last executing test programs: 2.401921782s ago: executing program 1 (id=910): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x100000f, 0x8010, r0, 0x0) mmap(&(0x7f00007f5000/0x1000)=nil, 0x1000, 0x0, 0x8400000000032033, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xd1383000) r3 = openat$kvm(0x0, &(0x7f0000000100), 0x183b42, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r5, 0x4018aee2, &(0x7f00000001c0)=@attr_pmu_filter={0x0, 0x0, 0x2, 0x0}) mmap(&(0x7f00003b3000/0x4000)=nil, 0x4000, 0x1000007, 0x13, r1, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1000000) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000081}]}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4d0, 0x0, 0x16eb}]}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000000e3fef9150001c0"]) ioctl$KVM_TRANSLATE(r12, 0xc018ae85, &(0x7f0000000080)={0xf000, 0x8080000, 0x8, 0x3, 0x1e}) mmap(&(0x7f00008d4000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x47eaa000) openat$ashmem(0xffffffffffffff9c, 0x0, 0x280, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0) 2.026380918s ago: executing program 1 (id=915): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x3, 0x100000000, 0x0, 0xfffffffffffffff8, 0x100000, 0x0, 0x202004c8, 0x8000003, 0x7, 0x1, 0xfffffffffffffffe, 0x2000000000], 0x1000, 0x4000}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40881, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)={0x8}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000080)=0x3) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x10, r7, 0x8e238000) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 1.853261831s ago: executing program 2 (id=919): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454ca, &(0x7f0000000100)=ANY=[]) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read(r0, &(0x7f0000000180)=""/188, 0xbc) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc0046209, &(0x7f0000001340)) 1.751362743s ago: executing program 2 (id=920): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000ff0000/0xf000)=nil, 0xf000, 0x6, 0x12, r5, 0x6931b000) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r6, 0x1000001, 0x11, r4, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r7, 0xc008ae05, &(0x7f0000000200)=""/187) ioctl$KVM_SET_FPU(r7, 0x41a0ae8d, &(0x7f0000000040)={'\x00', 0x9, 0xf, 0x7a, 0x0, 0x6, 0xd000, 0x2, '\x00', 0x140000}) 1.694245714s ago: executing program 0 (id=921): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000000)={{}, {}, 0x0, 0xa}) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000400)={0x14, 0x1, 0xfe}) (async) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f00000001c0)={0xa100000000000000, 0x2000, 0x0, 0x1, 0x12}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000000004000"]) (async) close(r0) 1.574050105s ago: executing program 1 (id=922): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x1}) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x4, 0x2, 0xf00, 0x0, @adapter={0x60, 0x5, 0x3, 0x7, 0x2}}]}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000080)={0x80001, 0x0, [0x5, 0x5, 0x8, 0x3ffffffffffff, 0x100000000, 0x81, 0x5, 0x10041]}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110c23003f) (async) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110c23003f) ioctl$BTRFS_IOC_SPACE_INFO(r7, 0xc0109414, &(0x7f0000001180)={0x8a5, 0x80000000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x3}}) (async) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x3}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000010, 0x0, 0x92}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 1.561270086s ago: executing program 3 (id=923): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}, @clear_death={0x400c6313}], 0x0, 0x0, 0x0}) 1.409227438s ago: executing program 2 (id=924): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000079000000004000"/24]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x580, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r7, 0x40187013, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x17, 0x9, 0x4f, 0x0, 0x141}) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) syz_clone3(&(0x7f00000013c0)={0x240040480, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x0) openat$incfs(r8, &(0x7f0000000040)='.pending_reads\x00', 0x4a01, 0x195) (async) r9 = openat$incfs(r8, &(0x7f0000000040)='.pending_reads\x00', 0x4a01, 0x195) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r11, 0x4068aea3, &(0x7f0000000300)={0xdf, 0x0, 0x8000}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r8, 0x4068aea3, &(0x7f0000000180)={0xe1, 0x900, 0x2000}) (async) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r8, 0x4068aea3, &(0x7f0000000180)={0xe1, 0x900, 0x2000}) ioctl$BTRFS_IOC_GET_FEATURES(r9, 0x80189439, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_GET_FEATURES(r9, 0x80189439, &(0x7f0000000080)) 1.326486999s ago: executing program 3 (id=925): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0) 1.217013711s ago: executing program 3 (id=926): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10}, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfe, 0xfc}, {0x3000, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {0x10000, 0xdddd0000, 0xd, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x3c, 0x0, 0x13}, {0x10000, 0x3000, 0xd, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x5000, 0xe, 0xfe}, {0xeeef0000, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x0, 0xa, 0x26, 0x4}, {0x80a0000}, {0xdddd1000, 0x8}, 0xddf8ffdb, 0x0, 0x0, 0x2b, 0x0, 0x3800, 0x0, [0x0, 0x0, 0x1]}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'virt_wifi0\x00', 0x7101}) (async) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$BLKGETSIZE(r7, 0x1260, &(0x7f0000000400)) (async) write$cgroup_devices(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1"], 0xffdd) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000140)={0x4, 0x0, [{0x84f}, {0x353, 0x0, 0x1}, {0x8fc, 0x0, 0x2}, {0x240, 0x0, 0xa5}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000440)=[@increfs], 0x1e, 0x0, 0x0}) 1.176004262s ago: executing program 0 (id=927): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x103040, 0x20) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x2, 0x0, &(0x7f0000000040)=""/73, &(0x7f00000000c0)=""/30, &(0x7f0000000100)=""/40, 0x4000}) 978.377544ms ago: executing program 0 (id=928): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000002000c) (async) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000500)=0x304000002) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000000)=""/73, &(0x7f0000000080)=""/239, &(0x7f0000000180)=""/66, 0xf000}) 783.539818ms ago: executing program 1 (id=929): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000000)={0x1, r2}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f00000001c0)) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffffffffe59, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 768.178148ms ago: executing program 3 (id=930): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002100), 0x440100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0xffffffffffffffff, 0x2}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2881, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r2, &(0x7f0000000040)=""/80, 0x50) read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffc, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x2004c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020000000, 0x6011, 0x0, 0x200000], 0x6000, 0x12002}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0x8090ae81, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, 0x0) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)={[], [{@flag='dirsync'}]}) 678.503789ms ago: executing program 2 (id=931): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1001}) ioctl$TUNSETOFFLOAD(r2, 0x400454ce, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000380)={{}, {0x3}, 0xc, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="dfdf8580a0239075300d", 0xa, 0x0, &(0x7f00000001c0)={0x2, 0x10a, {0x2, 0xc, 0xa, "634e60ce54186dc6bbd4", 0xf3, "b83a9d5fc6158a392bd38103831a79cc82f562f69b778e0948f10595294b2fe1dc7dd4ab48860e70d2bf535bc3abf4a317a8cdee4c4648a2f820945ecffe0eb4a285bd7cab2c4bbdd0ebb82afb29a43c225eaaf036150b20c758883fd0491379ce4b6a1759df0331eb2cb78ebde14f0fc779a7eb7efaf37d3d26a78457508103c7f010f1a6b9485c596ad8bb842905baa87d38bc8ed0026fa8631e554ad4c826fd1da86846471b2bf965aa29eac12a76a8b1ea73f2214bff63a446e4d69eede32c23cc2db396570447df0b6d329bfbd50e16656b6ec3cdfa147e0d8a41b9a2e3e3bdee696db924ad907042097db5c6761df75b"}, 0x8c, "ca37cafca5c76d3e7be493258b6bb660dbf033cfc71392d049db37c6a61013cef60c2404bcf0c698ec5802a812ff5f8c7e98b88cd2bba75917fc9143b1bae5307e4bb3496235ec061b41cedadcc18c6acd4ea0935f440fc78cce13c9def3c50cd2b9152e07a6384aedfb26e439217c9ec03f158ecc8fd928da40c2e4e0a92cd01fe2e0d43e080209f69187d2"}, 0x1a2}) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) 635.21287ms ago: executing program 1 (id=932): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r1, &(0x7f0000000080)=""/93, 0xffffff6c) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f00000000c0)={0x3, 0x0, 0x98, &(0x7f0000000000)={0x8000, 0x8000, 0xd}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x3, 0x3, 0x4, 0x1, 0x1}}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$PPPIOCGIDLE64(r4, 0x8010743f, &(0x7f0000000100)) ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f0000000140)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) 629.43598ms ago: executing program 0 (id=933): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 530.408302ms ago: executing program 2 (id=934): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x10900, 0x0) (async) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003340), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3}, {0x60, 0x20}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async, rerun: 64) close(0x3) (rerun: 64) close(r1) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r4, 0x4188aea7, &(0x7f0000000080)={0x1, 0x0, [{0x0, 0x0, 0x1, 0x159c2, 0x4}]}) (async) read$FUSE(r1, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r0, &(0x7f0000002380)={0x130, 0x0, r5, {0x3, 0x4, 0x0, '\x00', {0x200, 0x7, 0x6, 0x7fffffff, 0x0, 0xee01, 0xc000, '\x00', 0x8, 0x9, 0xfffffffffffffffd, 0x1, {0x10000, 0x4}, {0xa, 0x5}, {0xd18d, 0x80000001}, {0x2, 0x7}, 0x400, 0x80000000, 0x8000, 0x8}}}, 0x130) (async, rerun: 32) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async, rerun: 32) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BLKDISCARDZEROES(r7, 0x127c, &(0x7f0000000200)) (async) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3], 0xeeee8000, 0x2011c0}) (async, rerun: 64) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0400000000000000160900000000000009000000000000009c010000000000000200000000000000f0020000000000000700000008000000850500000000000003"]) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async, rerun: 64) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0xfffffffd, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x0, &(0x7f00000001c0)={@flat, @fd, @fda={0x66646185, 0x0, 0x1, 0x30}}, 0x0}, 0x10}], 0x5e, 0x0, &(0x7f0000000280)="27340dbe79e8af432ff4fa2360c88df5a04d8e7eeb14f8d0fab09d900a6bb5bc0f07887e054cb7693ae1fb57bdf9173c6f2dd3f6284401f0a87fa2166027d3eda04b0809ab53399e60c5169690bcaa67b7123d2729933e63d78255ba0d07"}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0) 460.463202ms ago: executing program 3 (id=935): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x1004800, &(0x7f0000000180)=ANY=[]) 401.701263ms ago: executing program 0 (id=936): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, r4, 0x4d9f880ba3ca8d4e, 0x12, r3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r7, 0x4068aea3, &(0x7f00000000c0)={0xd5, 0x0, 0x44}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x400000f4, 0x0, 0x9}]}) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$IOC_PR_PREEMPT(r9, 0x401870cb, &(0x7f0000000000)={0x7, 0x5, 0x3, 0xe3ca}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r9, 0x45809000) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 274.305905ms ago: executing program 3 (id=937): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x949902, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f00000000c0)={{0x1, 0xac}, {0xfffffffffffffffc}, 0x1, 0x6}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000cc0)={"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"}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x8000000, 0x2, 0xec3, 0xaffffdfb, 0x0, [{0x1, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0x78, 0x4, 0x0, '\x00', 0x1}, {0xfe, 0x0, 0x1, '\x00', 0x2}, {0x8, 0xfd, 0x5, '\x00', 0xb}, {0x10, 0x4, 0x4, '\x00', 0xfd}, {0x8, 0x81, 0xbc}, {0x0, 0xc8, 0x8, '\x00', 0xf2}, {0x0, 0x90, 0x7, '\x00', 0xff}, {0x8, 0x6, 0xff, '\x00', 0x1}, {0xfe, 0x20, 0x0, '\x00', 0x2e}, {0x69, 0x50, 0x0, '\x00', 0x44}, {0x4, 0x5, 0x7, '\x00', 0x3}, {0x0, 0x4e, 0x6, '\x00', 0x2}, {0x2, 0x2, 0x10, '\x00', 0x9}, {0x0, 0x0, 0x0, '\x00', 0x3}, {0x1, 0x0, 0x14, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xf9}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x80, 0x7, 0x7, '\x00', 0x40}, {0x0, 0x1e}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0xfc, 0x87, 0x2c}]}}) (async) ioctl$KVM_SET_DEBUGREGS(r5, 0x4080aea2, &(0x7f0000000180)={[0xeeee4006, 0xeeee8000, 0x1000, 0x5000], 0x1, 0x81, 0x5}) (async) close_range(r2, r2, 0x0) (async) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x48b, 0x0, 0x100000003}]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'pim6reg\x00', 0x2}) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xc1c0c0, 0x0) ioctl$TCFLSH(r7, 0x80045430, 0x2000000000002) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x4100, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1}) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000200)={0xfffffff9, 0x6}) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000780)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6, 0x7f}]}) 273.561505ms ago: executing program 1 (id=938): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x40000072, 0x0, 0x9}, {0x2b7, 0x0, 0xb}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009302"]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000feb000/0x12000)=nil, r8, 0x4800006, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r9, &(0x7f0000000b00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0x9c, 0x8, 0x3, 0x5, 0x1635}}, 0x120) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x30, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r10 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f0000000080)=r10, 0x12) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r14, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r14, &(0x7f00000000c0), 0x12) write$UHID_INPUT(r9, &(0x7f0000000c40)={0x8, {"751be3c602a0e5276e79c086adc21270633fb3d067b21d544abb92036ecf489f5b3345ad3d6df45ba403e3d9b1137267182b6c67e967f54aaae1a43f4632e4e173f8ce97adfb7996e5cd702f546f95645b64fc34a8730dc2b3be9d88f47e1f6a862b07ab1d850e3e817f6005dabb3381780aa95a7c31cb78bf8721902712937891e9438cd773ef9e8c64c67bf47ea562d9f71def0c6ea559873b67cbdec5e83ec479104c3b3d54aa973d173522c9779135e0b5d91a1cdec65798dd915f2f59515b9335b256d166d9aace8f6c881272af4514796e6bc6549a4c65a0b1fe100f9136250d114800ff60013f6361bd7a772bdba813242130a6afcd8df14522aeb8ab20c8b7ceaae10e40c273c91c9c6462141ccb4f873279862524f0252c25aabc8386c3e404f0acd9033d24103d662d33be10a409713a13b557843396136ffc3111cbebac293d82cf913a5ea34a5b728d8da1f80327f4386ae7e9c2b6997638c372ef75f40a8688e8c74b2689dafb6b2ad2b3d6b7d558beb22a305e5904ac8a291f188334baeecbabd5d0431d63468e2d456a30da83ce133247a76e72cb1b8794e2967ef0bc18f8fdab10838b725840dba1817f2ba431b5f4ff40c19f5c36195afd79cba926416b0f94283ecb68aab6bf10a562cc3291fd5b2ce009f966fd0a94b388a6c172305e281cfeec6f8688b98b36e9910913b12d7e8c4bee96918f412d409a873a56d863df5c254afed14ce8a8c43fc84d2036b40879290f282faf06a2884c74a79594776f260618a245769ab877c1ef31e27878ea89e4ca8bdd646ce95bab8a7d5a1de735048639a2d3680126211dc9c20085dd8d715e647197a0187d03a985bf06c8da5fd961aa49645b88a927b2a2455cbda4dd3382dd2af7a9430b8606f984f4424d19562d14380b171ef1424b84ea1d22e31555b7758264962a6fa03d39c7887f47a91815189dc63ab0ecef4692b2983025bab06aad0c7ff178aa62cc882a482940f3767ea1c679176a9bd308222625570ce4ce1b49cef27a3e2f50fae9eea4a6819be790a685ede4a36d6eaba696cde1d5b7b05765b84d4b70f750aff9dd455106d816ca6324b85b07d2622150605472b72a36f503dc5e01a5390458747aa3f19c8db247b97cb14222b5e79cc6e3135be812bc8ca7c9a155852cef9dcf017ae378d9ecc9482b4857dc98c403beaf9f8bc4960292777fc58221ad46e9d5976ce2941e4fe427810dfb032c99cef90cf17f4e0083c986d66e0e170c2fea96a7360897a81a57921a9025dd021c2b0f6bbe08f8a49d8ac428a7074930bd2ef7ad28a0f17550b45bbfddd723b710994160bcc0ea2e92dbcbb114fefe22db643b9d392118ec05d7f48807ea1c4b5e39845d8207dc6b24d5d8a573034189b3563cdd14f102e2b41239ad1581a7839981d56cbdb7d8c843560272a075788603ec9b62aec5de81c734e3d8118e271179cfdb9e0ffb460519d769c05ad2b5044c2eca76a2c0824b5275c06b8715c0b6df6625a70ca14cc86ebc401f7abbd6d53e8e5d391371840510a9fb2d515be1bb1581a7e2b3a8610425da60d9ba8a841c324c3e1487036a20bc4d9149cbad2be5ed0e37f5cd21eb0d475f0c5730139d8b790e768ea169ef74069b6ccb4d09c78fcd1f1b791faef2218ce5e2707ffd0e38ada6a96a88a53dfc2ad72c9791a92d6a4d86f0f832062d62d3b425f260f654266196584729971fc3903d24300c9da725d47daa985bddff4b6fe301eb324bf6a35157bd79a0cf213398380de3bd91f583d537415afff80658992a949e433ff048c1d2495dec0461f0dd5bf4c8ac506268cd959f3493d37f8feb754062ca89398ade01f923c850eebc84ba9ee3d8c46d880d6f54f0ceafa451669c44b3e5c64411b0c855c94e8d3c345915412e041d284481e4242a1ae828345d76614979c252316b0f5eec34b98077cf89ff1834c25de73e83ad92873f2da115c02af04b71e7303e6289dbe76aaf9e5400dbbd9952c985283ff18aea8a7cab00ae650d21d235b62d9c21965c9888deebd4102bc75b95d33c6b5548f64c3c3f8fa256f21ab2577354221d5ddbc7247d46fb3532ed6322eef55aa24ac77797a38d1614923e24a9d70f6a24e0a1f28519a202fd91100f4d12ce61c37c819874bfbe5c61b4eb06c1b2b1cce56afaf16d560cf4ea727566f701e10233051dd633f4cca90c09c7aa733ecc0932d855abc08566dffe484de6d498c3625f7c2ba5bb12925d5f12e6194e21df4a4d69e1d0915963a04959348d49de928635128126557f8b5b87e1a47da42b311c47d3f0f969f069404e72d8a0d3cb0147ae6ee87abf994f384959eae9c7a91509f94f53098a8017d62bb1050b28c7976309957c34321d5a9520567970280714857904fb6e8f8c54fcdbb768028e4b37d47fd53ebd9cadb94baecbb54c78c81f7a80dd4c616df98d20ec22a0459844828c18eb7ec6d46cdc535266468bef9cfc6ce844b4b7ec9e3ff9e2619c05b477f72be3448f931312ff85727d8e1f48fbb978cb4b22bf959e97ebf4f25e19710f38a2c518702853410b32e74a68c98d58973a4a5c9d3d99c331f0d918a76fd047bb77a18eb655f72f6867cb3093438a26f080dbff4c4cd9544b9f401da3db9d235921a44c61e8292b83f83e8c9825d50bb0dbe32216e21733da8024343206e571c1d051daa670895566a9a218fb112ab2cdfa6a76bfd6374454ee1c211e5871d4186af9c7fef85af11c5b8a11774a1dd890ed2d5723b8698c339bc32473a1b5a9ec39b093ed24a3ec02b6455479bb34fa5a96c1b38fbe356c36b863e28d1234b64bcc0d071c790283b9b71137948776d6a60b67ff552d64286db810ecb90f1117dbedf6d2ce3162ec4ca4070333d1bce11419c13fdc1772ffe70fb03ad824f285660ec0c1985fff2441eddd0fa4b58dc53256ffa0df94a59a3c4165d4ae8bb883b23a8512d435e026da4583183d5147dfb2e05742803c6e9a3166f9dc40e1565887b3fd5d97c00b97b1ac542c23658d4ff03e8b9f3ecf3e35206e6ab3f38f26b70ee4e101f84ad6e3dce689ebdfa544b27af4a9a78667f6ef3564f1f0ffd0a9ed142c77961c7ae9c9a1b300023b6d79511e65d3db989052be9166b4bf9fc128b05fc500af7e7938f4e7ba7d67a117cde6c6330ca18d57150c2d51281df54d8735410805a92d4e5885a580124ecc54bc49bf451c6110a7fa195ae5691743bc4f0d3ab0a1e434884bbfbe8d0e8a5de217269c54f2f2415dbdb7e9285c7006c21cf3b593eefffd79c52c4a95da668651ed12ffe7ec0d2206588c452d107d543cf90f514a417d67b30082ed8ea7ab609d27b4ef9a7e3ac9c0d32020bca61f1df1c83e0b9625e7d6944f6d1fa3e388fb88dc0fd053fe1f1d2c5fa282a59eb2459475c6f1b556fbc791104a6707b8d37d81e7bdf158417f3e920d07d3b6ff305bafec00291c825ffc7d965e570094853389f6996ef02cc3e2f5ce3468e2d0a4ded990d372c2b234c3c1bbd6b6cff24ce474cdd98c42e7179295ac12740cefaf6e86898fb7180db31116ac7bb6d06a242f1fff5530ac7fc47f6593ac73c1a231a73e28d5b4b90d1a596b981675e4f7e0616095dffa6807c49c9d147f5a81b2822b128b035f4de8e017e54ac06e2e7dd52b3bbd778a76477dbe33e6fce5ae786879ba0739de0dee0987258912445664a405cb12a01bb94a97abccdc6d3afe7b61ba72b403a2e66c4c6b2cad20c427c0daf1d9d2dc57ccd502ff4993367dd0debcadee0e431e9115977e1c51a1905fb54268d25aa71cf056358f6d2c4c8bccdc675e350499f7776a15b41fb9e74d56ce3c82a28e9ee1815e039c6b18c8c551ddd46689e27e4c6b4ec384ee8d7fe1bd0ef40a6c288111fd61f00302f7dc442183e6dc0a2cdbbd6d43e061687989f9fef7ce54b238038461bf941a0706e2dfa8c069f4d90d1381a7429b3e692e346074c4de9e208f473a8794a6aaac2a297c29a396a28a10f4a5fa17863ed592fc39d7e8549af9f952366cee76372cf17812964c7322b370ff7f8f2074cc16b88b7cf8fd44bc3504c77efa6effb0813fe4f8ad6da76054d84d50bd9d7e1ff78b9afb4988d843d298515895d9aeaa29e496492097c79d0ecd887045cbd37cc476decc5836640d9a000e2a0a9e389dd6a996cea1dc0a7f62e2abf25d6ebee990ef19db33783d0485eaf43476b134d6873fd9a4f376ec2e4ae0993407683597ebd9376ca9d9d85d4399b3d24b8b6bf0e4910f257f6f54887f321a3768f82982144c5fe4fdf40068c3c71d34ffec82726e704c40f82f537d41b3621f06c1bb11b1665de3732df4f3eb727c04ad6b25910d9d97163119a2b72ff40109edbc58676682e0f86f75870b6f639d368d11aa1ceae80708288757db2389b16a4420008ce4a7a8487cbb7c922108a1acff54a0da5fc32c4c1e29a483e50ab9818c15c86a4997b4c8ef8dce08f633d2b558823a1c3476e61badcbb4ebcfd5f89f4075f093f5ea52c5c6f6c3025a8558ffb7c38a0662c05b8c44c0af1f15d3df1b1814255e27e9edec3346e2d59202fd643cf51a8ac5fe2a17579433afb9898cdba1c31c6083a8040064cd67c5012738660a09677e2b2156074a6586c76b86b745e7e209884185226fdbc2d826e2264e0b8d9e8896af60d82cc06452366c5dbf959e14a1a12b56bea30e35b1f50cdf95e37e0a5d272a792caec048947dd56abfe85271f0131e8d7f542525230ee0b005fe6bdec05a5f42c7027b555292374b210b7a6d72139574e10500f7db0914270d122ad93a0893c6875008e6b055a0358a48ef9b9309089323a110fcc7c5122c45401532c075957214dd6c86305819ead9cdcddec00faf31b0be040165aee5210c648eb7ac1d856dfce811391876735a05e71f2c8fa0beed3c5489897de524dd52da8a18c5a69d0be29a59dba736addf52ba02bb14121660f973a030d705480ae121b44f6d46441af124982c6b759389977e32de862bf409eeae3eaf7321c779b1c2e32080e031d854c34ce5413a098e18ac7a4b871985c83b0ba4fe68d82061923547d3ea28e004fab11afa63fcd5a6149c4bb3a2480061e5d58899a5d717893c0b73be62d4a42eb3fec479aea240fae76ef79561d4a7bf26c4f67cbe1659557f20f8fce0e183e2b4da3553741cbd764714d3e6ebec6ff0a9fb7efcd99bc71c3938b4142ca0a69faa54bab2b4f7b9143633fd6e9a26f7766b8353f491a0bcb62066df77faaaf7b639d9455bdc8937968c51848e4391c52db579a48dcc3a7f1406053bbf06ee64eb3a5b7d2e0c63efdd5edeef53820e3e52d3d12828e39d698095aa3c3cd84989fc7ca73e541ba7da40aa2297a5e3633096dfb81b5c2ec6fbeb894e41bce4e8ec5096326feece88f5a795cad6097ea7c91ec487092ebad33c06f355a195d64d17afe092a0d7ae2161ad3d33f863336ed1e4055f7f81c065230e0c1fa5b332cd6a57692f3b0f60115dcece23ee7c46a45ac79e8ec19ca091c98f06750c802b103480ebe72849b22b7419ea1e35999d0b374286c20fe64880fc5259c61e300d15659b9f6a43127aaf0587048ca9a4284b2e25f3d079ddc194a7bf12a211bdc8f969be78e6d9a686c8ebdec19bd3518a901fd9bc3ad02065f0b145a8b72abf97d7584c7ebe6054e36d6f095df5a0cfc80e82878c4a5845f31e8f351e7411b0c81880523040585881fd87424e6288fc4b877a39bb81a9a40200c8e7a438d944c268d12d7ff1f234d2a12001d3a97ad15da3d628a420bcecd3f365488120", 0x1000}}, 0x1006) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000240)=[@acquire, @release, @decrefs], 0x0, 0x0, 0x0}) 131.508728ms ago: executing program 2 (id=939): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$TIOCSISO7816(r1, 0xc0285443, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000480)=""/86, 0x0, 0x10000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x6, 0x0, [{0x5000, 0xac, &(0x7f00000001c0)=""/172}, {0x8080000, 0x46, &(0x7f0000000380)=""/148}, {0xeeee0000, 0xb9, &(0x7f0000000580)=""/185}, {0x0, 0xff7, &(0x7f0000001600)=""/4087}, {0xdddd0000, 0xffb, &(0x7f0000004600)=""/4091}, {0xf4b2c2098e6bac2, 0xc2, &(0x7f0000000740)=""/194}]}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af10, &(0x7f0000000540)) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x10, r2, 0x2000) 0s ago: executing program 0 (id=940): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000081, 0x0, 0x4}]}) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) read(r0, &(0x7f0000000040)=""/106, 0x6a) kernel console output (not intermixed with test programs): ng state [ 23.920682][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.927997][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.935073][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.964175][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.971643][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.981830][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.988979][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.046593][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.053704][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.079029][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.086100][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.099892][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.106958][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.123789][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.130879][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.161212][ T291] veth0_vlan: entered promiscuous mode [ 24.175582][ T291] veth1_macvtap: entered promiscuous mode [ 24.185017][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.192107][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.200235][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.207280][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.250955][ T289] veth0_vlan: entered promiscuous mode [ 24.263092][ T288] veth0_vlan: entered promiscuous mode [ 24.280623][ T290] veth0_vlan: entered promiscuous mode [ 24.289535][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.290256][ T288] veth1_macvtap: entered promiscuous mode [ 24.320662][ T289] veth1_macvtap: entered promiscuous mode [ 24.332299][ T290] veth1_macvtap: entered promiscuous mode [ 24.409637][ T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.439933][ T316] serio: Serial port ttynull [ 24.458223][ T320] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 24.509988][ T322] rust_binder: Write failure EINVAL in pid:2 [ 24.680631][ T326] rust_binder: Failed copying remainder into alloc: EFAULT [ 24.686673][ T326] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 24.694696][ T326] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 24.703198][ T326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:4 [ 24.765134][ T328] rust_binder: Error while translating object. [ 24.774974][ T328] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 24.781528][ T328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:6 [ 24.833860][ T333] rust_binder: Write failure EINVAL in pid:8 [ 24.961953][ T335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:8 [ 24.969304][ T336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:8 [ 24.991720][ T338] rust_binder: Write failure EFAULT in pid:11 [ 25.056429][ T347] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 25.094759][ T352] binder: Unknown parameter '/dev/kvm' [ 25.130400][ T355] can0: slcan on ttyS3. [ 25.149345][ T356] can0 (unregistered): slcan off ttyS3. [ 25.171889][ T359] ======================================================= [ 25.171889][ T359] WARNING: The mand mount option has been deprecated and [ 25.171889][ T359] and is ignored by this kernel. Remove the mand [ 25.171889][ T359] option from the mount to silence this warning. [ 25.171889][ T359] ======================================================= [ 25.207051][ T359] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 25.216296][ T361] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 25.390392][ T378] can0: slcan on ttyS3. [ 25.409376][ T378] binder: Bad value for 'max' [ 25.418142][ T383] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 25.433310][ T385] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 25.433337][ T385] rust_binder: Error while translating object. [ 25.458425][ T385] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.464684][ T385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:39 [ 25.480465][ T377] can0 (unregistered): slcan off ttyS3. [ 25.603503][ T400] SELinux: security_context_str_to_sid () failed with errno=-22 [ 25.805611][ T418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 25.838171][ T419] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 25.874157][ T424] rust_binder: Write failure EINVAL in pid:13 [ 25.877272][ T426] rust_binder: Write failure EINVAL in pid:46 [ 26.005978][ T435] random: crng reseeded on system resumption [ 26.101822][ T442] rust_binder: Error while translating object. [ 26.101856][ T442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.108636][ T442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 26.172068][ T449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 26.181529][ T449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:56 [ 26.286130][ T452] binder: Bad value for 'stats' [ 26.343590][ T459] rust_binder: Write failure EFAULT in pid:22 [ 26.379020][ T464] input: syz1 as /devices/virtual/input/input6 [ 26.454570][ T474] kvm: kvm [472]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x882 [ 26.595260][ T480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27 [ 26.597551][ T480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:27 [ 26.637435][ T482] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 26.693193][ T482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 26.693211][ T482] rust_binder: Read failure Err(EFAULT) in pid:34 [ 26.956603][ T499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:25 [ 26.966742][ T503] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 26.975941][ T503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:37 [ 27.028249][ T506] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.037434][ T506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 27.049035][ T36] kauditd_printk_skb: 107 callbacks suppressed [ 27.049052][ T36] audit: type=1400 audit(1750379924.630:181): avc: denied { map } for pid=505 comm="syz.1.58" path="/dev/ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 27.099082][ T36] audit: type=1400 audit(1750379924.630:182): avc: denied { execute } for pid=505 comm="syz.1.58" path="/dev/ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 27.143430][ T516] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 27.143455][ T516] rust_binder: Error while translating object. [ 27.152585][ T516] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.159042][ T516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 27.168652][ T512] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 27.186393][ T518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.186526][ T518] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 27.259534][ T523] rust_binder: Write failure EFAULT in pid:42 [ 27.380649][ T531] binder: Unknown parameter 'nXI' [ 27.405653][ T529] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 27.416413][ T536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30 [ 27.416550][ T536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30 [ 27.421244][ T529] rust_binder: Write failure EINVAL in pid:89 [ 27.442909][ T541] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:47 [ 27.527724][ T546] binder: Bad value for 'context' [ 27.565951][ T36] audit: type=1400 audit(1750379925.140:183): avc: denied { read write } for pid=547 comm="syz.0.73" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 27.598733][ T36] audit: type=1400 audit(1750379925.140:184): avc: denied { open } for pid=547 comm="syz.0.73" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 27.625673][ T36] audit: type=1400 audit(1750379925.200:185): avc: denied { append } for pid=551 comm="syz.2.75" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.648816][ T36] audit: type=1400 audit(1750379925.230:186): avc: denied { read write } for pid=549 comm="syz.1.74" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.673309][ T548] rust_binder: Error while translating object. [ 27.673355][ T548] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.680283][ T36] audit: type=1400 audit(1750379925.230:187): avc: denied { open } for pid=549 comm="syz.1.74" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.690948][ T548] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:40 [ 27.713293][ T36] audit: type=1400 audit(1750379925.250:188): avc: denied { ioctl } for pid=549 comm="syz.1.74" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.748884][ T36] audit: type=1400 audit(1750379925.330:189): avc: denied { sys_module } for pid=547 comm="syz.0.73" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 27.769827][ T36] audit: type=1400 audit(1750379925.330:190): avc: denied { ioctl } for pid=547 comm="syz.0.73" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 27.813160][ T557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:95 [ 28.039046][ T567] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 28.057529][ T571] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 28.057635][ T571] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 28.066736][ T571] rust_binder: Read failure Err(EFAULT) in pid:99 [ 28.099791][ T573] rust_binder: Error while translating object. [ 28.106513][ T573] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 28.112816][ T573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:103 [ 28.132673][ T577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:49 [ 28.155976][ T579] binder: Unknown parameter 'fsname' [ 28.238408][ T588] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.238524][ T588] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.254650][ T586] rust_binder: Write failure EINVAL in pid:33 [ 28.462522][ T597] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 28.487082][ T597] rust_binder: Write failure EINVAL in pid:36 [ 28.522052][ T611] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.528746][ T611] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.624581][ T621] input: syz1 as /devices/virtual/input/input8 [ 28.644500][ T621] rust_binder: Write failure EINVAL in pid:66 [ 28.773876][ T626] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.836745][ T626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71 [ 28.848844][ T631] rust_binder: Error while translating object. [ 28.858464][ T631] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.865834][ T631] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71 [ 28.924409][ T635] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.938654][ T635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:76 [ 29.080709][ T639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 29.104386][ T640] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 29.239127][ T646] input: syz0 as /devices/virtual/input/input9 [ 29.295596][ T651] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 29.295619][ T651] rust_binder: Read failure Err(EFAULT) in pid:115 [ 29.368892][ T653] rust_binder: Error while translating object. [ 29.375706][ T653] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.388552][ T653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:117 [ 29.438940][ T658] SELinux: security_context_str_to_sid (system_uÝGй ‰:ÿß) failed with errno=-22 [ 29.476758][ T660] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.481081][ T660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 29.551772][ T663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:119 [ 29.563971][ T663] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 29.573225][ T663] rust_binder: Read failure Err(EFAULT) in pid:119 [ 29.608155][ T674] binder: Bad value for 'max' [ 29.610523][ T676] rtc_cmos 00:00: Alarms can be up to one day in the future [ 29.653628][ T682] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 29.653652][ T682] rust_binder: Error while translating object. [ 29.669628][ T682] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.676014][ T682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126 [ 29.727786][ T685] rust_binder: Error while translating object. [ 29.738660][ T685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.748715][ T685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61 [ 29.994238][ T703] rust_binder: Read failure Err(EAGAIN) in pid:64 [ 30.146332][ T719] binder: Unknown parameter 'ÿÿÿÿ' [ 30.188147][ T725] input: syz1 as /devices/virtual/input/input10 [ 30.239306][ T730] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101 [ 31.603167][ T741] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:73 [ 31.682428][ T746] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 31.714212][ T753] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.714246][ T753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:147 [ 31.825175][ T760] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 31.841220][ T760] rust_binder: Error while translating object. [ 31.865708][ T760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.880241][ T760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:149 [ 31.956016][ T774] rust_binder: Error while translating object. [ 31.965773][ T774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.978379][ T774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79 [ 32.047374][ T781] rust_binder: Write failure EFAULT in pid:99 [ 32.091272][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 32.091292][ T36] audit: type=1400 audit(1750379929.670:199): avc: denied { ioctl } for pid=778 comm="syz.1.154" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xaf04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 32.180486][ T787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.213210][ T787] rust_binder: Got transaction with invalid offset. [ 32.238394][ T787] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.245579][ T787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101 [ 32.268348][ T36] audit: type=1400 audit(1750379929.840:200): avc: granted { setsecparam } for pid=796 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 32.327389][ T36] audit: type=1400 audit(1750379929.840:201): avc: granted { setsecparam } for pid=796 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 32.357994][ T800] SELinux: policydb table sizes (0,7) do not match mine (8,7) [ 32.365836][ T36] audit: type=1400 audit(1750379929.930:202): avc: denied { load_policy } for pid=799 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 32.388366][ T800] SELinux: failed to load policy [ 32.452986][ T36] audit: type=1400 audit(1750379930.030:203): avc: denied { ioctl } for pid=801 comm="syz.0.161" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 32.656729][ T822] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 32.839630][ T837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:166 [ 32.888714][ T36] audit: type=1326 audit(1750379930.470:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f458e929 code=0x7ffc0000 [ 32.921903][ T36] audit: type=1326 audit(1750379930.470:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd1f458e929 code=0x7ffc0000 [ 32.945135][ T36] audit: type=1326 audit(1750379930.470:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm=BF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f458e929 code=0x7ffc0000 [ 32.981595][ T851] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 32.981628][ T851] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:172 [ 33.001962][ T36] audit: type=1326 audit(1750379930.470:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm=BF exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd1f458e929 code=0x7ffc0000 [ 33.051227][ T36] audit: type=1326 audit(1750379930.470:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=841 comm="$,@.-,$!" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f458e929 code=0x7ffc0000 [ 33.179197][ T874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:129 [ 33.179442][ T872] rust_binder: Write failure EFAULT in pid:183 [ 33.300699][ T888] binder: Unknown parameter 'max000000000ƒ000000000' [ 33.301015][ T889] binder: Unknown parameter 'max000000000ƒ000000000' [ 33.317484][ T883] SELinux: failed to load policy [ 33.330501][ T890] geneve1: tun_chr_ioctl cmd 1074025672 [ 33.341952][ T890] geneve1: ignored: set checksum enabled [ 33.508542][ T898] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 33.600242][ T902] binder: Unknown parameter 'puset.memory_spread_page' [ 33.702126][ T905] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 33.837577][ T907] SELinux: security_context_str_to_sid (systemOu) failed with errno=-22 [ 33.902058][ T916] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 34.212857][ T931] rust_binder: Write failure EFAULT in pid:92 [ 34.228809][ T934] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 34.261905][ T936] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 34.300553][ T930] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.341422][ T930] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 34.347915][ T930] rust_binder: Error while translating object. [ 34.367707][ T930] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.378354][ T930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:211 [ 34.519794][ T946] rust_binder: Write failure EINVAL in pid:139 [ 34.559354][ T948] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 34.559536][ T949] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 34.679826][ T961] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 34.688118][ T961] rust_binder: Write failure EINVAL in pid:171 [ 34.972672][ T982] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 35.282969][ T1007] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.283440][ T1007] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 35.290045][ T1007] rust_binder: Error while translating object. [ 35.300802][ T1007] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.306997][ T1007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:102 [ 35.359645][ T1010] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 35.547082][ T1033] binder: Bad value for 'max' [ 35.698548][ T1039] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 35.698575][ T1039] rust_binder: Error while translating object. [ 35.706357][ T1042] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 35.720296][ T1039] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.720331][ T1039] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:152 [ 35.785085][ T1046] input: syz0 as /devices/virtual/input/input15 [ 35.897148][ T1048] binder: Unknown parameter '00000000000000000000' [ 36.000229][ T1054] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 36.000256][ T1054] rust_binder: Error while translating object. [ 36.024857][ T1057] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.028376][ T1054] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.037579][ T1054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115 [ 36.096802][ T1064] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 36.117314][ T1064] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:165 [ 36.221480][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.229645][ T1068] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 36.249704][ T1068] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:165 [ 36.301137][ T1074] __vm_enough_memory: pid: 1074, comm: syz.1.241, bytes: 281474976845824 not enough memory for the allocation [ 36.530634][ T1082] tun0: tun_chr_ioctl cmd 1074025676 [ 36.536040][ T1082] tun0: owner set to 0 [ 36.897060][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.897089][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.903948][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.910403][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.916977][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.925110][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.934432][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.937057][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.950366][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.950391][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.950406][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.963875][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.976520][ T1103] rust_binder: Error in use_page_slow: ESRCH [ 36.985570][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.985601][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.986307][ T1103] rust_binder: use_range failure ESRCH [ 36.992187][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.000006][ T1103] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 37.004389][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.010932][ T1103] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 37.018621][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.025418][ T1103] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:230 [ 37.034479][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.041183][ T1103] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 37.050396][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.057089][ T1103] rust_binder: Read failure Err(EFAULT) in pid:230 [ 37.064885][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.077947][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.084575][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.091238][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.097935][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.104485][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.111118][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.117984][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.124472][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.130978][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.137488][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.144023][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.150728][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.157229][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.165312][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.171846][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.178407][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.184899][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.191412][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.197950][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.204486][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.210966][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.217396][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.223898][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.230366][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.236800][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.238586][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 37.238606][ T36] audit: type=1400 audit(1750379934.810:232): avc: denied { read write } for pid=1106 comm="syz.2.251" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 37.243290][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.250857][ T1109] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 37.255783][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.255804][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.302234][ T36] audit: type=1400 audit(1750379934.830:233): avc: denied { open } for pid=1106 comm="syz.2.251" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 37.318429][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.333338][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.339880][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.346422][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.353133][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.361300][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.367808][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.374440][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.380961][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.387552][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.394089][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.402324][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.409626][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.416247][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.422995][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.431813][ T1104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.843488][ T290] cgroup: fork rejected by pids controller in /syz2 [ 38.074643][ T36] audit: type=1400 audit(1750379935.650:234): avc: denied { mounton } for pid=1143 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 38.133367][ T292] bridge_slave_1: left allmulticast mode [ 38.139236][ T292] bridge_slave_1: left promiscuous mode [ 38.144908][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.152610][ T292] bridge_slave_0: left allmulticast mode [ 38.158256][ T292] bridge_slave_0: left promiscuous mode [ 38.164020][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.278353][ T1069] Bluetooth: hci0: command 0x1003 tx timeout [ 38.278409][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.301488][ T292] veth1_macvtap: left promiscuous mode [ 38.307046][ T292] veth0_vlan: left promiscuous mode [ 38.396946][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.404222][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.413294][ T1143] bridge_slave_0: entered allmulticast mode [ 38.419848][ T1143] bridge_slave_0: entered promiscuous mode [ 38.426985][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.434250][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.441474][ T1143] bridge_slave_1: entered allmulticast mode [ 38.447728][ T1143] bridge_slave_1: entered promiscuous mode [ 38.509668][ T36] audit: type=1400 audit(1750379936.090:235): avc: denied { create } for pid=1143 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.516226][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.537299][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.538472][ T36] audit: type=1400 audit(1750379936.090:236): avc: denied { write } for pid=1143 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.544693][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.572000][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.579425][ T36] audit: type=1400 audit(1750379936.090:237): avc: denied { read } for pid=1143 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.601197][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.611362][ T1161] kvm: kvm [1159]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x3 [ 38.621200][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.636317][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.643414][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.659242][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.666320][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.694973][ T1143] veth0_vlan: entered promiscuous mode [ 38.711836][ T1143] veth1_macvtap: entered promiscuous mode [ 38.728925][ T1163] rust_binder: Write failure EFAULT in pid:173 [ 38.738155][ T36] audit: type=1400 audit(1750379936.310:238): avc: denied { mounton } for pid=1143 comm="syz-executor" path="/root/syzkaller.PFfr7Y/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.773011][ T1171] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 38.773080][ T1172] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 38.793995][ T36] audit: type=1400 audit(1750379936.310:239): avc: denied { mount } for pid=1143 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.821493][ T36] audit: type=1400 audit(1750379936.310:240): avc: denied { mount } for pid=1143 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.844781][ T1176] rust_binder: Write failure EFAULT in pid:274 [ 38.847453][ T36] audit: type=1400 audit(1750379936.310:241): avc: denied { mounton } for pid=1143 comm="syz-executor" path="/root/syzkaller.PFfr7Y/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.874450][ T1177] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.881346][ T1177] rust_binder: Read failure Err(EFAULT) in pid:247 [ 38.894726][ T1182] rust_binder: Read failure Err(EAGAIN) in pid:4 [ 39.316795][ T1215] binder: Unknown parameter '0xffffffffffffffff' [ 39.340253][ T1221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:281 [ 39.340290][ T1221] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.349971][ T1221] rust_binder: Read failure Err(EFAULT) in pid:281 [ 39.410397][ T1228] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 39.416960][ T1228] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 39.425579][ T1228] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:284 [ 39.518828][ T1238] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.528666][ T1238] rust_binder: Error while translating object. [ 39.535136][ T1238] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 39.541616][ T1238] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:188 [ 39.642317][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.642343][ T1069] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 39.653490][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.671437][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.678137][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.685481][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.692620][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.693480][ T1249] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 39.699409][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.714138][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.721251][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.727889][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.734832][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.741380][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.747752][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.754378][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.760036][ T1253] rust_binder: Error while translating object. [ 39.760748][ T1253] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.761020][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.767179][ T1253] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:290 [ 39.776536][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.799868][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.806368][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.812994][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.820090][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.826741][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.833445][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.840166][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.848129][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.856695][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.866062][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.873227][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.879631][ T1258] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.879699][ T1258] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.888014][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.901037][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.915370][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.921935][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.936370][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.942813][ T1248] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.979692][ T1263] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.145852][ T1277] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 40.152550][ T1277] rust_binder: Error while translating object. [ 40.164420][ T1277] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.170982][ T1277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:302 [ 40.236039][ T1287] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:277 [ 40.256206][ T1288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:28 [ 40.266361][ T1288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 40.383110][ T1294] binder: Unknown parameter 'nXI' [ 40.411985][ T1297] geneve1: tun_chr_ioctl cmd 1074025672 [ 40.417670][ T1297] geneve1: ignored: set checksum enabled [ 40.445596][ T1299] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 40.456325][ T1299] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 40.490824][ T1301] binder: Unknown parameter 'cGй' [ 40.644165][ T1312] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 40.658406][ T1312] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 40.754033][ T1315] rust_binder: Write failure EFAULT in pid:310 [ 40.767538][ T1317] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 40.818650][ T1321] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 40.957891][ T1326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:316 [ 41.030251][ T1328] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 41.180479][ T1342] rust_binder: Write failure EFAULT in pid:322 [ 41.207666][ T1346] rust_binder: Write failure EINVAL in pid:35 [ 41.210882][ T1347] rust_binder: Write failure EINVAL in pid:324 [ 41.282947][ T1356] SELinux: security_context_str_to_sid () failed with errno=-22 [ 41.361024][ T1368] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 41.366748][ T1368] pim6reg0: linktype set to 769 [ 41.379902][ T1368] SELinux: ebitmap: truncated map [ 41.386423][ T1368] SELinux: failed to load policy [ 41.638405][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.900427][ T1416] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 41.900469][ T1416] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 41.909629][ T1416] rust_binder: Read failure Err(EFAULT) in pid:64 [ 41.930545][ T1418] random: crng reseeded on system resumption [ 41.960525][ T1419] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.960908][ T1418] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 41.967412][ T1418] rust_binder: Error while translating object. [ 41.978092][ T1418] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.984304][ T1418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:207 [ 42.041163][ T1431] rust_binder: Write failure EFAULT in pid:218 [ 42.050742][ T1431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:218 [ 42.220759][ T1450] rust_binder: Error while translating object. [ 42.230260][ T1450] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 42.236458][ T1450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:224 [ 42.302838][ T1456] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 42.313444][ T1456] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.321871][ T1456] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 42.489371][ T1464] rust_binder: Write failure EFAULT in pid:228 [ 42.523785][ T1468] binder: Bad value for 'max' [ 42.599997][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 42.600013][ T36] audit: type=1400 audit(1750379940.180:257): avc: denied { map } for pid=1469 comm="syz.3.378" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 42.680056][ T1477] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 42.734958][ T1480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68 [ 42.794790][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.811428][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.818951][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.826391][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.834153][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.841665][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.858397][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.868379][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.875822][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.884603][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.892233][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.899742][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.907982][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.915505][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.923020][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.930660][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.942363][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.950106][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.959697][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.967291][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.974776][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.982247][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.989727][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 42.997228][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.004870][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.012324][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.019868][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.027292][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.034817][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.042293][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.049841][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.057471][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.065005][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.072483][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.087138][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.087854][ T1501] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 43.099764][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.111056][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.119026][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.126573][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.134096][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.141707][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.149172][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.157966][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.165495][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.178005][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.185702][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.193765][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.201418][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.212527][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.220026][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.221546][ T1513] rust_binder: Write failure EINVAL in pid:349 [ 43.227504][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.241255][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.248719][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.259221][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.268549][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.289896][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.297349][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.317894][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.319202][ T1518] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 43.332038][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.335166][ T36] audit: type=1400 audit(1750379940.910:258): avc: denied { map } for pid=1517 comm="syz.0.393" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 43.347800][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.369237][ T1522] input: syz0 as /devices/virtual/input/input27 [ 43.376657][ T36] audit: type=1400 audit(1750379940.940:259): avc: denied { read write } for pid=1519 comm="syz.3.394" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.390492][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.407682][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.415288][ T36] audit: type=1400 audit(1750379940.940:260): avc: denied { open } for pid=1519 comm="syz.3.394" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.438858][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.442468][ T36] audit: type=1400 audit(1750379940.940:261): avc: denied { ioctl } for pid=1519 comm="syz.3.394" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.446514][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.471282][ T36] audit: type=1400 audit(1750379940.960:262): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=443 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.478893][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.504342][ T36] audit: type=1400 audit(1750379940.960:263): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=443 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.509124][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.531455][ T36] audit: type=1400 audit(1750379940.960:264): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=443 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.538934][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.566568][ T36] audit: type=1400 audit(1750379940.980:265): avc: denied { ioctl } for pid=1519 comm="syz.3.394" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 43.595407][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.595961][ T36] audit: type=1400 audit(1750379940.980:266): avc: denied { read write } for pid=1519 comm="syz.3.394" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 43.603160][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.633478][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.641272][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.648800][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.656250][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.668140][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.675772][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.684945][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.692484][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.699995][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.707492][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.715018][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.728740][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.742560][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.750103][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.757549][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.765782][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.773331][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.780773][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.788257][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.798558][ T1532] rtc_cmos 00:00: Alarms can be up to one day in the future [ 43.805887][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.813360][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.813390][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.813412][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.835679][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.843124][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.850658][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.858095][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.865616][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.873077][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.880729][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.888482][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.895922][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.903413][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.910901][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.918488][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.925991][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.933495][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.940960][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.948436][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.956084][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.963851][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.971331][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.979512][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.987035][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 43.994567][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.002048][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.009510][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.016944][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.024367][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.031827][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.039589][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.047035][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.054612][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.057818][ T1541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.062163][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.063611][ T1541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.068723][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.089896][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.099884][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.113818][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.121730][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.129218][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.136628][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.144103][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.151590][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.159075][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.166478][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.173895][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.181360][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.188866][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.196472][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.204111][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.211725][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.219179][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.226584][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.234023][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.241456][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.248940][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.256593][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.264854][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.273970][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.281819][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.289339][ T1548] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.289395][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.307687][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.315730][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.323230][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.330869][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.338415][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.346016][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.353539][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.361158][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.368603][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.376004][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.383564][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.391078][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.398540][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.405944][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.413373][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.420798][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.428633][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.436108][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.443587][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.451091][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.458543][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.466004][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.473756][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.481234][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.488801][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.496223][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.503646][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.511087][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.518748][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.526145][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.533595][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.541028][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.548476][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.555887][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.563320][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.570763][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.578151][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.585596][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.593026][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.600587][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.607978][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.615417][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.622846][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.630316][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.637734][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.645345][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.653026][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.660484][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.664322][ T1559] rust_binder: Write failure EINVAL in pid:82 [ 44.667891][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.681507][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.689115][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.696642][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.704362][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.713591][ T1266] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 44.722116][ T1266] hid-generic 01FF:0004:0400.0001: hidraw0: HID v0.05 Device [syz0] on syz1 [ 44.815320][ T1567] fido_id[1567]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 44.979559][ T1581] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.979893][ T1581] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 45.093951][ T1584] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 45.128401][ T1584] rust_binder: Read failure Err(EFAULT) in pid:90 [ 45.260322][ T1596] rust_binder: Error while translating object. [ 45.260371][ T1596] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 45.266623][ T1596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:378 [ 45.278007][ T1596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:378 [ 45.310051][ T1598] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 45.328359][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.331866][ T1069] Bluetooth: hci0: command 0x1003 tx timeout [ 45.375000][ T1600] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:380 [ 45.463772][ T1612] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 45.520136][ T1617] rust_binder: Write failure EINVAL in pid:387 [ 45.523321][ T1617] rust_binder: Failed to allocate buffer. len:4216, is_oneway:true [ 45.541933][ T1617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 45.568178][ T1617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:387 [ 45.885722][ T1638] random: crng reseeded on system resumption [ 45.932215][ T1643] binder: Bad value for 'context' [ 46.043394][ T1645] rust_binder: Write failure EINVAL in pid:284 [ 46.043682][ T1645] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 46.050344][ T1645] rust_binder: Read failure Err(EFAULT) in pid:284 [ 46.065895][ T1645] rust_binder: Error while translating object. [ 46.078507][ T1645] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 46.085332][ T1645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:284 [ 46.126844][ T1657] SELinux: security_context_str_to_sid () failed with errno=-22 [ 46.136968][ T1659] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 46.153210][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.168102][ T1659] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 46.321330][ T1669] input: syz1 as /devices/virtual/input/input32 [ 46.330003][ T1669] rust_binder: Write failure EINVAL in pid:106 [ 46.381602][ T1671] binder: Unknown parameter 'Jap}¯(þB¹' [ 46.479661][ T1679] rust_binder: Write failure EINVAL in pid:401 [ 46.616475][ T1681] rust_binder: Failed to allocate buffer. len:18446744073709551064, is_oneway:false [ 46.623672][ T1681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 46.633984][ T1681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:116 [ 46.678631][ T1688] rust_binder: Error while translating object. [ 46.688095][ T1688] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.695378][ T1686] binder: Bad value for 'max' [ 46.710033][ T1688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119 [ 46.761908][ T1692] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 46.778226][ T1692] rust_binder: Write failure EINVAL in pid:405 [ 46.934118][ T1703] can0: slcan on ptm2. [ 47.249328][ T1733] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 47.721534][ T1739] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 47.747798][ T1741] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 47.761026][ T1741] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 47.925494][ T36] kauditd_printk_skb: 147 callbacks suppressed [ 47.925514][ T36] audit: type=1400 audit(1750379945.500:414): avc: denied { append } for pid=1745 comm="syz.1.457" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.933110][ T1746] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.956803][ T1746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:417 [ 47.964268][ T1746] rust_binder: Error while translating object. [ 47.973770][ T1746] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 47.982293][ T1746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:417 [ 48.002920][ T1702] can0 (unregistered): slcan off ptm2. [ 48.097658][ T1765] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 48.097684][ T1765] rust_binder: Read failure Err(EFAULT) in pid:295 [ 48.108439][ T1766] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 48.115055][ T1766] rust_binder: Read failure Err(EFAULT) in pid:295 [ 48.149257][ T1774] random: crng reseeded on system resumption [ 48.162273][ T36] audit: type=1400 audit(1750379945.730:415): avc: denied { write } for pid=1773 comm="syz.1.459" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 48.198413][ T1069] Bluetooth: hci0: command 0x1003 tx timeout [ 48.198730][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.248492][ T36] audit: type=1400 audit(1750379945.820:416): avc: denied { read } for pid=1781 comm="syz.0.461" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 48.283169][ T1774] rust_binder: Error while translating object. [ 48.283195][ T1774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 48.289529][ T1774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:419 [ 48.382113][ T1794] rust_binder: Write failure EINVAL in pid:421 [ 48.391698][ T1794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:421 [ 48.491450][ T36] audit: type=1400 audit(1750379946.070:417): avc: denied { attach_queue } for pid=1795 comm="syz.0.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 48.609735][ T1798] binder: Bad value for 'stats' [ 48.625932][ T36] audit: type=1400 audit(1750379946.200:418): avc: denied { view } for pid=1799 comm="syz.3.467" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 49.188374][ T36] audit: type=1400 audit(1750379946.760:419): avc: denied { write } for pid=1841 comm="syz.3.481" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.218705][ T36] audit: type=1400 audit(1750379946.760:420): avc: denied { remove_name } for pid=1841 comm="syz.3.481" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.222825][ T1852] SELinux: security_context_str_to_sid () failed with errno=-22 [ 49.242207][ T36] audit: type=1400 audit(1750379946.760:421): avc: denied { unlink } for pid=1841 comm="syz.3.481" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.277406][ T36] audit: type=1400 audit(1750379946.850:422): avc: denied { read write } for pid=1855 comm="syz.0.486" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 49.286444][ T1267] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 49.300907][ T36] audit: type=1400 audit(1750379946.850:423): avc: denied { open } for pid=1855 comm="syz.0.486" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 49.331833][ T1267] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 49.593233][ T1866] rust_binder: Write failure EINVAL in pid:431 [ 49.625228][ T1866] binder: Unknown parameter '' [ 49.636662][ T1866] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.636903][ T1866] rust_binder: Write failure EINVAL in pid:431 [ 49.645799][ T1873] kvm: kvm [1872]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x7a [ 49.759397][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.765865][ T1880] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 49.773053][ T1880] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 49.773084][ T1880] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:438 [ 49.903491][ T1882] rust_binder: Write failure EFAULT in pid:332 [ 50.061437][ T1894] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 50.067705][ T1894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:338 [ 50.156100][ T1899] input: syz0 as /devices/virtual/input/input36 [ 50.178783][ T1899] rust_binder: Write failure EFAULT in pid:416 [ 50.189080][ T1903] binder: Unknown parameter 'defcontext01777777777777777777777' [ 50.341595][ T1915] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 50.341622][ T1915] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:177 [ 50.442150][ T1917] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 176, size: 4096) [ 50.451390][ T1917] rust_binder: Error while translating object. [ 50.462058][ T1917] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.468234][ T1917] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:179 [ 50.496465][ T1920] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 50.535369][ T1924] binder: Unknown parameter 'euid<00000000000000000000' [ 50.609363][ T1928] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.667936][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.674636][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.681187][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.687626][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.694150][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.700654][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.707175][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.713701][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.721266][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.727741][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.734331][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.744524][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.751808][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.758842][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.765729][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.772846][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.787237][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.793872][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.800450][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.806987][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.811340][ T1946] input: syz0 as /devices/virtual/input/input37 [ 50.813941][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.831020][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.839301][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.846795][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.853587][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.860488][ T1948] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 50.861593][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.867921][ T1948] rust_binder: Read failure Err(EFAULT) in pid:188 [ 50.876402][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.883314][ T1948] rust_binder: Write failure EFAULT in pid:188 [ 50.889444][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.906592][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.913846][ T1953] rust_binder: Write failure EINVAL in pid:433 [ 50.919608][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.926835][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.933594][ T1933] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.001234][ T1968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:442 [ 51.041698][ T1970] random: crng reseeded on system resumption [ 51.100154][ T1973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.100596][ T1973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:444 [ 51.107662][ T1973] rust_binder: Error while translating object. [ 51.116992][ T1973] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.123259][ T1973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:444 [ 51.179865][ T1982] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 51.229321][ T1987] binder: Unknown parameter 'max' [ 51.307231][ T1989] rust_binder: Write failure EFAULT in pid:206 [ 51.379348][ T1266] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.411386][ T1266] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 51.492419][ T1999] SELinux: security_context_str_to_sid () failed with errno=-22 [ 51.492943][ T1993] binder: Unknown parameter 'defcontext01777777777777777777777' [ 51.542552][ T2007] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.542688][ T2007] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.606989][ T2008] input: syz1 as /devices/virtual/input/input38 [ 51.711247][ T2011] rust_binder: Write failure EFAULT in pid:371 [ 51.711366][ T2012] input: syz1 as /devices/virtual/input/input39 [ 51.798425][ T1069] Bluetooth: hci0: command 0x1003 tx timeout [ 51.798434][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.920208][ T2020] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:442 [ 51.920705][ T2020] rust_binder: Error while translating object. [ 51.930063][ T2020] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.936291][ T2020] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:442 [ 52.002686][ T2024] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 52.019286][ T2024] rust_binder: Write failure EINVAL in pid:216 [ 52.198782][ T2045] binder: Unknown parameter 'processor : 0 [ 52.198782][ T2045] vendor_id : GenuineIntel [ 52.198782][ T2045] cpu family : 6 [ 52.198782][ T2045] model : 79 [ 52.198782][ T2045] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 52.198782][ T2045] stepping : 0 [ 52.198782][ T2045] microcode : 0xffffffff [ 52.198782][ T2045] cpu MHz : 2199.998 [ 52.198782][ T2045] cache size : 56320 KB [ 52.198782][ T2045] physical id : 0 [ 52.198782][ T2045] siblings : 2 [ 52.198782][ T2045] core id : 0 [ 52.198782][ T2045] cpu cores : 1 [ 52.198782][ T2045] apicid : 0 [ 52.198782][ T2045] initial apicid : 0 [ 52.198782][ T2045] fpu : yes [ 52.198782][ T2045] fpu_exception : yes [ 52.198782][ T2045] cpuid level : 13 [ 52.198782][ T2045] wp : yes [ 52.198782][ T2045] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 52.198782][ T2045] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 52.246314][ T2047] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 52.387737][ T2047] rust_binder: Write failure EINVAL in pid:224 [ 52.455811][ T2056] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 52.556354][ T2070] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.574327][ T2074] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.582725][ T2074] rust_binder: BC_FREEZE_NOTIFICATION_DONE 00002000000a0000 not found [ 52.597962][ T2074] rust_binder: Write failure EINVAL in pid:396 [ 52.599614][ T2074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:396 [ 52.611749][ T2069] cgroup: fork rejected by pids controller in [ 52.620049][ T2077] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.621390][ T2069] /syz0 [ 52.627335][ T2077] rust_binder: Read failure Err(EFAULT) in pid:398 [ 52.635836][ T2069] [ 52.645927][ T2072] kvm: kvm [2071]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253 [ 52.704829][ T2184] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 52.708823][ T2184] rust_binder: Write failure EINVAL in pid:402 [ 52.898822][ T2196] rust_binder: Error while translating object. [ 52.905147][ T2196] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 52.912009][ T2196] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:238 [ 53.061663][ T2200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:455 [ 53.099951][ T2208] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 53.117839][ T2208] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 53.128510][ T305] bridge_slave_1: left allmulticast mode [ 53.134979][ T2208] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 53.138402][ T305] bridge_slave_1: left promiscuous mode [ 53.143826][ T2208] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 53.149355][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.158480][ T2208] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 53.173942][ T305] bridge_slave_0: left allmulticast mode [ 53.179923][ T305] bridge_slave_0: left promiscuous mode [ 53.185598][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.301820][ T2194] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.308949][ T2194] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.310946][ T2213] rust_binder: Write failure EINVAL in pid:466 [ 53.316154][ T2194] bridge_slave_0: entered allmulticast mode [ 53.316964][ T2213] rust_binder: got new transaction with bad transaction stack [ 53.324129][ T2194] bridge_slave_0: entered promiscuous mode [ 53.329908][ T2213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:466 [ 53.349612][ T305] veth1_macvtap: left promiscuous mode [ 53.364708][ T305] veth0_vlan: left promiscuous mode [ 53.408559][ T2194] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.415729][ T2194] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.422843][ T2194] bridge_slave_1: entered allmulticast mode [ 53.429441][ T2194] bridge_slave_1: entered promiscuous mode [ 53.478231][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 53.478249][ T36] audit: type=1400 audit(1750379951.050:434): avc: denied { create } for pid=2194 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.484774][ T2194] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.508780][ T36] audit: type=1400 audit(1750379951.050:435): avc: denied { write } for pid=2194 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.512111][ T2194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.532803][ T36] audit: type=1400 audit(1750379951.060:436): avc: denied { read } for pid=2194 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.539830][ T2194] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.567095][ T2194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.575202][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.582757][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.607176][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.614291][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.623379][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.630484][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.658147][ T2194] veth0_vlan: entered promiscuous mode [ 53.670644][ T2194] veth1_macvtap: entered promiscuous mode [ 53.688045][ T36] audit: type=1400 audit(1750379951.260:437): avc: denied { mounton } for pid=2194 comm="syz-executor" path="/root/syzkaller.UPRZiF/syz-tmp" dev="sda1" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 53.713493][ T36] audit: type=1400 audit(1750379951.260:438): avc: denied { mount } for pid=2194 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.735580][ T36] audit: type=1400 audit(1750379951.270:439): avc: denied { mount } for pid=2194 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 53.757595][ T36] audit: type=1400 audit(1750379951.270:440): avc: denied { mounton } for pid=2194 comm="syz-executor" path="/root/syzkaller.UPRZiF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 53.784293][ T36] audit: type=1400 audit(1750379951.270:441): avc: denied { mounton } for pid=2194 comm="syz-executor" path="/root/syzkaller.UPRZiF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=34406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 53.812694][ T36] audit: type=1400 audit(1750379951.270:442): avc: denied { unmount } for pid=2194 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.832846][ T36] audit: type=1400 audit(1750379951.290:443): avc: denied { mounton } for pid=2194 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 53.889451][ T2221] binder: Unknown parameter 'smackfsroot' [ 53.911065][ T2223] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.911129][ T2224] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.918103][ T2223] rust_binder: Error while translating object. [ 53.927686][ T2223] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.934266][ T2223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:470 [ 53.950989][ T2224] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.961316][ T2223] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.967981][ T2223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:470 [ 53.968736][ T2224] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:470 [ 54.001567][ T2231] SELinux: security_context_str_to_sid () failed with errno=-22 [ 54.220132][ T2242] binder: Unknown parameter '00000000000000000004' [ 54.351149][ T2247] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 54.361145][ T2247] SELinux: failed to load policy [ 54.389872][ T2247] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 54.424350][ T2247] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 54.622885][ T2270] SELinux: policydb string length 65544 does not match expected length 8 [ 54.631549][ T2270] SELinux: failed to load policy [ 54.636616][ T2269] rust_binder: Failed to allocate buffer. len:144, is_oneway:true [ 54.685924][ T2272] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 54.693832][ T2272] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:267 [ 54.703304][ T2272] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 54.712501][ T2272] rust_binder: Read failure Err(EFAULT) in pid:267 [ 55.010228][ T2302] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:30 [ 55.055834][ T2311] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 55.065316][ T2311] rust_binder: Read failure Err(EFAULT) in pid:32 [ 55.072471][ T2305] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 55.079181][ T2311] SELinux: security_context_str_to_sid () failed with errno=-22 [ 55.087517][ T2305] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 55.095176][ T2305] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 55.174498][ T2317] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:279 [ 55.185235][ T2317] rust_binder: Error while translating object. [ 55.194560][ T2317] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.200852][ T2317] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:279 [ 55.237941][ T2314] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 55.279081][ T2327] rust_binder: Error while translating object. [ 55.287187][ T2327] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.294042][ T2327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:412 [ 55.373465][ T2330] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.574517][ T2339] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 55.980327][ T2355] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 55.980658][ T2356] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 55.988498][ T2355] rust_binder: Error while translating object. [ 56.000796][ T2356] rust_binder: Error while translating object. [ 56.012627][ T2355] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.020048][ T2356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.025010][ T2355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:434 [ 56.035106][ T2356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:434 [ 56.088092][ T2359] binder: Bad value for 'stats' [ 56.194059][ T2366] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 56.202435][ T2366] rust_binder: Write failure EINVAL in pid:498 [ 56.302745][ T2380] binder: Binderfs stats mode cannot be changed during a remount [ 56.466180][ T2393] input: syz1 as /devices/virtual/input/input44 [ 56.535970][ T2404] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 56.543506][ T2404] rust_binder: Write failure EINVAL in pid:300 [ 56.640745][ T2413] input input45: cannot allocate more than FF_MAX_EFFECTS effects [ 56.668689][ T2416] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 56.668710][ T2416] rust_binder: Error while translating object. [ 56.679441][ T2416] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.685719][ T2416] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:447 [ 56.705627][ T2418] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 56.819835][ T2428] binder: Bad value for 'max' [ 57.263333][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.350109][ T2481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:457 [ 57.354295][ T2481] SELinux: security_context_str_to_sid (system_uÝGй ‰:ÿß) failed with errno=-22 [ 57.877305][ T2542] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 57.877332][ T2542] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 57.886817][ T2542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:478 [ 58.015140][ T2547] rust_binder: Write failure EINVAL in pid:376 [ 58.040779][ T2550] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 58.053711][ T292] Bluetooth: hci1: Frame reassembly failed (-84) [ 58.065340][ T2550] Bluetooth: hci1: Frame reassembly failed (-84) [ 58.072066][ T305] Bluetooth: hci1: Frame reassembly failed (-84) [ 58.256393][ T2570] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.264706][ T2570] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.271848][ T2570] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 58.278694][ T2570] rust_binder: Error while translating object. [ 58.289484][ T2570] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.295297][ T2573] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 58.295696][ T2570] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:384 [ 58.321822][ T2575] rust_binder: Write failure EFAULT in pid:529 [ 58.535756][ T2584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:537 [ 59.033979][ T2594] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 59.055806][ T2594] binder: Unknown parameter '' [ 59.061127][ T2595] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 59.096879][ T2599] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 59.107010][ T2601] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 59.202715][ T2609] input: syz1 as /devices/virtual/input/input48 [ 59.212774][ T2609] random: crng reseeded on system resumption [ 59.272285][ T2612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.318463][ T2551] Bluetooth: hci0: command 0x1003 tx timeout [ 59.318599][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.337301][ T2615] rust_binder: Error in use_page_slow: ESRCH [ 59.337324][ T2615] rust_binder: use_range failure ESRCH [ 59.344508][ T2615] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 59.350156][ T2615] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 59.358219][ T2615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:390 [ 59.548228][ T2625] rust_binder: Write failure EINVAL in pid:77 [ 59.579532][ T2628] SELinux: ebitmap: truncated map [ 59.591336][ T2628] SELinux: failed to load policy [ 59.618531][ T2628] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 59.631343][ T2632] binder: Unknown parameter 'non' [ 59.730396][ T2636] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 59.738696][ T2636] rust_binder: Write failure EINVAL in pid:397 [ 59.783925][ T2638] rust_binder: Write failure EFAULT in pid:82 [ 59.900193][ T2657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:578 [ 59.944962][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 59.944978][ T36] audit: type=1400 audit(1750379957.520:458): avc: denied { append } for pid=2663 comm="syz.1.696" name="binder0" dev="binder" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.120474][ T2685] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 60.120507][ T2685] rust_binder: Error while translating object. [ 60.131167][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 60.143487][ T1069] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 60.152464][ T2689] rust_binder: Error in use_page_slow: ESRCH [ 60.152486][ T2689] rust_binder: use_range failure ESRCH [ 60.168621][ T2689] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 60.174149][ T2689] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 60.185845][ T2685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.197254][ T2689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:91 [ 60.218137][ T2685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:592 [ 60.383175][ T2706] binder: Unknown parameter 'non' [ 60.405755][ T2706] binder: Unknown parameter 'non' [ 60.563638][ T2714] input: syz0 as /devices/virtual/input/input49 [ 60.573597][ T36] audit: type=1400 audit(1750379958.150:459): avc: denied { map } for pid=2716 comm="syz.0.712" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 60.619967][ T2724] rust_binder: Got transaction with invalid offset. [ 60.620017][ T2724] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.626761][ T2724] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:490 [ 60.647385][ T2728] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115 [ 60.674273][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.692955][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.702359][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.712214][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.721676][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.731142][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.742486][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.756976][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.757557][ T2740] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.766899][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.767876][ T2740] rust_binder: Error in use_page_slow: ESRCH [ 60.777186][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.782596][ T2740] rust_binder: use_range failure ESRCH [ 60.789074][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.803371][ T2740] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 60.803392][ T2740] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 60.803417][ T2740] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:427 [ 60.830655][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.849867][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.859704][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.863055][ T2742] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 60.869026][ T2743] binder: Unknown parameter 'defcontext01777777777777777777777' [ 60.877726][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.896293][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.905643][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.915185][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.924459][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.933727][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.943130][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.952442][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.966482][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.976009][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 60.983206][ T2747] binder: Unknown parameter 'dont_iash' [ 60.985447][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.000364][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.010881][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.020987][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.030403][ T2749] binder: Bad value for 'stats' [ 61.030775][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.045853][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.055186][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.064864][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.074305][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.083817][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.094842][ T36] audit: type=1400 audit(1750379958.660:460): avc: denied { append } for pid=2752 comm="syz.3.725" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 61.118488][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.128371][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.138030][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.147496][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.157318][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.166946][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.182589][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.193615][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.203854][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.213415][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.238489][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.248842][ T2760] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.249178][ T2760] rust_binder: Error while translating object. [ 61.255677][ T2760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.258632][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.268391][ T2760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:434 [ 61.281612][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.300273][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.309558][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.328412][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.337844][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.347323][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.362940][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.372566][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.383378][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.393016][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.402311][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.414178][ T2766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.428587][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.442700][ T2766] rust_binder: Error in use_page_slow: ESRCH [ 61.444184][ T2766] rust_binder: use_range failure ESRCH [ 61.453961][ T2766] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 61.459651][ T2766] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 61.468362][ T2766] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:436 [ 61.472112][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.496176][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.500037][ T2774] rust_binder: Write failure EINVAL in pid:604 [ 61.506590][ T2733] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.564368][ T2781] SELinux: policydb version 905587468 does not match my version range 15-33 [ 61.573222][ T2781] SELinux: failed to load policy [ 61.592379][ T2782] tun0: tun_chr_ioctl cmd 1074025673 [ 61.598050][ T2782] tun0: tun_chr_ioctl cmd 1074025675 [ 61.603468][ T2782] tun0: persist disabled [ 61.605087][ T2785] binder: Unknown parameter 'seclab' [ 61.613639][ T2782] rust_binder: Error in use_page_slow: ESRCH [ 61.613659][ T2782] rust_binder: use_range failure ESRCH [ 61.614795][ T36] audit: type=1326 audit(1750379959.190:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2784 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad4f8e929 code=0x7ffc0000 [ 61.619845][ T2782] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 61.648705][ T36] audit: type=1326 audit(1750379959.190:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2784 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad4f8e929 code=0x7ffc0000 [ 61.683359][ T2782] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 61.683399][ T2782] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:120 [ 61.696911][ T36] audit: type=1326 audit(1750379959.200:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2784 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffad4f8e929 code=0x7ffc0000 [ 61.731889][ T36] audit: type=1326 audit(1750379959.200:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2784 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad4f8e929 code=0x7ffc0000 [ 61.755253][ T36] audit: type=1326 audit(1750379959.200:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2784 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad4f8e929 code=0x7ffc0000 [ 61.778901][ T36] audit: type=1326 audit(1750379959.200:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2784 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffad4f8e929 code=0x7ffc0000 [ 61.802332][ T36] audit: type=1326 audit(1750379959.200:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2784 comm="syz.3.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad4f8e929 code=0x7ffc0000 [ 61.803841][ T2782] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:120 [ 61.844573][ T2794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:517 [ 61.854038][ T2795] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 61.976898][ T2803] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.990724][ T2803] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 61.997225][ T2803] rust_binder: Error while translating object. [ 62.009656][ T2803] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.015406][ T2806] input: syz1 as /devices/virtual/input/input50 [ 62.015866][ T2803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:448 [ 62.044628][ T2806] rust_binder: Write failure EINVAL in pid:524 [ 62.306535][ T2823] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.314090][ T2823] rust_binder: Error in use_page_slow: ESRCH [ 62.321234][ T2823] rust_binder: use_range failure ESRCH [ 62.330042][ T2823] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 62.335744][ T2823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 62.343836][ T2823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:465 [ 62.453776][ T2837] rust_binder: Write failure EINVAL in pid:532 [ 62.590485][ T2844] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 62.596690][ T2844] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:613 [ 62.606126][ T2844] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 62.615382][ T2844] rust_binder: Read failure Err(EFAULT) in pid:613 [ 62.732266][ T2853] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 62.754311][ T2856] rust_binder: inc_ref_done called when no active inc_refs [ 62.754334][ T2857] rust_binder: inc_ref_done called when no active inc_refs [ 62.775093][ T2861] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.787893][ T2861] rust_binder: Write failure EINVAL in pid:472 [ 63.011549][ T2873] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.048053][ T2877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:480 [ 63.051849][ T2877] binder: Unknown parameter 'seä' [ 63.066666][ T2878] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:480 [ 63.199990][ T2882] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 63.209264][ T2882] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 63.218380][ T2882] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:485 [ 63.330349][ T2885] random: crng reseeded on system resumption [ 63.431192][ T2892] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.431224][ T2892] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.596201][ T2912] binder: Unknown parameter './binderfs' [ 63.628396][ T2916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:624 [ 63.633684][ T2916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:624 [ 63.685536][ T2918] geneve1: tun_chr_ioctl cmd 1074025672 [ 63.701193][ T2918] geneve1: ignored: set checksum enabled [ 64.030158][ T2950] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 64.058132][ T2954] rust_binder: Write failure EFAULT in pid:544 [ 64.058196][ T2953] rust_binder: Write failure EFAULT in pid:544 [ 64.065997][ T2953] binder: Unknown parameter 'defka”Ê#]ñs' [ 64.079028][ T2954] binder: Unknown parameter 'defka”Ê#]ñs' [ 64.184438][ T2964] rust_binder: Write failure EINVAL in pid:157 [ 64.218081][ T2969] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 64.224427][ T2969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:549 [ 64.336595][ T2978] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:512 [ 64.409861][ T2988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.420154][ T2988] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 64.426597][ T2988] rust_binder: Error while translating object. [ 64.437312][ T2988] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.443593][ T2988] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:514 [ 64.529414][ T2995] rust_binder: Write failure EFAULT in pid:516 [ 64.554255][ T2999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.614201][ T3002] random: crng reseeded on system resumption [ 64.792340][ T3010] input: syz0 as /devices/virtual/input/input52 [ 64.904609][ T3024] rust_binder: Error in use_page_slow: ESRCH [ 64.904639][ T3024] rust_binder: use_range failure ESRCH [ 64.910826][ T3024] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 64.916482][ T3024] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 64.924497][ T3024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:572 [ 65.095068][ T3033] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 65.117896][ T3033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.125065][ T3033] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.131586][ T3033] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:174 [ 65.156760][ T3035] rust_binder: Write failure EINVAL in pid:581 [ 66.627844][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 66.627865][ T36] audit: type=1400 audit(1750379964.200:486): avc: denied { write } for pid=3036 comm="syz.1.818" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 66.699885][ T3051] rust_binder: Error while translating object. [ 66.699916][ T3051] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 66.706189][ T3051] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:179 [ 66.727996][ T36] audit: type=1400 audit(1750379964.300:487): avc: granted { setsecparam } for pid=3049 comm="syz.0.823" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 66.761413][ T3051] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 66.778198][ T3059] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.778840][ T3058] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.785475][ T3058] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 66.802761][ T3058] rust_binder: Write failure EINVAL in pid:585 [ 66.851054][ T3065] block device autoloading is deprecated and will be removed. [ 66.859977][ T36] audit: type=1400 audit(1750379964.430:488): avc: denied { read } for pid=3060 comm="syz.3.825" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.892381][ T3062] __vm_enough_memory: pid: 3062, comm: syz.3.825, bytes: 1378684502016 not enough memory for the allocation [ 66.934421][ T36] audit: type=1400 audit(1750379964.430:489): avc: denied { open } for pid=3060 comm="syz.3.825" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.976070][ T36] audit: type=1400 audit(1750379964.430:490): avc: denied { ioctl } for pid=3060 comm="syz.3.825" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.005594][ T36] audit: type=1400 audit(1750379964.470:491): avc: denied { map } for pid=3060 comm="syz.3.825" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.040868][ T3065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:667 [ 67.048336][ T36] audit: type=1400 audit(1750379964.470:492): avc: denied { read } for pid=3060 comm="syz.3.825" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.099650][ T1266] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz1 [ 67.126624][ T3079] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.132924][ T36] audit: type=1400 audit(1750379964.470:493): avc: denied { read write } for pid=3064 comm="syz.1.826" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 67.137860][ T3079] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:181 [ 67.148441][ T36] audit: type=1400 audit(1750379964.470:494): avc: denied { read write open } for pid=3064 comm="syz.1.826" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 67.256638][ T36] audit: type=1400 audit(1750379964.470:495): avc: denied { ioctl } for pid=3064 comm="syz.1.826" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 67.300666][ T3087] fido_id[3087]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 67.331456][ T3061] cgroup: fork rejected by pids controller in /syz3 [ 67.427332][ T3108] random: crng reseeded on system resumption [ 67.461311][ T3113] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.531492][ T3113] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 67.549458][ T3108] binder: Bad value for 'defcontext' [ 67.555351][ T3113] rust_binder: Write failure EINVAL in pid:186 [ 67.567421][ T3119] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 67.573762][ T3119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:672 [ 67.584388][ T3119] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 67.593573][ T3119] rust_binder: Read failure Err(EFAULT) in pid:672 [ 67.766388][ T3133] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 67.783180][ T1266] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.796869][ T3133] rust_binder: Write failure EINVAL in pid:532 [ 67.797910][ T1266] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.826070][ T1266] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.839801][ T1266] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.848043][ T1266] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 67.871826][ T1266] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 67.975311][ T3143] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.024991][ T3150] binder: Unknown parameter 'diˆœnc' [ 68.102132][ T3148] fido_id[3148]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 68.202491][ T3159] rust_binder: Write failure EFAULT in pid:631 [ 68.235657][ T3163] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.255767][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.424678][ T3177] geneve1: tun_chr_ioctl cmd 1074025672 [ 68.438324][ T3177] geneve1: ignored: set checksum enabled [ 68.750255][ T3185] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:696 [ 68.759974][ T3185] rust_binder: Read failure Err(EFAULT) in pid:696 [ 68.804666][ T3188] SELinux: failed to load policy [ 68.820047][ T3189] SELinux: failed to load policy [ 69.099133][ T3200] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 69.099164][ T3200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:558 [ 69.738366][ T3216] input: syz1 as /devices/virtual/input/input55 [ 69.760883][ T3222] binder: Unknown parameter 'defcontext01777777777777777777777' [ 69.862953][ T3227] can0: slcan on ttyS3. [ 69.972408][ T3226] can0 (unregistered): slcan off ttyS3. [ 70.049674][ T3233] SELinux: policydb version -700801071 does not match my version range 15-33 [ 70.064666][ T3233] SELinux: failed to load policy [ 70.072898][ T3233] SELinux: failed to load policy [ 70.079595][ T3235] input: syz1 as /devices/virtual/input/input56 [ 70.121304][ T3235] binder: Bad value for 'max' [ 70.190351][ T3240] rust_binder: Write failure EFAULT in pid:714 [ 70.196942][ T3241] input: syz1 as /devices/virtual/input/input57 [ 70.282527][ T1069] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.341565][ T3251] binder: Unknown parameter 'st' [ 70.359639][ T3245] rust_binder: Error in use_page_slow: ESRCH [ 70.359665][ T3245] rust_binder: use_range failure ESRCH [ 70.365888][ T3253] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 70.379883][ T3245] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 70.388386][ T3253] rust_binder: Error while translating object. [ 70.395847][ T3245] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 70.428378][ T3245] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:650 [ 70.433046][ T3253] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.488361][ T3253] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200 [ 70.541090][ T3262] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.571021][ T3262] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.706972][ T3272] PM: Enabling pm_trace changes system date and time during resume. [ 70.706972][ T3272] PM: Correct system time has to be restored manually after resume. [ 70.735025][ T3270] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:204 [ 70.741355][ T3274] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 70.775310][ T3272] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 70.784707][ T3274] rust_binder: Write failure EINVAL in pid:657 [ 70.795855][ T3270] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.053567][ T3284] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.077811][ T3284] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 71.093297][ T3284] rust_binder: Read failure Err(EFAULT) in pid:206 [ 71.127477][ T3284] rust_binder: Write failure EINVAL in pid:206 [ 71.258850][ T3303] rust_binder: Error while translating object. [ 71.268356][ T3303] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 71.285463][ T3303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:577 [ 71.309182][ T3301] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 71.333514][ T3301] rust_binder: Write failure EINVAL in pid:662 [ 71.411992][ T3309] binder: Bad value for 'max' [ 71.424621][ T3309] binder: Unknown parameter 'sˆP-ˆ).ø¨0xffffffffffffffff' [ 71.529789][ T3317] rust_binder: Error while translating object. [ 71.529836][ T3317] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 71.538344][ T3317] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:664 [ 71.564601][ T3317] rust_binder: Write failure EFAULT in pid:664 [ 71.631781][ T36] kauditd_printk_skb: 1098 callbacks suppressed [ 71.631802][ T36] audit: type=1400 audit(1750379969.210:1594): avc: denied { read write } for pid=3326 comm="syz.0.893" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 71.678141][ T3332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.678490][ T3332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.718656][ T3332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.745396][ T36] audit: type=1400 audit(1750379969.250:1595): avc: denied { read write } for pid=1143 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.779214][ T36] audit: type=1400 audit(1750379969.250:1596): avc: denied { read write open } for pid=1143 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.798950][ T3329] audit: audit_backlog=65 > audit_backlog_limit=64 [ 71.812633][ T1143] audit: audit_backlog=65 > audit_backlog_limit=64 [ 71.822831][ T1143] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 71.823870][ T36] audit: type=1400 audit(1750379969.250:1597): avc: denied { ioctl } for pid=1143 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.838359][ T1143] audit: backlog limit exceeded [ 71.859028][ T3342] audit: audit_backlog=65 > audit_backlog_limit=64 [ 71.868227][ T3343] audit: audit_backlog=65 > audit_backlog_limit=64 [ 71.881495][ T3332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.881734][ T3332] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.970654][ T3349] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 71.988830][ T3351] binder: Bad value for 'stats' [ 71.994747][ T3349] rust_binder: Write failure EINVAL in pid:591 [ 72.174207][ T3362] rust_binder: Error while translating object. [ 72.189205][ T3362] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.195472][ T3362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:672 [ 72.297901][ T3370] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 72.322685][ T3370] rust_binder: Error while translating object. [ 72.348380][ T3370] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.368388][ T3370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:736 [ 72.419807][ T3374] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 72.614319][ T3389] block device autoloading is deprecated and will be removed. [ 72.633271][ T3389] syz.1.907: attempt to access beyond end of device [ 72.633271][ T3389] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 72.775432][ T3397] binder: Unknown parameter '0x0000000000000003' [ 72.791570][ T3399] binder: Bad value for 'max' [ 73.136841][ T3403] rust_binder: Read failure Err(EFAULT) in pid:678 [ 73.182315][ T3412] random: crng reseeded on system resumption [ 73.262061][ T3412] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 73.271746][ T3418] can0: slcan on ptm0. [ 73.369628][ T3418] binder: Bad value for 'defcontext' [ 73.525600][ T3417] can0 (unregistered): slcan off ptm0. [ 73.678511][ T3441] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 73.717796][ T3441] rust_binder: Write failure EINVAL in pid:685 [ 74.071642][ T3458] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 74.298137][ T3468] __vm_enough_memory: pid: 3468, comm: syz.0.928, bytes: 281474976845824 not enough memory for the allocation [ 74.927250][ T3503] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1531215282 (3062430564 ns) > initial count (1473793136 ns). Using initial count to start timer. [ 74.975704][ T1266] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 74.993669][ T1266] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 75.008490][ T1266] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 75.018654][ T1266] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 75.026093][ T1266] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 75.036766][ T3504] rust_kernel: panicked at drivers/android/binder/node.rs:877:13: [ 75.036766][ T3504] attempt to subtract with overflow [ 75.058391][ T1266] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 75.068463][ T1266] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 75.078138][ T3504] ------------[ cut here ]------------ [ 75.083707][ T3504] kernel BUG at rust/helpers/bug.c:7! [ 75.086587][ T1266] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 75.118392][ T1266] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 75.132039][ T1266] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 75.136904][ T3504] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 75.146426][ T3504] CPU: 1 UID: 0 PID: 3504 Comm: syz.1.938 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 75.148382][ T1266] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 75.159826][ T3504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.159844][ T3504] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 75.159887][ T3504] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 57 78 b5 57 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 1d bc fc db 90 90 90 90 90 90 90 90 90 [ 75.178233][ T1266] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 75.182615][ T3504] RSP: 0018:ffffc9000123da90 EFLAGS: 00010246 [ 75.182640][ T3504] RAX: 0000000000000061 RBX: 1ffff92000247b54 RCX: 9d40ba2cfeea6300 [ 75.182657][ T3504] RDX: ffffc900019c2000 RSI: 00000000000036a3 RDI: 00000000000036a4 [ 75.182671][ T3504] RBP: ffffc9000123da90 R08: ffffc9000123d787 R09: 1ffff92000247af0 [ 75.215585][ T1266] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 75.215735][ T3504] R10: dffffc0000000000 R11: fffff52000247af1 R12: 0000000000000000 [ 75.255210][ T3504] R13: dffffc0000000000 R14: ffffc9000123dac0 R15: ffffc9000123daf0 [ 75.261409][ T1266] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 75.263215][ T3504] FS: 00007fd1f2bf76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 75.278402][ T1266] hid-generic 009C:0008:0003.0006: unknown main item tag 0x0 [ 75.279503][ T3504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.293460][ T3504] CR2: 0000555580b2e4a8 CR3: 00000001193b0000 CR4: 00000000003526b0 [ 75.301470][ T3504] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000800 [ 75.309481][ T3504] DR3: 0000000100000001 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.317487][ T3504] Call Trace: [ 75.320791][ T3504] [ 75.323737][ T3504] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 75.331218][ T3504] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 75.339212][ T3504] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 75.352767][ T3504] ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 75.363393][ T3504] ? __kasan_check_write+0x18/0x20 [ 75.368529][ T3504] ? _raw_spin_lock+0x8c/0x120 [ 75.373321][ T3504] ? __cfi__raw_spin_lock+0x10/0x10 [ 75.378535][ T3504] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 75.385748][ T3504] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 75.393653][ T3504] ? rust_helper_spin_unlock+0x19/0x30 [ 75.399126][ T3504] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 75.409026][ T3504] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 75.419621][ T3504] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 75.429351][ T3504] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 75.439430][ T3504] ? __kasan_check_write+0x18/0x20 [ 75.444580][ T3504] ? _raw_spin_lock+0x8c/0x120 [ 75.449356][ T3504] ? __cfi__raw_spin_lock+0x10/0x10 [ 75.454563][ T3504] ? __kasan_check_write+0x18/0x20 [ 75.459676][ T3504] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 75.469246][ T3504] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 75.479156][ T3504] ? is_bpf_text_address+0x17b/0x1a0 [ 75.484455][ T3504] ? kernel_text_address+0xa9/0xe0 [ 75.489574][ T3504] ? __kasan_check_write+0x18/0x20 [ 75.494694][ T3504] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 75.500171][ T3504] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 75.506075][ T3504] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 75.511892][ T3504] ? stack_depot_save_flags+0x399/0x800 [ 75.517446][ T3504] ? kasan_save_track+0x4f/0x80 [ 75.522318][ T3504] ? kasan_save_track+0x3e/0x80 [ 75.527178][ T3504] ? kasan_save_alloc_info+0x40/0x50 [ 75.532467][ T3504] ? __kasan_kmalloc+0x96/0xb0 [ 75.537242][ T3504] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 75.542801][ T3504] ? __set_page_owner+0x294/0x5d0 [ 75.547839][ T3504] ? post_alloc_hook+0x3b9/0x3f0 [ 75.552803][ T3504] ? prep_new_page+0x1c/0x120 [ 75.557489][ T3504] ? get_page_from_freelist+0x46bb/0x4750 [ 75.563211][ T3504] ? __alloc_pages_noprof+0x30d/0x6c0 [ 75.568593][ T3504] ? alloc_slab_page+0x6b/0x1f0 [ 75.573455][ T3504] ? allocate_slab+0x69/0x450 [ 75.578140][ T3504] ? ___slab_alloc+0x59a/0x8b0 [ 75.582914][ T3504] ? kmem_cache_alloc_node_noprof+0x20a/0x3b0 [ 75.588989][ T3504] ? __alloc_skb+0x10c/0x370 [ 75.593588][ T3504] ? audit_log_start+0x3d5/0x8f0 [ 75.598524][ T3504] ? common_lsm_audit+0xd6/0x1860 [ 75.603549][ T3504] ? slow_avc_audit+0x18d/0x1f0 [ 75.608418][ T3504] ? avc_has_perm+0x1cd/0x220 [ 75.613096][ T3504] ? selinux_binder_set_context_mgr+0xcf/0x110 [ 75.619258][ T3504] ? security_binder_set_context_mgr+0x44/0xb0 [ 75.625439][ T3504] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process14set_as_manager+0x3b8/0xa60 [ 75.635507][ T3504] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x135a/0x2c20 [ 75.644883][ T3504] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 75.653564][ T3504] ? __se_sys_ioctl+0x132/0x1b0 [ 75.658424][ T3504] ? __x64_sys_ioctl+0x7f/0xa0 [ 75.663192][ T3504] ? x64_sys_call+0x1878/0x2ee0 [ 75.668055][ T3504] ? do_syscall_64+0x58/0xf0 [ 75.672656][ T3504] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.678762][ T3504] ? is_bpf_text_address+0x17b/0x1a0 [ 75.684056][ T3504] ? kernel_text_address+0xa9/0xe0 [ 75.689173][ T3504] ? cgroup_rstat_updated+0x132/0x7f0 [ 75.694552][ T3504] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 75.700276][ T3504] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 75.705750][ T3504] ? unwind_next_frame+0x3c2/0x750 [ 75.710862][ T3504] ? __x64_sys_ioctl+0x7f/0xa0 [ 75.715636][ T3504] ? __x64_sys_ioctl+0x7f/0xa0 [ 75.720413][ T3504] ? __kernel_text_address+0x11/0x40 [ 75.725704][ T3504] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 75.731862][ T3504] ? arch_stack_walk+0x12a/0x170 [ 75.736809][ T3504] ? __x64_sys_ioctl+0x7f/0xa0 [ 75.741582][ T3504] ? stack_depot_save_flags+0x38/0x800 [ 75.747050][ T3504] ? is_bpf_text_address+0x17b/0x1a0 [ 75.752346][ T3504] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 75.758424][ T3504] ? is_bpf_text_address+0x17b/0x1a0 [ 75.763751][ T3504] ? kernel_text_address+0xa9/0xe0 [ 75.768870][ T3504] ? __kernel_text_address+0x11/0x40 [ 75.774156][ T3504] ? unwind_get_return_address+0x51/0x90 [ 75.779791][ T3504] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 75.785954][ T3504] ? arch_stack_walk+0x10b/0x170 [ 75.790903][ T3504] ? stack_trace_save+0x9d/0xe0 [ 75.795776][ T3504] ? stack_depot_save_flags+0x38/0x800 [ 75.801248][ T3504] ? detach_entity_load_avg+0x7b0/0x7b0 [ 75.806805][ T3504] ? kasan_save_track+0x4f/0x80 [ 75.811661][ T3504] ? kasan_save_track+0x3e/0x80 [ 75.816613][ T3504] ? kasan_save_free_info+0x4a/0x60 [ 75.821832][ T3504] ? __kasan_slab_free+0x5f/0x80 [ 75.826782][ T3504] ? kmem_cache_free+0x1c1/0x4c0 [ 75.831724][ T3504] ? audit_log_end+0x1f1/0x240 [ 75.836488][ T3504] ? common_lsm_audit+0x148c/0x1860 [ 75.841689][ T3504] ? slow_avc_audit+0x18d/0x1f0 [ 75.846542][ T3504] ? avc_has_extended_perms+0x895/0xdd0 [ 75.852086][ T3504] ? ioctl_has_perm+0x384/0x4d0 [ 75.856943][ T3504] ? selinux_file_ioctl+0x6e0/0x1360 [ 75.862238][ T3504] ? security_file_ioctl+0x58/0xd0 [ 75.867361][ T3504] ? __se_sys_ioctl+0x53/0x1b0 [ 75.872131][ T3504] ? __x64_sys_ioctl+0x7f/0xa0 [ 75.876906][ T3504] ? x64_sys_call+0x1878/0x2ee0 [ 75.881764][ T3504] ? do_syscall_64+0x58/0xf0 [ 75.886361][ T3504] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.892437][ T3504] ? __kasan_check_write+0x18/0x20 [ 75.897553][ T3504] ? _raw_spin_lock+0x8c/0x120 [ 75.902323][ T3504] ? __cfi__raw_spin_lock+0x10/0x10 [ 75.907531][ T3504] ? _raw_spin_unlock+0x45/0x60 [ 75.912387][ T3504] ? rust_helper_spin_unlock+0x19/0x30 [ 75.917846][ T3504] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 75.928350][ T3504] ? kmem_cache_free+0x1c1/0x4c0 [ 75.933298][ T3504] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 75.944063][ T3504] ? audit_log_end+0x1f1/0x240 [ 75.948828][ T3504] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 75.954809][ T3504] ? common_lsm_audit+0x148c/0x1860 [ 75.960012][ T3504] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 75.965998][ T3504] ? slow_avc_audit+0x18d/0x1f0 [ 75.970860][ T3504] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 75.979976][ T3504] ? avc_denied+0x112/0x180 [ 75.984482][ T3504] ? avc_has_extended_perms+0x895/0xdd0 [ 75.990029][ T3504] ? avc_has_extended_perms+0x91a/0xdd0 [ 75.995574][ T3504] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 76.005125][ T3504] ? do_vfs_ioctl+0xeda/0x1e30 [ 76.009903][ T3504] ? preempt_schedule_common+0x2d/0x60 [ 76.015377][ T3504] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 76.021023][ T3504] ? __cfi_preempt_schedule+0x10/0x10 [ 76.026409][ T3504] ? preempt_schedule_thunk+0x1a/0x40 [ 76.031796][ T3504] ? try_to_wake_up+0xe17/0x1aa0 [ 76.036745][ T3504] ? ioctl_has_perm+0x384/0x4d0 [ 76.041611][ T3504] ? has_cap_mac_admin+0xd0/0xd0 [ 76.046568][ T3504] ? futex_wake+0x63a/0x900 [ 76.051074][ T3504] ? __cfi_futex_wake+0x10/0x10 [ 76.055939][ T3504] ? uhid_char_write+0x807/0xcf0 [ 76.060893][ T3504] ? selinux_file_ioctl+0x6e0/0x1360 [ 76.066211][ T3504] ? vfs_write+0x8c1/0xe80 [ 76.070649][ T3504] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 76.076210][ T3504] ? do_futex+0x356/0x500 [ 76.080553][ T3504] ? __cfi_do_futex+0x10/0x10 [ 76.085242][ T3504] ? __fget_files+0x2c5/0x340 [ 76.089929][ T3504] ? __fget_files+0x2c5/0x340 [ 76.094620][ T3504] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 76.103128][ T3504] ? __se_sys_ioctl+0x114/0x1b0 [ 76.107993][ T3504] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 76.117108][ T3504] __se_sys_ioctl+0x132/0x1b0 [ 76.121796][ T3504] __x64_sys_ioctl+0x7f/0xa0 [ 76.126397][ T3504] x64_sys_call+0x1878/0x2ee0 [ 76.131080][ T3504] do_syscall_64+0x58/0xf0 [ 76.135503][ T3504] ? clear_bhb_loop+0x35/0x90 [ 76.140278][ T3504] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.146202][ T3504] RIP: 0033:0x7fd1f458e929 [ 76.150632][ T3504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.170239][ T3504] RSP: 002b:00007fd1f2bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.178656][ T3504] RAX: ffffffffffffffda RBX: 00007fd1f47b5fa0 RCX: 00007fd1f458e929 [ 76.186632][ T3504] RDX: 0000200000000480 RSI: 00000000c0306201 RDI: 000000000000000a [ 76.194616][ T3504] RBP: 00007fd1f4610b39 R08: 0000000000000000 R09: 0000000000000000 [ 76.202613][ T3504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.210601][ T3504] R13: 0000000000000000 R14: 00007fd1f47b5fa0 R15: 00007ffe19404bc8 [ 76.218582][ T3504] [ 76.221606][ T3504] Modules linked in: [ 76.225709][ T3504] ---[ end trace 0000000000000000 ]--- [ 76.225709][ T1266] hid-generic 009C:0008:0003.0006: hidraw0: HID v0.05 Device [syz1] on syz0 [ 76.359857][ T3504] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 76.438440][ T3504] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 57 78 b5 57 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 1d bc fc db 90 90 90 90 90 90 90 90 90 [ 76.580661][ T3524] rust_binder: Write failure EINVAL in pid:707 [ 76.627693][ T3504] RSP: 0018:ffffc9000123da90 EFLAGS: 00010246 [ 76.638412][ T36] kauditd_printk_skb: 1104 callbacks suppressed [ 76.638431][ T36] audit: type=1400 audit(1750379974.220:2615): avc: denied { read open } for pid=3526 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.708346][ T3504] [ 76.710742][ T3504] RAX: 0000000000000061 RBX: 1ffff92000247b54 RCX: 9d40ba2cfeea6300 [ 76.748382][ T36] audit: type=1400 audit(1750379974.220:2616): avc: denied { ioctl } for pid=3520 comm="syz.0.940" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.788342][ T3504] RDX: ffffc900019c2000 RSI: 00000000000036a3 RDI: 00000000000036a4 [ 76.796391][ T3504] RBP: ffffc9000123da90 R08: ffffc9000123d787 R09: 1ffff92000247af0 [ 76.818327][ T36] audit: type=1400 audit(1750379974.250:2617): avc: denied { search } for pid=3526 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.888334][ T36] audit: type=1400 audit(1750379974.250:2618): avc: denied { search } for pid=3526 comm="cmp" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.889986][ T3504] R10: dffffc0000000000 R11: fffff52000247af1 R12: 0000000000000000 [ 76.948025][ T36] audit: type=1400 audit(1750379974.250:2619): avc: denied { search } for pid=3526 comm="cmp" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.970887][ T3504] R13: dffffc0000000000 R14: ffffc9000123dac0 R15: ffffc9000123daf0 [ 76.988381][ T3504] FS: 00007fd1f2bf76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 76.997375][ T3504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.008325][ T36] audit: type=1400 audit(1750379974.250:2620): avc: denied { read } for pid=3526 comm="cmp" name="resolv.conf.can0.link" dev="tmpfs" ino=4427 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.044142][ T3504] CR2: 000055f04c224c40 CR3: 00000001193b0000 CR4: 00000000003526b0 [ 77.052687][ T36] audit: type=1400 audit(1750379974.250:2621): avc: denied { read open } for pid=3526 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=4427 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.078153][ T3504] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000 [ 77.086444][ T36] audit: type=1400 audit(1750379974.250:2622): avc: denied { getattr } for pid=3526 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.118491][ T36] audit: type=1400 audit(1750379974.250:2623): avc: denied { getattr } for pid=3526 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=4427 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.143256][ T3504] DR3: 0000000000000005 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 77.152937][ T3504] Kernel panic - not syncing: Fatal exception [ 77.159362][ T3504] Kernel Offset: disabled [ 77.163693][ T3504] Rebooting in 86400 seconds..