last executing test programs: 2m10.810085582s ago: executing program 2 (id=312): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000bc0)={[0xdecf, 0x4, 0x4, 0x4, 0xfd6, 0x8, 0x0, 0x4, 0x7fffffff, 0xdd9, 0x0, 0x757, 0x81, 0xf, 0x3, 0xf2b], 0x6000, 0x28100}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x103143, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c9801288363"], 0xffdd) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r2, 0x8, 0x0, 0x6}) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000c80)=ANY=[@ANYBLOB="00000006b14b000050aec6b60957a161acabe763d8750594a5ce5b7627e8c61eb7e6e6628f55b3d2311cb67cecc37a81db1f5510be935b929619f788cf86ba0f14b2a9dfbd407e696a8d36aa669d496fb252c75332c7b4193f5aa7e7a15ccd6476e8eac7d9c7d9b75acb25ee9d44a5136a04da"]) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r8 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x193080, 0x53) ioctl$KDFONTOP_GET(r8, 0x4b72, &(0x7f0000000600)={0x1, 0x0, 0x13, 0x5, 0x5b, &(0x7f0000000200)}) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f0000000640)={0x0, 0x0, @ioapic}) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r9, 0x5456, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "299547f8a09eeacac3c4130f97f2cb9dc34b04"}) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x1, 0x20010, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880), 0x0, &(0x7f0000000900), {0x2e}, &(0x7f0000000940)=""/146, 0x92, &(0x7f0000000a00)=""/255, &(0x7f0000000b00)=[r0, r0, r0, r0, r0], 0x5, {r8}}, 0x58) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[]) 2m10.644438514s ago: executing program 2 (id=316): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xfffffffffffffffe, 0x40, 0x0, 0x7, 0x2000000000044, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7, 0x1], 0x6000, 0x3c2a10}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000000000ff"]) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008c04"]) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xd0200) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffffa) (async) prctl$PR_GET_KEEPCAPS(0x7) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) (async) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async) ioctl$ASHMEM_SET_NAME(r5, 0x40087707, &(0x7f0000000cc0)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x1f\xbe\x10\x04\x97\x9d+\x81\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00'/623) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4f, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/128, 0x80, 0x2, 0x34}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x10}], 0x57, 0x0, &(0x7f00000002c0)="fde661158d4f509627c76d4df0b10b635fb7cea4d5b8b8f78224050cbdc17e7270dc884633049bde297553898cb73a2059e3d7a58bc9b2d58fe62e888ded93ce296043d7703502e44b2f041a383478e5dec928b0292403"}) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wake_lock', 0x40802, 0x122) write$FUSE_IOCTL(r6, &(0x7f0000000040)={0x20, 0x0, 0x0, {0xbbc5, 0x0, 0x5, 0x7}}, 0x20) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000040)={{0x1, 0x3}, {0x2}, 0xeb}) ioctl$ASHMEM_PURGE_ALL_CACHES(r5, 0x770a, 0x0) 2m10.524033526s ago: executing program 2 (id=319): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x4, 0x1, 0xd}, @fda={0x66646185, 0x5, 0x1, 0x18}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/96, 0x60, 0x1, 0x21}}, &(0x7f00000001c0)={0x0, 0x20, 0x40}}}], 0x5b, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b418709844294623"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m10.478843567s ago: executing program 2 (id=320): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x15) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x140, 0x0, 0x1}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffff4b, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, &(0x7f00000002c0)}) 2m10.196237371s ago: executing program 2 (id=330): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x3f00, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) 2m10.195602091s ago: executing program 2 (id=331): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x56, 0x20, 0xe}, 0x19) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0010141, 0x0, 0x3}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000001340)={[0x9, 0x9, 0x6, 0x3, 0x0, 0xfbb1, 0x1, 0xffffffffffff0001, 0x87ed, 0x2, 0x2, 0xdc5f, 0x100, 0x7, 0x12, 0x4], 0x2, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x1}], 0x5e, 0x0, &(0x7f0000000280)="27340dbe79e8af432ff4fa2360c88df5a04d8e7eeb14f8d0fab09d900a6bb5bc0f07887e054cb7693ae1fb57bdf9173c6f2dd3f6284401f0a87fa2166027d3eda04b0809ab53399e60c5169690bcaa67b7123d2729933e63d78255ba0d07"}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x769f00b363895638, 0xffffffffffffffff, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$PPPIOCGIDLE32(r5, 0x8008743f, &(0x7f0000001300)) 1m55.189415843s ago: executing program 32 (id=331): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x56, 0x20, 0xe}, 0x19) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0010141, 0x0, 0x3}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000001340)={[0x9, 0x9, 0x6, 0x3, 0x0, 0xfbb1, 0x1, 0xffffffffffff0001, 0x87ed, 0x2, 0x2, 0xdc5f, 0x100, 0x7, 0x12, 0x4], 0x2, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x1}], 0x5e, 0x0, &(0x7f0000000280)="27340dbe79e8af432ff4fa2360c88df5a04d8e7eeb14f8d0fab09d900a6bb5bc0f07887e054cb7693ae1fb57bdf9173c6f2dd3f6284401f0a87fa2166027d3eda04b0809ab53399e60c5169690bcaa67b7123d2729933e63d78255ba0d07"}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x769f00b363895638, 0xffffffffffffffff, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$PPPIOCGIDLE32(r5, 0x8008743f, &(0x7f0000001300)) 1m53.554461797s ago: executing program 0 (id=625): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIBMAP(r3, 0x1, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x0, 0x5000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x0, 0x2000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0xdddd1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x10000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async, rerun: 64) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x10000) (rerun: 64) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r6, 0x0, 0x100870, r3, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0x3, 0x8, 0x0, 0x0, 0x2, 0x2, 0xe, 0xfe, 0xfc, 0x12, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x6, 0x0, 0x1, '\x00', 0x0, 0x8000000000002}) (async) mount$binderfs(0x0, &(0x7f0000000180)='./binderfs\x00', 0x0, 0x0, 0x0) 1m53.435865669s ago: executing program 0 (id=626): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0010015, 0x0, 0x8c2}]}) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0010015, 0x0, 0x8c2}]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) 1m53.37847434s ago: executing program 0 (id=627): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x161000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000cf0800008404"]) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100ffffffff000001020000000000000300000000000000"]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async, rerun: 64) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000006000000a7abdc00a914a9664d4f000000000000"]) read(r0, &(0x7f0000000040)=""/106, 0x6a) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r10, 0x0) read(r9, &(0x7f0000000040)=""/95, 0x5f) 1m52.652035491s ago: executing program 0 (id=630): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000380)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0xb}, 0x0, [0x0, 0x3, 0x403, 0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa9a4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x0, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) read(r1, &(0x7f0000000600)=""/193, 0xc1) write$uinput_user_dev(r1, &(0x7f0000000700)={'syz0\x00', {0x3a06, 0xfffe, 0x300, 0x8}, 0x8, [0x3, 0x9, 0xffffffad, 0x100, 0x8001, 0x0, 0x2, 0x4, 0x3, 0x8, 0x4, 0x8, 0x3, 0xffffff81, 0xfff, 0x2, 0xe, 0x4, 0x48c, 0x3, 0x2, 0x9, 0x4, 0x8, 0x64c4, 0x9, 0x7a8, 0x8001, 0x80000001, 0x2, 0x7, 0x8f, 0x6, 0x5, 0xffffffff, 0x7, 0x3, 0x2, 0xd, 0x5, 0x1, 0x80000000, 0x5, 0xfffffff7, 0x8, 0x0, 0x3, 0x0, 0x4, 0xe6b1, 0x5, 0x5, 0x3, 0x9, 0x8, 0xa3, 0xac, 0x0, 0xdd, 0x1, 0x8000, 0x6, 0x9, 0x1ff], [0xfff, 0x4, 0xff, 0x8, 0x0, 0x5, 0x6, 0x7, 0x7, 0x0, 0x7, 0xc646, 0x5, 0x8, 0x10, 0xc, 0x3, 0x7, 0x2, 0x8, 0x9, 0x8000, 0xa, 0x3ff, 0x2214d677, 0x2e83, 0x3, 0x6, 0x9, 0x0, 0x7, 0x0, 0x10001, 0x5, 0x8, 0x6, 0x7fff, 0x1, 0x2, 0xf, 0x9, 0x2376, 0x3, 0x34ec, 0x100, 0x30, 0x1, 0x9, 0x81, 0x0, 0x1ff, 0x6, 0x7, 0x1, 0x10001, 0x3, 0xed7b, 0x8001, 0xd153, 0xffffffff, 0x1, 0x10000, 0x2, 0x10000], [0x6, 0x3bce6e9e, 0xb5b0, 0x56, 0xe578, 0x5, 0xb, 0xe, 0x401, 0x8, 0xffff, 0x8, 0xa58, 0xfffffff9, 0xa41, 0x5, 0x4, 0x8, 0x9, 0x4, 0x0, 0x3c, 0x7fffffff, 0x5, 0x9, 0x398, 0x40, 0xaf, 0x7, 0x0, 0x7, 0x7fff, 0x80000001, 0xec, 0x0, 0x400, 0x749, 0x3, 0x6, 0x5, 0x6, 0x3, 0x9, 0x5, 0x81, 0x1, 0xffff, 0xa5, 0x1, 0xde, 0x7f, 0x9, 0x8, 0x6, 0x6, 0x9, 0x6, 0xffff, 0x40, 0x3, 0x3, 0x7, 0x1, 0x1525defe], [0x3, 0x7, 0xa84, 0x6, 0x8, 0x26, 0x3, 0x40000000, 0x1, 0x3, 0x689d, 0xfff, 0x5, 0x40, 0x4, 0x4426, 0x800, 0x0, 0x79, 0x9, 0x3ff, 0x80, 0xc000000, 0x6, 0xfffffff4, 0x4, 0x6, 0x4, 0x1, 0x2d, 0x3, 0x8, 0xa, 0xffff0000, 0xec8, 0xfffffffa, 0xc, 0x2, 0xf2, 0x1000, 0x59, 0x0, 0x9a, 0x6, 0x6, 0x9, 0x8, 0x5, 0xc01, 0x9, 0x2, 0x400, 0x6, 0x2d, 0xf35, 0x25, 0x4, 0x5, 0x9, 0x7, 0x803, 0x40, 0x0, 0x1]}, 0x45c) read(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x129a01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0xa, 0x0, 0x8, 0x8, 0x40, 0x2, 0x0, 0xc1, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x40, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xe6e42001, 0x0, 0x0, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0x11, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0x0, 0x6, 0x5, 0xfd, 0x3, 0x0, 0x0, 0xfe}, {0xeeef0000, 0xdddd0000, 0xe, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1, 0xfffffffffffffffe]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x0, 0x0) read$FUSE(r5, &(0x7f0000006680)={0x2020}, 0x2020) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000040)=0x2) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000280)={0x0, 0x0, 0xa, 0x2800, 0x6a2}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x14}, {0x6}]}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1m52.425339404s ago: executing program 0 (id=635): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x22000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x9250) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r3, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x600, 0x0, 0x3ff}]}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x87}, {0x6}]}) r9 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xa8041, 0x0) ioctl$FIGETBSZ(r10, 0x2, &(0x7f0000000580)) ioctl$ASHMEM_SET_SIZE(r10, 0x40087703, 0x5) ioctl$TCSETAW(r9, 0x5407, &(0x7f0000000100)={0x7c, 0x8, 0x8, 0x8, 0x4, "104abf467fd9a4cf"}) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000000000080ffffffff000000006f5e00000700000000000000080000807f0000d33755"]) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000000)=0xfffffffe) 1m52.211274357s ago: executing program 0 (id=642): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x280902, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={{r1}, 0x2, 0x9, 0xa}) write$cgroup_freezer_state(r0, &(0x7f00000000c0)='FROZEN\x00', 0x7) close(r0) (async) close(r0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$SNAPSHOT_FREE(r0, 0x3305) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x3, 0x6aff, 0x3, 0x7, 0x9, 0x0, [{0x7f, 0x3, 0xe69, '\x00', 0x18c}, {0x4, 0x8, 0x5, '\x00', 0x280d}, {0x9, 0x5, 0x6, '\x00', 0xe}, {0xfc74, 0x8, 0x8000}, {0xac, 0x7, 0x8, '\x00', 0x2400}, {0x800, 0x6, 0xfffffffffffffffa, '\x00', 0x5006}, {0xfb0, 0x4, 0x4, '\x00', 0x208}, {0x1, 0x8, 0x6, '\x00', 0x40a}, {0x347, 0x4, 0x9, '\x00', 0x985}]}) (async) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x3, 0x6aff, 0x3, 0x7, 0x9, 0x0, [{0x7f, 0x3, 0xe69, '\x00', 0x18c}, {0x4, 0x8, 0x5, '\x00', 0x280d}, {0x9, 0x5, 0x6, '\x00', 0xe}, {0xfc74, 0x8, 0x8000}, {0xac, 0x7, 0x8, '\x00', 0x2400}, {0x800, 0x6, 0xfffffffffffffffa, '\x00', 0x5006}, {0xfb0, 0x4, 0x4, '\x00', 0x208}, {0x1, 0x8, 0x6, '\x00', 0x40a}, {0x347, 0x4, 0x9, '\x00', 0x985}]}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000340)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x2010, r1, 0x8cdb5000) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000380)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) (async) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000003c0)={0xfd}) (async) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000003c0)={0xfd}) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000400)) (async) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000400)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0x17) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0x17) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) close(r2) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000004c0)) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r0, 0x4068aea3, &(0x7f0000000500)) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000580)={{0x0, 0x0, 0x80}}) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000002600), 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000002640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000002640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000002880)={0x2, 0x7}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xb) (async) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xb) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r5, 0x4008941a, &(0x7f00000028c0)=0x2) 1m37.142059871s ago: executing program 33 (id=642): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x280902, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={{r1}, 0x2, 0x9, 0xa}) write$cgroup_freezer_state(r0, &(0x7f00000000c0)='FROZEN\x00', 0x7) close(r0) (async) close(r0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$SNAPSHOT_FREE(r0, 0x3305) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x3, 0x6aff, 0x3, 0x7, 0x9, 0x0, [{0x7f, 0x3, 0xe69, '\x00', 0x18c}, {0x4, 0x8, 0x5, '\x00', 0x280d}, {0x9, 0x5, 0x6, '\x00', 0xe}, {0xfc74, 0x8, 0x8000}, {0xac, 0x7, 0x8, '\x00', 0x2400}, {0x800, 0x6, 0xfffffffffffffffa, '\x00', 0x5006}, {0xfb0, 0x4, 0x4, '\x00', 0x208}, {0x1, 0x8, 0x6, '\x00', 0x40a}, {0x347, 0x4, 0x9, '\x00', 0x985}]}) (async) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x3, 0x6aff, 0x3, 0x7, 0x9, 0x0, [{0x7f, 0x3, 0xe69, '\x00', 0x18c}, {0x4, 0x8, 0x5, '\x00', 0x280d}, {0x9, 0x5, 0x6, '\x00', 0xe}, {0xfc74, 0x8, 0x8000}, {0xac, 0x7, 0x8, '\x00', 0x2400}, {0x800, 0x6, 0xfffffffffffffffa, '\x00', 0x5006}, {0xfb0, 0x4, 0x4, '\x00', 0x208}, {0x1, 0x8, 0x6, '\x00', 0x40a}, {0x347, 0x4, 0x9, '\x00', 0x985}]}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000340)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x2010, r1, 0x8cdb5000) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000380)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) (async) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000003c0)={0xfd}) (async) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000003c0)={0xfd}) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000400)) (async) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000400)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0x17) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0x17) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) close(r2) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000004c0)) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r0, 0x4068aea3, &(0x7f0000000500)) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000580)={{0x0, 0x0, 0x80}}) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000002600), 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000002640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000002640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000002880)={0x2, 0x7}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xb) (async) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xb) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r5, 0x4008941a, &(0x7f00000028c0)=0x2) 1.208228072s ago: executing program 1 (id=2245): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000001c0)={0xa100000000000000, 0x2000, 0x0, 0x1, 0x12}) 1.208069792s ago: executing program 5 (id=2246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, 0x0) 1.139485593s ago: executing program 5 (id=2249): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 1.064161944s ago: executing program 5 (id=2250): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000000c0)) 1.053849195s ago: executing program 1 (id=2251): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000006902"]) 1.003079996s ago: executing program 5 (id=2252): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) 920.191797ms ago: executing program 4 (id=2253): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000c00)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, 0x0) 901.132497ms ago: executing program 5 (id=2254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) 843.792268ms ago: executing program 1 (id=2255): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) 843.450908ms ago: executing program 4 (id=2256): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8c01, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) write$snapshot(r0, 0x0, 0x1f) 731.48462ms ago: executing program 1 (id=2258): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000d90100000000000000005500000000005134b8984c88f16a64cc"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 634.403251ms ago: executing program 5 (id=2259): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x80) 512.222943ms ago: executing program 4 (id=2260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x9ec}) 512.094343ms ago: executing program 3 (id=2261): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x40043d14, 0x0) 433.124094ms ago: executing program 3 (id=2262): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)={'a', ' *:* ', 'rm\x00'}, 0x9) 424.005444ms ago: executing program 1 (id=2263): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40087447, 0x0) 320.140626ms ago: executing program 4 (id=2264): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x2}) 319.888075ms ago: executing program 3 (id=2265): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b"]) 198.478297ms ago: executing program 1 (id=2266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x14}, {0x6}]}) 156.059098ms ago: executing program 4 (id=2267): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) 108.166849ms ago: executing program 3 (id=2268): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x149a82, 0x0) 91.345179ms ago: executing program 3 (id=2269): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000340)='cgroup.events\x00', 0x0, 0x0) 47.787679ms ago: executing program 4 (id=2270): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x2000007, 0x2012, r2, 0x0) 0s ago: executing program 3 (id=2271): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x801, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110a, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000700)=[@increfs={0x40046305}, @decrefs], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): pfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.594502][ T304] bridge_slave_0: left allmulticast mode [ 94.627227][ T304] bridge_slave_0: left promiscuous mode [ 94.649309][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.669332][ T36] audit: type=1400 audit(1750311861.650:4935): avc: denied { map } for pid=3943 comm="syz.5.1161" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.761828][ T36] audit: type=1400 audit(1750311861.650:4936): avc: denied { read } for pid=3943 comm="syz.5.1161" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.798625][ T36] audit: type=1400 audit(1750311861.680:4937): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.042846][ T304] veth1_macvtap: left promiscuous mode [ 95.054947][ T304] veth0_vlan: left promiscuous mode [ 95.140039][ T3984] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 95.380876][ T3985] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.413717][ T3985] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.417745][ T3999] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 95.428214][ T3985] bridge_slave_0: entered allmulticast mode [ 95.437140][ T3985] bridge_slave_0: entered promiscuous mode [ 95.446675][ T3985] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.453849][ T3985] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.460988][ T3985] bridge_slave_1: entered allmulticast mode [ 95.467386][ T3985] bridge_slave_1: entered promiscuous mode [ 95.721337][ T4014] rust_binder: Error while translating object. [ 95.721384][ T4014] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 95.724918][ T3985] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.727760][ T4014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1036 [ 95.737180][ T3985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.760660][ T3985] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.767711][ T3985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.919624][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.950335][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.982017][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.989225][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.046176][ T4025] input: syz0 as /devices/virtual/input/input82 [ 96.063516][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.070710][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.178343][ T4028] binder: Unknown parameter '0xffffffffffffffff' [ 96.216329][ T4032] SELinux: failed to load policy [ 96.225995][ T4034] rust_binder: Write failure EFAULT in pid:433 [ 96.260563][ T3985] veth0_vlan: entered promiscuous mode [ 96.296280][ T4035] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:433 [ 96.386651][ T4041] input: syz1 as /devices/virtual/input/input83 [ 96.431722][ T3985] veth1_macvtap: entered promiscuous mode [ 96.433669][ T4039] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.441082][ T4039] rust_binder: Write failure EINVAL in pid:1042 [ 96.731663][ T4059] binder: Bad value for 'defcontext' [ 96.744404][ T4056] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1044 [ 96.768711][ T4063] input: syz0 as /devices/virtual/input/input84 [ 96.778644][ T4062] rust_binder: Write failure EINVAL in pid:448 [ 96.872073][ T4065] binder: Bad value for 'max' [ 96.952918][ T4073] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 97.084641][ T4082] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 97.282536][ T4085] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:10 [ 97.613171][ T4102] input: syz0 as /devices/virtual/input/input87 [ 97.697593][ T4104] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 97.720312][ T4104] SELinux: failed to load policy [ 97.740072][ T4106] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.890564][ T4115] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 98.524832][ T4145] input: syz0 as /devices/virtual/input/input88 [ 98.710060][ T4149] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1066 [ 98.916887][ T4159] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1068 [ 99.053640][ T4164] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 99.201060][ T36] kauditd_printk_skb: 987 callbacks suppressed [ 99.201082][ T36] audit: type=1400 audit(1750311866.610:5910): avc: denied { read } for pid=4169 comm="syz.5.1232" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 99.289303][ T36] audit: type=1400 audit(1750311866.620:5911): avc: denied { read } for pid=4171 comm="syz.3.1233" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 99.330394][ T4172] SELinux: failed to load policy [ 99.352463][ T36] audit: type=1400 audit(1750311866.620:5912): avc: denied { read open } for pid=4171 comm="syz.3.1233" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 99.434901][ T4172] input: syz0 as /devices/virtual/input/input89 [ 99.460651][ T36] audit: type=1400 audit(1750311866.620:5913): avc: denied { ioctl } for pid=4171 comm="syz.3.1233" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 99.522212][ T36] audit: type=1400 audit(1750311866.650:5914): avc: denied { read write } for pid=4174 comm="syz.1.1234" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.598677][ T36] audit: type=1400 audit(1750311866.650:5915): avc: denied { read write open } for pid=4174 comm="syz.1.1234" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.660107][ T36] audit: type=1400 audit(1750311866.650:5916): avc: denied { map } for pid=4174 comm="syz.1.1234" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.681076][ T4185] binder: Bad value for 'stats' [ 99.687907][ T4188] rust_binder: Write failure EINVAL in pid:1079 [ 99.688324][ T4188] rust_binder: Write failure EINVAL in pid:1079 [ 99.696602][ T36] audit: type=1400 audit(1750311866.650:5917): avc: denied { read } for pid=4174 comm="syz.1.1234" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.711501][ T4179] audit: audit_backlog=65 > audit_backlog_limit=64 [ 99.740625][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 99.978549][ T4194] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 100.707283][ T4224] SELinux: security_context_str_to_sid () failed with errno=-22 [ 101.099833][ T4244] input: syz0 as /devices/virtual/input/input90 [ 101.114459][ T4244] FAULT_INJECTION: forcing a failure. [ 101.114459][ T4244] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 101.127614][ T4244] CPU: 0 UID: 0 PID: 4244 Comm: syz.1.1257 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 101.127646][ T4244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.127668][ T4244] Call Trace: [ 101.127675][ T4244] [ 101.127684][ T4244] __dump_stack+0x21/0x30 [ 101.127714][ T4244] dump_stack_lvl+0x10c/0x190 [ 101.127745][ T4244] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.127771][ T4244] ? _parse_integer_limit+0x195/0x1e0 [ 101.127793][ T4244] dump_stack+0x19/0x20 [ 101.127816][ T4244] should_fail_ex+0x3d9/0x530 [ 101.127839][ T4244] should_fail+0xf/0x20 [ 101.127860][ T4244] should_fail_usercopy+0x1e/0x30 [ 101.127884][ T4244] _copy_from_user+0x22/0xb0 [ 101.127912][ T4244] input_event_from_user+0xb3/0x280 [ 101.127943][ T4244] ? __cfi_input_event_from_user+0x10/0x10 [ 101.127974][ T4244] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 101.128001][ T4244] ? input_event+0xa2/0xc0 [ 101.128024][ T4244] uinput_write+0x22c/0xef0 [ 101.128051][ T4244] ? __cfi_uinput_write+0x10/0x10 [ 101.128072][ T4244] ? proc_fail_nth_write+0x17e/0x210 [ 101.128093][ T4244] ? bpf_lsm_file_permission+0xd/0x20 [ 101.128114][ T4244] ? __cfi_uinput_write+0x10/0x10 [ 101.128137][ T4244] vfs_write+0x3c0/0xe80 [ 101.128161][ T4244] ? __cfi_vfs_write+0x10/0x10 [ 101.128184][ T4244] ? __fget_files+0x2c5/0x340 [ 101.128212][ T4244] ksys_write+0x141/0x250 [ 101.128235][ T4244] ? __cfi_ksys_write+0x10/0x10 [ 101.128259][ T4244] ? __kasan_check_read+0x15/0x20 [ 101.128280][ T4244] __x64_sys_write+0x7f/0x90 [ 101.128300][ T4244] x64_sys_call+0x271c/0x2ee0 [ 101.128321][ T4244] do_syscall_64+0x58/0xf0 [ 101.128342][ T4244] ? clear_bhb_loop+0x35/0x90 [ 101.128366][ T4244] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.128389][ T4244] RIP: 0033:0x7f2993d8e929 [ 101.128409][ T4244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.128424][ T4244] RSP: 002b:00007f2994b33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 101.128443][ T4244] RAX: ffffffffffffffda RBX: 00007f2993fb5fa0 RCX: 00007f2993d8e929 [ 101.128457][ T4244] RDX: 000000000000045c RSI: 0000200000000980 RDI: 0000000000000003 [ 101.128468][ T4244] RBP: 00007f2994b33090 R08: 0000000000000000 R09: 0000000000000000 [ 101.128479][ T4244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.128490][ T4244] R13: 0000000000000000 R14: 00007f2993fb5fa0 R15: 00007ffd7686d9c8 [ 101.128504][ T4244] [ 101.526779][ T4252] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 101.556950][ T4256] rust_binder: Write failure EFAULT in pid:311 [ 101.712276][ T4259] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 101.719291][ T4259] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52 [ 101.814280][ T4263] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 102.023122][ T4274] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.093377][ T4276] rust_binder: Write failure EINVAL in pid:56 [ 102.424744][ T4295] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.475071][ T4287] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.805999][ T4324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.863486][ T4324] rust_binder: Write failure EINVAL in pid:329 [ 102.902319][ T4330] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 103.021878][ T4337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1116 [ 103.219989][ T4347] input: syz0 as /devices/virtual/input/input93 [ 103.354585][ T4353] binder: Unknown parameter '' [ 103.563490][ T4366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.599247][ T4365] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 103.609263][ T4365] rust_binder: Error while translating object. [ 103.645988][ T4365] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.654185][ T4365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 103.665611][ T4374] input: syz1 as /devices/virtual/input/input94 [ 103.848033][ T4381] input: syz0 as /devices/virtual/input/input95 [ 103.991835][ T4389] binder: Bad value for 'stats' [ 104.065149][ T4393] binfmt_misc: register: failed to install interpreter file ./cgroup [ 104.215207][ T36] kauditd_printk_skb: 1160 callbacks suppressed [ 104.215227][ T36] audit: type=1400 audit(1750311871.620:7041): avc: denied { read write } for pid=2134 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.315803][ T36] audit: type=1400 audit(1750311871.650:7042): avc: denied { read } for pid=4398 comm="syz.1.1309" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 104.371736][ T36] audit: type=1400 audit(1750311871.650:7043): avc: denied { read open } for pid=4398 comm="syz.1.1309" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 104.452376][ T36] audit: type=1400 audit(1750311871.650:7044): avc: denied { ioctl } for pid=4398 comm="syz.1.1309" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 104.515064][ T4407] input: syz1 as /devices/virtual/input/input96 [ 104.532510][ T36] audit: type=1400 audit(1750311871.660:7045): avc: denied { read } for pid=4398 comm="syz.1.1309" name="binder0" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 104.599257][ T36] audit: type=1400 audit(1750311871.660:7046): avc: denied { read open } for pid=4398 comm="syz.1.1309" path="/dev/binderfs/binder0" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 104.627248][ T36] audit: type=1400 audit(1750311871.660:7047): avc: denied { read } for pid=4396 comm="syz.3.1308" name="binder0" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 104.677113][ T3091] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.707074][ T4412] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.728371][ T4414] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.793341][ T4414] input: syz0 as /devices/virtual/input/input97 [ 104.797199][ T4416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.241013][ T4428] binder: Bad value for 'defcontext' [ 105.273455][ T4430] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 105.312757][ T4432] input: syz0 as /devices/virtual/input/input98 [ 105.480106][ T4442] SELinux: security_context_str_to_sid () failed with errno=-22 [ 105.727038][ T4448] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.821869][ T4451] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 106.674298][ T4485] binder: Unknown parameter 'dont_hash' [ 106.721830][ T4490] binder: Unknown parameter 'dont_hash' [ 106.807535][ T4491] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.868096][ T4491] SELinux: security_context_str_to_sid (unconfiÜýœGu) failed with errno=-22 [ 106.991376][ T4500] input: syz0 as /devices/virtual/input/input102 [ 107.054342][ T4496] kvm: Disabled LAPIC found during irq injection [ 107.234143][ T4496] binder: Unknown parameter 'ãÇZ$¡ÆÏœx*åÜ@óÉŸôËŒLbt_ð1pʉÉÜLjñéÔAJ­Û“©nÝ{¬' [ 107.790504][ T4536] rust_binder: Write failure EFAULT in pid:369 [ 107.795076][ T4537] input: syz0 as /devices/virtual/input/input104 [ 107.820777][ T4536] binder: Bad value for 'stats' [ 107.948268][ T4545] input: syz0 as /devices/virtual/input/input105 [ 107.969688][ T4545] FAULT_INJECTION: forcing a failure. [ 107.969688][ T4545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.018276][ T4545] CPU: 1 UID: 0 PID: 4545 Comm: syz.1.1362 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 108.018314][ T4545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.018328][ T4545] Call Trace: [ 108.018335][ T4545] [ 108.018345][ T4545] __dump_stack+0x21/0x30 [ 108.018374][ T4545] dump_stack_lvl+0x10c/0x190 [ 108.018399][ T4545] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.018424][ T4545] ? _parse_integer_limit+0x195/0x1e0 [ 108.018446][ T4545] dump_stack+0x19/0x20 [ 108.018469][ T4545] should_fail_ex+0x3d9/0x530 [ 108.018491][ T4545] should_fail+0xf/0x20 [ 108.018511][ T4545] should_fail_usercopy+0x1e/0x30 [ 108.018535][ T4545] _copy_from_user+0x22/0xb0 [ 108.018563][ T4545] input_event_from_user+0xb3/0x280 [ 108.018594][ T4545] ? __cfi_input_event_from_user+0x10/0x10 [ 108.018626][ T4545] ? input_event+0x3a/0xc0 [ 108.018648][ T4545] uinput_write+0x22c/0xef0 [ 108.018673][ T4545] ? __cfi_uinput_write+0x10/0x10 [ 108.018697][ T4545] ? proc_fail_nth_write+0x17e/0x210 [ 108.018718][ T4545] ? bpf_lsm_file_permission+0xd/0x20 [ 108.018740][ T4545] ? __cfi_uinput_write+0x10/0x10 [ 108.018764][ T4545] vfs_write+0x3c0/0xe80 [ 108.018790][ T4545] ? __cfi_vfs_write+0x10/0x10 [ 108.018814][ T4545] ? __fget_files+0x2c5/0x340 [ 108.018844][ T4545] ksys_write+0x141/0x250 [ 108.018868][ T4545] ? __cfi_ksys_write+0x10/0x10 [ 108.018892][ T4545] ? __kasan_check_read+0x15/0x20 [ 108.018915][ T4545] __x64_sys_write+0x7f/0x90 [ 108.018939][ T4545] x64_sys_call+0x271c/0x2ee0 [ 108.018965][ T4545] do_syscall_64+0x58/0xf0 [ 108.018991][ T4545] ? clear_bhb_loop+0x35/0x90 [ 108.019021][ T4545] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.019049][ T4545] RIP: 0033:0x7f2993d8e929 [ 108.019065][ T4545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.019083][ T4545] RSP: 002b:00007f2994b33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 108.019105][ T4545] RAX: ffffffffffffffda RBX: 00007f2993fb5fa0 RCX: 00007f2993d8e929 [ 108.019120][ T4545] RDX: 000000000000045c RSI: 0000200000000980 RDI: 0000000000000003 [ 108.019134][ T4545] RBP: 00007f2994b33090 R08: 0000000000000000 R09: 0000000000000000 [ 108.019153][ T4545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.019167][ T4545] R13: 0000000000000000 R14: 00007f2993fb5fa0 R15: 00007ffd7686d9c8 [ 108.019184][ T4545] [ 108.050659][ T4539] random: crng reseeded on system resumption [ 108.453478][ T4563] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.454935][ T4563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:378 [ 108.672988][ T4571] input: syz0 as /devices/virtual/input/input106 [ 108.739999][ T4578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.740290][ T4578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.835204][ T4582] input: syz0 as /devices/virtual/input/input107 [ 108.862929][ T4582] FAULT_INJECTION: forcing a failure. [ 108.862929][ T4582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.898958][ T4582] CPU: 1 UID: 0 PID: 4582 Comm: syz.1.1372 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 108.898992][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.899006][ T4582] Call Trace: [ 108.899013][ T4582] [ 108.899021][ T4582] __dump_stack+0x21/0x30 [ 108.899052][ T4582] dump_stack_lvl+0x10c/0x190 [ 108.899072][ T4582] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.899098][ T4582] ? _parse_integer_limit+0x195/0x1e0 [ 108.899119][ T4582] dump_stack+0x19/0x20 [ 108.899142][ T4582] should_fail_ex+0x3d9/0x530 [ 108.899165][ T4582] should_fail+0xf/0x20 [ 108.899190][ T4582] should_fail_usercopy+0x1e/0x30 [ 108.899211][ T4582] _copy_from_user+0x22/0xb0 [ 108.899239][ T4582] input_event_from_user+0xb3/0x280 [ 108.899270][ T4582] ? __cfi_input_event_from_user+0x10/0x10 [ 108.899310][ T4582] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 108.899337][ T4582] ? input_event+0xa2/0xc0 [ 108.899359][ T4582] uinput_write+0x22c/0xef0 [ 108.899385][ T4582] ? __cfi_uinput_write+0x10/0x10 [ 108.899408][ T4582] ? proc_fail_nth_write+0x17e/0x210 [ 108.899429][ T4582] ? bpf_lsm_file_permission+0xd/0x20 [ 108.899453][ T4582] ? __cfi_uinput_write+0x10/0x10 [ 108.899476][ T4582] vfs_write+0x3c0/0xe80 [ 108.899501][ T4582] ? __cfi_vfs_write+0x10/0x10 [ 108.899525][ T4582] ? __fget_files+0x2c5/0x340 [ 108.899554][ T4582] ksys_write+0x141/0x250 [ 108.899578][ T4582] ? __cfi_ksys_write+0x10/0x10 [ 108.899604][ T4582] ? __kasan_check_read+0x15/0x20 [ 108.899627][ T4582] __x64_sys_write+0x7f/0x90 [ 108.899652][ T4582] x64_sys_call+0x271c/0x2ee0 [ 108.899678][ T4582] do_syscall_64+0x58/0xf0 [ 108.899703][ T4582] ? clear_bhb_loop+0x35/0x90 [ 108.899732][ T4582] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.899760][ T4582] RIP: 0033:0x7f2993d8e929 [ 108.899778][ T4582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.899795][ T4582] RSP: 002b:00007f2994b33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 108.899816][ T4582] RAX: ffffffffffffffda RBX: 00007f2993fb5fa0 RCX: 00007f2993d8e929 [ 108.899830][ T4582] RDX: 000000000000045c RSI: 0000200000000980 RDI: 0000000000000003 [ 108.899844][ T4582] RBP: 00007f2994b33090 R08: 0000000000000000 R09: 0000000000000000 [ 108.899856][ T4582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.899868][ T4582] R13: 0000000000000000 R14: 00007f2993fb5fa0 R15: 00007ffd7686d9c8 [ 108.899886][ T4582] [ 109.192412][ T4587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.192749][ T4592] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.235397][ T36] kauditd_printk_skb: 744 callbacks suppressed [ 109.235417][ T36] audit: type=1400 audit(1750311876.620:7786): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=515 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 109.329317][ T36] audit: type=1400 audit(1750311876.620:7787): avc: denied { read open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=515 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 109.353047][ T36] audit: type=1400 audit(1750311876.620:7788): avc: denied { read write } for pid=2134 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.377185][ T36] audit: type=1400 audit(1750311876.620:7789): avc: denied { read write open } for pid=2134 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.381242][ T4596] rust_binder: Write failure EINVAL in pid:572 [ 109.402195][ T36] audit: type=1400 audit(1750311876.620:7790): avc: denied { ioctl } for pid=2134 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.434801][ T36] audit: type=1400 audit(1750311876.680:7791): avc: denied { read write } for pid=3985 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.478769][ T36] audit: type=1400 audit(1750311876.680:7792): avc: denied { read write open } for pid=3985 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.518767][ T4608] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.536743][ T36] audit: type=1400 audit(1750311876.680:7793): avc: denied { ioctl } for pid=3985 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.569747][ T36] audit: type=1400 audit(1750311876.700:7794): avc: denied { read } for pid=4594 comm="syz.4.1376" name="binder0" dev="binder" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.599079][ T36] audit: type=1400 audit(1750311876.700:7795): avc: denied { read open } for pid=4594 comm="syz.4.1376" path="/dev/binderfs/binder0" dev="binder" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.630233][ T4612] input: syz0 as /devices/virtual/input/input108 [ 109.666640][ T4610] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:391 [ 109.845080][ T4616] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 109.897150][ T4622] input: syz1 as /devices/virtual/input/input109 [ 109.996112][ T4628] input: syz0 as /devices/virtual/input/input110 [ 110.010764][ T4624] rust_binder: Write failure EINVAL in pid:580 [ 110.025542][ T4628] FAULT_INJECTION: forcing a failure. [ 110.025542][ T4628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.075694][ T4628] CPU: 1 UID: 0 PID: 4628 Comm: syz.3.1387 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 110.075730][ T4628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.075743][ T4628] Call Trace: [ 110.075749][ T4628] [ 110.075759][ T4628] __dump_stack+0x21/0x30 [ 110.075789][ T4628] dump_stack_lvl+0x10c/0x190 [ 110.075814][ T4628] ? __cfi_dump_stack_lvl+0x10/0x10 [ 110.075840][ T4628] ? _parse_integer_limit+0x195/0x1e0 [ 110.075863][ T4628] dump_stack+0x19/0x20 [ 110.075885][ T4628] should_fail_ex+0x3d9/0x530 [ 110.075908][ T4628] should_fail+0xf/0x20 [ 110.075929][ T4628] should_fail_usercopy+0x1e/0x30 [ 110.075952][ T4628] _copy_from_user+0x22/0xb0 [ 110.075981][ T4628] input_event_from_user+0xb3/0x280 [ 110.076021][ T4628] ? __cfi_input_event_from_user+0x10/0x10 [ 110.076055][ T4628] ? __kasan_check_read+0x15/0x20 [ 110.076078][ T4628] ? input_event+0xa9/0xc0 [ 110.076101][ T4628] uinput_write+0x22c/0xef0 [ 110.076126][ T4628] ? __cfi_uinput_write+0x10/0x10 [ 110.076149][ T4628] ? proc_fail_nth_write+0x17e/0x210 [ 110.076169][ T4628] ? bpf_lsm_file_permission+0xd/0x20 [ 110.076192][ T4628] ? __cfi_uinput_write+0x10/0x10 [ 110.076216][ T4628] vfs_write+0x3c0/0xe80 [ 110.076241][ T4628] ? __cfi_vfs_write+0x10/0x10 [ 110.076266][ T4628] ? __fget_files+0x2c5/0x340 [ 110.076295][ T4628] ksys_write+0x141/0x250 [ 110.076319][ T4628] ? xfd_validate_state+0x68/0x150 [ 110.076342][ T4628] ? __cfi_ksys_write+0x10/0x10 [ 110.076368][ T4628] ? __kasan_check_read+0x15/0x20 [ 110.076391][ T4628] __x64_sys_write+0x7f/0x90 [ 110.076417][ T4628] x64_sys_call+0x271c/0x2ee0 [ 110.076444][ T4628] do_syscall_64+0x58/0xf0 [ 110.076469][ T4628] ? clear_bhb_loop+0x35/0x90 [ 110.076497][ T4628] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 110.076534][ T4628] RIP: 0033:0x7f987618e929 [ 110.076551][ T4628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.076567][ T4628] RSP: 002b:00007f9876fe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.076588][ T4628] RAX: ffffffffffffffda RBX: 00007f98763b5fa0 RCX: 00007f987618e929 [ 110.076604][ T4628] RDX: 000000000000045c RSI: 0000200000000980 RDI: 0000000000000003 [ 110.076617][ T4628] RBP: 00007f9876fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.076630][ T4628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.076642][ T4628] R13: 0000000000000000 R14: 00007f98763b5fa0 R15: 00007ffcac7e8778 [ 110.076660][ T4628] [ 110.399854][ T4637] input: syz0 as /devices/virtual/input/input112 [ 110.557724][ T4650] binder: Unknown parameter 'ma' [ 110.564623][ T4643] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 110.630789][ T4653] rust_binder: Write failure EFAULT in pid:403 [ 110.637903][ T4653] binder: Unknown parameter 'dont_hash' [ 110.801377][ T4662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:407 [ 110.890781][ T4665] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 110.903363][ T4668] input: syz0 as /devices/virtual/input/input113 [ 110.952895][ T4670] FAULT_INJECTION: forcing a failure. [ 110.952895][ T4670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.989031][ T4670] CPU: 0 UID: 0 PID: 4670 Comm: syz.5.1402 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 110.989068][ T4670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.989081][ T4670] Call Trace: [ 110.989088][ T4670] [ 110.989096][ T4670] __dump_stack+0x21/0x30 [ 110.989126][ T4670] dump_stack_lvl+0x10c/0x190 [ 110.989159][ T4670] ? __cfi_dump_stack_lvl+0x10/0x10 [ 110.989190][ T4670] dump_stack+0x19/0x20 [ 110.989212][ T4670] should_fail_ex+0x3d9/0x530 [ 110.989238][ T4670] should_fail+0xf/0x20 [ 110.989262][ T4670] should_fail_usercopy+0x1e/0x30 [ 110.989286][ T4670] _copy_from_user+0x22/0xb0 [ 110.989314][ T4670] memdup_user+0x81/0x180 [ 110.989338][ T4670] ? kvm_arch_vcpu_ioctl+0x1200/0x2e50 [ 110.989368][ T4670] kvm_arch_vcpu_ioctl+0x1892/0x2e50 [ 110.989399][ T4670] ? avc_has_perm+0x144/0x220 [ 110.989421][ T4670] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 110.989448][ T4670] ? avc_perm_nonode+0x101/0x1b0 [ 110.989470][ T4670] ? avc_has_perm_noaudit+0x360/0x360 [ 110.989493][ T4670] ? selinux_file_open+0x457/0x610 [ 110.989524][ T4670] ? __cfi_selinux_file_open+0x10/0x10 [ 110.989559][ T4670] ? is_bpf_text_address+0x17b/0x1a0 [ 110.989589][ T4670] ? kernel_text_address+0xa9/0xe0 [ 110.989612][ T4670] ? __kernel_text_address+0x11/0x40 [ 110.989634][ T4670] ? do_vfs_ioctl+0xeda/0x1e30 [ 110.989662][ T4670] ? arch_stack_walk+0x10b/0x170 [ 110.989689][ T4670] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 110.989719][ T4670] ? _parse_integer_limit+0x195/0x1e0 [ 110.989744][ T4670] ? _parse_integer+0x2e/0x40 [ 110.989765][ T4670] ? kstrtoull+0x13b/0x1e0 [ 110.989786][ T4670] ? kstrtouint+0x78/0xf0 [ 110.989818][ T4670] ? ioctl_has_perm+0x1aa/0x4d0 [ 110.989848][ T4670] ? __asan_memcpy+0x5a/0x80 [ 110.989871][ T4670] ? ioctl_has_perm+0x3e0/0x4d0 [ 110.989902][ T4670] ? has_cap_mac_admin+0xd0/0xd0 [ 110.989931][ T4670] ? __kasan_check_write+0x18/0x20 [ 110.989954][ T4670] ? mutex_lock_killable+0x92/0x1c0 [ 110.989974][ T4670] ? __cfi_mutex_lock_killable+0x10/0x10 [ 110.989993][ T4670] ? proc_fail_nth_write+0x17e/0x210 [ 110.990011][ T4670] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 110.990032][ T4670] kvm_vcpu_ioctl+0x77c/0xee0 [ 110.990060][ T4670] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 110.990087][ T4670] ? __cfi_vfs_write+0x10/0x10 [ 110.990111][ T4670] ? __kasan_check_write+0x18/0x20 [ 110.990133][ T4670] ? mutex_unlock+0x8b/0x240 [ 110.990170][ T4670] ? __cfi_mutex_unlock+0x10/0x10 [ 110.990200][ T4670] ? __fget_files+0x2c5/0x340 [ 110.990228][ T4670] ? __fget_files+0x2c5/0x340 [ 110.990257][ T4670] ? bpf_lsm_file_ioctl+0xd/0x20 [ 110.990278][ T4670] ? security_file_ioctl+0x34/0xd0 [ 110.990307][ T4670] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 110.990334][ T4670] __se_sys_ioctl+0x132/0x1b0 [ 110.990361][ T4670] __x64_sys_ioctl+0x7f/0xa0 [ 110.990389][ T4670] x64_sys_call+0x1878/0x2ee0 [ 110.990414][ T4670] do_syscall_64+0x58/0xf0 [ 110.990440][ T4670] ? clear_bhb_loop+0x35/0x90 [ 110.990467][ T4670] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 110.990496][ T4670] RIP: 0033:0x7f0aaf58e929 [ 110.990502][ T4672] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 110.990514][ T4670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.990533][ T4670] RSP: 002b:00007f0ab03ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.990552][ T4670] RAX: ffffffffffffffda RBX: 00007f0aaf7b5fa0 RCX: 00007f0aaf58e929 [ 110.990569][ T4670] RDX: 0000200000000140 RSI: 000000004008ae89 RDI: 0000000000000005 [ 110.990586][ T4670] RBP: 00007f0ab03ce090 R08: 0000000000000000 R09: 0000000000000000 [ 110.990600][ T4670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.990616][ T4670] R13: 0000000000000000 R14: 00007f0aaf7b5fa0 R15: 00007ffed2629f88 [ 110.990639][ T4670] [ 111.216605][ T4678] binder: Bad value for 'defcontext' [ 111.262062][ T4672] SELinux: failed to load policy [ 111.321476][ T4674] input: syz0 as /devices/virtual/input/input114 [ 111.421137][ T4678] binder: Bad value for 'defcontext' [ 111.533469][ T4689] rust_binder: Read failure Err(EAGAIN) in pid:597 [ 111.682162][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 111.819879][ T4704] input: syz0 as /devices/virtual/input/input115 [ 112.057324][ T4710] FAULT_INJECTION: forcing a failure. [ 112.057324][ T4710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.079270][ T4710] CPU: 0 UID: 0 PID: 4710 Comm: syz.3.1414 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 112.079307][ T4710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.079320][ T4710] Call Trace: [ 112.079326][ T4710] [ 112.079334][ T4710] __dump_stack+0x21/0x30 [ 112.079362][ T4710] dump_stack_lvl+0x10c/0x190 [ 112.079386][ T4710] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.079410][ T4710] dump_stack+0x19/0x20 [ 112.079433][ T4710] should_fail_ex+0x3d9/0x530 [ 112.079456][ T4710] should_fail+0xf/0x20 [ 112.079481][ T4710] should_fail_usercopy+0x1e/0x30 [ 112.079504][ T4710] _copy_to_user+0x24/0xa0 [ 112.079530][ T4710] simple_read_from_buffer+0xed/0x160 [ 112.079561][ T4710] proc_fail_nth_read+0x19e/0x210 [ 112.079579][ T4710] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 112.079598][ T4710] ? bpf_lsm_file_permission+0xd/0x20 [ 112.079619][ T4710] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 112.079637][ T4710] vfs_read+0x278/0xb60 [ 112.079660][ T4710] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 112.079688][ T4710] ? __cfi_vfs_read+0x10/0x10 [ 112.079709][ T4710] ? __kasan_check_write+0x18/0x20 [ 112.079732][ T4710] ? mutex_lock+0x92/0x1c0 [ 112.079787][ T4710] ? __cfi_mutex_lock+0x10/0x10 [ 112.079818][ T4710] ? __fget_files+0x2c5/0x340 [ 112.079847][ T4710] ksys_read+0x141/0x250 [ 112.079872][ T4710] ? __cfi_ksys_read+0x10/0x10 [ 112.079897][ T4710] ? __kasan_check_read+0x15/0x20 [ 112.079920][ T4710] __x64_sys_read+0x7f/0x90 [ 112.079945][ T4710] x64_sys_call+0x2638/0x2ee0 [ 112.079971][ T4710] do_syscall_64+0x58/0xf0 [ 112.079997][ T4710] ? clear_bhb_loop+0x35/0x90 [ 112.080026][ T4710] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.080055][ T4710] RIP: 0033:0x7f987618d33c [ 112.080073][ T4710] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 112.080091][ T4710] RSP: 002b:00007f9876fe7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 112.080115][ T4710] RAX: ffffffffffffffda RBX: 00007f98763b5fa0 RCX: 00007f987618d33c [ 112.080131][ T4710] RDX: 000000000000000f RSI: 00007f9876fe70a0 RDI: 0000000000000006 [ 112.080144][ T4710] RBP: 00007f9876fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.080158][ T4710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.080171][ T4710] R13: 0000000000000000 R14: 00007f98763b5fa0 R15: 00007ffcac7e8778 [ 112.080189][ T4710] [ 112.567125][ T4721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:183 [ 113.257070][ T4732] rust_binder: Error while translating object. [ 113.278249][ T4732] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 113.290405][ T4732] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:611 [ 113.372367][ T4741] binder: Unknown parameter 'dont_hash' [ 113.418965][ T4745] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.556963][ T4750] input: syz0 as /devices/virtual/input/input117 [ 113.639640][ T4752] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:614 [ 113.642382][ T4752] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 113.685657][ T4752] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:614 [ 113.759238][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 113.774533][ T351] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 113.825853][ T4763] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.863953][ T4764] rust_binder: Read failure Err(EAGAIN) in pid:418 [ 113.954910][ T4775] binder: Unknown parameter '18446744073709551615' [ 114.109579][ T4772] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 114.130220][ T4783] input: syz0 as /devices/virtual/input/input119 [ 114.139920][ T4778] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.169431][ T4778] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.175109][ T4778] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.239274][ T36] kauditd_printk_skb: 805 callbacks suppressed [ 114.239305][ T36] audit: type=1400 audit(1750311881.640:8601): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.258389][ T4787] tap1: tun_chr_ioctl cmd 1074025677 [ 114.299313][ T4787] tap1: linktype set to 776 [ 114.324734][ T36] audit: type=1400 audit(1750311881.700:8602): avc: denied { map } for pid=4777 comm="syz.5.1440" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.365642][ T4790] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.374418][ T4787] input: syz0 as /devices/virtual/input/input118 [ 114.409229][ T36] audit: type=1400 audit(1750311881.700:8603): avc: denied { read } for pid=4777 comm="syz.5.1440" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.437948][ T36] audit: type=1400 audit(1750311881.730:8604): avc: denied { relabelfrom } for pid=4777 comm="syz.5.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 114.461917][ T36] audit: type=1400 audit(1750311881.730:8605): avc: denied { relabelto } for pid=4777 comm="syz.5.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 114.483546][ T36] audit: type=1400 audit(1750311881.730:8606): avc: denied { read } for pid=4789 comm="syz.1.1443" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 114.558216][ T36] audit: type=1400 audit(1750311881.730:8607): avc: denied { read open } for pid=4789 comm="syz.1.1443" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 114.605148][ T4796] input: syz0 as /devices/virtual/input/input120 [ 114.619236][ T36] audit: type=1400 audit(1750311881.730:8608): avc: denied { read } for pid=4777 comm="syz.5.1440" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.669249][ T4797] FAULT_INJECTION: forcing a failure. [ 114.669249][ T4797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.687077][ T36] audit: type=1400 audit(1750311881.730:8609): avc: denied { read open } for pid=4777 comm="syz.5.1440" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.719280][ T4797] CPU: 1 UID: 0 PID: 4797 Comm: syz.1.1445 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 114.719313][ T4797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.719327][ T4797] Call Trace: [ 114.719333][ T4797] [ 114.719342][ T4797] __dump_stack+0x21/0x30 [ 114.719372][ T4797] dump_stack_lvl+0x10c/0x190 [ 114.719396][ T4797] ? __cfi_dump_stack_lvl+0x10/0x10 [ 114.719423][ T4797] dump_stack+0x19/0x20 [ 114.719445][ T4797] should_fail_ex+0x3d9/0x530 [ 114.719470][ T4797] should_fail+0xf/0x20 [ 114.719490][ T4797] should_fail_usercopy+0x1e/0x30 [ 114.719514][ T4797] _copy_from_user+0x22/0xb0 [ 114.719542][ T4797] input_event_from_user+0xb3/0x280 [ 114.719573][ T4797] ? __cfi_input_event_from_user+0x10/0x10 [ 114.719604][ T4797] ? __kasan_check_read+0x15/0x20 [ 114.719634][ T4797] ? input_event+0xa9/0xc0 [ 114.719655][ T4797] uinput_write+0x22c/0xef0 [ 114.719682][ T4797] ? __cfi_uinput_write+0x10/0x10 [ 114.719705][ T4797] ? proc_fail_nth_write+0x17e/0x210 [ 114.719727][ T4797] ? bpf_lsm_file_permission+0xd/0x20 [ 114.719750][ T4797] ? __cfi_uinput_write+0x10/0x10 [ 114.719774][ T4797] vfs_write+0x3c0/0xe80 [ 114.719800][ T4797] ? __cfi_vfs_write+0x10/0x10 [ 114.719824][ T4797] ? __fget_files+0x2c5/0x340 [ 114.719853][ T4797] ksys_write+0x141/0x250 [ 114.719878][ T4797] ? __cfi_ksys_write+0x10/0x10 [ 114.719903][ T4797] ? __kasan_check_read+0x15/0x20 [ 114.719927][ T4797] __x64_sys_write+0x7f/0x90 [ 114.719951][ T4797] x64_sys_call+0x271c/0x2ee0 [ 114.719979][ T4797] do_syscall_64+0x58/0xf0 [ 114.720005][ T4797] ? clear_bhb_loop+0x35/0x90 [ 114.720035][ T4797] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 114.720068][ T4797] RIP: 0033:0x7f2993d8e929 [ 114.720085][ T4797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.720104][ T4797] RSP: 002b:00007f2994b12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.720127][ T4797] RAX: ffffffffffffffda RBX: 00007f2993fb6080 RCX: 00007f2993d8e929 [ 114.720143][ T4797] RDX: 000000000000045c RSI: 0000200000000980 RDI: 0000000000000003 [ 114.720157][ T4797] RBP: 00007f2994b12090 R08: 0000000000000000 R09: 0000000000000000 [ 114.720171][ T4797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.720183][ T4797] R13: 0000000000000001 R14: 00007f2993fb6080 R15: 00007ffd7686d9c8 [ 114.720200][ T4797] [ 114.776133][ T36] audit: type=1400 audit(1750311881.730:8610): avc: denied { ioctl } for pid=4789 comm="syz.1.1443" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 115.040590][ T4799] binder: Bad value for 'stats' [ 115.052433][ T4807] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 115.361912][ T4818] input: syz0 as /devices/virtual/input/input121 [ 115.575323][ T4830] rust_binder: Read failure Err(EAGAIN) in pid:429 [ 115.716409][ T4839] binder: Unknown parameter 'dont_hash' [ 115.790754][ T4838] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 115.790791][ T4838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:431 [ 115.896287][ T4844] input: syz0 as /devices/virtual/input/input122 [ 116.058034][ T4851] input: syz1 as /devices/virtual/input/input124 [ 116.141080][ T4856] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 116.141116][ T4856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:632 [ 116.289082][ T4863] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:634 [ 116.325170][ T4866] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:634 [ 116.332281][ T4865] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.338731][ T4861] SELinux: policydb magic number 0x76656409 does not match expected magic number 0xf97cff8c [ 116.420671][ T4861] SELinux: failed to load policy [ 116.945021][ T4897] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.001102][ T46] bridge_slave_1: left allmulticast mode [ 117.033518][ T46] bridge_slave_1: left promiscuous mode [ 117.047472][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.065662][ T46] bridge_slave_0: left allmulticast mode [ 117.075403][ T4897] rust_binder: Error in use_page_slow: ESRCH [ 117.075431][ T4897] rust_binder: use_range failure ESRCH [ 117.085146][ T46] bridge_slave_0: left promiscuous mode [ 117.088181][ T4900] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 117.105422][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.135543][ T4900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:442 [ 117.155880][ T4897] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 117.213858][ T4897] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 117.250492][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.289644][ T4897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:645 [ 117.290452][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.320398][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.337363][ T46] veth1_macvtap: left promiscuous mode [ 117.346378][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.356268][ T46] veth0_vlan: left promiscuous mode [ 117.378196][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.410208][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.445539][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.470403][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.477086][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.525543][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.535620][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.547610][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.557448][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.566995][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.574306][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.581586][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.589083][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.609937][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.633470][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.653683][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.670801][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.681265][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.695912][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.710628][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.735700][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.770174][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.787701][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.808804][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.853185][ T4908] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.861473][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.868115][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.877828][ T4908] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.886892][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.892512][ T4908] bridge_slave_0: entered allmulticast mode [ 117.900041][ T4908] bridge_slave_0: entered promiscuous mode [ 117.908208][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.915909][ T4908] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.925792][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.932075][ T4908] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.941553][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.968341][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 117.969282][ T4908] bridge_slave_1: entered allmulticast mode [ 117.989714][ T4908] bridge_slave_1: entered promiscuous mode [ 117.993210][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 118.019312][ T4923] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 118.028157][ T4906] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 118.105979][ T4926] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 118.159401][ T4932] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.161078][ T4926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.183201][ T4926] rust_binder: Error in use_page_slow: ESRCH [ 118.193418][ T4926] rust_binder: use_range failure ESRCH [ 118.215043][ T4933] rust_binder: got new transaction with bad transaction stack [ 118.228030][ T4926] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 118.235854][ T4933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:447 [ 118.261927][ T4926] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 118.279720][ T4926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:654 [ 118.411413][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.427544][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.449344][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.456679][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.503049][ T4945] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.521423][ T4945] cgroup: fork rejected by pids controller in /syz4 [ 118.614715][ T4908] veth0_vlan: entered promiscuous mode [ 118.675833][ T5001] input: syz0 as /devices/virtual/input/input125 [ 118.691860][ T4908] veth1_macvtap: entered promiscuous mode [ 118.794166][ T5051] rust_binder: Error while translating object. [ 118.794196][ T5051] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 118.829279][ T5051] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1292 [ 119.249280][ T36] kauditd_printk_skb: 925 callbacks suppressed [ 119.249299][ T36] audit: type=1400 audit(1750311886.650:9491): avc: denied { read write } for pid=3091 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.340199][ T304] bridge_slave_1: left allmulticast mode [ 119.346257][ T36] audit: type=1400 audit(1750311886.700:9492): avc: denied { read write open } for pid=3091 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.351201][ T304] bridge_slave_1: left promiscuous mode [ 119.440991][ T5060] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 119.441047][ T5060] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 119.445143][ T36] audit: type=1400 audit(1750311886.700:9493): avc: denied { ioctl } for pid=3091 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.448974][ T5060] rust_binder: Read failure Err(EFAULT) in pid:1294 [ 119.482710][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.490281][ T36] audit: type=1400 audit(1750311886.760:9494): avc: denied { read } for pid=5053 comm="syz.1.1494" name="binder0" dev="binder" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 119.529258][ T304] bridge_slave_0: left allmulticast mode [ 119.535075][ T304] bridge_slave_0: left promiscuous mode [ 119.570840][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.587061][ T36] audit: type=1400 audit(1750311886.760:9495): avc: denied { read open } for pid=5053 comm="syz.1.1494" path="/dev/binderfs/binder0" dev="binder" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 119.619752][ T5060] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 119.652004][ T36] audit: type=1400 audit(1750311886.790:9496): avc: denied { read } for pid=5065 comm="syz.5.1496" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 119.684726][ T36] audit: type=1400 audit(1750311886.790:9497): avc: denied { read open } for pid=5065 comm="syz.5.1496" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 119.717521][ T5073] input: syz1 as /devices/virtual/input/input126 [ 119.753567][ T36] audit: type=1400 audit(1750311886.790:9498): avc: denied { read } for pid=5065 comm="syz.5.1496" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 119.811499][ T36] audit: type=1400 audit(1750311886.790:9499): avc: denied { read open } for pid=5065 comm="syz.5.1496" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 119.895685][ T36] audit: type=1400 audit(1750311886.790:9500): avc: denied { ioctl } for pid=5065 comm="syz.5.1496" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 119.924075][ T304] veth1_macvtap: left promiscuous mode [ 119.942865][ T5076] rust_binder: Error while translating object. [ 119.942891][ T5076] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 119.949107][ T5076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:10 [ 119.969840][ T304] veth0_vlan: left promiscuous mode [ 120.150138][ T5078] input: syz0 as /devices/virtual/input/input127 [ 120.433976][ T5090] input: syz1 as /devices/virtual/input/input128 [ 120.459294][ T5090] input: failed to attach handler leds to device input128, error: -6 [ 120.500062][ T5095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:461 [ 120.554519][ T5079] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.562093][ T5079] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.573043][ T5079] bridge_slave_0: entered allmulticast mode [ 120.580359][ T5079] bridge_slave_0: entered promiscuous mode [ 120.602436][ T5079] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.610088][ T5079] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.617200][ T5079] bridge_slave_1: entered allmulticast mode [ 120.649719][ T5079] bridge_slave_1: entered promiscuous mode [ 120.669026][ T5100] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.824473][ T5104] input: syz0 as /devices/virtual/input/input130 [ 120.865892][ T5104] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:466 [ 121.030578][ T5079] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.046789][ T5079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.054145][ T5079] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.061231][ T5079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.132057][ T5114] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.176169][ T5112] SELinux: security_context_str_to_sid (systešu?) failed with errno=-22 [ 121.185768][ T5113] rust_binder: Error in use_page_slow: ESRCH [ 121.185791][ T5113] rust_binder: use_range failure ESRCH [ 121.195924][ T5112] rust_binder: Write failure EINVAL in pid:468 [ 121.205775][ T5113] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 121.224177][ T5113] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 121.249304][ T5113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:21 [ 121.299552][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.329621][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.396683][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.403785][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.450342][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.457433][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.550972][ T5126] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.558989][ T5126] rust_binder: Error while translating object. [ 121.575732][ T5126] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 121.598649][ T5126] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:471 [ 121.689838][ T5079] veth0_vlan: entered promiscuous mode [ 121.770052][ T5079] veth1_macvtap: entered promiscuous mode [ 121.938784][ T5143] input: syz0 as /devices/virtual/input/input133 [ 122.061192][ T5149] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 122.091136][ T5150] random: crng reseeded on system resumption [ 122.171516][ T5153] rust_binder: Error in use_page_slow: ESRCH [ 122.171543][ T5153] rust_binder: use_range failure ESRCH [ 122.177586][ T5153] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 122.188559][ T5157] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.198345][ T5153] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 122.206340][ T5157] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.215997][ T5153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1319 [ 122.293609][ T5161] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 122.361760][ T5165] binder: Bad value for 'max' [ 122.398746][ T5163] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.433435][ T5168] binder: Bad value for 'defcontext' [ 122.819760][ T5181] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 122.825435][ T5193] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.906061][ T5198] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 122.932630][ T5200] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 123.013577][ T5203] input: syz0 as /devices/virtual/input/input134 [ 123.121889][ T5205] kvm: user requested TSC rate below hardware speed [ 123.157639][ T5208] kvm: user requested TSC rate below hardware speed [ 123.243888][ T5205] input: syz1 as /devices/virtual/input/input135 [ 123.549733][ T5226] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 123.624166][ T5229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.661416][ T5231] input: syz0 as /devices/virtual/input/input138 [ 123.726229][ T5234] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 123.748468][ T5237] input: syz0 as /devices/virtual/input/input139 [ 124.190732][ T5259] binder: Unknown parameter '00000000000000000000' [ 124.261366][ T36] kauditd_printk_skb: 1146 callbacks suppressed [ 124.261384][ T36] audit: type=1400 audit(1750311891.670:10647): avc: denied { read open } for pid=5263 comm="syz.5.1558" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 124.312156][ T36] audit: type=1400 audit(1750311891.680:10648): avc: denied { read } for pid=5262 comm="syz.3.1559" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.364246][ T36] audit: type=1400 audit(1750311891.680:10649): avc: denied { read open } for pid=5262 comm="syz.3.1559" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.393441][ T5271] rust_binder: Read failure Err(EAGAIN) in pid:71 [ 124.428274][ T36] audit: type=1400 audit(1750311891.680:10650): avc: denied { ioctl } for pid=5262 comm="syz.3.1559" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.515589][ T5278] binder: Unknown parameter 'dont_hash' [ 124.519247][ T36] audit: type=1400 audit(1750311891.680:10651): avc: denied { map } for pid=5262 comm="syz.3.1559" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.546992][ T36] audit: type=1400 audit(1750311891.680:10652): avc: denied { read } for pid=5262 comm="syz.3.1559" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.574032][ T36] audit: type=1400 audit(1750311891.700:10653): avc: denied { ioctl } for pid=5263 comm="syz.5.1558" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 124.627452][ T36] audit: type=1400 audit(1750311891.720:10654): avc: denied { read write } for pid=4908 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.638197][ T5280] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:32 [ 124.670069][ T36] audit: type=1400 audit(1750311891.720:10655): avc: denied { read write open } for pid=4908 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.671592][ T5283] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.709265][ T36] audit: type=1400 audit(1750311891.730:10656): avc: denied { ioctl } for pid=4908 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.712975][ T5283] rust_binder: Error while translating object. [ 124.809231][ T5283] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 124.815545][ T5283] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 124.913256][ T5286] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1343 [ 125.060743][ T5291] binder: Unknown parameter 'ÿ' [ 125.142775][ T5297] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 125.180948][ T5292] binder: Unknown parameter '' [ 125.261179][ T5305] SELinux: policydb version 51618937 does not match my version range 15-33 [ 125.283543][ T5305] SELinux: failed to load policy [ 125.300536][ T5305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1346 [ 125.631820][ T5320] can0: slcan on ptm0. [ 125.754250][ T5320] can0 (unregistered): slcan off ptm0. [ 125.908608][ T5329] random: crng reseeded on system resumption [ 126.236355][ T5344] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.296638][ T5349] rust_binder: Error in use_page_slow: ESRCH [ 126.313700][ T5349] rust_binder: use_range failure ESRCH [ 126.330799][ T5349] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 126.336315][ T5349] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 126.349755][ T5349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1356 [ 126.362453][ T5350] rust_binder: Error in use_page_slow: ESRCH [ 126.391969][ T5350] rust_binder: use_range failure ESRCH [ 126.431577][ T5350] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 126.437918][ T5350] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 126.447615][ T5350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1356 [ 126.651417][ T5362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:538 [ 126.999236][ T5381] input: syz0 as /devices/virtual/input/input141 [ 127.029992][ T5380] rust_binder: Write failure EFAULT in pid:106 [ 127.309552][ T5392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:63 [ 127.342913][ T5395] rust_binder: Error while translating object. [ 127.382407][ T5395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 127.404849][ T5395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:110 [ 127.610521][ T5400] rust_binder: Write failure EINVAL in pid:113 [ 127.792336][ T5409] kvm: apic: phys broadcast and lowest prio [ 127.893241][ T5414] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 127.948534][ T5416] input: syz0 as /devices/virtual/input/input143 [ 128.007785][ T5418] binder: Bad value for 'stats' [ 128.243808][ T5429] binder: Unknown parameter '18446744073709551615' [ 128.248068][ T5425] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 128.260378][ T5425] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 128.280489][ T5429] binder: Unknown parameter '18446744073709551615' [ 128.353624][ T5436] rust_binder: Write failure EFAULT in pid:75 [ 128.363692][ T5436] can0: slcan on ptm0. [ 128.430683][ T5438] rust_binder: Error while translating object. [ 128.430730][ T5438] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 128.436939][ T5438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:122 [ 128.452862][ T5435] can0 (unregistered): slcan off ptm0. [ 128.640203][ T5447] can0: slcan on ttyS3. [ 128.701416][ T5445] can0 (unregistered): slcan off ttyS3. [ 129.269516][ T36] kauditd_printk_skb: 852 callbacks suppressed [ 129.269537][ T36] audit: type=1400 audit(1750311896.680:11509): avc: denied { read write } for pid=5479 comm="syz.3.1629" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 129.312046][ T36] audit: type=1400 audit(1750311896.680:11510): avc: denied { read } for pid=5483 comm="syz.1.1630" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 129.337952][ T5480] input: syz0 as /devices/virtual/input/input145 [ 129.348352][ T36] audit: type=1400 audit(1750311896.680:11511): avc: denied { read open } for pid=5483 comm="syz.1.1630" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 129.372067][ T5480] input: failed to attach handler leds to device input145, error: -6 [ 129.405922][ T36] audit: type=1400 audit(1750311896.680:11512): avc: denied { read } for pid=5483 comm="syz.1.1630" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 129.411002][ T5480] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 129.433694][ T36] audit: type=1400 audit(1750311896.680:11513): avc: denied { read open } for pid=5483 comm="syz.1.1630" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 129.469232][ T5480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:561 [ 129.476477][ T36] audit: type=1400 audit(1750311896.680:11514): avc: denied { ioctl } for pid=5483 comm="syz.1.1630" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 129.510531][ T5487] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 129.571381][ T36] audit: type=1400 audit(1750311896.680:11515): avc: denied { ioctl } for pid=5483 comm="syz.1.1630" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 129.653366][ T36] audit: type=1400 audit(1750311896.710:11516): avc: denied { read open } for pid=5479 comm="syz.3.1629" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 129.717006][ T36] audit: type=1400 audit(1750311896.710:11517): avc: denied { map } for pid=5479 comm="syz.3.1629" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 129.763933][ T5499] SELinux: failed to load policy [ 129.779277][ T36] audit: type=1400 audit(1750311896.710:11518): avc: denied { read } for pid=5479 comm="syz.3.1629" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 130.178658][ T5517] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 130.226638][ T5523] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 130.416411][ T5531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1403 [ 130.567527][ T5539] rust_binder: Write failure EFAULT in pid:1405 [ 130.704854][ T5541] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 130.742734][ T5550] input: syz0 as /devices/virtual/input/input146 [ 130.775537][ T5548] binder: Unknown parameter 'ÿÿÿÿ' [ 131.095546][ T5555] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.364946][ T5576] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 131.542755][ T5584] input: syz0 as /devices/virtual/input/input148 [ 131.733727][ T5580] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 4096) [ 131.733756][ T5580] rust_binder: Error while translating object. [ 131.763671][ T5580] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 131.806950][ T5580] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:114 [ 132.221031][ T5610] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 132.241153][ T5614] rust_binder: Error while translating object. [ 132.241199][ T5614] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 132.274404][ T5614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1428 [ 132.285459][ T5616] input: syz0 as /devices/virtual/input/input149 [ 132.481378][ T5623] input: syz0 as /devices/virtual/input/input150 [ 132.868577][ T5639] kvm: user requested TSC rate below hardware speed [ 132.982224][ T5649] input: syz0 as /devices/virtual/input/input152 [ 133.135911][ T5653] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 133.135954][ T5653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1437 [ 133.309831][ T1367] Bluetooth: hci0: Frame reassembly failed (-84) [ 134.275162][ T5708] rust_binder: Write failure EINVAL in pid:623 [ 134.286582][ T36] kauditd_printk_skb: 861 callbacks suppressed [ 134.286602][ T36] audit: type=1400 audit(1750311901.690:12371): avc: denied { read write } for pid=3091 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.324545][ T36] audit: type=1400 audit(1750311901.690:12372): avc: denied { read write open } for pid=3091 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.353042][ T36] audit: type=1400 audit(1750311901.690:12373): avc: denied { ioctl } for pid=3091 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.379024][ T36] audit: type=1400 audit(1750311901.760:12374): avc: denied { read } for pid=5709 comm="syz.5.1706" name="binder0" dev="binder" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 134.405540][ T36] audit: type=1400 audit(1750311901.760:12375): avc: denied { read open } for pid=5709 comm="syz.5.1706" path="/dev/binderfs/binder0" dev="binder" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 134.439981][ T36] audit: type=1400 audit(1750311901.780:12376): avc: denied { ioctl } for pid=5709 comm="syz.5.1706" path="/dev/binderfs/binder0" dev="binder" ino=84 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 134.493846][ T5712] audit: audit_backlog=65 > audit_backlog_limit=64 [ 134.501033][ T36] audit: type=1400 audit(1750311901.780:12377): avc: denied { set_context_mgr } for pid=5709 comm="syz.5.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 134.503667][ T5712] audit: audit_lost=117 audit_rate_limit=0 audit_backlog_limit=64 [ 134.537812][ T36] audit: type=1400 audit(1750311901.810:12378): avc: denied { read write } for pid=3091 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.853722][ T5733] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.857635][ T5733] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 134.934143][ T5733] rust_binder: Error in use_page_slow: ESRCH [ 134.942092][ T5733] rust_binder: use_range failure ESRCH [ 134.948106][ T5733] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 134.954964][ T5733] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 134.963670][ T5733] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1458 [ 135.062739][ T5740] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 135.361006][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 135.367232][ T351] Bluetooth: hci0: command 0x1003 tx timeout [ 135.387543][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.425327][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.434532][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.448718][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.459937][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.467718][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.475808][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.489251][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.497173][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.505070][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.512907][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.520712][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.529256][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.537259][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.546153][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.554561][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.562987][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.578744][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.586760][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.594793][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.614726][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.629363][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.637145][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.646205][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.654288][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.666609][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.682371][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.696793][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.706351][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.714523][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.724097][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.731965][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.739793][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.751018][ T5779] binder: Bad value for 'stats' [ 135.754575][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.766135][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.773931][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.781706][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.789648][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.803352][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.812986][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.827354][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.846576][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.862834][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.871334][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.887273][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.895096][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.904404][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.913226][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.923547][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.932137][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.939378][ T5791] rust_binder: Error while translating object. [ 135.940213][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.943896][ T5791] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 135.954327][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.964330][ T5791] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:184 [ 135.971908][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.989320][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 135.997275][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.031393][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.043842][ T5796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 136.043879][ T5796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 136.047674][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.070814][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.078810][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.086796][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.095378][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.103199][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.111002][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.118767][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.129265][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.137107][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.145461][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.147707][ T5798] input: syz0 as /devices/virtual/input/input157 [ 136.159290][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.167405][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.175485][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.183604][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.191411][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.213392][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.221222][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.228983][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.236833][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.244697][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.252622][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.261813][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.270180][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.273365][ T5805] binder: Unknown parameter 'uid' [ 136.278186][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.292071][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.300677][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.308725][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.317686][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.326230][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.334595][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.348393][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.356920][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.365381][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.373743][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.382169][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.391828][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.400625][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.408575][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.417252][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.426825][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.434623][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.442529][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.450353][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.458153][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.465945][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.473754][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.481541][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.489873][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.497745][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.505560][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.514307][ T5816] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 136.514341][ T5816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1488 [ 136.523849][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.541287][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.549092][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.556915][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.564735][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.573175][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.581604][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.586002][ T5818] random: crng reseeded on system resumption [ 136.590395][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.605247][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.620000][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.627972][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.636760][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.645755][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.654157][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.662919][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.671308][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.679079][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.688095][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.697496][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.706034][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.713841][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.721694][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.731921][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.739701][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.747571][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.755398][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.763241][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.771049][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.778830][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.787056][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.794875][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.802680][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.810506][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.818266][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.826094][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.833928][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.841768][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.849563][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.857327][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.865570][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.880772][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.888804][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.896774][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.904580][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.912371][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.920185][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.927951][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.941359][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.949263][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.957030][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.966866][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.975483][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.984132][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 136.998966][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 137.007360][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 137.015754][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 137.030505][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 137.038282][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 137.047293][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 137.070054][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 137.077854][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 137.085716][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 137.093754][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 137.101582][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 137.110238][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 137.117985][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 137.125802][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 137.133735][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 137.141594][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 137.149399][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 137.157154][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 137.164970][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 137.172819][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 137.180657][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: unknown main item tag 0x0 [ 137.190217][ T10] hid-generic 00E0:7FFFFFFF:0003.0007: hidraw0: HID v5.1b Device [syz1] on syz1 [ 137.452348][ T5839] SELinux: security_context_str_to_sid (sytem_uÝGй_device) failed with errno=-22 [ 137.510941][ T5854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:201 [ 137.722633][ T5862] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 137.800994][ T5862] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 137.930085][ T5878] input: syz1 as /devices/virtual/input/input159 [ 138.187309][ T5888] binder: Unknown parameter 'dont_hash' [ 138.229078][ T5884] fido_id[5884]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 138.307858][ T5894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:164 [ 138.363434][ T5897] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.525739][ T5901] rust_binder: Error while translating object. [ 138.574887][ T5901] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 138.609508][ T5901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:680 [ 139.039083][ T5925] rust_binder: Write failure EINVAL in pid:1530 [ 139.080998][ T5925] binder: Bad value for 'stats' [ 139.109087][ T5925] rust_binder: got new transaction with bad transaction stack [ 139.109111][ T5925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1530 [ 139.133312][ T5932] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 139.256252][ T2518] hid-generic 0000:0000:0000.0008: item fetching failed at offset 0/1 [ 139.279467][ T2518] hid-generic 0000:0000:0000.0008: probe with driver hid-generic failed with error -22 [ 139.333262][ T36] kauditd_printk_skb: 1075 callbacks suppressed [ 139.333281][ T36] audit: type=1400 audit(1750311906.730:13453): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.409223][ T36] audit: type=1400 audit(1750311906.740:13454): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.492077][ T36] audit: type=1400 audit(1750311906.740:13455): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.535430][ T5942] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 139.540969][ T36] audit: type=1400 audit(1750311906.790:13456): avc: denied { read write } for pid=5941 comm="syz.1.1783" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 139.598764][ T36] audit: type=1400 audit(1750311906.790:13457): avc: denied { read open } for pid=5941 comm="syz.1.1783" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 139.626552][ T36] audit: type=1400 audit(1750311906.800:13458): avc: denied { read } for pid=5938 comm="syz.4.1782" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 139.652635][ T36] audit: type=1400 audit(1750311906.800:13459): avc: denied { read write } for pid=5941 comm="syz.1.1783" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 139.677637][ T36] audit: type=1400 audit(1750311906.800:13460): avc: denied { read write open } for pid=5941 comm="syz.1.1783" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 139.715357][ T36] audit: type=1400 audit(1750311906.800:13461): avc: denied { read open } for pid=5938 comm="syz.4.1782" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 139.747778][ T36] audit: type=1400 audit(1750311906.800:13462): avc: denied { ioctl } for pid=5941 comm="syz.1.1783" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 139.815389][ T5951] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 139.960062][ T5953] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 140.192214][ T5971] binder: Unknown parameter 'dont_hash' [ 140.330499][ T5978] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 140.573944][ T5990] input: syz0 as /devices/virtual/input/input162 [ 141.119856][ T6009] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 141.119894][ T6009] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:699 [ 141.382237][ T6023] binder: Unknown parameter 'statsÿ' [ 141.409517][ T6022] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 141.448347][ T6022] rust_binder: Error while translating object. [ 141.448397][ T6022] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 141.455216][ T6022] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:702 [ 141.717155][ T6039] input: syz1 as /devices/virtual/input/input164 [ 141.768221][ T6041] SELinux: security_context_str_to_sid () failed with errno=-22 [ 141.790556][ T6039] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 141.829310][ T6039] SELinux: failed to load policy [ 141.950375][ T6039] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 142.300471][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 142.306997][ T1367] Bluetooth: hci0: Frame reassembly failed (-84) [ 142.323743][ T6072] rust_binder: Error while translating object. [ 142.323774][ T6072] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 142.330913][ T6076] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 142.361906][ T6072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:263 [ 142.383565][ T6079] rust_binder: Read failure Err(EAGAIN) in pid:714 [ 142.446813][ T6081] binder: Binderfs stats mode cannot be changed during a remount [ 142.481546][ T6081] binder: Unknown parameter '0x0000000000040000' [ 142.498808][ T6086] SELinux: security_context_str_to_sid (s¢tem_uÝGй) failed with errno=-22 [ 142.683843][ T6095] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 142.749727][ T6094] input: syz0 as /devices/virtual/input/input165 [ 142.913323][ T6104] rust_binder: Write failure EFAULT in pid:727 [ 142.920358][ T6108] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.165404][ T6114] kvm: kvm [6113]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0xfff [ 143.276631][ T6118] rust_binder: Error while translating object. [ 143.276675][ T6118] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 143.284811][ T6118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:274 [ 143.300655][ T6118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:274 [ 143.426684][ T6123] rust_binder: got new transaction with bad transaction stack [ 143.446067][ T6123] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:735 [ 143.545560][ T6126] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 143.576888][ T6128] SELinux: policydb version 905587468 does not match my version range 15-33 [ 143.624242][ T6128] SELinux: failed to load policy [ 144.000757][ T6152] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 144.187366][ T6160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:287 [ 144.319703][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 144.334929][ T351] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 144.349033][ T36] kauditd_printk_skb: 888 callbacks suppressed [ 144.349051][ T36] audit: type=1400 audit(1750311911.750:14351): avc: denied { read write } for pid=4908 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.449570][ T36] audit: type=1400 audit(1750311911.760:14352): avc: denied { read write open } for pid=4908 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.560766][ T6179] binder: Unknown parameter '¨(ºr\ÔZëøÅñʳ¼#eÞ“(Õ”…ûwà!Ö·|l›ÆV¥Ú¿é%àâh1D' [ 144.564845][ T36] audit: type=1400 audit(1750311911.760:14353): avc: denied { ioctl } for pid=4908 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.651649][ T36] audit: type=1400 audit(1750311911.780:14354): avc: denied { read } for pid=6169 comm="syz.3.1855" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.707903][ T36] audit: type=1400 audit(1750311911.780:14355): avc: denied { read open } for pid=6169 comm="syz.3.1855" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.740802][ T36] audit: type=1400 audit(1750311911.780:14356): avc: denied { read } for pid=6169 comm="syz.3.1855" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 144.785260][ T6189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.785836][ T6189] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.794768][ T36] audit: type=1400 audit(1750311911.780:14357): avc: denied { read open } for pid=6169 comm="syz.3.1855" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 144.827621][ T6189] audit: audit_lost=118 audit_rate_limit=0 audit_backlog_limit=64 [ 144.831951][ T6195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.849889][ T6192] rust_binder: Error in use_page_slow: ESRCH [ 144.849914][ T6192] rust_binder: use_range failure ESRCH [ 144.854897][ T6196] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 144.855927][ T6192] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 144.871459][ T6195] input: syz1 as /devices/virtual/input/input167 [ 144.874322][ T6196] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 144.930882][ T6192] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 144.968494][ T6196] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:753 [ 144.996812][ T6192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:753 [ 145.196786][ T6200] input: syz0 as /devices/virtual/input/input168 [ 145.277914][ T6203] rust_binder: Write failure EINVAL in pid:1596 [ 145.480046][ T6210] binder: Bad value for 'defcontext' [ 146.242275][ T6253] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 146.262186][ T6253] SELinux: failed to load policy [ 146.282921][ T6258] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.290565][ T6258] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 146.313337][ T6251] SELinux: security_context_str_to_sid () failed with errno=-22 [ 146.662349][ T6271] kvm: kvm [6270]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xaf [ 146.895041][ T6282] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.086907][ T6292] input: syz0 as /devices/virtual/input/input171 [ 147.430007][ T6302] SELinux: failed to load policy [ 147.448219][ T6302] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 147.448255][ T6302] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:787 [ 147.698859][ T6316] input: syz0 as /devices/virtual/input/input172 [ 148.081808][ T6329] SELinux: failed to load policy [ 148.161094][ T6333] input: syz0 as /devices/virtual/input/input173 [ 148.162282][ T6334] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 148.205839][ T6333] binder: Unknown parameter 'context' [ 148.365720][ T6339] rust_binder: Write failure EINVAL in pid:1621 [ 148.410489][ T6336] input: syz0 as /devices/virtual/input/input174 [ 148.788032][ T6361] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.797780][ T6361] input: syz0 as /devices/virtual/input/input175 [ 148.848335][ T6361] input: failed to attach handler leds to device input175, error: -6 [ 148.858266][ T6363] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 149.030641][ T6366] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 149.362841][ T36] kauditd_printk_skb: 1010 callbacks suppressed [ 149.362859][ T36] audit: type=1400 audit(1750311916.770:15290): avc: denied { read write } for pid=5079 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.424068][ T36] audit: type=1400 audit(1750311916.780:15291): avc: denied { read write open } for pid=5079 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.479976][ T36] audit: type=1400 audit(1750311916.780:15292): avc: denied { ioctl } for pid=5079 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.511510][ T36] audit: type=1400 audit(1750311916.820:15293): avc: denied { map } for pid=6375 comm="syz.5.1932" path="/dev/binderfs/binder0" dev="binder" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 149.567015][ T36] audit: type=1400 audit(1750311916.820:15294): avc: denied { read } for pid=6375 comm="syz.5.1932" path="/dev/binderfs/binder0" dev="binder" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 149.605158][ T6377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:810 [ 149.616156][ T36] audit: type=1400 audit(1750311916.820:15295): avc: denied { read } for pid=6375 comm="syz.5.1932" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 149.709269][ T36] audit: type=1400 audit(1750311916.820:15296): avc: denied { read open } for pid=6375 comm="syz.5.1932" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 149.735474][ T6388] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 176, size: 51) [ 149.735499][ T6388] rust_binder: Error while translating object. [ 149.779240][ T36] audit: type=1400 audit(1750311916.820:15297): avc: denied { ioctl } for pid=6375 comm="syz.5.1932" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 149.784891][ T6388] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 149.797831][ T6394] binder: Bad value for 'defcontext' [ 149.820772][ T6389] audit: audit_backlog=65 > audit_backlog_limit=64 [ 149.827972][ T36] audit: type=1400 audit(1750311916.830:15298): avc: denied { read append } for pid=6378 comm="syz.4.1933" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 149.869962][ T6393] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 149.881122][ T6388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:268 [ 150.123124][ T6404] input: syz1 as /devices/virtual/input/input179 [ 150.223124][ T6414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1637 [ 150.391326][ T6424] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.472099][ T6429] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 150.486479][ T6429] SELinux: failed to load policy [ 150.537935][ T6432] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.572360][ T304] bridge_slave_1: left allmulticast mode [ 150.600138][ T304] bridge_slave_1: left promiscuous mode [ 150.611277][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.622145][ T6436] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.632834][ T304] bridge_slave_0: left allmulticast mode [ 150.647839][ T304] bridge_slave_0: left promiscuous mode [ 150.653597][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.733325][ T6442] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.736421][ T6442] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 150.743476][ T6442] rust_binder: Error while translating object. [ 150.753210][ T6442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 150.760759][ T6442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1656 [ 150.774089][ T304] veth1_macvtap: left promiscuous mode [ 150.809514][ T6442] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 150.831375][ T304] veth0_vlan: left promiscuous mode [ 150.904988][ T6445] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 150.920443][ T6445] SELinux: failed to load policy [ 151.226056][ T6444] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.253323][ T6444] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.270349][ T6444] bridge_slave_0: entered allmulticast mode [ 151.279035][ T6465] SELinux: policydb magic number 0xa0000 does not match expected magic number 0xf97cff8c [ 151.287219][ T6444] bridge_slave_0: entered promiscuous mode [ 151.290997][ T6465] SELinux: failed to load policy [ 151.298103][ T6444] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.306865][ T6444] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.313969][ T6444] bridge_slave_1: entered allmulticast mode [ 151.320487][ T6444] bridge_slave_1: entered promiscuous mode [ 151.360706][ T6467] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 151.471843][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.485390][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.496963][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.504061][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.583558][ T6444] veth0_vlan: entered promiscuous mode [ 151.620589][ T6444] veth1_macvtap: entered promiscuous mode [ 152.268443][ T6495] kvm: user requested TSC rate below hardware speed [ 152.321270][ T6502] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 152.330705][ T6503] input: syz0 as /devices/virtual/input/input180 [ 152.579364][ T6518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 152.645773][ T6521] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 152.666831][ T6522] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 152.690638][ T6524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:286 [ 152.731673][ T6521] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 152.782269][ T6527] SELinux: policydb string does not match my string SE Linux [ 152.841786][ T6527] SELinux: failed to load policy [ 152.851171][ T6520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:24 [ 153.285997][ T6534] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 153.301448][ T6534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:841 [ 153.309277][ T6535] input: syz0 as /devices/virtual/input/input181 [ 153.577769][ T6541] rust_binder: Error while translating object. [ 153.577817][ T6541] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 153.584081][ T6541] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:847 [ 153.611151][ T6545] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.661713][ T6545] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.998229][ T6556] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 154.007038][ T6561] input: syz0 as /devices/virtual/input/input183 [ 154.191250][ T6568] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.211443][ T6571] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 154.222184][ T6571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:854 [ 154.373579][ T36] kauditd_printk_skb: 1137 callbacks suppressed [ 154.373598][ T36] audit: type=1400 audit(1750311921.780:16311): avc: denied { read } for pid=6574 comm="syz.4.1995" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 154.459995][ T36] audit: type=1400 audit(1750311921.820:16312): avc: denied { read open } for pid=6574 comm="syz.4.1995" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 154.496511][ T6581] binder: Bad value for 'stats' [ 154.503000][ T6580] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.503293][ T6580] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.519519][ T36] audit: type=1400 audit(1750311921.820:16313): avc: denied { ioctl } for pid=6574 comm="syz.4.1995" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 154.543198][ T6580] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.585981][ T36] audit: type=1400 audit(1750311921.820:16314): avc: denied { read write } for pid=6577 comm="syz.5.1997" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 154.637738][ T6592] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 154.645858][ T36] audit: type=1400 audit(1750311921.820:16315): avc: denied { read write open } for pid=6577 comm="syz.5.1997" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 154.709232][ T36] audit: type=1400 audit(1750311921.830:16316): avc: denied { ioctl } for pid=6577 comm="syz.5.1997" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 154.771779][ T36] audit: type=1400 audit(1750311921.830:16317): avc: denied { read } for pid=6575 comm="syz.1.1996" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 154.803021][ T6595] input: syz0 as /devices/virtual/input/input186 [ 154.829210][ T36] audit: type=1400 audit(1750311921.830:16318): avc: denied { read open } for pid=6575 comm="syz.1.1996" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 154.887703][ T36] audit: type=1400 audit(1750311921.840:16319): avc: denied { read write } for pid=6444 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.949223][ T6444] audit: audit_backlog=65 > audit_backlog_limit=64 [ 155.033388][ T6606] binder: Bad value for 'defcontext' [ 155.093026][ T6611] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 155.160012][ T6613] binder: Bad value for 'stats' [ 155.323931][ T6621] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 155.358916][ T6626] SELinux: policydb magic number 0xf978ff9a does not match expected magic number 0xf97cff8c [ 155.379389][ T6626] SELinux: failed to load policy [ 155.401461][ T6626] input: syz1 as /devices/virtual/input/input188 [ 155.795784][ T6645] input: syz1 as /devices/virtual/input/input189 [ 155.892500][ T6648] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 156.060472][ T6660] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.149272][ T6664] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION duplicate cookie [ 156.190920][ T6664] rust_binder: Write failure EINVAL in pid:315 [ 156.263198][ T6677] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.557354][ T6693] binfmt_misc: register: failed to install interpreter file ./file0 [ 156.693474][ T6693] input: syz1 as /devices/virtual/input/input191 [ 156.806281][ T6699] rust_binder: Read failure Err(EAGAIN) in pid:81 [ 156.841650][ T6702] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 156.998359][ T6711] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 157.057807][ T6715] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 157.161379][ T6720] rust_binder: Write failure EINVAL in pid:891 [ 157.185034][ T6719] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 157.259517][ T6722] SELinux: security_context_str_to_sid (system_) failed with errno=-22 [ 157.659068][ T6746] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 157.879158][ T6756] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 158.156227][ T6774] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 158.301280][ T6779] input: syz0 as /devices/virtual/input/input193 [ 158.511776][ T6781] rust_binder: Error in use_page_slow: ESRCH [ 158.511806][ T6781] rust_binder: use_range failure ESRCH [ 158.517830][ T6781] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 158.551173][ T6781] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 158.559050][ T6781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:103 [ 158.596073][ T6787] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 158.614937][ T6786] rust_binder: Error in use_page_slow: ESRCH [ 158.614958][ T6786] rust_binder: use_range failure ESRCH [ 158.627662][ T6794] input: syz0 as /devices/virtual/input/input194 [ 158.639312][ T6786] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 158.639609][ T6786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 158.658131][ T6786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:103 [ 158.940690][ T6806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1750 [ 159.063157][ T6817] input: syz0 as /devices/virtual/input/input195 [ 159.177928][ T6815] binder: Unknown parameter 'dont_hash' [ 159.390026][ T36] kauditd_printk_skb: 945 callbacks suppressed [ 159.390044][ T36] audit: type=1400 audit(1750311926.800:17254): avc: denied { read write } for pid=5079 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.476076][ T36] audit: type=1400 audit(1750311926.830:17255): avc: denied { read write open } for pid=5079 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.545700][ T36] audit: type=1400 audit(1750311926.830:17256): avc: denied { ioctl } for pid=5079 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.640722][ T6846] binder: Unknown parameter 'euid>00000000000000000000' [ 159.648576][ T36] audit: type=1400 audit(1750311926.860:17257): avc: denied { read write } for pid=3091 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.741648][ T36] audit: type=1400 audit(1750311926.860:17258): avc: denied { read write open } for pid=3091 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.818718][ T36] audit: type=1400 audit(1750311926.860:17259): avc: denied { ioctl } for pid=3091 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.861636][ T36] audit: type=1400 audit(1750311926.870:17260): avc: denied { read write } for pid=6444 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.885907][ T36] audit: type=1400 audit(1750311926.870:17261): avc: denied { read write open } for pid=6444 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.948336][ T36] audit: type=1400 audit(1750311926.870:17262): avc: denied { ioctl } for pid=6444 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.997673][ T6856] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.158508][ T6863] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:917 [ 160.579463][ T6887] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 160.619015][ T6887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1767 [ 160.735718][ T6890] input: syz1 as /devices/virtual/input/input197 [ 161.037782][ T6905] cgroup: fork rejected by pids controller in /syz1 [ 161.215684][ T6915] input: syz0 as /devices/virtual/input/input199 [ 161.476663][ T1367] bridge_slave_1: left allmulticast mode [ 161.489257][ T1367] bridge_slave_1: left promiscuous mode [ 161.515746][ T1367] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.550167][ T1367] bridge_slave_0: left allmulticast mode [ 161.560380][ T1367] bridge_slave_0: left promiscuous mode [ 161.572118][ T1367] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.842794][ T1367] veth1_macvtap: left promiscuous mode [ 161.848366][ T1367] veth0_vlan: left promiscuous mode [ 162.084430][ T6944] input: syz0 as /devices/virtual/input/input202 [ 162.198519][ T6951] input: syz0 as /devices/virtual/input/input203 [ 162.284355][ T6936] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.307352][ T6936] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.315678][ T6936] bridge_slave_0: entered allmulticast mode [ 162.322937][ T6936] bridge_slave_0: entered promiscuous mode [ 162.331550][ T6936] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.338792][ T6936] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.347046][ T6936] bridge_slave_1: entered allmulticast mode [ 162.354345][ T6936] bridge_slave_1: entered promiscuous mode [ 162.694816][ T6936] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.701939][ T6936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.709276][ T6936] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.716328][ T6936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.737103][ T6975] input: syz1 as /devices/virtual/input/input204 [ 162.834985][ T6979] input: syz1 as /devices/virtual/input/input205 [ 162.844992][ T1367] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.860816][ T1367] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.899421][ T1367] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.906508][ T1367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.942914][ T1367] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.950001][ T1367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.311997][ T6936] veth0_vlan: entered promiscuous mode [ 163.430979][ T6936] veth1_macvtap: entered promiscuous mode [ 164.443983][ T36] kauditd_printk_skb: 771 callbacks suppressed [ 164.444002][ T36] audit: type=1400 audit(1750311931.850:18026): avc: denied { read write } for pid=6444 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.527271][ T36] audit: type=1400 audit(1750311931.880:18027): avc: denied { write } for pid=7042 comm="syz.1.2167" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 164.597778][ T36] audit: type=1400 audit(1750311931.880:18028): avc: denied { write open } for pid=7042 comm="syz.1.2167" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 164.658407][ T36] audit: type=1400 audit(1750311931.890:18029): avc: denied { read write open } for pid=6444 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.759216][ T36] audit: type=1400 audit(1750311931.890:18030): avc: denied { ioctl } for pid=6444 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.814751][ T36] audit: type=1400 audit(1750311931.920:18031): avc: denied { read write } for pid=6936 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.869244][ T36] audit: type=1400 audit(1750311931.920:18032): avc: denied { read write open } for pid=6936 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.969230][ T36] audit: type=1400 audit(1750311931.920:18033): avc: denied { ioctl } for pid=6936 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 165.044419][ T36] audit: type=1400 audit(1750311931.930:18034): avc: denied { read write } for pid=5079 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 165.125556][ T36] audit: type=1400 audit(1750311931.930:18035): avc: denied { read write open } for pid=5079 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 165.587516][ T13] Bluetooth: hci0: Frame reassembly failed (-90) [ 165.595654][ T7090] input: syz1 as /devices/virtual/input/input209 [ 165.604237][ T7087] Bluetooth: hci0: Frame reassembly failed (-84) [ 165.960181][ T7109] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 167.599226][ T351] Bluetooth: hci0: command 0x1003 tx timeout [ 167.605323][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 167.672682][ T7191] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 167.672705][ T7191] rust_binder: Read failure Err(EFAULT) in pid:187 [ 167.681452][ T7191] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 167.687990][ T7191] rust_binder: Read failure Err(EFAULT) in pid:187 [ 168.579612][ T7237] random: crng reseeded on system resumption [ 168.817680][ T304] Bluetooth: hci0: Frame reassembly failed (-90) [ 168.834249][ T7246] Bluetooth: hci0: Frame reassembly failed (-84) [ 169.339307][ T7271] rust_kernel: panicked at drivers/android/binder/node.rs:877:13: [ 169.339307][ T7271] attempt to subtract with overflow [ 169.375938][ T7271] ------------[ cut here ]------------ [ 169.381517][ T7271] kernel BUG at rust/helpers/bug.c:7! [ 169.387448][ T7271] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 169.394434][ T7271] CPU: 0 UID: 0 PID: 7271 Comm: syz.3.2271 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 169.407914][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.417979][ T7271] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 169.423285][ T7271] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 ff db f6 da 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 b5 1f bf 56 90 90 90 90 90 90 90 90 90 [ 169.442897][ T7271] RSP: 0018:ffffc90006fc5ab0 EFLAGS: 00010246 [ 169.448969][ T7271] RAX: 0000000000000061 RBX: 1ffff92000df8b58 RCX: 23674e3036472800 [ 169.456948][ T7271] RDX: ffffc900026d1000 RSI: 0000000000003b1f RDI: 0000000000003b20 [ 169.464949][ T7271] RBP: ffffc90006fc5ab0 R08: ffffc90006fc57a7 R09: 1ffff92000df8af4 [ 169.472936][ T7271] R10: dffffc0000000000 R11: fffff52000df8af5 R12: 0000000000000000 [ 169.480919][ T7271] R13: dffffc0000000000 R14: ffffc90006fc5ae0 R15: ffffc90006fc5b10 [ 169.489069][ T7271] FS: 00007f2ffded06c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 169.498007][ T7271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.504595][ T7271] CR2: 00007f2ffdecff98 CR3: 0000000129b9a000 CR4: 00000000003526b0 [ 169.512577][ T7271] DR0: 0000000000000008 DR1: 00000000000000ff DR2: fffffffffffffffb [ 169.520558][ T7271] DR3: 3e00000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 169.528558][ T7271] Call Trace: [ 169.531838][ T7271] [ 169.534797][ T7271] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 169.542266][ T7271] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 169.550260][ T7271] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x401/0x810 [ 169.560518][ T7271] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 169.574073][ T7271] ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 169.584707][ T7271] ? __kasan_check_write+0x18/0x20 [ 169.589825][ T7271] ? _raw_spin_lock+0x8c/0x120 [ 169.594595][ T7271] ? __cfi__raw_spin_lock+0x10/0x10 [ 169.599795][ T7271] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 169.607012][ T7271] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 169.614931][ T7271] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 169.624829][ T7271] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 169.635431][ T7271] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 169.645166][ T7271] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 169.655267][ T7271] ? __kasan_check_write+0x18/0x20 [ 169.660394][ T7271] ? _raw_spin_lock+0x8c/0x120 [ 169.665168][ T7271] ? __cfi__raw_spin_lock+0x10/0x10 [ 169.670374][ T7271] ? __kasan_check_write+0x18/0x20 [ 169.675507][ T7271] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x27cf/0x96a0 [ 169.685068][ T7271] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 169.695002][ T7271] ? update_cfs_group+0x260/0x260 [ 169.700047][ T7271] ? is_bpf_text_address+0x17b/0x1a0 [ 169.705354][ T7271] ? cgroup_rstat_updated+0x132/0x7f0 [ 169.710731][ T7271] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 169.716458][ T7271] ? update_curr+0x949/0xc60 [ 169.721054][ T7271] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 169.726523][ T7271] ? is_bpf_text_address+0x17b/0x1a0 [ 169.731854][ T7271] ? kernel_text_address+0xa9/0xe0 [ 169.736968][ T7271] ? __kernel_text_address+0x11/0x40 [ 169.742263][ T7271] ? unwind_get_return_address+0x51/0x90 [ 169.747903][ T7271] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 169.754064][ T7271] ? arch_stack_walk+0x10b/0x170 [ 169.759035][ T7271] ? is_bpf_text_address+0x17b/0x1a0 [ 169.764354][ T7271] ? kernel_text_address+0xa9/0xe0 [ 169.769475][ T7271] ? unwind_get_return_address+0x51/0x90 [ 169.775113][ T7271] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 169.781282][ T7271] ? arch_stack_walk+0x10b/0x170 [ 169.786230][ T7271] ? stack_depot_save_flags+0x38/0x800 [ 169.791699][ T7271] ? kasan_save_alloc_info+0x40/0x50 [ 169.796987][ T7271] ? kasan_save_track+0x4f/0x80 [ 169.801851][ T7271] ? kasan_save_track+0x3e/0x80 [ 169.806715][ T7271] ? kasan_save_alloc_info+0x40/0x50 [ 169.812003][ T7271] ? __kasan_kmalloc+0x96/0xb0 [ 169.816778][ T7271] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 169.823457][ T7271] ? krealloc_noprof+0x8d/0x130 [ 169.828316][ T7271] ? rust_helper_krealloc+0x33/0xd0 [ 169.833525][ T7271] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 169.843085][ T7271] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 169.853602][ T7271] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20 [ 169.862891][ T7271] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 169.871575][ T7271] ? __se_sys_ioctl+0x132/0x1b0 [ 169.876439][ T7271] ? __x64_sys_ioctl+0x7f/0xa0 [ 169.881214][ T7271] ? do_syscall_64+0x58/0xf0 [ 169.885805][ T7271] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 169.891888][ T7271] ? kasan_save_alloc_info+0x40/0x50 [ 169.897178][ T7271] ? __kasan_kmalloc+0x96/0xb0 [ 169.901961][ T7271] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 169.908572][ T7271] ? __kasan_check_write+0x18/0x20 [ 169.913691][ T7271] ? _raw_spin_lock+0x8c/0x120 [ 169.918471][ T7271] ? __cfi__raw_spin_lock+0x10/0x10 [ 169.923672][ T7271] ? __asan_memset+0x39/0x50 [ 169.928264][ T7271] ? _raw_spin_unlock+0x45/0x60 [ 169.933117][ T7271] ? rust_helper_spin_unlock+0x19/0x30 [ 169.938574][ T7271] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0xdfc/0x1440 [ 169.949095][ T7271] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 169.959881][ T7271] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 169.965867][ T7271] ? common_lsm_audit+0x148c/0x1860 [ 169.971065][ T7271] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 169.977049][ T7271] ? slow_avc_audit+0x18d/0x1f0 [ 169.981898][ T7271] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 169.991012][ T7271] ? avc_denied+0x112/0x180 [ 169.995518][ T7271] ? avc_has_extended_perms+0x895/0xdd0 [ 170.001075][ T7271] ? avc_has_extended_perms+0x91a/0xdd0 [ 170.006620][ T7271] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 170.016180][ T7271] ? do_vfs_ioctl+0xeda/0x1e30 [ 170.020953][ T7271] ? __futex_queue+0x19a/0x340 [ 170.025726][ T7271] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 170.031368][ T7271] ? __cfi___futex_queue+0x10/0x10 [ 170.036574][ T7271] ? futex_wait_setup+0x1bc/0x260 [ 170.041600][ T7271] ? __futex_wait+0x218/0x2a0 [ 170.046273][ T7271] ? ioctl_has_perm+0x384/0x4d0 [ 170.051160][ T7271] ? has_cap_mac_admin+0xd0/0xd0 [ 170.056099][ T7271] ? futex_wake+0x63a/0x900 [ 170.060608][ T7271] ? futex_setup_timer+0xb4/0xd0 [ 170.065547][ T7271] ? futex_wait+0x288/0x540 [ 170.070047][ T7271] ? __cfi_futex_wait+0x10/0x10 [ 170.074897][ T7271] ? selinux_file_ioctl+0x6e0/0x1360 [ 170.080193][ T7271] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 170.085750][ T7271] ? do_futex+0x309/0x500 [ 170.090088][ T7271] ? __cfi_do_futex+0x10/0x10 [ 170.094772][ T7271] ? __fget_files+0x2c5/0x340 [ 170.099453][ T7271] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 170.107967][ T7271] ? __se_sys_ioctl+0x114/0x1b0 [ 170.112824][ T7271] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 170.121941][ T7271] __se_sys_ioctl+0x132/0x1b0 [ 170.126641][ T7271] __x64_sys_ioctl+0x7f/0xa0 [ 170.131237][ T7271] x64_sys_call+0x1878/0x2ee0 [ 170.135920][ T7271] do_syscall_64+0x58/0xf0 [ 170.140344][ T7271] ? clear_bhb_loop+0x35/0x90 [ 170.145050][ T7271] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 170.151024][ T7271] RIP: 0033:0x7f2ffcf8e929 [ 170.155459][ T7271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.175066][ T7271] RSP: 002b:00007f2ffded0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.183480][ T7271] RAX: ffffffffffffffda RBX: 00007f2ffd1b5fa0 RCX: 00007f2ffcf8e929 [ 170.191448][ T7271] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 170.199414][ T7271] RBP: 00007f2ffd010b39 R08: 0000000000000000 R09: 0000000000000000 [ 170.207379][ T7271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.215346][ T7271] R13: 0000000000000000 R14: 00007f2ffd1b5fa0 R15: 00007ffc8e9d9e78 [ 170.223317][ T7271] [ 170.226328][ T7271] Modules linked in: [ 170.230391][ T7271] ---[ end trace 0000000000000000 ]--- [ 170.235902][ T7271] RIP: 0010:rust_helper_BUG+0x8/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 170.244111][ T36] kauditd_printk_skb: 559 callbacks suppressed [ 170.244129][ T36] audit: type=1400 audit(1750311937.640:18595): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2673]" dev="pipefs" ino=2673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 170.293263][ T36] audit: type=1400 audit(1750311937.640:18596): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2673]" dev="pipefs" ino=2673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 170.309216][ T7271] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 ff db f6 da 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 b5 1f bf 56 90 90 90 90 90 90 90 90 90 [ 170.329779][ T36] audit: type=1400 audit(1750311937.640:18597): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2673]" dev="pipefs" ino=2673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 170.360421][ T7271] RSP: 0018:ffffc90006fc5ab0 EFLAGS: 00010246 [ 170.366538][ T7271] RAX: 0000000000000061 RBX: 1ffff92000df8b58 RCX: 23674e3036472800 [ 170.374626][ T7271] RDX: ffffc900026d1000 RSI: 0000000000003b1f RDI: 0000000000003b20 [ 170.382695][ T7271] RBP: ffffc90006fc5ab0 R08: ffffc90006fc57a7 R09: 1ffff92000df8af4 [ 170.391367][ T7271] R10: dffffc0000000000 R11: fffff52000df8af5 R12: 0000000000000000 [ 170.399428][ T7271] R13: dffffc0000000000 R14: ffffc90006fc5ae0 R15: ffffc90006fc5b10 [ 170.407548][ T7271] FS: 00007f2ffded06c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 170.416642][ T7271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.449240][ T7271] CR2: 000055b331292b98 CR3: 0000000129b9a000 CR4: 00000000003526b0 [ 170.457321][ T7271] DR0: 0000000000000008 DR1: 00000000000000ff DR2: fffffffffffffffb [ 170.477406][ T7271] DR3: 3e00000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 170.485520][ T7271] Kernel panic - not syncing: Fatal exception [ 170.492138][ T7271] Kernel Offset: disabled [ 170.496469][ T7271] Rebooting in 86400 seconds..