last executing test programs: 1.486852788s ago: executing program 1 (id=561): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000002c0)=[@acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x4008af10, &(0x7f0000001200)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=""/183, &(0x7f0000001300)=""/4096, 0xeeee0000}) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000011c0)={0x8080000, 0x114000}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x81000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000014c0)={0x2020}, 0x2020) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r4, 0x400454a4, &(0x7f0000000040)=0x1) 1.469313088s ago: executing program 1 (id=562): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) read(r0, &(0x7f0000000040)=""/59, 0x3b) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xa) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYRES64=r5, @ANYRES8=0x0, @ANYRES64=r2]) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000074d564b00"/24]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 1.240122102s ago: executing program 1 (id=565): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000180100"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @pic={0x4, 0x8, 0x1e, 0x7f, 0x4, 0x2f, 0x9e, 0xf3, 0x1, 0xd4, 0x9, 0x3, 0xd, 0x6, 0x14}}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 983.653666ms ago: executing program 0 (id=569): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000002000c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x1) (async) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8}, {0x3000, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x6, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xdddd1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x1, 0x1, 0x8, 0x4, 0x6}, {0x0, 0x8000000, 0x0, 0x0, 0x5, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xe000, 0x5000, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0xeeee0000, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfc, 0x4, 0x0, 0x0, 0x5}, {0x2000, 0x8}, {0x4}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x8, 0x8000, 0x2000, [0xff, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) (async) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) (async) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) syz_clone3(&(0x7f00000013c0)={0x240040480, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000040)={0x0, 0x0, [0xa, 0x4, 0x100000000, 0x101, 0xf, 0x8bba, 0x0, 0xb1c]}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000240)={0x4, 0x8000, 0x0, 0x0, 0x1d}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x5cfa000) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x5cfa000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000869000/0x2000)=nil, 0x2000, 0x2000006, 0x12, r6, 0x70800000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) close(0x5) 647.42865ms ago: executing program 0 (id=571): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000440)={{0x4000, 0x8000000, 0x4, 0x7, 0x10, 0x4, 0x3, 0xa7, 0x4, 0x8, 0x4, 0x7}, {0x4, 0x80a0000, 0x3, 0x3e, 0x50, 0x2, 0x40, 0x2, 0x3, 0x0, 0x4, 0x9}, {0xdddd1000, 0x100000, 0x9, 0x4, 0x81, 0x31, 0x4, 0x4, 0x3, 0x4, 0xf8, 0xe}, {0x10000, 0xdddd1000, 0xc, 0xd, 0x0, 0x6f, 0x4, 0xb, 0xbb, 0x8, 0x5e, 0xf4}, {0x8080000, 0x8080000, 0x3, 0x6, 0x3, 0xc, 0x3, 0xdf, 0x9, 0xdb, 0xea, 0xff}, {0xdddd1003, 0xdddd1000, 0xb, 0x45, 0x8, 0x10, 0x4, 0xb, 0x4, 0x6, 0x6, 0x5}, {0x0, 0x4000, 0xb, 0x5, 0x1, 0x5, 0x5f, 0xb, 0x8, 0x5, 0xb, 0x8}, {0x4000, 0x4000, 0x0, 0x3, 0x0, 0x8, 0x7, 0x0, 0x3, 0x40, 0x7, 0x80}, {0x100000, 0x9}, {0x4b57b8aa980733be, 0x2}, 0x8, 0x0, 0x80a0000, 0x400, 0x5, 0x800, 0xeeef0000, [0x1, 0x0, 0x6, 0x8]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x10, 0x0, &(0x7f0000000540)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x10, 0x0, &(0x7f0000000540)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) 515.937032ms ago: executing program 0 (id=575): openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x141080, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0xfdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x9}) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x92) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) 504.746192ms ago: executing program 0 (id=578): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x1bec39af700e7306}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x600}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) 488.923143ms ago: executing program 2 (id=579): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x584, 0x0, 0x7ffffffffdffffd}]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) (async) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) (async) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r7, 0x5408, &(0x7f0000000040)={0x2000, 0x0, 0x0, 0x0, 0x0, "23f50000adb4004408020e90d1beaa82dc1ecf", 0x3}) (async) ioctl$TIOCGPGRP(r7, 0x5437, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@arm64={0x2, 0x8, 0x2, '\x00', 0x8005}) (async) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) (async) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x43, 0xda1, 0x8, 0x2004cb, 0x0, 0x100001000000, 0xfffffffffffffffe, 0x1, 0x8000, 0x3], 0x3000, 0x202}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 433.695894ms ago: executing program 0 (id=581): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)={0x3, 0x0, [{0x7, 0x0, 0x1, 0x8, 0x5}, {0xd, 0x1, 0x3, 0x2, 0x5c21}, {0x1, 0xf8000000, 0xfffffff7, 0x7fffffff, 0x96d}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='decodes m'], 0xf) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r8, 0x4004ae86, &(0x7f0000000000)=0x5) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r11, 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000000c0)={[0x400000200000000, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x4, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x3, 0x0, 0x3, 0x9, 0x100000000000, 0x7fffffff], 0x8080000}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000180)={0x1, 0x283, 0x0, &(0x7f0000000340)}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000140)=',,\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, &(0x7f0000000380)='cache=mmap') ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r5, 0x1000) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 388.657734ms ago: executing program 1 (id=582): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x1001, 0x3}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@handle={0x73682a85, 0x10a}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) 376.574814ms ago: executing program 1 (id=583): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xffffffffffffffff, 0x3a, 'allow_other', 0x3a, '', 0x3a, './cgroup.cpu/cpuset.cpus', 0x3a, [0x46, 0x46]}, 0x45) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000080)={0x6, 0x10, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000001300)=""/92, 0x80a0000}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x6, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002180)='/proc/partitions\x00', 0x0, 0x0) read(r6, &(0x7f0000000080)=""/122, 0x7a) read$FUSE(r6, &(0x7f0000000100)={0x2020}, 0x2020) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40843, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 266.328946ms ago: executing program 3 (id=584): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000100)={0x1, 0x2, 0x1000, 0x34, &(0x7f0000000040)="359503f1799b118f22b7a274befb72dfbff861de8a329d58ed7ad8050de87642a9cf6d8a8f21b6e6ec58b3fdaeac8823675a3aae", 0x71, 0x0, &(0x7f0000000080)="72cd6c81aa4b5772f359db1fb800e73ff1d0cf4c19e37e6526eeb4337dc373b49eed66c2fa8c9b1a563429dfde358a4292a6a87c79c69965f569bdf14930f7bbf29d776467a1a7e80023b0b7a14b644fbeaa7732d9d990f385f25504c9016ee6f33cdd4c853703c19e4a5d4ac60fa69797"}) (async, rerun: 64) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) (rerun: 64) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f00000001c0)={{r1}, "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"}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000011c0)={0xa, 0x4, {0x5, @usage, 0x0, 0x101, 0x7, 0x5, 0x3, 0x9, 0x0, @usage=0x29b8, 0x2, 0x200, [0x9, 0x8, 0x5d67, 0xfc00000000000000, 0x1ff, 0x9]}, {0x6, @usage=0x6, 0x0, 0x8, 0x4, 0xd26e, 0xa8, 0x3, 0x80, @struct={0x1, 0x7}, 0x8, 0x0, [0x6, 0xfffffffffffffff7, 0x5, 0x2, 0x4, 0x2]}, {0x5c, @struct={0x3, 0x1}, 0x0, 0x2, 0x2, 0xfffffffffffffff8, 0x3, 0x650e19c0, 0x8, @usage=0x1c7b, 0xfffffff7, 0xca8, [0xd, 0x9, 0x6, 0x3b, 0x4, 0x3]}, {0x2189, 0x3, 0x8001}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000015c0)={r2, 0x800, 0x3}) (async) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000019c0), 0x2, 0x0) (async) r4 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001a00), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000001a40)={'batadv_slave_0', 0x32, 0x39}, 0x11) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001a80)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001c80)={0x5c, 0x0, &(0x7f0000001b80)=[@clear_death={0x400c630f, 0x3}, @increfs={0x40046304, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001ac0)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x1, 0x1, 0x3}, @fda={0x66646185, 0x8, 0x1, 0x28}}, &(0x7f0000001b40)={0x0, 0x18, 0x38}}}], 0x55, 0x0, &(0x7f0000001c00)="38582678c9e78924b58aa486ed0c58e7daeed0cdd8384bf1242eb02fefb484cff5dededf90e3ad50df1b0a1616642df76a29df21921ae755f077aff2e2e45e41c41f0cb0b3cbd8114aa43b54be883dc4636e52fa4c"}) read$FUSE(r1, &(0x7f0000001cc0)={0x2020}, 0x2020) write$vga_arbiter(r0, &(0x7f0000003d00), 0xf) (async) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003d40), 0x80, 0x0) write$vga_arbiter(r6, &(0x7f0000003d80)=@target={'target ', {'PCI:', '6', ':', '8', ':', '1f', '.', '15'}}, 0x15) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) (async) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f00000041c0)={{'\x00', 0x2}, {0xd6b1}, 0x110, 0x0, 0x0, &(0x7f0000003dc0)='./file0\x00', &(0x7f0000003e00)='./file0\x00', &(0x7f0000003e40)="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", 0x163, 0x0, &(0x7f0000003fc0)={0x2, 0xc4, {0x0, 0xc, 0x8c, "6ad38d515eba73b69470e8440fdcb91538c7fd14efc7e98b684dd0cf30017d0b98efdffd913cb30799fb39e5a96a66b313cc81eebdb0301ce2469547c4c1d9659248be42c01e77de83dd1bf2dfd714eca0da14fe45931d73492f26a1b7afc88368240066fefef0349ef7897125426980907bc7c0028ae20598a32754f156be0e5f78dc352d9bd4ef4677d68a", 0x2b, "f68e32910710e3eb72b8148924c65a5b3e12a7a32c99b4a68264dd2e0e72666f4b00975e7f903ab58ec34f"}, 0xf5, "f8d5ac0db376cba2ba137345069a3bbb9355894c3d73c0a63afe5ec6380b386e7b486445c4832a65627e7733e51850c20be70bcfa40de1f3bbb1a937b5259288805ff73d00deabcac76862b24eeb04e9567f848201840f8d04d95de1b16f1d61a8945efc54c58d3285151667712a19c70643815edc5f564328489e9507dc2b3b40cfbefeb76ce4a3629659fe1d321f9cd9f948530b49c1ddc96017b4305bf4ae8c8dcb0817c598dfc8374809a333ad3528b3919e8a1b6b93f6cd59b4cc194b47ce5f0e6facdcc9add36a3160cfb30579185f7db0bbda7d0a4a7d1c6a2d3b4378cfbee5e8235251bb901740d073e74a17f46d4baa7b"}, 0x1c5}) (async) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000004240)) write$vga_arbiter(r5, &(0x7f0000004280), 0xf) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f00000042c0)=0x6) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000004300)={0x2020}, 0x2020) write$vga_arbiter(r6, &(0x7f0000006340)=@target={'target ', {'PCI:', '1d', ':', '11', ':', 'e', '.', '16'}}, 0x16) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000006380), 0x80, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r7, 0x4040942c, &(0x7f00000063c0)={0x0, 0x0, [0x9, 0x6, 0x1000, 0x9, 0x401, 0x2570]}) (async) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000006400), 0x0, 0x0) ioctl$PPPIOCGIDLE32(r8, 0x8008743f, &(0x7f0000006440)) (async) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000006480), 0x2, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000064c0)=0x17) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) ioctl$AUTOFS_IOC_FAIL(r6, 0x9361, 0x1) 265.994056ms ago: executing program 2 (id=585): ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/120, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x5000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4028af11, &(0x7f00000001c0)) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x4, 0x30, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) syz_clone(0x802400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0xdd3) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x4004e502, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0xec) openat(r0, &(0x7f0000000040)='./file0\x00', 0x80002, 0xa2) 265.491756ms ago: executing program 3 (id=586): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae03, 0xbb) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000240)={0xd5, 0x0, 0x1e}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xe3c}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r7, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x5000)=nil, 0x5000, 0x100000c, 0x13, r8, 0x4a9b6000) (async) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000140)={0xf000, 0x1000}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x33bb2000) 196.604687ms ago: executing program 3 (id=587): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4b00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) 183.912987ms ago: executing program 3 (id=588): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x9) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000080)=0x4) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000100)={0x0, 0x4, 0x0, [0x1, 0x7, 0x3, 0x101, 0xffffffffffffff6b], [0x6, 0x7fffffffffffffff, 0x9, 0x3, 0x9, 0x1, 0x7fff, 0x2, 0x10001, 0xffffffffffffffff, 0x9, 0x9, 0x0, 0x2c3, 0x2, 0x1000, 0x4, 0x8000, 0x9, 0x0, 0x6a, 0xe, 0x5, 0x9, 0x2, 0xd, 0xfffffffffffffff9, 0x8, 0x3, 0x8, 0x0, 0x7e, 0x5, 0x9, 0x0, 0xb, 0x0, 0x5, 0x5, 0x40, 0x0, 0x3, 0xffffffffffff0001, 0x8001, 0x7, 0x2, 0x2, 0xfb5, 0x3, 0xe, 0x2, 0x9, 0x2, 0x6, 0x2, 0x10001, 0xc28f, 0x40, 0x3, 0x3, 0x32a0, 0xd23e, 0x1, 0x1, 0xffff, 0xffffffffffffff80, 0x6, 0x5, 0x86, 0x6, 0x3, 0x0, 0x7fffffffffffffff, 0xfff, 0x4, 0x3, 0x79, 0x4, 0xffffffffffffff36, 0x5, 0x7ff, 0x400, 0x4, 0x4, 0x3, 0xfffffffffffffff7, 0x100000001, 0x400, 0x180000000, 0x65, 0xc2fb, 0x70a, 0x6f, 0x1000, 0x4, 0x8000, 0xd, 0x0, 0x6, 0x2, 0x4, 0x9, 0xb, 0xd, 0x800, 0xd891, 0x3, 0x7f, 0x6, 0x8, 0xa, 0x1b21, 0x3, 0x3, 0x8001, 0x8, 0xb27c, 0xfffffffffffffffd, 0x101, 0x7, 0xd08b]}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000540)={r2, "559d89fa6e59b3eb70188c4193f3dc99"}) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000001540)={0x1, 0x2, 0x1, 0x1000, 0x3}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000001580)={0x10000, r0, 'id0\x00'}) ioctl$KDDELIO(r3, 0x4b35, 0xe) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r3, 0x4010e501, &(0x7f0000001600)={r0}) write$khugepaged_scan(r0, &(0x7f0000001640), 0x8) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001680)=0x1) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001700), 0x2, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x10, r5, 0xbb893000) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000001740)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x30, r1, 0x42071000) r6 = openat$cgroup_int(r3, &(0x7f0000001780)='cpuset.sched_load_balance\x00', 0x2, 0x0) ioctl$FITHAW(r6, 0xc0045878) write$cgroup_devices(r4, &(0x7f00000017c0)={'b', ' *:* ', 'w\x00'}, 0x8) ioctl$FIBMAP(r6, 0x1, &(0x7f0000001800)=0xfffffff7) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) read$FUSE(r0, &(0x7f0000001840)={0x2020}, 0x2020) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000003880)={0x40, 0x3, 0x1, 0x4, 0x9}) ioctl$TCGETS2(r4, 0x802c542a, &(0x7f00000038c0)) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000003900)={0x1, "e86cbe78c4541113ca700a3ad3788d5af7fabbf3139924e11c636d75ed74c7b837647755d8ea7a304c4ca70074121a20695deef57ec866ab3d023b74d333bb8b8e5e3d3944e7c5ad1ad94fb96bc21dce9e0875f5f59d3237d952378029713db899b1729a52051dcab9e422f46c9554edcb2721280578f95fb7ea8b4c058bd8252f2ecd6a4743607153a5185f3ab110d255e6ab8fec03bbed17334b1eb8df2c88916b567b12e8dac2ee07a6c845cff9996ab30ece63faea4e79322c015a6e42df95f68cb92a284fdfa7f25f9544ac09a9687c09d0b2725c8782005be32318db89db8c3ec9790c56157a0f829259a8f411a8267c1c50f8e38216a27690b88acb917bd29a3bb710c809b7208e7f4dd232abb4ecdbd5124faaae9dc5df64eebfe8a6e7388eaed0ad50200d22f0d717961eb463d92db3b317c7395a249e4617c2eddf6782d5387275d31785831b4c95e0f4f6ad634c808319c928a69e663b7fea855f3fa784720865c8f30f1e536c6aad93b4f73a144cd099cc7bdef21fb48a65ed068b0ab6935a6b936806d802873ed9f296b5c9489299a654ff796c5f4694ae93081d79b5a182d57ff2ff79a7af4a91b4a2e2aef36f04eea53c56a27b47af1810be49799cbf5a66e3b038bec6bb05a979fb2a1a31bfaea289fcc3aff972a13537c35e1dceb5dd4af50ccdcb545275161b608d01fef2770f9b7eaa1a7183667e9209"}) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000003b40)) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000003b80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 126.500028ms ago: executing program 2 (id=589): prctl$PR_GET_NAME(0x10, 0x0) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, 0x0) 126.181968ms ago: executing program 3 (id=590): prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r0, 0x4008af7c, &(0x7f0000000040)={0x1, 0x8}) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001180)={0x1, 0x1, &(0x7f0000000080)=""/136, &(0x7f0000000140)=""/13, &(0x7f0000000180)=""/4096, 0xf000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000011c0)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002400)={0x6, 0x0, [{0x14000, 0x36, &(0x7f0000001200)=""/54}, {0xd000, 0xe, &(0x7f0000001240)=""/14}, {0x80a0000, 0x69, &(0x7f0000001280)=""/105}, {0x3000, 0x83, &(0x7f0000001300)=""/131}, {0xddcd4002, 0x1b, &(0x7f00000013c0)=""/27}, {0x2000, 0x1000, &(0x7f0000001400)=""/4096}]}) prctl$PR_GET_TIMERSLACK(0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002500), 0x80000, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000002540)={{r1}, 0x9, 0x5, 0x10000}) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000002580)) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000025c0)={0xfb}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000002600), 0x10400, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002640)=0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000026c0)=@attr_other={0x0, 0x42ed, 0x9, &(0x7f0000002680)=0x80000001}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002700), 0x10000, 0x0) ioctl$VHOST_VDPA_SET_STATUS(r0, 0x4001af72, &(0x7f0000002740)=0xf) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000002780)=0x81) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000002a00)={0x3, 0x0, &(0x7f00000027c0)=""/163, &(0x7f0000002880)=""/156, &(0x7f0000002940)=""/182, 0x3000}) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0xffffffff) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000002a40)={0x0, 0x0, [0x1, 0x75ae, 0xffffffffffffff01, 0x3, 0x0, 0x100000001, 0x6, 0x1]}) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f0000002ac0)=@attr_pmu_init) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000002d00)={0x3, 0x0, &(0x7f0000002b40)=""/138, &(0x7f0000002c00), &(0x7f0000002c40)=""/142, 0x8000000}) 126.004338ms ago: executing program 2 (id=591): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffa000/0x3000)=nil) (async) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffb000/0x2000)=nil) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 114.715668ms ago: executing program 3 (id=592): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000004c0)=""/79, 0x4f) 68.167409ms ago: executing program 1 (id=593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000002c000092000040"]) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x48080, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000080)=0x8) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000200)=0x63) read(r5, &(0x7f0000000280)=""/4096, 0x1000) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0xa0000000, 0x5, 0xb, 0x4, 0x6, 0x4, 0x1, 0x8, 0xf4, 0xe, 0x48, 0x80, 0x1}, {0x8, 0x6, 0x3, 0x1, 0x1, 0x97, 0x21, 0x5, 0x83, 0x5, 0x2e, 0x4, 0x10}, {0xfffffffb, 0x3465, 0x7, 0x80, 0x9, 0x1, 0x1, 0x88, 0x5, 0x80, 0xc, 0x5, 0x1ffffffffd}], 0x9}) write$cgroup_devices(r0, 0x0, 0xffdd) prctl$PR_SET_IO_FLUSHER(0x34, 0x1) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000080)={0x0, 0x2}) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r8, 0x4068aea3, &(0x7f0000000c00)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 7.81687ms ago: executing program 2 (id=594): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x54, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x2, &(0x7f0000000240)=""/13, 0xffffffffffffffe1, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) 7.55813ms ago: executing program 0 (id=595): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000080)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000240)='syz1\x00', 0x1ff) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0) 0s ago: executing program 2 (id=596): mmap(&(0x7f0000403000/0x3000)=nil, 0x3000, 0x0, 0x100010, 0xffffffffffffffff, 0x722cc000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000001c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xd672ed990c66297b) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r2, 0x293f000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.155' (ED25519) to the list of known hosts. [ 26.119953][ T36] audit: type=1400 audit(1750384771.440:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.121418][ T281] cgroup: Unknown subsys name 'net' [ 26.142619][ T36] audit: type=1400 audit(1750384771.440:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.170052][ T36] audit: type=1400 audit(1750384771.470:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.170311][ T281] cgroup: Unknown subsys name 'devices' [ 26.309291][ T281] cgroup: Unknown subsys name 'hugetlb' [ 26.314940][ T281] cgroup: Unknown subsys name 'rlimit' [ 26.491410][ T36] audit: type=1400 audit(1750384771.810:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.514619][ T36] audit: type=1400 audit(1750384771.810:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.539380][ T36] audit: type=1400 audit(1750384771.810:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.569524][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.578483][ T36] audit: type=1400 audit(1750384771.900:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.603115][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.603901][ T36] audit: type=1400 audit(1750384771.900:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.638188][ T36] audit: type=1400 audit(1750384771.920:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.664061][ T36] audit: type=1400 audit(1750384771.920:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.441242][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.448351][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.455427][ T288] bridge_slave_0: entered allmulticast mode [ 27.461887][ T288] bridge_slave_0: entered promiscuous mode [ 27.468507][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.475557][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.482821][ T288] bridge_slave_1: entered allmulticast mode [ 27.489226][ T288] bridge_slave_1: entered promiscuous mode [ 27.598590][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.605713][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.613259][ T289] bridge_slave_0: entered allmulticast mode [ 27.619732][ T289] bridge_slave_0: entered promiscuous mode [ 27.630284][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.637378][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.644450][ T290] bridge_slave_0: entered allmulticast mode [ 27.650845][ T290] bridge_slave_0: entered promiscuous mode [ 27.657090][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.664119][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.671433][ T289] bridge_slave_1: entered allmulticast mode [ 27.677907][ T289] bridge_slave_1: entered promiscuous mode [ 27.697072][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.704141][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.711317][ T290] bridge_slave_1: entered allmulticast mode [ 27.717613][ T290] bridge_slave_1: entered promiscuous mode [ 27.749546][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.756606][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.763742][ T291] bridge_slave_0: entered allmulticast mode [ 27.770036][ T291] bridge_slave_0: entered promiscuous mode [ 27.787986][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.795133][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.802366][ T291] bridge_slave_1: entered allmulticast mode [ 27.808831][ T291] bridge_slave_1: entered promiscuous mode [ 27.833669][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.840760][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.848067][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.855102][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.962407][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.969494][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.976778][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.983854][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.006630][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.014022][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.022144][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.038031][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.045107][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.104633][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.111738][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.119911][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.127507][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.153726][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.160830][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.178349][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.185409][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.198179][ T288] veth0_vlan: entered promiscuous mode [ 28.211837][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.218925][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.232267][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.239367][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.262070][ T289] veth0_vlan: entered promiscuous mode [ 28.290852][ T288] veth1_macvtap: entered promiscuous mode [ 28.299189][ T289] veth1_macvtap: entered promiscuous mode [ 28.308876][ T290] veth0_vlan: entered promiscuous mode [ 28.355064][ T290] veth1_macvtap: entered promiscuous mode [ 28.365106][ T291] veth0_vlan: entered promiscuous mode [ 28.374064][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.413122][ T291] veth1_macvtap: entered promiscuous mode [ 28.427576][ T310] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.494732][ T314] rust_binder: Error while translating object. [ 28.494789][ T314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.522359][ T314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 28.535895][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.546137][ T321] rust_binder: Error while translating object. [ 28.564874][ T321] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.571320][ T321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5 [ 28.584774][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.601401][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.601431][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.608721][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.614502][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.621725][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.639730][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.639756][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.652107][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.659033][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.667342][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.674195][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.708440][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.726933][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.736397][ T336] binder: Unknown parameter 'nXI' [ 28.747713][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.748031][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.754929][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.778433][ T338] ======================================================= [ 28.778433][ T338] WARNING: The mand mount option has been deprecated and [ 28.778433][ T338] and is ignored by this kernel. Remove the mand [ 28.778433][ T338] option from the mount to silence this warning. [ 28.778433][ T338] ======================================================= [ 28.818201][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.819739][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.826293][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.829329][ T342] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 28.833620][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.839315][ T342] rust_binder: Write failure EINVAL in pid:13 [ 28.848503][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.861097][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.876428][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.883572][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.897425][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.902635][ T346] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.904842][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.921317][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.927843][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.934578][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.946748][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.953851][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.961257][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.968025][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.981725][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.990009][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.996473][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.003099][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.009717][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.016250][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.023178][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.030165][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.036926][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.055173][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.063833][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.071527][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.077072][ T353] rust_binder: Write failure EFAULT in pid:20 [ 29.083249][ T354] rust_binder: Write failure EFAULT in pid:20 [ 29.097339][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.103681][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.110563][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.117274][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.123915][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.132255][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.138891][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.154398][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.161604][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.168461][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.179967][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.186453][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.193593][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.207687][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.214253][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.220431][ T364] rust_binder: Error in use_page_slow: ESRCH [ 29.225673][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.227525][ T364] rust_binder: use_range failure ESRCH [ 29.234831][ T322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.240059][ T364] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 29.252264][ T364] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 29.260276][ T364] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:14 [ 29.357049][ T376] rust_binder: Write failure EFAULT in pid:8 [ 29.857142][ T398] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 30.043603][ T401] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 30.043652][ T401] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:18 [ 30.094811][ T403] rust_binder: Write failure EINVAL in pid:26 [ 30.253382][ T412] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 30.267643][ T412] rust_binder: Write failure EINVAL in pid:28 [ 30.570352][ T431] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 30.595865][ T434] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:35 [ 30.602918][ T434] rust_binder: Write failure EFAULT in pid:35 [ 30.637319][ T436] __vm_enough_memory: pid: 436, comm: syz.1.43, bytes: 281474976845824 not enough memory for the allocation [ 30.726426][ T442] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.726445][ T443] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.781683][ T451] rust_binder: Error in use_page_slow: ESRCH [ 30.781710][ T451] rust_binder: use_range failure ESRCH [ 30.788074][ T451] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 30.796183][ T451] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 30.802254][ T457] can0: slcan on ptm0. [ 30.806331][ T451] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:32 [ 30.816674][ T457] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 30.851878][ T457] rust_binder: Write failure EINVAL in pid:43 [ 30.889307][ T455] can0 (unregistered): slcan off ptm0. [ 31.030522][ T487] binder: Bad value for 'context' [ 31.365068][ T502] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 31.365091][ T502] rust_binder: Read failure Err(EFAULT) in pid:45 [ 31.494686][ T36] kauditd_printk_skb: 74 callbacks suppressed [ 31.494705][ T36] audit: type=1326 audit(1750384776.810:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=516 comm="syz.3.61" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd0158e929 code=0x0 [ 31.547801][ T36] audit: type=1400 audit(1750384776.870:149): avc: denied { read write } for pid=518 comm="syz.1.62" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.574717][ T36] audit: type=1400 audit(1750384776.870:150): avc: denied { open } for pid=518 comm="syz.1.62" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.589063][ T519] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 31.597688][ T36] audit: type=1400 audit(1750384776.890:151): avc: denied { ioctl } for pid=518 comm="syz.1.62" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.755418][ T36] audit: type=1326 audit(1750384777.070:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=526 comm="syz.1.64" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb1418e929 code=0x0 [ 31.789086][ T530] SELinux: security_context_str_to_sid () failed with errno=-22 [ 31.820509][ T532] binder: Unknown parameter '' [ 31.865581][ T535] binder: Unknown parameter 'fscontext?}' [ 31.899137][ T538] rust_binder: Error while translating object. [ 31.899171][ T538] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.906152][ T538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 31.993983][ T554] input: syz1 as /devices/virtual/input/input6 [ 32.266110][ T36] audit: type=1400 audit(1750384777.580:154): avc: denied { append } for pid=568 comm="syz.3.77" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.288721][ T36] audit: type=1400 audit(1750384777.580:153): avc: denied { append } for pid=568 comm="syz.3.77" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.349715][ T36] audit: type=1400 audit(1750384777.670:155): avc: denied { append } for pid=571 comm="syz.2.78" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 32.414629][ T578] rust_binder: Failed to allocate buffer. len:208, is_oneway:false [ 32.487354][ T587] rust_binder: Write failure EINVAL in pid:80 [ 32.625229][ T36] audit: type=1400 audit(1750384777.940:156): avc: denied { read write } for pid=588 comm="syz.3.82" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 32.654447][ T36] audit: type=1400 audit(1750384777.940:157): avc: denied { open } for pid=588 comm="syz.3.82" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 32.682026][ T592] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.682052][ T592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 32.699327][ T593] rust_binder: Write failure EFAULT in pid:85 [ 32.711478][ T595] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.883818][ T609] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.895461][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.365805][ T621] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 33.375512][ T621] rust_binder: Error while translating object. [ 33.375560][ T621] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 33.381919][ T621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:84 [ 33.487968][ T624] random: crng reseeded on system resumption [ 33.607739][ T627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 33.664951][ T632] rust_binder: Write failure EINVAL in pid:90 [ 33.733821][ T635] rust_binder: Write failure EFAULT in pid:93 [ 33.779584][ T638] binder: Bad value for 'stats' [ 33.843771][ T641] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 34.193032][ T655] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 34.200303][ T655] rust_binder: Write failure EINVAL in pid:110 [ 34.368003][ T660] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 34.374396][ T660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:115 [ 34.468547][ T358] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 34.535822][ T663] fido_id[663]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 34.618076][ T669] random: crng reseeded on system resumption [ 34.717293][ T672] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 34.743532][ T674] binder: Bad value for 'max' [ 34.816188][ T686] rust_binder: Error while translating object. [ 34.816218][ T686] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 34.823161][ T686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:54 [ 34.946925][ T611] Bluetooth: hci0: command 0x1003 tx timeout [ 34.962005][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.030954][ T698] binder: Unknown parameter 'dont_hash' [ 35.037295][ T698] rust_binder: Write failure EINVAL in pid:106 [ 35.067416][ T701] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.087544][ T701] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:108 [ 35.190630][ T706] SELinux: failed to load policy [ 35.280467][ T711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:67 [ 35.312937][ T719] SELinux: policydb magic number 0x5ef98504 does not match expected magic number 0xf97cff8c [ 35.332784][ T719] SELinux: failed to load policy [ 35.406603][ T725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:70 [ 35.610848][ T732] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.735605][ T744] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 35.757802][ T744] input: syz1 as /devices/virtual/input/input9 [ 35.789186][ T744] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 35.917816][ T752] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 35.945662][ T752] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 36.067648][ T763] rust_binder: Write failure EFAULT in pid:79 [ 36.109344][ T774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:132 [ 36.145357][ T772] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 36.168770][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.176828][ T779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 36.649893][ T783] SELinux: syz.0.142 (783) set checkreqprot to 1. This is no longer supported. [ 36.649903][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 36.649918][ T36] audit: type=1400 audit(1750384781.970:176): avc: denied { setcheckreqprot } for pid=782 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 36.949555][ T790] binder: Unknown parameter 'fscontext?}biter' [ 37.020458][ T796] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 37.020485][ T796] rust_binder: Error while translating object. [ 37.031103][ T36] audit: type=1400 audit(1750384782.340:177): avc: denied { transfer } for pid=795 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 37.057156][ T796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.057187][ T796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134 [ 37.203042][ T812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.230730][ T814] binder: Bad value for 'stats' [ 37.332086][ T819] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 37.631922][ T839] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.683939][ T846] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101 [ 37.698748][ T846] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101 [ 37.741564][ T857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:171 [ 37.777707][ T852] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 38.146946][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.472540][ T886] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.472631][ T886] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 38.475588][ T884] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.488995][ T883] rust_binder: Error while translating object. [ 38.495467][ T883] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.501737][ T883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:105 [ 38.558838][ T36] audit: type=1400 audit(1750384783.880:178): avc: granted { setsecparam } for pid=895 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 38.590614][ T898] syz.0.177: attempt to access beyond end of device [ 38.590614][ T898] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 38.645278][ T36] audit: type=1400 audit(1750384783.960:179): avc: denied { map } for pid=901 comm="syz.0.179" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 38.727594][ T909] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:117 [ 38.745761][ T914] binder: Unknown parameter 'fscontext?}' [ 38.753671][ T912] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 38.902440][ T924] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.903071][ T924] rust_binder: Error while translating object. [ 38.909795][ T924] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 38.915960][ T924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:125 [ 38.959840][ T928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:128 [ 38.983997][ T931] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 39.005060][ T928] SELinux: failed to load policy [ 39.017253][ T931] rust_binder: Write failure EINVAL in pid:103 [ 39.065622][ T937] binder: Bad value for 'max' [ 40.438161][ T36] audit: type=1400 audit(1750384785.760:180): avc: denied { read } for pid=941 comm="syz.2.195" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 40.472900][ T948] binder: Unknown parameter 'nXI' [ 40.477114][ T36] audit: type=1400 audit(1750384785.760:181): avc: denied { open } for pid=941 comm="syz.2.195" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 40.503253][ T36] audit: type=1400 audit(1750384785.760:182): avc: denied { ioctl } for pid=941 comm="syz.2.195" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 40.619995][ T962] binder: Unknown parameter 'smackfsroot' [ 40.650222][ T968] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.890465][ T980] rust_binder: Write failure EINVAL in pid:115 [ 40.897773][ T980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:115 [ 41.019057][ T992] rust_binder: Error while translating object. [ 41.028529][ T992] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 41.034775][ T992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:198 [ 41.200177][ T1004] rust_binder: Write failure EINVAL in pid:154 [ 41.217834][ T1006] rust_binder: Write failure EINVAL in pid:203 [ 41.239663][ T1009] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 41.245961][ T1009] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:125 [ 41.399515][ T1013] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.408363][ T1016] SELinux: policydb version -845211227 does not match my version range 15-33 [ 41.408745][ T1013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:206 [ 41.418343][ T1016] SELinux: failed to load policy [ 41.485895][ T1022] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 41.486228][ T1020] rust_binder: Write failure EINVAL in pid:180 [ 41.538372][ T1023] rust_binder: Error while translating object. [ 41.544787][ T1023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 41.554348][ T1023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:129 [ 41.612452][ T1031] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.623317][ T1031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:162 [ 41.650635][ T1035] tap0: tun_chr_ioctl cmd 2148553947 [ 41.896417][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 41.904029][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 41.904131][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 41.919987][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 41.920041][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 41.934129][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 41.934175][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 41.948538][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 41.948591][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 41.962460][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 41.962509][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 41.976515][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 41.976569][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 41.990649][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 41.990720][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.004623][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.004677][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.018591][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.018643][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.032470][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.032519][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.046371][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.046432][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.060475][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.060526][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.075258][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.075303][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.089320][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.089377][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.106986][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.107044][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.121584][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.121632][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.135844][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.135889][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.150157][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.150215][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.164312][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.164360][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.178599][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.178671][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.192593][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.192640][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.206800][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.206885][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.220739][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.220788][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.234666][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.234720][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.248654][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.248703][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.251172][ T1054] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 42.255126][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.263714][ T1054] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 42.271480][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.293871][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.293931][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.309477][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.309536][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.324830][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.324878][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.338986][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.339035][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.352836][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.352923][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.366508][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.366562][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.380239][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.380293][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.394289][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.394339][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.408671][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.408717][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.422322][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.422370][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.436226][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.436277][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.454633][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.454915][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.469311][ T1062] random: crng reseeded on system resumption [ 42.469358][ T36] audit: type=1400 audit(1750384787.790:183): avc: denied { append } for pid=1061 comm="syz.1.230" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 42.477589][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.507067][ T1057] binder: Unknown parameter '0000000000000000000000601777777777777777777777' [ 42.520383][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.533507][ T1062] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.534277][ T1062] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.538448][ T36] audit: type=1400 audit(1750384787.850:184): avc: denied { ioctl } for pid=1061 comm="syz.1.230" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 42.541152][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.578084][ T1062] rust_binder: Read failure Err(EFAULT) in pid:165 [ 42.582934][ T1064] input: syz0 as /devices/virtual/input/input15 [ 42.584446][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.605374][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.605420][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.623778][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.623877][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.637563][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.637615][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.651133][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.651175][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.664688][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.664732][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.678255][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.678297][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.691850][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.691898][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.705405][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.705447][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.718951][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.718991][ T1051] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 42.732529][ T1051] rust_binder: Write failure EINVAL in pid:221 [ 42.813284][ T36] audit: type=1400 audit(1750384788.130:185): avc: denied { append } for pid=1076 comm="syz.1.235" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.849486][ T36] audit: type=1400 audit(1750384788.170:186): avc: denied { map } for pid=1076 comm="syz.1.235" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 42.922264][ T1077] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 42.959594][ T36] audit: type=1326 audit(1750384788.280:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1076 comm="syz.1.235" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb1418e929 code=0x0 [ 43.094943][ T36] audit: type=1400 audit(1750384788.410:188): avc: denied { map } for pid=1090 comm="syz.3.241" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 43.171242][ T1097] rust_binder: Write failure EFAULT in pid:145 [ 43.171553][ T36] audit: type=1400 audit(1750384788.490:189): avc: granted { setsecparam } for pid=1096 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 43.267704][ T1109] binder: Binderfs stats mode cannot be changed during a remount [ 43.300837][ T1112] SELinux: security_context_str_to_sid () failed with errno=-22 [ 43.351182][ T1119] rust_binder: Error while translating object. [ 43.351209][ T1119] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 43.359668][ T1119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:152 [ 43.393214][ T36] audit: type=1400 audit(1750384788.710:190): avc: denied { map } for pid=1120 comm="syz.3.251" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 43.408897][ T1125] random: crng reseeded on system resumption [ 43.558858][ T36] audit: type=1400 audit(1750384788.880:191): avc: denied { associate } for pid=1130 comm="syz.3.255" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 43.616646][ T1137] rust_binder: Write failure EFAULT in pid:160 [ 43.626339][ T1137] binder: Bad value for 'stats' [ 43.651405][ T1140] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:248 [ 43.661189][ T1142] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.692624][ T36] audit: type=1400 audit(1750384789.010:192): avc: denied { remount } for pid=1132 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.693928][ T1137] rust_binder: Error while translating object. [ 43.713917][ T1142] rust_binder: Write failure EINVAL in pid:171 [ 43.722406][ T1137] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 43.737962][ T1137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:160 [ 43.891177][ T1151] binder: Unknown parameter 'fscontext?}c/cache_threshold' [ 43.913734][ T1151] rust_binder: Write failure EINVAL in pid:216 [ 44.007207][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.014730][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.022344][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.029897][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.041212][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.049119][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.058188][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.066279][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.073792][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.095054][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.095172][ T1161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:218 [ 44.102768][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.121542][ T1164] binder: Binderfs stats mode cannot be changed during a remount [ 44.121738][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.129923][ T1165] binder: Binderfs stats mode cannot be changed during a remount [ 44.137695][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.153047][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.186135][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.193883][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.202041][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.209793][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.218126][ T1167] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.218149][ T1167] rust_binder: Read failure Err(EFAULT) in pid:262 [ 44.233284][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.258416][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.266708][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.274908][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.282756][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.290573][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.300841][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.315767][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.323319][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.330865][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.338377][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.345849][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.354028][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.362315][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.370747][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.378369][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.384428][ T1180] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.399786][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.428022][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.436266][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.445239][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.452970][ T1188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.453285][ T1188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:266 [ 44.459928][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.476710][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.485945][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.493669][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.501601][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.509149][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.516648][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.524198][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.531694][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.538675][ T1187] binder: Unknown parameter '/Y18446744073709551615' [ 44.539463][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.560696][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.574914][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.582371][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.602111][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.609840][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.618409][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.625840][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.633312][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.640800][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.648291][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.655878][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.663695][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.671150][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.678649][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.686055][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.693557][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.701572][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.709338][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.718820][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.730792][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.731707][ T1196] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.739232][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.753369][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.761015][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.768628][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.776140][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.782265][ T1196] input: syz0 as /devices/virtual/input/input17 [ 44.783718][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.797533][ T1198] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 44.811122][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.831123][ T1203] rust_binder: Error in use_page_slow: ESRCH [ 44.831146][ T1203] rust_binder: use_range failure ESRCH [ 44.840259][ T1203] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 44.845783][ T1203] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 44.854070][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.871830][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.879500][ T1203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:236 [ 44.880046][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.916962][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.924397][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.946958][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.954384][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.964000][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.971522][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.979003][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.986429][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 44.994110][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.003722][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.011870][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.019431][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.026912][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.034335][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.041834][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.049404][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.058544][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.064893][ T1209] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.065990][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.084007][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.087166][ T1212] SELinux: policydb version -595481963 does not match my version range 15-33 [ 45.091673][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.101119][ T1212] SELinux: failed to load policy [ 45.108333][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.120680][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.137593][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.145323][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.154607][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.163283][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.175112][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.182658][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.191440][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.193642][ T1217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:189 [ 45.199279][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.216273][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.227176][ T1219] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 45.232305][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.270385][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.278694][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.286323][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.297695][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.305187][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.312686][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.320736][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.329521][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.340324][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.348217][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.355882][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.365320][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.372977][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.383804][ T1229] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 45.386131][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.392218][ T1229] rust_binder: Write failure EINVAL in pid:253 [ 45.399698][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.413573][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.421012][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.451597][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.465533][ T1233] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.467155][ T1233] rust_binder: Error while translating object. [ 45.473677][ T1233] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.480433][ T1236] rust_binder: Error while translating object. [ 45.482706][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.494719][ T1236] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 45.496567][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.503992][ T1236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:255 [ 45.513029][ T1233] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:196 [ 45.530384][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.553681][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.563550][ T1233] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 45.572689][ T1233] rust_binder: Write failure EINVAL in pid:196 [ 45.573411][ T1240] SELinux: syz.3.296 (1240) set checkreqprot to 1. This is no longer supported. [ 45.574288][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.598519][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.605972][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.613909][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.621554][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.629254][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.636648][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.645051][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.652573][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.660025][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.667460][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.675066][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.682559][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.690650][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.698144][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.705552][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.713055][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.729220][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.753605][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.774608][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.782183][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.805843][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.813317][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.820792][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.828306][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.835725][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.843523][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.852013][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.859506][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.867656][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.875095][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.887925][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.890153][ T1243] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.895696][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.897706][ T1243] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:278 [ 45.902279][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.928928][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.938595][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.947722][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.956923][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.964472][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.972073][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.979720][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.987457][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 45.995054][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.008500][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.016308][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.023882][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.031575][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.039185][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.046760][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.054489][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.066177][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.073797][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.081752][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.089342][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.098715][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.098808][ T1257] binder: Unknown parameter 'contextrfs/binder0' [ 46.106205][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.119977][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.127670][ T1257] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.127925][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.141902][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.147113][ T1257] rust_binder: Write failure EINVAL in pid:281 [ 46.149408][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.165924][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.173408][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.181002][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.188556][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.196214][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.203739][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.212983][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.220705][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.229589][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.240495][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.262474][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.270149][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.283859][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.291376][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.305106][ T1271] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 46.327859][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.335312][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.343739][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.351381][ T1271] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.352382][ T1266] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.358977][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.373890][ T1266] rust_binder: Write failure EINVAL in pid:207 [ 46.383324][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.398857][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.408107][ T10] hid-generic 01FF:0004:0400.0002: unknown main item tag 0x0 [ 46.418452][ T10] hid-generic 01FF:0004:0400.0002: hidraw0: HID v0.05 Device [syz0] on syz1 [ 46.452115][ T1276] fido_id[1276]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 46.522562][ T1286] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 46.546129][ T1290] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.547732][ T1290] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.554365][ T1290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:211 [ 46.567497][ T1294] SELinux: security_context_str_to_sid () failed with errno=-22 [ 46.579520][ T1293] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 46.593209][ T1293] rust_binder: Write failure EINVAL in pid:294 [ 46.594409][ T1293] rust_binder: Write failure EINVAL in pid:294 [ 46.667521][ T1313] random: crng reseeded on system resumption [ 46.831217][ T1336] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.831435][ T1336] rust_binder: Write failure EFAULT in pid:229 [ 46.910721][ T1338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:231 [ 46.937031][ T1341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:231 [ 47.023900][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.029137][ T1352] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.045537][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.068390][ T1352] rust_binder: Error while translating object. [ 47.068464][ T1352] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 47.084185][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.088146][ T1352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:234 [ 47.104040][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.144585][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.165858][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.184487][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.193022][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.207461][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.226496][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.250439][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.259037][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.269200][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.278377][ T1362] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.278558][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.293649][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.306136][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.316303][ T1362] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.316656][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.332846][ T1362] rust_binder: Error while translating object. [ 47.332889][ T1362] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.333521][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.348345][ T1362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:240 [ 47.349134][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.375313][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.406948][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.415440][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.423966][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.432524][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.442747][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.451276][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.469144][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.477615][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.492867][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.501466][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.509993][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.535089][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.543687][ T1355] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.591162][ T1371] rust_binder: Error while translating object. [ 47.591194][ T1371] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 47.608101][ T1371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:192 [ 47.681753][ T1377] rust_binder: Write failure EINVAL in pid:196 [ 47.744308][ T1381] input: syz0 as /devices/virtual/input/input19 [ 47.875204][ T1387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200 [ 47.926363][ T1389] rust_binder: Write failure EINVAL in pid:200 [ 48.078881][ T1399] SELinux: security_context_str_to_sid (syste_u) failed with errno=-22 [ 48.184916][ T1402] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 48.238955][ T1399] input: syz1 as /devices/virtual/input/input20 [ 48.603397][ T1417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:267 [ 48.691556][ T1423] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.720981][ T1425] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 48.763292][ T1427] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 48.777195][ T1427] rust_binder: Write failure EFAULT in pid:274 [ 48.885900][ T1431] input: syz1 as /devices/virtual/input/input21 [ 48.949595][ T1433] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.957560][ T1433] rust_binder: Error in use_page_slow: ESRCH [ 48.964055][ T1433] rust_binder: use_range failure ESRCH [ 48.987026][ T1433] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 48.992546][ T1433] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 49.000648][ T1433] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:276 [ 49.054200][ T1436] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.072169][ T1436] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.106218][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 49.106238][ T36] audit: type=1326 audit(1750384794.420:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1438 comm="syz.2.362" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa17db8e929 code=0x0 [ 49.229636][ T1444] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 49.273540][ T1446] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.281790][ T1446] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:308 [ 49.539719][ T1456] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.592935][ T1456] rust_binder: Write failure EINVAL in pid:285 [ 49.604614][ T1461] SELinux: security_context_str_to_sid () failed with errno=-22 [ 49.673103][ T36] audit: type=1400 audit(1750384794.990:257): avc: denied { execute } for pid=1466 comm="syz.3.370" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 49.888047][ T1485] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 49.888074][ T1485] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 49.895867][ T1485] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 49.930184][ T1493] random: crng reseeded on system resumption [ 49.998883][ T1500] rust_binder: Error while translating object. [ 49.998933][ T1500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.005388][ T1500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:220 [ 50.036597][ T1505] kvm: kvm [1504]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x1 [ 50.128242][ T1510] SELinux: truncated policydb string identifier [ 50.134689][ T1510] SELinux: failed to load policy [ 50.351151][ T1518] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 50.402832][ T36] audit: type=1326 audit(1750384795.720:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82e438e929 code=0x0 [ 50.507909][ T1525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.732486][ T1534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:299 [ 50.768442][ T36] audit: type=1400 audit(1750384796.090:259): avc: denied { map } for pid=1535 comm="syz.1.393" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 50.995729][ T1551] binder: Bad value for 'stats' [ 51.002222][ T1551] binder: Bad value for 'stats' [ 51.008693][ T1551] binder: Bad value for 'stats' [ 51.013860][ T1551] binder: Bad value for 'stats' [ 51.018998][ T1551] binder: Bad value for 'stats' [ 51.024108][ T1551] binder: Bad value for 'stats' [ 51.029657][ T1551] binder: Bad value for 'stats' [ 51.035244][ T1551] binder: Bad value for 'stats' [ 51.040815][ T1551] binder: Bad value for 'stats' [ 51.045966][ T1551] binder: Bad value for 'stats' [ 51.051122][ T1551] binder: Bad value for 'stats' [ 51.056237][ T1551] binder: Bad value for 'stats' [ 51.061475][ T1551] binder: Bad value for 'stats' [ 51.066564][ T1551] binder: Bad value for 'stats' [ 51.071686][ T1551] binder: Bad value for 'stats' [ 51.076713][ T1551] binder: Bad value for 'stats' [ 51.081860][ T1551] binder: Bad value for 'stats' [ 51.087016][ T1551] binder: Bad value for 'stats' [ 51.092556][ T1551] binder: Bad value for 'stats' [ 51.097615][ T1551] binder: Bad value for 'stats' [ 51.102680][ T1551] binder: Bad value for 'stats' [ 51.107814][ T1551] binder: Bad value for 'stats' [ 51.112949][ T1551] binder: Bad value for 'stats' [ 51.120498][ T1551] binder: Bad value for 'stats' [ 51.125520][ T1551] binder: Bad value for 'stats' [ 51.136340][ T1551] binder: Bad value for 'stats' [ 51.141547][ T1551] binder: Bad value for 'stats' [ 51.147083][ T1551] binder: Bad value for 'stats' [ 51.156507][ T1551] binder: Bad value for 'stats' [ 51.167086][ T1551] binder: Bad value for 'stats' [ 51.172066][ T1551] binder: Bad value for 'stats' [ 51.177176][ T1551] binder: Bad value for 'stats' [ 51.182141][ T1551] binder: Bad value for 'stats' [ 51.251532][ T1558] binder: Bad value for 'defcontext' [ 51.347180][ T1568] __vm_enough_memory: pid: 1568, comm: syz.0.403, bytes: 281474976845824 not enough memory for the allocation [ 51.427242][ T1575] rust_binder: Write failure EINVAL in pid:328 [ 51.459016][ T1578] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 51.484732][ T1578] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 51.588896][ T1591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.598341][ T1591] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 51.604871][ T1591] rust_binder: Error while translating object. [ 51.617420][ T1591] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.631835][ T1591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:348 [ 51.668031][ T1595] rust_binder: Write failure EINVAL in pid:350 [ 51.762047][ T1600] input: syz1 as /devices/virtual/input/input25 [ 51.871509][ T1604] SELinux: security_context_str_to_sid () failed with errno=-22 [ 52.041638][ T1619] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 52.041664][ T1619] rust_binder: Error while translating object. [ 52.055588][ T1619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.062291][ T1619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:357 [ 52.070863][ T1620] __vm_enough_memory: pid: 1620, comm: syz.0.422, bytes: 2305843009213698048 not enough memory for the allocation [ 52.168207][ T1632] binder: Bad value for 'max' [ 52.275375][ T36] audit: type=1326 audit(1750384797.590:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e438e929 code=0x7ffc0000 [ 52.297445][ T1646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:339 [ 52.323634][ T36] audit: type=1326 audit(1750384797.590:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e438e929 code=0x7ffc0000 [ 52.357059][ T1650] input: syz1 as /devices/virtual/input/input27 [ 52.369468][ T1650] input: failed to attach handler leds to device input27, error: -6 [ 52.373612][ T1652] binder: Bad value for 'max' [ 52.377772][ T36] audit: type=1326 audit(1750384797.590:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f82e438e929 code=0x7ffc0000 [ 52.408950][ T36] audit: type=1326 audit(1750384797.600:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e438e929 code=0x7ffc0000 [ 52.438433][ T36] audit: type=1326 audit(1750384797.600:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1648 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f82e43c11e5 code=0x7ffc0000 [ 52.462029][ T36] audit: type=1326 audit(1750384797.600:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.0.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f82e438e929 code=0x7ffc0000 [ 52.532404][ T1660] rust_binder: Write failure EFAULT in pid:368 [ 52.724098][ T1670] rust_binder: Write failure EINVAL in pid:241 [ 52.825949][ T1676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.845953][ T1676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.866164][ T1676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.880910][ T1676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.899165][ T1679] rust_binder: Write failure EINVAL in pid:374 [ 52.917748][ T1698] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 52.932883][ T1692] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 53.124172][ T1715] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 53.124200][ T1715] rust_binder: Error while translating object. [ 53.137039][ T1715] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.143269][ T1715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:358 [ 53.177147][ T1717] binder: Unknown parameter '0x0000000000000004' [ 53.277611][ T1726] binder: Unknown parameter 'smackfsfloor' [ 53.321848][ T1736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:382 [ 53.332538][ T1736] rust_binder: Read failure Err(EFAULT) in pid:382 [ 53.366430][ T1741] SELinux: failed to load policy [ 53.389838][ T1742] SELinux: failed to load policy [ 53.407910][ T1744] input: syz0 as /devices/virtual/input/input29 [ 53.445956][ T1741] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 53.728709][ T1758] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 53.858975][ T1764] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 54.288504][ T1779] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 54.449730][ T1784] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:259 [ 54.751752][ T1809] rust_binder: Write failure EFAULT in pid:393 [ 54.852403][ T1817] binder: Unknown parameter 'coyBLV"i5ntext' [ 54.883361][ T1821] binder: Bad value for 'defcontext' [ 54.908221][ T1823] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 54.927016][ T36] kauditd_printk_skb: 85 callbacks suppressed [ 54.927032][ T36] audit: type=1326 audit(1750384800.240:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1820 comm="syz.1.487" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb1418e929 code=0x0 [ 54.961187][ T1819] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.052769][ T1827] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 55.060156][ T1827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:270 [ 55.088382][ T1831] SELinux: failed to load policy [ 55.154320][ T36] audit: type=1400 audit(1750384800.470:352): avc: denied { attach_queue } for pid=1837 comm="syz.3.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 55.174843][ T1834] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 89) [ 55.174870][ T1834] rust_binder: Error while translating object. [ 55.185996][ T1834] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.195265][ T1834] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:272 [ 55.275738][ T1841] kvm: kvm [1840]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9 [ 55.324587][ T1849] binder: Unknown parameter '' [ 55.330249][ T1844] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 55.710023][ T1880] SELinux: Context is not valid (left unmapped). [ 55.803264][ T1884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:413 [ 55.992833][ T36] audit: type=1400 audit(1750384801.310:353): avc: denied { map } for pid=1897 comm="syz.3.513" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 56.031495][ T36] audit: type=1400 audit(1750384801.310:354): avc: denied { execute } for pid=1897 comm="syz.3.513" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 56.061888][ T1903] rust_binder: Error while translating object. [ 56.061931][ T1903] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.069229][ T1903] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:422 [ 56.131696][ T1905] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 56.242414][ T1927] rust_binder: Write failure EFAULT in pid:429 [ 56.242555][ T1927] rust_binder: Write failure EFAULT in pid:429 [ 56.271151][ T1926] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 56.288279][ T1933] rust_binder: Error while translating object. [ 56.288326][ T1933] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 56.297009][ T1933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:431 [ 56.358395][ T1937] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 56.494014][ T1946] rust_binder: Got transaction with invalid offset. [ 56.494051][ T1946] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.501042][ T1946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:442 [ 56.594166][ T1949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:446 [ 56.724828][ T1956] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 56.734076][ T1956] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:303 [ 56.746152][ T1956] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 56.746158][ T1953] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 56.757434][ T1953] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 56.763667][ T1956] rust_binder: Read failure Err(EFAULT) in pid:303 [ 56.781293][ T1953] rust_binder: Write failure EINVAL in pid:451 [ 56.968131][ T1964] kvm: apic: phys broadcast and lowest prio [ 57.015183][ T1966] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.015279][ T1966] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.059938][ T1972] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 57.219459][ T1977] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:460 [ 57.228752][ T1977] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.322036][ T1988] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1633902440 (13071219520 ns) > initial count (4350241648 ns). Using initial count to start timer. [ 57.354007][ T1987] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 57.354045][ T1987] rust_binder: Error in use_page_slow: EBUSY [ 57.367535][ T1987] rust_binder: use_range failure EBUSY [ 57.379348][ T1991] rust_binder: Write failure EINVAL in pid:465 [ 57.385321][ T1987] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 57.391951][ T1987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 57.401168][ T1987] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 57.413138][ T1987] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:320 [ 57.541025][ T1994] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 57.559704][ T1994] binder: Unknown parameter '7SE//םj6N"ӳYPuߌT7XN xה' [ 57.654756][ T36] audit: type=1400 audit(1750384802.970:355): avc: denied { map } for pid=1997 comm="syz.3.544" path=2F70726F632F3436382F6E65742F70666B6579202864656C6574656429 dev="proc" ino=4026532556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 57.780080][ T36] audit: type=1400 audit(1750384803.100:356): avc: denied { append } for pid=2002 comm="syz.1.546" name="pfkey" dev="proc" ino=4026532362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 58.194818][ T2043] rust_binder: Write failure EFAULT in pid:477 [ 58.505083][ T36] audit: type=1326 audit(1750384803.820:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2055 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1418e929 code=0x7ffc0000 [ 58.534811][ T36] audit: type=1326 audit(1750384803.830:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2055 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1418e929 code=0x7ffc0000 [ 58.645916][ T2060] block device autoloading is deprecated and will be removed. [ 58.652858][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.665284][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.674220][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.674249][ T2060] rust_binder: Write failure EINVAL in pid:327 [ 58.683689][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.693428][ T2060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:327 [ 58.701434][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.732011][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.735483][ T36] audit: type=1326 audit(1750384804.050:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2063 comm="syz.1.565" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb1418e929 code=0x0 [ 58.741229][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.772474][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.781343][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.790225][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.793175][ T2067] rtc_cmos 00:00: Alarms can be up to one day in the future [ 58.799118][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.811890][ T2066] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.815103][ T2066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:329 [ 58.824451][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.826164][ T2064] rtc_cmos 00:00: Alarms can be up to one day in the future [ 58.834400][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.867078][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.876012][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.885074][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.895006][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.905930][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.915459][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.937860][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.947071][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.955934][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.967039][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.976143][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.987027][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 58.995943][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 59.004863][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 59.013764][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 59.022648][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 59.031726][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 59.040667][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 59.049571][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 59.061667][ T2077] __vm_enough_memory: pid: 2077, comm: syz.0.569, bytes: 281474976845824 not enough memory for the allocation [ 59.067278][ T2062] SELinux: security_context_str_to_sid (uncmnfined_u) failed with errno=-22 [ 59.073723][ T2078] __vm_enough_memory: pid: 2078, comm: syz.0.569, bytes: 281474976845824 not enough memory for the allocation [ 59.093990][ T2070] rust_binder: Read failure Err(EFAULT) in pid:332 [ 59.275818][ T357] rtc_cmos 00:00: Alarms can be up to one day in the future [ 59.297346][ T357] rtc_cmos 00:00: Alarms can be up to one day in the future [ 59.312067][ T357] rtc_cmos 00:00: Alarms can be up to one day in the future [ 59.327288][ T357] rtc_cmos 00:00: Alarms can be up to one day in the future [ 59.334620][ T357] rtc rtc0: __rtc_set_alarm: err=-22 [ 59.371373][ T2085] binder: Bad value for 'max' [ 59.409614][ T36] audit: type=1400 audit(1750384804.730:360): avc: denied { validate_trans } for pid=2088 comm="syz.2.574" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 59.464604][ T2096] rust_binder: Write failure EINVAL in pid:487 [ 59.517972][ T2104] rust_binder: Write failure EFAULT in pid:489 [ 59.593422][ T2113] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 59.825498][ T2137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:357 [ 59.826160][ T2137] rust_binder: Error while translating object. [ 59.842004][ T2137] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.848649][ T2137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:357 [ 59.864815][ T2141] input: syz1 as /devices/virtual/input/input33 [ 59.916682][ T2146] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 59.916711][ T2146] rust_binder: Error while translating object. [ 59.934104][ T2146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.942156][ T2146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:361 [ 60.002464][ T2148] rust_kernel: panicked at /syzkaller/managers/ci2-android-6-12-rust/kernel/rust/kernel/page_size_compat.rs:60:5: [ 60.002464][ T2148] attempt to add with overflow [ 60.029392][ T2148] ------------[ cut here ]------------ [ 60.034979][ T2148] kernel BUG at rust/helpers/bug.c:7! [ 60.041623][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 60.041639][ T36] audit: type=1400 audit(1750384805.360:363): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 60.041680][ T2148] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 60.048360][ T36] audit: type=1400 audit(1750384805.360:364): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.069491][ T2148] CPU: 0 UID: 0 PID: 2148 Comm: syz.0.595 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 60.069531][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.069552][ T2148] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 60.069595][ T2148] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 d9 79 6d ea 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 93 bd 24 66 90 90 90 90 90 90 90 90 90 [ 60.077143][ T36] audit: type=1400 audit(1750384805.360:365): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.097801][ T2148] RSP: 0018:ffffc900015e73f0 EFLAGS: 00010246 [ 60.097837][ T2148] RAX: 000000000000008c RBX: 1ffff920002bce80 RCX: e973f9fc28168300 [ 60.097855][ T2148] RDX: ffffc90001661000 RSI: 0000000000005f5d RDI: 0000000000005f5e [ 60.097870][ T2148] RBP: ffffc900015e73f0 R08: ffffc900015e70e7 R09: 1ffff920002bce1c [ 60.097888][ T2148] R10: dffffc0000000000 R11: fffff520002bce1d R12: 0000000000000000 [ 60.111870][ T36] audit: type=1400 audit(1750384805.360:366): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.121307][ T2148] R13: dffffc0000000000 R14: ffffc900015e7420 R15: ffffc900015e7450 [ 60.121329][ T2148] FS: 00007f82e516e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 60.121349][ T2148] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.121364][ T2148] CR2: 000000110c337c75 CR3: 000000010d67c000 CR4: 00000000003526b0 [ 60.121385][ T2148] DR0: 0000000000000002 DR1: 000000000000009b DR2: 00040000ffffffff [ 60.121401][ T2148] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.127349][ T36] audit: type=1400 audit(1750384805.360:367): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.146289][ T2148] Call Trace: [ 60.146302][ T2148] [ 60.146312][ T2148] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 60.146351][ T2148] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 60.168091][ T36] audit: type=1400 audit(1750384805.360:368): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.173592][ T2148] ? kernel_text_address+0xa9/0xe0 [ 60.173624][ T2148] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 60.182184][ T36] audit: type=1400 audit(1750384805.360:369): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.189718][ T2148] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 60.189754][ T2148] ? arch_stack_walk+0x10b/0x170 [ 60.189785][ T2148] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 60.189819][ T2148] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 60.405990][ T2148] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0 [ 60.415948][ T2148] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10 [ 60.426733][ T2148] _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0xe44/0xfb0 [ 60.438994][ T2148] ? mas_wr_store_type+0x8eb/0x1ad0 [ 60.444300][ T2148] ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10 [ 60.457082][ T2148] ? mas_preallocate+0x56e/0xc60 [ 60.462035][ T2148] ? __cfi_mas_preallocate+0x10/0x10 [ 60.467334][ T2148] ? kasan_save_alloc_info+0x40/0x50 [ 60.472648][ T2148] ? __asan_memset+0x39/0x50 [ 60.477260][ T2148] mmap_region+0x1371/0x1bd0 [ 60.481872][ T2148] ? __cfi_mmap_region+0x10/0x10 [ 60.486860][ T2148] ? __kasan_check_read+0x15/0x20 [ 60.491904][ T2148] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 60.498168][ T2148] ? file_mmap_ok+0x147/0x1a0 [ 60.502857][ T2148] do_mmap+0xb6d/0x13c0 [ 60.507028][ T2148] ? __cfi_do_mmap+0x10/0x10 [ 60.511752][ T2148] ? down_write_killable+0xe9/0x2d0 [ 60.516990][ T2148] ? __cfi_down_write_killable+0x10/0x10 [ 60.522695][ T2148] vm_mmap_pgoff+0x38f/0x4e0 [ 60.527327][ T2148] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 60.532469][ T2148] ? __fget_files+0x2c5/0x340 [ 60.537165][ T2148] ksys_mmap_pgoff+0x166/0x1e0 [ 60.541961][ T2148] __x64_sys_mmap+0x121/0x140 [ 60.546657][ T2148] x64_sys_call+0x13bf/0x2ee0 [ 60.551348][ T2148] do_syscall_64+0x58/0xf0 [ 60.555781][ T2148] ? clear_bhb_loop+0x35/0x90 [ 60.560477][ T2148] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.566393][ T2148] RIP: 0033:0x7f82e438e929 [ 60.570832][ T2148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.590446][ T2148] RSP: 002b:00007f82e516e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 60.598901][ T2148] RAX: ffffffffffffffda RBX: 00007f82e45b5fa0 RCX: 00007f82e438e929 [ 60.606881][ T2148] RDX: 0000000000000000 RSI: 000000000000f000 RDI: 0000200000fee000 [ 60.614862][ T2148] RBP: 00007f82e4410b39 R08: 0000000000000004 R09: 0000000000000000 [ 60.622863][ T2148] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 60.630847][ T2148] R13: 0000000000000000 R14: 00007f82e45b5fa0 R15: 00007ffc43ea3e48 [ 60.638855][ T2148] [ 60.641877][ T2148] Modules linked in: [ 60.646676][ T2148] ---[ end trace 0000000000000000 ]--- [ 60.653159][ T2148] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 60.658589][ T2148] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 d9 79 6d ea 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 93 bd 24 66 90 90 90 90 90 90 90 90 90 [ 60.678290][ T2148] RSP: 0018:ffffc900015e73f0 EFLAGS: 00010246 [ 60.684598][ T2148] RAX: 000000000000008c RBX: 1ffff920002bce80 RCX: e973f9fc28168300 [ 60.693798][ T2148] RDX: ffffc90001661000 RSI: 0000000000005f5d RDI: 0000000000005f5e [ 60.705579][ T2148] RBP: ffffc900015e73f0 R08: ffffc900015e70e7 R09: 1ffff920002bce1c [ 60.713781][ T2148] R10: dffffc0000000000 R11: fffff520002bce1d R12: 0000000000000000 [ 60.722043][ T2148] R13: dffffc0000000000 R14: ffffc900015e7420 R15: ffffc900015e7450 [ 60.730375][ T2148] FS: 00007f82e516e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 60.739490][ T2148] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.746439][ T2148] CR2: 000000110c337c75 CR3: 000000010d67c000 CR4: 00000000003526b0 [ 60.754514][ T2148] DR0: 0000000000000002 DR1: 000000000000009b DR2: 00040000ffffffff [ 60.762607][ T2148] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 60.770919][ T2148] Kernel panic - not syncing: Fatal exception [ 60.777273][ T2148] Kernel Offset: disabled [ 60.781621][ T2148] Rebooting in 86400 seconds..