last executing test programs: 17.545394813s ago: executing program 3 (id=547): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x1, 0x40}}, &(0x7f0000000280)={0x0, 0x18}}, 0x10}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x10, r0, 0x89bf8000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x220200, 0x149) write$vga_arbiter(r1, &(0x7f0000000140)=@unlock_all, 0xb) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 16.664854667s ago: executing program 3 (id=558): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x410482, 0x0) read(r0, &(0x7f00000004c0)=""/92, 0x5c) 16.664491937s ago: executing program 3 (id=559): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x1800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x509080, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "f80c1345e830c1f6bc2d876c4a66299fb2c7daf453aa3f37d1c4e589ac944b3ee907c35b4ede33626f99cb5bf65bb5193ffb1a14f11f8509ec67e9809e4abba1ea8086486b8675242f487d217ae3adb07a3bbeb43b36fab7b5b889abad76"}, 0x6e) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x76) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x1800, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x509080, 0x0) (async) write$selinux_load(0xffffffffffffffff, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "f80c1345e830c1f6bc2d876c4a66299fb2c7daf453aa3f37d1c4e589ac944b3ee907c35b4ede33626f99cb5bf65bb5193ffb1a14f11f8509ec67e9809e4abba1ea8086486b8675242f487d217ae3adb07a3bbeb43b36fab7b5b889abad76"}, 0x6e) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) (async) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x76) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) (async) 16.591136438s ago: executing program 3 (id=561): ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f00000004c0)={0x2700, 0x40, 0x3}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000780)={0x101ff, 0x0, 0x10000, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000700)={0xfffffffc, 0x400, 0x1, 0x2, 0x2, "14710744d86b98be284a8463ca03daf360d01a", 0x80, 0x5}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000500)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x9e, 0x4, 0x800, 0x8000000000000000, 0x101, 0x8}, {0x3, 0x80000000, 0x7, 0x0, 0x82, 0x7}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000240)) r5 = syz_clone3(&(0x7f0000000280)={0x4800, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, {0x30}, &(0x7f00000001c0)=""/121, 0x79, &(0x7f0000000380)=""/240, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x2, r7, 0x1, &(0x7f0000000300)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs2/custom1\x00', 0x802, 0x0) r9 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_PARENT(r9, 0xb702, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000480)={0x3}) syz_clone3(&(0x7f0000002980)={0x800000, &(0x7f0000000180), &(0x7f00000007c0), &(0x7f0000000800), {0x5}, &(0x7f0000001980)=""/4096, 0x1000, &(0x7f0000000840)=""/161, &(0x7f0000000900)=[r6, r6, r5, r7], 0x4, {r3}}, 0x58) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000340)=[@increfs, @request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) 16.321253422s ago: executing program 3 (id=565): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x450501, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x4880, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140)=0x80) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 16.276580603s ago: executing program 3 (id=567): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x20, 0x0}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [0x0, 0x0, 0x3]}, 0x45c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000680)={0xa8, 0x0, 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002}]}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x109000, 0x0) read$FUSE(r6, &(0x7f00000011c0)={0x2020}, 0x2020) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xd) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0xffffffffffffffff}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000700)={'syz0\x00', {0x0, 0x4, 0x9, 0x1}, 0x2c, [0x217fdf04, 0x6, 0x4, 0x1, 0x7fffffff, 0x0, 0x9, 0x1637, 0x7, 0x6, 0x9, 0x200, 0xffffffff, 0x400, 0x4800000, 0x1, 0x6, 0x2, 0x81, 0x3, 0x0, 0x26, 0x6, 0x4c, 0x7b82ef1, 0x80, 0x593, 0xfffffffd, 0x9, 0xc867, 0x2, 0x1, 0x0, 0x1, 0x2, 0x7fff, 0x6, 0x3465, 0xb, 0x2, 0x9, 0x3, 0xeba, 0x40, 0x10001, 0x5, 0x9, 0xfffffffd, 0x0, 0x80000000, 0x3ff, 0x3, 0xca78, 0x153f, 0xe298, 0x6, 0xe3, 0xffffffff, 0xb192, 0x5a9, 0x70, 0xffffff82, 0x6, 0x5], [0xfffffffe, 0x0, 0x5, 0xc, 0x4, 0x7f, 0x6, 0x7, 0x6, 0x0, 0x6, 0x5, 0x4, 0x9, 0xc, 0x7, 0x3, 0x8001, 0x9, 0x3ff, 0xffffffff, 0x4, 0x7, 0x2, 0x9, 0x3, 0x5, 0x2, 0x5, 0x0, 0x5, 0x9, 0x6, 0x307, 0x2, 0x0, 0x4, 0x897, 0x200, 0x0, 0x1, 0xc, 0x3, 0x401, 0x10001, 0xe, 0x5, 0x1, 0x6, 0x6, 0xffffff81, 0x8, 0x80, 0x9, 0x0, 0x8, 0x6d0, 0x7, 0xfffffff9, 0x9e0, 0x71, 0x2, 0xffffff0d, 0x2], [0x10000000, 0x8, 0x0, 0x5, 0x7, 0x7, 0xf, 0x1, 0x1, 0x4, 0x4, 0x0, 0x3, 0x54, 0x3, 0x28b897a3, 0x0, 0xfffffffb, 0x1, 0x65, 0xdf5c, 0x3ff, 0xd, 0x3a95, 0xac, 0x9fa, 0x8, 0x2, 0x5, 0x80, 0x0, 0x4, 0x2, 0x3, 0x8, 0x1, 0x50, 0x1727, 0xfffffbff, 0x18d, 0x0, 0x3, 0x8, 0x704d9619, 0x7, 0x31, 0xe43, 0x3, 0x1, 0xa7, 0x2, 0xb96, 0x9, 0x9, 0x2, 0x1, 0x9, 0x0, 0x1, 0x7fff, 0x51a1a785, 0x2, 0x400, 0xfffffff9], [0xff, 0xffff, 0x100, 0x15, 0x2, 0xffff, 0x0, 0x800, 0xc, 0x2, 0x0, 0x7, 0x8, 0x7, 0xfffffffa, 0xa, 0x7ff, 0x7, 0x8, 0xffffffff, 0x2, 0x1, 0x4, 0x6e, 0x3, 0x15, 0x2, 0x5, 0xc6, 0x7fff, 0x3, 0x6, 0x3, 0x8, 0x7f, 0xe5, 0x8, 0x3, 0x8, 0x200, 0x1, 0xb, 0x7, 0x8, 0x4, 0x1ff, 0x42c, 0x4e, 0x7, 0x7, 0x2f, 0x2, 0x0, 0x8, 0x4, 0x401, 0x2, 0x6, 0xe, 0x2257, 0xfffffffd, 0x0, 0x200, 0x1b]}, 0x45c) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x1001, 0x3}, @fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) write$cgroup_int(r6, &(0x7f0000000040)=0x7f, 0x12) 8.760216422s ago: executing program 0 (id=635): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/sync_on_suspend', 0x200, 0x0) read$FUSE(r0, &(0x7f0000001140)={0x2020}, 0x2020) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) read(r1, &(0x7f0000000000)=""/175, 0xfffffe14) 8.613145264s ago: executing program 0 (id=636): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000380)={0x2, &(0x7f0000000200)=[{0x9d6f, 0x5, 0x6, 0x6}, {0x4, 0x0, 0x5}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000740)={0x2, &(0x7f0000000700)=[{0x6, 0x7, 0x7f, 0x9}, {0x9, 0x1, 0x40}]}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0xff0a, 0x0) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1c76e3, 0x40) write$binfmt_register(r2, &(0x7f0000000600)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x4000000000006, 0x3a, 'E', 0x3a, 'P{\xc3m\x1ad^', 0x3a, './file0/file0', 0x3a, [0x50]}, 0x36) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r6, &(0x7f0000000100)='reno\x00', 0x5) write$tcp_congestion(r6, &(0x7f0000000300)='reno\x00', 0x5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) write(r4, &(0x7f0000000640)="e216dc538487c8722d4cabbfe3b4589b1241fb956e6f7307ef48f7909fd0f6740b10e147721673bbf149da1ed147f2e08ea9cb6f48eb2ac61bc3f463062079883fdf2c134f4e7bfca74ff1cfc98e045ba4d00719b81b276dd119811caebe953729ad88e9c7c41eceff5129c4f2f14fc0f882e986028e5f2bc60c46b483493485aa64161ef39eba285fcf", 0x8a) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x6}]}) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000240)={0x2, r5}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r9, 0x4068aea3, &(0x7f0000000040)={0xb6, 0x2}) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/241, 0xf1, 0x0, 0x2}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}, @acquire_done={0x40106309, 0x2}, @release={0x40046306, 0x3}], 0x9d, 0x0, &(0x7f0000000440)="86a26c9da618d909bce30b7cf1cd8e3cd67bebed2f51f050b192202dc79a841f2307e8a18d200c24f92523c2e73cd5d0392854de671d87310511c3173d65868163dae6dca81ce9330e7f8083114ca0336d334fce1f60203ec29a53e0f3109b5f95a1f5a20b1ee8f1d39b9660a40c44c98093ce8a73170e7bde42b3d6635738d31f142a3cc29ae231a13c3312602d24a87dd2633985828593c874478e39"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xfffffd93, 0x0, &(0x7f0000000300)="9a29cd1fb4ccd347afc934b1ef3922299c16637f5766dd4f2e5497f28b98b220ceaa8df22e1f4e2e83f31d76ecb812966cb2cc5590b2dbd9496a895f52df578a2b2897f00914e3bfa2b9ea55c39cd5b7"}) 7.727775708s ago: executing program 0 (id=645): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0x80ffffff}, {0x6}]}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x8, 0x2010, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v\x0e\x1d\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c7\xa7\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\xfd\xba|\xa3\xd9\xb2].]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\b\x00\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16\x03\x00\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7P\xfb\xfc\xfa\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00\x03\xb6\ny\x8cP\xbcQ\x98wZ]\x9f\x16l\xd7\'\x06\xc9O{tSh\x8cWiD:\x1fDaqb\xc7\xf7+K:\xde\xa8U\xbcPw\xa4\xe5\x12\xea\xa2c\xdfX:\xf6') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\x00\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r\xba\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00'/468) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) write$UHID_INPUT(r3, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) 7.628845399s ago: executing program 0 (id=647): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) (async) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) (async) ioctl$BLKRRPART(r2, 0x125f, 0x0) 7.58097475s ago: executing program 0 (id=648): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xb0, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac1"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7.397074023s ago: executing program 0 (id=650): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x45809000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000300)=&(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1, 0x80, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, {0xffff1000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x1, 0x0, 0x1, 0x8, 0x4}, {0x1000, 0xd000, 0x0, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xe000, 0x5000, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x4, 0xfd, 0x0, 0x0, 0x0, 0x5}, {0x2000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x100, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 1.792455361s ago: executing program 2 (id=687): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161001, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000086"]) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xa70, 0x0, 0x3}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x1f) close(r4) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r4, 0xff03, 0x0) close(0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af0000002c"]) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x300000000000, 0x1, 0xfffffffffffffffe, 0x2, 0x0, 0xffffffffffffffff, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x0, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f00000014c0)={0x2020}, 0x2020) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x00') 1.579579595s ago: executing program 2 (id=689): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_GET_DEVICE_ATTR_vm(r2, 0x4018aee2, &(0x7f00000000c0)=@attr_other={0x0, 0x9, 0x81, &(0x7f0000000080)=0x8000000000000001}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008404"]) r4 = mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r4}], 0xfffffffffffffeec, 0x0, &(0x7f0000000140)="f3"}) close(r0) 1.333316869s ago: executing program 2 (id=691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000200)=0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x7) close(0x3) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 1.024799373s ago: executing program 32 (id=567): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x20, 0x0}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [0x0, 0x0, 0x3]}, 0x45c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000680)={0xa8, 0x0, 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002}]}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x109000, 0x0) read$FUSE(r6, &(0x7f00000011c0)={0x2020}, 0x2020) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xd) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0xffffffffffffffff}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000700)={'syz0\x00', {0x0, 0x4, 0x9, 0x1}, 0x2c, [0x217fdf04, 0x6, 0x4, 0x1, 0x7fffffff, 0x0, 0x9, 0x1637, 0x7, 0x6, 0x9, 0x200, 0xffffffff, 0x400, 0x4800000, 0x1, 0x6, 0x2, 0x81, 0x3, 0x0, 0x26, 0x6, 0x4c, 0x7b82ef1, 0x80, 0x593, 0xfffffffd, 0x9, 0xc867, 0x2, 0x1, 0x0, 0x1, 0x2, 0x7fff, 0x6, 0x3465, 0xb, 0x2, 0x9, 0x3, 0xeba, 0x40, 0x10001, 0x5, 0x9, 0xfffffffd, 0x0, 0x80000000, 0x3ff, 0x3, 0xca78, 0x153f, 0xe298, 0x6, 0xe3, 0xffffffff, 0xb192, 0x5a9, 0x70, 0xffffff82, 0x6, 0x5], [0xfffffffe, 0x0, 0x5, 0xc, 0x4, 0x7f, 0x6, 0x7, 0x6, 0x0, 0x6, 0x5, 0x4, 0x9, 0xc, 0x7, 0x3, 0x8001, 0x9, 0x3ff, 0xffffffff, 0x4, 0x7, 0x2, 0x9, 0x3, 0x5, 0x2, 0x5, 0x0, 0x5, 0x9, 0x6, 0x307, 0x2, 0x0, 0x4, 0x897, 0x200, 0x0, 0x1, 0xc, 0x3, 0x401, 0x10001, 0xe, 0x5, 0x1, 0x6, 0x6, 0xffffff81, 0x8, 0x80, 0x9, 0x0, 0x8, 0x6d0, 0x7, 0xfffffff9, 0x9e0, 0x71, 0x2, 0xffffff0d, 0x2], [0x10000000, 0x8, 0x0, 0x5, 0x7, 0x7, 0xf, 0x1, 0x1, 0x4, 0x4, 0x0, 0x3, 0x54, 0x3, 0x28b897a3, 0x0, 0xfffffffb, 0x1, 0x65, 0xdf5c, 0x3ff, 0xd, 0x3a95, 0xac, 0x9fa, 0x8, 0x2, 0x5, 0x80, 0x0, 0x4, 0x2, 0x3, 0x8, 0x1, 0x50, 0x1727, 0xfffffbff, 0x18d, 0x0, 0x3, 0x8, 0x704d9619, 0x7, 0x31, 0xe43, 0x3, 0x1, 0xa7, 0x2, 0xb96, 0x9, 0x9, 0x2, 0x1, 0x9, 0x0, 0x1, 0x7fff, 0x51a1a785, 0x2, 0x400, 0xfffffff9], [0xff, 0xffff, 0x100, 0x15, 0x2, 0xffff, 0x0, 0x800, 0xc, 0x2, 0x0, 0x7, 0x8, 0x7, 0xfffffffa, 0xa, 0x7ff, 0x7, 0x8, 0xffffffff, 0x2, 0x1, 0x4, 0x6e, 0x3, 0x15, 0x2, 0x5, 0xc6, 0x7fff, 0x3, 0x6, 0x3, 0x8, 0x7f, 0xe5, 0x8, 0x3, 0x8, 0x200, 0x1, 0xb, 0x7, 0x8, 0x4, 0x1ff, 0x42c, 0x4e, 0x7, 0x7, 0x2f, 0x2, 0x0, 0x8, 0x4, 0x401, 0x2, 0x6, 0xe, 0x2257, 0xfffffffd, 0x0, 0x200, 0x1b]}, 0x45c) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x1001, 0x3}, @fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) write$cgroup_int(r6, &(0x7f0000000040)=0x7f, 0x12) 730.370058ms ago: executing program 1 (id=697): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000280)={0xd5, 0x0, 0x10}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FIONREAD(r2, 0x541b, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000480)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff7, 0xfffffffffffffd80, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0x59, 0x2, 0x2}, @fd, @fda={0x66646185, 0x2, 0x1, 0x3f}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000a001000400000000feffffffffffffff"]) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x471b1000) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r8, 0x4188aec6, &(0x7f0000000040)) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) close(0x3) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) ioctl$BLKPG(r10, 0x1269, &(0x7f0000002180)={0x3, 0x0, 0x98, &(0x7f00000020c0)={0x100000001, 0xbfb, 0xc}}) mount$binderfs(0x0, &(0x7f0000000180)='./binderfs\x00', &(0x7f00000000c0), 0x10005, &(0x7f0000000040)=ANY=[@ANYRES16=r9]) r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) 658.584719ms ago: executing program 1 (id=698): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000000c0)={0x3, 0x0, 0x98, &(0x7f0000000000)={0x8000, 0x8000, 0xd}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1015, 0x2}) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000200)=ANY=[@ANYBLOB="09090dbeab8fa5596c020db1864ce56c22e4ff9a9e434d17ff5493c558339f35631c872187b3418ba7"]) r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r2}, @request_death={0x400c630e, 0x3}, @clear_death={0x400c630f, 0x3}, @increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x1}, @enter_looper, @register_looper, @acquire_done={0x40106309, 0x2}], 0x9e, 0x0, &(0x7f0000000100)="2c31e4448b7a686aafba3e2f478c6ca6944b7cf413e0c72ba0ceaf072ae600c378dea607a1a4844d5b9a66d5ad6357cda85a37299902766d6716e0d2573eed29563a4e309cb1b5b4fff656441a8a62a4c71c0d70855fde65803d8a83707481836651fd7bca5e80358a825b335262cbcea29265fd1fbc686fd65f511efd54949f2bdb069b22e54caae4a3135901b42eb78d2cc1d6ba07b08704734880e881"}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0xaea3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x100, 0x1}) 469.683802ms ago: executing program 1 (id=699): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000040), 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, &(0x7f0000000500)}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 309.096094ms ago: executing program 1 (id=700): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) (async) syz_clone3(0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x2f) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x6) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x0, 0xeeee8000, 0x2000, &(0x7f0000004000/0x2000)=nil}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async, rerun: 32) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0) (rerun: 32) write$UHID_GET_REPORT_REPLY(r7, &(0x7f0000000000), 0xa) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x98, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/225, 0xe1, 0x0, 0xd}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/72, 0x48, 0x2, 0x4}, @fd={0x66642a85, 0x0, r7}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 308.809894ms ago: executing program 2 (id=701): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001200), 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000034fc52000000000000000000000000000e0283ec40c0a3ecc658e85c14c4053ee967f97040a6dfc27eaf3536443017bf3816943588651fdf2c28f47fb7ad71780c8763cbc02bdfc727a4a3d29215f7e8f8f678f26c0e2e95"]) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000040)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT, @ANYRES16=r2]) openat$uinput(0xffffffffffffff9c, &(0x7f0000001200), 0x802, 0x0) (async) write$uinput_user_dev(r0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000034fc52000000000000000000000000000e0283ec40c0a3ecc658e85c14c4053ee967f97040a6dfc27eaf3536443017bf3816943588651fdf2c28f47fb7ad71780c8763cbc02bdfc727a4a3d29215f7e8f8f678f26c0e2e95"]) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000040)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT, @ANYRES16=r2]) (async) 298.032974ms ago: executing program 1 (id=702): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) r4 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040), 0x12) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000540)=[@dead_binder_done, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x26, 0x700000000000000, 0x0}) 139.478447ms ago: executing program 1 (id=703): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffffffffffe0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000940)={{0x4, 0x0, 0x3ff, 0xa}, 'syz1\x00', 0x2001b}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000840)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQeDM\x19\x1a@\xbd\xfc\"\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xfa\xa6c\x03\x13\xf5o\xa2\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x02\x00\x00\x00\x00\x00\x00\x00\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xce\xd3\xe2\t\xd5yr=\xd4M\xe2\xc5\xda<\xa5\xd5\x17\x10\xf7(\xde1\xe8\xdc%\xc0\xbe\x7f7\xdb\x85[\xac\x8d\x8d\xe2l\xbdGK\xbd') 5.331869ms ago: executing program 2 (id=704): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x454202, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 0s ago: executing program 2 (id=705): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000280)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000096000040"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. [ 21.577502][ T36] audit: type=1400 audit(1750403231.739:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.578593][ T281] cgroup: Unknown subsys name 'net' [ 21.600815][ T36] audit: type=1400 audit(1750403231.739:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.627761][ T36] audit: type=1400 audit(1750403231.769:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.627996][ T281] cgroup: Unknown subsys name 'devices' [ 21.835767][ T281] cgroup: Unknown subsys name 'hugetlb' [ 21.841392][ T281] cgroup: Unknown subsys name 'rlimit' [ 22.013544][ T36] audit: type=1400 audit(1750403232.179:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.036752][ T36] audit: type=1400 audit(1750403232.179:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.057225][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.061731][ T36] audit: type=1400 audit(1750403232.179:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.093299][ T36] audit: type=1400 audit(1750403232.239:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.109142][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.118961][ T36] audit: type=1400 audit(1750403232.239:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.153197][ T36] audit: type=1400 audit(1750403232.269:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.179085][ T36] audit: type=1400 audit(1750403232.269:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.955682][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.962815][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.969968][ T290] bridge_slave_0: entered allmulticast mode [ 22.976422][ T290] bridge_slave_0: entered promiscuous mode [ 22.988118][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.995382][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.002537][ T290] bridge_slave_1: entered allmulticast mode [ 23.008863][ T290] bridge_slave_1: entered promiscuous mode [ 23.024225][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.031263][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.038400][ T288] bridge_slave_0: entered allmulticast mode [ 23.044563][ T288] bridge_slave_0: entered promiscuous mode [ 23.059904][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.067019][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.074250][ T288] bridge_slave_1: entered allmulticast mode [ 23.080402][ T288] bridge_slave_1: entered promiscuous mode [ 23.092708][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.099754][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.106877][ T289] bridge_slave_0: entered allmulticast mode [ 23.113063][ T289] bridge_slave_0: entered promiscuous mode [ 23.125236][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.132370][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.139675][ T291] bridge_slave_0: entered allmulticast mode [ 23.145946][ T291] bridge_slave_0: entered promiscuous mode [ 23.152329][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.159416][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.166515][ T289] bridge_slave_1: entered allmulticast mode [ 23.172683][ T289] bridge_slave_1: entered promiscuous mode [ 23.184722][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.191766][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.198880][ T291] bridge_slave_1: entered allmulticast mode [ 23.205059][ T291] bridge_slave_1: entered promiscuous mode [ 23.342393][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.349462][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.356736][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.363838][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.374930][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.381989][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.389325][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.396416][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.405462][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.412488][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.419790][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.426832][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.464814][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.471965][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.479516][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.486656][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.515092][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.523244][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.530669][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.538663][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.545871][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.553451][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.560630][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.568114][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.581729][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.588896][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.596829][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.604255][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.619862][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.627438][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.647471][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.654548][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.663431][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.670477][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.685545][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.692590][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.726228][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.733581][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.741498][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.748596][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.761025][ T289] veth0_vlan: entered promiscuous mode [ 23.777368][ T291] veth0_vlan: entered promiscuous mode [ 23.787118][ T289] veth1_macvtap: entered promiscuous mode [ 23.810425][ T288] veth0_vlan: entered promiscuous mode [ 23.817293][ T291] veth1_macvtap: entered promiscuous mode [ 23.827289][ T290] veth0_vlan: entered promiscuous mode [ 23.844886][ T290] veth1_macvtap: entered promiscuous mode [ 23.865998][ T288] veth1_macvtap: entered promiscuous mode [ 23.898360][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.942813][ T308] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.054021][ T327] input: syz0 as /devices/virtual/input/input5 [ 24.098554][ T334] kvm: user requested TSC rate below hardware speed [ 24.109844][ T334] rust_binder: Write failure EFAULT in pid:11 [ 24.253846][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 24.484363][ T350] binder: Unknown parameter 'fscontext?}/profiling' [ 24.626509][ T359] tun0: tun_chr_ioctl cmd 1074025675 [ 24.632444][ T359] tun0: persist disabled [ 24.638276][ T359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:18 [ 24.643185][ T359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 24.652567][ T359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 25.043313][ T381] binfmt_misc: register: failed to install interpreter file ./file0 [ 25.063412][ T381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 25.178381][ T389] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 25.185580][ T391] syz.0.27: attempt to access beyond end of device [ 25.185580][ T391] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 25.187961][ T389] rust_binder: Write failure EINVAL in pid:32 [ 25.296070][ T395] rust_binder: Error in use_page_slow: ESRCH [ 25.302074][ T396] binder: Unknown parameter 'processor : 0 [ 25.302074][ T396] vendor_id : GenuineIntel [ 25.302074][ T396] cpu family : 6 [ 25.302074][ T396] model : 79 [ 25.302074][ T396] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 25.302074][ T396] stepping : 0 [ 25.302074][ T396] microcode : 0xffffffff [ 25.302074][ T396] cpu MHz : 2200.238 [ 25.302074][ T396] cache size : 56320 KB [ 25.302074][ T396] physical id : 0 [ 25.302074][ T396] siblings : 2 [ 25.302074][ T396] core id : 0 [ 25.302074][ T396] cpu cores : 1 [ 25.302074][ T396] apicid : 0 [ 25.302074][ T396] cgroup.controllers' [ 25.304376][ T395] rust_binder: use_range failure ESRCH [ 25.367356][ T395] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 25.372925][ T395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 25.381148][ T395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:36 [ 25.560660][ T400] rust_binder: inc_ref_done called when no active inc_refs [ 25.570424][ T401] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 25.763526][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 25.777255][ T426] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 25.784223][ T426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 25.784244][ T426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:48 [ 26.048234][ T429] rust_binder: Write failure EFAULT in pid:24 [ 26.164946][ T431] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 26.292722][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 26.313719][ T435] binder: Bad value for 'stats' [ 26.338783][ T440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 26.339111][ T440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 26.353045][ T440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 26.423202][ T447] rust_binder: Write failure EINVAL in pid:15 [ 26.601874][ T455] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 26.608304][ T455] rust_binder: Read failure Err(EFAULT) in pid:17 [ 26.722214][ T462] rust_binder: Write failure EFAULT in pid:39 [ 26.741844][ T464] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:39 [ 26.748112][ T466] tap0: tun_chr_ioctl cmd 1074025678 [ 26.763902][ T466] tap0: group set to 0 [ 26.783085][ T468] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 26.783107][ T468] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 26.791222][ T468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:22 [ 26.801798][ T468] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.859414][ T475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:29 [ 26.890966][ T36] kauditd_printk_skb: 84 callbacks suppressed [ 26.890981][ T36] audit: type=1400 audit(1750403237.049:158): avc: denied { read } for pid=478 comm="syz.1.55" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 26.928585][ T36] audit: type=1400 audit(1750403237.049:159): avc: denied { open } for pid=478 comm="syz.1.55" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 26.952412][ T36] audit: type=1400 audit(1750403237.109:160): avc: denied { ioctl } for pid=478 comm="syz.1.55" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 26.954499][ T480] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 26.984391][ T480] rust_binder: Write failure EINVAL in pid:31 [ 27.034653][ T482] tun0: tun_chr_ioctl cmd 1074025675 [ 27.046074][ T482] tun0: persist disabled [ 27.113038][ T490] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 27.113230][ T490] rust_binder: Failed to allocate buffer. len:48, is_oneway:false [ 27.568270][ T492] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 27.576383][ T492] rust_binder: Error while translating object. [ 27.587189][ T492] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.593395][ T492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:40 [ 27.679268][ T36] audit: type=1400 audit(1750403237.839:161): avc: denied { transfer } for pid=493 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 27.710730][ T36] audit: type=1400 audit(1750403237.869:162): avc: denied { create } for pid=495 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 27.734718][ T36] audit: type=1326 audit(1750403237.889:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=499 comm="syz.3.63" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f900038e929 code=0x0 [ 27.751083][ T500] input: syz0 as /devices/virtual/input/input7 [ 27.765398][ T500] input: failed to attach handler leds to device input7, error: -6 [ 27.804695][ T36] audit: type=1400 audit(1750403237.969:164): avc: denied { write } for pid=498 comm="syz.1.62" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.812927][ T427] Bluetooth: hci1: command 0x1003 tx timeout [ 27.828972][ T339] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 27.840211][ T504] rust_binder: Error while translating object. [ 27.840649][ T504] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 27.846982][ T504] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:50 [ 27.880822][ T36] audit: type=1400 audit(1750403238.039:165): avc: denied { setcheckreqprot } for pid=506 comm="syz.2.64" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 27.970114][ T36] audit: type=1400 audit(1750403238.129:166): avc: denied { block_suspend } for pid=511 comm="syz.0.65" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.053969][ T515] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 28.163580][ T36] audit: type=1326 audit(1750403238.329:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=520 comm="syz.1.68" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a9558e929 code=0x0 [ 28.209469][ T525] ======================================================= [ 28.209469][ T525] WARNING: The mand mount option has been deprecated and [ 28.209469][ T525] and is ignored by this kernel. Remove the mand [ 28.209469][ T525] option from the mount to silence this warning. [ 28.209469][ T525] ======================================================= [ 28.246281][ T525] binder: Unknown parameter 'coyBLV"i5ntext' [ 28.287303][ T526] binder: Bad value for 'stats' [ 28.351079][ T535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.351102][ T535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63 [ 28.396372][ T542] binder: Unknown parameter 'fscontext?}Linux!' [ 28.479983][ T549] rust_binder: Failed to allocate buffer. len:4615172634223575152, is_oneway:false [ 28.480007][ T549] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 28.489637][ T549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:76 [ 28.520536][ T552] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 28.555211][ T552] SELinux: Context o}xd is not valid (left unmapped). [ 28.733367][ T555] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 28.837976][ T570] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.846244][ T570] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.853014][ T570] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.859775][ T570] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.872707][ T570] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.879248][ T570] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.885932][ T570] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.892451][ T570] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.933251][ T574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:62 [ 29.048121][ T581] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.059553][ T581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 29.165756][ T591] rust_binder: Error while translating object. [ 29.175180][ T591] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 29.181356][ T591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:69 [ 29.234355][ T597] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 29.243371][ T597] rust_binder: Error while translating object. [ 29.254371][ T597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.260584][ T597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:80 [ 29.270962][ T597] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 29.288579][ T597] rust_binder: Write failure EINVAL in pid:80 [ 29.299860][ T600] rust_binder: Write failure EINVAL in pid:82 [ 29.400472][ T605] input: syz0 as /devices/virtual/input/input8 [ 29.414241][ T605] input: failed to attach handler leds to device input8, error: -6 [ 29.445528][ T612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:89 [ 29.491192][ T621] rust_binder: Write failure EFAULT in pid:96 [ 29.501332][ T621] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.509225][ T621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:96 [ 29.518763][ T621] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 29.527839][ T621] rust_binder: Read failure Err(EFAULT) in pid:96 [ 29.867269][ T629] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 29.874049][ T629] rust_binder: Read failure Err(EFAULT) in pid:81 [ 30.042827][ T634] rust_binder: Error while translating object. [ 30.049325][ T634] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 30.055633][ T634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:83 [ 30.081930][ T636] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.282451][ T654] rust_binder: Write failure EINVAL in pid:86 [ 30.558633][ T675] binder: Unknown parameter '' [ 30.661445][ T681] rust_binder: Error in use_page_slow: ESRCH [ 30.661469][ T681] rust_binder: use_range failure ESRCH [ 30.667668][ T681] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 30.678478][ T681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 30.686652][ T681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:93 [ 30.693418][ T683] rust_binder: Write failure EINVAL in pid:103 [ 30.717644][ T683] rust_binder: Write failure EINVAL in pid:103 [ 30.724562][ T683] rust_binder: Read failure Err(EAGAIN) in pid:103 [ 30.734315][ T685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 30.745698][ T685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:105 [ 30.756580][ T688] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.878924][ T698] rust_binder: Write failure EINVAL in pid:96 [ 30.886409][ T700] rust_binder: Error while translating object. [ 30.892593][ T700] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 30.898949][ T700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:66 [ 30.908744][ T701] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.967282][ T707] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 30.973970][ T707] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:112 [ 30.990439][ T705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:71 [ 31.030473][ T713] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 31.061584][ T716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:110 [ 31.083060][ T715] rust_binder: Error while translating object. [ 31.092518][ T715] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 31.099001][ T715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:77 [ 31.122113][ T720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 31.131405][ T720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:113 [ 31.159073][ T722] random: crng reseeded on system resumption [ 31.175625][ T720] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.177051][ T720] rust_binder: Write failure EINVAL in pid:113 [ 31.196296][ T728] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 31.202743][ T728] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:116 [ 31.223949][ T731] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 31.233193][ T731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:119 [ 31.244494][ T732] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.297567][ T740] rust_binder: Write failure EINVAL in pid:86 [ 31.333291][ T747] binder: Unknown parameter 'euid18446744073709551615' [ 31.472923][ T757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.473195][ T756] rust_binder: Error while translating object. [ 31.479785][ T756] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.486136][ T756] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126 [ 31.491967][ T758] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 31.514030][ T761] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 31.529293][ T758] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 31.529320][ T758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:95 [ 31.532441][ T761] rust_binder: Write failure EINVAL in pid:120 [ 31.567837][ T770] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.640988][ T778] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 31.648002][ T778] rust_binder: Read failure Err(EFAULT) in pid:135 [ 31.663835][ T782] rust_binder: Write failure EINVAL in pid:135 [ 31.670576][ T779] rust_binder: Write failure EINVAL in pid:135 [ 31.770915][ T791] binfmt_misc: register: failed to install interpreter file ./file0 [ 31.849203][ T794] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.925139][ T36] kauditd_printk_skb: 78 callbacks suppressed [ 31.925155][ T36] audit: type=1326 audit(1750403242.089:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=809 comm="syz.0.157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd85838e929 code=0x0 [ 32.054969][ T833] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 32.066957][ T836] rust_binder: Write failure EINVAL in pid:149 [ 32.075270][ T827] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.149448][ T847] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 32.170302][ T847] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 32.170322][ T847] rust_binder: Read failure Err(EFAULT) in pid:159 [ 32.222526][ T36] audit: type=1400 audit(1750403242.379:247): avc: denied { relabelfrom } for pid=848 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 32.248847][ T36] audit: type=1400 audit(1750403242.379:248): avc: denied { relabelto } for pid=848 comm="syz.1.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 32.344340][ T853] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 32.384506][ T860] rust_binder: Error in use_page_slow: ESRCH [ 32.384519][ T860] rust_binder: use_range failure ESRCH [ 32.390511][ T860] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 32.396044][ T860] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 32.403914][ T860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:166 [ 32.525786][ T863] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 32.525822][ T863] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:168 [ 32.667608][ T870] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.925237][ T878] rust_binder: Error while translating object. [ 32.925262][ T878] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 32.931472][ T878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:175 [ 32.997004][ T882] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 33.011957][ T882] pim6reg0: linktype set to 769 [ 33.029633][ T36] audit: type=1400 audit(1750403243.189:249): avc: denied { write } for pid=883 comm="syz.3.178" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.051547][ T36] audit: type=1400 audit(1750403243.189:250): avc: denied { remove_name } for pid=883 comm="syz.3.178" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.078225][ T36] audit: type=1400 audit(1750403243.189:251): avc: denied { unlink } for pid=883 comm="syz.3.178" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.092935][ T886] rust_binder: Write failure EINVAL in pid:142 [ 33.165300][ T891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124 [ 33.213417][ T891] rust_binder: Error while translating object. [ 33.223461][ T891] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.229642][ T891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124 [ 33.262943][ T895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145 [ 33.279404][ T898] random: crng reseeded on system resumption [ 33.279404][ T36] audit: type=1400 audit(1750403243.439:252): avc: denied { ioctl } for pid=897 comm="syz.2.183" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 33.298077][ T898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:149 [ 33.347114][ T902] rust_binder: Error while translating object. [ 33.361906][ T902] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.369709][ T902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:153 [ 33.379817][ T904] rust_binder: Write failure EINVAL in pid:181 [ 33.442816][ T908] input: syz0 as /devices/virtual/input/input11 [ 33.468333][ T911] binder: Bad value for 'stats' [ 33.482189][ T911] binder: Bad value for 'stats' [ 33.497884][ T915] binder: Unknown parameter 'fscontext?}' [ 33.528366][ T921] rust_binder: Got transaction with invalid offset. [ 33.528416][ T921] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.538607][ T921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 33.583582][ T36] audit: type=1400 audit(1750403243.749:253): avc: denied { load_policy } for pid=922 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 33.613843][ T36] audit: type=1400 audit(1750403243.779:254): avc: denied { execute } for pid=922 comm="syz.0.192" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 33.665935][ T923] rust_binder: Write failure EFAULT in pid:128 [ 33.685028][ T930] rust_binder: Write failure EFAULT in pid:192 [ 33.703938][ T36] audit: type=1400 audit(1750403243.869:255): avc: denied { ioctl } for pid=931 comm="syz.3.196" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 33.750423][ T939] __vm_enough_memory: pid: 939, comm: syz.1.198, bytes: 281474976845824 not enough memory for the allocation [ 33.867349][ T950] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 33.945174][ T961] rust_binder: Failed to allocate buffer. len:184, is_oneway:false [ 33.960779][ T964] rust_binder: Error while translating object. [ 33.972370][ T964] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 33.979165][ T964] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:159 [ 34.020849][ T973] binder: Unknown parameter 'bell' [ 34.164280][ T983] rust_binder: Error in use_page_slow: ESRCH [ 34.164301][ T983] rust_binder: use_range failure ESRCH [ 34.170298][ T983] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 34.175899][ T983] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 34.184228][ T983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:156 [ 34.232532][ T989] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 34.241652][ T989] rust_binder: Read failure Err(EFAULT) in pid:137 [ 34.262364][ T992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214 [ 34.269574][ T985] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 34.279394][ T985] rust_binder: Error in use_page_slow: EBUSY [ 34.292541][ T985] rust_binder: use_range failure EBUSY [ 34.298757][ T985] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 34.304352][ T985] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 34.312053][ T985] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 34.321491][ T985] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:214 [ 34.370060][ T997] rust_binder: Error in use_page_slow: ESRCH [ 34.378737][ T997] rust_binder: use_range failure ESRCH [ 34.384902][ T997] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 34.390493][ T997] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 34.398594][ T997] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:160 [ 34.431072][ T1000] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 34.440373][ T1000] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 34.443037][ T1004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217 [ 34.449523][ T1000] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:163 [ 34.459626][ T1002] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.480438][ T1002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217 [ 34.755021][ T1027] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 34.764351][ T1027] rust_binder: Error while translating object. [ 34.773342][ T1027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.779738][ T1027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:237 [ 34.827512][ T603] Bluetooth: hci0: Frame reassembly failed (-84) [ 34.851543][ T1034] Bluetooth: hci0: Frame reassembly failed (-84) [ 34.991404][ T1041] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 35.145054][ T1054] SELinux: security_context_str_to_sid () failed with errno=-22 [ 35.212708][ T1056] rust_binder: Write failure EINVAL in pid:177 [ 35.263848][ T1064] kvm: kvm [1062]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253 [ 35.282478][ T1064] rust_binder: Failed to allocate buffer. len:88, is_oneway:false [ 35.383396][ T1071] rust_binder: Write failure EFAULT in pid:156 [ 35.397733][ T1072] rust_binder: Write failure EINVAL in pid:251 [ 35.404269][ T1072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251 [ 35.410739][ T1072] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.547512][ T1082] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 35.730313][ T1089] rust_binder: Write failure EINVAL in pid:187 [ 36.108877][ T1125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:285 [ 36.115208][ T1125] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 36.124587][ T1125] rust_binder: Read failure Err(EFAULT) in pid:285 [ 36.233906][ T1141] rust_binder: Write failure EFAULT in pid:210 [ 36.277266][ T1154] binder: Bad value for 'defcontext' [ 36.378564][ T1172] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 36.386029][ T1170] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.386294][ T1170] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 36.392439][ T1172] rust_binder: Write failure EINVAL in pid:297 [ 36.436898][ T1168] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 36.443181][ T1168] rust_binder: Error in use_page_slow: EBUSY [ 36.453719][ T1168] rust_binder: use_range failure EBUSY [ 36.459741][ T1168] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 36.465348][ T1168] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 36.473158][ T1168] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 36.483049][ T1168] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:224 [ 36.721913][ T1191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:172 [ 36.730475][ T1191] rust_binder: Error while translating object. [ 36.739848][ T1191] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.746200][ T1191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:172 [ 36.779957][ T1196] binder: Unknown parameter 'non' [ 36.814647][ T1204] rust_binder: Write failure EFAULT in pid:316 [ 36.815136][ T1204] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 36.821743][ T1205] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 36.823561][ T1206] rust_binder: Error while translating object. [ 36.847304][ T1206] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 36.848079][ T1210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:320 [ 36.853582][ T427] Bluetooth: hci0: command 0x1003 tx timeout [ 36.862965][ T339] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 36.872296][ T1206] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:228 [ 37.008380][ T1223] syz.3.290 (1223) used obsolete PPPIOCDETACH ioctl [ 37.018614][ T1219] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 37.024983][ T1219] rust_binder: Error in use_page_slow: EBUSY [ 37.033542][ T1221] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 37.035578][ T1219] rust_binder: use_range failure EBUSY [ 37.050412][ T1219] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 37.051299][ T1223] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 37.063609][ T1219] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 37.063680][ T1223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:322 [ 37.073321][ T1219] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 37.083024][ T1222] cgroup: fork rejected by pids controller in [ 37.092612][ T1219] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:170 [ 37.103507][ T1222] /syz3 [ 37.161175][ T1332] binder: Bad value for 'max' [ 37.208887][ T1335] tun0: tun_chr_ioctl cmd 1074025676 [ 37.214299][ T1335] tun0: owner set to 0 [ 37.221013][ T1339] block device autoloading is deprecated and will be removed. [ 37.228568][ T1339] syz.2.295: attempt to access beyond end of device [ 37.228568][ T1339] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 37.242199][ T1340] syz.2.295: attempt to access beyond end of device [ 37.242199][ T1340] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 37.255752][ T1339] binder: Bad value for 'stats' [ 37.270626][ T1343] rust_binder: Write failure EINVAL in pid:181 [ 37.272681][ T12] bridge_slave_1: left allmulticast mode [ 37.289632][ T12] bridge_slave_1: left promiscuous mode [ 37.295401][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.303713][ T12] bridge_slave_0: left allmulticast mode [ 37.309749][ T12] bridge_slave_0: left promiscuous mode [ 37.315640][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.352056][ T1347] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.427822][ T12] veth1_macvtap: left promiscuous mode [ 37.433605][ T12] veth0_vlan: left promiscuous mode [ 37.469406][ T1352] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.476505][ T1352] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.485373][ T1352] bridge_slave_0: entered allmulticast mode [ 37.492814][ T1352] bridge_slave_0: entered promiscuous mode [ 37.499448][ T1352] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.506895][ T1352] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.521007][ T1352] bridge_slave_1: entered allmulticast mode [ 37.527572][ T1357] rust_binder: Error in use_page_slow: ESRCH [ 37.527591][ T1357] rust_binder: use_range failure ESRCH [ 37.534852][ T1352] bridge_slave_1: entered promiscuous mode [ 37.541195][ T1357] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 37.546587][ T1357] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 37.554607][ T1357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:189 [ 37.631256][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 37.631268][ T36] audit: type=1400 audit(1750403247.789:269): avc: denied { create } for pid=1352 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.637326][ T1352] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.642718][ T36] audit: type=1400 audit(1750403247.789:270): avc: denied { write } for pid=1352 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.646516][ T1352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.668718][ T36] audit: type=1400 audit(1750403247.789:271): avc: denied { read } for pid=1352 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.674340][ T1352] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.729308][ T1352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.755618][ T603] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.764842][ T603] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.774255][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.781645][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.791712][ T603] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.799020][ T603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.828241][ T1352] veth0_vlan: entered promiscuous mode [ 37.829289][ T1366] binder: Bad value for 'max' [ 37.851876][ T1352] veth1_macvtap: entered promiscuous mode [ 37.874366][ T36] audit: type=1400 audit(1750403248.039:272): avc: denied { unmount } for pid=1352 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.896748][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.906353][ T1369] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 37.920588][ T1369] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 37.927976][ T1371] SELinux: failed to load policy [ 37.933952][ T1369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:196 [ 38.024912][ T1373] input: syz0 as /devices/virtual/input/input17 [ 38.195113][ T1382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:198 [ 38.294053][ T36] audit: type=1326 audit(1750403248.459:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1391 comm="syz.2.311" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb83618e929 code=0x0 [ 38.350395][ T1393] rust_binder: Error while translating object. [ 38.350429][ T1393] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 38.356780][ T1393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:202 [ 38.388773][ T1396] input: syz0 as /devices/virtual/input/input18 [ 38.407520][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 38.417972][ T1396] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.962685][ T1398] rust_binder: Write failure EFAULT in pid:7 [ 39.040333][ T1404] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 39.174579][ T1411] kvm: Disabled LAPIC found during irq injection [ 39.181524][ T1411] rust_binder: Write failure EINVAL in pid:206 [ 39.292676][ T36] audit: type=1326 audit(1750403249.449:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1415 comm="syz.2.319" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb83618e929 code=0x0 [ 39.395510][ T36] audit: type=1326 audit(1750403249.559:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1415 comm="syz.2.319" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb83618e929 code=0x0 [ 39.467913][ T1420] rust_binder: Error in use_page_slow: ESRCH [ 39.467934][ T1420] rust_binder: use_range failure ESRCH [ 39.474160][ T1420] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 39.479635][ T1420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 39.487650][ T1420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:23 [ 39.498671][ T1420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 39.972745][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 39.972753][ T339] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.080908][ T1425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200 [ 40.086423][ T1425] SELinux: failed to load policy [ 40.247953][ T1432] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 40.260412][ T36] audit: type=1326 audit(1750403250.419:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1433 comm="syz.3.325" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f088fd8e929 code=0x0 [ 40.313475][ T1448] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 40.319004][ T1446] rust_binder: Error while translating object. [ 40.322967][ T1446] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 40.332543][ T1446] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:26 [ 40.374637][ T36] audit: type=1326 audit(1750403250.539:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1458 comm="syz.2.332" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb83618e929 code=0x0 [ 40.416450][ T1462] random: crng reseeded on system resumption [ 40.416455][ T36] audit: type=1400 audit(1750403250.579:278): avc: denied { append } for pid=1461 comm="syz.0.333" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 40.452743][ T427] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 40.455952][ T1466] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.458843][ T1466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238 [ 40.464265][ T1462] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 40.488739][ T1462] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 40.497011][ T1462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:209 [ 40.527337][ T1474] rust_binder: Error in use_page_slow: ESRCH [ 40.527354][ T1474] rust_binder: use_range failure ESRCH [ 40.533393][ T1474] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 40.539058][ T1474] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 40.548789][ T1474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:211 [ 40.562632][ T1469] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 40.572483][ T1469] rust_binder: Error in use_page_slow: EBUSY [ 40.583067][ T1469] rust_binder: use_range failure EBUSY [ 40.589225][ T1469] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 40.594763][ T1469] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 40.602613][ T1469] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 40.612094][ T1469] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:245 [ 40.658399][ T1485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:219 [ 40.767782][ T1498] binder: Unknown parameter '18446744073709551615' [ 40.802369][ T1500] rust_binder: Write failure EINVAL in pid:251 [ 40.943039][ T1504] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 40.949345][ T1504] rust_binder: Read failure Err(EFAULT) in pid:229 [ 40.977643][ T1519] input: syz0 as /devices/virtual/input/input21 [ 41.145849][ T1530] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 41.196429][ T1539] rust_binder: Error while translating object. [ 41.196459][ T1539] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.202933][ T1539] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238 [ 41.238765][ T1545] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 41.258834][ T1542] binder: Bad value for 'defcontext' [ 41.277664][ T1547] SELinux: failed to load policy [ 41.396622][ T1553] rust_binder: Error while translating object. [ 41.396674][ T1553] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 41.403102][ T1553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:39 [ 41.535493][ T1558] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 41.553820][ T1558] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 41.710972][ T1570] syz.1.367: attempt to access beyond end of device [ 41.710972][ T1570] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 41.763716][ T1576] rust_binder: Write failure EINVAL in pid:258 [ 41.764129][ T1576] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 41.770382][ T1576] rust_binder: Read failure Err(EFAULT) in pid:258 [ 41.824733][ T1579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:261 [ 42.006768][ T1588] rust_binder: Write failure EFAULT in pid:270 [ 42.183758][ T1591] rust_binder: Write failure EINVAL in pid:273 [ 42.305239][ T1592] cgroup: fork rejected by pids controller in /syz2 [ 42.448144][ T1711] input: syz0 as /devices/virtual/input/input22 [ 42.454538][ T1711] input: failed to attach handler leds to device input22, error: -6 [ 42.485231][ T12] bridge_slave_1: left allmulticast mode [ 42.491476][ T12] bridge_slave_1: left promiscuous mode [ 42.497480][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.505447][ T12] bridge_slave_0: left allmulticast mode [ 42.511241][ T12] bridge_slave_0: left promiscuous mode [ 42.518162][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.637580][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 42.637598][ T36] audit: type=1400 audit(1750403252.799:283): avc: denied { mounton } for pid=1720 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 42.668296][ T1721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:290 [ 42.669141][ T1717] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 42.678887][ T1717] rust_binder: Error in use_page_slow: EBUSY [ 42.689582][ T1717] rust_binder: use_range failure EBUSY [ 42.695620][ T1717] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 42.701165][ T1717] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 42.708953][ T1717] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 42.718465][ T1717] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:290 [ 42.732851][ T1720] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.748195][ T1720] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.755425][ T1720] bridge_slave_0: entered allmulticast mode [ 42.761728][ T1720] bridge_slave_0: entered promiscuous mode [ 42.768754][ T12] veth1_macvtap: left promiscuous mode [ 42.775036][ T12] veth0_vlan: left promiscuous mode [ 42.797096][ T1726] rust_binder: Write failure EINVAL in pid:255 [ 42.846982][ T1720] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.863226][ T1720] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.870434][ T1720] bridge_slave_1: entered allmulticast mode [ 42.887540][ T1720] bridge_slave_1: entered promiscuous mode [ 42.944952][ T1736] binder: Unknown parameter 'nXI' [ 42.974671][ T1720] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.981780][ T1720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.989187][ T1720] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.996274][ T1720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.017527][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.024895][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.045421][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.052512][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.066380][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.073475][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.092617][ T1720] veth0_vlan: entered promiscuous mode [ 43.103748][ T1720] veth1_macvtap: entered promiscuous mode [ 43.174062][ T1749] kvm: user requested TSC rate below hardware speed [ 43.182189][ T1749] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.182216][ T1749] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.284162][ T1755] rust_binder: Error while translating object. [ 43.287655][ T36] audit: type=1326 audit(1750403253.449:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1756 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088fd8e929 code=0x7ffc0000 [ 43.291211][ T1755] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 43.297463][ T36] audit: type=1326 audit(1750403253.449:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1756 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088fd8e929 code=0x7ffc0000 [ 43.325532][ T1755] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:303 [ 43.336878][ T36] audit: type=1326 audit(1750403253.449:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1756 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f088fd8e929 code=0x7ffc0000 [ 43.381478][ T1763] input: syz0 as /devices/virtual/input/input25 [ 43.388281][ T36] audit: type=1326 audit(1750403253.449:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1756 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088fd8e929 code=0x7ffc0000 [ 43.426345][ T1769] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:308 [ 43.426451][ T36] audit: type=1326 audit(1750403253.449:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1756 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088fd8e929 code=0x7ffc0000 [ 43.463415][ T36] audit: type=1326 audit(1750403253.449:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1756 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f088fd8e929 code=0x7ffc0000 [ 43.487220][ T1773] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71 [ 43.491154][ T1773] rust_binder: Error while translating object. [ 43.500912][ T36] audit: type=1326 audit(1750403253.449:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1756 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088fd8e929 code=0x7ffc0000 [ 43.507543][ T1773] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.534091][ T36] audit: type=1326 audit(1750403253.449:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1756 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f088fd8e929 code=0x7ffc0000 [ 43.539317][ T1773] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71 [ 43.552696][ T36] audit: type=1326 audit(1750403253.449:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1756 comm="syz.3.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088fd8e929 code=0x7ffc0000 [ 43.588432][ T1779] rust_binder: Write failure EFAULT in pid:262 [ 43.612781][ T1781] input: syz0 as /devices/virtual/input/input26 [ 43.669745][ T1788] rust_binder: Error while translating object. [ 43.669782][ T1788] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 43.676219][ T1788] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:269 [ 43.708910][ T1797] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.718238][ T1797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 43.733649][ T1792] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 43.758393][ T1793] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 43.767715][ T1802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:81 [ 43.769002][ T1802] rust_binder: Read failure Err(EFAULT) in pid:81 [ 43.781151][ T1792] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 43.789946][ T1775] rust_binder: Read failure Err(EFAULT) in pid:6 [ 43.797960][ T1793] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 43.853721][ T1810] rust_binder: Error while translating object. [ 43.853750][ T1810] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.859941][ T1810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 43.870060][ T1810] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.024944][ T1848] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 44.033446][ T1848] rust_binder: Write failure EINVAL in pid:289 [ 44.048941][ T1852] rust_binder: Failed to allocate buffer. len:4294968312, is_oneway:false [ 44.060751][ T1852] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 44.073170][ T1857] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 44.080657][ T1860] binder: Bad value for 'defcontext' [ 44.084275][ T1852] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:20 [ 44.096386][ T1857] rust_binder: Write failure EINVAL in pid:291 [ 44.162444][ T1870] SELinux: failed to load policy [ 44.235878][ T1880] tap0: tun_chr_ioctl cmd 1074025677 [ 44.241310][ T1880] tap0: linktype set to 776 [ 45.527796][ T1889] block device autoloading is deprecated and will be removed. [ 45.544797][ T1893] kvm: vcpu 0: requested 16 ns lapic timer period limited to 200000 ns [ 45.553636][ T1893] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 45.621263][ T1900] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 45.748700][ T1929] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 45.748726][ T1929] rust_binder: Error while translating object. [ 45.760312][ T1929] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.762835][ T1926] rust_binder: Error in use_page_slow: ESRCH [ 45.767036][ T1929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:306 [ 45.790770][ T1926] rust_binder: use_range failure ESRCH [ 45.802801][ T1926] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 45.808661][ T1926] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 45.817277][ T1926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:124 [ 45.886925][ T1933] binder: Unknown parameter 'memory.events' [ 45.904600][ T1939] rust_binder: Got transaction with invalid offset. [ 45.904647][ T1939] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.911376][ T1939] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:308 [ 46.014694][ T1946] binder: Bad value for 'defcontext' [ 46.109032][ T1951] binder: Bad value for 'stats' [ 46.142909][ T1956] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 46.142935][ T1956] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 46.150953][ T1956] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:330 [ 46.286407][ T1974] binfmt_misc: register: failed to install interpreter file ./cgroup [ 46.288329][ T1971] binder: Unknown parameter '' [ 46.366834][ T1980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:340 [ 46.443562][ T1982] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 46.562750][ T1990] input: syz0 as /devices/virtual/input/input28 [ 46.720768][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 46.738905][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 46.762707][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 46.770140][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 46.775424][ T2010] rust_binder: Write failure EFAULT in pid:156 [ 46.783091][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 46.784257][ T2012] rust_binder: Error while translating object. [ 46.789296][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 46.811934][ T2012] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 46.811964][ T2012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:56 [ 46.823560][ T2016] rust_binder: Error while translating object. [ 46.832440][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 46.832916][ T2016] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.838926][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 46.846360][ T2016] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 46.870764][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 46.893791][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 46.909469][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 46.927988][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 46.936570][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 46.944987][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 46.952415][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 46.960486][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 46.972164][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 46.979938][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 46.987741][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 46.995933][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.012788][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.020332][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.042747][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.050194][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.072750][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.089339][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.097165][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.122765][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.130224][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.149515][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.158451][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.170502][ T2043] binder: Bad value for 'max' [ 47.175340][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.185335][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.192958][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.207790][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.222763][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.230206][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.247012][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.270004][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.282199][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.291269][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.299070][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.317797][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.325576][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.333395][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.340964][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.348695][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.356872][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.364490][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.372085][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.380087][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.395834][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.403624][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.411049][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.419532][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.427171][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.435420][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.452249][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.462922][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.470414][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.484931][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.492880][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.500736][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.509106][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.517244][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.525302][ T2063] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 47.525327][ T2063] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 47.537392][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.552827][ T2063] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 47.561438][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.579546][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.587952][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.596029][ T2072] SELinux: policydb version -1252649838 does not match my version range 15-33 [ 47.605651][ T2072] SELinux: failed to load policy [ 47.610714][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.618524][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.627684][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.635596][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.645484][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.654190][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.662032][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.670045][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.677863][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.686096][ T2074] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 47.697822][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.722945][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.730525][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.738988][ T2078] input: syz0 as /devices/virtual/input/input29 [ 47.740630][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.759615][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.771630][ T2078] SELinux: failed to load policy [ 47.772742][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.792745][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.800558][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.813088][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.831360][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.839581][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.849013][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.862724][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.872883][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.882859][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.892781][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.902717][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.915865][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.932725][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.940231][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.952718][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.960175][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.977776][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 47.992708][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.000204][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.009255][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.022866][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.032909][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.040336][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.057960][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.065903][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.079286][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.086998][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.094603][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.102047][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.109741][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.117544][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.125389][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.133535][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.141186][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.149044][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.156769][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.164427][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.173187][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.180742][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.188448][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.196555][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.204329][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.211872][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.219951][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.231395][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.239473][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.247150][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.254842][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.262313][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.271994][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.280060][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.287829][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.296099][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.303762][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.311278][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.320575][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.329248][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.329264][ T2094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:81 [ 48.336943][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.353859][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.362939][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.371838][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.380895][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.388638][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.389692][ T2094] rust_binder: Error while translating object. [ 48.396389][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.400579][ T2094] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.402979][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.427242][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.432134][ T2094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:81 [ 48.434864][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.455529][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.463192][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.477962][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.487186][ T2099] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 48.496100][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.504440][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.515141][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.524610][ T2099] binder: Bad value for 'max' [ 48.529412][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.542394][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.559217][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.567012][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.582461][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.590139][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.597811][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.618198][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.625707][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.633565][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.641074][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.648791][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.656428][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.664073][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.671569][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.688422][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.696506][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.704425][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.711898][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.720287][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.727950][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.738556][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.747262][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.754983][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.762393][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.770101][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.785587][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.795386][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.803255][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.810793][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.818630][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.826418][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.834188][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.841751][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.849543][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.857617][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.868291][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.884322][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.885477][ T2110] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 48.891786][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.910584][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.918617][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.922173][ T2110] rust_binder: Write failure EINVAL in pid:89 [ 48.926315][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.946251][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.954048][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.961645][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 48.964825][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 48.964841][ T36] audit: type=1326 audit(1750403259.119:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2113 comm="syz.2.507" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc87e18e929 code=0x0 [ 48.969257][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 49.006104][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 49.022780][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 49.036890][ T2117] rust_binder: Error while translating object. [ 49.036927][ T2117] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 49.042266][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 49.052723][ T2117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:92 [ 49.060103][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 49.087261][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 49.095515][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 49.103191][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 49.110646][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 49.118136][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 49.125629][ T31] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 49.133808][ T31] hid-generic 01FF:0004:0400.0001: hidraw0: HID v0.05 Device [syz0] on syz1 [ 49.209246][ T2125] __vm_enough_memory: pid: 2125, comm: syz.3.510, bytes: 281474976845824 not enough memory for the allocation [ 49.244785][ T2126] fido_id[2126]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 49.338657][ T2137] SELinux: failed to load policy [ 49.487575][ T2144] rust_binder: Write failure EINVAL in pid:371 [ 49.487902][ T36] audit: type=1326 audit(1750403259.649:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2142 comm="syz.1.516" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a9558e929 code=0x0 [ 49.518378][ T36] audit: type=1400 audit(1750403259.669:299): avc: granted { setsecparam } for pid=2152 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 49.681609][ T2163] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 49.689283][ T2163] SELinux: failed to load policy [ 49.697033][ T2163] input input31: cannot allocate more than FF_MAX_EFFECTS effects [ 49.722757][ T2169] rust_binder: Write failure EINVAL in pid:381 [ 49.825601][ T2173] rust_binder: Got transaction with invalid offset. [ 49.831852][ T2173] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.838647][ T2173] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96 [ 49.876856][ T2179] serio: Serial port ttynull [ 49.910436][ T2180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:98 [ 49.910808][ T2181] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.928200][ T2178] cgroup: fork rejected by pids controller in /syz0 [ 49.948201][ T36] audit: type=1400 audit(1750403260.109:300): avc: denied { map } for pid=2191 comm="syz.2.532" path="/dev/ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 49.979897][ T36] audit: type=1326 audit(1750403260.139:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2287 comm="syz.2.533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc87e18e929 code=0x0 [ 50.114703][ T305] bridge_slave_1: left allmulticast mode [ 50.121011][ T305] bridge_slave_1: left promiscuous mode [ 50.126946][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.137274][ T305] bridge_slave_0: left allmulticast mode [ 50.147827][ T305] bridge_slave_0: left promiscuous mode [ 50.156954][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.292491][ T2294] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.299585][ T2294] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.306846][ T2294] bridge_slave_0: entered allmulticast mode [ 50.313055][ T2294] bridge_slave_0: entered promiscuous mode [ 50.320445][ T2294] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.327635][ T2294] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.335113][ T2294] bridge_slave_1: entered allmulticast mode [ 50.341415][ T2294] bridge_slave_1: entered promiscuous mode [ 50.348485][ T305] veth1_macvtap: left promiscuous mode [ 50.355199][ T305] veth0_vlan: left promiscuous mode [ 50.444174][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.451299][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.466348][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.473422][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.498247][ T2294] veth0_vlan: entered promiscuous mode [ 50.508394][ T2294] veth1_macvtap: entered promiscuous mode [ 50.525188][ T36] audit: type=1400 audit(1750403260.689:302): avc: denied { mount } for pid=2294 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.548905][ T36] audit: type=1400 audit(1750403260.689:303): avc: denied { mounton } for pid=2294 comm="syz-executor" path="/root/syzkaller.bX5FQq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 50.575962][ T36] audit: type=1400 audit(1750403260.689:304): avc: denied { mounton } for pid=2294 comm="syz-executor" path="/root/syzkaller.bX5FQq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=36469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 50.611964][ T36] audit: type=1400 audit(1750403260.709:305): avc: denied { mount } for pid=2294 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.635841][ T36] audit: type=1400 audit(1750403260.709:306): avc: denied { mounton } for pid=2294 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 50.679515][ T2300] rust_binder: Error while translating object. [ 50.679556][ T2300] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 50.686454][ T2300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:2 [ 50.820768][ T2304] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 50.829738][ T2304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:205 [ 50.840024][ T2304] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 50.849914][ T2304] rust_binder: Read failure Err(EFAULT) in pid:205 [ 50.862931][ T2309] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 118) [ 50.869456][ T2309] rust_binder: Error while translating object. [ 50.880443][ T2309] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.886660][ T2309] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:358 [ 51.276329][ T2325] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.277027][ T2323] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 51.392493][ T2328] SELinux: policydb version -215978476 does not match my version range 15-33 [ 51.411496][ T2328] SELinux: failed to load policy [ 51.434750][ T2329] SELinux: policydb version -215978476 does not match my version range 15-33 [ 51.444648][ T2329] SELinux: failed to load policy [ 51.612035][ T2343] SELinux: policydb magic number 0x5 does not match expected magic number 0xf97cff8c [ 51.655563][ T2343] SELinux: failed to load policy [ 51.848778][ T2360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:369 [ 51.852497][ T2361] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.040581][ T2369] rust_binder: Error while translating object. [ 52.052825][ T2369] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 52.060596][ T2369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:374 [ 52.974241][ T2404] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 53.228177][ T2412] binder: Bad value for 'stats' [ 53.734052][ T2430] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 152, size: 18446744073709551430) [ 53.734092][ T2430] rust_binder: Error while translating object. [ 53.763476][ T2430] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.769748][ T2430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:388 [ 53.788937][ T2429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22 [ 53.964139][ T36] kauditd_printk_skb: 1302 callbacks suppressed [ 53.964160][ T36] audit: type=1400 audit(1750403264.129:1609): avc: denied { read write } for pid=2294 comm="syz-executor" name="loop0" dev="devtmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.057982][ T36] audit: type=1400 audit(1750403264.129:1610): avc: denied { setattr } for pid=1352 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.099884][ T1352] audit: audit_backlog=65 > audit_backlog_limit=64 [ 54.123483][ T2440] audit: audit_backlog=65 > audit_backlog_limit=64 [ 54.142747][ T1352] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 54.144736][ T2440] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 54.150600][ T1352] audit: backlog limit exceeded [ 54.151609][ T1352] audit: audit_backlog=65 > audit_backlog_limit=64 [ 54.171089][ T36] audit: type=1400 audit(1750403264.139:1611): avc: denied { setattr } for pid=1352 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.184428][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 54.385454][ T2449] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 54.408763][ T2452] rust_binder: Write failure EINVAL in pid:398 [ 54.657696][ T2454] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 54.717570][ T2454] rust_binder: Error while translating object. [ 54.743370][ T2460] can0: slcan on ttyS3. [ 54.774879][ T2454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.774931][ T2454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29 [ 54.902722][ T2464] can0 (unregistered): slcan off ttyS3. [ 55.025610][ T2460] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 55.076207][ T2460] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 55.180692][ T2470] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 55.180720][ T2470] rust_binder: Read failure Err(EFAULT) in pid:406 [ 55.544337][ T2484] rust_binder: Write failure EFAULT in pid:34 [ 55.803905][ T2493] rust_binder: Write failure EINVAL in pid:413 [ 55.878811][ T2496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.953196][ T2497] rust_binder: Error in use_page_slow: ESRCH [ 55.953227][ T2497] rust_binder: use_range failure ESRCH [ 55.970636][ T2497] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 55.984484][ T2497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 56.015619][ T2497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:170 [ 56.181965][ T2508] random: crng reseeded on system resumption [ 56.506228][ T2508] rust_binder: Error while translating object. [ 56.506262][ T2508] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.535211][ T2508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:174 [ 56.730719][ T2532] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 57.100410][ T2541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.491570][ T2556] binfmt_misc: register: failed to install interpreter file ./file0 [ 57.615080][ T2558] rust_binder: Write failure EFAULT in pid:430 [ 57.691793][ T2560] rust_binder: Error while translating object. [ 57.714105][ T2560] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.720319][ T2560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47 [ 57.865863][ T2563] rust_binder: Error while translating object. [ 57.870291][ T2566] binder: Unknown parameter '00000000000000000000003defcontext' [ 57.895753][ T2563] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.895793][ T2563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:192 [ 58.604575][ T2587] input: syz1 as /devices/virtual/input/input99 [ 58.661128][ T2587] SELinux: failed to load policy [ 58.690904][ T309] udevd[309]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 58.838577][ T2593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200 [ 58.886397][ T2594] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.938373][ T2594] rust_binder: Error while translating object. [ 58.982701][ T36] kauditd_printk_skb: 3743 callbacks suppressed [ 58.982720][ T36] audit: type=1400 audit(1750403269.139:5236): avc: denied { setattr } for pid=1352 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.982762][ T2594] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.988913][ T36] audit: type=1400 audit(1750403269.139:5237): avc: denied { setattr } for pid=1352 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.988943][ T36] audit: type=1400 audit(1750403269.139:5238): avc: denied { read write open } for pid=1720 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.070356][ T2594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:445 [ 59.088284][ T2599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:445 [ 59.122719][ T36] audit: type=1400 audit(1750403269.139:5239): avc: denied { ioctl } for pid=1720 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.158144][ T1352] audit: audit_backlog=65 > audit_backlog_limit=64 [ 59.160406][ T1720] audit: audit_backlog=65 > audit_backlog_limit=64 [ 59.174529][ T1720] audit: audit_lost=43 audit_rate_limit=0 audit_backlog_limit=64 [ 59.182280][ T1720] audit: backlog limit exceeded [ 59.187469][ T1720] audit: audit_backlog=65 > audit_backlog_limit=64 [ 59.194130][ T36] audit: type=1400 audit(1750403269.139:5240): avc: denied { setattr } for pid=1352 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.261744][ T2602] binder: Unknown parameter 'nXI' [ 59.273195][ T2603] binder: Unknown parameter 'nXI' [ 59.370116][ T2607] rust_binder: Error while translating object. [ 59.370149][ T2607] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 59.387686][ T2607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:57 [ 59.526000][ T2612] SELinux: policydb magic number 0x6c6c6562 does not match expected magic number 0xf97cff8c [ 59.589762][ T2612] SELinux: failed to load policy [ 59.614164][ T2614] rust_binder: Write failure EFAULT in pid:59 [ 59.644707][ T2610] rust_binder: Got transaction with invalid offset. [ 59.650863][ T2610] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.692690][ T2610] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:212 [ 59.797465][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 60.010556][ T2626] rust_binder: Error while translating object. [ 60.010611][ T2626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 60.042809][ T2626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:64 [ 60.221882][ T2634] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 60.275225][ T2636] binder: Unknown parameter 'defcontext01777777777777777777777' [ 60.500666][ T2643] rust_binder: Write failure EFAULT in pid:229 [ 60.564308][ T2644] rust_binder: Error while translating object. [ 60.570726][ T2644] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 60.577760][ T2644] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:71 [ 60.614692][ T2649] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.723486][ T2652] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.731469][ T2652] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.082224][ T2660] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 61.096334][ T2660] rust_binder: Write failure EINVAL in pid:244 [ 61.719133][ T2682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:257 [ 61.812683][ T427] Bluetooth: hci0: command 0x1003 tx timeout [ 61.832690][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.840779][ T2684] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.950456][ T2687] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.029932][ T2688] rust_binder: Error while translating object. [ 62.061250][ T2688] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.076459][ T2688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:452 [ 62.284277][ T2691] rust_binder: Error while translating object. [ 62.311360][ T2691] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 62.322749][ T2691] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:263 [ 63.067038][ T2698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:458 [ 63.078980][ T2698] rust_binder: Read failure Err(EFAULT) in pid:458 [ 63.279701][ T2706] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 63.604763][ T2711] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 63.675761][ T2711] rust_binder: Write failure EINVAL in pid:272 [ 63.811384][ T2715] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 80) [ 63.823162][ T2715] rust_binder: Error while translating object. [ 63.845400][ T2715] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.852080][ T2715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:275 [ 63.997314][ T36] kauditd_printk_skb: 6284 callbacks suppressed [ 63.997337][ T36] audit: type=1400 audit(1750403274.159:11425): avc: denied { setattr } for pid=2294 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.056545][ T1352] audit: audit_backlog=65 > audit_backlog_limit=64 [ 64.072988][ T2294] audit: audit_backlog=65 > audit_backlog_limit=64 [ 64.078972][ T2726] audit: audit_backlog=65 > audit_backlog_limit=64 [ 64.080103][ T1352] audit: audit_lost=78 audit_rate_limit=0 audit_backlog_limit=64 [ 64.086723][ T36] audit: type=1400 audit(1750403274.159:11426): avc: denied { setattr } for pid=2294 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.096308][ T2294] audit: audit_lost=79 audit_rate_limit=0 audit_backlog_limit=64 [ 64.122757][ T2726] audit: audit_lost=80 audit_rate_limit=0 audit_backlog_limit=64 [ 64.127974][ T1352] audit: backlog limit exceeded [ 64.134327][ T2723] audit: audit_backlog=65 > audit_backlog_limit=64 [ 64.943727][ T2745] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:295 [ 65.114663][ T2747] rust_binder: Write failure EINVAL in pid:297 [ 65.358899][ T2751] rust_binder: Error while translating object. [ 65.374764][ T2751] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.381171][ T2751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:299 [ 65.563038][ T2753] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 65.604984][ T2753] rust_binder: Write failure EINVAL in pid:480 [ 66.366043][ T2770] rust_binder: Read failure Err(EAGAIN) in pid:493 [ 67.054993][ T2789] rust_binder: Error in use_page_slow: ESRCH [ 67.073219][ T2789] rust_binder: use_range failure ESRCH [ 67.082712][ T2789] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 67.088210][ T2789] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 67.112764][ T2789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:314 [ 67.922726][ T2824] binder: Unknown parameter 'context' [ 68.221191][ T12] bridge_slave_1: left allmulticast mode [ 68.228643][ T12] bridge_slave_1: left promiscuous mode [ 68.241082][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.258539][ T12] bridge_slave_0: left allmulticast mode [ 68.271514][ T12] bridge_slave_0: left promiscuous mode [ 68.287473][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.359624][ T2837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 68.359686][ T2837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:529 [ 68.401757][ T12] veth1_macvtap: left promiscuous mode [ 68.416650][ T12] veth0_vlan: left promiscuous mode [ 68.523484][ T2839] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.526335][ T2839] binder: Unknown parameter ' YlLl"CMTX35c!A' [ 68.546830][ T2839] rust_binder: Write failure EINVAL in pid:531 [ 68.558456][ T2839] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.586613][ T2833] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.606977][ T2833] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.622551][ T2833] bridge_slave_0: entered allmulticast mode [ 68.631614][ T2833] bridge_slave_0: entered promiscuous mode [ 68.639897][ T2833] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.656641][ T2833] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.682746][ T2833] bridge_slave_1: entered allmulticast mode [ 68.702717][ T2844] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:533 [ 68.705152][ T2833] bridge_slave_1: entered promiscuous mode [ 68.724053][ T2844] rust_binder: Read failure Err(EFAULT) in pid:533 [ 68.789211][ T2848] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.845485][ T2851] binder: Unknown parameter 'defcontext01777777777777777777777' [ 68.906848][ T2857] rust_binder: Write failure EFAULT in pid:540 [ 69.002690][ T36] kauditd_printk_skb: 6582 callbacks suppressed [ 69.002711][ T36] audit: type=1400 audit(1750403279.159:17954): avc: denied { setattr } for pid=2294 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.074386][ T2860] rust_kernel: panicked at /syzkaller/managers/ci2-android-6-12-rust/kernel/rust/kernel/page_size_compat.rs:60:5: [ 69.074386][ T2860] attempt to add with overflow [ 69.101290][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.108494][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.112712][ T36] audit: type=1400 audit(1750403279.209:17955): avc: denied { setattr } for pid=2294 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.140518][ T91] audit: audit_backlog=65 > audit_backlog_limit=64 [ 69.143429][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.152734][ T91] audit: audit_lost=99 audit_rate_limit=0 audit_backlog_limit=64 [ 69.154175][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.161842][ T91] audit: backlog limit exceeded [ 69.162073][ T91] audit: audit_backlog=65 > audit_backlog_limit=64 [ 69.169488][ T2860] ------------[ cut here ]------------ [ 69.185947][ T2860] kernel BUG at rust/helpers/bug.c:7! [ 69.194135][ T2860] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 69.201202][ T2860] CPU: 1 UID: 0 PID: 2860 Comm: syz.1.703 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 69.202853][ T2294] audit: audit_backlog=66 > audit_backlog_limit=64 [ 69.214661][ T2860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.214678][ T2860] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 69.222833][ T2294] audit: audit_lost=100 audit_rate_limit=0 audit_backlog_limit=64 [ 69.231351][ T2860] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 10 89 82 11 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 5a 4d cb 9d 90 90 90 90 90 90 90 90 90 [ 69.231381][ T2860] RSP: 0018:ffffc9000bf9f3f0 EFLAGS: 00010246 [ 69.231398][ T2860] RAX: 000000000000008c RBX: 1ffff920017f3e80 RCX: 7fb218d46edb4000 [ 69.231412][ T2860] RDX: ffffc900015a1000 RSI: 00000000000078ab RDI: 00000000000078ac [ 69.231422][ T2860] RBP: ffffc9000bf9f3f0 R08: 0000000000000003 R09: 0000000000000004 [ 69.231431][ T2860] R10: dffffc0000000000 R11: fffffbfff0e5f224 R12: 0000000000000000 [ 69.231441][ T2860] R13: dffffc0000000000 R14: ffffc9000bf9f420 R15: ffffc9000bf9f450 [ 69.231451][ T2860] FS: 00007f1a964b96c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 69.231465][ T2860] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.231476][ T2860] CR2: 00007fc87eee86ec CR3: 000000011e216000 CR4: 00000000003526b0 [ 69.237778][ T281] audit: audit_backlog=66 > audit_backlog_limit=64 [ 69.244531][ T2860] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 69.244545][ T2860] DR3: 000000000000000c DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.244556][ T2860] Call Trace: [ 69.244563][ T2860] [ 69.244571][ T2860] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 69.272943][ T36] audit: type=1400 audit(1750403279.209:17956): avc: denied { setattr } for pid=2294 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.278400][ T2860] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 69.401468][ T2860] ? kernel_text_address+0xa9/0xe0 [ 69.406688][ T2860] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 69.420358][ T2860] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 69.426540][ T2860] ? arch_stack_walk+0x10b/0x170 [ 69.431500][ T2860] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 69.438724][ T2860] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 69.446648][ T2860] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0 [ 69.456559][ T2860] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10 [ 69.467268][ T2860] _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0xe44/0xfb0 [ 69.479711][ T2860] ? mas_wr_store_type+0x8eb/0x1ad0 [ 69.484898][ T2860] ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10 [ 69.497633][ T2860] ? mas_preallocate+0x56e/0xc60 [ 69.502560][ T2860] ? __cfi_mas_preallocate+0x10/0x10 [ 69.507906][ T2860] ? kasan_save_alloc_info+0x40/0x50 [ 69.513259][ T2860] ? __asan_memset+0x39/0x50 [ 69.517839][ T2860] mmap_region+0x1371/0x1bd0 [ 69.522840][ T2860] ? __cfi_mmap_region+0x10/0x10 [ 69.527755][ T2860] ? __kasan_check_read+0x15/0x20 [ 69.532758][ T2860] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 69.538986][ T2860] ? file_mmap_ok+0x147/0x1a0 [ 69.543722][ T2860] do_mmap+0xb6d/0x13c0 [ 69.547853][ T2860] ? __cfi_do_mmap+0x10/0x10 [ 69.552419][ T2860] ? down_write_killable+0xe9/0x2d0 [ 69.557595][ T2860] ? __cfi_down_write_killable+0x10/0x10 [ 69.563205][ T2860] vm_mmap_pgoff+0x38f/0x4e0 [ 69.567862][ T2860] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 69.572949][ T2860] ? __fget_files+0x2c5/0x340 [ 69.577606][ T2860] ksys_mmap_pgoff+0x166/0x1e0 [ 69.582475][ T2860] __x64_sys_mmap+0x121/0x140 [ 69.587223][ T2860] x64_sys_call+0x13bf/0x2ee0 [ 69.592066][ T2860] do_syscall_64+0x58/0xf0 [ 69.596574][ T2860] ? clear_bhb_loop+0x35/0x90 [ 69.601268][ T2860] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 69.607357][ T2860] RIP: 0033:0x7f1a9558e929 [ 69.611826][ T2860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.631514][ T2860] RSP: 002b:00007f1a964b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 69.640006][ T2860] RAX: ffffffffffffffda RBX: 00007f1a957b5fa0 RCX: 00007f1a9558e929 [ 69.647970][ T2860] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000701000 [ 69.655931][ T2860] RBP: 00007f1a95610b39 R08: 0000000000000003 R09: 0000000000000000 [ 69.663967][ T2860] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 69.671914][ T2860] R13: 0000000000000000 R14: 00007f1a957b5fa0 R15: 00007ffc0331eec8 [ 69.679868][ T2860] [ 69.682964][ T2860] Modules linked in: [ 69.687277][ T2860] ---[ end trace 0000000000000000 ]--- [ 69.702693][ T2860] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 69.708108][ T2860] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 10 89 82 11 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 5a 4d cb 9d 90 90 90 90 90 90 90 90 90 [ 69.728031][ T2860] RSP: 0018:ffffc9000bf9f3f0 EFLAGS: 00010246 [ 69.738979][ T2860] RAX: 000000000000008c RBX: 1ffff920017f3e80 RCX: 7fb218d46edb4000 [ 69.752682][ T2860] RDX: ffffc900015a1000 RSI: 00000000000078ab RDI: 00000000000078ac [ 69.760692][ T2860] RBP: ffffc9000bf9f3f0 R08: 0000000000000003 R09: 0000000000000004 [ 69.791765][ T2860] R10: dffffc0000000000 R11: fffffbfff0e5f224 R12: 0000000000000000 [ 69.802499][ T2860] R13: dffffc0000000000 R14: ffffc9000bf9f420 R15: ffffc9000bf9f450 [ 69.811977][ T2860] FS: 00007f1a964b96c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 69.827254][ T2860] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.835913][ T2860] CR2: 00007fc87eee86ec CR3: 000000011e216000 CR4: 00000000003526b0 [ 69.844964][ T2860] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 69.853071][ T2860] DR3: 000000000000000c DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.862077][ T2860] Kernel panic - not syncing: Fatal exception [ 69.868440][ T2860] Kernel Offset: disabled [ 69.873055][ T2860] Rebooting in 86400 seconds..