x7, 0x8000000000000000, 0x401, 0x8, 0x4, 0x7, 0x76, 0x0, 0x6, 0x3, 0x8000000000000000, 0x3, 0x9, 0x8, 0xefa, 0x0, 0xd3c, 0x9, 0x6, 0x2447, 0x0, 0x7, 0x2, 0x101, 0x7, 0x7, 0x9, 0x200, 0x7ff, 0x1, 0x0, 0x6, 0x0, 0x2, 0xffffffff, 0x6, 0xffffffffffffffff, 0x51, 0x7, 0x1000, 0x6, 0xbadb, 0x38000000, 0x3, 0x5, 0x4, 0x0, 0xf35f, 0x3, 0x2, 0x8, 0x3, 0x4, 0x2, 0x2, 0x7, 0x5, 0x2, 0xffffffff, 0x1, 0x0, 0x100000001, 0xf6, 0x100000001, 0x200, 0x7, 0x1, 0x3, 0x56, 0x5, 0x10000, 0x6, 0x9, 0x1ca, 0x2, 0x3, 0x3, 0x5]}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r2, @ANYBLOB='\x00\x00\x00\x00']) read$FUSE(r1, &(0x7f0000001bc0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000003c00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r1, &(0x7f0000005c40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000002c0)=0x0) read$FUSE(r1, &(0x7f0000007c80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2046) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000003c0)=0x0) prctl$PR_GET_KEEPCAPS(0x7) read$FUSE(r1, &(0x7f0000009cc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000400)=0x0) read$FUSE(r1, &(0x7f000000bd00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000440)=0x0) read$FUSE(r1, &(0x7f0000010180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000009c0)=r10, 0x12) write$tcp_mem(r1, &(0x7f0000000940)={0x6, 0x20, 0x7fffffffffffffff, 0x20, 0x4000000000}, 0x48) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f000000fd80)=ANY=[@ANYBLOB="d8ceccb91c0944a3", @ANYRES64=r3, @ANYBLOB="0100000000000000000000000000000000040000000000000f010000000000000600000005000000020000000000000001000000010000006500000000000000080000000000000002000000000000000100000000000000ff00000040004000f1ffffff00c0000007000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="b70000000600000000000000030000000000000043000000000000000e000000080000006d656d6f72792e6576656e747300000003000000000000000100000000000000ff7f00000000000000000000000000000200000004000000020000000000000009000000000000000300000000000000d0e900000000000007000000000000000008000000000000d507000000000000000000000070000003000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="feffffff0500000000000000010000000000000000000000000000c00100000002000000240000000000000000000000000000000200000000000000b60000000000000003000000000000000300000000000000060000000000000000800000000000000080000000000000b242000000000000470800000000000004000000000000000200000001ffffff070000000060000040090000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0080000001000100000000000500000000000000080000000000000000000000000000000200000000000000030000000000000007000000000000000002000000000000040000000b0300000600000000000000ff7f000000000000040000000000000008000000000000000000000000000000800000000000000009000000010000000400000000a0000014040000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="c9c2000002000000000000000300000000000000ff0f000000000000010000000600000029000000000000000600000000000000020000000000000003000000000000000300000000000000400000000080000005000000000000000100000000000080040000000000000001800000000000000600000000000000010000000000000003000000060000001c0e000000b0000000080000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000080006000000000000000500000000000000020000000000000003000000040000002c312d000000000003000000000000000100000000000000050000000000000004000000000000000500000002000000010000000000000004000000000000000300000000000000080000000000000004000000000000000000000000000000090000005519ffff0300000000a0000006000000", @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="06000000ec00000000000000050000000000000002000000000000000b000000070000002e2f62696e6465726673000000000000"], 0x3d8) r15 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r15, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r15, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'nicvf0\x00', 0x200}) r16 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x2200, 0xe0) ioctl$FS_IOC_RESVSP(r16, 0x4030582b, &(0x7f0000000300)={0x1100, 0x2, 0x75, 0x2a40}) ioctl$BINDER_WRITE_READ(r15, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000bc0)=""/4096, 0x1000, 0x1, 0x1a}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x15}, @fda={0x66646185, 0x8, 0x0, 0x1b}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 20.730447551s ago: executing program 0 (id=624): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00', {0x9, 0x8, 0x5}, 0x47, [0xffffffff, 0xd83b, 0x0, 0x7fff, 0x81d, 0x9, 0x7f, 0x8, 0x180000, 0x8, 0xe, 0x2, 0xffffffff, 0x7, 0x9, 0x10000, 0x7, 0x1, 0x5, 0x2, 0x9, 0x5, 0x0, 0x4, 0x7, 0xf06, 0x5, 0x7, 0xd, 0x80000000, 0x7fff, 0x2d879528, 0x200, 0x0, 0x5, 0x101, 0x6, 0x4, 0x200, 0x2, 0x3, 0x3, 0x3, 0x6, 0x4, 0xffff82ef, 0x3, 0xa76, 0x8001, 0x4, 0x7fff, 0x2, 0x1, 0x9, 0x7, 0x2d3, 0x2, 0x1, 0xca, 0x2, 0x4, 0x6, 0x9, 0xb], [0x3, 0x3, 0x1000, 0x0, 0x400, 0x1677, 0x6, 0x8, 0x4, 0x6, 0x10, 0x7, 0xffffffff, 0x2, 0xd, 0x1, 0xbe, 0xd2f, 0x2, 0x8, 0x3ff, 0x400, 0x0, 0x67b, 0x2, 0xe, 0x1, 0x3e9d, 0x7, 0x5, 0x0, 0x8, 0x1, 0xfffffff7, 0x100, 0x7, 0x5, 0xffffffff, 0x2, 0xf, 0x8, 0x3ff, 0x8, 0x400, 0x8, 0x0, 0x10000, 0x5, 0x7, 0xffff2b43, 0x2, 0x1, 0x8, 0xa4, 0x6ec, 0x8, 0x9f, 0xb, 0x5, 0x7, 0x5, 0x9, 0x44f6, 0x4], [0xc1, 0x2, 0x2, 0x6, 0x4, 0xe456, 0xab94, 0x8, 0xa5, 0x3, 0x7ff, 0x3, 0xb, 0x40, 0x27a, 0x1, 0x0, 0x10, 0x4, 0x6, 0x5, 0x0, 0x7, 0x2, 0x9, 0x3a6d, 0xffffffff, 0xfffffffb, 0x1, 0x33848e5e, 0x3, 0x7, 0xbc, 0xed, 0x1, 0x8, 0x7f, 0xba8, 0x5d15, 0x40, 0x1, 0x3, 0x5, 0x0, 0x2, 0x8, 0x3, 0x7, 0xfffffff7, 0x0, 0x3, 0x1000, 0x0, 0x6, 0x2, 0xe, 0x23b, 0x6, 0x6444, 0x9, 0x2, 0x80000000, 0x4, 0x8], [0x4, 0x2, 0x7, 0xfffffff2, 0x7fffffff, 0x5, 0x1000, 0x8, 0x4, 0x4, 0x0, 0x7fffffff, 0x81, 0x8, 0x4, 0x11, 0x4, 0x9, 0x5, 0x7fff, 0x2, 0x9, 0xfff00000, 0x1ff, 0x8, 0x6, 0x5, 0x7, 0x3, 0x7, 0xffffffc0, 0x8, 0xdf, 0x80000001, 0x3, 0x0, 0x8001, 0xfffffbff, 0x5, 0xa, 0x4, 0x8001, 0x3, 0x80, 0x3, 0x4, 0x7, 0xa, 0x0, 0xe82, 0x7, 0x1, 0x1, 0x80, 0x2, 0x6, 0x2, 0x80, 0x8, 0x6a5, 0xd52, 0xfffffffa, 0x3, 0xffffffff]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xe) (async) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2b) (async) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xd) (async) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00', {0x4, 0x200, 0x4, 0xea3}, 0x20, [0x8, 0x1, 0x5, 0x200, 0x6, 0xff, 0x2, 0xffffffff, 0x6, 0x7ff, 0x17c1, 0x9, 0xb, 0x80, 0x4, 0x4, 0xb5, 0xa, 0x3, 0xb, 0x8, 0x4, 0x2, 0xf2, 0x6, 0x8, 0x313, 0x6, 0xbd, 0x7f, 0x9739, 0x64, 0x9, 0x6, 0x0, 0x2, 0x1, 0x5, 0x1, 0xa670, 0xc0, 0x1000, 0x7, 0x2, 0x29e4, 0x86cd, 0x9, 0x6, 0x6, 0x5, 0x0, 0x91, 0x5, 0xffffff60, 0xf6, 0x3, 0x5, 0x4, 0x3ff, 0x1, 0x87f, 0x9, 0x5, 0x3ff], [0x0, 0x5, 0x6, 0x10, 0x7730, 0x8, 0xd, 0x3, 0x1, 0x7, 0x2, 0x33, 0x2, 0x401, 0x1000, 0x9d9c, 0x4e7, 0x4, 0x1, 0x5, 0x6, 0x3, 0x9f3d, 0x3, 0x8000, 0x2, 0x8, 0x9, 0x9, 0x1000, 0x4, 0x1ca, 0x3, 0xfff, 0x4, 0x3, 0x5, 0x9, 0x3ff, 0x9, 0x1000, 0x5, 0xc, 0xd5, 0x9, 0xfff, 0x284, 0x1, 0x0, 0x9, 0x5, 0x9, 0x1, 0x6, 0x7fa, 0x38000000, 0x0, 0x7f, 0x1, 0x81, 0x0, 0x7, 0xfffffff7, 0x5], [0x2, 0x0, 0xfff, 0xfffffff8, 0x5, 0x7, 0x10, 0x3, 0xf506, 0x5, 0xffff, 0xa, 0xfb, 0x5, 0x3, 0x8, 0x4, 0x800000, 0x8, 0x9, 0x8, 0x2, 0x8, 0x2, 0x6, 0x7fffffff, 0x1, 0xffff, 0x100, 0x9, 0x0, 0x2, 0x8710, 0x67, 0x4, 0xfffffffe, 0x6, 0x0, 0x9, 0x9, 0x5, 0x6, 0x4, 0x5, 0xe8c2, 0x53d, 0x7, 0x4, 0x2, 0x8000, 0x8a1c, 0x3, 0x40, 0x1ff, 0x0, 0x2, 0x7fff, 0x5, 0x0, 0x5, 0x1, 0x2, 0x5, 0x7ff], [0x8001, 0x4, 0x9, 0x6, 0x6, 0x9, 0x4, 0x7, 0x3, 0x2, 0x6, 0x40, 0x1, 0x0, 0x2, 0x10001, 0x3, 0x9313, 0xf, 0xff, 0x508, 0x0, 0xffff, 0x7, 0x8, 0xc7, 0x80, 0x8, 0x1cf6, 0x9, 0x6, 0x7, 0x6f557618, 0x10, 0x3, 0x2, 0x3ff, 0x100, 0x9, 0x4, 0x0, 0x8000, 0x4, 0x5, 0x6, 0x2, 0x8, 0x8, 0xfffffffe, 0x1, 0x8, 0x0, 0x1, 0x6, 0xffff, 0x3, 0x4, 0x2, 0xf, 0x9, 0xc, 0x4, 0xb3, 0x9]}, 0x45c) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000940)={0x9, {0x2, 0x4, 0x3, 0x27f50000000, 0x5}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/diskstats\x00', 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000009c0)={0x4, 0x8000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a40)={'syz1\x00', {0x6, 0x8, 0x7, 0x5}, 0x3b, [0x1d, 0x1, 0x4, 0x9, 0x10, 0xf, 0x1, 0x9, 0x4, 0x4, 0x4b7, 0x972, 0xe5, 0x8, 0x7ff, 0x462, 0x5, 0x5, 0x0, 0xe6a, 0x80, 0x1, 0x22d, 0x1000, 0x7, 0x8, 0x4, 0x7, 0x8, 0x4, 0x7, 0x2, 0x7fb0, 0x1, 0x0, 0x7, 0x9, 0x0, 0x3, 0x8001, 0x0, 0x9, 0x9, 0x6, 0xdc, 0x9, 0x160e0, 0x7f, 0x8, 0x2, 0x9, 0x475, 0xd4d, 0x30, 0x4, 0x8, 0xfffffff9, 0xc, 0x7fff, 0x9, 0x6, 0x73, 0x5, 0xffff], [0xfffffffc, 0x2, 0xc, 0x3, 0x0, 0x401, 0x0, 0xfffffffe, 0x5, 0xdd5, 0x9, 0x1, 0xc2, 0x7, 0x8001, 0x1, 0x0, 0x5, 0x1, 0x2, 0xcec, 0x9, 0xaad6, 0x6, 0x3ff, 0x9, 0xffffffb1, 0x1, 0x9, 0xfffffffd, 0x85fa, 0x2, 0x9, 0x4, 0xfffffffa, 0xf, 0x7, 0x9, 0xee, 0x8, 0x0, 0x0, 0x1, 0x9c, 0x7, 0x0, 0x10, 0x5, 0x4, 0x5, 0x800, 0x7, 0x1, 0x101, 0x6, 0x69, 0x1, 0x100, 0x0, 0x15c0, 0x4, 0x1, 0x9, 0xff], [0x1000, 0x8, 0x4, 0x5, 0x2, 0x0, 0x9, 0x10000, 0xffff, 0x8, 0x7, 0x3, 0xf0, 0x6, 0x8e, 0x8, 0x400, 0x7fff, 0x2, 0x3, 0xffffffff, 0x80, 0xfff, 0x81, 0x9, 0x80, 0x9, 0x9ce, 0x3, 0x2, 0xe6, 0x8, 0x4, 0x1, 0x1, 0x100, 0x3, 0x6, 0xfffffffe, 0x80, 0x8, 0x2, 0x9, 0xd394, 0x0, 0x8, 0xc3, 0x7, 0x1, 0x9, 0x6361a904, 0x872, 0x400, 0x200, 0x1, 0x1, 0x1, 0x1, 0x6, 0x1, 0xf0000000, 0x3, 0xc087, 0x800], [0x19b, 0x0, 0xff80, 0xf, 0x9, 0x1, 0xf, 0xfff, 0x5, 0x7, 0x3, 0xf, 0x14000000, 0xa7, 0x9, 0x81, 0x6, 0x5, 0x4, 0xffffffff, 0x80000001, 0x2, 0x20000000, 0x5, 0x8, 0x3, 0x9, 0x1, 0x5, 0x1, 0xffffffff, 0x8001, 0x47c5, 0x3, 0x3, 0x6, 0x10001, 0x5, 0x3, 0x0, 0x7, 0x5, 0x5, 0x7, 0xb688, 0x2, 0xfffffff8, 0xfffffff9, 0x7, 0x4, 0x5, 0x7fffffff, 0x40, 0xf3c, 0x9, 0x8001, 0x8, 0xcc87, 0x1, 0x4, 0x3515, 0x80000001, 0x6, 0x9]}, 0x45c) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f0000000ec0)={0xa8, 0x0, 0x2}) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_DESTROY(r3, 0x5502) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000000f80)={0x1, 0x8}) ioctl$UI_DEV_DESTROY(r3, 0x5502) (async) ioctl$KDDELIO(r1, 0x4b35, 0x5) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000fc0)) (async) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) (async) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000001000), 0x80000, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, r6, 0x300000c, 0x13, r7, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r7, 0x8008f512, &(0x7f0000001040)) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) 20.723646371s ago: executing program 0 (id=626): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x720, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000010100c0"]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x720, 0x0, &(0x7f0000000580)="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"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000010100c0"]) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) (async) 20.498667695s ago: executing program 0 (id=628): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x5, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 20.498200475s ago: executing program 0 (id=629): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x2015, 0x100000000000}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f00000002c0)={[{0x4, 0x200, 0x3e, 0x8, 0x8, 0x35, 0x9, 0x8, 0x0, 0xc0, 0x6b, 0x80, 0x1}, {0x1, 0xfff, 0x9, 0x11, 0x3, 0x3, 0x10, 0x7f, 0x8c, 0x6, 0x5, 0x8, 0x58}, {0x9a57, 0x8, 0x9, 0xf, 0x9, 0x8, 0x4, 0x3, 0x3, 0xb, 0xc, 0x10, 0x6}], 0x3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28042, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000180)=[@increfs, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) 20.343142947s ago: executing program 0 (id=630): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000098}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x1000, 0x8, 0x6, 0x3, 0x0, [{0x1, 0x3, 0x3, '\x00', 0x2}, {0x0, 0x5, 0x1, '\x00', 0x8}, {0x7, 0x2b, 0xf3, '\x00', 0x2}, {0x7, 0x2, 0x1c, '\x00', 0x7}, {0x0, 0x3, 0x4, '\x00', 0x58}, {0x80, 0x2, 0xb, '\x00', 0x9}, {0x2, 0x7, 0x5, '\x00', 0x2}, {0x0, 0x81, 0x4, '\x00', 0x22}, {0x9, 0x9, 0x6, '\x00', 0x7}, {0x3, 0x58, 0x81, '\x00', 0x1}, {0x9, 0x8, 0x1, '\x00', 0xfa}, {0x1, 0x7f, 0x2, '\x00', 0x81}, {0x2, 0x4, 0xff, '\x00', 0xa}, {0x7b, 0x1, 0x2, '\x00', 0x5}, {0x7f, 0x4, 0x6, '\x00', 0x6}, {0x1, 0x0, 0x9}, {0xa, 0x1, 0x0, '\x00', 0x7}, {0x80, 0x2, 0x4, '\x00', 0x1}, {0x82, 0x5, 0x6, '\x00', 0x2f}, {0x2, 0x8, 0x0, '\x00', 0xb}, {0x8, 0x41, 0xfe, '\x00', 0x6}, {0x1, 0x4, 0x8, '\x00', 0x8}, {0x0, 0x5, 0x2, '\x00', 0x3}, {0x1, 0x9, 0x6, '\x00', 0xc}]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10001, 0xb, 0x8080000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4008af60, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) 4.202746275s ago: executing program 32 (id=630): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000098}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x1000, 0x8, 0x6, 0x3, 0x0, [{0x1, 0x3, 0x3, '\x00', 0x2}, {0x0, 0x5, 0x1, '\x00', 0x8}, {0x7, 0x2b, 0xf3, '\x00', 0x2}, {0x7, 0x2, 0x1c, '\x00', 0x7}, {0x0, 0x3, 0x4, '\x00', 0x58}, {0x80, 0x2, 0xb, '\x00', 0x9}, {0x2, 0x7, 0x5, '\x00', 0x2}, {0x0, 0x81, 0x4, '\x00', 0x22}, {0x9, 0x9, 0x6, '\x00', 0x7}, {0x3, 0x58, 0x81, '\x00', 0x1}, {0x9, 0x8, 0x1, '\x00', 0xfa}, {0x1, 0x7f, 0x2, '\x00', 0x81}, {0x2, 0x4, 0xff, '\x00', 0xa}, {0x7b, 0x1, 0x2, '\x00', 0x5}, {0x7f, 0x4, 0x6, '\x00', 0x6}, {0x1, 0x0, 0x9}, {0xa, 0x1, 0x0, '\x00', 0x7}, {0x80, 0x2, 0x4, '\x00', 0x1}, {0x82, 0x5, 0x6, '\x00', 0x2f}, {0x2, 0x8, 0x0, '\x00', 0xb}, {0x8, 0x41, 0xfe, '\x00', 0x6}, {0x1, 0x4, 0x8, '\x00', 0x8}, {0x0, 0x5, 0x2, '\x00', 0x3}, {0x1, 0x9, 0x6, '\x00', 0xc}]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10001, 0xb, 0x8080000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4008af60, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) 4.194535685s ago: executing program 3 (id=674): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0308003c5c980128876360864668f82ffdeefa000000000000ffd2ac", @ANYRESOCT], 0xffdd) ioctl$KVM_CHECK_EXTENSION(r0, 0xae01, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x29) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xd5, 0x0, 0x10}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0xc4, 0x0, &(0x7f0000000380)=[@register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/35, 0x23, 0x1, 0x2c}, @fda={0x66646185, 0x0, 0x0, 0x40}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}}, @exit_looper, @increfs_done={0x40106308, 0x1}, @decrefs, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x100, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1440}, @decrefs={0x40046307, 0x2}, @release={0x40046306, 0x3}], 0x1d, 0x0, &(0x7f0000000240)="781fb98da4f12fb7a69b544daeb3da039f2f7bc7e2e6a4ac414cc130e5"}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000540)={0x5, 0x0, 0x100000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000063debda59c01e2c0a7002885a7b0503992ff"]) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) 3.994303118s ago: executing program 3 (id=675): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000340)=[@increfs, @exit_looper], 0x0, 0x0, 0x0}) 3.987486418s ago: executing program 3 (id=676): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001500)={0x70, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @fda={0x66646185, 0x3, 0x2, 0x12}, @fda={0x66646185, 0x7, 0x2, 0x27}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}, 0x40}], 0x0, 0x0, 0x0}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000140)={0x2, r3}) 3.684015413s ago: executing program 1 (id=627): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73797374656d5f75dd47d0b90b893a03ffdf"]) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x8008770b, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae09, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x3}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xeeee0000, 0x2, 0x3, 0xeffffdff, 0x0, [{0xfe, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0xb}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0xfd, 0xbe}, {0x0, 0x6}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x2}, {0x0, 0x0, 0x9}, {0x0, 0x50}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x4, 0x4e}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {}, {0x1, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x8, 0xa, '\x00', 0x3}, {0x80, 0xfc, 0x0, '\x00', 0x40}, {0x0, 0x14}, {0x2, 0x0, 0x6, '\x00', 0x2}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0xfc, 0x83, 0xe}]}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000869000/0x2000)=nil, 0x2000, 0x2000006, 0x12, r5, 0x70800000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f000086a000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x2) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000080)={0x5, 0xdb}) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r10, 0x0, 0x0) read(r8, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x8) read(r10, &(0x7f0000000040)=""/15, 0xf) 3.561321135s ago: executing program 4 (id=672): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12) (async) write$vga_arbiter(r3, 0x0, 0x13) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="cf00000000555c0000000000000000a79200000000080000ccf7ae7d55"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te']) 3.482461746s ago: executing program 2 (id=681): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101800, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000380)={0x0, 0x1, 0x200, 0x3, 0x4}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x2, 0x3, 0xeffffdff, 0x0, [{0x0, 0x90}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0x7}, {0x77}, {0x0, 0x85, 0xbe}, {0x0, 0xc2}, {0x0, 0x2, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfa, '\x00', 0x42}, {0x0, 0x5}, {0x0, 0x50, 0x0, '\x00', 0x1}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x4e, 0x0, '\x00', 0xd}, {0x2, 0x2, 0x4, '\x00', 0x9}, {}, {0x1, 0xfd, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x70}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0x10, 0x83, 0xe, '\x00', 0x3}]}}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYRESDEC]) 3.361063798s ago: executing program 1 (id=627): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73797374656d5f75dd47d0b90b893a03ffdf"]) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x8008770b, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae09, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x3}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xeeee0000, 0x2, 0x3, 0xeffffdff, 0x0, [{0xfe, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0xb}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0xfd, 0xbe}, {0x0, 0x6}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x2}, {0x0, 0x0, 0x9}, {0x0, 0x50}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x4, 0x4e}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {}, {0x1, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x8, 0xa, '\x00', 0x3}, {0x80, 0xfc, 0x0, '\x00', 0x40}, {0x0, 0x14}, {0x2, 0x0, 0x6, '\x00', 0x2}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0xfc, 0x83, 0xe}]}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000869000/0x2000)=nil, 0x2000, 0x2000006, 0x12, r5, 0x70800000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f000086a000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x2) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000080)={0x5, 0xdb}) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r10, 0x0, 0x0) read(r8, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x8) read(r10, &(0x7f0000000040)=""/15, 0xf) 3.359411938s ago: executing program 4 (id=672): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12) (async) write$vga_arbiter(r3, 0x0, 0x13) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="cf00000000555c0000000000000000a79200000000080000ccf7ae7d55"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te']) 1.594534785s ago: executing program 2 (id=682): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x3}, @register_looper, @register_looper, @register_looper], 0x0, 0x0, &(0x7f00000002c0)}) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x250800) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) 1.594008275s ago: executing program 3 (id=683): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x1c) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_user(r1, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$uinput_user_dev(r0, &(0x7f00000002c0)={'syz0\x00', {0x5, 0xf058, 0x3, 0xd240}, 0x51, [0x7, 0x3, 0x9, 0x2, 0x7, 0x0, 0x347, 0x7fffffff, 0x80000000, 0x2, 0xa042, 0xfffffffa, 0x0, 0x3, 0x7, 0xb, 0x8001, 0x10001, 0x1, 0x7, 0x9, 0x8, 0x3, 0xe7, 0xf, 0x63207bc9, 0x7f, 0x8000, 0x375, 0x0, 0x0, 0x9, 0xde1, 0x3, 0x7ff, 0x6, 0x6, 0x6b6f0000, 0x200, 0x7, 0x10000, 0xfff, 0xc6d4, 0x4, 0x0, 0x5, 0x4, 0x8, 0x6, 0x4d, 0x4, 0x80, 0x5, 0x1000, 0x616b, 0x4, 0x1, 0x4, 0x80000001, 0x20000004, 0x1, 0xe910, 0x2, 0x3], [0xfffffffa, 0x6, 0x8, 0x7, 0x4, 0x6, 0x1, 0x1, 0x8000, 0x2, 0x3, 0x401, 0x10000, 0x8000, 0x8000, 0x7, 0x9, 0x0, 0x6, 0x8000, 0x6, 0x4, 0x4, 0xd4, 0x7fff, 0x1, 0x8, 0x1, 0x6, 0x7, 0x63, 0x7, 0x4, 0x4, 0xf13, 0x7, 0x7, 0x5, 0x6, 0x7, 0x3, 0x1ff, 0x7, 0x7f, 0xfffffffb, 0x7, 0x8, 0x6, 0x5, 0x7, 0x5, 0x3ff, 0xffff, 0xcbf9, 0x8001, 0x5, 0x8, 0x0, 0x4, 0xd1, 0x4, 0x9, 0x10001, 0xfffffff8], [0x6, 0x9, 0x1, 0x4391, 0x40, 0x1000, 0x8, 0x1, 0x3, 0x8, 0x0, 0x7, 0xfb3, 0x3b4, 0xe1, 0xffffffff, 0x6, 0x1, 0x200, 0x4, 0x7d8, 0x6, 0x1, 0x81, 0x1, 0x22, 0x7ff, 0xffffffff, 0x1, 0x254e, 0xfffffffe, 0x0, 0x3, 0x7, 0x7, 0x2, 0x2170afe1, 0x5, 0x4, 0x40, 0x5, 0x100, 0x4, 0x1, 0x1, 0x3, 0x1, 0xffff01cf, 0x1, 0x9, 0xff, 0xc1, 0x0, 0x0, 0x4, 0x5, 0x80000001, 0xb, 0xffff, 0x8001, 0x3, 0x7fffffff, 0x7, 0x8000], [0x0, 0x7abd, 0x1, 0x5, 0x2, 0xdc, 0x16, 0x7ff, 0xffffff20, 0xfffffff0, 0x5, 0x7, 0x0, 0xffffffff, 0x91fc, 0x2, 0x6, 0x59, 0xffff489c, 0x1, 0x3, 0x3, 0x8, 0xfff, 0x9, 0x7, 0xae6, 0x1f, 0x5, 0xaf07, 0x8, 0x2, 0x1, 0xa7c, 0x5, 0xfffffffa, 0x40, 0xe25, 0x6, 0x8, 0x4, 0x0, 0x1, 0x2984, 0xfff, 0x9, 0x2, 0x7, 0xc791, 0xd05d, 0x400007, 0x6, 0xd, 0x4, 0xff, 0x82f, 0x0, 0x4, 0x3, 0xffffffff, 0x3, 0x8001, 0x7, 0x9]}, 0x45c) read(r0, &(0x7f0000000740)=""/225, 0xe1) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r6, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000200)=0xa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0x81007702, 0x10000000012) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0) 1.485360317s ago: executing program 2 (id=684): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x401, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000c40)=0x1b) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000c40)=0x1b) write(r5, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000e00600000000000000000000000000001e18f9e110fb47cfbffe5c99ea93c9e84054e329f58de71a94026b"]) syz_clone3(&(0x7f0000000040)={0x820000, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000008a00)={0x1fe, 0x0, &(0x7f0000ffd000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r9, 0x800455ca, 0x1) ioctl$KVM_GET_SUPPORTED_CPUID(r8, 0x4018aee2, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x5) (async) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x5) 1.485121147s ago: executing program 3 (id=685): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r1, &(0x7f0000000080)=""/93, 0xffffff6c) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000cc0)={{0x3, 0x3, 0x1, 0x1, 0x9}}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000000100)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x7fffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) 1.26542684s ago: executing program 4 (id=672): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12) (async) write$vga_arbiter(r3, 0x0, 0x13) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="cf00000000555c0000000000000000a79200000000080000ccf7ae7d55"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te']) 1.120512433s ago: executing program 1 (id=627): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73797374656d5f75dd47d0b90b893a03ffdf"]) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x8008770b, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae09, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x3}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xeeee0000, 0x2, 0x3, 0xeffffdff, 0x0, [{0xfe, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0xb}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0xfd, 0xbe}, {0x0, 0x6}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x2}, {0x0, 0x0, 0x9}, {0x0, 0x50}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x4, 0x4e}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {}, {0x1, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x8, 0xa, '\x00', 0x3}, {0x80, 0xfc, 0x0, '\x00', 0x40}, {0x0, 0x14}, {0x2, 0x0, 0x6, '\x00', 0x2}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0xfc, 0x83, 0xe}]}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000869000/0x2000)=nil, 0x2000, 0x2000006, 0x12, r5, 0x70800000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f000086a000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x2) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000080)={0x5, 0xdb}) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r10, 0x0, 0x0) read(r8, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x8) read(r10, &(0x7f0000000040)=""/15, 0xf) 982.127504ms ago: executing program 2 (id=686): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 975.283675ms ago: executing program 3 (id=687): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00') (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00') prctl$PR_MCE_KILL(0x35, 0x1, 0x2) (async) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder-control\x00', 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x20082, 0x0) write$vga_arbiter(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='trylock none'], 0xd) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000540)={'binder1\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000000)={'custom0\x00'}) 974.195465ms ago: executing program 4 (id=672): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12) (async) write$vga_arbiter(r3, 0x0, 0x13) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="cf00000000555c0000000000000000a79200000000080000ccf7ae7d55"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te']) 851.701067ms ago: executing program 1 (id=627): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73797374656d5f75dd47d0b90b893a03ffdf"]) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x8008770b, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae09, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x3}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xeeee0000, 0x2, 0x3, 0xeffffdff, 0x0, [{0xfe, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0xb}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0xfd, 0xbe}, {0x0, 0x6}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x2}, {0x0, 0x0, 0x9}, {0x0, 0x50}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x4, 0x4e}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {}, {0x1, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x8, 0xa, '\x00', 0x3}, {0x80, 0xfc, 0x0, '\x00', 0x40}, {0x0, 0x14}, {0x2, 0x0, 0x6, '\x00', 0x2}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0xfc, 0x83, 0xe}]}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000869000/0x2000)=nil, 0x2000, 0x2000006, 0x12, r5, 0x70800000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f000086a000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x2) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000080)={0x5, 0xdb}) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r10, 0x0, 0x0) read(r8, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x8) read(r10, &(0x7f0000000040)=""/15, 0xf) 709.724319ms ago: executing program 2 (id=688): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$TUNGETDEVNETNS(r4, 0xff05, 0x0) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f00000024c0)={0x0, 0x6}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) syz_clone3(&(0x7f00000005c0)={0x11c103200, 0x0, 0x0, &(0x7f00000003c0), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000008a0200000000000003000000000000ed"]) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000c0200000000000008e9000000000000"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r15, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x140, 0x0, 0x1}]}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0) 709.042139ms ago: executing program 4 (id=672): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12) (async) write$vga_arbiter(r3, 0x0, 0x13) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="cf00000000555c0000000000000000a79200000000080000ccf7ae7d55"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te']) 487.217132ms ago: executing program 1 (id=627): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73797374656d5f75dd47d0b90b893a03ffdf"]) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x8008770b, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae09, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x3}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xeeee0000, 0x2, 0x3, 0xeffffdff, 0x0, [{0xfe, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0xb}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0xfd, 0xbe}, {0x0, 0x6}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x2}, {0x0, 0x0, 0x9}, {0x0, 0x50}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x4, 0x4e}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {}, {0x1, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x8, 0xa, '\x00', 0x3}, {0x80, 0xfc, 0x0, '\x00', 0x40}, {0x0, 0x14}, {0x2, 0x0, 0x6, '\x00', 0x2}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0xfc, 0x83, 0xe}]}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000869000/0x2000)=nil, 0x2000, 0x2000006, 0x12, r5, 0x70800000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f000086a000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x2) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000080)={0x5, 0xdb}) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r10, 0x0, 0x0) read(r8, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x8) read(r10, &(0x7f0000000040)=""/15, 0xf) 270.416375ms ago: executing program 2 (id=689): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x8000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) close(r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x9, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 266.545616ms ago: executing program 4 (id=672): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12) (async) write$vga_arbiter(r3, 0x0, 0x13) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="cf00000000555c0000000000000000a79200000000080000ccf7ae7d55"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te']) 0s ago: executing program 1 (id=627): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73797374656d5f75dd47d0b90b893a03ffdf"]) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x8008770b, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae09, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x3}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xeeee0000, 0x2, 0x3, 0xeffffdff, 0x0, [{0xfe, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0xb}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0xfd, 0xbe}, {0x0, 0x6}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x2}, {0x0, 0x0, 0x9}, {0x0, 0x50}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x4, 0x4e}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {}, {0x1, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x8, 0xa, '\x00', 0x3}, {0x80, 0xfc, 0x0, '\x00', 0x40}, {0x0, 0x14}, {0x2, 0x0, 0x6, '\x00', 0x2}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0xfc, 0x83, 0xe}]}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000869000/0x2000)=nil, 0x2000, 0x2000006, 0x12, r5, 0x70800000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f000086a000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x2) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000080)={0x5, 0xdb}) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r10, 0x0, 0x0) read(r8, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x8) read(r10, &(0x7f0000000040)=""/15, 0xf) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. [ 20.766121][ T36] audit: type=1400 audit(1750362951.420:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.767280][ T281] cgroup: Unknown subsys name 'net' [ 20.788939][ T36] audit: type=1400 audit(1750362951.420:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.816649][ T36] audit: type=1400 audit(1750362951.450:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.816839][ T281] cgroup: Unknown subsys name 'devices' [ 21.021280][ T281] cgroup: Unknown subsys name 'hugetlb' [ 21.027245][ T281] cgroup: Unknown subsys name 'rlimit' [ 21.118282][ T36] audit: type=1400 audit(1750362951.770:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.141545][ T36] audit: type=1400 audit(1750362951.770:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.167460][ T36] audit: type=1400 audit(1750362951.770:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.175578][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.199968][ T36] audit: type=1400 audit(1750362951.860:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.227183][ T36] audit: type=1400 audit(1750362951.860:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.257769][ T36] audit: type=1400 audit(1750362951.910:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.258248][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.283547][ T36] audit: type=1400 audit(1750362951.910:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.005695][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.012836][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.019939][ T288] bridge_slave_0: entered allmulticast mode [ 22.026198][ T288] bridge_slave_0: entered promiscuous mode [ 22.032664][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.039725][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.046774][ T288] bridge_slave_1: entered allmulticast mode [ 22.053025][ T288] bridge_slave_1: entered promiscuous mode [ 22.146470][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.153632][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.160857][ T292] bridge_slave_0: entered allmulticast mode [ 22.167086][ T292] bridge_slave_0: entered promiscuous mode [ 22.182370][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.189462][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.196544][ T292] bridge_slave_1: entered allmulticast mode [ 22.203065][ T292] bridge_slave_1: entered promiscuous mode [ 22.226953][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.234073][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.241199][ T295] bridge_slave_0: entered allmulticast mode [ 22.247356][ T295] bridge_slave_0: entered promiscuous mode [ 22.253865][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.260912][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.268058][ T295] bridge_slave_1: entered allmulticast mode [ 22.274380][ T295] bridge_slave_1: entered promiscuous mode [ 22.305028][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.312509][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.319659][ T294] bridge_slave_0: entered allmulticast mode [ 22.325809][ T294] bridge_slave_0: entered promiscuous mode [ 22.332115][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.339159][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.346213][ T294] bridge_slave_1: entered allmulticast mode [ 22.352526][ T294] bridge_slave_1: entered promiscuous mode [ 22.434380][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.442053][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.449470][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.456586][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.507482][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.514628][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.522833][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.530236][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.544568][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.552091][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.560535][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.567662][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.583908][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.590989][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.598454][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.605511][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.623926][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.631837][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.639705][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.646941][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.655244][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.662511][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.669874][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.689876][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.696928][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.714641][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.721709][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.729589][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.736639][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.745561][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.752707][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.763225][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.770292][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.799748][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.806887][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.819607][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.826655][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.858798][ T295] veth0_vlan: entered promiscuous mode [ 22.867398][ T292] veth0_vlan: entered promiscuous mode [ 22.882605][ T288] veth0_vlan: entered promiscuous mode [ 22.892797][ T292] veth1_macvtap: entered promiscuous mode [ 22.904089][ T295] veth1_macvtap: entered promiscuous mode [ 22.912292][ T288] veth1_macvtap: entered promiscuous mode [ 22.948924][ T294] veth0_vlan: entered promiscuous mode [ 22.963068][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.975086][ T294] veth1_macvtap: entered promiscuous mode [ 23.063600][ T322] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.149220][ T331] rust_binder: Write failure EINVAL in pid:7 [ 23.215935][ T332] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 23.222105][ T332] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 23.230168][ T332] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 23.405601][ T345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:13 [ 23.436828][ T347] binder: Bad value for 'max' [ 23.595316][ T354] input: syz1 as /devices/virtual/input/input4 [ 23.963815][ T379] rust_binder: Write failure EFAULT in pid:11 [ 24.460374][ T389] SELinux: policydb string length 15532040 does not match expected length 8 [ 24.475482][ T389] SELinux: failed to load policy [ 24.515535][ T392] rust_binder: Error while translating object. [ 24.515566][ T392] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.523847][ T392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15 [ 24.566070][ T396] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 24.575522][ T396] rust_binder: Error while translating object. [ 24.586632][ T396] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.594961][ T396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 24.632705][ T402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.643679][ T402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.817370][ T414] input: syz0 as /devices/virtual/input/input6 [ 24.863015][ T414] binder: Bad value for 'max' [ 25.018836][ T431] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 25.028244][ T431] rust_binder: Write failure EINVAL in pid:26 [ 25.131584][ T447] rust_binder: Error while translating object. [ 25.138355][ T447] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.145737][ T447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 25.181978][ T447] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 25.194088][ T453] ======================================================= [ 25.194088][ T453] WARNING: The mand mount option has been deprecated and [ 25.194088][ T453] and is ignored by this kernel. Remove the mand [ 25.194088][ T453] option from the mount to silence this warning. [ 25.194088][ T453] ======================================================= [ 25.242382][ T453] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 25.272864][ T459] binder: Unknown parameter '0x00000000000000001844674407370955161500000000000000000000;ZUH[>9omΟb' [ 25.457762][ T479] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 25.466755][ T477] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 25.483247][ T479] rust_binder: Write failure EINVAL in pid:42 [ 25.494187][ T481] binder: Bad value for 'max' [ 25.539329][ T485] binder: Bad value for 'defcontext' [ 25.545314][ T485] binder: Bad value for 'defcontext' [ 25.590132][ T483] kvm: Disabled LAPIC found during irq injection [ 25.629422][ T489] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 25.639666][ T489] SELinux: failed to load policy [ 25.664093][ T491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.664121][ T491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 25.668737][ T489] rust_binder: Write failure EINVAL in pid:41 [ 25.699278][ T492] rust_binder: Error while translating object. [ 25.712801][ T492] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 25.721145][ T492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:62 [ 25.842269][ T500] tun0: tun_chr_ioctl cmd 1074025675 [ 25.861093][ T500] tun0: persist enabled [ 25.867189][ T500] tun0: tun_chr_ioctl cmd 1074025675 [ 25.873548][ T500] tun0: persist enabled [ 25.880932][ T500] rust_binder: Write failure EINVAL in pid:65 [ 25.908382][ T506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 25.915950][ T506] rust_binder: Error while translating object. [ 25.923513][ T506] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.932328][ T506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 26.013283][ T36] kauditd_printk_skb: 87 callbacks suppressed [ 26.013300][ T36] audit: type=1400 audit(1750362956.670:161): avc: denied { map } for pid=512 comm="syz.2.68" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.108235][ T36] audit: type=1400 audit(1750362956.720:162): avc: denied { execute } for pid=512 comm="syz.2.68" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.138636][ T516] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.605446][ T531] rust_binder: Write failure EINVAL in pid:45 [ 26.629126][ T532] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 26.658982][ T532] rust_binder: Write failure EINVAL in pid:45 [ 26.686525][ T36] audit: type=1326 audit(1750362957.340:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.2.74" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33cf98e929 code=0x0 [ 26.797305][ T535] rust_binder: Error in use_page_slow: ESRCH [ 26.797338][ T535] rust_binder: use_range failure ESRCH [ 26.804183][ T535] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 26.810268][ T535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 26.818215][ T535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:48 [ 26.845649][ T36] audit: type=1400 audit(1750362957.500:164): avc: denied { append } for pid=539 comm="syz.3.76" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 26.929294][ T36] audit: type=1400 audit(1750362957.590:165): avc: denied { write } for pid=544 comm="syz.3.78" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 26.955851][ T36] audit: type=1400 audit(1750362957.590:166): avc: denied { open } for pid=544 comm="syz.3.78" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 27.006255][ T36] audit: type=1400 audit(1750362957.660:167): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 27.068689][ T555] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.069947][ T555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 27.228813][ T563] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.239036][ T36] audit: type=1400 audit(1750362957.890:168): avc: denied { read write } for pid=562 comm="syz.3.84" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.272635][ T563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:67 [ 27.272714][ T36] audit: type=1400 audit(1750362957.900:169): avc: denied { open } for pid=562 comm="syz.3.84" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.305212][ T36] audit: type=1400 audit(1750362957.930:170): avc: denied { ioctl } for pid=562 comm="syz.3.84" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.339518][ T565] rust_binder: Write failure EINVAL in pid:84 [ 27.457692][ T576] rust_binder: Got transaction with invalid offset. [ 27.466284][ T576] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.473704][ T576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59 [ 27.538801][ T578] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 27.591434][ T583] random: crng reseeded on system resumption [ 27.600259][ T586] rust_binder: Write failure EFAULT in pid:75 [ 27.606915][ T580] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:87 [ 27.618914][ T580] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 27.636495][ T580] rust_binder: Read failure Err(EFAULT) in pid:87 [ 27.750258][ T597] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 27.756900][ T597] rust_binder: Read failure Err(EFAULT) in pid:89 [ 27.819594][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.835606][ T606] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 27.835647][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.850542][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.857783][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.880653][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.896273][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.904540][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.914007][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.929009][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.944651][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.959492][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.975162][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.988134][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.997953][ T605] cgroup: fork rejected by pids controller in [ 28.005169][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.012418][ T605] /syz3 [ 28.019077][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.031144][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.038582][ T605] [ 28.049565][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.050188][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.057169][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.066736][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.078944][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.137131][ T646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 28.154240][ T645] rust_binder: Error while translating object. [ 28.165417][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.171895][ T645] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 28.180074][ T645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:60 [ 28.191182][ T649] binder: Bad value for 'stats' [ 28.199666][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.223972][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.235738][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.245589][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.265223][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.275309][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.283334][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.299018][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.316730][ T664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:70 [ 28.319005][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.323820][ T664] rust_binder: Error while translating object. [ 28.338797][ T604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.339235][ T664] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 28.352209][ T664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:70 [ 28.400332][ T670] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.553835][ T679] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.668711][ T691] rust_binder: Write failure EINVAL in pid:66 [ 28.734467][ T704] SELinux: Context is not valid (left unmapped). [ 28.753166][ T707] binder: Bad value for 'max' [ 28.775759][ T712] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 28.775782][ T712] rust_binder: Error while translating object. [ 28.789089][ T712] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.801661][ T712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129 [ 28.889213][ T716] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 28.903570][ T716] rust_binder: Error in use_page_slow: EBUSY [ 28.915517][ T716] rust_binder: use_range failure EBUSY [ 28.923583][ T716] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 28.923631][ T720] binder: Binderfs stats mode cannot be changed during a remount [ 28.929327][ T716] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 28.945321][ T716] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 28.965564][ T716] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:131 [ 29.109349][ T732] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 29.184776][ T744] rust_binder: Error while translating object. [ 29.184814][ T744] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.198967][ T744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 29.419169][ T772] binfmt_misc: register: failed to install interpreter file ./file0 [ 29.436071][ T772] binder: Unknown parameter '00000000000000000000003' [ 29.456935][ T777] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:87 [ 29.457551][ T777] rust_binder: Read failure Err(EFAULT) in pid:87 [ 29.500795][ T780] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.508585][ T780] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 29.517067][ T780] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:120 [ 29.569285][ T789] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.725956][ T812] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 29.797315][ T826] rust_binder: Error while translating object. [ 29.809897][ T826] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.817457][ T826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96 [ 29.847585][ T831] binder: Unknown parameter 'n 5262 [ 29.847585][ T831] nr_zone_inactive_file 2172 [ 29.847585][ T831] nr_zone_active_file 15711 [ 29.847585][ T831] nr_zone_unevictable 0 [ 29.847585][ T831] nr_zone_write_pending 1178 [ 29.847585][ T831] nr_mlock 0 [ 29.847585][ T831] nr_bounce 0 [ 29.847585][ T831] nr_zspages 0 [ 29.847585][ T831] nr_free_cma 0 [ 29.847585][ T831] nr_inactive_anon 0 [ 29.847585][ T831] nr_active_anon 5262 [ 29.847585][ T831] nr_inactive_file 2172 [ 29.847585][ T831] nr_active_file 15711 [ 29.847585][ T831] nr_unevictable 0 [ 29.847585][ T831] nr_slab_reclaimable 6190 [ 29.847585][ T831] nr_slab_unreclaimable 70335 [ 29.847585][ T831] nr_isolated_anon 0 [ 29.847585][ T831] nr_isolated_file 0 [ 29.847585][ T831] workingset_nodes 0 [ 29.847585][ T831] workingset_refault_anon 0 [ 29.847585][ T831] workingset_refault_file 0 [ 29.847585][ T831] workingset_activate_anon 0 [ 29.847585][ T831] workingset_activate_file 0 [ 29.847585][ T831] workingset_restore_anon 0 [ 29.847585][ T831] workingset_restore_file 0 [ 29.847585][ T831] workingset_nodereclaim 0 [ 29.847585][ T831] nr_anon_pages 5121 [ 29.847585][ T831] nr_mapped 23827 [ 29.847585][ T831] nr_file_pages 18042 [ 29.847585][ T831] nr_dirty 1178 [ 29.847585][ T831] nr_writeback 0 [ 29.847585][ T831] nr_writeback_temp 0 [ 29.847585][ T831] nr_shmem 163 [ 29.847585][ T831] nr_shmem_hugepages 0 [ 29.847585][ T831] nr_shmem_pmdmapped 0 [ 29.847585][ T831] nr_file_hugepages 0 [ 29.847585][ T831] nr_file_pmdmapped 0 [ 29.847585][ T831] nr_anon_transparent_hugepages 0 [ 29.847585][ T831] nr_vmscan_write 0 [ 29.847585][ T831] nr_vmscan_immediate_reclaim 0 [ 29.847585][ T831] nr_dirtied 1365 [ 29.847585][ T831] nr_written 187 [ 29.847585][ T831] nr_throttled_written 0 [ 29.847585][ T831] nr_kernel_misc_reclaimable 0 [ 29.847585][ T831] nr_foll_pin_acquired 0 [ 29.847585][ T831] nr_foll_pin_released 0 [ 29.883730][ T837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.005755][ T841] binder: Unknown parameter '(' [ 30.082117][ T838] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 30.086778][ T838] rust_binder: Error while translating object. [ 30.107476][ T838] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.114131][ T838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144 [ 30.128660][ T851] rust_binder: Read failure Err(EAGAIN) in pid:103 [ 30.391094][ T874] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 30.420063][ T874] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.420095][ T874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:107 [ 30.464386][ T880] rust_binder: Error in use_page_slow: ESRCH [ 30.473640][ T880] rust_binder: use_range failure ESRCH [ 30.479999][ T880] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 30.485524][ T880] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 30.493633][ T880] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:192 [ 30.576646][ T891] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.606994][ T892] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 30.640769][ T892] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:196 [ 30.658495][ T894] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 30.662550][ T891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154 [ 30.811841][ T898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:113 [ 30.833091][ T900] can0: slcan on ptm0. [ 30.849394][ T900] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.849707][ T900] rust_binder: Write failure EINVAL in pid:157 [ 30.926645][ T903] kvm: apic: phys broadcast and lowest prio [ 30.948212][ T899] can0 (unregistered): slcan off ptm0. [ 31.180032][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 31.180046][ T36] audit: type=1400 audit(1750362961.840:193): avc: denied { map } for pid=941 comm="syz.2.191" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.311125][ T953] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.311614][ T953] rust_binder: Error while translating object. [ 31.318283][ T953] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.328474][ T953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:167 [ 31.375853][ T36] audit: type=1326 audit(1750362962.030:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=964 comm="syz.1.197" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36b7b8e929 code=0x0 [ 31.860806][ T36] audit: type=1326 audit(1750362962.520:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1008 comm="syz.0.209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33d378e929 code=0x0 [ 31.975477][ T1032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227 [ 31.986996][ T36] audit: type=1326 audit(1750362962.640:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1033 comm="syz.2.215" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33cf98e929 code=0x0 [ 32.051747][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.060873][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.068386][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.076434][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.085916][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.094689][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 32.117737][ T1041] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 206) [ 32.117759][ T1041] rust_binder: Error while translating object. [ 32.131532][ T1041] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.139965][ T1041] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:125 [ 32.151615][ T1042] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.181524][ T1039] fido_id[1039]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 32.227581][ T1049] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.227617][ T1049] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:231 [ 32.344927][ T1072] rust_binder: Error in use_page_slow: ESRCH [ 32.344951][ T1072] rust_binder: use_range failure ESRCH [ 32.357557][ T1074] input: syz1 as /devices/virtual/input/input11 [ 32.367368][ T1072] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 32.367393][ T1072] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 32.371425][ T1074] rust_binder: Error while translating object. [ 32.385182][ T36] audit: type=1400 audit(1750362963.030:197): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=441 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.391068][ T1072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:243 [ 32.413604][ T1074] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 32.422967][ T1074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:135 [ 32.435107][ T36] audit: type=1400 audit(1750362963.030:198): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=441 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.470456][ T36] audit: type=1400 audit(1750362963.030:199): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=441 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.589671][ T1076] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false [ 32.589694][ T1076] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 32.599630][ T1076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:179 [ 32.742330][ T36] audit: type=1400 audit(1750362963.400:200): avc: denied { execute } for pid=1087 comm="syz.0.231" path="/43/cpu.stat" dev="tmpfs" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.793502][ T1092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:145 [ 32.858422][ T1094] rust_binder: Write failure EFAULT in pid:249 [ 32.872902][ T1094] SELinux: policydb version -845211227 does not match my version range 15-33 [ 32.888740][ T1094] SELinux: failed to load policy [ 32.968854][ T36] audit: type=1400 audit(1750362963.620:201): avc: denied { map } for pid=1100 comm="syz.3.236" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.015856][ T1104] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 33.028317][ T36] audit: type=1400 audit(1750362963.620:202): avc: denied { read } for pid=1100 comm="syz.3.236" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.106767][ T1116] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 33.119108][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.119400][ T1116] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:154 [ 33.164580][ T1122] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.224861][ T1126] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.290460][ T1130] SELinux: security_context_str_to_sid () failed with errno=-22 [ 33.326725][ T1134] serio: Serial port ttynull [ 33.427535][ T305] Bluetooth: hci1: Frame reassembly failed (-84) [ 33.461094][ T1139] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 33.468514][ T1139] rust_binder: Write failure EINVAL in pid:191 [ 33.540343][ T1154] SELinux: policydb version 905587468 does not match my version range 15-33 [ 33.555622][ T1154] SELinux: failed to load policy [ 33.566608][ T1154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:268 [ 33.567049][ T1154] rust_binder: Error while translating object. [ 33.576656][ T1154] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 33.584719][ T1154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:268 [ 33.875812][ T1170] deleting an unspecified loop device is not supported. [ 34.281372][ T1198] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200 [ 34.294100][ T1200] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 34.328344][ T1200] kvm: user requested TSC rate below hardware speed [ 34.391098][ T1205] kvm: kvm [1199]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x7fffffffffffffff [ 34.579868][ T1210] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 34.579885][ T1210] rust_binder: Error while translating object. [ 34.588674][ T1210] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.594902][ T1210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:313 [ 34.604813][ T1211] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.622455][ T1215] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:318 [ 34.628984][ T1215] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 34.638098][ T1215] rust_binder: Read failure Err(EFAULT) in pid:318 [ 34.670525][ T1215] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1024 (2048 ns) > initial count (1152 ns). Using initial count to start timer. [ 34.696169][ T1215] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 34.801292][ T1225] SELinux: security_context_str_to_sid () failed with errno=-22 [ 34.818563][ T1228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.818731][ T1227] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.832152][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.832199][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.838628][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.852020][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.852037][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.852049][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.865832][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.872080][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.878640][ T1227] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 34.885338][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.894442][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.901017][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.907542][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.914237][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.920879][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.927214][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.927227][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.940666][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.947190][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.954128][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.960515][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.968047][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.975624][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.982745][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.989817][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.997364][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.004847][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.011662][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.018302][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.025129][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.031598][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.038163][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.044994][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.052616][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.159006][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.159009][ T1148] Bluetooth: hci0: command 0x1003 tx timeout [ 35.256488][ T1249] rust_binder: Write failure EINVAL in pid:346 [ 35.263996][ T1247] rust_binder: Read failure Err(EAGAIN) in pid:160 [ 35.296153][ T1254] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 35.309091][ T1254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:350 [ 35.357816][ T1261] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.367668][ T1261] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:206 [ 35.478983][ T52] Bluetooth: hci1: command 0x1003 tx timeout [ 35.495398][ T1117] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 35.559156][ T1266] rust_binder: Read failure Err(EAGAIN) in pid:163 [ 36.008212][ T1305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:360 [ 36.184498][ T1319] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 36.196675][ T1319] rust_binder: Error while translating object. [ 36.208381][ T1319] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.215254][ T1319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:363 [ 36.220029][ T1325] kvm: user requested TSC rate below hardware speed [ 36.241875][ T1325] kvm: user requested TSC rate below hardware speed [ 36.251078][ T1328] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.253080][ T1325] kvm: user requested TSC rate below hardware speed [ 36.271763][ T1325] kvm: user requested TSC rate below hardware speed [ 36.281200][ T1325] kvm: user requested TSC rate below hardware speed [ 36.287977][ T1325] kvm: user requested TSC rate below hardware speed [ 36.297574][ T1325] kvm: user requested TSC rate below hardware speed [ 36.304689][ T1325] kvm: user requested TSC rate below hardware speed [ 36.312173][ T1325] kvm: user requested TSC rate below hardware speed [ 36.312193][ T1327] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.378375][ T1328] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 36.548819][ T1346] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 36.567343][ T1346] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 36.684913][ T36] kauditd_printk_skb: 55 callbacks suppressed [ 36.684929][ T36] audit: type=1400 audit(1750362967.340:258): avc: denied { execute } for pid=1364 comm="syz.1.312" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 36.743052][ T36] audit: type=1400 audit(1750362967.400:259): avc: denied { append } for pid=1366 comm="syz.2.313" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 36.829601][ T36] audit: type=1400 audit(1750362967.490:260): avc: denied { setcheckreqprot } for pid=1368 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 36.863804][ T36] audit: type=1326 audit(1750362967.520:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1370 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d378e929 code=0x7ffc0000 [ 36.887923][ T36] audit: type=1326 audit(1750362967.520:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1370 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d378e929 code=0x7ffc0000 [ 36.890448][ T1371] binder: Unknown parameter 'context' [ 36.911332][ T36] audit: type=1326 audit(1750362967.550:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1370 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f33d378e929 code=0x7ffc0000 [ 36.940834][ T36] audit: type=1326 audit(1750362967.550:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1370 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d378e929 code=0x7ffc0000 [ 36.965129][ T36] audit: type=1326 audit(1750362967.550:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1370 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33d378e929 code=0x7ffc0000 [ 36.988432][ T36] audit: type=1326 audit(1750362967.550:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1370 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d378e929 code=0x7ffc0000 [ 37.013522][ T36] audit: type=1326 audit(1750362967.550:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1370 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33d378e929 code=0x7ffc0000 [ 37.043742][ T1378] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.049354][ T1379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:182 [ 37.233254][ T1399] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 37.280346][ T1403] rust_binder: Write failure EFAULT in pid:189 [ 37.331884][ T1406] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 37.388238][ T1406] rust_binder: Error in use_page_slow: ESRCH [ 37.388256][ T1406] rust_binder: use_range failure ESRCH [ 37.394632][ T1406] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 37.400444][ T1406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 37.408415][ T1406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:371 [ 37.431142][ T1409] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 37.440554][ T1409] rust_binder: Error in use_page_slow: EBUSY [ 37.457882][ T1409] rust_binder: use_range failure EBUSY [ 37.464315][ T1409] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 37.473636][ T1409] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 37.483054][ T1409] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 37.493487][ T1409] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:193 [ 37.559286][ T1417] rust_binder: Write failure EFAULT in pid:196 [ 37.562694][ T1415] syz.3.329 (1415) used obsolete PPPIOCDETACH ioctl [ 37.709457][ T1424] rtc_cmos 00:00: Alarms can be up to one day in the future [ 37.724426][ T1429] rust_binder: Write failure EINVAL in pid:377 [ 37.739948][ T1432] binder: Unknown parameter 'ss' [ 37.804968][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 37.812541][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 37.820443][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 37.827981][ T45] rtc_cmos 00:00: Alarms can be up to one day in the future [ 37.835701][ T45] rtc rtc0: __rtc_set_alarm: err=-22 [ 38.088967][ T1461] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.088989][ T1461] rust_binder: Read failure Err(EFAULT) in pid:210 [ 38.177681][ T1463] input: syz0 as /devices/virtual/input/input13 [ 38.238362][ T1465] SELinux: failed to load policy [ 38.270313][ T1465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.270558][ T1465] rust_binder: Error while translating object. [ 38.277836][ T1465] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.284226][ T1465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:248 [ 38.294199][ T1465] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 38.310950][ T1465] rust_binder: Write failure EINVAL in pid:248 [ 38.351421][ T1467] rust_binder: Error while translating object. [ 38.361033][ T1467] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 38.361707][ T1469] input: syz1 as /devices/virtual/input/input14 [ 38.368386][ T1467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:389 [ 38.428304][ T1474] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.472796][ T1478] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 38.472820][ T1478] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 38.472871][ T1474] rust_binder: Failed copying remainder into alloc: EFAULT [ 38.488808][ T1478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:214 [ 38.521151][ T1474] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 38.531705][ T1474] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 38.541276][ T1474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:214 [ 38.573696][ T1486] binder: Unknown parameter 'contextrfs/binder1' [ 38.665483][ T1488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217 [ 38.716239][ T1495] rust_binder: Write failure EINVAL in pid:217 [ 38.889762][ T1501] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.925070][ T1501] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:394 [ 39.343923][ T1521] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.515630][ T1532] rust_binder: Write failure EFAULT in pid:400 [ 39.633653][ T1549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:265 [ 39.699563][ T1559] binder: Unknown parameter 'coyBLV"i5ntext' [ 39.776664][ T1565] random: crng reseeded on system resumption [ 39.936767][ T1575] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.179752][ T1596] rust_binder: Error in use_page_slow: ESRCH [ 40.179775][ T1596] rust_binder: use_range failure ESRCH [ 40.187221][ T1596] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 40.195093][ T1596] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 40.204594][ T1596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:423 [ 40.237415][ T1601] binder: Unknown parameter 'context' [ 40.269525][ T1603] binder: Bad value for 'max' [ 40.336089][ T1607] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 40.344692][ T1607] rust_binder: Write failure EINVAL in pid:427 [ 40.346072][ T1609] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.469666][ T1617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:432 [ 40.672832][ T1626] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.781528][ T1633] SELinux: security_context_str_to_sid (fyste_uGй :) failed with errno=-22 [ 40.821790][ T1635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:278 [ 40.821848][ T1635] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 40.839352][ T1635] rust_binder: Read failure Err(EFAULT) in pid:278 [ 40.971870][ T1657] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.978651][ T1657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:236 [ 41.117930][ T1663] set_tsc_khz: 24 callbacks suppressed [ 41.117960][ T1663] kvm: user requested TSC rate below hardware speed [ 41.150508][ T1661] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 41.567981][ T1696] rust_binder: Write failure EINVAL in pid:251 [ 41.568416][ T1696] rust_binder: Error while translating object. [ 41.576472][ T1696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.599751][ T1696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251 [ 41.612797][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.633711][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.644950][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.675228][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.684617][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.694244][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.706768][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.719650][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.734214][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.744086][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.755534][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.766297][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.776878][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.805353][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.816304][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.827273][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.837089][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.847137][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.866211][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.881193][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.892087][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.907695][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 41.918648][ T1738] binder: Unknown parameter 'processor : 0 [ 41.918648][ T1738] vendor_id : GenuineIntel [ 41.918648][ T1738] cpu family : 6 [ 41.918648][ T1738] model : 79 [ 41.918648][ T1738] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 41.918648][ T1738] stepping : 0 [ 41.918648][ T1738] microcode : 0xffffffff [ 41.918648][ T1738] cpu MHz : 2200.158 [ 41.918648][ T1738] cache size : 56320 KB [ 41.918648][ T1738] physical id : 0 [ 41.918648][ T1738] siblings : 2 [ 41.918648][ T1738] core id : 0 [ 41.918648][ T1738] cpu cores : 1 [ 41.918648][ T1738] apicid : 0 [ 41.918648][ T1738] initial apicid : 0 [ 41.918648][ T1738] fpu : yes [ 41.918648][ T1738] fpu_exception : yes [ 41.918648][ T1738] cpuid level : 13 [ 41.918648][ T1738] wp : yes [ 41.918648][ T1738] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 41.918648][ T1738] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 41.941876][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.092301][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.106383][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.106703][ T1752] binder: Bad value for 'max' [ 42.115619][ T1751] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.123937][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 42.123950][ T36] audit: type=1400 audit(1750362972.770:306): avc: denied { write } for pid=1750 comm="syz.0.434" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 42.129948][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.164404][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.174423][ T1751] rust_binder: Error while translating object. [ 42.174449][ T1751] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.179099][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.180961][ T1751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:270 [ 42.190714][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.218017][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.227725][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.246016][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.259494][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.271459][ T1701] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.474922][ T36] audit: type=1400 audit(1750362973.130:307): avc: denied { append } for pid=1784 comm="syz.1.445" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.615087][ T1793] kvm: apic: phys broadcast and lowest prio [ 42.630180][ T1793] input: syz0 as /devices/virtual/input/input19 [ 42.637338][ T1796] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 42.648368][ T1793] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 42.648387][ T1793] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 42.657228][ T1793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:317 [ 42.716584][ T1808] binder: Unknown parameter 'fscontext?}' [ 42.772670][ T1810] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 42.781028][ T1810] rust_binder: Write failure EINVAL in pid:321 [ 42.841106][ T1820] binder: Unknown parameter 'g00000000000000000000003' [ 42.895173][ T1823] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.895517][ T1823] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 42.910098][ T1823] rust_binder: Write failure EINVAL in pid:326 [ 42.977443][ T1832] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.984190][ T1832] rust_binder: Error while translating object. [ 42.990967][ T1832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.997222][ T1832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:329 [ 43.015872][ T1835] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.026054][ T1835] rust_binder: Got transaction with invalid offset. [ 43.032665][ T1835] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.039303][ T1835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:332 [ 43.212865][ T1851] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 43.284796][ T1861] kvm: kvm [1860]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x1 [ 43.299317][ T1861] can0: slcan on ptm2. [ 43.304655][ T36] audit: type=1400 audit(1750362973.960:308): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 43.332008][ T36] audit: type=1400 audit(1750362973.960:309): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.356455][ T36] audit: type=1400 audit(1750362973.960:310): avc: denied { read } for pid=148 comm="dhcpcd" name="n16" dev="tmpfs" ino=3122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.362378][ T1859] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 43.378060][ T1859] rust_binder: Error while translating object. [ 43.379480][ T36] audit: type=1400 audit(1750362973.960:311): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=3122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.399606][ T1859] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.420109][ T1859] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:485 [ 43.420154][ T1860] can0 (unregistered): slcan off ptm2. [ 43.431059][ T36] audit: type=1400 audit(1750362973.960:312): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=3122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.479352][ T36] audit: type=1400 audit(1750362974.100:313): avc: denied { read } for pid=1867 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.506049][ T36] audit: type=1400 audit(1750362974.100:314): avc: denied { open } for pid=1867 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.537033][ T36] audit: type=1400 audit(1750362974.100:315): avc: denied { getattr } for pid=1867 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.706663][ T1908] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.726798][ T1911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:494 [ 43.833649][ T1926] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 43.847791][ T1933] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 43.851526][ T1926] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 43.868402][ T1926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:501 [ 43.899944][ T1935] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 43.926967][ T1935] rust_binder: Write failure EINVAL in pid:345 [ 43.989609][ T1942] rust_binder: Error while translating object. [ 43.995993][ T1942] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 44.005668][ T1942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:503 [ 44.099461][ T1946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:351 [ 44.100414][ T1944] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 44.138917][ T1117] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.230638][ T1958] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.297174][ T1973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:362 [ 44.357014][ T1979] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 44.371344][ T1979] rust_binder: Error while translating object. [ 44.390124][ T1979] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.396895][ T1979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:276 [ 44.403147][ T1983] binder: Unknown parameter 'JPH017777777777777777777770000000000000000000600000000000000000000011' [ 44.456006][ T1987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:279 [ 44.471823][ T1990] input: syz0 as /devices/virtual/input/input23 [ 44.508066][ T1992] rust_binder: Write failure EFAULT in pid:284 [ 44.582101][ T1997] input: syz1 as /devices/virtual/input/input24 [ 44.603266][ T2001] random: crng reseeded on system resumption [ 44.663494][ T2004] rust_binder: Write failure EFAULT in pid:289 [ 44.679776][ T2007] binder: Unknown parameter 'defcontext01777777777777777777777' [ 44.739085][ T2015] rust_binder: Error while translating object. [ 44.739123][ T2015] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 44.754729][ T2015] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:521 [ 44.801848][ T2027] binder: Unknown parameter 'defcontext01777777777777777777777' [ 44.833077][ T2029] binder: Unknown parameter 'stts' [ 44.862615][ T2035] input: syz0 as /devices/virtual/input/input26 [ 44.877526][ T2037] input: syz1 as /devices/virtual/input/input27 [ 44.917772][ T2040] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 44.927142][ T2040] rust_binder: Write failure EINVAL in pid:294 [ 44.984505][ T2046] rust_binder: Write failure EFAULT in pid:294 [ 45.088153][ T2050] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.106396][ T2050] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:377 [ 45.138068][ T2057] rust_binder: Write failure EFAULT in pid:531 [ 45.326221][ T2063] binder: Binderfs stats mode cannot be changed during a remount [ 45.460869][ T2071] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=6 (12 ns) > initial count (2 ns). Using initial count to start timer. [ 45.640173][ T2086] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 45.640207][ T2086] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:545 [ 45.671546][ T2089] input: syz1 as /devices/virtual/input/input28 [ 45.741747][ T2089] rust_binder: Failed copying remainder into alloc: EFAULT [ 45.741771][ T2089] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 45.752812][ T2089] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 45.764320][ T2089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:389 [ 45.808032][ T2093] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:298 [ 45.868078][ T2095] SELinux: security_context_str_to_sid (sytem_uGй :߆dLT*aAoYFZ+s}H^D| m&_*WU 02ksF9OiH!S5<7gw篰3o$ISˮtwd?Ċ1H ECڂ;R,`2+xjRh^) failed with errno=-22 [ 45.873264][ T2096] rust_binder: Write failure EINVAL in pid:298 [ 45.926042][ T2100] binder: Unknown parameter 'obj_user' [ 46.009810][ T2107] kvm_intel: kvm [2104]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 46.072159][ T2111] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 46.135121][ T2113] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 247) [ 46.135149][ T2113] rust_binder: Error while translating object. [ 46.147082][ T2113] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.156058][ T2113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:394 [ 46.464574][ T2131] rust_binder: Write failure EFAULT in pid:559 [ 46.490324][ T2129] SELinux: security_context_str_to_sid () failed with errno=-22 [ 46.602532][ T2140] binder: Binderfs stats mode cannot be changed during a remount [ 46.611026][ T2140] binder: Binderfs stats mode cannot be changed during a remount [ 46.627570][ T2144] binder: Unknown parameter 'defcotext?$De|x [ 46.627570][ T2144] Nu7rscUxCj}>*B`cp4䡃Ѹe;M [ 46.627570][ T2144] o' [ 46.653933][ T2137] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.653969][ T2137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:561 [ 46.680088][ T2147] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.694101][ T2147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:416 [ 46.755721][ T2158] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.778354][ T2158] rust_binder: Write failure EINVAL in pid:501 [ 46.819233][ T2166] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.890429][ T2175] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 46.903701][ T2175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:569 [ 46.906271][ T2180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:419 [ 46.914586][ T2175] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 46.925543][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 46.936158][ T2175] rust_binder: Read failure Err(EFAULT) in pid:569 [ 46.945249][ T2180] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 46.951910][ T2181] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.958455][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 46.981746][ T2180] rust_binder: Write failure EINVAL in pid:419 [ 46.988951][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 46.995275][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.005885][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.005912][ T2184] rust_binder: Write failure EINVAL in pid:572 [ 47.012333][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.035987][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.036021][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.056433][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.064936][ T2194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.071243][ T2193] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.079530][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.098717][ T2193] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 47.105135][ T2193] rust_binder: Read failure Err(EFAULT) in pid:576 [ 47.106260][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.120166][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.126400][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.132875][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.139440][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.146274][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.152274][ T2200] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 47.152757][ T2199] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.167504][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.174281][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.180972][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.182312][ T2194] rust_binder: Write failure EINVAL in pid:514 [ 47.202733][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.209553][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.215769][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.223574][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.230467][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.237215][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.246944][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.257924][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.265619][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.272239][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.286454][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.295542][ T2205] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 47.311191][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.311224][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.317952][ T2178] rust_binder: Write failure EINVAL in pid:419 [ 47.331838][ T2208] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.339194][ T2208] rust_binder: Write failure EINVAL in pid:519 [ 47.339479][ T2209] rust_binder: Write failure EFAULT in pid:519 [ 47.347334][ T2208] rust_binder: Write failure EINVAL in pid:519 [ 47.355636][ T2209] rust_binder: Write failure EFAULT in pid:519 [ 47.370314][ T2208] rust_binder: Write failure EINVAL in pid:519 [ 47.372327][ T2209] rust_binder: Write failure EFAULT in pid:519 [ 47.399581][ T2215] rust_binder: Read failure Err(EAGAIN) in pid:524 [ 47.410480][ T2215] binder: Bad value for 'defcontext' [ 47.445893][ T2218] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 47.456563][ T2218] SELinux: failed to load policy [ 47.537843][ T2225] binder: Bad value for 'max' [ 47.568977][ T2229] input: syz1 as /devices/virtual/input/input29 [ 47.625225][ T2225] SELinux: failed to load policy [ 47.829147][ T2233] kvm: kvm [2231]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000 [ 47.840919][ T2232] kvm: kvm [2231]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000 [ 47.865506][ T2235] SELinux: security_context_str_to_sid () failed with errno=-22 [ 47.878493][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 47.878508][ T36] audit: type=1400 audit(1750362978.530:333): avc: granted { setsecparam } for pid=2236 comm="syz.1.594" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 47.912105][ T2237] rust_binder: Error while translating object. [ 47.912146][ T2237] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 47.925100][ T2237] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:426 [ 47.950177][ T36] audit: type=1400 audit(1750362978.610:334): avc: denied { ioctl } for pid=2242 comm="syz.1.596" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 47.992283][ T36] audit: type=1400 audit(1750362978.650:335): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.058931][ T36] audit: type=1400 audit(1750362978.650:336): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.088588][ T36] audit: type=1400 audit(1750362978.650:337): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.117448][ T36] audit: type=1400 audit(1750362978.680:338): avc: denied { read } for pid=2246 comm="syz.1.598" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 48.184006][ T36] audit: type=1400 audit(1750362978.680:339): avc: denied { read open } for pid=2246 comm="syz.1.598" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 48.214256][ T36] audit: type=1400 audit(1750362978.680:340): avc: denied { ioctl } for pid=2246 comm="syz.1.598" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 48.246012][ T36] audit: type=1400 audit(1750362978.690:341): avc: denied { read write } for pid=292 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.275843][ T36] audit: type=1400 audit(1750362978.690:342): avc: denied { read write open } for pid=292 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.669671][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 48.679933][ T2277] binder: Unknown parameter 'defcontext01777777777777777777777' [ 48.700400][ T2282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:544 [ 48.711484][ T2282] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 48.733394][ T2282] rust_binder: Read failure Err(EFAULT) in pid:544 [ 48.778239][ T2282] Bluetooth: hci0: Frame reassembly failed (-90) [ 48.801515][ T2282] binder: Unknown parameter 'processor : 0 [ 48.801515][ T2282] vendor_id : GenuineIntel [ 48.801515][ T2282] cpu family : 6 [ 48.801515][ T2282] model : 79 [ 48.801515][ T2282] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 48.801515][ T2282] stepping : 0 [ 48.801515][ T2282] microcode : 0xffffffff [ 48.801515][ T2282] cpu MHz : 2200.158 [ 48.801515][ T2282] cache size : 56320 KB [ 48.801515][ T2282] physical id : 0 [ 48.801515][ T2282] siblings : 2 [ 48.801515][ T2282] core id : 0 [ 48.801515][ T2282] cpu cores : 1 [ 48.801515][ T2282] apicid : 0 [ 48.801515][ T2282] initial apicid : 0 [ 48.801515][ T2282] fpu : yes [ 48.801515][ T2282] fpu_exception : yes [ 48.801515][ T2282] cpuid level : 13 [ 48.801515][ T2282] wp : yes [ 48.801515][ T2282] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 48.801515][ T2282] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 48.846350][ T2275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:324 [ 49.093241][ T2291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:603 [ 49.297734][ T2303] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 49.423265][ T2312] binder: Bad value for 'stats' [ 49.484568][ T2314] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 49.484590][ T2314] rust_binder: Read failure Err(EFAULT) in pid:328 [ 49.503357][ T2315] SELinux: policydb string does not match my string SE Linux [ 49.524791][ T2315] SELinux: failed to load policy [ 49.549977][ T2314] SELinux: policydb string does not match my string SE Linux [ 49.558018][ T2314] SELinux: failed to load policy [ 49.598530][ T2317] rust_binder: Write failure EINVAL in pid:613 [ 49.598994][ T2317] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:613 [ 49.661651][ T2325] cgroup: fork rejected by pids controller in /syz1 [ 49.769711][ T2433] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 49.769739][ T2433] rust_binder: Error while translating object. [ 49.781126][ T2433] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.787477][ T2433] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:337 [ 49.799783][ T2433] binder: Bad value for 'stats' [ 49.850832][ T2436] input: syz0 as /devices/virtual/input/input30 [ 49.900827][ T2441] rust_binder: Read failure Err(EAGAIN) in pid:344 [ 49.911198][ T289] bridge_slave_1: left allmulticast mode [ 49.924952][ T289] bridge_slave_1: left promiscuous mode [ 49.927278][ T2441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.931078][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.938672][ T2441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:344 [ 49.953372][ T2442] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.959214][ T289] bridge_slave_0: left allmulticast mode [ 49.976641][ T289] bridge_slave_0: left promiscuous mode [ 49.984092][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.105946][ T289] veth1_macvtap: left promiscuous mode [ 50.112233][ T289] veth0_vlan: left promiscuous mode [ 50.170706][ T2450] rust_binder: Write failure EINVAL in pid:351 [ 50.678930][ T1117] Bluetooth: hci0: command 0x1003 tx timeout [ 50.678930][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.249295][ T2468] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.255161][ T2468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:552 [ 51.281348][ T2466] rust_binder: Got transaction with invalid offset. [ 51.299006][ T2466] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.315743][ T2466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:618 [ 52.019745][ T2473] rust_binder: Error while translating object. [ 52.050057][ T2473] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 52.056776][ T2473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:620 [ 52.173631][ T2476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.214630][ T2478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:622 [ 52.254353][ T2478] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 52.266731][ T2478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:622 [ 52.283035][ T2478] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.296640][ T2478] rust_binder: Read failure Err(EFAULT) in pid:622 [ 52.300557][ T2479] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:555 [ 52.913856][ T36] kauditd_printk_skb: 728 callbacks suppressed [ 52.913874][ T36] audit: type=1400 audit(1750362983.570:1071): avc: denied { execmem } for pid=2480 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.975508][ T36] audit: type=1326 audit(1750362983.610:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2481 comm="syz.3.638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6f8f8e929 code=0x0 [ 53.032898][ T2484] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.038935][ T36] audit: type=1400 audit(1750362983.660:1073): avc: denied { read write } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.076367][ T2484] rust_binder: Error in use_page_slow: ESRCH [ 53.076390][ T2484] rust_binder: use_range failure ESRCH [ 53.085455][ T2484] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 53.091994][ T36] audit: type=1400 audit(1750362983.660:1074): avc: denied { read write open } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.128698][ T2484] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 53.128740][ T2484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:558 [ 53.157219][ T2488] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.188950][ T36] audit: type=1400 audit(1750362983.660:1075): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.248942][ T36] audit: type=1400 audit(1750362983.680:1076): avc: denied { read } for pid=2483 comm="syz.2.639" name="binder0" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.272662][ T36] audit: type=1400 audit(1750362983.680:1077): avc: denied { read open } for pid=2483 comm="syz.2.639" path="/dev/binderfs/binder0" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.301110][ T36] audit: type=1400 audit(1750362983.690:1078): avc: denied { ioctl } for pid=2483 comm="syz.2.639" path="/dev/binderfs/binder0" dev="binder" ino=34 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.331849][ T36] audit: type=1400 audit(1750362983.690:1079): avc: denied { read } for pid=2483 comm="syz.2.639" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.369038][ T36] audit: type=1400 audit(1750362983.690:1080): avc: denied { read open } for pid=2483 comm="syz.2.639" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.979215][ T2494] SELinux: policydb version -845211227 does not match my version range 15-33 [ 54.002907][ T2494] SELinux: failed to load policy [ 54.293718][ T2503] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.293751][ T2503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:631 [ 55.219502][ T2508] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 55.290260][ T2507] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 56.419297][ T2520] rust_binder: Write failure EFAULT in pid:637 [ 56.525135][ T2522] rust_binder: Write failure EINVAL in pid:639 [ 56.537058][ T2524] SELinux: policydb version -1659294265 does not match my version range 15-33 [ 56.567948][ T2522] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 56.589920][ T2524] SELinux: failed to load policy [ 56.923153][ T2538] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.879451][ T2542] rust_binder: Write failure EFAULT in pid:585 [ 57.915854][ T2543] rust_binder: Error while translating object. [ 57.938956][ T2543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 57.950822][ T36] kauditd_printk_skb: 234 callbacks suppressed [ 57.950840][ T36] audit: type=1400 audit(1750362988.610:1315): avc: denied { read write } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.968907][ T2543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:647 [ 58.036582][ T36] audit: type=1400 audit(1750362988.610:1316): avc: denied { read write open } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.112534][ T36] audit: type=1400 audit(1750362988.610:1317): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.181166][ T36] audit: type=1400 audit(1750362988.670:1318): avc: denied { read } for pid=2547 comm="syz.2.655" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.207243][ T36] audit: type=1400 audit(1750362988.670:1319): avc: denied { read open } for pid=2547 comm="syz.2.655" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.237407][ T36] audit: type=1400 audit(1750362988.680:1320): avc: denied { ioctl } for pid=2547 comm="syz.2.655" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.266796][ T36] audit: type=1400 audit(1750362988.680:1321): avc: denied { ioctl } for pid=2547 comm="syz.2.655" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.295631][ T36] audit: type=1400 audit(1750362988.690:1322): avc: denied { map } for pid=2547 comm="syz.2.655" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.321338][ T36] audit: type=1400 audit(1750362988.690:1323): avc: denied { read } for pid=2547 comm="syz.2.655" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.348148][ T36] audit: type=1400 audit(1750362988.690:1324): avc: denied { read } for pid=2549 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 59.365779][ T2554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.368975][ T2554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.389325][ T2554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.413231][ T2554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.413484][ T2554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.439209][ T2554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.457216][ T2552] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 59.487938][ T2554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.488241][ T2554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.530204][ T2554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.558994][ T2554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.733163][ T2565] rust_binder: Write failure EINVAL in pid:597 [ 59.754114][ T2566] rust_binder: Write failure EINVAL in pid:597 [ 60.950087][ T2573] rust_binder: Write failure EFAULT in pid:600 [ 62.631013][ T2584] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.668924][ T2584] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 62.968830][ T36] kauditd_printk_skb: 196 callbacks suppressed [ 63.011187][ T36] audit: type=1400 audit(1750362993.620:1521): avc: denied { read } for pid=2593 comm="syz.2.666" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 63.065821][ T36] audit: type=1400 audit(1750362993.660:1522): avc: denied { read open } for pid=2593 comm="syz.2.666" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 63.097312][ T36] audit: type=1400 audit(1750362993.660:1523): avc: denied { ioctl } for pid=2593 comm="syz.2.666" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 63.137662][ T36] audit: type=1400 audit(1750362993.660:1524): avc: denied { read } for pid=2593 comm="syz.2.666" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.165580][ T36] audit: type=1400 audit(1750362993.660:1525): avc: denied { read open } for pid=2593 comm="syz.2.666" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.176505][ T2584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:662 [ 63.198417][ T36] audit: type=1400 audit(1750362993.670:1526): avc: denied { map } for pid=2593 comm="syz.2.666" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.241477][ T36] audit: type=1400 audit(1750362993.670:1527): avc: denied { read } for pid=2593 comm="syz.2.666" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.279289][ T36] audit: type=1400 audit(1750362993.700:1528): avc: denied { read write } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.318922][ T36] audit: type=1400 audit(1750362993.700:1529): avc: denied { read write open } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.359010][ T36] audit: type=1400 audit(1750362993.700:1530): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.581915][ T2607] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 64.581938][ T2607] rust_binder: Error while translating object. [ 64.639648][ T2607] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.647355][ T2607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:671 [ 66.440854][ T2623] binder: Bad value for 'stats' [ 66.487127][ T2622] binder: Bad value for 'max' [ 66.526715][ T2621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:677 [ 66.562466][ T13] bridge_slave_1: left allmulticast mode [ 66.606616][ T13] bridge_slave_1: left promiscuous mode [ 66.629003][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.637473][ T13] bridge_slave_0: left allmulticast mode [ 66.647872][ T13] bridge_slave_0: left promiscuous mode [ 66.659557][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.675330][ T289] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.699602][ T2631] Bluetooth: hci0: Frame reassembly failed (-90) [ 66.718449][ T2631] rust_binder: Write failure EINVAL in pid:681 [ 66.720209][ T2633] SELinux: security_context_str_to_sid () failed with errno=-22 [ 66.779814][ T13] veth1_macvtap: left promiscuous mode [ 66.785726][ T13] veth0_vlan: left promiscuous mode [ 67.314593][ T2649] binder: Unknown parameter '18446744073709551615' [ 68.086136][ T36] kauditd_printk_skb: 186 callbacks suppressed [ 68.086152][ T36] audit: type=1400 audit(1750362998.740:1717): avc: denied { read write } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.120441][ T36] audit: type=1400 audit(1750362998.740:1718): avc: denied { read write open } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.157908][ T36] audit: type=1400 audit(1750362998.740:1719): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.679019][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.697613][ T36] audit: type=1400 audit(1750362999.350:1720): avc: denied { read write } for pid=292 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.742378][ T36] audit: type=1400 audit(1750362999.350:1721): avc: denied { read write open } for pid=292 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.791220][ T36] audit: type=1400 audit(1750362999.350:1722): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.008894][ T36] audit: type=1400 audit(1750362999.660:1723): avc: denied { execmem } for pid=2650 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 69.078927][ T36] audit: type=1400 audit(1750362999.660:1724): avc: denied { execmem } for pid=2651 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 69.131081][ T36] audit: type=1400 audit(1750362999.700:1725): avc: denied { read write } for pid=2653 comm="syz.3.683" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.222163][ T36] audit: type=1400 audit(1750362999.700:1726): avc: denied { read write open } for pid=2653 comm="syz.3.683" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.942209][ T2680] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.338619][ T2688] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.348706][ T2688] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=1 req=627 state=3 status=67 (errno 32: Broken pipe) [ 70.358492][ T2688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:653 [ 70.635469][ T2690] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 70.671973][ T2690] CPU: 0 UID: 0 PID: 2690 Comm: syz-executor Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 70.672008][ T2690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.672026][ T2690] Call Trace: [ 70.672032][ T2690] [ 70.672039][ T2690] __dump_stack+0x21/0x30 [ 70.672064][ T2690] dump_stack_lvl+0x10c/0x190 [ 70.672083][ T2690] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.672098][ T2690] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 70.672122][ T2690] dump_stack+0x19/0x20 [ 70.672139][ T2690] warn_alloc+0x1bc/0x2a0 [ 70.672156][ T2690] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.672179][ T2690] ? __cfi_warn_alloc+0x10/0x10 [ 70.672195][ T2690] ? __get_vm_area_node+0x1dc/0x3a0 [ 70.672212][ T2690] ? kcov_ioctl+0x5d/0x5c0 [ 70.672229][ T2690] __vmalloc_node_range_noprof+0x68e/0x1420 [ 70.672249][ T2690] ? locks_remove_posix+0x38b/0x580 [ 70.672271][ T2690] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 70.672288][ T2690] ? expand_files+0xd6/0x700 [ 70.672311][ T2690] vmalloc_user_noprof+0x77/0x90 [ 70.672328][ T2690] ? kcov_ioctl+0x5d/0x5c0 [ 70.672344][ T2690] kcov_ioctl+0x5d/0x5c0 [ 70.672359][ T2690] ? bpf_lsm_file_ioctl+0xd/0x20 [ 70.672377][ T2690] ? security_file_ioctl+0x34/0xd0 [ 70.672399][ T2690] ? __cfi_kcov_ioctl+0x10/0x10 [ 70.672415][ T2690] __se_sys_ioctl+0x132/0x1b0 [ 70.672436][ T2690] __x64_sys_ioctl+0x7f/0xa0 [ 70.672457][ T2690] x64_sys_call+0x1878/0x2ee0 [ 70.672477][ T2690] do_syscall_64+0x58/0xf0 [ 70.672497][ T2690] ? clear_bhb_loop+0x35/0x90 [ 70.672519][ T2690] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.672541][ T2690] RIP: 0033:0x7fbfbd18e52b [ 70.672561][ T2690] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 70.672576][ T2690] RSP: 002b:00007ffca75bda60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.672596][ T2690] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fbfbd18e52b [ 70.672609][ T2690] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000da [ 70.672622][ T2690] RBP: 00007fbfbd3b61f8 R08: 00000000000000d9 R09: 0000000000000000 [ 70.672634][ T2690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.672645][ T2690] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 70.672658][ T2690] [ 70.672669][ T2690] Mem-Info: [ 70.956519][ T2690] active_anon:3661 inactive_anon:0 isolated_anon:0 [ 70.956519][ T2690] active_file:13414 inactive_file:2222 isolated_file:0 [ 70.956519][ T2690] unevictable:0 dirty:33 writeback:0 [ 70.956519][ T2690] slab_reclaimable:4028 slab_unreclaimable:69668 [ 70.956519][ T2690] mapped:4276 shmem:162 pagetables:386 [ 70.956519][ T2690] sec_pagetables:0 bounce:0 [ 70.956519][ T2690] kernel_misc_reclaimable:0 [ 70.956519][ T2690] free:1588002 free_pcp:5355 free_cma:0 [ 71.005946][ T2690] Node 0 active_anon:14644kB inactive_anon:0kB active_file:53656kB inactive_file:8888kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:17104kB dirty:132kB writeback:0kB shmem:648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3588kB pagetables:1544kB sec_pagetables:0kB all_unreclaimable? no [ 71.042452][ T2690] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966004kB mlocked:0kB bounce:0kB free_pcp:5792kB local_pcp:5792kB free_cma:0kB [ 71.075681][ T2690] lowmem_reserve[]: 0 3921 3921 [ 71.081287][ T2690] Normal free:3391800kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14568kB inactive_anon:0kB active_file:53652kB inactive_file:8892kB unevictable:0kB writepending:132kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:15644kB local_pcp:0kB free_cma:0kB [ 71.132724][ T13] bridge_slave_1: left allmulticast mode [ 71.138748][ T13] bridge_slave_1: left promiscuous mode [ 71.146918][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.154125][ T2690] lowmem_reserve[]: 0 0 0 [ 71.158927][ T2690] DMA32: 7*4kB (M) 3*8kB (M) 4*16kB (M) 5*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 71.159267][ T13] bridge_slave_0: left allmulticast mode [ 71.175099][ T2690] Normal: 1861*4kB (UME) 2196*8kB (UME) 1784*16kB (UME) 990*32kB (UME) 783*64kB (UME) 284*128kB (UME) 128*256kB (UME) 61*512kB (UME) 52*1024kB (UME) 19*2048kB (UME) 752*4096kB (UM) = 3408052kB [ 71.184400][ T13] bridge_slave_0: left promiscuous mode [ 71.201387][ T2690] 15796 total pagecache pages [ 71.208265][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.212070][ T2690] 0 pages in swap cache [ 71.224847][ T2690] Free swap = 124996kB [ 71.230401][ T2690] Total swap = 124996kB [ 71.234633][ T2690] 2097051 pages RAM [ 71.238719][ T2690] 0 pages HighMem/MovableOnly [ 71.243771][ T2690] 351520 pages reserved [ 71.248206][ T2690] 0 pages cma reserved [ 71.255476][ T2690] Memory allocations: [ 71.259714][ T2690] 0 B 0 init/main.c:1370 func:do_initcalls [ 71.267287][ T2690] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 71.276269][ T2690] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 71.284258][ T2690] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 71.293209][ T2690] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 71.303427][ T2690] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 71.312995][ T2690] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 71.321974][ T2690] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 71.333159][ T2690] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 71.342784][ T2690] 0 B 0 init/initramfs.c:101 func:find_link [ 71.393418][ T13] veth1_macvtap: left promiscuous mode [ 71.399364][ T13] veth0_vlan: left promiscuous mode [ 71.720245][ T13] bridge_slave_1: left allmulticast mode [ 71.726231][ T13] bridge_slave_1: left promiscuous mode [ 71.732942][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.741756][ T13] bridge_slave_0: left allmulticast mode [ 71.749118][ T13] bridge_slave_0: left promiscuous mode [ 71.755217][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.861975][ T13] veth1_macvtap: left promiscuous mode [ 71.867583][ T13] veth0_vlan: left promiscuous mode