last executing test programs: 2.60434019s ago: executing program 3 (id=2541): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x3, 0x3, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3, 0x0, 0x6, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0xffffffff, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa0000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40000, 0x8, 0xc0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0xffffffff, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x44, 0x4000400, 0x0, 0x0, 0xfffffffd], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200400, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000001c0)={{}, 0x0, 0x4, @inherit={0x88, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000080000000000000003000000000000008b00000000000000200000000000000003000000000000000080000000000000080000000000000000000100"]}, @name="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"}) 1.591346316s ago: executing program 3 (id=2557): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x3, 0x3a, '.^', 0x3a, '&]!/', 0x3a, './cgroup', 0x3a, [0x46, 0x46]}, 0x30) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x198, 0x0, 0x4}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x31) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x569942, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x200, 0x20) ioctl$BLKRRPART(r6, 0x125f, 0x0) 1.338727839s ago: executing program 3 (id=2562): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000030001c0"]) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000000)={{0x1}}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) 1.272030431s ago: executing program 1 (id=2563): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0xd1383000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r4, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) 1.270899011s ago: executing program 2 (id=2564): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000240)={0x783, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f00000001c0)="d6"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0xbe6, 0x0, 0x7ffffffffff7fffe}]}) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te']) 1.219591081s ago: executing program 1 (id=2565): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0x8008ae9d, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000700000/0x4000)=nil, 0x4000, 0xd, 0x4010, r4, 0xb3551000) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x2000000, 0x8010, r1, 0x5b8fc000) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 1.177893662s ago: executing program 3 (id=2566): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x3, 0x3, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3, 0x0, 0x6, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0xffffffff, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa0000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40000, 0x8, 0xc0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0xffffffff, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x44, 0x4000400, 0x0, 0x0, 0xfffffffd], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200400, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000001c0)={{}, 0x0, 0x4, @inherit={0x88, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000080000000000000003000000000000008b00000000000000200000000000000003000000000000000080000000000000080000000000000000000100"]}, @name="f1680fd3dee5f3859e5888409671eb7f324f69c646b6445f1f3955f4b0b0f092f3c094dc9d87ac21f6f2ff839311a69b95888ba2da560dbadb7b85cb31615759298d08383671ae676ff1e128f8d43185dc0486b536f60a8993531324e9f7bcf97af161a315f8ac4a0a2ef14b827f44ccb53509838a46c00f00d983cfa45d0f44583f5c8cab74f7b68e6b87f9b849a482a041d48379a9e0e09b127101a6e31bb3d2fbcd4d0a9158cb450c66f6688b7b90fc3cfc12bdb6158b673f1fdfc0e894ea87259fbe8ec2eaa162b87e491e5a3ce9a5ea3e53e567c9a7bb8b4621e93f53065e5eca33e1922d23e93989d4e2d5609e8278abb4da4fd9de1b377010450fef6980482b8f722c8d9ca8b274bffa28df2a4ff0baf75f65dd006ae6f1b2ca85bf450e35120a28457ba250674a0013dcb8ea46a518093974eda95b222f04ffed322a18a910c6ce3b31ca8a29c1c2f3eca6a99754409227643efd3239a34d75d54ef27121cdfb13ce9082a42fa4b918a5549e5161d13d46608ef2f349fe3edd6425b63829efcfdbde33825d490f9016dfc610f9f8d58c5da5dcd332b165438403cf9fdecb0315469aed4fa28c25b5733de1aafd7d42a0a2cef597e857d0105f5d583e7e114155d571f59ab85af1a830809bcbf52fbdfe3e7de8d414f81eb22c3bfa66f544df98d4610097ccdc99d9532b85f7957a10b7370a89ee77709078cf98568de2dc82d72ef4f53e8b0bdacb960a222423f7f962f79c1259f8bb6d09d25ee430ef1a84c2a227a59bc6368874ec5753eaee926c7e790f54cbf2ea14f8a5524696faffd7449f8f9caf3fd5c414392b5b058ae9c454316696c81a21a677e1f1759812a6271e781be9dd55bb7a39be60548141dae813b1582eb0bbfa2355690937485fe63d6fc4f38184e5f2cd914f83ffba3fc4ccca26e9990efde31441f16d39ef9e01300bfe0b0d4bc514da5e17b689aba46481390c512480a2b5b10ead30365c9c5f2058994e19ffc5daa35390a4290e748794cb9b9681f5733c29960640c5f40a51bc6873353477409bf2d6fcd1bd9ba7cac75842b5419caa3dde40bd6edf57f262c81a488fd5cefbdd66f9044a2952cadfee408d447f5d7eabea9bb32bf5aa4ac2b68825e23e751277058b630f478a1a2d6e69296bce60270d5872b43f5db248b8c64e10a7333d057bbff7ce06f0c90ea5b4b293786eb8e7afe60a242895db4eb5783780bf033e7a8fe1a19fc11cc488cc9e8683551b53c3476e45be7ea663b653e411582dfa7e1706fa373222f47eee77ef77e3b29cdca714f6cc7f82ae1864508a9b0557b42338bfa5072e9817d044de94586f3d093f8568614f3466a8facd715f94089cd4c8b0476ec9b302ce88bd6d9c67b827400c49c41880b7b55b613863576faacf19de3f83cc3f76cc51beecdfde190e4f096629a6de77dacb709c67aae00ef32f04e429cff3527d9e19ddd534026ae93e27be25cbeec6565c89a7630b34c4b283de38b770531b1b4ef6eada07c1f4060eb7536e312931c65e753dcff9c643ca2a039b3dc1e6ac9d3a36f32c5870fd589995aaae96f48e8f2494d3a5917de2a689b7fac3c17a7d14474db8d348186fd39318fbfae898b3ff84f10bdf0c8f40ae28f1e28a4bbc5a9c126894f623d25e20acf8ec692cffa08979b8ee7dc5bb8e068062dcb26b2930f8db88390128a5bc019c20cf45de3787f9a33029776bfd0c73581b5ffbffa120af89e7e9d5b58411ec364c90c2d39dd8d3eb4b2e6efbdc615a3aac26fe16566804b7709b26042d7e5944de17c154c5bdadafbbefbf1deadd251b9bce7a0304f62d63771400e8e4ec5f17b0a79adadda082b4fbb63cf68d9bb8023dec98c91e7f6b806bfd2ff7d7d05a33785174e106595be043013c9670342a3b85f7ee6007250284fa1d08965208f80cc6add91b02a31b7d922955f573b98d2e679088158ff8d9b8775eb294d10a2726e735a5ae5d2da80af1977b8ad13e5112082b72ff73fcc3470f0c394d76b8ab7d8918efe3be719afac5b04cbc71e20554eafe682823cda77a42c79431784f077539498b99754d588db7d6ef7a5f267b04da9a5e277fd7491668b9f615f281628facdea66944609e55ec9e3db9c7dc3ee7b56496bd0bcffac76939a55d72c014f717543bf5e3d6eab2cfd4ebb09f33d60d6816d6675bf356c480ffce53755a1a2e5b2037dc53395cd65e4585607dec8934df60ef09a491a2513cb823d95d46c3f90e87b1b149d634c6e2a360876782a07412b8d541217c26ac9e2fe01aaf7e8433a2af9dcdd8e2f1722061c8e8a54538fdf0f07dcc6e7f42345a675e585f5df7b4ed8d5c76dbe6556260da6ae758838d055f9fa5f9c9787c9ff5cc9e3c7ed84c0865765c9c313a5b3985de05ff9040e3af18c6dad68f5cabd1edf209bdb9ca7c9bfe99945cb7b2f23b4de85811141fd8bf6ffc0b06168a95a5458b1f08e933b99400d582f7da7f5b3a2248c58556a0aa5371372a63c4e17307eae2c11018e88937d31f90965d9448b3b5e7ff61ec794176d3c9bf6425dbb172ebd1fc906da1cff6dcaef50eef559786eef76bcb60e8b2358d5620d9fc02c244c033fa09726a23d6c4a2348ce1777ced7faab3003ab88070200d9e07194d8da46108a88e05c0c77e8bd40c9afece2ce29c5e4ccbf7d49920021cb2a2c406466987214aacd5055de9a58bca5b6cf1333dea965debf4186034a186567bf64767c05f8fd242b8b3b70657d480ac532559bfa031620e71a913d20054d764c233be55568d745708894caa5cf1e2dc7aaad93dfa43e77d7647f9e32c87ae2455906b6999007c2a1b3b46bff414aa6834be95873dc015f0463b45c2bf73d5f6f39ec66a465b953b3e021d336c611ae8d45edb39b7379f33f21e3c74353c47b364040e8a7a4a1877b0f4ee7ac05e6235b27e696949db4b5cb6e9a5aa913ad575e5386b003fe40c5d4dc2785f1434bf653a9b58afe2fdedc2e5b051d93b5b5f3f5bdc3fe527250726c14faf97c45b0382dd04ff5d794db948c1dbcd3095623c688d5492ace26ab1c2251202f4413af906db20dca4ae0c82c7995f393c4994946fec0f426ff60e6fbb31b8126fbc5237a0512b0d4964c0163ac55827c9be2c15a12879d2f8ef804b118df5dcb5819e21b046b4a6dfb61f761a9d40873d9adabd505cbcdf33a4589c46da6dfbe67189fe8a0aabf2cb4404e7d5ada941a55e9a0e74e1b15e8a53dbfd94c89244ab391b0f06304fd74b484c5b267c21b136fa4638aa448030c92bc1f459fe6eb93a0dc998ff6657405c73d35b2d9789b35e76cc6579bf4724aef468e3348f707ea57f1432b0f440738d48056963fef716ea963e978346ada24291a40d06aa6fe825f8cbf1bcd4a390f5cc2687f49f02c5826184bf295d8f76eb2e75dd26e991d2aadf8b702bbd25db80a34d3611abd848904a6113f5089e649cd8a916f431bd35fddf7e2076e768fcc21aaa0faa73b228327d5b5a51eddfd06f520c4e1cfa8cd7b39dcbc6136f545b6e563c4c43e62615dfd23440e5b68d1d2d0001cb4b1ffa292cc865352a418ffacaca0244905f3aa29c6dc804f4d1726b525b1746a08864af9979df46619a3a71febbb5ea6e3ddb6544ff1180d239efa42ed8bda463b0c9cc0e27dd22b2541dbd2b0c133e6aa0f752e6c2bbedee8fd2c1d95ceffd7769dd49a7732135993855cf616f0a592970d5323d18540a264ebbabbae9de40a8651c2b834bb1276ce222e7597a31d70024e6e31d61407f56c1e32e0a3fe59e38e88d7d86e1c3b972a8c6f9c0c77ad294108e3b63e5b400556429251b65b0ab83d423385dc40ac74d90614d479ac66bfca5839671593ebe7b52264e24e722d0d0f92249ed8d80dd3855ed3d49bd0b540ff8c8bd6c15d933546802013dd907fe7256e91a5619cb3a1c069232cb3a82c965ab583773c05dd4213984fff0d83abd764871a95eefa468561fdfbbd01272510bf8b02e6ec58f806eda6c32607f07c777641a90e6e221c1c686e0cf5b4d4fd741a4370666e8e52e7e6f34516284a85a18d79bdec46fc045f899829d05dd44c4aa20ab83a8418196164a96df223d6d9f21bcb4806c59285b3b752606f4064405bdca165226c9845b6ced13eb121b6e8ad66fde21f0e7f93fe6ad0140a1dd9b1335c19bebf453463c79bacc75ed28aaae62048e34bb771765f596d8b76d20cf13a97beb0dcf9b5c8e0dfb32a4dfeba8cc156b8da88e3c4bfb931fe31b1b4a6e166fd3bfa4ab714da93ac7ccd96cbf9a323da0ca739cf88605f1794483a48a1019a94b9f7965b82dc143ba6b2f0a755077fb22e15616f2e0d3bc8a36471a9be8e4312871a426b949f55636ef4f0edc608e4c98cf64cb398ca3f0c335db899dcb4bae9e7afa621a23077853a30ecf5c199bf73cce63cfcc1d106f0e69fe1b65c839b95379384b8d73b4176a05d4f81c24e44d0fd044fd8788e23051bb949bd827dbdcfd21f9807dd9fa952b1954dfb1aba8b58696257a03ec36b089aa3ef82559d82acec1c4e3acd5e8ceb86edb9d91da127d130b435e1688df74ce892ee5f882d41f3737cc4d10823db4b04192a04c617779c5a76e5980c3c9712fe28c1e10c3a8f1fc4eab09cfbca1bc764eed5b01e9a6fffc5046866e2bbf5201c08ca0e6912f43ccdc2e5850f9dc6a1a9e5fe8543694eecd83fc3e707f7b51a407b2c9d1e04d1c7eb952af55b05c26e2d95a2e3c6bb8de53725f31a796814b4373380c1a30708614553c7aa56de00bf3c473b5909c3ea197b9d1142e55400d0a866f4952267f46507441242ca13f4af40e5ad755233e822bfdd827f0f5cad4f626d5e76a6e2fddfe3d3e098c08f7bc9d841c13a29f9f40f78e08dca13ea08075fa75a22f89ed4dec8cfc0d60316ba5e4db0dc2a17f72afc5ac8633a3f2cd81515574b9e15685332896b385dfac9f2a0baeab6b5297a390d4b8a325756bbeb2dab73599e5511e418f18cd38dddc2fb6841bf5a78c9a9917cf1d3f93030ea24ebeb7efcbf6151f689ae84499ccaba5791e77aeb54a95f333d10198a66fb6ee7242d20c7fb868df0fd9da53989aff8d778448e69e719df6b8aa26488ffa50437b09fef5a59d52da8c9ef81dd17f51d149171cdff8a64d6e115087f13400ab5e5a4f7769fec5aa468940111e8942ef98fa793a91e49aca21a127a68b3304005dca803b29f5bf3a5467f4cf249170e64b00c34534b148f9bac7ac620977962ff9bbf2780db9dfed4e3dbaf1f12200a8b6f42484cad2bcca81291b505cc92b70a17a0fe2f6738bdb39c529fdf813a758093886254e91ddc6a395036c943b0dc2ddf1e59f4983932e74a1b1ce3920ff7001eacc2f97e7448e06a4d7b592d024138cb961c2131b0165c467d99301eb68ebdd5bbd9a5481a609923273de465a22ab2074034c5da6371eb42b6a9d4ea828ac6a9fb4d47258e12fe1a5b74733d35b6470bd5a1167f6611a8ef207562f174b9c0dbac9f659f78e4451d7dce47e8cfc3fa3d309a4bcc689d6903bee7ee0422edc1579f9af60be345999130d3c4f8f09bd413c022c0362c5e7e79f5b7a56e0e461263fa4db6a65617818a8d95301cb28f1318f73fc524fe2b97fce1ce9dcaee5773bed80662e9e551d8fe5f68b061f7840b6c17a93cd1cf83b11d19d5c74896a6bba958969b94c96c95d64c20124e809712c005e5b0db9ff0da3a2d34176204405"}) 1.015878884s ago: executing program 2 (id=2567): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x2}, @decrefs, @exit_looper, @release={0x40046306, 0x3}, @acquire_done={0x40106309, 0x1}], 0xfd, 0x0, &(0x7f0000000340)="54e42d650e78fc8731fedb8308f3bb09a2d00f8ae07df8fa983a6c87cdb0dfb7a6c12a6cef682db693fa3350e1295b56c582677288565c1a9bd3f87101edf598707f02462227baff38531b92efe04d91bd54ef49567b71471e16cb7c561b0ba17a5c2e1e77fb99f72644ed6bcac574698aff3cc23362f73f87db1ae3e15e55f4f67bb1ec2ea61017c9b4da019c2beb09aedcb3fe15161a583b3fc0734511b3101130e303e4fc2f01790c0de2bdf1837af82cce6a36db09eaf5d5352feb34f7ccf09d9f962367726b8274391da6511dd09349a4fcaffd0fd064f2de285a55ef7b8e68d50f8d8201c17ef9a38a1bf6af2cfedcdab74c29602d42a7cb688b"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000280)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000006c0)=0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1.014384484s ago: executing program 1 (id=2568): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETA(r1, 0x802c542a, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 987.331955ms ago: executing program 0 (id=2569): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)="01010101", 0x4) read(r0, &(0x7f00000000c0)=""/4, 0x4) close(r0) write$cgroup_int(r0, &(0x7f0000000040)=0x80000000, 0x12) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 959.427675ms ago: executing program 1 (id=2570): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x586, 0x0, 0xfffffffffffff10f}]}) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x8008770b, 0x0) 795.904978ms ago: executing program 0 (id=2571): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xa4b, 0x0, &(0x7f0000000580)="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"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x401c5820, &(0x7f0000000080)={'bridge_slave_1\x00', @remote}) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000000)=0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) close(r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x2}, @decrefs, @exit_looper, @release={0x40046306, 0x3}, @acquire_done={0x40106309, 0x1}], 0xfd, 0x0, &(0x7f0000000340)="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"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 779.196518ms ago: executing program 1 (id=2572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0xff, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x6, 0x1], 0xeeee8000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000008605"]) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000200)={0x10001, 0x0, &(0x7f0000ffe000/0x1000)=nil}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r8, 0x4068aea3, &(0x7f00000000c0)={0x94, 0x0, 0x8000000}) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x13, r5, 0xac6a1000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x10b, 0x3}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000009902"]) r13 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer={0x40086303, r13}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x4b, 0x0, &(0x7f0000000000)=[@increfs_done={0x40106308, 0x800000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 739.317028ms ago: executing program 2 (id=2573): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x6, 0x3, 0xf1, 0x0, 0x3, 0x9, 0x52, 0x6, 0xc, 0x4, 0x5, 0xfb, 0x4}, {0x4, 0x8001, 0x0, 0xb, 0xff, 0x0, 0x81, 0xe, 0xe, 0x2f, 0x0, 0x0, 0x7}, {0x5, 0x0, 0x7, 0x10, 0xd6, 0x6, 0x4, 0x7f, 0x4, 0xfa, 0x81, 0x7, 0x7f}], 0xffff1093}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async, rerun: 32) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (async) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000040)={0x5000, 0x11000, 0x1}) read$FUSE(r6, &(0x7f0000000440)={0x2020}, 0x2020) (async, rerun: 32) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000000)={'xfrm0', 0x32, 0x31}, 0x8) (async, rerun: 32) ioctl$KVM_NMI(r6, 0xae9a) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002400)={0x44, 0x0, &(0x7f0000002380)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000240)="eae7db1c"}) 568.075041ms ago: executing program 0 (id=2574): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xc, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303, r2}], 0x91, 0x0, &(0x7f0000000140)="6a76655cb50ff9be21428e3c87a7cf9f6ddddf207d84a09d53a28433682b7607f94766e591b057120221a1e46cbbfe94d14dbee0048c46393e5be249d06edc2a0946babf34b0398083353e3e40fbb65b689cc97fa92d6ae4e74ba0a5425800b0cede6b52907f12bf197878a3bf1d5d672d4ca2aef7c9bb466a383b92b4f7bcb7bc9915193596a54391c88b95b53a0f7a16"}) 550.965962ms ago: executing program 2 (id=2575): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x5, 0x0, [{0xeeee0000, 0x68, &(0x7f0000000040)=""/104}, {0x4000, 0xf0, &(0x7f00000000c0)=""/240}, {0x5000, 0xc4, &(0x7f00000001c0)=""/196}, {0x1000, 0x3a, &(0x7f00000002c0)=""/58}, {0x0, 0xf6, &(0x7f0000000300)=""/246}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x5, 0x0, [{0xeeee0000, 0x68, &(0x7f0000000040)=""/104}, {0x4000, 0xf0, &(0x7f00000000c0)=""/240}, {0x5000, 0xc4, &(0x7f00000001c0)=""/196}, {0x1000, 0x3a, &(0x7f00000002c0)=""/58}, {0x0, 0xf6, &(0x7f0000000300)=""/246}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000700)={0x0, 0x1, &(0x7f00000004c0)=""/145, &(0x7f0000000580)=""/249, &(0x7f0000000680)=""/99, 0xdddd1000}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000700)={0x0, 0x1, &(0x7f00000004c0)=""/145, &(0x7f0000000580)=""/249, &(0x7f0000000680)=""/99, 0xdddd1000}) r1 = syz_clone(0x200000, &(0x7f0000000740)="fb36b8e2dfab6e91b4cab9c0f655498c00fd21d688af", 0x16, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)="cef565c9650bcf2cc2bf117be81ec3e8ff22db9e0c03e9") ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000880)=&(0x7f0000000840)) (async) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000880)=&(0x7f0000000840)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000008c0)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000940)=&(0x7f0000000900)) (async) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000940)=&(0x7f0000000900)) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000980)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000a40)={{r0}, r2, 0xa, @inherit={0x50, &(0x7f00000009c0)={0x0, 0x1, 0x4, 0x1, {0x0, 0x2, 0xfffffffffffffff9, 0x80000000, 0xfffffffffffffffb}, [0x5]}}, @subvolid=0x6}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000002b80)={'\x00', 0xffff, 0x80000000, 0x2, 0x49c8, 0x2260, r1}) openat$cgroup(0xffffffffffffffff, &(0x7f0000002c40)='syz1\x00', 0x200002, 0x0) (async) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002c40)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000002c80)={0x380341080, &(0x7f0000001a40), &(0x7f0000001a80), &(0x7f0000001ac0), {0x2c}, &(0x7f0000001b00)=""/109, 0x6d, &(0x7f0000001b80)=""/4096, &(0x7f0000002c00)=[r1, r1, r1, r1, r1, r1, r3, r1], 0x8, {r4}}, 0x58) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002d00)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002d40)) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000002e00)={0x0, "bff4c53502f79e20bd6e1d5dd580a9b2"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000003e00)={{r4}, r2, 0x4, @inherit={0x50, &(0x7f0000002d80)={0x1, 0x1, 0x9d, 0x2, {0x26, 0xfffffffffffff0a7, 0xfff, 0x3, 0xc7a}, [0x6]}}, @devid=r5}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000003e00)={{r4}, r2, 0x4, @inherit={0x50, &(0x7f0000002d80)={0x1, 0x1, 0x9d, 0x2, {0x26, 0xfffffffffffff0a7, 0xfff, 0x3, 0xc7a}, [0x6]}}, @devid=r5}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000004e00)='/sys/kernel/cpu_byteorder', 0x200000, 0xc0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000004e40)={0x2, r6}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000005f80)={0x3, 0x9, &(0x7f0000004e80)=""/118, &(0x7f0000004f00)=""/93, &(0x7f0000004f80)=""/4096, 0x2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000005fc0)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000005fc0)) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000006000), 0x103e00, 0x0) ioctl$EXT4_IOC_GETFSUUID(r7, 0x8008662c, &(0x7f0000006040)) (async) ioctl$EXT4_IOC_GETFSUUID(r7, 0x8008662c, &(0x7f0000006040)) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000006240)={0x2, 0x0, &(0x7f0000006080)=""/219, &(0x7f0000006180)=""/125, &(0x7f0000006200)=""/20, 0x2}) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000006280)=0x200000000) (async) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000006280)=0x200000000) read$FUSE(r7, &(0x7f00000062c0)={0x2020}, 0x2020) ioctl$BTRFS_IOC_INO_PATHS(r7, 0xc0389423, &(0x7f0000008340)={0x183f, 0x8, [0x1, 0x1, 0x36, 0xb], &(0x7f0000008300)=[0x0]}) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000008380)=0x8000000) openat$cgroup(r7, &(0x7f00000083c0)='syz0\x00', 0x200002, 0x0) (async) r8 = openat$cgroup(r7, &(0x7f00000083c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000008400)='devices.deny\x00', 0x2, 0x0) 420.151954ms ago: executing program 0 (id=2576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100c779ceaeb4bb7afb0072002000000a98facb4f87b25b9184ee05c102efb3"]) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x30100a3, 0x0) 363.963815ms ago: executing program 2 (id=2577): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xd2f99d3ed1b4229d, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x11, 0x8, 0xc, 0x1a, 0x6, 0x80000000, 0x0, 0x21, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000013c00)) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, 0x2}], 0x0, 0x0, &(0x7f00000002c0)}) 344.355245ms ago: executing program 2 (id=2578): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x3000001, 0x22052, r0, 0x2000) r1 = syz_clone(0x0, &(0x7f0000001100), 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000009c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380)=r1, 0x12) r4 = syz_clone3(&(0x7f0000002400)={0x2000, &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001280), {0x5}, &(0x7f00000012c0)=""/4096, 0x1000, &(0x7f00000022c0)=""/206, &(0x7f00000023c0)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x7}, 0x58) read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000fcff72000040"]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000044c0)=0x0) r10 = getpid() r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r11, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r11, &(0x7f00000000c0)=r10, 0x12) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000004540), 0x0, 0x0) syz_clone3(&(0x7f0000004580)={0xa2000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x10}, &(0x7f00000000c0)=""/4096, 0x1000, &(0x7f0000001180)=""/199, &(0x7f0000004500)=[r1, r4, r5, r9, r10], 0x5, {r12}}, 0x58) 334.421025ms ago: executing program 1 (id=2579): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000700)={0xffffffffffffffff, 0x3, 0x3, 0x0, 0x7}) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x1a000, 0x0) mkdirat(r2, &(0x7f0000000940)='./file0\x00', 0x15) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0x6}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4188aec6, &(0x7f0000000040)) close_range(r6, r7, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x4b, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000140)={0x4, 0x0, [{0xae5, 0x0, 0x400}, {0xa32, 0x0, 0x3}, {0x20, 0x0, 0xfffffffffffffff9}, {0x384, 0x0, 0x100000001}]}) 176.038707ms ago: executing program 0 (id=2580): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, 0x0) read(r0, &(0x7f00000004c0)=""/92, 0x1001) 121.821258ms ago: executing program 3 (id=2581): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x6, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @flat=@weak_binder={0x77622a85, 0x1, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 49.647139ms ago: executing program 3 (id=2582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x7, 0xd000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) (async) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4c00, &(0x7f0000000180)) 0s ago: executing program 0 (id=2583): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0x8c8ddd2}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x12fe) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): text=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.401582][ T36] audit: type=1400 audit(1750320880.259:8247): avc: denied { read open } for pid=4692 comm="syz.0.1414" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.446111][ T2616] audit: audit_backlog=65 > audit_backlog_limit=64 [ 99.460288][ T36] audit: type=1400 audit(1750320880.259:8248): avc: denied { read } for pid=4692 comm="syz.0.1414" name="binder0" dev="binder" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 99.467720][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 99.487498][ T36] audit: type=1400 audit(1750320880.259:8249): avc: denied { read open } for pid=4692 comm="syz.0.1414" path="/dev/binderfs/binder0" dev="binder" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 99.511055][ T2616] audit: audit_lost=30 audit_rate_limit=0 audit_backlog_limit=64 [ 99.526261][ T289] audit: audit_lost=31 audit_rate_limit=0 audit_backlog_limit=64 [ 100.033648][ T4742] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 100.033696][ T4742] rust_binder: Error in use_page_slow: EBUSY [ 100.045172][ T4742] rust_binder: use_range failure EBUSY [ 100.053032][ T4742] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 100.060274][ T4742] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 100.072094][ T4746] rust_binder: Write failure EINVAL in pid:563 [ 100.084461][ T4742] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 100.094068][ T4742] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1008 [ 100.108822][ T4744] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 100.190517][ T4756] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.221327][ T4762] SELinux: security_context_str_to_sid () failed with errno=-22 [ 100.662517][ T4778] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 100.838747][ T4791] input: syz0 as /devices/virtual/input/input95 [ 100.904651][ T4797] kvm: user requested TSC rate below hardware speed [ 100.918022][ T4799] input: syz0 as /devices/virtual/input/input96 [ 100.926509][ T4797] kvm: user requested TSC rate below hardware speed [ 100.940257][ T4799] input: failed to attach handler leds to device input96, error: -6 [ 101.117463][ T4810] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.182645][ T9] hid-generic 009C:0008:0003.000E: unknown main item tag 0x0 [ 101.199450][ T9] hid-generic 009C:0008:0003.000E: unknown main item tag 0x0 [ 101.207200][ T9] hid-generic 009C:0008:0003.000E: unknown main item tag 0x0 [ 101.215144][ T9] hid-generic 009C:0008:0003.000E: unknown main item tag 0x0 [ 101.223177][ T9] hid-generic 009C:0008:0003.000E: unknown main item tag 0x0 [ 101.236287][ T9] hid-generic 009C:0008:0003.000E: unknown main item tag 0x0 [ 101.240898][ T4809] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.244747][ T4810] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.257920][ T9] hid-generic 009C:0008:0003.000E: unknown main item tag 0x0 [ 101.283380][ T4816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:591 [ 101.288558][ T9] hid-generic 009C:0008:0003.000E: unknown main item tag 0x0 [ 101.324880][ T9] hid-generic 009C:0008:0003.000E: unknown main item tag 0x0 [ 101.340240][ T9] hid-generic 009C:0008:0003.000E: unknown main item tag 0x0 [ 101.351729][ T9] hid-generic 009C:0008:0003.000E: unknown main item tag 0x0 [ 101.351926][ T4810] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 101.360160][ T9] hid-generic 009C:0008:0003.000E: unknown main item tag 0x0 [ 101.371365][ T4810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1024 [ 101.380613][ T9] hid-generic 009C:0008:0003.000E: hidraw0: HID v0.05 Device [syz0] on syz0 [ 101.481660][ T4819] fido_id[4819]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.602090][ T304] bridge_slave_1: left allmulticast mode [ 101.608261][ T304] bridge_slave_1: left promiscuous mode [ 101.614271][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.626644][ T304] bridge_slave_0: left allmulticast mode [ 101.640254][ T304] bridge_slave_0: left promiscuous mode [ 101.652955][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.967637][ T304] veth1_macvtap: left promiscuous mode [ 101.989801][ T304] veth0_vlan: left promiscuous mode [ 102.058344][ T4838] rust_binder: Write failure EFAULT in pid:1052 [ 102.110298][ T4821] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.149054][ T4821] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.166884][ T4846] rust_binder: Error in use_page_slow: ESRCH [ 102.166905][ T4846] rust_binder: use_range failure ESRCH [ 102.168132][ T4821] bridge_slave_0: entered allmulticast mode [ 102.190400][ T4846] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 102.190420][ T4846] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 102.211761][ T4846] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1039 [ 102.216951][ T4821] bridge_slave_0: entered promiscuous mode [ 102.266296][ T4821] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.291323][ T4821] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.300963][ T4821] bridge_slave_1: entered allmulticast mode [ 102.307372][ T4821] bridge_slave_1: entered promiscuous mode [ 102.395219][ T4848] rust_binder: Error in use_page_slow: ESRCH [ 102.395242][ T4848] rust_binder: use_range failure ESRCH [ 102.413883][ T4848] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 102.432792][ T4848] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 102.450329][ T4848] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1039 [ 102.541925][ T4856] input: syz0 as /devices/virtual/input/input97 [ 102.718751][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.726420][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.760921][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.768439][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.898650][ T4821] veth0_vlan: entered promiscuous mode [ 102.952551][ T4821] veth1_macvtap: entered promiscuous mode [ 103.038615][ T4866] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1060 [ 103.166731][ T4868] random: crng reseeded on system resumption [ 103.214988][ T4871] binder: Unknown parameter 'aon' [ 103.405383][ T4875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1050 [ 103.809684][ T4882] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 103.860294][ T4883] binder: Unknown parameter 'appraise_type' [ 103.946163][ T4885] rust_binder: Error while translating object. [ 103.946206][ T4885] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 103.961039][ T4885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1056 [ 104.171493][ T4901] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 104.181263][ T4901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1068 [ 104.240222][ T36] kauditd_printk_skb: 968 callbacks suppressed [ 104.240240][ T36] audit: type=1400 audit(1750320885.229:9192): avc: denied { read } for pid=4903 comm="syz.3.1474" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 104.248944][ T4904] SELinux: security_context_str_to_sid () failed with errno=-22 [ 104.270233][ T36] audit: type=1400 audit(1750320885.229:9193): avc: denied { read open } for pid=4903 comm="syz.3.1474" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 104.319452][ T36] audit: type=1400 audit(1750320885.229:9194): avc: denied { ioctl } for pid=4903 comm="syz.3.1474" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 104.367727][ T36] audit: type=1400 audit(1750320885.229:9195): avc: denied { read } for pid=4903 comm="syz.3.1474" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 104.393070][ T36] audit: type=1400 audit(1750320885.229:9196): avc: denied { read open } for pid=4903 comm="syz.3.1474" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 104.436169][ T36] audit: type=1400 audit(1750320885.229:9197): avc: denied { ioctl } for pid=4903 comm="syz.3.1474" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 104.462950][ T36] audit: type=1400 audit(1750320885.239:9198): avc: denied { read } for pid=4903 comm="syz.3.1474" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 104.488468][ T36] audit: type=1400 audit(1750320885.239:9199): avc: denied { read open } for pid=4903 comm="syz.3.1474" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 104.513532][ T36] audit: type=1400 audit(1750320885.239:9200): avc: denied { ioctl } for pid=4903 comm="syz.3.1474" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 104.549015][ T36] audit: type=1400 audit(1750320885.239:9201): avc: denied { mounton } for pid=4903 comm="syz.3.1474" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.791346][ T4921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1067 [ 104.865026][ T4923] can0: slcan on ptm0. [ 104.968537][ T4928] binder: Binderfs stats mode cannot be changed during a remount [ 104.994880][ T4922] can0 (unregistered): slcan off ptm0. [ 105.324046][ T4948] input: syz0 as /devices/virtual/input/input101 [ 105.464637][ T4958] SELinux: failed to load policy [ 105.621449][ T4973] input: syz1 as /devices/virtual/input/input102 [ 105.998293][ T4993] SELinux: security_context_str_to_sid () failed with errno=-22 [ 106.167863][ T5004] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 106.204456][ T5004] SELinux: syz.2.1502 (5004) set checkreqprot to 1. This is no longer supported. [ 106.287300][ T5009] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1086 [ 106.343737][ T5004] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.405363][ T5014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1086 [ 106.424388][ T5012] binder: Bad value for 'max' [ 106.669438][ T5025] input: syz0 as /devices/virtual/input/input104 [ 106.832378][ T5032] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.198989][ T5041] SELinux: policydb magic number 0x3000035 does not match expected magic number 0xf97cff8c [ 107.228349][ T5041] SELinux: failed to load policy [ 107.310301][ T5054] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 107.310331][ T5054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1092 [ 107.438672][ T5059] input: syz0 as /devices/virtual/input/input105 [ 107.504026][ T5061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1094 [ 107.513231][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 107.666385][ T581] hid-generic 009C:0008:0003.000F: unknown main item tag 0x0 [ 107.685690][ T581] hid-generic 009C:0008:0003.000F: unknown main item tag 0x0 [ 107.717067][ T581] hid-generic 009C:0008:0003.000F: unknown main item tag 0x0 [ 107.745997][ T581] hid-generic 009C:0008:0003.000F: unknown main item tag 0x0 [ 107.770338][ T581] hid-generic 009C:0008:0003.000F: unknown main item tag 0x0 [ 107.782784][ T581] hid-generic 009C:0008:0003.000F: unknown main item tag 0x0 [ 107.800298][ T581] hid-generic 009C:0008:0003.000F: unknown main item tag 0x0 [ 107.818389][ T581] hid-generic 009C:0008:0003.000F: unknown main item tag 0x0 [ 107.831988][ T581] hid-generic 009C:0008:0003.000F: unknown main item tag 0x0 [ 107.847722][ T581] hid-generic 009C:0008:0003.000F: unknown main item tag 0x0 [ 107.855859][ T581] hid-generic 009C:0008:0003.000F: unknown main item tag 0x0 [ 107.864898][ T581] hid-generic 009C:0008:0003.000F: unknown main item tag 0x0 [ 107.873463][ T581] hid-generic 009C:0008:0003.000F: unknown main item tag 0x0 [ 107.881627][ T581] hid-generic 009C:0008:0003.000F: unknown main item tag 0x0 [ 107.896195][ T581] hid-generic 009C:0008:0003.000F: unknown main item tag 0x0 [ 107.910537][ T5067] binder: Unknown parameter 'fowner' [ 107.917662][ T581] hid-generic 009C:0008:0003.000F: hidraw0: HID v0.05 Device [syz1] on syz0 [ 108.101475][ T5079] SELinux: ebitmap: truncated map [ 108.120300][ T5079] SELinux: failed to load policy [ 108.151275][ T5085] SELinux: security_context_str_to_sid () failed with errno=-22 [ 108.178121][ T5077] fido_id[5077]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.541676][ T5102] binder: Unknown parameter 'como' [ 108.694168][ T5115] input: syz0 as /devices/virtual/input/input106 [ 108.846322][ T5127] input: syz0 as /devices/virtual/input/input107 [ 109.262038][ T36] kauditd_printk_skb: 1029 callbacks suppressed [ 109.262055][ T36] audit: type=1400 audit(1750320890.259:10231): avc: denied { read } for pid=5135 comm="syz.2.1544" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 109.331918][ T36] audit: type=1400 audit(1750320890.289:10232): avc: denied { read open } for pid=5135 comm="syz.2.1544" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 109.378181][ T36] audit: type=1400 audit(1750320890.289:10233): avc: denied { ioctl } for pid=5135 comm="syz.2.1544" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 109.405590][ T36] audit: type=1400 audit(1750320890.289:10234): avc: denied { read } for pid=5135 comm="syz.2.1544" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 109.433639][ T36] audit: type=1400 audit(1750320890.289:10235): avc: denied { read open } for pid=5135 comm="syz.2.1544" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 109.460834][ T36] audit: type=1400 audit(1750320890.289:10236): avc: denied { ioctl } for pid=5135 comm="syz.2.1544" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 109.507455][ T36] audit: type=1400 audit(1750320890.499:10237): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.540305][ T953] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.559958][ T36] audit: type=1400 audit(1750320890.529:10238): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.631412][ T36] audit: type=1400 audit(1750320890.529:10239): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.730632][ T36] audit: type=1400 audit(1750320890.549:10240): avc: denied { read } for pid=5140 comm="syz.2.1545" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 110.110238][ T5161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1121 [ 110.145928][ T5165] random: crng reseeded on system resumption [ 110.180398][ T5170] Unrecognized hibernate image header format! [ 110.197650][ T5170] PM: hibernation: Image mismatch: architecture specific data [ 110.298342][ T5177] input: syz0 as /devices/virtual/input/input109 [ 110.357353][ T5179] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 110.357386][ T5179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1129 [ 110.591675][ T5196] rust_binder: Write failure EFAULT in pid:1135 [ 110.708693][ T5201] binder: Unknown parameter 'defcontextimer' [ 110.789210][ T5203] rust_binder: Write failure EINVAL in pid:1137 [ 110.898448][ T5207] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 110.929021][ T5210] input: syz1 as /devices/virtual/input/input112 [ 111.145724][ T5220] SELinux: security_context_str_to_sid () failed with errno=-22 [ 111.349125][ T5233] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 111.933625][ T5273] input: syz0 as /devices/virtual/input/input113 [ 111.940010][ T5273] input: failed to attach handler leds to device input113, error: -6 [ 112.050127][ T5283] SELinux: security_context_str_to_sid () failed with errno=-22 [ 112.193035][ T5289] SELinux: security_context_str_to_sid () failed with errno=-22 [ 112.690242][ T5326] rust_binder: Failed to allocate buffer. len:65336, is_oneway:false [ 112.690269][ T5326] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 112.702666][ T5326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1127 [ 112.856544][ T5337] cgroup: fork rejected by pids controller in /syz0 [ 112.994165][ T5347] kvm: kvm [5345]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 113.030024][ T5349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1274 [ 113.321170][ T304] bridge_slave_1: left allmulticast mode [ 113.350258][ T304] bridge_slave_1: left promiscuous mode [ 113.361576][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.375574][ T304] bridge_slave_0: left allmulticast mode [ 113.390079][ T304] bridge_slave_0: left promiscuous mode [ 113.397371][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.466381][ T5362] input: syz1 as /devices/virtual/input/input114 [ 113.509857][ T304] veth1_macvtap: left promiscuous mode [ 113.516336][ T304] veth0_vlan: left promiscuous mode [ 113.648944][ T5368] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1286 [ 113.689331][ T5359] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.738888][ T5359] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.760255][ T5359] bridge_slave_0: entered allmulticast mode [ 113.767259][ T5359] bridge_slave_0: entered promiscuous mode [ 113.808808][ T5359] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.813421][ T5376] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 113.820212][ T5359] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.833830][ T5359] bridge_slave_1: entered allmulticast mode [ 113.841032][ T5359] bridge_slave_1: entered promiscuous mode [ 114.002774][ T5391] rust_binder: Read failure Err(EAGAIN) in pid:1291 [ 114.245895][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.264767][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.283851][ T36] kauditd_printk_skb: 874 callbacks suppressed [ 114.283867][ T36] audit: type=1400 audit(1750320895.279:11115): avc: denied { read } for pid=5401 comm="syz.2.1631" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.335844][ T36] audit: type=1400 audit(1750320895.319:11116): avc: denied { read open } for pid=5401 comm="syz.2.1631" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.365320][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.373197][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.401584][ T36] audit: type=1400 audit(1750320895.319:11117): avc: denied { ioctl } for pid=5401 comm="syz.2.1631" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.434123][ T36] audit: type=1400 audit(1750320895.329:11118): avc: denied { read write } for pid=5401 comm="syz.2.1631" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 114.442724][ T5407] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 114.462814][ T36] audit: type=1400 audit(1750320895.329:11119): avc: denied { read write open } for pid=5401 comm="syz.2.1631" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 114.480281][ T5407] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 114.501919][ T36] audit: type=1400 audit(1750320895.329:11120): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.534460][ T5407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1141 [ 114.539540][ T5408] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1141 [ 114.552648][ T36] audit: type=1400 audit(1750320895.329:11121): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.590037][ T36] audit: type=1400 audit(1750320895.329:11122): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.605399][ T5359] veth0_vlan: entered promiscuous mode [ 114.623052][ T36] audit: type=1400 audit(1750320895.359:11123): avc: denied { ioctl } for pid=5403 comm="syz.3.1632" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.649544][ T36] audit: type=1400 audit(1750320895.359:11124): avc: denied { map } for pid=5403 comm="syz.3.1632" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.657478][ T5359] veth1_macvtap: entered promiscuous mode [ 115.197469][ T5437] binder: Unknown parameter '÷º' [ 115.270631][ T5440] input: syz0 as /devices/virtual/input/input118 [ 115.572518][ T5455] input: syz0 as /devices/virtual/input/input119 [ 115.576804][ T5456] binder: Bad value for 'max' [ 115.583015][ T5451] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1152 [ 116.064068][ T5480] binfmt_misc: register: failed to install interpreter file ./cgroup [ 116.260226][ T5483] input: syz0 as /devices/virtual/input/input120 [ 116.947628][ T5515] rust_binder: Write failure EINVAL in pid:1165 [ 116.952946][ T5515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1165 [ 117.064864][ T5521] rust_binder: Write failure EINVAL in pid:1167 [ 117.091684][ T5521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1167 [ 117.130306][ T5528] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.262335][ T5534] binder: Unknown parameter 'ÿÿÿÿ/net/tun' [ 117.412900][ T5541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.413453][ T5541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.430502][ T5541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.466773][ T5541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.532676][ T5546] binder: Unknown parameter 'hash5“up.cpu/syz0' [ 117.593635][ T5556] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 117.631115][ T5556] rust_binder: got new transaction with bad transaction stack [ 117.631138][ T5556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1177 [ 117.690940][ T5559] input: syz0 as /devices/virtual/input/input121 [ 117.919547][ T5573] rust_binder: Write failure EINVAL in pid:204 [ 117.920375][ T5573] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 118.243881][ T5598] input: syz0 as /devices/virtual/input/input122 [ 118.246927][ T5597] SELinux: policydb magic number 0x67632f2e does not match expected magic number 0xf97cff8c [ 118.353112][ T5597] SELinux: failed to load policy [ 118.581745][ T5628] binder: Bad value for 'max' [ 118.597935][ T5626] rust_binder: Error while translating object. [ 118.597980][ T5626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 118.627205][ T5626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1334 [ 118.713492][ T5639] rust_binder: Error while translating object. [ 118.740265][ T5639] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 118.755932][ T5639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1197 [ 118.767775][ T5639] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.901070][ T5654] binder: Unknown parameter 'dont_hash' [ 119.012426][ T5664] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 119.053245][ T5671] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 119.263973][ T5683] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 119.300996][ T36] kauditd_printk_skb: 1268 callbacks suppressed [ 119.301015][ T36] audit: type=1400 audit(1750320900.299:12393): avc: denied { read } for pid=5682 comm="syz.0.1720" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 119.308485][ T5690] input: syz0 as /devices/virtual/input/input125 [ 119.310143][ T36] audit: type=1400 audit(1750320900.299:12394): avc: denied { read open } for pid=5682 comm="syz.0.1720" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 119.344317][ T5690] rust_binder: Write failure EINVAL in pid:1207 [ 119.429770][ T36] audit: type=1400 audit(1750320900.299:12395): avc: denied { map } for pid=5684 comm="syz.1.1719" path="/dev/binderfs/binder0" dev="binder" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 119.464979][ T36] audit: type=1400 audit(1750320900.299:12396): avc: denied { read } for pid=5684 comm="syz.1.1719" path="/dev/binderfs/binder0" dev="binder" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 119.550225][ T36] audit: type=1400 audit(1750320900.299:12397): avc: denied { read } for pid=5684 comm="syz.1.1719" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 119.631347][ T5701] audit: audit_backlog=65 > audit_backlog_limit=64 [ 119.634018][ T5700] audit: audit_backlog=65 > audit_backlog_limit=64 [ 119.654321][ T36] audit: type=1400 audit(1750320900.299:12398): avc: denied { read open } for pid=5684 comm="syz.1.1719" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 119.682033][ T5704] audit: audit_backlog=65 > audit_backlog_limit=64 [ 119.683019][ T5701] audit: audit_lost=40 audit_rate_limit=0 audit_backlog_limit=64 [ 119.694870][ T5705] SELinux: security_context_str_to_sid () failed with errno=-22 [ 119.794724][ T5714] SELinux: security_context_str_to_sid () failed with errno=-22 [ 119.818698][ T5715] rust_binder: Write failure EINVAL in pid:1213 [ 120.246318][ T5745] binder: Unknown parameter 'processor : 0 [ 120.246318][ T5745] vendor_id : GenuineIntel [ 120.246318][ T5745] cpu family : 6 [ 120.246318][ T5745] model : 79 [ 120.246318][ T5745] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 120.246318][ T5745] stepping : 0 [ 120.246318][ T5745] microcode : 0xffffffff [ 120.246318][ T5745] cpu MHz : 2200.152 [ 120.246318][ T5745] cache size : 56320 KB [ 120.246318][ T5745] physical id : 0 [ 120.246318][ T5745] siblings : 2 [ 120.246318][ T5745] core id : 0 [ 120.246318][ T5745] cpu cores : 1 [ 120.246318][ T5745] apicid : 0 [ 120.246318][ T5745] initial apicid : 0 [ 120.246318][ T5745] fpu : yes [ 120.246318][ T5745] fpu_exception : yes [ 120.246318][ T5745] cpuid level : 13 [ 120.246318][ T5745] wp : yes [ 120.246318][ T5745] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 120.246318][ T5745] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 120.596488][ T5762] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 120.647418][ T5769] input: syz0 as /devices/virtual/input/input130 [ 120.757283][ T5762] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1221 [ 121.231806][ T5790] tun0: tun_chr_ioctl cmd 1074025675 [ 121.276673][ T5790] tun0: persist disabled [ 121.480146][ T5794] binder: Unknown parameter 'dont_hash' [ 121.795515][ T304] bridge_slave_1: left allmulticast mode [ 121.802878][ T304] bridge_slave_1: left promiscuous mode [ 121.809300][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.817532][ T304] bridge_slave_0: left allmulticast mode [ 121.823475][ T304] bridge_slave_0: left promiscuous mode [ 121.830268][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.927217][ T5810] kvm: kvm [5809]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000004) [ 122.004080][ T304] veth1_macvtap: left promiscuous mode [ 122.010000][ T304] veth0_vlan: left promiscuous mode [ 122.127512][ T5820] SELinux: security_context_str_to_sid () failed with errno=-22 [ 122.152526][ T5822] SELinux: security_context_str_to_sid () failed with errno=-22 [ 122.180822][ T5824] input: syz0 as /devices/virtual/input/input132 [ 122.282231][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.289396][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.325803][ T5806] bridge_slave_0: entered allmulticast mode [ 122.343402][ T5806] bridge_slave_0: entered promiscuous mode [ 122.363070][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.400289][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.407706][ T5806] bridge_slave_1: entered allmulticast mode [ 122.436266][ T5806] bridge_slave_1: entered promiscuous mode [ 122.500873][ T5835] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 122.831376][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.847057][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.858790][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.865968][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.035967][ T5806] veth0_vlan: entered promiscuous mode [ 123.141365][ T5806] veth1_macvtap: entered promiscuous mode [ 123.331771][ T5857] rust_binder: Error while translating object. [ 123.331813][ T5857] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 123.339123][ T5857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1396 [ 123.354388][ T5862] SELinux: security_context_str_to_sid () failed with errno=-22 [ 123.587501][ T5879] input: syz0 as /devices/virtual/input/input133 [ 123.755349][ T5889] binder: Unknown parameter 'ÿÿÿÿ' [ 123.780899][ T5890] binder: Unknown parameter 'ÿÿÿÿ' [ 124.150972][ T5915] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1416 [ 124.313364][ T5921] SELinux: failed to load policy [ 124.334957][ T36] kauditd_printk_skb: 1034 callbacks suppressed [ 124.334974][ T36] audit: type=1400 audit(1750320905.329:13395): avc: denied { read } for pid=5922 comm="syz.0.1797" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.373116][ T5921] SELinux: policydb string SE üS0ª{ does not match my string SE Linux [ 124.399251][ T5921] SELinux: failed to load policy [ 124.431298][ T36] audit: type=1400 audit(1750320905.329:13396): avc: denied { read open } for pid=5922 comm="syz.0.1797" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.486755][ T36] audit: type=1400 audit(1750320905.329:13397): avc: denied { ioctl } for pid=5922 comm="syz.0.1797" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.516929][ T36] audit: type=1400 audit(1750320905.329:13398): avc: denied { read append } for pid=5922 comm="syz.0.1797" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.542181][ T36] audit: type=1400 audit(1750320905.329:13399): avc: denied { read append open } for pid=5922 comm="syz.0.1797" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.641956][ T36] audit: type=1400 audit(1750320905.329:13400): avc: denied { read } for pid=5922 comm="syz.0.1797" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.680888][ T5936] audit: audit_backlog=65 > audit_backlog_limit=64 [ 124.687683][ T5936] audit: audit_lost=54 audit_rate_limit=0 audit_backlog_limit=64 [ 124.709335][ T5936] audit: backlog limit exceeded [ 124.714321][ T36] audit: type=1400 audit(1750320905.329:13401): avc: denied { read open } for pid=5922 comm="syz.0.1797" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.771830][ T5936] SELinux: ebitmap: truncated map [ 124.777086][ T5936] SELinux: failed to load policy [ 124.819671][ T5936] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.828193][ T5936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1263 [ 124.845494][ T5944] random: crng reseeded on system resumption [ 125.197291][ T5970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 125.197324][ T5970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1269 [ 125.323777][ T5981] kvm: kvm [5980]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 125.406108][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 125.418156][ T5986] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 125.456817][ T5981] binder: Bad value for 'max' [ 125.611636][ T60] bridge_slave_1: left allmulticast mode [ 125.617556][ T60] bridge_slave_1: left promiscuous mode [ 125.627940][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.641713][ T60] bridge_slave_0: left allmulticast mode [ 125.647909][ T60] bridge_slave_0: left promiscuous mode [ 125.654462][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.656476][ T5999] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 125.716467][ T6002] binder: Bad value for 'defcontext' [ 125.806005][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.814912][ T5998] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.822894][ T5998] bridge_slave_0: entered allmulticast mode [ 125.830148][ T5998] bridge_slave_0: entered promiscuous mode [ 125.838550][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.846495][ T5998] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.854111][ T5998] bridge_slave_1: entered allmulticast mode [ 125.861991][ T5998] bridge_slave_1: entered promiscuous mode [ 125.869439][ T60] veth1_macvtap: left promiscuous mode [ 125.875592][ T60] veth0_vlan: left promiscuous mode [ 126.029278][ T6015] input: syz0 as /devices/virtual/input/input134 [ 126.222257][ T6024] SELinux: failed to load policy [ 126.228970][ T6024] binder: Unknown parameter '}”tb%(' [ 126.373159][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.381319][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.415154][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.423163][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.459324][ T6031] rust_binder: Error while translating object. [ 126.459366][ T6031] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 126.474623][ T6031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1295 [ 126.549881][ T6033] PM: Enabling pm_trace changes system date and time during resume. [ 126.549881][ T6033] PM: Correct system time has to be restored manually after resume. [ 126.554519][ T5998] veth0_vlan: entered promiscuous mode [ 126.627231][ T5998] veth1_macvtap: entered promiscuous mode [ 126.870670][ T6041] binder: Unknown parameter '' [ 126.968612][ T6047] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 127.086049][ T6054] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 127.133158][ T6055] input: syz0 as /devices/virtual/input/input137 [ 127.186277][ T6055] kvm: user requested TSC rate below hardware speed [ 127.374522][ T6063] SELinux: failed to load policy [ 127.401079][ T6065] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 127.401648][ T6065] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 127.423341][ T6065] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 127.454637][ T6065] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 127.461373][ T1046] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 127.474792][ T953] Bluetooth: hci0: command 0x1003 tx timeout [ 127.483707][ T6065] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 127.484072][ T6065] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 127.491320][ T6065] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 127.571155][ T6076] binder: Unknown parameter '0x000000000000000400000035184372744192@éV¼ðgÀ×謼Áì´fP‰²˜' [ 127.614496][ T6078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10 [ 128.001227][ T6103] input: syz0 as /devices/virtual/input/input138 [ 128.040453][ T6103] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1321 [ 128.054193][ T6102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1486 [ 128.342012][ T6116] rust_binder: Read failure Err(EAGAIN) in pid:1488 [ 128.633644][ T6123] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 128.731138][ T6128] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 128.838494][ T6136] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 128.886956][ T6136] SELinux: failed to load policy [ 128.894198][ T6139] rust_binder: Write failure EINVAL in pid:1497 [ 129.031947][ T6147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1336 [ 129.219664][ T6157] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.342895][ T36] kauditd_printk_skb: 1021 callbacks suppressed [ 129.342912][ T36] audit: type=1400 audit(1750320910.339:14423): avc: denied { ioctl } for pid=6160 comm="syz.0.1873" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 129.362944][ T6161] block device autoloading is deprecated and will be removed. [ 129.416479][ T6161] syz.0.1873: attempt to access beyond end of device [ 129.416479][ T6161] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 129.472857][ T36] audit: type=1400 audit(1750320910.429:14424): avc: denied { read } for pid=6164 comm="syz.1.1874" name="binder0" dev="binder" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.536124][ T6168] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 129.547762][ T36] audit: type=1400 audit(1750320910.429:14425): avc: denied { read open } for pid=6164 comm="syz.1.1874" path="/dev/binderfs/binder0" dev="binder" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.612125][ T36] audit: type=1400 audit(1750320910.429:14426): avc: denied { read write } for pid=4821 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 129.637129][ T36] audit: type=1400 audit(1750320910.429:14427): avc: denied { read write open } for pid=4821 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 129.663507][ T36] audit: type=1400 audit(1750320910.429:14428): avc: denied { ioctl } for pid=4821 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 129.690789][ T6171] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 129.700207][ T6171] SELinux: failed to load policy [ 129.706759][ T36] audit: type=1400 audit(1750320910.459:14429): avc: denied { read } for pid=6160 comm="syz.0.1873" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 129.731224][ T36] audit: type=1400 audit(1750320910.459:14430): avc: denied { read open } for pid=6160 comm="syz.0.1873" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 129.784765][ T6171] SELinux: failed to load policy [ 129.798256][ T6171] rust_binder: Error in use_page_slow: ESRCH [ 129.798277][ T6171] rust_binder: use_range failure ESRCH [ 129.809762][ T6173] audit: audit_backlog=65 > audit_backlog_limit=64 [ 129.822049][ T6171] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 129.822078][ T6171] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 129.830403][ T36] audit: type=1400 audit(1750320910.459:14431): avc: denied { ioctl } for pid=6160 comm="syz.0.1873" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 129.870242][ T6171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1340 [ 129.871168][ T6176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1340 [ 129.893247][ T6175] kvm: user requested TSC rate below hardware speed [ 129.931195][ T6175] rust_binder: Error while translating object. [ 129.931218][ T6175] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 129.937409][ T6175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:328 [ 129.954295][ T6175] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 129.977526][ T6180] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.138855][ T6186] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 130.394075][ T6201] rust_binder: Write failure EFAULT in pid:335 [ 130.448496][ T6206] binder: Bad value for 'defcontext' [ 130.585265][ T6213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:54 [ 130.697816][ T6224] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 130.751843][ T6225] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 130.852236][ T6231] binder: Bad value for 'defcontext' [ 130.942584][ T6228] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 131.219095][ T6242] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 131.241095][ T6248] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:62 [ 131.547642][ T6260] rust_binder: Write failure EFAULT in pid:1369 [ 131.873947][ T6266] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.068282][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 132.161490][ T6279] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 132.320268][ T6281] input: syz0 as /devices/virtual/input/input143 [ 132.748188][ T6293] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 132.748212][ T6293] rust_binder: Error in use_page_slow: EBUSY [ 132.762817][ T6293] rust_binder: use_range failure EBUSY [ 132.769101][ T6293] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 132.776828][ T6293] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 132.784540][ T6293] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 132.796501][ T6293] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1385 [ 133.019383][ T6310] input: syz1 as /devices/virtual/input/input144 [ 133.281015][ T6318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1392 [ 133.312654][ T6322] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 133.462534][ T6328] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 134.100216][ T953] Bluetooth: hci0: command 0x1003 tx timeout [ 134.110272][ T1046] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 134.352642][ T36] kauditd_printk_skb: 933 callbacks suppressed [ 134.352660][ T36] audit: type=1400 audit(1750320915.349:15330): avc: denied { read } for pid=6368 comm="syz.0.1937" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 134.394724][ T6369] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 134.453702][ T36] audit: type=1400 audit(1750320915.349:15331): avc: denied { read open } for pid=6368 comm="syz.0.1937" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 134.509581][ T36] audit: type=1400 audit(1750320915.349:15332): avc: denied { ioctl } for pid=6368 comm="syz.0.1937" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 134.578936][ T36] audit: type=1400 audit(1750320915.409:15333): avc: denied { mounton } for pid=6368 comm="syz.0.1937" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.649731][ T6377] random: crng reseeded on system resumption [ 134.660219][ T36] audit: type=1400 audit(1750320915.459:15334): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.725356][ T36] audit: type=1400 audit(1750320915.459:15335): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.784482][ T36] audit: type=1400 audit(1750320915.459:15336): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.847343][ T36] audit: type=1400 audit(1750320915.519:15337): avc: denied { read write } for pid=5998 comm="syz-executor" name="loop0" dev="devtmpfs" ino=559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.901661][ T36] audit: type=1400 audit(1750320915.519:15338): avc: denied { read write open } for pid=5998 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.948909][ T36] audit: type=1400 audit(1750320915.519:15339): avc: denied { ioctl } for pid=5998 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=559 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.992946][ T6386] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 135.051894][ T6386] SELinux: failed to load policy [ 135.061456][ T6391] rust_binder: Write failure EINVAL in pid:81 [ 135.187874][ T6397] binder: Bad value for 'stats' [ 135.297880][ T6404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 135.297913][ T6404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 135.397559][ T6409] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 135.449085][ T581] hid-generic 0000:0000:0000.0010: item fetching failed at offset 0/1 [ 135.457833][ T581] hid-generic 0000:0000:0000.0010: probe with driver hid-generic failed with error -22 [ 135.555226][ T6418] input: syz1 as /devices/virtual/input/input146 [ 135.566205][ T6415] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 135.566235][ T6415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1566 [ 135.740536][ T6424] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.931389][ T6429] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 135.967098][ T6433] kvm: user requested TSC rate below hardware speed [ 136.083686][ T6433] kvm: user requested TSC rate below hardware speed [ 136.218010][ T6443] binder: Bad value for 'defcontext' [ 136.260756][ T6445] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 136.450763][ T6454] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 136.522772][ T6450] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 136.553267][ T6450] SELinux: failed to load policy [ 136.751536][ T6466] input: syz1 as /devices/virtual/input/input147 [ 136.799769][ T6468] rust_binder: Write failure EFAULT in pid:1589 [ 137.232878][ T6489] rust_binder: Error while translating object. [ 137.232923][ T6489] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 137.286259][ T6489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1592 [ 137.488629][ T6501] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.489799][ T6502] rtc_cmos 00:00: Alarms can be up to one day in the future [ 137.665018][ T6508] SELinux: security_context_str_to_sid (syu) failed with errno=-22 [ 137.674080][ T6506] SELinux: failed to load policy [ 137.841371][ T6516] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 138.246877][ T6525] input: syz0 as /devices/virtual/input/input151 [ 138.369765][ T6530] input: syz1 as /devices/virtual/input/input152 [ 138.590424][ T6539] binder: Bad value for 'max' [ 138.734245][ T6543] can0: slcan on ptm0. [ 138.811125][ T6543] can0 (unregistered): slcan off ptm0. [ 139.215550][ T6575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:424 [ 139.343579][ T6584] binder: Bad value for 'max' [ 139.404496][ T36] kauditd_printk_skb: 1101 callbacks suppressed [ 139.404512][ T36] audit: type=1400 audit(1750320920.399:16441): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.527450][ T36] audit: type=1400 audit(1750320920.409:16442): avc: denied { search } for pid=6585 comm="sed" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.555767][ T6587] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.562745][ T6593] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.572740][ T6591] audit: audit_backlog=65 > audit_backlog_limit=64 [ 139.579752][ T6591] audit: audit_lost=67 audit_rate_limit=0 audit_backlog_limit=64 [ 139.583055][ T6587] audit: audit_lost=68 audit_rate_limit=0 audit_backlog_limit=64 [ 139.592272][ T6593] audit: audit_lost=69 audit_rate_limit=0 audit_backlog_limit=64 [ 139.606432][ T36] audit: type=1400 audit(1750320920.409:16443): avc: denied { read } for pid=6585 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.611343][ T6591] audit: backlog limit exceeded [ 139.851921][ T6602] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.852834][ T6603] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.907375][ T6607] binder: Unknown parameter 'seclab‚l' [ 139.941833][ T6603] input: syz0 as /devices/virtual/input/input153 [ 139.975386][ T6610] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1455 [ 140.170869][ T6627] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.413323][ T6634] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 140.476927][ T6642] SELinux: failed to load policy [ 140.963085][ T6660] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 141.399521][ T6674] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1467 [ 141.503410][ T6681] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 141.596103][ T6683] input: syz1 as /devices/virtual/input/input154 [ 141.811229][ T6695] rust_binder: Write failure EINVAL in pid:143 [ 141.811526][ T6697] rust_binder: Write failure EINVAL in pid:143 [ 141.889065][ T6703] binder: Unknown parameter '8' [ 141.986224][ T6709] binder: Unknown parameter '0x0000000000000000' [ 142.332961][ T6724] rust_binder: Write failure EINVAL in pid:1637 [ 142.490458][ T6727] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 142.748835][ T6734] rust_binder: Write failure EINVAL in pid:1642 [ 142.970503][ T6742] rust_binder: Write failure EFAULT in pid:1646 [ 143.298845][ T6763] binder: Unknown parameter '0x0000000000000003' [ 143.409327][ T6766] binder: Bad value for 'defcontext' [ 143.420117][ T6770] SELinux: security_context_str_to_sid () failed with errno=-22 [ 143.698196][ T6783] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 143.698229][ T6783] rust_binder: Error in use_page_slow: EBUSY [ 143.721199][ T6783] rust_binder: use_range failure EBUSY [ 143.727619][ T6783] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 143.763068][ T6783] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 143.805624][ T6783] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 143.830623][ T6793] rust_binder: Write failure EFAULT in pid:473 [ 143.835396][ T6783] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1495 [ 144.044685][ T6806] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 144.205651][ T6813] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 144.332179][ T6817] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.410903][ T36] kauditd_printk_skb: 1389 callbacks suppressed [ 144.410921][ T36] audit: type=1400 audit(1750320925.409:17831): avc: denied { map } for pid=6818 comm="syz.3.2075" path="/dev/binderfs/binder0" dev="binder" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 144.503283][ T36] audit: type=1400 audit(1750320925.409:17832): avc: denied { read } for pid=6818 comm="syz.3.2075" path="/dev/binderfs/binder0" dev="binder" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 144.577633][ T36] audit: type=1400 audit(1750320925.409:17833): avc: denied { read } for pid=6818 comm="syz.3.2075" name="binder1" dev="binder" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 144.613029][ T6823] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 144.632444][ T6823] rust_binder: Write failure EINVAL in pid:486 [ 144.667059][ T36] audit: type=1400 audit(1750320925.409:17834): avc: denied { read open } for pid=6818 comm="syz.3.2075" path="/dev/binderfs/binder1" dev="binder" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 144.747618][ T5998] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.751154][ T6829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.762043][ T36] audit: type=1400 audit(1750320925.409:17835): avc: denied { read } for pid=6818 comm="syz.3.2075" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.782380][ T6829] audit: audit_lost=70 audit_rate_limit=0 audit_backlog_limit=64 [ 144.807188][ T5998] audit: audit_lost=71 audit_rate_limit=0 audit_backlog_limit=64 [ 144.816009][ T36] audit: type=1400 audit(1750320925.409:17836): avc: denied { read open } for pid=6818 comm="syz.3.2075" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.979408][ T6839] rust_binder: Write failure EINVAL in pid:1665 [ 145.130612][ T6841] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 145.137084][ T6841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:185 [ 145.311209][ T6854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:492 [ 145.417986][ T6851] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 145.451209][ T6851] rust_binder: Error in use_page_slow: EBUSY [ 145.482097][ T6851] rust_binder: use_range failure EBUSY [ 145.509673][ T6851] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 145.519309][ T6851] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 145.541105][ T6851] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 145.583806][ T6851] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:187 [ 145.845049][ T6880] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.066226][ T6896] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.101337][ T6896] rust_binder: inc_ref_done called when no active inc_refs [ 146.119522][ T6896] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1524 [ 146.170799][ T6894] rust_binder: Write failure EINVAL in pid:195 [ 146.484673][ T6931] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:203 [ 146.491606][ T6933] Bluetooth: hci0: Frame reassembly failed (-84) [ 146.527904][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 146.528240][ T6934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1684 [ 146.550380][ T6933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1684 [ 146.812978][ T6956] input: syz1 as /devices/virtual/input/input165 [ 147.118678][ T6977] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 147.153230][ T6984] SELinux: security_context_str_to_sid () failed with errno=-22 [ 147.401931][ T7003] binder: Unknown parameter 'defcontext' [ 147.408227][ T7001] binder: Unknown parameter 'defcontext' [ 147.450586][ T1671] hid-generic 0000:0000:0000.0011: unknown main item tag 0x4 [ 147.458431][ T1671] hid-generic 0000:0000:0000.0011: unknown main item tag 0x2 [ 147.472342][ T1671] hid-generic 0000:0000:0000.0011: unknown main item tag 0x3 [ 147.485934][ T1671] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 147.600675][ T7007] fido_id[7007]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 147.806013][ T7023] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 147.900295][ T7028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1556 [ 147.937980][ T7030] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 148.334988][ T7035] SELinux: security_context_str_to_sid () failed with errno=-22 [ 148.500259][ T1046] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 148.682654][ T7055] input: syz1 as /devices/virtual/input/input166 [ 148.976464][ T7069] rust_binder: Write failure EINVAL in pid:555 [ 149.328068][ T7080] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 149.421981][ T36] kauditd_printk_skb: 1123 callbacks suppressed [ 149.421997][ T36] audit: type=1400 audit(1750320930.419:18916): avc: denied { read } for pid=7083 comm="syz.3.2160" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 149.426868][ T7084] input input167: cannot allocate more than FF_MAX_EFFECTS effects [ 149.435160][ T36] audit: type=1400 audit(1750320930.419:18917): avc: denied { read open } for pid=7083 comm="syz.3.2160" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 149.520241][ T36] audit: type=1400 audit(1750320930.419:18918): avc: denied { read } for pid=7083 comm="syz.3.2160" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 149.540917][ T7091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1693 [ 149.554339][ T36] audit: type=1400 audit(1750320930.419:18919): avc: denied { read open } for pid=7083 comm="syz.3.2160" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 149.610052][ T36] audit: type=1400 audit(1750320930.419:18920): avc: denied { ioctl } for pid=7083 comm="syz.3.2160" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 149.638835][ T36] audit: type=1400 audit(1750320930.419:18921): avc: denied { ioctl } for pid=7083 comm="syz.3.2160" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 149.679684][ T36] audit: type=1400 audit(1750320930.419:18922): avc: denied { ioctl } for pid=7083 comm="syz.3.2160" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 149.706333][ T36] audit: type=1400 audit(1750320930.449:18923): avc: denied { read } for pid=7082 comm="syz.1.2159" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 149.756599][ T36] audit: type=1400 audit(1750320930.449:18924): avc: denied { read open } for pid=7082 comm="syz.1.2159" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 149.781304][ T36] audit: type=1400 audit(1750320930.449:18925): avc: denied { read write } for pid=7083 comm="syz.3.2160" name="binder1" dev="binder" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 150.001698][ T60] bridge_slave_1: left allmulticast mode [ 150.007818][ T60] bridge_slave_1: left promiscuous mode [ 150.013871][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.032595][ T60] bridge_slave_0: left allmulticast mode [ 150.046164][ T60] bridge_slave_0: left promiscuous mode [ 150.060237][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.090835][ T7100] kvm: kvm [7099]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253 [ 150.108006][ T7101] binder: Bad value for 'defcontext' [ 150.232856][ T60] veth1_macvtap: left promiscuous mode [ 150.239113][ T60] veth0_vlan: left promiscuous mode [ 150.341290][ T7104] binder: Unknown parameter '0x0000000000000003' [ 150.392055][ T7102] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.395056][ T7110] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.399523][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.399581][ T7102] bridge_slave_0: entered allmulticast mode [ 150.421141][ T7102] bridge_slave_0: entered promiscuous mode [ 150.428955][ T7102] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.436137][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.443846][ T7102] bridge_slave_1: entered allmulticast mode [ 150.450784][ T7102] bridge_slave_1: entered promiscuous mode [ 150.625296][ T7118] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 150.694214][ T7119] binder: Bad value for 'stats' [ 150.823742][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.830831][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.846898][ T7128] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 150.886092][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.893787][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.018599][ T7102] veth0_vlan: entered promiscuous mode [ 151.092365][ T7102] veth1_macvtap: entered promiscuous mode [ 152.319082][ T7186] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 152.319116][ T7186] rust_binder: Error in use_page_slow: EBUSY [ 152.340269][ T7186] rust_binder: use_range failure EBUSY [ 152.370228][ T7186] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 152.397322][ T7186] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 152.440293][ T7186] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 152.470223][ T7186] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1720 [ 152.725294][ T7215] binder: Unknown parameter '' [ 152.770332][ T7215] binder: Unknown parameter '' [ 152.790363][ T581] hid-generic 0000:0000:0000.0012: unknown main item tag 0x4 [ 152.822497][ T581] hid-generic 0000:0000:0000.0012: unknown main item tag 0x2 [ 152.840293][ T581] hid-generic 0000:0000:0000.0012: unknown main item tag 0x3 [ 152.860620][ T581] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 153.013273][ T7223] rust_binder: Error while translating object. [ 153.013314][ T7223] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 153.044046][ T7223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:21 [ 153.185790][ T7231] fido_id[7231]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 153.497417][ T7244] rust_binder: Error while translating object. [ 153.497452][ T7244] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 153.515246][ T7246] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 153.540196][ T7244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1619 [ 153.665813][ T7248] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 153.675598][ T7260] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.761302][ T7258] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 153.782623][ T7262] rust_binder: Write failure EINVAL in pid:1736 [ 153.799406][ T7258] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:28 [ 153.844007][ T7262] rust_binder: Read failure Err(EAGAIN) in pid:1736 [ 154.091664][ T7281] rust_binder: Write failure EINVAL in pid:1738 [ 154.104810][ T7279] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 154.117001][ T7279] rust_binder: Error in use_page_slow: EBUSY [ 154.139755][ T7279] rust_binder: use_range failure EBUSY [ 154.151468][ T7279] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 154.161843][ T7279] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 154.177448][ T7279] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 154.200763][ T7279] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1738 [ 154.456100][ T36] kauditd_printk_skb: 930 callbacks suppressed [ 154.456118][ T36] audit: type=1400 audit(1750320935.449:19856): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.544507][ T36] audit: type=1400 audit(1750320935.519:19857): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.575365][ T36] audit: type=1400 audit(1750320935.519:19858): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.646185][ T36] audit: type=1400 audit(1750320935.569:19859): avc: denied { read write } for pid=7294 comm="syz.2.2226" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 154.687624][ T36] audit: type=1400 audit(1750320935.569:19860): avc: denied { read open } for pid=7294 comm="syz.2.2226" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 154.714769][ T36] audit: type=1400 audit(1750320935.599:19861): avc: denied { read } for pid=7294 comm="syz.2.2226" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 154.749504][ T36] audit: type=1400 audit(1750320935.609:19862): avc: denied { read open } for pid=7294 comm="syz.2.2226" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 154.820360][ T36] audit: type=1400 audit(1750320935.609:19863): avc: denied { ioctl } for pid=7294 comm="syz.2.2226" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 154.873779][ T7306] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 154.876059][ T7306] audit: audit_backlog=65 > audit_backlog_limit=64 [ 154.879114][ T7312] audit: audit_backlog=65 > audit_backlog_limit=64 [ 155.008779][ T7321] kvm: kvm [7319]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 155.302909][ T7341] input: syz0 as /devices/virtual/input/input170 [ 155.317483][ T7341] input: failed to attach handler leds to device input170, error: -6 [ 155.623611][ T1671] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x4 [ 155.631495][ T1671] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x2 [ 155.641779][ T1671] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 155.649536][ T1671] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 155.658711][ T1671] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 155.667475][ T1671] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 155.686684][ T1671] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 155.704568][ T1671] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 155.722096][ T1671] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 155.732042][ T1671] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 155.743473][ T1671] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 155.752933][ T1671] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 155.762824][ T1671] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 155.774539][ T1671] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 155.787110][ T1671] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 155.799583][ T1671] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 155.813612][ T1671] hid-generic 0000:3000000:0000.0013: hidraw0: HID v0.00 Device [sy] on syz0 [ 156.002705][ T7360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.063644][ T7359] fido_id[7359]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 156.373815][ T7382] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.430615][ T7382] rust_binder: Error while translating object. [ 156.475407][ T7382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 156.512432][ T7382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1650 [ 156.890310][ T7395] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.910259][ T7397] rust_binder: Error while translating object. [ 156.941783][ T7397] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 156.948333][ T7397] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1773 [ 156.991260][ T7400] random: crng reseeded on system resumption [ 157.069429][ T7395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1652 [ 157.114719][ T7405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:640 [ 160.264855][ T36] kauditd_printk_skb: 523 callbacks suppressed [ 160.264872][ T36] audit: type=1400 audit(1750320941.259:20362): avc: denied { read write } for pid=7409 comm="syz.3.2268" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 160.314915][ T7414] binder: Unknown parameter '' [ 160.322905][ T36] audit: type=1400 audit(1750320941.259:20363): avc: denied { read } for pid=7406 comm="syz.0.2265" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 160.346933][ T36] audit: type=1400 audit(1750320941.259:20364): avc: denied { read open } for pid=7406 comm="syz.0.2265" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 160.373543][ T36] audit: type=1400 audit(1750320941.259:20365): avc: denied { read write } for pid=7409 comm="syz.3.2268" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 160.399927][ T36] audit: type=1400 audit(1750320941.259:20366): avc: denied { read write open } for pid=7409 comm="syz.3.2268" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 160.484531][ T7425] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.492125][ T7426] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.498980][ T7426] audit: audit_lost=95 audit_rate_limit=0 audit_backlog_limit=64 [ 160.516202][ T36] audit: type=1400 audit(1750320941.259:20367): avc: denied { read } for pid=7408 comm="syz.2.2267" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 160.521003][ T4821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 160.619400][ T7438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1663 [ 160.619437][ T7438] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 160.640321][ T7438] rust_binder: Read failure Err(EFAULT) in pid:1663 [ 160.860634][ T7448] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.869433][ T7448] rust_binder: inc_ref_done called when no active inc_refs [ 160.885124][ T7448] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1668 [ 161.144863][ T7455] rust_binder: Error while translating object. [ 161.165161][ T7455] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 161.173972][ T7455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:651 [ 161.272113][ T304] bridge_slave_1: left allmulticast mode [ 161.297321][ T304] bridge_slave_1: left promiscuous mode [ 161.298978][ T7461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1675 [ 161.318868][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.361035][ T304] bridge_slave_0: left allmulticast mode [ 161.366880][ T304] bridge_slave_0: left promiscuous mode [ 161.374700][ T7463] rust_binder: Write failure EINVAL in pid:653 [ 161.385707][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.410972][ T7463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:653 [ 161.411501][ T7463] SELinux: failed to load policy [ 161.440993][ T7465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.446912][ T7465] rust_binder: Error while translating object. [ 161.476865][ T7465] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 161.490268][ T7465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1679 [ 161.678895][ T304] veth1_macvtap: left promiscuous mode [ 161.695689][ T304] veth0_vlan: left promiscuous mode [ 161.795195][ T7478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:655 [ 161.800869][ T7481] input: syz1 as /devices/virtual/input/input171 [ 161.895450][ T7481] binder: Unknown parameter 'dont_hash' [ 161.953778][ T7452] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.970632][ T7452] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.978713][ T7452] bridge_slave_0: entered allmulticast mode [ 162.000932][ T7452] bridge_slave_0: entered promiscuous mode [ 162.008956][ T7452] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.016631][ T7452] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.024643][ T7452] bridge_slave_1: entered allmulticast mode [ 162.031322][ T7452] bridge_slave_1: entered promiscuous mode [ 162.318096][ T7452] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.325748][ T7452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.334030][ T7452] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.341270][ T7452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.380913][ T7509] binder: Unknown parameter 'defcoext' [ 162.565064][ T7511] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.589112][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.628842][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.683250][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.709132][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.743399][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.750900][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.863682][ T7517] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 162.986795][ T7452] veth0_vlan: entered promiscuous mode [ 163.072731][ T7452] veth1_macvtap: entered promiscuous mode [ 163.522759][ T7551] binder: Unknown parameter 'p#rmit_d–ectio' [ 163.651933][ T7559] SELinux: policydb version 1379249996 does not match my version range 15-33 [ 163.680225][ T7559] SELinux: failed to load policy [ 163.905841][ T7565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:684 [ 164.183992][ T7575] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 164.415379][ T7580] binder: Bad value for 'stats' [ 164.478721][ T7582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.488485][ T7582] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 120, size: 97) [ 164.495535][ T7582] rust_binder: Error while translating object. [ 164.509503][ T7582] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 164.516544][ T7582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1705 [ 164.613732][ T7588] binder: Unknown parameter '18446744073709551615' [ 164.644525][ T7588] binder: Unknown parameter '18446744073709551615' [ 164.699055][ T7592] random: crng reseeded on system resumption [ 164.898274][ T7607] serio: Serial port ttynull [ 164.969573][ T7605] rust_binder: Write failure EINVAL in pid:20 [ 165.037058][ T7618] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 165.253550][ T7626] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 165.284394][ T36] kauditd_printk_skb: 903 callbacks suppressed [ 165.284410][ T36] audit: type=1400 audit(1750320946.279:21266): avc: denied { read } for pid=7627 comm="syz.2.2331" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 165.304519][ T7629] input: syz1 as /devices/virtual/input/input172 [ 165.329039][ T7626] rust_binder: Write failure EINVAL in pid:696 [ 165.370970][ T36] audit: type=1400 audit(1750320946.279:21267): avc: denied { read open } for pid=7627 comm="syz.2.2331" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 165.450010][ T7633] audit: audit_backlog=65 > audit_backlog_limit=64 [ 165.477985][ T36] audit: type=1400 audit(1750320946.299:21268): avc: denied { ioctl } for pid=7627 comm="syz.2.2331" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 165.483655][ T7633] audit: audit_lost=98 audit_rate_limit=0 audit_backlog_limit=64 [ 165.515091][ T7633] audit: backlog limit exceeded [ 165.525730][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 165.536059][ T4821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 165.545967][ T289] audit: audit_lost=99 audit_rate_limit=0 audit_backlog_limit=64 [ 165.555289][ T4821] audit: audit_lost=100 audit_rate_limit=0 audit_backlog_limit=64 [ 165.600737][ T7638] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 165.718405][ T7644] binder: Bad value for 'stats' [ 165.806669][ T7647] rust_binder: Error while translating object. [ 165.806706][ T7647] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 165.830708][ T7647] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:707 [ 165.858330][ T7653] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.875544][ T7650] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 165.908123][ T7653] SELinux: syz.1.2338 (7653) set checkreqprot to 1. This is no longer supported. [ 166.125444][ T7670] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 166.160449][ T7654] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 166.501539][ T7694] rust_binder: Write failure EINVAL in pid:149 [ 166.925857][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 166.942707][ T7712] tap0: tun_chr_ioctl cmd 1074025678 [ 166.952020][ T7712] tap0: group set to 0 [ 167.624961][ T7735] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 168.119458][ T7751] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.428158][ T7767] rust_binder: Write failure EINVAL in pid:69 [ 168.590559][ T7771] binder: Unknown parameter 'docÆ8ash' [ 168.621384][ T7780] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:749 [ 168.789328][ T7785] SELinux: policydb string SEûNinux does not match my string SE Linux [ 168.798193][ T7785] SELinux: failed to load policy [ 168.894038][ T7789] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 168.979669][ T306] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 168.990191][ T953] Bluetooth: hci0: command 0x1003 tx timeout [ 169.002268][ T1046] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 169.031513][ T7795] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 169.043984][ T306] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.195055][ T7791] binder: Unknown parameter '0x0000000000000000' [ 169.306432][ T7806] random: crng reseeded on system resumption [ 169.363713][ T7806] Unrecognized hibernate image header format! [ 169.380724][ T7806] PM: hibernation: Image mismatch: architecture specific data [ 169.522680][ T7810] ptm ptm20: ldisc open failed (-12), clearing slot 20 [ 169.885638][ T7833] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1756 [ 169.887031][ T7833] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 169.987625][ T7838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1758 [ 169.991691][ T7835] binder: Binderfs stats mode cannot be changed during a remount [ 169.997509][ T7839] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.042254][ T7838] rust_binder: Error while translating object. [ 170.048985][ T7838] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 170.070229][ T7838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1758 [ 170.164593][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.221219][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.227550][ T7850] rust_binder: Write failure EFAULT in pid:93 [ 170.233801][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.256112][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.278264][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.288628][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.298178][ T36] kauditd_printk_skb: 878 callbacks suppressed [ 170.298194][ T36] audit: type=1400 audit(1750320951.289:22145): avc: denied { read } for pid=7854 comm="syz.3.2399" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 170.298620][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.333359][ T36] audit: type=1400 audit(1750320951.289:22147): avc: denied { remount } for pid=7844 comm="syz.0.2397" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 170.369083][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.381068][ T36] audit: type=1400 audit(1750320951.289:22146): avc: denied { read open } for pid=7854 comm="syz.3.2399" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 170.407874][ T36] audit: type=1400 audit(1750320951.319:22148): avc: denied { ioctl } for pid=7854 comm="syz.3.2399" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 170.431253][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.435465][ T36] audit: type=1400 audit(1750320951.359:22149): avc: denied { remount } for pid=7844 comm="syz.0.2397" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 170.468134][ T36] audit: type=1400 audit(1750320951.409:22150): avc: denied { read append } for pid=7856 comm="syz.2.2400" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 170.470832][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.494117][ T36] audit: type=1400 audit(1750320951.409:22151): avc: denied { read open } for pid=7856 comm="syz.2.2400" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 170.520775][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.531152][ T36] audit: type=1400 audit(1750320951.409:22152): avc: denied { read } for pid=7856 comm="syz.2.2400" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 170.569508][ T36] audit: type=1400 audit(1750320951.409:22153): avc: denied { read open } for pid=7856 comm="syz.2.2400" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 170.606548][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.608906][ T7861] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 170.635524][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.660368][ T36] audit: type=1400 audit(1750320951.409:22154): avc: denied { ioctl } for pid=7856 comm="syz.2.2400" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 170.714045][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.727948][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.745675][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.756941][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.776204][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.802451][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.816924][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.837655][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.854277][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.864081][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.901157][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.920958][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.932627][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.947927][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 170.959986][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 171.022741][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 171.046293][ T7852] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 171.547042][ T7905] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 171.645428][ T7905] input: syz0 as /devices/virtual/input/input176 [ 171.705064][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 171.721694][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 171.729828][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 171.741285][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 171.749160][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 171.761009][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 171.769016][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 171.779471][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 171.792984][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 171.820220][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 171.836547][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 171.846493][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 171.856412][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 171.867322][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 171.876195][ T7913] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 171.877537][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 171.888092][ T7913] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 171.897487][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 171.917449][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 171.926918][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 171.933387][ T7915] rust_binder: inc_ref_done called when no active inc_refs [ 171.936481][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 171.941379][ T7915] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 171.945654][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 171.966988][ T7915] rust_binder: Read failure Err(EFAULT) in pid:1785 [ 171.973100][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 171.988553][ T7915] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.990178][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.006077][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.015940][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.026371][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.035165][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.048731][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.058683][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.067266][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.075891][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.085741][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.099927][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.109878][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.119569][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.121332][ T7925] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.129283][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.133268][ T7925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1789 [ 172.137839][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.148715][ T7925] rust_binder: got new transaction with bad transaction stack [ 172.155013][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.162067][ T7925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1789 [ 172.171097][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.197517][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.206140][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.220236][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.228807][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.237839][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.246566][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.255453][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.274812][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.287323][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.296322][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.304335][ T7932] kvm: user requested TSC rate below hardware speed [ 172.305865][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.321200][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.330602][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.333849][ T7932] binder: Unknown parameter 'q^' [ 172.339819][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.353876][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.362018][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.370483][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.379025][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.387461][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.398182][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.406805][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.416381][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.424699][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.434088][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.442496][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.451249][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.459642][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.468288][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.477154][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.485744][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.510206][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.521166][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.530054][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.538395][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.560204][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.568201][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.587771][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.602596][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.618681][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.634710][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.650357][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.658775][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.667377][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.676833][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.687534][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.696030][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.704947][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.716616][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.726645][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.737969][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.749583][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.760099][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.771992][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.783355][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.795052][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.805962][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.816744][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.871071][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.889544][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.900086][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.920205][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x6 [ 172.932025][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x6 [ 172.950228][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x3 [ 172.969006][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.980378][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 172.996401][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 173.005390][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 173.014905][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 173.023501][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 173.050251][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 173.058694][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 173.067942][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 173.076872][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 173.085387][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 173.097249][ T7949] kvm: apic: phys broadcast and lowest prio [ 173.100249][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 173.112867][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 173.120955][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 173.128957][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 173.137364][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 173.145610][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 173.154604][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 173.163251][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 173.171491][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 173.179932][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 173.188265][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 173.196744][ T306] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 173.207092][ T306] hid-generic 0008:0000:FFFFFBFF.0015: hidraw0: HID v9.86 Device [syz0] on syz1 [ 173.222921][ T7951] binder: Unknown parameter 'permit_directio' [ 173.301985][ T7953] kvm: kvm [7952]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x3032 [ 173.384427][ T7957] input: syz1 as /devices/virtual/input/input177 [ 173.405773][ T7956] SELinux: security_context_str_to_sid (system_uÝGй ‰:ÿß) failed with errno=-22 [ 173.433098][ T7957] SELinux: security_context_str_to_sid (system_uÝGй ‰:ÿß) failed with errno=-22 [ 173.463302][ T7958] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 173.686844][ T7964] fido_id[7964]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 173.944736][ T7975] SELinux: policydb string length 14080 does not match expected length 8 [ 173.960812][ T7975] SELinux: failed to load policy [ 173.989803][ T7977] SELinux: policydb string length 14080 does not match expected length 8 [ 174.024415][ T7977] SELinux: failed to load policy [ 174.080964][ T7982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.369790][ T8004] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.417200][ T8002] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 174.733124][ T60] bridge_slave_1: left allmulticast mode [ 174.739111][ T60] bridge_slave_1: left promiscuous mode [ 174.754715][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.775307][ T60] bridge_slave_0: left allmulticast mode [ 174.785781][ T60] bridge_slave_0: left promiscuous mode [ 174.798537][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.954264][ T60] veth1_macvtap: left promiscuous mode [ 174.961719][ T60] veth0_vlan: left promiscuous mode [ 175.067022][ T8025] random: crng reseeded on system resumption [ 175.128039][ T8006] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.151223][ T8006] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.165786][ T8006] bridge_slave_0: entered allmulticast mode [ 175.171100][ T8031] rust_binder: Read failure Err(EAGAIN) in pid:824 [ 175.183930][ T8006] bridge_slave_0: entered promiscuous mode [ 175.186069][ T8031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:824 [ 175.202771][ T8006] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.219903][ T8006] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.227588][ T8006] bridge_slave_1: entered allmulticast mode [ 175.234119][ T8006] bridge_slave_1: entered promiscuous mode [ 175.254697][ T8032] rust_binder: Error while translating object. [ 175.254726][ T8032] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 175.261354][ T8032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:824 [ 175.341075][ T36] kauditd_printk_skb: 710 callbacks suppressed [ 175.341093][ T36] audit: type=1400 audit(1750320956.329:22865): avc: denied { write } for pid=8033 comm="syz.0.2455" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 175.408881][ T36] audit: type=1400 audit(1750320956.329:22866): avc: denied { write open } for pid=8033 comm="syz.0.2455" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 175.439943][ T8038] rust_binder: Error while translating object. [ 175.439967][ T8038] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 175.441549][ T8036] can0: slcan on ptm0. [ 175.456472][ T8038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:134 [ 175.497327][ T36] audit: type=1400 audit(1750320956.329:22867): avc: denied { read write } for pid=7452 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.580192][ T36] audit: type=1400 audit(1750320956.329:22868): avc: denied { read write open } for pid=7452 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.641010][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.648103][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.674943][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.682928][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.700224][ T36] audit: type=1400 audit(1750320956.329:22869): avc: denied { ioctl } for pid=7452 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 175.768946][ T36] audit: type=1400 audit(1750320956.359:22870): avc: denied { create } for pid=8006 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.773783][ T8046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 175.798282][ T8006] audit: audit_backlog=65 > audit_backlog_limit=64 [ 175.807906][ T8006] audit: audit_lost=101 audit_rate_limit=0 audit_backlog_limit=64 [ 175.818672][ T36] audit: type=1400 audit(1750320956.369:22871): avc: denied { write } for pid=8006 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.896431][ T8006] veth0_vlan: entered promiscuous mode [ 175.986614][ T8006] veth1_macvtap: entered promiscuous mode [ 176.179392][ T8052] binder: Unknown parameter 'dont_hash' [ 176.199604][ T8057] binder: Unknown parameter 'dont_hash' [ 176.345968][ T8035] can0 (unregistered): slcan off ptm0. [ 176.655802][ T8072] rust_binder: Write failure EINVAL in pid:140 [ 176.698953][ T8079] input: syz1 as /devices/virtual/input/input179 [ 176.765157][ T8081] input: syz0 as /devices/virtual/input/input180 [ 176.820494][ T8085] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 177.202087][ T8097] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 177.385226][ T8112] input: syz1 as /devices/virtual/input/input181 [ 177.447506][ T8112] binder: Unknown parameter 'Ûcontex' [ 178.101053][ T8138] binder: Bad value for 'stats' [ 178.252452][ T8145] __vm_enough_memory: pid: 8145, comm: syz.3.2483, bytes: 290271069868032 not enough memory for the allocation [ 178.337232][ T8147] rust_binder: Write failure EFAULT in pid:20 [ 178.409978][ T8151] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.667399][ T8165] binder: Unknown parameter 'noninderfs/binder0' [ 179.155571][ T8195] rust_binder: Write failure EINVAL in pid:30 [ 179.265252][ T8197] random: crng reseeded on system resumption [ 179.430761][ T8203] rust_binder: Write failure EINVAL in pid:856 [ 179.914325][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 179.930881][ T8223] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 179.973878][ T8223] input: syz0 as /devices/virtual/input/input183 [ 180.117190][ T8226] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.352155][ T36] kauditd_printk_skb: 1210 callbacks suppressed [ 180.352172][ T36] audit: type=1400 audit(1750320961.349:23956): avc: denied { read write } for pid=7452 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.423568][ T36] audit: type=1400 audit(1750320961.349:23957): avc: denied { read write open } for pid=7452 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.454327][ T36] audit: type=1400 audit(1750320961.349:23958): avc: denied { ioctl } for pid=7452 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.485536][ T36] audit: type=1400 audit(1750320961.389:23959): avc: denied { read } for pid=8241 comm="syz.2.2512" name="binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 180.514054][ T36] audit: type=1400 audit(1750320961.389:23960): avc: denied { read open } for pid=8241 comm="syz.2.2512" path="/dev/binderfs/binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 180.541522][ T36] audit: type=1400 audit(1750320961.389:23961): avc: denied { ioctl } for pid=8241 comm="syz.2.2512" path="/dev/binderfs/binder1" dev="binder" ino=32 ioctlcmd=0x6211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 180.568304][ T36] audit: type=1400 audit(1750320961.399:23962): avc: denied { read write } for pid=4821 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.594032][ T36] audit: type=1400 audit(1750320961.399:23963): avc: denied { read write open } for pid=4821 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.621800][ T36] audit: type=1400 audit(1750320961.399:23964): avc: denied { ioctl } for pid=4821 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.652846][ T36] audit: type=1400 audit(1750320961.409:23965): avc: denied { read write } for pid=7452 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.664761][ T8250] binder: Unknown parameter '' [ 180.973304][ T8255] binder: Bad value for 'stats' [ 180.976588][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 180.986381][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 180.994653][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.001892][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.009272][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.017314][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.024383][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.038011][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.045777][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.052769][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.059808][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.067734][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.075597][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.083957][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.100475][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.117678][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.126079][ T8257] rust_binder: Error in use_page_slow: ESRCH [ 181.126101][ T8257] rust_binder: use_range failure ESRCH [ 181.132479][ T8257] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 181.133853][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.138391][ T8257] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 181.154001][ T8257] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:46 [ 181.166609][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.200506][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.207651][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.216136][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.227361][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.234912][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.250510][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.267863][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.288043][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.296531][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.303627][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.311433][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.318276][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.325571][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.334580][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.341883][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.350391][ T8253] Bluetooth: hci1: Frame reassembly failed (-84) [ 181.402157][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.402419][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.412719][ T8268] rust_binder: Error while translating object. [ 181.431865][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.438447][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.445966][ T8268] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 181.453894][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.462125][ T8268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:57 [ 181.464916][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.479987][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.481752][ T8272] binder: Unknown parameter '' [ 181.487825][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.503121][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.510092][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.517422][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.524611][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.532455][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.539622][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.546792][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.553798][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.560834][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.568288][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.575412][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.582193][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.589344][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.596408][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.603395][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.610129][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.617252][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.640456][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.647833][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.680506][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.687736][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.713625][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.740439][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.749083][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.760452][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.767474][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.779586][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.791640][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.802150][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.809270][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.816239][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.823430][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.830460][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.837512][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.844838][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.851859][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.859032][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.866431][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.873331][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.880519][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.887568][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.894786][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.901749][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.909148][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.915949][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.922973][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.929908][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.936738][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.943882][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.950201][ T954] Bluetooth: hci0: command 0x1003 tx timeout [ 181.950765][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.957002][ T1046] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 181.963449][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.979074][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.000480][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.007425][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.015281][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.040466][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.142897][ T8287] binder: Bad value for 'stats' [ 182.174174][ T8289] binder: Unknown parameter '' [ 182.350122][ T8298] input: syz1 as /devices/virtual/input/input189 [ 182.795991][ T8306] rust_binder: Read failure Err(EAGAIN) in pid:213 [ 182.980198][ T953] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 182.993766][ T1046] Bluetooth: hci1: command 0x1003 tx timeout [ 183.185302][ T8330] SELinux: policydb version 51618937 does not match my version range 15-33 [ 183.222565][ T8330] SELinux: failed to load policy [ 183.231561][ T8334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217 [ 183.349478][ T8342] input: syz0 as /devices/virtual/input/input192 [ 183.394341][ T8342] input: failed to attach handler leds to device input192, error: -6 [ 183.420956][ T8343] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 183.599227][ T8350] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 183.823304][ T8359] rust_binder: Failed to allocate buffer. len:18446744073709551528, is_oneway:false [ 183.823330][ T8359] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 183.834399][ T8359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:274 [ 184.045292][ T8368] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 184.152825][ T8374] binfmt_misc: register: failed to install interpreter file ./cgroup [ 184.278223][ T8382] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 184.418601][ T8397] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 184.501351][ T8395] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 184.502292][ T8399] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 184.508290][ T8395] rust_binder: Error in use_page_slow: EBUSY [ 184.564975][ T8395] rust_binder: use_range failure EBUSY [ 184.573448][ T8395] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 184.581691][ T8395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 184.590109][ T8395] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 184.599974][ T8395] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:282 [ 184.663506][ T8410] rust_binder: Write failure EFAULT in pid:229 [ 184.711300][ T8410] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 184.741141][ T8410] rust_binder: Error while translating object. [ 184.769444][ T8410] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 184.809358][ T8410] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:229 [ 184.995067][ T8419] rust_binder: Write failure EFAULT in pid:289 [ 185.078384][ T8421] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 185.095179][ T8421] rust_binder: Write failure EINVAL in pid:114 [ 185.201317][ T8432] rust_binder: Read failure Err(EAGAIN) in pid:292 [ 185.385264][ T36] kauditd_printk_skb: 793 callbacks suppressed [ 185.385283][ T36] audit: type=1400 audit(1750320966.379:24759): avc: denied { read write } for pid=8441 comm="syz.2.2578" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.454933][ T36] audit: type=1400 audit(1750320966.379:24760): avc: denied { read write open } for pid=8441 comm="syz.2.2578" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.491389][ T36] audit: type=1400 audit(1750320966.399:24761): avc: denied { map } for pid=8441 comm="syz.2.2578" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.547880][ T36] audit: type=1400 audit(1750320966.399:24762): avc: denied { read } for pid=8441 comm="syz.2.2578" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.574881][ T36] audit: type=1400 audit(1750320966.429:24763): avc: denied { read } for pid=8440 comm="syz.1.2579" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 185.601577][ T8448] rust_binder: Error while translating object. [ 185.601633][ T8448] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 185.608182][ T8448] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:116 [ 185.633921][ T8448] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 185.656269][ T8448] rust_binder: Read failure Err(EFAULT) in pid:116 [ 185.672691][ T36] audit: type=1400 audit(1750320966.429:24764): avc: denied { read open } for pid=8440 comm="syz.1.2579" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 185.683404][ T8454] ------------[ cut here ]------------ [ 185.709511][ T8454] WARNING: CPU: 1 PID: 8454 at mm/page_alloc.c:5157 __alloc_pages_noprof+0xe4/0x6c0 [ 185.719135][ T8454] Modules linked in: [ 185.723194][ T8454] CPU: 1 UID: 0 PID: 8454 Comm: syz.0.2583 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 185.737288][ T8454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.743127][ T36] audit: type=1400 audit(1750320966.429:24765): avc: denied { ioctl } for pid=8440 comm="syz.1.2579" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 185.747606][ T8454] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 185.775909][ T36] audit: type=1400 audit(1750320966.449:24766): avc: denied { read } for pid=8440 comm="syz.1.2579" name="binder0" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 185.778808][ T8454] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d b4 7a ee 05 00 0f 85 c4 00 00 00 c6 05 a7 7a ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 185.778826][ T8454] RSP: 0018:ffffc9000b62f5a0 EFLAGS: 00010246 [ 185.805655][ T36] audit: type=1400 audit(1750320966.449:24767): avc: denied { read open } for pid=8440 comm="syz.1.2579" path="/dev/binderfs/binder0" dev="binder" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 185.825243][ T8454] [ 185.833791][ T8455] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 185.857030][ T8454] RAX: 0000000000000000 RBX: 1ffff920016c5eb8 RCX: 0000000000000000 [ 185.859619][ T36] audit: type=1400 audit(1750320966.479:24768): avc: denied { ioctl } for pid=8440 comm="syz.1.2579" path="/dev/binderfs/binder0" dev="binder" ino=28 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 185.867779][ T8454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000b62f648 [ 185.867794][ T8454] RBP: ffffc9000b62f6c8 R08: ffffc9000b62f647 R09: 0000000000000000 [ 185.867805][ T8454] R10: ffffc9000b62f630 R11: fffff520016c5ec9 R12: ffffc9000b62f5e0 [ 185.867818][ T8454] R13: 0000000000000016 R14: dffffc0000000000 R15: 0000000000000000 [ 185.867830][ T8454] FS: 00007fca976d46c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 185.947968][ T8454] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.954797][ T8454] CR2: 0000200000001000 CR3: 0000000131214000 CR4: 00000000003526b0 [ 185.962997][ T8454] DR0: 0000000000000007 DR1: 000000000000009b DR2: 00040000ffffffff [ 185.971456][ T8454] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 185.979953][ T8454] Call Trace: [ 185.983650][ T8454] [ 185.986760][ T8454] ? do_syscall_64+0x58/0xf0 [ 185.991578][ T8454] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 185.997386][ T8454] ? hashtab_init+0xdb/0x1f0 [ 186.001996][ T8454] ___kmalloc_large_node+0x9c/0x1d0 [ 186.007298][ T8454] ? hashtab_init+0xdb/0x1f0 [ 186.012348][ T8454] __kmalloc_large_node_noprof+0x1e/0xe0 [ 186.018162][ T8454] ? hashtab_init+0xdb/0x1f0 [ 186.022972][ T8454] __kmalloc_noprof+0x26d/0x450 [ 186.028010][ T8454] hashtab_init+0xdb/0x1f0 [ 186.032805][ T8454] ? common_read+0x16d/0x480 [ 186.037496][ T8454] symtab_init+0x44/0x70 [ 186.042145][ T8454] common_read+0x1de/0x480 [ 186.046658][ T8454] ? __cfi_common_read+0x10/0x10 [ 186.051891][ T8454] ? hashtab_init+0x105/0x1f0 [ 186.056675][ T8454] policydb_read+0xaa8/0x28c0 [ 186.061390][ T8454] ? kasan_save_alloc_info+0x40/0x50 [ 186.066836][ T8454] ? __cfi_policydb_read+0x10/0x10 [ 186.072189][ T8454] ? security_load_policy+0x128/0x12f0 [ 186.078181][ T8454] security_load_policy+0x162/0x12f0 [ 186.083589][ T8454] ? irqentry_exit+0x4a/0x60 [ 186.088281][ T8454] ? exc_page_fault+0x66/0xc0 [ 186.093174][ T8454] ? asm_exc_page_fault+0x2b/0x30 [ 186.098204][ T8454] ? __cfi_security_load_policy+0x10/0x10 [ 186.104091][ T8454] ? rep_movs_alternative+0x4a/0xa0 [ 186.109297][ T8454] sel_write_load+0x298/0x5e0 [ 186.114025][ T8454] ? futex_wait+0x288/0x540 [ 186.118704][ T8454] ? __cfi_sel_write_load+0x10/0x10 [ 186.123967][ T8454] ? __cfi_futex_wait+0x10/0x10 [ 186.128905][ T8454] ? bpf_lsm_file_permission+0xd/0x20 [ 186.134403][ T8454] ? __cfi_sel_write_load+0x10/0x10 [ 186.139790][ T8454] vfs_write+0x3c0/0xe80 [ 186.144404][ T8454] ? __cfi_vfs_write+0x10/0x10 [ 186.149756][ T8454] ? __kasan_check_write+0x18/0x20 [ 186.155201][ T8454] ? mutex_lock+0x92/0x1c0 [ 186.159807][ T8454] ? __cfi_mutex_lock+0x10/0x10 [ 186.165149][ T8454] ? __fget_files+0x2c5/0x340 [ 186.170426][ T8454] ksys_write+0x141/0x250 [ 186.174777][ T8454] ? xfd_validate_state+0x68/0x150 [ 186.179992][ T8454] ? __cfi_ksys_write+0x10/0x10 [ 186.185543][ T8454] ? __kasan_check_write+0x18/0x20 [ 186.190882][ T8454] ? fpregs_restore_userregs+0x11d/0x260 [ 186.196535][ T8454] __x64_sys_write+0x7f/0x90 [ 186.201322][ T8454] x64_sys_call+0x271c/0x2ee0 [ 186.206182][ T8454] do_syscall_64+0x58/0xf0 [ 186.210928][ T8454] ? clear_bhb_loop+0x35/0x90 [ 186.216066][ T8454] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 186.221996][ T8454] RIP: 0033:0x7fca9678e929 [ 186.226704][ T8454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.249904][ T8454] RSP: 002b:00007fca976d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.262642][ T8454] RAX: ffffffffffffffda RBX: 00007fca969b5fa0 RCX: 00007fca9678e929 [ 186.274567][ T8454] RDX: 00000000000012fe RSI: 0000200000000000 RDI: 0000000000000003 [ 186.283196][ T8454] RBP: 00007fca96810b39 R08: 0000000000000000 R09: 0000000000000000 [ 186.291925][ T8454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.300382][ T8454] R13: 0000000000000000 R14: 00007fca969b5fa0 R15: 00007ffe5495f7f8 [ 186.308730][ T8454] [ 186.311953][ T8454] ---[ end trace 0000000000000000 ]--- [ 186.319301][ T8454] SELinux: failed to load policy