last executing test programs: 57.43571655s ago: executing program 2 (id=687): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x5) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000400)={0xe00, 0x7, 0xa4f4, 0x0, 0x4, 0x401}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000440)="9954e45e4b8dbd9377", 0x9, r3}, 0x68) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0xeeef0000, 0x0, 0x1, 0xeffffdff, 0x0, [{0x0, 0xff}, {0x19, 0x3, 0x5}, {0x8}, {0x0, 0x0, 0x7f}, {}, {0x0, 0x65, 0x2}, {0x0, 0x0, 0x2c}, {}, {0x0, 0x33, 0xfa}, {0x2, 0x9}, {0x0, 0x4, 0x0, '\x00', 0x1}, {0x0, 0x8, 0x5, '\x00', 0xf9}, {}, {0x3}, {0x0, 0x6, 0x0, '\x00', 0x3}, {0x0, 0x0, 0x80}, {0x0, 0x0, 0xff}, {}, {0x0, 0x0, 0x4, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x26}, {0x8, 0x6}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7, '\x00', 0x1}]}}) ioctl$KVM_GET_MP_STATE(r6, 0x8004ae98, &(0x7f0000000380)) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000003c0)={0x0, 0x0, 0xffffffc0, 0x0, 0x0, "83843c556dec3a9a908001d03f3a26c2790100", 0x0, 0x14}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000f00), 0x101282, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0xc4, 0x0, &(0x7f00000002c0)=[@dead_binder_done, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}, @free_buffer={0x40086303, r1}, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000180)=[@decrefs, @clear_death], 0x0, 0x0, 0x0}) 57.257779943s ago: executing program 2 (id=689): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1180}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c9801288363"], 0xffdd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}, @clear_death={0x400c6313}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1180}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[]) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETQUEUE(r2, 0x400454d9, 0x0) (async) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c9801288363"], 0xffdd) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}, @clear_death={0x400c6313}], 0x0, 0x0, 0x0}) (async) 57.163693114s ago: executing program 2 (id=691): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80900, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000e40)=0x2) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0x1263) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000040)=r4) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 56.889668058s ago: executing program 2 (id=696): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x3, 0x1000, 0x0, 0x5}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20e20, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000600)={{0x0, 0xd000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, 0xb, 0x6, 0x0, 0x0, 0x0, 0x4, 0x7, 0x8f}, {0xffff1000, 0x5000, 0xc, 0x0, 0x7, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x3}, {0x10000, 0x4, 0x0, 0x0, 0x20, 0x5, 0x1, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x15, 0x0, 0x3a, 0xfe, 0x2, 0x2, 0x0, 0x0, 0xaf, 0xfc}, {0x5000, 0x0, 0xe, 0x1, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfd, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xf000}, 0x9df8ffd0, 0x0, 0x80a0000, 0x50, 0xa, 0xf801, 0x0, [0x0, 0xffffffffff7ffffc, 0x1]}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r6) (async) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000040)={0xeeee0000}) 56.599923492s ago: executing program 2 (id=702): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4602, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB]) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 56.437658615s ago: executing program 2 (id=706): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/+%*#\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x9, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 41.388137218s ago: executing program 32 (id=706): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/+%*#\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x9, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 21.936819836s ago: executing program 4 (id=1244): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x80002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x3002, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r2, @ANYRES16=r1, @ANYRESOCT, @ANYRESHEX=r0, @ANYRESDEC=r2, @ANYRES16=r1, @ANYRESOCT=r1]) r3 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x10800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES16=r7], 0xfffffffffffffdb1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@x86={0x8, 0xcd, 0x32, 0x0, 0x3, 0x15, 0x7, 0x1, 0x8, 0x9, 0xe, 0x8, 0x0, 0x1000, 0x81, 0x2, 0x7, 0x0, 0x34, '\x00', 0xd, 0x9}) mount$binderfs(0x0, &(0x7f0000000400)='./binderfs\x00', 0x0, 0x10254ab, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc018620c, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000f00)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\v\x82E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14\xa0\xed\x9c\x95!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfaE\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1056) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r10, 0xff09, 0x0) 21.801065188s ago: executing program 4 (id=1249): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, 0x0, 0x5b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) ioctl$int_out(r3, 0x5460, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000500)={0x0, r4}) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000009c0)='\x00\x00\x03\t\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\x80\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\b\xd0\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=vj<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d\n\xce\f\xba\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\xa9\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9h\x00\x13P1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xbeMk\xe0C\xc3\aSH\xe0\xf2\x0f\'z8\xbe\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\a\x00\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+p\x00\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc2\x00\x00\x00\x00\x00\x00\x04<\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|\x18\bb\x82\x8f\xc0\xab\xe3a`z\x06\x00\x00\x00\x00\x00\x00\x00\\\xf2\xd5\b\x00\x00\x00\x00') r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x10, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000040)) read$FUSE(r4, &(0x7f0000000cc0)={0x2020}, 0x2020) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000100)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d06}]}) read(r5, &(0x7f0000000240)=""/2, 0x2) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000300)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 21.60985461s ago: executing program 4 (id=1253): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x98, &(0x7f0000000000)={0x8000, 0x40000000008000, 0x14}}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x141a82, 0x13) write(r3, &(0x7f0000000240)="d62ee8dbbf6ce17d874af5a3a723affe22d13c11b2b132e20a", 0x19) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x900, 0x12) 21.500600272s ago: executing program 4 (id=1258): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x700, 0xfdef) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000001c0)={0x1, 0x0, [{0x1, 0x2, 0x80, 0xfffffff9, 0xeaa}]}) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000700)={"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"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r7, &(0x7f0000002c80)={0x2020}, 0xfffffdb2) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4138ae84, &(0x7f0000000240)=@x86={0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x7, 0x4, 0x80, 0x10, 0x2, 0xbe, 0x0, 0x7f, 0x4, 0x9, 0xd6, 0x8, 0x28, '\x00', 0x4, 0x21}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x8400ae8e, &(0x7f0000000140)=@x86={0xff, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd8}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000740)={0x30}, 0x30) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000200)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) 20.92572619s ago: executing program 4 (id=1272): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write(r3, &(0x7f0000000080)="01", 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x400000b4}]}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x1fe, 0x4, 0x3000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x100010, r7, 0x291e9000) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x10040, 0x322d89d05391a701) r9 = openat$cgroup_int(r8, 0x0, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f00000023c0)=ANY=[@ANYBLOB='1-2:5/', @ANYRES16=r7], 0x31) read(r7, &(0x7f0000000080)=""/1, 0x1) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r5, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_RUN(r10, 0xae80, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) read$FUSE(r7, &(0x7f0000000ac0)={0x2020}, 0x2020) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) write$cgroup_pressure(r11, &(0x7f0000000200)={'some', 0x20, 0x7, 0x20, 0x5}, 0x2f) read(r0, &(0x7f0000000080)=""/93, 0xffffff6c) 20.892343341s ago: executing program 4 (id=1276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0) 9.084809496s ago: executing program 1 (id=1311): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r1, 0x293f000) 9.084155616s ago: executing program 3 (id=1312): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r1, &(0x7f00000010c0), 0x3fffff) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te']) 7.532018819s ago: executing program 0 (id=1313): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'pim6reg\x00', 0x2}) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCXONC(r5, 0x540a, 0x3) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000780)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6, 0x7f}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000100)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d06}]}) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x22202, 0x0) read$FUSE(r10, &(0x7f00000004c0)={0x2020}, 0x2020) syz_clone3(&(0x7f0000000380)={0x80000, &(0x7f0000000240)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x25}, &(0x7f00000031c0)=""/4107, 0x100b, &(0x7f00000002c0)=""/130, &(0x7f0000000200), 0x0, {r10}}, 0x58) mmap(&(0x7f000053a000/0x3000)=nil, 0x3000, 0x0, 0x11, r11, 0x6d8ec000) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r12, 0x405c5503, &(0x7f0000002500)={{0x2, 0xfffe, 0x8, 0x6}, 'syz0\x00', 0x45}) ioctl$UI_DEV_CREATE(r12, 0x5501) read(r12, 0x0, 0x0) read(r0, &(0x7f0000000040)=""/106, 0x6a) 7.528698869s ago: executing program 1 (id=1314): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_NAME(0x4, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000200)={0x3, 0x0, [{0x1f, 0x6, 0x4, 0x3515, 0xb0b, 0x1, 0x5}, {0x0, 0x7, 0x5, 0xd7, 0x9, 0x7f, 0xc}, {0xb, 0x2, 0x1, 0x4, 0x7, 0xfffffff8, 0x2}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r5) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r5, 0xff07, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)={[{0x2d, 'rlimit'}, {0x2b, 'cpu'}, {0x2b, 'hugetlb'}, {0x2b, 'blkio'}, {0x2b, 'rdma'}]}, 0x23) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$BLKRRPART(r0, 0x125f, 0x0) 7.528270259s ago: executing program 3 (id=1315): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)={0x6, 0x9}) syz_clone(0x80000, &(0x7f0000000100)="545f698e05ff9691e0a977011f32f94cbba86dc9cdf37057e32847eaeecd1174e259597791006c19762676cc1bfdd48efbe2c5e24044b9a1d814d3d959f9149b3c66a1abf99d69bacf149f55fb73c2f720dd03d2d9058188d0480fcf4ff80ba2d29dc722f0e7c44cdce5cfb0e38c938265d0d5d8fbbfa13ac540ceb49bf40f0ef2f2166b3ab44e", 0xfffffffffffffe6b, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f00000003c0)="179ebd0f515605f5caf44714d934132aea610a30d444f8a1b576cb269a57ce5b7fb7a7cdb783a4662c78692f1ccc437dffa9b11096de779db111973b5f15599b8e73c2d5e79d1cd84009c8671321e0a9a4ecb7312c6bb7e5f543d882365821bb5eae1997debc09033c466721807f7f84ab64916d6117b2cde389ee776244689fa80e45664a23ac3ca19e7af870098baba230d54b37f1ab8696c086e03c85bf15d4f2fd93b8b6efbe4eb4bbecaf405e3890560a2b436612d441d1fd2011ac4b5d264b93bad2ca6a16c19cfb2258b47f7d235f48b8d6b37af36cfd3e677e") openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x4d8182) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x4d8182) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) (async) mmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0xd0002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) (async) close(r3) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r3, 0xff03, 0x0) (async) ioctl$TUNGETDEVNETNS(r3, 0xff03, 0x0) close(0x4) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x13) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f00000000c0)={0xfff, 0x0, 0x0, 0xafa, 0x0, "e32401186a9ed9a9"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0xa) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) write$UHID_INPUT(r6, &(0x7f0000000dc0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000000c0)={0x3, 0xdd}) 5.782283395s ago: executing program 0 (id=1316): openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x101c82, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xd2200, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000001c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000c401"]) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f00000000c0)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) 5.781916435s ago: executing program 1 (id=1317): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xe05, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000002c0)=[@exit_looper, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/4096, 0x0, 0x2, 0x1c}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @flat=@weak_binder={0x77622a85, 0x3001, 0x3}}, &(0x7f0000000100)}}], 0x59, 0x0, &(0x7f0000000180)="7da36444688b9003c6045e1cc7af25c074e647b4f4564aaa63f27ea91489a03854cefdb82aa7678a81e6c8848304e129eafaad290f30a1fdb345cc9108b412d63b555e427f4860ca62c851483d9fcdadd026296f264d18663831e148180528a1a50b1eb41156e49ac7"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xa70, 0x0, 0x3}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.781443465s ago: executing program 3 (id=1318): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000002180)={0x0, 0x6, 0x0, [0x0, 0x6, 0x6, 0x4, 0xd7], [0x1, 0xffffffff80000000, 0xb897, 0x8, 0x6143, 0x4, 0x44, 0x100ba8, 0x6, 0x100, 0x0, 0x9, 0x6, 0x7ff, 0x3, 0x9a9, 0xd, 0x5a1b, 0x8, 0x8, 0x6, 0x8, 0x7, 0xfffffffffffffffc, 0x10001, 0xc, 0x3, 0x3, 0x7fffffff, 0xffffffff00000000, 0x308, 0xbab8, 0xfffffffffffffff7, 0xcb, 0x2, 0x9f, 0x8d9, 0x3ff, 0x0, 0x1ff, 0x9, 0xd6f5, 0x7, 0x4, 0xe, 0x28, 0x5, 0x800000007cc5, 0x81, 0x9, 0x2, 0xb79, 0x100000000, 0x2, 0x21, 0x5, 0x9, 0x37da, 0x4, 0x4, 0x9, 0xe, 0x1, 0x4, 0xfffffffffffffffd, 0x100000000, 0x4, 0x7, 0x12c5, 0xb, 0x6, 0x100000001, 0xff, 0x4, 0x4, 0x0, 0xb2, 0xfd2, 0x0, 0x1, 0x7, 0x0, 0x1, 0xf, 0x1, 0x8, 0x7, 0x6, 0x2, 0x6, 0x6, 0x5, 0xfff, 0xfffffffffffffffa, 0x5, 0xc2d6, 0x1, 0x7f, 0xe, 0x5, 0xa11, 0x10, 0x8, 0xfffffffffffffff9, 0x8, 0x7, 0x4, 0x52c, 0x7fff, 0x1, 0xfffffffffffffff4, 0x7, 0x7, 0x7b1, 0x2f3, 0x1, 0x3, 0x100000000, 0xfffffffffffffffc, 0xcd, 0x1]}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000980)={0x0, "85b9acf365ac5d10e13f6c68f594bd7d"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001d80)={0x5, 0x2, {0x5, @struct={0x6, 0xcc1c}, r2, 0x2, 0x954, 0xfffffffffffffffa, 0x101, 0x6, 0x40, @usage=0x6, 0x6a2a4fbd, 0xfffff801, [0x8, 0x2, 0x2, 0x9, 0xfffffffffffffffc, 0x81]}, {0x5, @struct={0x9, 0x66be}, r3, 0x0, 0x1c0, 0x9, 0x7, 0xe8, 0x18, @struct={0x9, 0x9}, 0x0, 0x4, [0x5cf, 0x10001, 0x7, 0x5, 0x1800000000000000, 0x3]}, {0x80000001, @struct={0x9, 0xfffff485}, r4, 0xffffffffffffffff, 0xe, 0xd, 0x8, 0x3, 0x1, @usage=0x9, 0x10, 0xfffffffd, [0x98, 0x8, 0x7ff, 0xffffffffffffffff, 0x8000000000000001, 0x77cb]}, {0xb6, 0xffffffffffff6d70, 0x3}}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x9, 0x8, 0x39, 0x0, 0x2, 0x7, 0x9, 0x9b, 0x3, 0x10, 0x5, 0x0, 0x0, 0x6, 0x3, 0x4b, 0x43, 0x1b, 0x3, '\x00', 0x10, 0x40000ffffffff}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000000c0)=0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000118, 0x0, 0x1000}]}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c9801288363"], 0xffdd) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000180)={[0xff, 0x9, 0xa8, 0x7, 0x5, 0x6, 0x1, 0xe, 0x1, 0x3ff, 0xffff, 0x3, 0x100000001, 0x1, 0x200, 0x10f], 0xeeef0000, 0x11}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1000}) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r9, 0x8004af81, &(0x7f0000000080)) close_range(r1, r8, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1000) 5.781304145s ago: executing program 0 (id=1319): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x12, r0, 0xfffff000) 3.929685272s ago: executing program 0 (id=1320): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000140)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x2}], 0x53, 0x0, &(0x7f0000000180)="51791a2acee347b61afdd4522364f8e483dfe7e858c55da756be05ba9945d0fe0efd50d7b56889915c24e802cdd4d00090cb3b982edfa2626f42f4e6c7f586758197db96af28f1506b549f981ec99e38a889de"}) 3.928977732s ago: executing program 1 (id=1321): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x55d) (async) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x202000, 0x80) write(r3, &(0x7f0000000180)="61f87a467339653936d1e32f0c5f4bfa6cf8bb40c582499cd70393078fd8352378340fb6a7b582103edec1ad0d536d3b5f5d3b64ad2cfe67c20d340360e59263de14026c00446ace96914b2b5396db11fa196e4eee335120c9a044d319f0690ddc50bac3857d4f1fe9374d15fedb507413a61f83645e3e4ff1aacd9cb10a", 0x7e) (async) close_range(r2, r2, 0x0) (async) write$vga_arbiter(r1, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) (async) ioctl$SNAPSHOT_FREE(r5, 0x3305) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000013c0), 0x80080, 0x0) ioctl$TIOCMBIC(r6, 0x5417, &(0x7f0000001400)=0xe) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGISO7816(r7, 0x80285442, 0x0) openat$kvm(0x0, 0x0, 0x2382, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) (async) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) 3.928758442s ago: executing program 3 (id=1322): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x401c5820, &(0x7f0000000080)={'bridge_slave_1\x00', @remote}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x585, 0x0, 0x2d}]}) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.05701707s ago: executing program 0 (id=1323): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1081}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x220002, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000000)=0x3d) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) syz_clone3(&(0x7f00000013c0)={0x240040480, 0x0, &(0x7f00000011c0), &(0x7f0000001200), {0x25}, &(0x7f0000001240)=""/1, 0x1, &(0x7f0000001280)=""/162, &(0x7f0000001340)=[0x0, 0x0], 0x2, {r4}}, 0x58) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f00000003c0)=[@decrefs={0x40046307, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/203, 0xcb, 0x0, 0x7}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/92, 0x5c, 0x2, 0x28}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 2.05623765s ago: executing program 1 (id=1324): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) 2.05026892s ago: executing program 3 (id=1325): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffeffffe, 0x0, 0x5], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5b2bb47c], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000001440)={'syz1\x00', {0x4, 0x6, 0x7ff, 0x7ff}, 0x21, [0x0, 0x7, 0x9f, 0x3, 0x7fffffff, 0x0, 0xa5e, 0x4, 0x9, 0x3, 0x401, 0x10000, 0x0, 0x7, 0x80000001, 0x821d, 0x8c, 0x9, 0x2, 0x2, 0x2, 0xb8f, 0x0, 0x89, 0x5, 0xffffffff, 0xfff, 0x800, 0x42d2, 0x4, 0x3, 0x7, 0x5, 0x80000000, 0x2, 0x2, 0x8, 0x6, 0xa, 0x400, 0x3, 0x0, 0x2, 0x0, 0x0, 0x8, 0x1, 0x7, 0xdfae, 0x7e6, 0x5, 0xfffffc01, 0x0, 0xa, 0x40, 0x5, 0xc4710000, 0x5, 0x4000000b, 0x6, 0x8, 0x17d4bd08, 0x80000000, 0x2], [0x7, 0x6, 0x1, 0x5, 0x0, 0x4, 0x3, 0x5, 0xb20, 0x4, 0x40, 0x4, 0x3, 0xffff0001, 0x4, 0xb, 0x4, 0x4, 0x1, 0x5, 0x5, 0x4, 0x8007, 0x8000, 0xfff, 0x1000, 0x6, 0x5, 0xf9, 0x10001, 0x8, 0x9b, 0x2, 0x2, 0x4, 0x7245, 0xfffffff1, 0x80000000, 0x9, 0xd21, 0x8, 0x4, 0xffff, 0x3ff, 0x68e4, 0x7, 0x3, 0x7, 0x581, 0x3, 0x3, 0xc, 0xfff, 0x2, 0x200, 0x7, 0x800, 0x7, 0xffffffff, 0x119b, 0x9, 0x10, 0x4, 0x4], [0x0, 0x1ffff, 0x1, 0x80000000, 0x5, 0x7, 0x5, 0x1, 0x6, 0x5, 0x800, 0x8, 0x7a2d, 0x1650c5fd, 0x2ab, 0x3, 0x800, 0x717, 0x1, 0x5, 0x7, 0x7, 0x4f, 0x1, 0x4e1, 0x8, 0x87, 0x5, 0x8, 0x6e, 0x10, 0x3, 0xa02a, 0x6, 0x91d3, 0x7, 0x6, 0x9, 0x9e9, 0x5, 0x6, 0x7fff, 0xb, 0x8003, 0x1, 0x6, 0x8, 0x4f42, 0x6, 0xa2a, 0x4, 0x1, 0x10000, 0x6, 0xfffffff9, 0xffffffa0, 0x3, 0x6, 0x5f, 0xfffffe42, 0x9, 0x3ff, 0x10001, 0x2], [0xfff, 0x117, 0x200, 0x6, 0x800, 0x2, 0x1ed, 0x200, 0x6, 0x3ff, 0xffffffff, 0x8, 0x0, 0xffffea38, 0x2, 0x8, 0xfffff13b, 0x0, 0x43, 0x4068, 0xc51, 0x6, 0x9, 0x4, 0xfffffff7, 0x3, 0x8, 0x10a2a7e, 0x4, 0x3, 0xc0000000, 0x80000000, 0x80000000, 0x400, 0x7, 0x7, 0x1, 0x0, 0x0, 0x1ff, 0x2, 0x6a, 0x10, 0x8, 0x0, 0xb, 0x3, 0xfffffe01, 0x4, 0x4, 0x8, 0x0, 0x10000, 0x3, 0x400, 0x1, 0x7, 0x800, 0x6, 0x675, 0x100, 0xc, 0x6, 0x20005]}, 0x45c) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB='non']) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x165942, 0x0) 1.761841ms ago: executing program 0 (id=1326): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x200880, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x7c2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) 545.72µs ago: executing program 1 (id=1327): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000340)=@arm64={0xd, 0xc, 0x4, '\x00', 0x60}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8d04"]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x95) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff7) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) syz_clone(0x20000, &(0x7f0000000180)="6abda885924e60dabfd725ef6b2bcbba0c4de4d248b6f3e9540c73fd15fd72c905d1c92e2336b58bf7da7b47e63cfd4357aa070ffdc32e6fde5d6e40f5cf5e728fe3746ae8506a467d04e2af03ddb32f8246d1664ab103eaf34daec8c7f2420e225e7e80f8f9c5e45dcc139a323643664b45a5aa3e566f89af3e037daa41af97bf33d3d27c0434548bcc6641ee34a6083f22cdbbc4b27f66001f486f270f6456a1de920da4531686fdd53190118374441ccd9f9cc321b6889e6966d1852902d20d5f35d3c19eb5778c47b9bf46", 0xcd, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000280)="30ccb61f28089ef65ab0a09e1210f71f6f7291ce52e44b285105fce7bf71839428117e8e08b28ec7d8bd557716d2ff334df50d12b66ca440d3897307a5c0af61818dfdca85689146d9c02905033645396e73b1bfef2bd15735b38962ca396bab02b56e0f1fbbb131bec693de37799aec84f514161f2cbed823b2579941ee946455c459808a03e9b862e8f578f95e251d5b6d2796d5c2") write$selinux_load(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75780ae63a602b4f9335484d9d6e7470b56e89b19bfb8553565b6f90bed8205f2b105f2309541f0ca54e98e6f8ed26dfa1669792d1885d29c9"], 0x5) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=1328): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000580)={@flat=@weak_binder, @fda={0x66646185, 0x9, 0x0, 0x16}, @flat=@handle={0x73682a85, 0x101, 0x2}}, &(0x7f00000004c0)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.46' (ED25519) to the list of known hosts. [ 23.966225][ T36] audit: type=1400 audit(1750419879.520:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.967090][ T281] cgroup: Unknown subsys name 'net' [ 23.989399][ T36] audit: type=1400 audit(1750419879.520:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.016284][ T36] audit: type=1400 audit(1750419879.550:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.016462][ T281] cgroup: Unknown subsys name 'devices' [ 24.182350][ T281] cgroup: Unknown subsys name 'hugetlb' [ 24.187934][ T281] cgroup: Unknown subsys name 'rlimit' [ 24.339118][ T36] audit: type=1400 audit(1750419879.890:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.362302][ T36] audit: type=1400 audit(1750419879.890:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.387140][ T36] audit: type=1400 audit(1750419879.890:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.395544][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.419032][ T36] audit: type=1400 audit(1750419879.970:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.444738][ T36] audit: type=1400 audit(1750419879.970:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.480891][ T36] audit: type=1400 audit(1750419880.030:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.506414][ T36] audit: type=1400 audit(1750419880.040:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.506443][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.283803][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.290899][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.298079][ T288] bridge_slave_0: entered allmulticast mode [ 25.304317][ T288] bridge_slave_0: entered promiscuous mode [ 25.318510][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.325700][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.332817][ T288] bridge_slave_1: entered allmulticast mode [ 25.339257][ T288] bridge_slave_1: entered promiscuous mode [ 25.363623][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.370758][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.377857][ T290] bridge_slave_0: entered allmulticast mode [ 25.384050][ T290] bridge_slave_0: entered promiscuous mode [ 25.390330][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.397490][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.404550][ T290] bridge_slave_1: entered allmulticast mode [ 25.410856][ T290] bridge_slave_1: entered promiscuous mode [ 25.436714][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.443804][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.450898][ T291] bridge_slave_0: entered allmulticast mode [ 25.457012][ T291] bridge_slave_0: entered promiscuous mode [ 25.463212][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.470217][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.477287][ T291] bridge_slave_1: entered allmulticast mode [ 25.483384][ T291] bridge_slave_1: entered promiscuous mode [ 25.494548][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.501607][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.508699][ T289] bridge_slave_0: entered allmulticast mode [ 25.515021][ T289] bridge_slave_0: entered promiscuous mode [ 25.521355][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.528478][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.535593][ T289] bridge_slave_1: entered allmulticast mode [ 25.541749][ T289] bridge_slave_1: entered promiscuous mode [ 25.692636][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.699718][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.707051][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.714111][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.727724][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.734818][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.742116][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.749141][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.766208][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.773288][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.780561][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.787595][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.795963][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.803100][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.810356][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.817404][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.871200][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.878487][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.886826][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.894462][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.901808][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.908968][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.916472][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.923666][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.934225][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.941294][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.952365][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.959414][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.967076][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.974123][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.983694][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.990730][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.999947][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.007013][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.019797][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.026854][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.067096][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.074177][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.084007][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.091151][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.101818][ T290] veth0_vlan: entered promiscuous mode [ 26.116098][ T291] veth0_vlan: entered promiscuous mode [ 26.137673][ T288] veth0_vlan: entered promiscuous mode [ 26.147573][ T290] veth1_macvtap: entered promiscuous mode [ 26.161972][ T291] veth1_macvtap: entered promiscuous mode [ 26.169537][ T288] veth1_macvtap: entered promiscuous mode [ 26.197147][ T289] veth0_vlan: entered promiscuous mode [ 26.229961][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.230744][ T289] veth1_macvtap: entered promiscuous mode [ 26.301466][ T315] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.318321][ T319] rust_binder: Write failure EFAULT in pid:5 [ 26.345079][ T323] input: syz0 as /devices/virtual/input/input4 [ 26.387675][ T334] rust_binder: Write failure EINVAL in pid:4 [ 26.480378][ T344] rust_binder: Error while translating object. [ 26.480400][ T344] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.487048][ T344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 27.182383][ T360] rust_binder: Error in use_page_slow: ESRCH [ 27.182409][ T360] rust_binder: use_range failure ESRCH [ 27.188540][ T360] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 27.198595][ T360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 27.217151][ T360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:16 [ 27.286233][ T366] binder: Unknown parameter '0x0000000000000009' [ 27.308435][ T368] kvm: user requested TSC rate below hardware speed [ 27.319425][ T368] kvm: user requested TSC rate below hardware speed [ 27.329981][ T368] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10 [ 27.464742][ T374] rust_binder: Write failure EINVAL in pid:24 [ 27.504099][ T377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 27.523285][ T379] rust_binder: Error while translating object. [ 27.533206][ T379] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.539552][ T379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 27.586150][ T384] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.620128][ T394] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 27.641664][ T394] SELinux: failed to load policy [ 27.648960][ T394] binder: Bad value for 'stats' [ 27.771179][ T406] binder: Bad value for 'stats' [ 27.818322][ T405] kvm: kvm [402]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x7ffffffd [ 27.870331][ T413] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 28.068809][ T428] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 28.102969][ T430] rust_binder: Write failure EFAULT in pid:32 [ 28.128539][ T428] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 28.141198][ T428] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 28.159421][ T428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:39 [ 28.194174][ T435] rust_binder: Write failure EINVAL in pid:27 [ 28.273137][ T441] rust_binder: Failed to allocate buffer. len:4294966776, is_oneway:false [ 28.303064][ T441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 28.322407][ T440] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 28.336324][ T441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:36 [ 28.358168][ T440] rust_binder: Error while translating object. [ 28.363256][ T450] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.380922][ T440] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.381245][ T440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29 [ 28.423733][ T457] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 28.443875][ T456] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 28.468851][ T457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:49 [ 28.490888][ T456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:49 [ 28.551647][ T459] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 28.580855][ T459] rust_binder: Error while translating object. [ 28.604450][ T459] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.615889][ T459] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 28.651968][ T466] ======================================================= [ 28.651968][ T466] WARNING: The mand mount option has been deprecated and [ 28.651968][ T466] and is ignored by this kernel. Remove the mand [ 28.651968][ T466] option from the mount to silence this warning. [ 28.651968][ T466] ======================================================= [ 28.701017][ T466] binder: Unknown parameter '' [ 28.706219][ T464] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 28.892762][ T479] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 28.969347][ T486] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 28.982469][ T36] kauditd_printk_skb: 67 callbacks suppressed [ 28.982487][ T36] audit: type=1400 audit(1750419884.540:141): avc: denied { map } for pid=478 comm="syz.1.55" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 29.060746][ T494] binder: Bad value for 'max' [ 29.067383][ T488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38 [ 29.067619][ T488] rust_binder: Got transaction with invalid offset. [ 29.075112][ T36] audit: type=1400 audit(1750419884.620:142): avc: denied { execute } for pid=495 comm="syz.0.61" path="/syzcgroup/unified/syz0/cgroup.procs" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 29.079206][ T488] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.087617][ T36] audit: type=1400 audit(1750419884.620:143): avc: denied { write } for pid=495 comm="syz.0.61" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.108795][ T488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38 [ 29.153502][ T36] audit: type=1400 audit(1750419884.710:144): avc: denied { write } for pid=497 comm="syz.2.62" name="pfkey" dev="proc" ino=4026532529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 29.210335][ T503] rust_binder: Write failure EFAULT in pid:69 [ 29.265760][ T36] audit: type=1400 audit(1750419884.820:145): avc: denied { compute_member } for pid=506 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 29.335249][ T515] __vm_enough_memory: pid: 515, comm: syz.2.68, bytes: 281474976845824 not enough memory for the allocation [ 29.352918][ T512] rust_binder: Write failure EINVAL in pid:34 [ 29.429327][ T521] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.432661][ T519] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 29.435616][ T521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:54 [ 29.444940][ T519] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:47 [ 29.455123][ T521] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 29.472915][ T521] rust_binder: Read failure Err(EFAULT) in pid:54 [ 29.550852][ T36] audit: type=1400 audit(1750419885.100:146): avc: denied { read } for pid=527 comm="syz.1.73" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 29.619911][ T36] audit: type=1326 audit(1750419885.170:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=523 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe626f8e929 code=0x7ffc0000 [ 29.644149][ T524] binder: Unknown parameter 'context' [ 29.657022][ T36] audit: type=1326 audit(1750419885.170:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=523 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe626f8e929 code=0x7ffc0000 [ 29.700032][ T36] audit: type=1326 audit(1750419885.200:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=523 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe626f8e929 code=0x7ffc0000 [ 29.723970][ T36] audit: type=1326 audit(1750419885.200:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=523 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe626f8e929 code=0x7ffc0000 [ 29.749059][ T542] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.812027][ T548] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:45 [ 29.820235][ T548] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 29.833633][ T548] rust_binder: Read failure Err(EFAULT) in pid:45 [ 29.846911][ T550] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 29.853585][ T550] rust_binder: Error while translating object. [ 29.863282][ T550] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.876398][ T550] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59 [ 29.902788][ T552] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 29.904519][ T558] rust_binder: Error while translating object. [ 29.912041][ T552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:47 [ 29.921754][ T558] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.939120][ T558] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79 [ 30.073823][ T572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68 [ 30.079856][ T576] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.113661][ T576] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 30.142172][ T582] rust_binder: Error while translating object. [ 30.151569][ T582] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.160007][ T582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:87 [ 30.204323][ T591] binder: Bad value for 'defcontext' [ 30.240552][ T595] binder: Bad value for 'stats' [ 30.325343][ T615] rust_binder: Error while translating object. [ 30.325365][ T615] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.331571][ T615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 30.361169][ T618] binder: Unknown parameter 'silent' [ 30.392045][ T625] rust_binder: Write failure EINVAL in pid:81 [ 30.404718][ T627] SELinux: failed to load policy [ 30.450366][ T633] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.460179][ T633] rust_binder: Write failure EINVAL in pid:87 [ 30.467306][ T634] binder: Unknown parameter '*bs#' [ 30.501431][ T641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:104 [ 30.702876][ T651] kvm: kvm [649]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253 [ 30.722167][ T650] kvm: kvm [649]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253 [ 30.722919][ T652] rust_binder: Write failure EINVAL in pid:78 [ 30.734551][ T652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 30.740111][ T651] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 30.760509][ T651] SELinux: failed to load policy [ 30.766551][ T650] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 30.777177][ T650] SELinux: failed to load policy [ 30.789437][ T658] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 30.846519][ T663] kvm: kvm [662]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x1 [ 30.863121][ T663] input: syz0 as /devices/virtual/input/input11 [ 30.959400][ T667] rust_binder: Error while translating object. [ 30.959445][ T667] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.966638][ T667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 31.003371][ T670] rust_binder: Error while translating object. [ 31.015141][ T670] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.021849][ T670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:100 [ 31.025536][ T673] rust_binder: Failed copying remainder into alloc: EFAULT [ 31.046938][ T673] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 31.054260][ T673] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 31.063158][ T673] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:88 [ 31.074955][ T679] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.083639][ T680] rust_binder: Failed copying remainder into alloc: EFAULT [ 31.090062][ T680] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 31.097497][ T680] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 31.105998][ T680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:88 [ 31.136798][ T684] kvm: kvm [683]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000004) [ 31.468937][ T700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:64 [ 31.471410][ T701] random: crng reseeded on system resumption [ 31.515200][ T703] kvm: apic: phys broadcast and lowest prio [ 31.614048][ T709] kvm: user requested TSC rate below hardware speed [ 31.749528][ T720] rust_binder: Write failure EINVAL in pid:112 [ 31.856586][ T723] binder: Unknown parameter 'ev/snd/timer' [ 32.038226][ T732] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 32.038252][ T732] rust_binder: Error while translating object. [ 32.047822][ T732] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.058045][ T732] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121 [ 32.063234][ T734] rtc_cmos 00:00: Alarms can be up to one day in the future [ 32.115537][ T741] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.133997][ T741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.134409][ T741] rust_binder: Error while translating object. [ 32.141054][ T741] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 32.147403][ T741] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:119 [ 32.177806][ T749] binder: Bad value for 'max' [ 32.241643][ T761] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 32.241661][ T761] rust_binder: Error while translating object. [ 32.250387][ T761] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.256689][ T761] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134 [ 32.465757][ T769] rust_binder: Error while translating object. [ 32.479307][ T769] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 32.488272][ T769] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:119 [ 32.582392][ T780] SELinux: unknown common r [ 32.597417][ T780] SELinux: failed to load policy [ 32.603035][ T780] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:146 [ 32.782953][ T789] rust_binder: Write failure EFAULT in pid:151 [ 32.800159][ T789] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 32.887107][ T733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 32.996336][ T802] SELinux: failed to load policy [ 33.334433][ T819] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:101 [ 33.334565][ T819] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101 [ 33.536250][ T823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:105 [ 33.655310][ T827] rust_binder: Write failure EFAULT in pid:129 [ 33.673559][ T829] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.679862][ T829] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.781567][ T837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:157 [ 33.866386][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 33.883294][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 33.892788][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 33.900680][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 33.908232][ T31] rtc rtc0: __rtc_set_alarm: err=-22 [ 33.975917][ T853] rust_binder: Write failure EINVAL in pid:116 [ 34.031980][ T862] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 34.439017][ T877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:154 [ 34.499173][ T879] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 34.517088][ T880] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 34.527369][ T879] rust_binder: Write failure EFAULT in pid:156 [ 34.548364][ T884] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 34.734582][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 34.734600][ T36] audit: type=1400 audit(1750419890.290:185): avc: granted { setsecparam } for pid=887 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 34.765033][ T36] audit: type=1400 audit(1750419890.290:186): avc: granted { setsecparam } for pid=887 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 34.793167][ T894] syz.1.189 (894) used obsolete PPPIOCDETACH ioctl [ 34.974768][ T898] rust_binder: Read failure Err(EAGAIN) in pid:131 [ 34.974922][ T898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131 [ 35.078388][ T905] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.078412][ T905] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:168 [ 35.122460][ T916] rust_binder: Write failure EINVAL in pid:174 [ 35.166196][ T920] input: syz1 as /devices/virtual/input/input12 [ 35.247831][ T926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144 [ 35.278265][ T36] audit: type=1326 audit(1750419890.830:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=928 comm="syz.1.201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efeae58e929 code=0x0 [ 35.324687][ T937] SELinux: policydb version -906537691 does not match my version range 15-33 [ 35.333759][ T937] SELinux: failed to load policy [ 35.344108][ T939] input: syz1 as /devices/virtual/input/input13 [ 35.481484][ T948] binder: Bad value for 'max' [ 35.531830][ T36] audit: type=1400 audit(1750419891.090:188): avc: denied { map } for pid=953 comm="syz.3.209" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 35.552093][ T956] SELinux: truncated policydb string identifier [ 35.562017][ T36] audit: type=1400 audit(1750419891.090:189): avc: denied { execute } for pid=953 comm="syz.3.209" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 35.564925][ T956] SELinux: failed to load policy [ 35.618500][ T960] rust_binder: Write failure EINVAL in pid:197 [ 35.621232][ T960] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 35.627473][ T960] rust_binder: Read failure Err(EFAULT) in pid:197 [ 35.664880][ T963] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 35.680123][ T963] rust_binder: Write failure EINVAL in pid:182 [ 35.743638][ T36] audit: type=1400 audit(1750419891.300:190): avc: denied { read write } for pid=966 comm="syz.3.215" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 35.773242][ T36] audit: type=1400 audit(1750419891.300:191): avc: denied { open } for pid=966 comm="syz.3.215" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 35.786464][ T974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:193 [ 36.295151][ T998] rust_binder: Error while translating object. [ 36.295175][ T998] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 36.301511][ T998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:150 [ 36.411764][ T1000] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:152 [ 36.491367][ T1004] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.500765][ T1004] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.544472][ T1007] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 36.555239][ T1007] rust_binder: Error while translating object. [ 36.566490][ T1007] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.573430][ T1007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159 [ 36.680737][ T1023] rust_binder: Failed copying remainder into alloc: EFAULT [ 36.680749][ T1021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:162 [ 36.697117][ T1023] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 36.706461][ T1023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 36.714808][ T1023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:162 [ 36.718259][ T36] audit: type=1400 audit(1750419892.270:192): avc: granted { setsecparam } for pid=1018 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 36.736786][ T1027] rust_binder: Write failure EINVAL in pid:166 [ 36.759266][ T36] audit: type=1400 audit(1750419892.280:193): avc: granted { setsecparam } for pid=1018 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 36.792780][ T1029] rust_binder: Write failure EFAULT in pid:168 [ 36.802945][ T36] audit: type=1400 audit(1750419892.310:194): avc: granted { setsecparam } for pid=1018 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 36.832201][ T1035] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:209 [ 36.999062][ T1049] block device autoloading is deprecated and will be removed. [ 37.015963][ T1049] syz.2.243: attempt to access beyond end of device [ 37.015963][ T1049] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 37.040170][ T1053] rust_binder: Write failure EFAULT in pid:175 [ 37.220533][ T1059] kvm: vcpu 0: requested 16 ns lapic timer period limited to 200000 ns [ 37.239153][ T1059] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 37.485072][ T1067] rust_binder: Error while translating object. [ 37.485117][ T1067] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 37.492003][ T1067] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:129 [ 37.649490][ T1071] kernel profiling enabled (shift: 63) [ 37.649797][ T1072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:222 [ 37.679969][ T1071] profiling shift: 63 too large [ 37.742944][ T1074] rust_binder: Error while translating object. [ 37.742983][ T1074] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.749367][ T1074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:232 [ 37.856827][ T1080] random: crng reseeded on system resumption [ 37.953836][ T1086] binder: Bad value for 'max' [ 38.048504][ T1080] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:224 [ 38.162870][ T1094] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 38.221567][ T1094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:237 [ 38.465591][ T1107] rust_binder: Error while translating object. [ 38.488102][ T1104] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.494505][ T1107] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 38.510862][ T1104] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227 [ 38.530954][ T1107] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:141 [ 38.589469][ T1111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:244 [ 38.684587][ T1116] binder: Unknown parameter '00000000000000000000000' [ 38.693483][ T1113] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 38.700711][ T1113] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 38.721403][ T1113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:230 [ 38.826101][ T1119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145 [ 39.240190][ T1135] kvm: user requested TSC rate below hardware speed [ 39.335303][ T1144] rust_binder: Write failure EINVAL in pid:151 [ 39.335376][ T1142] rust_binder: Write failure EINVAL in pid:151 [ 39.710738][ T1162] input: syz0 as /devices/virtual/input/input19 [ 39.741524][ T36] kauditd_printk_skb: 482 callbacks suppressed [ 39.741547][ T36] audit: type=1400 audit(1750419895.290:677): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.821809][ T36] audit: type=1400 audit(1750419895.290:678): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.930958][ T36] audit: type=1400 audit(1750419895.290:679): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.961101][ T1171] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 40.006802][ T1176] SELinux: security_context_str_to_sid () failed with errno=-22 [ 40.022748][ T36] audit: type=1400 audit(1750419895.350:680): avc: denied { read } for pid=1160 comm="syz.2.283" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.050946][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.137536][ T36] audit: type=1400 audit(1750419895.360:681): avc: denied { read open } for pid=1160 comm="syz.2.283" path="/dev/binderfs/binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.227094][ T36] audit: type=1400 audit(1750419895.360:682): avc: denied { ioctl } for pid=1160 comm="syz.2.283" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.277650][ T1185] audit: audit_backlog=65 > audit_backlog_limit=64 [ 40.291094][ T1186] audit: audit_backlog=65 > audit_backlog_limit=64 [ 40.300969][ T36] audit: type=1400 audit(1750419895.360:683): avc: denied { read append } for pid=1160 comm="syz.2.283" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 40.304884][ T1183] audit: audit_backlog=65 > audit_backlog_limit=64 [ 40.474186][ T1193] input: syz1 as /devices/virtual/input/input22 [ 40.552603][ T1199] binder: Bad value for 'stats' [ 40.560461][ T1200] binder: Bad value for 'stats' [ 40.616318][ T1193] binder: Unknown parameter 'fscontext?}' [ 41.077399][ T1219] rust_binder: Write failure EFAULT in pid:276 [ 41.140580][ T1222] rust_binder: Write failure EFAULT in pid:261 [ 41.333846][ T1233] rust_binder: Error while translating object. [ 41.333884][ T1233] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 41.340088][ T1233] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:286 [ 41.588576][ T1246] rust_binder: Write failure EFAULT in pid:271 [ 41.649678][ T1249] rust_binder: Error while translating object. [ 41.658852][ T1249] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.690870][ T1249] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:293 [ 41.836646][ T1256] block device autoloading is deprecated and will be removed. [ 41.880871][ T1256] syz.3.311: attempt to access beyond end of device [ 41.880871][ T1256] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 41.980879][ T1174] Bluetooth: hci0: command 0x1003 tx timeout [ 41.990815][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.097317][ T1267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.121024][ T1267] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 42.127667][ T1268] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 42.148270][ T1267] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 42.166101][ T1268] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 42.176658][ T1267] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:166 [ 42.200875][ T1268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:166 [ 42.640843][ T1294] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.650131][ T1294] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:289 [ 42.719086][ T1301] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.720316][ T1302] rust_binder: inc_ref_done called when no active inc_refs [ 42.736026][ T1302] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:292 [ 42.857102][ T1308] binder: Bad value for 'stats' [ 43.000461][ T1306] rust_binder: Error while translating object. [ 43.000492][ T1306] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 43.010473][ T1306] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:297 [ 43.144850][ T1322] random: crng reseeded on system resumption [ 43.234528][ T1326] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.234561][ T1326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:224 [ 43.381662][ T1334] rust_binder: Write failure EINVAL in pid:175 [ 43.390560][ T1330] binder: Unknown parameter 'processor : 0 [ 43.390560][ T1330] vendor_id : GenuineIntel [ 43.390560][ T1330] cpu family : 6 [ 43.390560][ T1330] model : 79 [ 43.390560][ T1330] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 43.390560][ T1330] stepping : 0 [ 43.390560][ T1330] microcode : 0xffffffff [ 43.390560][ T1330] cpu MHz : 2199.998 [ 43.390560][ T1330] cache size : 56320 KB [ 43.390560][ T1330] physical id : 0 [ 43.390560][ T1330] siblings : 2 [ 43.390560][ T1330] core id : 0 [ 43.390560][ T1330] cpu cores : 1 [ 43.390560][ T1330] apicid : 0 [ 43.390560][ T1330] initial apicid : 0 [ 43.390560][ T1330] fpu : yes [ 43.390560][ T1330] fpu_exception : yes [ 43.390560][ T1330] cpuid level : 13 [ 43.390560][ T1330] wp : yes [ 43.390560][ T1330] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 43.390560][ T1330] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 43.413573][ T1333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.686136][ T1334] rust_binder: Write failure EINVAL in pid:175 [ 43.815745][ T1346] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 43.842400][ T1346] rust_binder: Write failure EINVAL in pid:308 [ 43.950823][ T1350] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.981676][ T1350] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 44.025483][ T1358] rust_binder: Write failure EINVAL in pid:310 [ 44.034216][ T1354] rust_binder: Write failure EINVAL in pid:310 [ 44.105484][ T1354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:310 [ 44.355737][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 44.551174][ T1385] rust_binder: Write failure EFAULT in pid:326 [ 44.671913][ T1392] binder: Unknown parameter 'gRт' [ 44.693130][ T1386] fido_id[1386]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 44.771807][ T36] kauditd_printk_skb: 1012 callbacks suppressed [ 44.771826][ T36] audit: type=1400 audit(1750419900.330:1654): avc: denied { read } for pid=1382 comm="syz.1.351" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 44.870449][ T36] audit: type=1400 audit(1750419900.330:1655): avc: denied { read open } for pid=1382 comm="syz.1.351" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 44.951221][ T36] audit: type=1400 audit(1750419900.410:1656): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.056822][ T36] audit: type=1400 audit(1750419900.410:1657): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.123047][ T36] audit: type=1400 audit(1750419900.410:1658): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=450 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.170322][ T1408] rust_binder: Write failure EINVAL in pid:320 [ 45.187099][ T36] audit: type=1400 audit(1750419900.470:1659): avc: denied { ioctl } for pid=1382 comm="syz.1.351" path="/dev/binderfs/binder1" dev="binder" ino=14 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.190917][ T1408] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.194454][ T36] audit: type=1400 audit(1750419900.500:1660): avc: denied { read open } for pid=1397 comm="syz.0.354" path="net:[4026532300]" dev="nsfs" ino=4026532300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.261489][ T36] audit: type=1400 audit(1750419900.500:1661): avc: denied { read } for pid=1397 comm="syz.0.354" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.273151][ T1408] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 45.288813][ T36] audit: type=1400 audit(1750419900.500:1662): avc: denied { read open } for pid=1397 comm="syz.0.354" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.339833][ T1408] audit: audit_backlog=65 > audit_backlog_limit=64 [ 45.381101][ T1408] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:320 [ 45.431518][ T1411] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 45.461497][ T1414] rust_binder: Write failure EINVAL in pid:190 [ 45.501734][ T1416] input: syz0 as /devices/virtual/input/input26 [ 45.633440][ T1419] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 45.647941][ T1419] rust_binder: Write failure EINVAL in pid:340 [ 45.841922][ T1431] rust_binder: Write failure EINVAL in pid:325 [ 45.874238][ T1435] rust_binder: Write failure EINVAL in pid:195 [ 46.017493][ T1439] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 46.033017][ T1439] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 46.062596][ T1439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:195 [ 46.400272][ T1458] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:206 [ 46.438976][ T1458] binder: Unknown parameter 'nXI' [ 46.572276][ T1460] syz.2.372: attempt to access beyond end of device [ 46.572276][ T1460] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 46.666895][ T1471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:208 [ 46.851618][ T1473] rust_binder: Write failure EFAULT in pid:211 [ 47.024347][ T1480] rust_binder: Write failure EINVAL in pid:348 [ 47.034531][ T1478] block device autoloading is deprecated and will be removed. [ 47.034554][ T288] block device autoloading is deprecated and will be removed. [ 47.046160][ T1478] syz.1.379: attempt to access beyond end of device [ 47.046160][ T1478] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 47.321185][ T1489] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 47.377070][ T1489] rust_binder: Write failure EINVAL in pid:336 [ 47.575182][ T1500] UHID_CREATE from different security context by process 275 (syz.1.387), this is not allowed. [ 47.603589][ T1502] rust_binder: Write failure EINVAL in pid:219 [ 48.211716][ T1523] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 48.421496][ T1532] rust_binder: Write failure EFAULT in pid:357 [ 48.736160][ T1545] binder: Unknown parameter '' [ 49.539281][ T1583] SELinux: policydb string length 1062656 does not match expected length 8 [ 49.570924][ T1583] SELinux: failed to load policy [ 49.625491][ T1590] binfmt_misc: register: failed to install interpreter file ./cgroup [ 49.656144][ T1594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:300 [ 49.782791][ T36] kauditd_printk_skb: 764 callbacks suppressed [ 49.782812][ T36] audit: type=1400 audit(1750419905.340:2395): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.879610][ T1601] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:366 [ 49.881891][ T36] audit: type=1400 audit(1750419905.380:2396): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.919026][ T1601] rust_binder: Write failure EINVAL in pid:366 [ 49.921633][ T1601] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:366 [ 49.970827][ T36] audit: type=1400 audit(1750419905.390:2397): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.051435][ T1607] rust_binder: Got transaction with invalid offset. [ 50.051480][ T1607] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.058125][ T1607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:307 [ 50.064681][ T36] audit: type=1400 audit(1750419905.390:2398): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.111491][ T36] audit: type=1400 audit(1750419905.390:2399): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.145652][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 50.163345][ T1610] audit: audit_backlog=65 > audit_backlog_limit=64 [ 50.181027][ T289] audit: audit_lost=27 audit_rate_limit=0 audit_backlog_limit=64 [ 50.196033][ T1610] audit: audit_lost=28 audit_rate_limit=0 audit_backlog_limit=64 [ 50.203891][ T289] audit: backlog limit exceeded [ 50.365067][ T1618] rust_binder: Error in use_page_slow: ESRCH [ 50.365089][ T1618] rust_binder: use_range failure ESRCH [ 50.386708][ T1618] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 50.400869][ T1618] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 50.410835][ T1618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:370 [ 50.492101][ T1621] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 50.561503][ T1621] rust_binder: Write failure EINVAL in pid:248 [ 50.613256][ T1626] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 51.080548][ T1657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:255 [ 51.100871][ T1655] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 51.141239][ T1655] rust_binder: Error in use_page_slow: EBUSY [ 51.162539][ T1655] rust_binder: use_range failure EBUSY [ 51.168680][ T1655] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 51.174252][ T1655] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 51.183008][ T1655] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 51.194061][ T1655] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:255 [ 51.309448][ T1667] rust_binder: Error while translating object. [ 51.337816][ T1667] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.364611][ T1667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:329 [ 51.481239][ T1679] rust_binder: Write failure EFAULT in pid:263 [ 51.588251][ T1684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:334 [ 51.711146][ T1697] rust_binder: Write failure EFAULT in pid:395 [ 51.770714][ T1699] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.791390][ T1699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:336 [ 51.845005][ T1699] rust_binder: Error while translating object. [ 51.860993][ T1699] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.867198][ T1699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:336 [ 52.413700][ T1729] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 52.500623][ T1734] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.572341][ T1737] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.572377][ T1737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:345 [ 52.660980][ T1740] binder: Unknown parameter 'nXI' [ 52.696088][ T1744] binder: Unknown parameter 'nXI' [ 52.997825][ T1758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:395 [ 53.164690][ T1766] binder: Bad value for 'stats' [ 53.191486][ T1764] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 53.191518][ T1764] rust_binder: Error while translating object. [ 53.215375][ T1764] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.222574][ T1764] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:399 [ 53.461089][ T1780] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.482824][ T1782] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 53.516286][ T1780] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:401 [ 53.518281][ T1785] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.527548][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 53.588036][ T1788] SELinux: failed to load policy [ 53.598969][ T1790] rust_binder: Write failure EINVAL in pid:406 [ 53.791723][ T1795] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.839111][ T1795] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 53.884076][ T1795] rust_binder: Write failure EINVAL in pid:352 [ 54.248588][ T1813] binder: Unknown parameter 'coyBLV"i5ntext' [ 54.585159][ T1826] input input30: cannot allocate more than FF_MAX_EFFECTS effects [ 54.742373][ T1831] SELinux: truncated policydb string identifier [ 54.775174][ T1831] SELinux: failed to load policy [ 54.794284][ T36] kauditd_printk_skb: 1127 callbacks suppressed [ 54.794302][ T36] audit: type=1400 audit(1750419910.350:3517): avc: denied { read write } for pid=1830 comm="syz.2.483" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.867765][ T36] audit: type=1400 audit(1750419910.350:3518): avc: denied { read open } for pid=1830 comm="syz.2.483" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.923930][ T36] audit: type=1400 audit(1750419910.350:3519): avc: denied { ioctl } for pid=1830 comm="syz.2.483" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.000581][ T36] audit: type=1400 audit(1750419910.350:3520): avc: denied { ioctl } for pid=1830 comm="syz.2.483" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.045992][ T1836] input: syz1 as /devices/virtual/input/input32 [ 55.069491][ T36] audit: type=1400 audit(1750419910.350:3521): avc: denied { read write } for pid=1830 comm="syz.2.483" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 55.136607][ T36] audit: type=1400 audit(1750419910.350:3522): avc: denied { read write open } for pid=1830 comm="syz.2.483" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 55.229530][ T36] audit: type=1400 audit(1750419910.350:3523): avc: denied { ioctl } for pid=1830 comm="syz.2.483" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 55.290819][ T36] audit: type=1400 audit(1750419910.350:3524): avc: denied { map } for pid=1830 comm="syz.2.483" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.350809][ T36] audit: type=1400 audit(1750419910.350:3525): avc: denied { read } for pid=1830 comm="syz.2.483" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.369679][ T291] audit: audit_backlog=65 > audit_backlog_limit=64 [ 55.505491][ T1847] rust_binder: Error while translating object. [ 55.505519][ T1847] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.515428][ T1847] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:426 [ 55.580810][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.580821][ T1174] Bluetooth: hci0: command 0x1003 tx timeout [ 55.703650][ T1851] kvm: user requested TSC rate below hardware speed [ 55.944056][ T1866] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 55.990308][ T1866] SELinux: failed to load policy [ 56.015948][ T1864] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 56.060927][ T1864] rust_binder: Write failure EINVAL in pid:431 [ 56.491979][ T1891] binder: Unknown parameter '00000000000000000000014' [ 56.939458][ T1906] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 57.241261][ T1915] binder: Bad value for 'max' [ 57.393425][ T1917] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 57.889777][ T1939] input: syz0 as /devices/virtual/input/input36 [ 58.408599][ T1966] rtc_cmos 00:00: Alarms can be up to one day in the future [ 58.441123][ T1964] binder: Unknown parameter 'processor : 0 [ 58.441123][ T1964] vendor_id : GenuineIntel [ 58.441123][ T1964] cpu family : 6 [ 58.441123][ T1964] model : 79 [ 58.441123][ T1964] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 58.441123][ T1964] stepping : 0 [ 58.441123][ T1964] microcode : 0xffffffff [ 58.441123][ T1964] cpu MHz : 2199.998 [ 58.441123][ T1964] cache size : 56320 KB [ 58.441123][ T1964] physical id : 0 [ 58.441123][ T1964] siblings : 2 [ 58.441123][ T1964] core id : 0 [ 58.441123][ T1964] cpu cores : 1 [ 58.441123][ T1964] apicid : 0 [ 58.441123][ T1964] initial apicid : 0 [ 58.441123][ T1964] fpu : yes [ 58.441123][ T1964] fpu_exception : yes [ 58.441123][ T1964] cpuid level : 13 [ 58.441123][ T1964] wp : yes [ 58.441123][ T1964] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 58.441123][ T1964] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 58.447414][ T1963] rtc_cmos 00:00: Alarms can be up to one day in the future [ 58.866333][ T63] rtc_cmos 00:00: Alarms can be up to one day in the future [ 58.884228][ T63] rtc_cmos 00:00: Alarms can be up to one day in the future [ 58.916663][ T63] rtc_cmos 00:00: Alarms can be up to one day in the future [ 58.945333][ T63] rtc_cmos 00:00: Alarms can be up to one day in the future [ 58.981810][ T63] rtc rtc0: __rtc_set_alarm: err=-22 [ 59.026314][ T1981] rust_binder: Read failure Err(EAGAIN) in pid:345 [ 59.121071][ T1998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:450 [ 59.142136][ T1998] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.171155][ T2008] input: syz1 as /devices/virtual/input/input37 [ 59.181313][ T1998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:450 [ 59.410463][ T2020] binder: Unknown parameter 'context' [ 59.805748][ T36] kauditd_printk_skb: 1027 callbacks suppressed [ 59.805766][ T36] audit: type=1400 audit(1750419915.360:4539): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.884178][ T36] audit: type=1400 audit(1750419915.390:4540): avc: denied { read } for pid=2026 comm="syz.1.546" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 59.901409][ T2033] SELinux: Context system_u: is not valid (left unmapped). [ 59.937267][ T36] audit: type=1400 audit(1750419915.390:4541): avc: denied { read open } for pid=2026 comm="syz.1.546" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 60.017157][ T36] audit: type=1400 audit(1750419915.400:4542): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.059964][ T36] audit: type=1400 audit(1750419915.400:4543): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=457 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.096143][ T36] audit: type=1400 audit(1750419915.400:4544): avc: denied { read } for pid=2026 comm="syz.1.546" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 60.130753][ T36] audit: type=1400 audit(1750419915.410:4545): avc: denied { read open } for pid=2026 comm="syz.1.546" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 60.199941][ T36] audit: type=1400 audit(1750419915.410:4546): avc: denied { read } for pid=2026 comm="syz.1.546" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 60.232038][ T36] audit: type=1400 audit(1750419915.410:4547): avc: denied { read open } for pid=2026 comm="syz.1.546" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 60.291494][ T36] audit: type=1400 audit(1750419915.420:4548): avc: denied { ioctl } for pid=2026 comm="syz.1.546" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 60.296415][ T2038] binder: Unknown parameter 'st' [ 60.324989][ T2041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.341393][ T2040] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 60.381017][ T2040] rust_binder: Write failure EINVAL in pid:456 [ 60.559647][ T2055] input: memory.events as /devices/virtual/input/input38 [ 60.705013][ T2061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.730890][ T2061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.337626][ T2091] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.378588][ T2091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:480 [ 61.540628][ T2101] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.558184][ T2099] rust_binder: Error in use_page_slow: ESRCH [ 61.594483][ T2099] rust_binder: use_range failure ESRCH [ 61.600527][ T2099] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 61.610905][ T2099] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 61.629284][ T2099] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:483 [ 61.782021][ T2113] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 61.948099][ T2125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:492 [ 62.083894][ T2126] rust_binder: Write failure EINVAL in pid:492 [ 62.163149][ T2130] SELinux: policydb magic number 0x6f6d6672 does not match expected magic number 0xf97cff8c [ 62.200922][ T2130] SELinux: failed to load policy [ 62.247773][ T2130] input: syz1 as /devices/virtual/input/input40 [ 62.506049][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.542866][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.563874][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.586213][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.600994][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.622502][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.640899][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.649362][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.660879][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.668321][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.690911][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.698439][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.720829][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.728370][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.750985][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.759234][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.770821][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.785624][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.793661][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.801725][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.809197][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.817533][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.835963][ T63] hid-generic 0000:0002:0000.0002: unknown main item tag 0x0 [ 62.848731][ T63] hid-generic 0000:0002:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 62.939368][ T2153] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 63.132208][ T2169] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 63.132233][ T2169] rust_binder: Read failure Err(EFAULT) in pid:500 [ 63.456708][ T2176] fido_id[2176]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 63.767640][ T2190] rust_binder: Write failure EFAULT in pid:485 [ 64.283400][ T2209] random: crng reseeded on system resumption [ 64.371655][ T2209] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 64.371689][ T2209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:494 [ 64.670840][ T2233] random: crng reseeded on system resumption [ 64.742076][ T2236] rust_binder: Got transaction with invalid offset. [ 64.742124][ T2236] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.767966][ T2236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:500 [ 64.812506][ T36] kauditd_printk_skb: 741 callbacks suppressed [ 64.812536][ T36] audit: type=1400 audit(1750419920.370:5275): avc: denied { ioctl } for pid=2234 comm="syz.1.607" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.812548][ T2228] rust_binder: Write failure EINVAL in pid:414 [ 64.936871][ T36] audit: type=1400 audit(1750419920.370:5276): avc: denied { ioctl } for pid=2225 comm="syz.0.604" path="/dev/binderfs/binder1" dev="binder" ino=36 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 65.051992][ T36] audit: type=1400 audit(1750419920.430:5277): avc: denied { read } for pid=2234 comm="syz.1.607" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 65.106208][ T36] audit: type=1400 audit(1750419920.440:5278): avc: denied { read open } for pid=2234 comm="syz.1.607" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 65.170392][ T36] audit: type=1400 audit(1750419920.440:5279): avc: denied { ioctl } for pid=2234 comm="syz.1.607" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.215087][ T2244] binder: Unknown parameter 'defcontext01777777777777777777777' [ 65.229915][ T2250] audit: audit_backlog=65 > audit_backlog_limit=64 [ 65.238722][ T2250] audit: audit_lost=42 audit_rate_limit=0 audit_backlog_limit=64 [ 65.250870][ T36] audit: type=1400 audit(1750419920.440:5280): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.276785][ T2250] audit: backlog limit exceeded [ 65.330067][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 65.648179][ T2261] binder: Unknown parameter 'sec}abel' [ 65.652187][ T2264] SELinux: failed to load policy [ 65.664308][ T2258] binder: Unknown parameter 'sec}abel' [ 65.867934][ T2274] tun0: tun_chr_ioctl cmd 1074025676 [ 65.900669][ T2274] tun0: owner set to 0 [ 66.090642][ T2289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:512 [ 66.224478][ T2295] rust_binder: Read failure Err(EAGAIN) in pid:528 [ 66.334292][ T2301] rust_binder: Write failure EFAULT in pid:517 [ 66.348563][ T2303] rust_binder: Write failure EFAULT in pid:517 [ 66.542591][ T2313] rust_binder: Write failure EINVAL in pid:533 [ 66.583383][ T2306] : tun_chr_ioctl cmd 1074025675 [ 66.620673][ T2306] : persist disabled [ 66.632951][ T2306] : tun_chr_ioctl cmd 1074025681 [ 66.733510][ T2318] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.744514][ T2318] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 66.798159][ T2322] rust_binder: Error while translating object. [ 66.807587][ T2322] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 66.815552][ T2322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:538 [ 66.944858][ T2329] kvm: kvm [2327]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xaf [ 67.045451][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 67.114362][ T2343] binder: Unknown parameter 'nXI' [ 67.171729][ T2344] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 67.171767][ T2344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:545 [ 67.359418][ T2354] random: crng reseeded on system resumption [ 67.443723][ T2352] kernel profiling enabled (shift: 63) [ 67.449802][ T2354] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 67.457880][ T2352] profiling shift: 63 too large [ 67.463785][ T2354] SELinux: failed to load policy [ 67.662281][ T2357] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 67.680922][ T2357] rust_binder: Write failure EINVAL in pid:550 [ 67.801317][ T2368] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 67.830926][ T2368] rust_binder: Write failure EINVAL in pid:555 [ 68.087976][ T2381] rust_binder: Error while translating object. [ 68.105332][ T2381] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 68.121006][ T2381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:561 [ 68.452803][ T2395] binder: Unknown parameter 'fscontext?}mer' [ 69.081656][ T2417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.082079][ T2417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.100825][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 69.100862][ T1174] Bluetooth: hci0: command 0x1003 tx timeout [ 69.131049][ T2417] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 69.292327][ T2418] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 69.300202][ T2418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:566 [ 69.623833][ T2449] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.835629][ T36] kauditd_printk_skb: 865 callbacks suppressed [ 69.835650][ T36] audit: type=1400 audit(1750419925.390:6144): avc: denied { read } for pid=2451 comm="syz.3.678" name="binder0" dev="binder" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.848950][ T2452] binder: Bad value for 'max' [ 69.906845][ T2453] SELinux: security_context_str_to_sid () failed with errno=-22 [ 69.909844][ T36] audit: type=1400 audit(1750419925.390:6145): avc: denied { read open } for pid=2451 comm="syz.3.678" path="/dev/binderfs/binder0" dev="binder" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.961472][ T2456] rust_binder: Write failure EFAULT in pid:531 [ 69.985067][ T36] audit: type=1400 audit(1750419925.400:6146): avc: denied { mounton } for pid=2450 comm="syz.0.677" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.095036][ T36] audit: type=1400 audit(1750419925.420:6147): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.183160][ T36] audit: type=1400 audit(1750419925.420:6148): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.234353][ T2469] audit: audit_backlog=65 > audit_backlog_limit=64 [ 70.243179][ T2473] audit: audit_backlog=65 > audit_backlog_limit=64 [ 70.249724][ T2473] audit: audit_lost=44 audit_rate_limit=0 audit_backlog_limit=64 [ 70.257811][ T36] audit: type=1400 audit(1750419925.440:6149): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.261816][ T2471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 70.341269][ T2470] input: syz0 as /devices/virtual/input/input41 [ 70.618602][ T2482] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:540 [ 70.619719][ T2482] rust_binder: Write failure EINVAL in pid:540 [ 70.725392][ T2484] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 70.744919][ T2484] rust_binder: Write failure EINVAL in pid:542 [ 70.748270][ T2487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.079194][ T2505] rust_binder: Error while translating object. [ 71.102343][ T2505] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 71.108572][ T2505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:582 [ 71.370853][ T2516] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 71.410801][ T2516] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 71.419462][ T2516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:585 [ 71.820071][ T2558] rust_binder: Write failure EINVAL in pid:505 [ 71.856118][ T2559] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 71.884456][ T2559] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 71.902579][ T2559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:505 [ 71.945706][ T2560] rust_binder: Write failure EFAULT in pid:598 [ 72.012993][ T2560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:598 [ 72.019322][ T2560] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 72.070951][ T2560] rust_binder: Read failure Err(EFAULT) in pid:598 [ 72.192272][ T2570] kernel profiling enabled (shift: 63) [ 72.238003][ T2570] profiling shift: 63 too large [ 72.418589][ T2577] input: syz0 as /devices/virtual/input/input44 [ 72.599798][ T2589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.611371][ T2589] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 72.643631][ T2589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.667637][ T2589] rust_binder: Failed to allocate buffer. len:168, is_oneway:false [ 72.679572][ T2589] rust_binder: Error while translating object. [ 72.688469][ T2589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.720741][ T2589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:604 [ 73.158292][ T2609] binder: Bad value for 'max' [ 73.614351][ T2628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:620 [ 74.841019][ T36] kauditd_printk_skb: 3383 callbacks suppressed [ 74.841036][ T36] audit: type=1400 audit(1750419930.400:9480): avc: denied { setattr } for pid=290 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.880975][ T36] audit: type=1400 audit(1750419930.400:9481): avc: denied { setattr } for pid=290 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.890609][ T290] audit: audit_backlog=65 > audit_backlog_limit=64 [ 74.904969][ T36] audit: type=1400 audit(1750419930.400:9482): avc: denied { setattr } for pid=290 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.910567][ T290] audit: audit_lost=63 audit_rate_limit=0 audit_backlog_limit=64 [ 74.934633][ T36] audit: type=1400 audit(1750419930.400:9483): avc: denied { setattr } for pid=290 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.941384][ T290] audit: backlog limit exceeded [ 74.965270][ T36] audit: type=1400 audit(1750419930.400:9484): avc: denied { setattr } for pid=290 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.972394][ T290] audit: audit_backlog=65 > audit_backlog_limit=64 [ 74.993049][ T36] audit: type=1400 audit(1750419930.400:9485): avc: denied { setattr } for pid=290 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.761210][ T2654] random: crng reseeded on system resumption [ 76.277099][ T2675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:636 [ 76.312198][ T2674] binder: Unknown parameter '' [ 77.029001][ T2694] binder: Bad value for 'max' [ 77.118377][ T2696] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.118400][ T2696] rust_binder: Read failure Err(EFAULT) in pid:639 [ 77.188583][ T2698] tun0: tun_chr_ioctl cmd 1074025675 [ 77.218092][ T2698] tun0: persist disabled [ 77.544657][ T2711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:557 [ 77.861835][ T2716] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 78.025132][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.083425][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.127369][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.211302][ T2736] binder: Binderfs stats mode cannot be changed during a remount [ 78.221666][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.262102][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.313513][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.366368][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.388272][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.422776][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.444721][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.466795][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.488176][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.509679][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.530313][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.560473][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.595394][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.625986][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.646666][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.666718][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.693642][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.713600][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.733449][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.762244][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.786082][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.806598][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.834964][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 78.855652][ T2731] binder: Unknown parameter 'defcontext01777777777777777777777wi\;*L;184467440737095516153laYlF8O{’tܐMVdZ0'bxю* .B;TZ˞u̪2ve@jT' [ 79.286376][ T2756] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 79.286411][ T2756] rust_binder: Error in use_page_slow: EBUSY [ 79.301576][ T2756] rust_binder: use_range failure EBUSY [ 79.307677][ T2756] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 79.335060][ T2756] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 79.354923][ T2756] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 79.378750][ T2756] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:653 [ 79.425600][ T2761] rust_binder: Write failure EFAULT in pid:586 [ 79.442862][ T2760] binder: Unknown parameter 'contextfs/binder1' [ 79.851552][ T36] kauditd_printk_skb: 3674 callbacks suppressed [ 79.851569][ T36] audit: type=1400 audit(1750419935.410:13059): avc: denied { setattr } for pid=290 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.911157][ T2771] rust_binder: Write failure EFAULT in pid:592 [ 79.922435][ T36] audit: type=1400 audit(1750419935.410:13060): avc: denied { read append } for pid=2772 comm="syz.3.784" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.949698][ T290] audit: audit_backlog=65 > audit_backlog_limit=64 [ 79.954559][ T36] audit: type=1400 audit(1750419935.410:13061): avc: denied { read open } for pid=2772 comm="syz.3.784" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.971569][ T290] audit: audit_lost=98 audit_rate_limit=0 audit_backlog_limit=64 [ 79.985651][ T2775] audit: audit_backlog=65 > audit_backlog_limit=64 [ 79.999902][ T290] audit: backlog limit exceeded [ 80.000818][ T2775] audit: audit_lost=99 audit_rate_limit=0 audit_backlog_limit=64 [ 80.019099][ T290] audit: audit_backlog=65 > audit_backlog_limit=64 [ 80.024518][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 80.106668][ T2780] binder: Bad value for 'stats' [ 80.146213][ T2784] __vm_enough_memory: pid: 2784, comm: syz.0.787, bytes: 281474976845824 not enough memory for the allocation [ 80.493228][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.499612][ T2794] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.532746][ T2794] Bluetooth: hci0: Frame reassembly failed (-90) [ 80.541203][ T2794] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.581153][ T2794] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.611171][ T2794] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.611240][ T2798] rust_binder: Write failure EFAULT in pid:605 [ 80.617947][ T2794] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.632401][ T2794] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.651223][ T2794] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.665519][ T2794] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.679205][ T2794] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.694796][ T2794] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.711212][ T2794] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.718078][ T2794] Bluetooth: hci0: Frame reassembly failed (-84) [ 81.245183][ T2811] rust_binder: Write failure EFAULT in pid:611 [ 81.463143][ T2821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:614 [ 82.540800][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 82.541503][ T1174] Bluetooth: hci0: command 0x1003 tx timeout [ 82.635275][ T2848] binder: Bad value for 'stats' [ 82.913767][ T2858] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:674 [ 83.044066][ T2868] random: crng reseeded on system resumption [ 83.196709][ T2873] binder: Bad value for 'max' [ 83.207278][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.879772][ T2897] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 84.861763][ T36] kauditd_printk_skb: 3400 callbacks suppressed [ 84.861784][ T36] audit: type=1400 audit(1750419940.420:16400): avc: denied { read } for pid=2920 comm="syz.1.830" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.881919][ T2921] input: syz1 as /devices/virtual/input/input50 [ 84.948447][ T290] audit: audit_backlog=65 > audit_backlog_limit=64 [ 84.951266][ T2921] audit: audit_backlog=65 > audit_backlog_limit=64 [ 84.955076][ T290] audit: audit_lost=121 audit_rate_limit=0 audit_backlog_limit=64 [ 84.964437][ T2923] audit: audit_backlog=65 > audit_backlog_limit=64 [ 84.970966][ T36] audit: type=1400 audit(1750419940.420:16401): avc: denied { read open } for pid=2920 comm="syz.1.830" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 85.000983][ T2921] audit: audit_lost=122 audit_rate_limit=0 audit_backlog_limit=64 [ 85.003604][ T290] audit: backlog limit exceeded [ 85.011122][ T2923] audit: audit_lost=123 audit_rate_limit=0 audit_backlog_limit=64 [ 85.027778][ T290] audit: audit_backlog=65 > audit_backlog_limit=64 [ 85.260809][ T1174] Bluetooth: hci0: command 0x1003 tx timeout [ 85.260828][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.590870][ T2936] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.871634][ T2943] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 86.047674][ T2951] rust_binder: inc_ref_done called when no active inc_refs [ 86.098101][ T2948] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1531215282 (3062430564 ns) > initial count (1473793136 ns). Using initial count to start timer. [ 86.184564][ T2948] binder: Unknown parameter 'non' [ 86.275108][ T2959] rust_binder: Write failure EFAULT in pid:657 [ 86.632038][ T304] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 86.693062][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 86.759228][ T304] bridge_slave_1: left allmulticast mode [ 86.770793][ T304] bridge_slave_1: left promiscuous mode [ 86.784536][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.821016][ T304] bridge_slave_0: left allmulticast mode [ 86.836455][ T304] bridge_slave_0: left promiscuous mode [ 86.860160][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.986720][ T2986] tun0: tun_chr_ioctl cmd 1074025676 [ 87.000941][ T2986] tun0: owner set to 0 [ 87.027293][ T304] veth1_macvtap: left promiscuous mode [ 87.040859][ T304] veth0_vlan: left promiscuous mode [ 87.333986][ T2984] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.352718][ T2984] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.359918][ T2984] bridge_slave_0: entered allmulticast mode [ 87.411323][ T2984] bridge_slave_0: entered promiscuous mode [ 87.428985][ T2984] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.440878][ T3003] rust_binder: Write failure EFAULT in pid:675 [ 87.450801][ T2984] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.484856][ T2984] bridge_slave_1: entered allmulticast mode [ 87.501350][ T2984] bridge_slave_1: entered promiscuous mode [ 87.829942][ T3012] binder: Unknown parameter 'coyBLV"i5ntext' [ 87.938302][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.945422][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.979656][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.986994][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.004232][ T3014] syz.0.859: attempt to access beyond end of device [ 88.004232][ T3014] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 88.178518][ T2984] veth0_vlan: entered promiscuous mode [ 88.273512][ T2984] veth1_macvtap: entered promiscuous mode [ 88.302676][ T3016] SELinux: policydb string does not match my string SE Linux [ 88.325074][ T3016] SELinux: failed to load policy [ 88.585996][ T3024] rust_binder: Write failure EINVAL in pid:2 [ 88.590123][ T3025] rust_binder: Write failure EFAULT in pid:686 [ 88.620906][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 88.694938][ T3032] random: crng reseeded on system resumption [ 88.807505][ T3032] rust_binder: Error while translating object. [ 88.807538][ T3032] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 88.841462][ T3032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:5 [ 88.884532][ T3036] rust_binder: Error while translating object. [ 88.914503][ T3036] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.920717][ T3036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:714 [ 89.217530][ T3049] block device autoloading is deprecated and will be removed. [ 89.272761][ T3049] syz.4.868: attempt to access beyond end of device [ 89.272761][ T3049] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 89.583995][ T3063] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 89.694672][ T3074] rust_binder: Write failure EFAULT in pid:724 [ 89.884457][ T36] kauditd_printk_skb: 1395 callbacks suppressed [ 89.884477][ T36] audit: type=1400 audit(1750419945.440:17787): avc: denied { read write } for pid=3080 comm="syz.1.878" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 89.927627][ T36] audit: type=1400 audit(1750419945.480:17788): avc: denied { read write } for pid=3084 comm="syz.4.879" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.994556][ T36] audit: type=1400 audit(1750419945.480:17789): avc: denied { read write open } for pid=3084 comm="syz.4.879" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.054256][ T36] audit: type=1400 audit(1750419945.490:17790): avc: denied { write } for pid=3081 comm="syz.0.880" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.101269][ T36] audit: type=1400 audit(1750419945.490:17791): avc: denied { write open } for pid=3081 comm="syz.0.880" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.128859][ T36] audit: type=1400 audit(1750419945.490:17792): avc: denied { read write open } for pid=3080 comm="syz.1.878" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 90.165487][ T3099] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 90.165512][ T3099] rust_binder: Read failure Err(EFAULT) in pid:25 [ 90.177327][ T36] audit: type=1400 audit(1750419945.510:17793): avc: denied { read } for pid=3081 comm="syz.0.880" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.231833][ T36] audit: type=1400 audit(1750419945.510:17794): avc: denied { read open } for pid=3081 comm="syz.0.880" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.318715][ T36] audit: type=1400 audit(1750419945.510:17795): avc: denied { read } for pid=3081 comm="syz.0.880" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 90.381024][ T36] audit: type=1400 audit(1750419945.510:17796): avc: denied { read open } for pid=3081 comm="syz.0.880" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 90.420452][ T3108] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 90.420488][ T3108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:706 [ 90.583133][ T3116] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 90.819489][ T3136] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42 [ 90.958927][ T3137] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 91.785248][ T3161] rust_binder: Error while translating object. [ 91.785293][ T3161] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.802557][ T3161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:738 [ 92.066638][ T3171] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 92.160800][ T3171] SELinux: failed to load policy [ 92.256199][ T3169] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 92.256273][ T3169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:47 [ 92.691517][ T3184] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 92.729295][ T3184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:745 [ 93.241266][ T3214] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 93.317959][ T3217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:58 [ 93.495004][ T3221] rust_binder: Write failure EINVAL in pid:734 [ 93.603189][ T3223] rust_binder: Error in use_page_slow: ESRCH [ 93.603306][ T3223] rust_binder: use_range failure ESRCH [ 93.618758][ T3223] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 93.632543][ T3223] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 93.640612][ T3223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:748 [ 94.318649][ T3244] rust_binder: Error while translating object. [ 94.340839][ T3244] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 94.350409][ T3244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 94.404166][ T3246] input: syz0 as /devices/virtual/input/input55 [ 94.550428][ T3249] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.627790][ T3250] input: syz0 as /devices/virtual/input/input56 [ 94.906870][ T36] kauditd_printk_skb: 825 callbacks suppressed [ 94.906886][ T36] audit: type=1400 audit(1750419950.460:18583): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.947218][ T3258] SELinux: failed to load policy [ 94.958683][ T36] audit: type=1400 audit(1750419950.500:18584): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.025965][ T3264] deleting an unspecified loop device is not supported. [ 95.027029][ T36] audit: type=1400 audit(1750419950.500:18585): avc: denied { read } for pid=3260 comm="syz.3.930" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.107848][ T3267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.136307][ T36] audit: type=1400 audit(1750419950.500:18586): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.240798][ T36] audit: type=1400 audit(1750419950.500:18587): avc: denied { read open } for pid=3260 comm="syz.3.930" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.296532][ T3273] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.306859][ T3276] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.308303][ T3277] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.320235][ T3273] audit: audit_lost=140 audit_rate_limit=0 audit_backlog_limit=64 [ 95.326069][ T3276] audit: audit_lost=141 audit_rate_limit=0 audit_backlog_limit=64 [ 95.341794][ T3271] binder: Unknown parameter 'obj_type' [ 95.388838][ T3276] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.486130][ T3284] rust_binder: Write failure EFAULT in pid:749 [ 95.817298][ T3304] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 95.840071][ T3305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:756 [ 95.845955][ T3304] rust_binder: Write failure EINVAL in pid:763 [ 96.141975][ T3312] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 96.150836][ T3312] rust_binder: Read failure Err(EFAULT) in pid:761 [ 96.509466][ T3323] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 96.530807][ T3323] rust_binder: Error while translating object. [ 96.549952][ T3323] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.567568][ T3323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 96.593759][ T3325] input: syz0 as /devices/virtual/input/input58 [ 96.953594][ T3346] rust_binder: Failed copying remainder into alloc: EFAULT [ 96.953619][ T3346] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 96.972683][ T3346] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 96.982160][ T3346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:776 [ 96.995452][ T3345] binder: Bad value for 'max' [ 97.308922][ T3364] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 97.330925][ T3364] rust_binder: Write failure EINVAL in pid:90 [ 97.345329][ T3367] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.574168][ T3377] binder: Binderfs stats mode cannot be changed during a remount [ 97.606180][ T3379] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.911416][ T36] kauditd_printk_skb: 791 callbacks suppressed [ 99.911436][ T36] audit: type=1400 audit(1750419955.470:19375): avc: denied { read } for pid=3577 comm="syz.0.1042" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 99.970600][ T36] audit: type=1400 audit(1750419955.490:19376): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.020823][ T36] audit: type=1400 audit(1750419955.500:19377): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.083681][ T36] audit: type=1400 audit(1750419955.520:19378): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.144559][ T36] audit: type=1400 audit(1750419955.530:19379): avc: denied { read } for pid=3580 comm="syz.4.1044" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 100.191347][ T36] audit: type=1400 audit(1750419955.550:19380): avc: denied { read } for pid=3582 comm="syz.1.1046" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 100.230815][ T36] audit: type=1400 audit(1750419955.550:19381): avc: denied { read } for pid=3582 comm="syz.1.1046" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 100.274143][ T3607] serio: Serial port ttynull [ 100.277676][ T36] audit: type=1400 audit(1750419955.560:19383): avc: denied { read write } for pid=2984 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.339241][ T36] audit: type=1400 audit(1750419955.550:19382): avc: denied { read } for pid=3583 comm="syz.0.1045" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 100.368818][ T36] audit: type=1400 audit(1750419955.570:19384): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 101.825742][ T3724] tap0: tun_chr_ioctl cmd 2148553947 [ 102.148129][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 102.160143][ T3756] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 102.704999][ T3825] ptm ptm19: ldisc open failed (-12), clearing slot 19 [ 103.039720][ T12] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 103.052436][ T60] Bluetooth: hci1: Frame reassembly failed (-84) [ 104.220808][ T3894] Bluetooth: hci0: command 0x1003 tx timeout [ 104.220841][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.961043][ T36] kauditd_printk_skb: 707 callbacks suppressed [ 104.961064][ T36] audit: type=1400 audit(1750419960.520:20092): avc: denied { read } for pid=4025 comm="syz.1.1207" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 105.010793][ T36] audit: type=1400 audit(1750419960.540:20093): avc: denied { read } for pid=4025 comm="syz.1.1207" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 105.040806][ T36] audit: type=1400 audit(1750419960.550:20094): avc: denied { load_policy } for pid=4025 comm="syz.1.1207" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=0 [ 105.077081][ T36] audit: type=1400 audit(1750419960.550:20095): avc: denied { mounton } for pid=4025 comm="syz.1.1207" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 105.101762][ T52] Bluetooth: hci1: command 0x1003 tx timeout [ 105.108514][ T1174] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 105.128278][ T36] audit: type=1400 audit(1750419960.560:20096): avc: denied { read } for pid=4024 comm="syz.4.1206" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 105.160796][ T36] audit: type=1400 audit(1750419960.580:20097): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.213097][ T36] audit: type=1400 audit(1750419960.590:20098): avc: denied { read } for pid=4024 comm="syz.4.1206" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 105.300808][ T36] audit: type=1400 audit(1750419960.590:20099): avc: denied { read } for pid=4024 comm="syz.4.1206" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 105.357064][ T4048] audit: audit_backlog=65 > audit_backlog_limit=64 [ 105.365144][ T36] audit: type=1400 audit(1750419960.590:20100): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 106.642235][ T4168] syz.4.1258: attempt to access beyond end of device [ 106.642235][ T4168] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 106.749929][ T4168] cgroup: fork rejected by pids controller in /syz4 [ 106.791811][ T4181] serio: Serial port ttynull [ 107.232054][ T60] bridge_slave_1: left allmulticast mode [ 107.237783][ T60] bridge_slave_1: left promiscuous mode [ 107.243618][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.251077][ T60] bridge_slave_0: left allmulticast mode [ 107.256731][ T60] bridge_slave_0: left promiscuous mode [ 107.262393][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.481406][ T60] veth1_macvtap: left promiscuous mode [ 107.487130][ T60] veth0_vlan: left promiscuous mode [ 110.276860][ T36] kauditd_printk_skb: 325 callbacks suppressed [ 110.276878][ T36] audit: type=1400 audit(1750419965.830:20400): avc: denied { execmem } for pid=4339 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 110.311819][ T36] audit: type=1400 audit(1750419965.840:20401): avc: denied { read } for pid=4342 comm="syz.3.1291" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 110.336399][ T36] audit: type=1400 audit(1750419965.870:20402): avc: denied { read } for pid=4340 comm="syz.0.1289" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 110.360378][ T36] audit: type=1400 audit(1750419965.890:20403): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.384684][ T36] audit: type=1400 audit(1750419965.890:20404): avc: denied { read write } for pid=4340 comm="syz.0.1289" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=0 [ 110.408179][ T36] audit: type=1400 audit(1750419965.910:20405): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.432458][ T36] audit: type=1400 audit(1750419965.960:20406): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.222509][ T36] audit: type=1400 audit(1750419966.780:20407): avc: denied { execmem } for pid=4351 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 111.264762][ T36] audit: type=1400 audit(1750419966.790:20408): avc: denied { sys_module } for pid=4352 comm="syz.0.1292" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 111.286206][ T36] audit: type=1400 audit(1750419966.800:20409): avc: denied { read } for pid=4353 comm="syz.3.1294" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 114.610049][ T4383] syz.1.1302: attempt to access beyond end of device [ 114.610049][ T4383] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 115.911117][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 115.911139][ T36] audit: type=1400 audit(1750419971.460:20448): avc: denied { execmem } for pid=4385 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 115.919332][ T4389] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 115.943625][ T36] audit: type=1400 audit(1750419971.500:20449): avc: denied { read write } for pid=4386 comm="syz.1.1305" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 115.983909][ T36] audit: type=1400 audit(1750419971.500:20450): avc: denied { read } for pid=4388 comm="syz.3.1306" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 116.007002][ T36] audit: type=1400 audit(1750419971.500:20451): avc: denied { read } for pid=4387 comm="syz.0.1304" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=0 [ 116.030293][ T36] audit: type=1400 audit(1750419971.500:20452): avc: denied { read } for pid=4387 comm="syz.0.1304" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 116.053048][ T36] audit: type=1400 audit(1750419971.500:20453): avc: denied { read write } for pid=4386 comm="syz.1.1305" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 116.076793][ T36] audit: type=1400 audit(1750419971.500:20454): avc: denied { read } for pid=4386 comm="syz.1.1305" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 116.099698][ T36] audit: type=1400 audit(1750419971.500:20455): avc: denied { read } for pid=4388 comm="syz.3.1306" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 116.122475][ T36] audit: type=1400 audit(1750419971.500:20456): avc: denied { read } for pid=4388 comm="syz.3.1306" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 116.145290][ T36] audit: type=1400 audit(1750419971.500:20457): avc: denied { read write } for pid=4388 comm="syz.3.1306" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 122.180881][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 122.180898][ T36] audit: type=1400 audit(1750419977.740:20498): avc: denied { execmem } for pid=4423 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 122.216217][ T36] audit: type=1400 audit(1750419977.750:20499): avc: denied { append } for pid=4424 comm="syz.0.1316" name="pfkey" dev="proc" ino=4026532397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 122.241384][ T36] audit: type=1400 audit(1750419977.750:20500): avc: denied { associate } for pid=4424 comm="syz.0.1316" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=0 [ 122.266429][ T36] audit: type=1400 audit(1750419977.750:20501): avc: denied { read write } for pid=4424 comm="syz.0.1316" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 122.291820][ T36] audit: type=1400 audit(1750419977.750:20502): avc: denied { read } for pid=4424 comm="syz.0.1316" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 122.314787][ T36] audit: type=1400 audit(1750419977.760:20503): avc: denied { read } for pid=4424 comm="syz.0.1316" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 122.337747][ T36] audit: type=1400 audit(1750419977.770:20504): avc: denied { read } for pid=4426 comm="syz.3.1318" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 122.360854][ T36] audit: type=1400 audit(1750419977.770:20505): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 122.385550][ T36] audit: type=1400 audit(1750419977.790:20506): avc: denied { read write } for pid=4432 comm="syz.0.1319" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 122.408938][ T36] audit: type=1400 audit(1750419977.810:20507): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 127.960821][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 127.960842][ T36] audit: type=1400 audit(1750419983.510:20534): avc: denied { execmem } for pid=4454 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 127.992559][ T36] audit: type=1400 audit(1750419983.520:20535): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2769]" dev="pipefs" ino=2769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 128.080830][ T36] audit: type=1400 audit(1750419983.520:20536): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2769]" dev="pipefs" ino=2769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 128.119994][ T36] audit: type=1400 audit(1750419983.520:20537): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2769]" dev="pipefs" ino=2769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 128.145420][ T36] audit: type=1400 audit(1750419983.520:20538): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2769]" dev="pipefs" ino=2769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 128.169198][ T36] audit: type=1400 audit(1750419983.530:20539): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2769]" dev="pipefs" ino=2769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 128.192647][ T36] audit: type=1400 audit(1750419983.540:20540): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 128.218999][ T36] audit: type=1400 audit(1750419983.540:20541): avc: denied { read } for pid=4456 comm="syz.1.1327" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 128.242016][ T36] audit: type=1400 audit(1750419983.560:20542): avc: denied { read } for pid=4457 comm="syz.3.1328" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 128.264871][ T36] audit: type=1400 audit(1750419983.560:20543): avc: denied { read } for pid=4457 comm="syz.3.1328" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 128.345298][ T60] bridge_slave_1: left allmulticast mode [ 128.350986][ T60] bridge_slave_1: left promiscuous mode [ 128.356564][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.364665][ T60] bridge_slave_0: left allmulticast mode [ 128.370398][ T60] bridge_slave_0: left promiscuous mode [ 128.376083][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.631647][ T60] veth1_macvtap: left promiscuous mode [ 128.637147][ T60] veth0_vlan: left promiscuous mode [ 129.541786][ T60] bridge_slave_1: left allmulticast mode [ 129.547461][ T60] bridge_slave_1: left promiscuous mode [ 129.553097][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.560394][ T60] bridge_slave_0: left allmulticast mode [ 129.566107][ T60] bridge_slave_0: left promiscuous mode [ 129.571728][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.579241][ T60] bridge_slave_1: left allmulticast mode [ 129.585593][ T60] bridge_slave_1: left promiscuous mode [ 129.591226][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.598492][ T60] bridge_slave_0: left allmulticast mode [ 129.604269][ T60] bridge_slave_0: left promiscuous mode [ 129.609839][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.931866][ T60] veth1_macvtap: left promiscuous mode [ 129.937459][ T60] veth0_vlan: left promiscuous mode [ 129.942882][ T60] veth1_macvtap: left promiscuous mode [ 129.948353][ T60] veth0_vlan: left promiscuous mode